last executing test programs: 3m45.998454338s ago: executing program 3 (id=2530): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/set_event\x00', 0x40, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mtd/mtd0/mtdblock0/trace/pid\x00', 0x1a1842, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f0000001540)=ANY=[@ANYBLOB="28110000", @ANYRES16=r2, @ANYBLOB="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"], 0x1128}, 0x1, 0x0, 0x0, 0x88c0}, 0x4000) write$auto(r1, 0x0, 0x8) read$auto(0x3, 0x0, 0xf34) pread64$auto(r0, &(0x7f00000014c0)='\xae\xa9\x16\xee\xb5\x84\xde\xff\x9f_\a\xa9\x89N\x86\xbc\xb1\xfe\xf6&\v\xe9\xac\',Yd[\xac\x94C\x93\xe8\'-\x92N\xc6\xeaKZA\xde\x98j\x10\xe0f\xc7\x81\xa1\xf3L\xec\'c\xe4\xe8\xe5\xfdU\xa39\x11a\xb7\xf7\xef\xf3^w\xbeP\xfbynT|l;\xf2\xc7u\xcd\x17', 0xf, 0x5) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/bdi/7:13/stats\x00', 0x70000, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/set_event_pid\x00', 0x8100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0xc, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x403c6f2b, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) readv$auto(0x3, 0x0, 0x1) read$auto(r3, 0x0, 0x1f40) close_range$auto(0x2, 0x8, 0x0) 3m44.918962566s ago: executing program 3 (id=2533): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/memory_tiering/memory_tier4/nodelist\x00', 0x800, 0x0) read$auto(r0, 0x0, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop12/queue/nr_requests\x00', 0x408100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0xa, 0x2, 0x73) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000004280), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000001b00)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000004300)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x4048020) sendmsg$auto_L2TP_CMD_SESSION_MODIFY(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x24004001) bind$auto(0x3, &(0x7f0000000040), 0x69) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0x0, 0x1ff, 0x800000000000008, 0xc, 0x9, 0xfffffffffffffff9, 0x6, 0x1, 0x400040009, 0x5e582972, 0x4000000000000000, 0x14, 0x93, 0xffffffffffffff17, 0x8, 0x8]}, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x28, 0x2, 0x4) syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000080), r2) io_uring_setup$auto(0x6, 0x0) r4 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.events\x00', 0x2040, 0x0) read$auto(r5, &(0x7f00000000c0)='\xde\x8cm\x1a\x87\x9c5\x92\x06\x00\x00\x00\x00\x00\x00\x00\xcf\xf9uQ\xde\x1eY\\G\xed\x92\x1d', 0x802) ioctl$auto_VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000000)=0x200000000) close_range$auto(0x2, 0x8000, 0x0) socket(0x10, 0x3, 0x6) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000a40), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001bc0)={&(0x7f0000000180)={0x1c, r6, 0x100, 0x70bd2d, 0x6, {}, [@HWSIM_ATTR_RADIO_NAME={0x5, 0x11, '\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x862) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 3m44.517592931s ago: executing program 3 (id=2536): r0 = openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x88041, 0x0) adjtimex$auto(&(0x7f0000000080)={0x4, 0x0, 0xffffffff, 0x3, 0x4, 0x5, 0xfffffffe, 0x0, 0x3, 0xe, 0x1, {0x10000, 0x2}, 0x458a, 0x9, 0x5, 0x1, 0x0, 0x4, 0x2, 0x3, 0x401, 0x3, 0xe}) madvise$auto(0x7ff, 0xfffffffffffefffd, 0x15) sysfs$auto(0x2, 0x10000000000002a, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r1) connect$auto(0x3, &(0x7f0000000280)=@ethernet={0x6}, 0x6d0) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0x5, 0x0) socket(0x2, 0x801, 0x100) writev$auto(0x1, 0x0, 0x1) socket(0xa, 0x3, 0x3a) r3 = io_uring_setup$auto(0x6, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) close_range$auto(0x2, 0x8000, 0x0) madvise$auto(0x0, 0x20499d, 0x9) madvise$auto(0x108000, 0x800034, 0x9) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'caif0\x00'}) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r0, @ANYRES8=r3, @ANYRES32, @ANYBLOB="26b408000006800ae7"], 0x2c}, 0x1, 0x0, 0x0, 0x20000044}, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x814) adjtimex$auto(&(0x7f0000000180)={0x6, 0x0, 0xfffffffffffffffa, 0x0, 0x7ffc, 0x5, 0x5, 0x0, 0x4001ff, 0x2, 0x0, {0xb15, 0xd4d9}, 0x8000000000000001, 0x0, 0x10001, 0x10001, 0x0, 0x7, 0x6, 0x5, 0x2, 0x5, 0x2}) write$auto_lowpan_enable_fops_(r0, &(0x7f0000000040)='3', 0x1) 3m42.940935545s ago: executing program 3 (id=2544): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x3, 0xff) connect$auto(r2, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) statmount$auto(0x0, &(0x7f0000000080)={0xd24c, 0x7, 0x1ff, 0x7, 0x5180, 0x4909b6f8, 0x1ffdf, 0xa, 0x8, 0x7, 0xa121, 0x3, 0x0, 0x271, 0xb4, 0xa, 0x6, 0x10001, 0xffffffff, 0x100000000, 0xe, 0x7, 0x2100, 0x200, 0x0, 0x8, [0x4000000000, 0x0, 0x0, 0x50100000000000, 0x6, 0x4000002000, 0x0, 0x80000000000006, 0x70624ce7, 0xff, 0x6, 0xaf1, 0x0, 0x80000, 0x5, 0x7fe, 0xffffffffffffbfff, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x800000000000007, 0x4, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xe, 0x0, 0x0, 0xfffffffffffffffe, 0x6, 0xfffffffffffffffc, 0x88e, 0x8000000000008, 0x1, 0x9, 0xa38, 0xa68, 0x3, 0xfffffffffffffffd, 0x8, 0x9, 0x7, 0x1]}, 0x1ff, 0xd) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0) write$auto(r3, &(0x7f0000000000)='/dev/input/event0\x00', 0x7fe) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r1) r5 = getpgid$auto(0x0) r6 = getpgid$auto(0x0) futex$auto(&(0x7f0000000100)=0xbb2, 0x9b13, 0x6f94, &(0x7f0000000140)={0xff, 0x6}, &(0x7f0000000180)=0xff, 0x4) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="90050000", @ANYRES16=r4, @ANYBLOB="200025bd7000fddbdf250c00000008000600050000009f0403800ae556ea96b6aac20a2df353bb08ecd46a7f933d1b2db8ce9af498e5ff3a90bfe88cc0b1e2e58b0f02ef589c88720e1e867e4da84e9bd27e4e7c2e138ed9b259006d0495ac1d03abe76afce408df49a9a4d2c79e8416718b6ea62d96bfe4d485b5898da01e69d213069313429fe114911f46d2480f1501438008001900", @ANYRES32=r5, @ANYBLOB="04005e801b6180a9a251a5f7309b5b6b8af06ed32ba9a6c9b4845494259b2eee6bf6aceccc80f3c1ac1e002fbb719b8a15e2fe551c7c038ef05802e35f6c3566675751865ee538b9e57ac3c3ac0668a4b3929be439d1ef4cdd24c7415036f9d02f18333fe5fccf1ccb5a61d1e047fa29c9119ab9bbea68f91fc936910e843c7c568c765383c07ce45c309fbf64924e2567db900905537a8003e022f7a04412004b002f6465762f736e617073686f7400000004003400627d93aa42f40ad39e72806204876c62645d32e22db38cf26b22937449b0acd596f82d21bbab5d200dbe014bca9443d8ef194821a06d9151f0027a098a56ce0fe0fb799d8437668b53f1752dcb19744e1fc8cd0000005e0057801400cf00fc0200000000000000000000000000011400a30020010000000000000000000000000002040053800baa9962d832bfc7a1598f73f290676159d5d963f0ef3f3694e8c4769e09a76a5681c9ac27bac98715719137d62e00005b4616330f58eec7166fdb5686acea5e1073d07a6eb7b91e3eb3ad97fb23c2aa1e37e9c9253c0115d7c961fed3edb90a3043132ec20bdf79be7ae10344c3f520acf5783d0eb3c0e11c56c454f6919da28e35da492fd3bd376918d0d1db7541fe3db6ce2b222834198cbee80a7b8b144af6a3fea938b06a01046b00b17c01cfd1230a8c25de9c6f31e39a6bcfad2f409551b2465a4c1003d3a46dc8740e9d4e1794644249f256fb7ba7b4475e04825ebcdadeb3d0824157cddbcb471d53880652048b58569b6e4c33ce64cb48ab36673752d6980118e2b398045597a158fb9fcc22e5ba4cdb205e8980f4ca5620bc9270655998e15fd4623e70d35bb1c3c2d4386f44f98217d65dc1b99d0995bb4e2f1eecf67e42a1d61f4e23ea7292fa8f0b334f8861a5905219476eac17430e2a6298df7834dd39fea33d5140246b3c8cede37cc5d84006fce1b686f9aa64fbd490f5bdb6e8810fecef991664c54e804cd59dc1e3ce75bb3e4f7e12a5b3c9a7022868b3de8ec536b30525e4728d360702f8d5b0e5ddfdaefc630b8e9dcec51b6492186a79401903db258e75a34ca1c0f85639b3bdb06d35b5d220556679c0e28bdd894e299d6260a47e11406008a472f6a9725b9fef7c39d86f448a815b8fe2272c001580dc641df00c5037ab80751ccffa98cf32a2937c8ff7aa7c751f859c9c5dba646cfa7737c23e8006000800ae00", @ANYRES32=r6, @ANYBLOB="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"], 0x590}}, 0x4c0a4) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) lsm_set_self_attr$auto(0x1, 0x0, 0x80, 0x0) io_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8000, 0x0) mlock$auto(0xfbe8, 0x4) mlock$auto(0x8001, 0xb) 3m40.847772228s ago: executing program 3 (id=2548): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x3, 0x88) socket(0x2, 0x6, 0x0) ioctl$auto(0x1, 0x890b, 0x8) (fail_nth: 4) 3m40.615920421s ago: executing program 3 (id=2549): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x8, 0xfffffffffffffffa, 0x19) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x1038}, 0x1, 0x0, 0x0, 0x8000}, 0x10) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) 3m25.379003068s ago: executing program 32 (id=2549): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x8, 0xfffffffffffffffa, 0x19) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r1) sendmsg$auto_NL80211_CMD_DEL_PMKSA(r1, &(0x7f0000000100)={&(0x7f0000000000), 0xc, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="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"], 0x1038}, 0x1, 0x0, 0x0, 0x8000}, 0x10) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0xffffff4b) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) 8.13519832s ago: executing program 0 (id=3193): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r1, 0x1, 0x703d07, 0x25dfdbfc, {}, [@ETHTOOL_A_PSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x233}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x400d8) 7.881178773s ago: executing program 0 (id=3194): accept$auto(0xffffffffffffffff, 0x0, 0x0) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x5) (async) pread64$auto(0xffffffffffffffff, 0x0, 0x3, 0x5) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000) mmap$auto(0x0, 0x6, 0x10000000000df, 0xeb1, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x5, 0x1, 0x4, 0x3, 0x9) madvise$auto(0x0, 0x200007, 0x19) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x8, 0xb, 0x0, 0x9, 0xfffffffffffffffc, 0x83, 0x6, 0x2, 0x9, 0x5, 0x4000000000000002, 0xd, 0x3, 0xfffffffffffffffa, 0x7, 0x1000000006]}, 0x0, 0x0) mmap$auto(0x5590, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) (async) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) close_range$auto(0x2, 0xa, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) (async) r2 = pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, r2, 0x0, 0x80000001, 0x9) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mmap$auto(0x0, 0x5, 0xe2, 0x14, r1, 0x200028000) socket(0x2a, 0x1, 0xc5) (async) socket(0x2a, 0x1, 0xc5) recvmmsg$auto(0x3, 0x0, 0x6, 0x7bd6, 0x0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, r0, 0x300000000000) (async) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, r0, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_hcd.3/usb4/ep_00/direction\x00', 0x800, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/geneve1/ignore_routes_with_linkdown\x00', 0x202, 0x0) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/geneve1/ignore_routes_with_linkdown\x00', 0x202, 0x0) sendfile$auto(r4, r4, 0x0, 0x7fffe000) (async) sendfile$auto(r4, r4, 0x0, 0x7fffe000) read$auto(r3, 0x0, 0x20) 7.772929898s ago: executing program 2 (id=3195): r0 = socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/class/ubi/version\x00', 0x400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/58, 0x3a) close_range$auto(0x0, 0xe903, 0x2) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) socket(0x2, 0x1, 0x0) setsockopt$auto(0x2, 0x1, 0x50, &(0x7f0000000000)='\x00', 0x40) sysfs$auto(0x2, 0x1b, 0x0) fsopen$auto(0x0, 0x1) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x103, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb0800) setsockopt$auto(r0, 0xfffffffc, 0x4, &(0x7f00000000c0)='\x00', 0x80) mmap$auto(0x8, 0x9, 0x17, 0x13, r2, 0x9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x240000, 0xd, 0x1, 0x948b, 0x7, 0x15f4da0a, 0x1, 0x3, 0x11000000, 0x300000000000000, 0x7, 0x200000006d3c, 0x5, 0x10, 0xfffffffffffffffd]}, 0x0) close_range$auto(0x2, 0x8, 0x0) keyctl$auto(0x4, 0xfffffffe, 0xfffffffffffffffe, 0x0, 0xe) 6.780501555s ago: executing program 4 (id=3200): openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r0 = socket(0x2, 0x1, 0x106) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2c, r2, 0x1, 0x70bd28, 0x25dfdbf8, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) semctl$auto_SETALL(0xb, 0xd61, 0x11, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0\x00'}) syz_clone3(&(0x7f00000004c0)={0x2500, &(0x7f00000000c0), &(0x7f0000000100), &(0x7f0000000140), {0x17}, &(0x7f0000000180)=""/152, 0x98, &(0x7f0000000240)=""/141, &(0x7f0000000300)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0], 0x6}, 0x58) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$auto_NL80211_CMD_SET_CQM(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0xfffffff8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) sendmsg$auto_NL80211_CMD_ASSOCIATE(r1, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_WIPHY_TXQ_PARAMS={0x4}, @NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x8}, @NL80211_ATTR_BSS_BASIC_RATES={0xe, 0x24, "064ba4d53df9518e87c0"}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000090}, 0x4000000) r6 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r7, 0xfd}, 0x6a) r8 = semctl$auto_IPC_RMID(0x0, 0x8, 0x0, 0x6) getpgid(r8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) socket(0x2, 0x3, 0x2) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x9, 0x0) fanotify_init$auto(0x9, 0x9) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x742, 0x0) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) 6.719853839s ago: executing program 2 (id=3202): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x20, r1, 0x1, 0x703d07, 0x25dfdbfc, {}, [@ETHTOOL_A_PSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x233}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x400d8) 6.511890331s ago: executing program 2 (id=3203): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)=""/175, 0xaf) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0xa0942, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0x4, 0x2, 0x40eb1, 0x602, 0x300000000000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x5, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r3 = socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f00000005c0)="5584fe662ddd8fbab19a5cc9360c61e8548618499082d3c82be0b6614c923515306efd36afdd029f64315b9b9530cfb051bdaff904d21f21aaf77567835f50c12233f79b984b70332e70ff8e53b677b532fd29d6ffa2b4e0e97f598dc28cd78d7c220000001faa9098a07a3770d72b20930a7fc6e9a1ab4e2e85c1a901ce59f9b1465f74b70c52bf9bc634af17855f33bf84cd6c9669", 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x4) sysfs$auto(0x808f, 0x23, 0xd) sendfile$auto(0xffffffffffffffff, r1, 0x0, 0x200) listmount$auto(&(0x7f0000000040)={0x200, @inferred=r0, 0x7f, 0x81, 0x400}, &(0x7f0000000140)=0x10000, 0xf, 0x5) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) socket(0x11, 0x2, 0x1803) ioctl$auto(0x3, 0x80044944, 0x10000000000402) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r4, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 6.390661807s ago: executing program 4 (id=3205): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x12, 0x940, 0x1fedd, 0x3, 0x6, 0x80000002, 0x9, 0x5, 0x2, 0x7, 0x3be, 0x9, 0x5, 0x3, 0x5, 0x7, 0x10, 0x0, 0x20000000, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, 0xd157, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffff7fe, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff]}, 0x1fe, 0x82) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) socket(0x10, 0x2, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) write$auto(0xc8, 0x0, 0x4040f6) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x20, r1, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_DESTROY_RADIO_ON_CLOSE={0x4}, @HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r2) r4 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, r4, 0x8000) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto_FS_IOC_FSGETXATTR(r4, 0x801c581f, r5) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rseq$auto(&(0x7f0000000000)={0xe, 0x400, 0x0, 0x20006, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) brk$auto(0xffffffffffffff66) fanotify_init$auto(0x65, 0x2) fsopen$auto(0x0, 0x1) kcmp$auto(0x1, 0x1, 0x0, 0x100000004, 0x100000001) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000200), 0x100000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) gettid() sendmsg$auto_WG_CMD_SET_DEVICE(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="db4929bd00100008800c00fc8008002200eb971f4a03eb359f6d88244e9888d3b1aec40058907adcee80949f07eee1a003e87b19b269fd4b00fd7ba20b039c0800000000000000798ad8", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r6, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20000811}, 0x4000010) 5.366217328s ago: executing program 2 (id=3207): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x2062, 0x0) r1 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cec24\x00', 0x400, 0x0) ioctl$auto_CEC_S_MODE(0xffffffffffffffff, 0x40046109, &(0x7f0000000000)=0x1ff) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r1, 0xc05c6104, &(0x7f00000001c0)={"2997316b", 0xae24, 0x4, 0x7e, 0xfffffff7, 0x101, "80c8c210cf7b2748a31dc73ac47ef0", "00001000", "500bb47e", "45213cac", ["ed269d4abc0a446ef84f898b", "9e89278c0c50ab9a20b49517", "74d4b4e0acad771d7fc4e659", "8c3c478f4681770d5fc42ce0"]}) write$auto(r0, &(0x7f00000001c0)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 5.014774588s ago: executing program 2 (id=3208): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/net/raw\x00', 0xc0a00, 0x0) (async) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x100, 0x0) (async, rerun: 64) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) (rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async) fanotify_init$auto(0x65, 0x2) (async) r2 = socket(0x10, 0x80002, 0x8) close_range$auto(r2, r2, 0x0) (async) pipe$auto(0x0) (async) splice$auto(r2, 0x0, 0x2, 0x0, 0x3fb, 0x9) (async) write$auto(0x6, 0x0, 0x100000001) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) (async) recvmmsg$auto(0x3, 0x0, 0x6, 0x7bd6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, 0x38) (async) ioctl$auto_KVM_CREATE_VM(r1, 0x4138ae84, 0x0) (async) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) open(0x0, 0x22240, 0x154) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) setreuid$auto(0x3, 0x7) write$auto(r4, 0x0, 0x7e) (async) pread64$auto(r0, &(0x7f0000000040)='/proc/thread-self/net/tcp6\x00\xd2)\x8e\x892\x82\x19\xfd\x03\xc3\x8d\xd7D\x8d\xa8\xcfM9\\\xd6\xcfUq\x05#\xed\x1c\xd1G\bz\xde5u4\xddS\xe6\x1a\x8a`\xad0\x98|\xbc\x00\x98\b\x0ey\xcb`\x9b\x91r\xd5\x13\x9e\xdd4\xe7\xb7\x94P\x8fBlm\x04eAW\xbc0\x9b\xbd\x8f\xf5];\x94\x18\xf0\v\xd7\xf4P\xd3\x9e,Q\xd8\x16\x989l\x03\a\xcc\x1e\xb9\xe9{\xeeS\xa9\xc60\x00\xb5&\x9e\xdbk{F\x18\xa8\xbasG\xd3\x80\xb1G.\xec1\x96uP\x97\x8co\xf1\xa6\xd5\xea\xc8L3|a\xb3\xaa\x90Y\xb19\xad\xdc\x05o\x98g\xd4\x10]5\x95\xd0\xabJC\x06\xd0c\xd1Ra\xf7\xc4n\xdf\xe4\xc7\x03\x19x\xbb\v\x00\t\xde\xf5\x93\xfb\xfb#\xbd\xc0S\f57\x83\xdd\xaa\xf0\x9c\xd3G\xe1', 0x3ff, 0x9) (async) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/dev_mcast\x00', 0x40280, 0x0) pread64$auto(r5, &(0x7f0000000040)='veth1\x00', 0x200000000004, 0xfc) (async) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) 4.926614738s ago: executing program 1 (id=3209): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xc018ae85, 0x0) 4.749517986s ago: executing program 0 (id=3210): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0xff, 0x2, 0x9}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x2, 0xc) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@can, 0x18) capset$auto(&(0x7f00000000c0)={0x5, 0x0}, 0x0) prctl$auto(0x97fa, 0x1, r1, 0x48000000000001, 0x400000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mq_open$auto(0x0, 0x5, 0x3, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$auto_HSR_C_GET_NODE_STATUS(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x28, r3, 0x929, 0x70bd2c, 0x25dfdbfb, {}, [@HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR={0xa, 0x1, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x240088c0}, 0x0) r4 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r4, 0x0, 0x1f40) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, 0x0, 0x218000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 4.748883852s ago: executing program 1 (id=3211): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x3, 0xff) connect$auto(r2, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) madvise$auto(0x0, 0xffffffffffff0004, 0x19) statmount$auto(0x0, 0x0, 0x1ff, 0xd) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0) write$auto(r3, &(0x7f0000000000)='/dev/input/event0\x00', 0x7fe) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r1) r5 = getpgid$auto(0x0) r6 = getpgid$auto(0x0) futex$auto(&(0x7f0000000100)=0xbb2, 0x9b13, 0x6f94, &(0x7f0000000140)={0xff, 0x6}, &(0x7f0000000180)=0xff, 0x4) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="90050000", @ANYRES16=r4, @ANYBLOB="200025bd7000fddbdf250c00000008000600050000009f0403800ae556ea96b6aac20a2df353bb08ecd46a7f933d1b2db8ce9af498e5ff3a90bfe88cc0b1e2e58b0f02ef589c88720e1e867e4da84e9bd27e4e7c2e138ed9b259006d0495ac1d03abe76afce408df49a9a4d2c79e8416718b6ea62d96bfe4d485b5898da01e69d213069313429fe114911f46d2480f1501438008001900", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="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"], 0x590}}, 0x4c0a4) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) lsm_set_self_attr$auto(0x1, 0x0, 0x80, 0x0) io_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8000, 0x0) mlock$auto(0xfbe8, 0x4) mlock$auto(0x8001, 0xb) 4.02900421s ago: executing program 4 (id=3212): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x2, 0x0) r2 = socket(0xa, 0x3, 0xff) connect$auto(r2, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) madvise$auto(0x0, 0xffffffffffff0004, 0x19) statmount$auto(0x0, 0x0, 0x1ff, 0xd) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0) write$auto(r3, &(0x7f0000000000)='/dev/input/event0\x00', 0x7fe) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r1) r5 = getpgid$auto(0x0) r6 = getpgid$auto(0x0) futex$auto(&(0x7f0000000100)=0xbb2, 0x9b13, 0x6f94, &(0x7f0000000140)={0xff, 0x6}, &(0x7f0000000180)=0xff, 0x4) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="90050000", @ANYRES16=r4, @ANYBLOB="200025bd7000fddbdf250c00000008000600050000009f0403800ae556ea96b6aac20a2df353bb08ecd46a7f933d1b2db8ce9af498e5ff3a90bfe88cc0b1e2e58b0f02ef589c88720e1e867e4da84e9bd27e4e7c2e138ed9b259006d0495ac1d03abe76afce408df49a9a4d2c79e8416718b6ea62d96bfe4d485b5898da01e69d213069313429fe114911f46d2480f1501438008001900", @ANYRES32=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="81b8b1fc1c32599be89ba74119c806ea27f3aa5e9c5679a312270e7e81db4890806dea78fbeef252fe7f1b53f45998db15af37e140c0980a2d7fbcd426c4d79699daf726d795c9ee038fbb00977b0cb662122831dd9d93cd3f297d8ba7f0c40aa0be2f15b6a064c90ed84f6e5fbe01f3bf592c3a924602291753fa87cf056ef96dc23104d826ebf0cb14701dd5813e112b131f931c47eb04b4122e7add7159a42977ab9a220fea98b80f73fb00d4000280c8009280d4ad4d603c22496113937a8eaa783c1c540b4fee3e91dd97e7e7c707d5c6824da6f81cd4ccfaa1e0192047d92a084580d8d3dcec9e0e1f05aaec27e0061c3bc62f4e2956b774100f323c35da387294d9002cdfc7442311ac9be9543f563477c79fa349fab57e1367f10dbcd33bf486e3e1c04b1bec3231ac4c345e364b8096f1b0b51235e4aa6a8610394439291a753b17c79af7e4bdc46ab8d125d52252171da528cd26fdd0be3f74ecc8f5651fa1b169e1ef6847f1ff5480f22d52ad8a9e28af66bbe208000f00ac1414bb"], 0x590}}, 0x4c0a4) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) lsm_set_self_attr$auto(0x1, 0x0, 0x80, 0x0) io_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8000, 0x0) mlock$auto(0xfbe8, 0x4) mlock$auto(0x8001, 0xb) 4.006251949s ago: executing program 0 (id=3213): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/bus/pci/resource_alignment\x00', 0x8ea182, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)="42bf466a98f4921b6c0a", 0xa) socketpair$auto(0x80000004, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00', 0x129302, 0x0) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x3200, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, r1, 0x0) bpf$auto(0xd, 0x0, 0x6f5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xfffff, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0xfffffffffffffffd, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmmsg$auto(r2, 0x0, 0x7, 0x4008) madvise$auto(0x0, 0xffffffffffff0005, 0x19) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) 3.591737662s ago: executing program 2 (id=3214): mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x2, 0x73) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1, 0x801, 0xfd) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = getsockopt$auto(0x6, 0x107, 0x18, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r0, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r2 = socket(0x2b, 0x1, 0x1) fcntl$auto_F_OFD_SETLKW(r1, 0x26, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r2, 0x2) read$auto(r1, &(0x7f0000000040)='&):#[\\*\x00', 0x1) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r2, 0x0, 0x20000001) mmap$auto(0x0, 0x400005, 0xe3, 0x9b72, r2, 0x7) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x200007, 0x8) madvise$auto(0xfffffffffffffffc, 0x2003f0, 0x15) mmap$auto(0x0, 0x4020028, 0x3, 0xeb1, 0x401, 0x8000) 3.55401632s ago: executing program 1 (id=3215): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) getsockopt$auto_SO_SELECT_ERR_QUEUE(0xffffffffffffffff, 0x5, 0x2d, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x9, 0x7) ioperm$auto(0x7, 0x6, 0x2) setgroups$auto(0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x5c, r1, 0x1, 0x70bd3d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @multicast1}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) mmap$auto(0xfffffffffffffffd, 0x9, 0x40, 0x32d4, 0x10000, 0xffffffffffffffff) unshare$auto(0x40000080) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) socket(0xa, 0xa, 0x5) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) unshare$auto(0x101) sigaltstack$auto(0x0, &(0x7f0000000240)={0x0, 0x2, 0x4}) mmap$auto(0x80000000, 0xf, 0xe0, 0x15, 0xffffffffffffffff, 0x4) close_range$auto(0x2, 0x8, 0x0) open(&(0x7f0000000100)='./file0\x00', 0x8162, 0x0) 1.131303075s ago: executing program 0 (id=3216): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)=""/175, 0xaf) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/pids.max\x00', 0xa0942, 0x0) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) mmap$auto(0x0, 0x4, 0x2, 0x40eb1, 0x602, 0x300000000000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x5, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r3 = socket(0x15, 0x5, 0x0) ustat$auto(0x801, 0x0) sendmsg$auto(r3, &(0x7f0000000180)={&(0x7f00000005c0)="5584fe662ddd8fbab19a5cc9360c61e8548618499082d3c82be0b6614c923515306efd36afdd029f64315b9b9530cfb051bdaff904d21f21aaf77567835f50c12233f79b984b70332e70ff8e53b677b532fd29d6ffa2b4e0e97f598dc28cd78d7c220000001faa9098a07a3770d72b20930a7fc6e9a1ab4e2e85c1a901ce59f9b1465f74b70c52bf9bc634af17855f33bf84cd6c9669", 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x4) sysfs$auto(0x808f, 0x23, 0xd) sendfile$auto(0xffffffffffffffff, r1, 0x0, 0x200) listmount$auto(&(0x7f0000000040)={0x200, @inferred=r0, 0x7f, 0x81, 0x400}, &(0x7f0000000140)=0x10000, 0xf, 0x5) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000000c0)) socket(0x11, 0x2, 0x1803) ioctl$auto(0x3, 0x80044944, 0x10000000000402) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r4, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) 1.125897802s ago: executing program 1 (id=3217): r0 = fcntl$auto_F_GETLEASE(0xffffffffffffffff, 0x401, 0xffffffffffffffff) (async) r1 = setfsuid$auto(0xee01) msgctl$auto_MSG_STAT(0x3, 0xb, &(0x7f00000000c0)={{0x8, 0xffffffffffffffff, 0xffffffffffffffff, 0x100, 0x3, 0x3, 0x7}, &(0x7f0000000040)=0xd, &(0x7f0000000080)=0xf, 0x2, 0xa000, 0xb01b, 0x100, 0x9, 0xf6, 0x2, 0x2, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) newfstatat$auto(r0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000140)={0x100000000, 0x9, 0x6, 0x9, r1, r3, 0x0, 0xbce, 0x970000000000, 0x68a, 0x9, 0x7fffffffffffffff, 0x9, 0xbec8, 0x4, 0x5, 0x1e967ba1}, 0x8) msgctl$auto_IPC_RMID(0x6, 0x0, &(0x7f0000000280)={{0x4, r2, r6, 0x7, 0x6, 0x7ff, 0xdd}, &(0x7f0000000200)=0x3, &(0x7f0000000240)=0xba, 0xffffffffffff0001, 0x7, 0x2, 0x5, 0x6, 0x1, 0xec, 0xa, @inferred, @raw=0xff}) (async) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000340), r0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000880)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000380)={0x488, r8, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x40}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x3aff}, @NL80211_ATTR_MAC_HINT={0xd6, 0xc8, "e9860189eca2313349b472ef687fbdea7446f6365bbb6c68236429cdbd608c472c595dd250d3c048272feac235dc19f9cd666cb9e0d5b1d188219056d98448d9e809f1cc78af88ef9a6a439707553706c14a1f82f65ad81bb694efae2c0999b956f5b1f7b507a29974d4d175cf184aaadd306bc0c42d6cd68c555ec1787e9e7f1f6ff9e537b16800f8dc36b82b28cfb7ce8454a10f1be1b7d77e6a744df00779b2e3591bb06c64115702d71738c6e9d7ab05203894408683ff88bcac43ff939c1769360f6ac4e27b7d9c901b8adf7c02c4e0"}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0xf}, @NL80211_ATTR_CQM={0x110, 0x5e, 0x0, 0x1, [@typed={0x8, 0xba, 0x0, 0x0, @u32}, @generic="3db104b86cd17e4463f9b6a25a5d4611e1dd770e62879ce092d7b5ec17c78a5c09e9360e056c6fea85", @generic="b32004798e06c0ec1061f16a0481a701faec932368fae35747387491a2492d730dd9ca90288b7085bb9f955c84e51833f67333f06cb29d1bf4d75529bc91e01cfcad64abcf0f77c58c9ca55de534979736c07d1dad42ce1307092460da3e740a1affe109f97c5b2a488b08ff993699cfca41a6f501ed41ba43ba68bb0d906143442c5a26c55b3897e19c3921e6a7551184dcf60a4d6e5e2a903a2b4d40fc27d7d68a06c447f7894e7256846d15e6a3fef9ebbd9470bd614dd4324776fd7b26f41346387b3ff64223a23362a33e9a6e892a363fb15ea797eeee91a8"]}, @NL80211_ATTR_SAR_SPEC={0x230, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x7c, 0x2, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1ff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7fffffff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x2}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfffffffd}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7ff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8001}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x27001bd2}]}]}, @NL80211_SAR_ATTR_SPECS={0x138, 0x2, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfa8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x100}]}, {0x4c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x17c1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xb6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffeffff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xffff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x80000001}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x8}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x3}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffff9}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x7fff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x5}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xfff}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x6}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x9}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x7ff}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0xcf}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x1}]}]}, @NL80211_SAR_ATTR_SPECS={0x78, 0x2, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x3}]}, {0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x10}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x4}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x80000001}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xfffffffa}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x9}, @NL80211_SAR_ATTR_SPECS_POWER={0x8}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x5}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x1}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0x44}]}]}]}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x4}, @NL80211_ATTR_HE_BSS_COLOR={0x2c, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x8c}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x6}, @NL80211_HE_BSS_COLOR_ATTR_PARTIAL={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x95}]}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x8}]}, 0x488}, 0x1, 0x0, 0x0, 0x34048000}, 0x90) (async) read$auto(r0, &(0x7f00000008c0)='\x00', 0xd) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async) stat$auto(&(0x7f0000000900)='./file0\x00', &(0x7f0000000940)={0xfff, 0x5, 0x2, 0x4, r2, r3, 0x0, 0xa62, 0x1000, 0x7, 0xffffffffffff8000, 0x8, 0x1, 0x2, 0xfffffffffffffffe, 0x1, 0x8ba2}) sendmsg$auto_BATADV_CMD_SET_MESH(r9, &(0x7f0000000b00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a40)={0x48, 0x0, 0x20, 0x70bd2b, 0x25dfdbfc, {}, [@BATADV_ATTR_HARD_IFNAME={0x14, 0x7, 'batadv_slave_0\x00'}, @BATADV_ATTR_MESH_IFNAME={0x14, 0x4, 'veth0_virt_wifi\x00'}, @BATADV_ATTR_MESH_ADDRESS={0xa, 0x5, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}]}, 0x48}, 0x1, 0x0, 0x0, 0x44040}, 0x0) (async) r11 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000b80), r0) sendmsg$auto_NFSD_CMD_THREADS_GET(r9, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x14, r11, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x60004841}, 0x0) (async) personality$auto(0x4) (async) statx$auto(r0, &(0x7f0000000c80)='./file0\x00', 0xe, 0x6, &(0x7f0000000cc0)={0x4, 0xbb3, 0x7f, 0x4, r2, r7, 0x8, 0x5, 0x7, 0xf, 0x0, 0x2, {0x3, 0x2}, {0x4, 0x28a}, {0x9}, {0xba8, 0xb}, 0x8001, 0x4, 0x7, 0x3, 0x0, 0xa4, 0x6, 0x7ff, 0x81, 0x400, 0x7, 0x0, [0x10, 0x0, 0x2, 0x7, 0xc7, 0xfffffffffffffa78, 0x6e2, 0x0, 0x2]}) msgctl$auto(0x7, 0x2, &(0x7f0000000e40)={{0xf, r12, r7, 0x9, 0xc, 0x401, 0x400}, &(0x7f0000000dc0)=0x1, &(0x7f0000000e00)=0x2, 0x2, 0x1, 0xac, 0x80, 0xfffffffffffffffd, 0x7f, 0xf844, 0x75c7, @raw=0x4, @inferred=r4}) r14 = openat2$auto(r0, &(0x7f0000000ec0)='./file0\x00', &(0x7f0000000f00)={0x3d69, 0x2}, 0x4) (async) r15 = prctl$auto_PR_MPX_ENABLE_MANAGEMENT(0x2b, 0x2, r13, 0x4, 0x4) renameat2$auto(r15, &(0x7f0000000f40)='./file0\x00', r14, &(0x7f0000000f80)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x9) personality$auto(0x9) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001fc0), r14) (async) r16 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000002040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002080)={'dvmrp1\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(r15, 0x8933, &(0x7f00000020c0)={'pimreg\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(r14, &(0x7f00000021c0)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000002180)={&(0x7f0000002100)={0x54, r16, 0x0, 0x70bd28, 0x25dfdbff, {}, [@NET_SHAPER_A_CAPS_SCOPE={0x8, 0x2, 0x40}, @NET_SHAPER_A_CAPS_SCOPE={0x8, 0x2, 0x5}, @NET_SHAPER_A_CAPS_IFINDEX={0x8}, @NET_SHAPER_A_CAPS_SCOPE={0x8}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r17}, @NET_SHAPER_A_CAPS_SCOPE={0x8, 0x2, 0x800}, @NET_SHAPER_A_CAPS_SCOPE={0x8, 0x2, 0x3000}, @NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r18}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x41) (async) personality$auto(0x1) (async) msgctl$auto_MSG_INFO(0xfffffffd, 0xc, &(0x7f0000002280)={{0x9, r5, r7, 0x3, 0x8000, 0x8, 0x2}, &(0x7f0000002200)=0x6, &(0x7f0000002240)=0x7, 0x9, 0x14f15a38, 0x5, 0x80000001, 0xbda9, 0x200, 0x2, 0x5, @inferred=r4, @raw=0x7}) r20 = getgid() ioctl$auto_XFS_IOC_BULKSTAT(r0, 0x8040587f, &(0x7f0000002300)={{0x2, 0x7, 0x3, 0xea66, 0x9, [0x10000000000, 0x7, 0x4, 0x9]}, [{0x1, 0xae9, 0x8, 0x9, 0x7, 0x8, 0xffffffffffffffff, 0x200, 0xfff, r12, r19, 0x7, 0x306c, 0xc29, 0x9, 0x2, 0x401, 0xfff, 0xd, 0x80, 0x80000, 0x9, 0x5, 0x7, 0x7ff, 0x200, 0x2, 0xcf69, 0x0, 0x8}, {0x3, 0x1ff, 0x401, 0x4, 0x9, 0x3, 0x1ff, 0x0, 0x3c, r1, r10, 0x200, 0x5, 0x9, 0x8, 0x100, 0x8, 0x8, 0x9, 0x6fc3, 0xdc67, 0x9, 0x2, 0x81, 0x7, 0xa, 0x101, 0xe6a, 0x0, 0x7}, {0x9, 0x9, 0xffffffffffffffff, 0x9, 0x1, 0x569e, 0x6, 0x7, 0x6, r5, r7, 0x81, 0x9, 0x7ff, 0x1d, 0x65, 0xa, 0x8471, 0x7, 0x990, 0x5, 0x0, 0x1cc, 0x9, 0x0, 0x7b3c, 0x1, 0x3, 0x0, 0x80000001}, {0x5, 0xa31e, 0x0, 0x7eec50df, 0x401, 0x8, 0x1, 0x8, 0xfffffffd, r12, r20, 0x5, 0x8, 0x7, 0x3905, 0xf, 0x1, 0x0, 0xffff, 0x6, 0x1, 0x9, 0xfffffff7, 0xf3c, 0x401, 0x2, 0x6, 0x2, 0x0, 0x80000001}]}) (async) personality$auto(0x1ff) 1.122740317s ago: executing program 4 (id=3218): r0 = getsockopt$auto_SO_PEERCRED(0xffffffffffffffff, 0x80000001, 0x11, &(0x7f0000000000)='/sys/firmware/acpi/interrupts/gpe09\x00', &(0x7f0000000040)=0x1) ioctl$auto_TIOCSETD2(r0, 0x5423, &(0x7f0000000080)="6e97652105c7df00ef8db4eddf003e484d380990d8a0f5472b1712bb6764b302a5936da890ef36cfc0b8d53f17c90901455c9b5318c806772e2faf29461a50819d") r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp\x00', 0x20002, 0x0) socket(0x2, 0xa, 0x300) ioctl$auto(0x3, 0x541b, 0x10000000000402) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f00000003c0)) ioctl$auto_SNDCTL_DSP_SPEED(r1, 0xc0045002, &(0x7f0000000000)) close_range$auto(0x2, 0x8, 0x1000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/firmware/acpi/interrupts/gpe09\x00', 0x180a02, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x2) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r3, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x95) bpf$auto(0x2, &(0x7f00000001c0)=@bpf_attr_7={@btf_id=0x1, 0xebd9, 0x7}, 0xb) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x3, 0xffffffffffffffff, 0x0, 0x8000000000007}, 0x5) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000140), r0) ioctl$auto_IOCTL_GET_NUM_DEVICES(r0, 0x40046104, &(0x7f0000000240)=0x2) r5 = geteuid() sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000180)={&(0x7f0000001680)=ANY=[@ANYBLOB="1c130000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x131c}}, 0x4) socketpair$auto(0xfffffffb, 0x0, 0x80000001, &(0x7f0000000200)=0x485f) lsm_get_self_attr$auto(0x0, &(0x7f0000000280)={0x9, 0x200, 0x9, 0x4b, "a51c6f4455c3972f639e6f02581998df648a2ee8966dbef76763a012901bb4a2552d55292f14c33bf4cff39955c206ec890f9689f120fb175bc45d40ad862faa498c551dd2ed6c5a53ae66"}, &(0x7f0000000340)=0x4, 0xbe5) 833.170948ms ago: executing program 1 (id=3219): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xc018ae85, 0x0) 793.76014ms ago: executing program 4 (id=3220): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/loop11/queue/io_poll_delay\x00', 0xa8002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/fs/cifs/dfscache\x00', 0x40080, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(0xffffffffffffffff, 0xc0285700, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000180)='ns/ipc\x00') socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x40002]}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$auto(r0, &(0x7f0000000300)={{&(0x7f0000000000)="aa70dca3dedee2af303dfaf460f756c1ff4fd5b00d896f4be1ecf7fcaaaa20a3695eb48255c61c7ebcfaaaa4741e8bbb16b22b6a24323d3f14bd", 0x3, &(0x7f0000000080)={&(0x7f0000000180)="c3714404d3738e1ea0d2ef61795135020a82cd42d02eb0ca21469a818a646328783eb86f57393a6e3486811c019ef0734132f96e9a46c9b0ff429d1a420d924b2267a35317aa76c4ce836909f70ee9feff0ed430a175f4518e6f24cc9deb232b86b538105618d8513bad91ff3a5f6c2ba6808fe4bf9db0e84da2a397fbbc2102bc9711b25da9be50772fa48f98e5043829afddd186c9f8c140edf29616a9cc3096b3cd8c76f8bfde8c8e56d7ee5e7b456bf3285d97126cb4917d9092", 0x2}, 0x1, &(0x7f0000000240)="8d78722c6b101f78a01519c739937bbf9353cba12ce8319880c4ddcd5cacefd72d6f22b7517dc812b85fd8e932586e8e51b7f54bd74491cb9a4ca9e1c652ef5f545143b15be52b0349ad206d8244b0d2229265921a87c763252cbea781e731452119dc4658fb4dabc86c616f25534c6f1c52ea2727a431107409e1f804ce60ce8eb6a10fe079bf5ee6abf50256f715f507168608f673fc893b76fa0a58f9686aded060aaac3584c55c", 0x10, 0x81}, 0x7e50}, 0x2, 0x8000) sendmsg$auto_NETDEV_CMD_NAPI_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c1c0000", @ANYRES16=r1, @ANYBLOB="01002cbd7000fddbdf250e0000000800020009000000"], 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x20008084) 99.799246ms ago: executing program 4 (id=3221): r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/tracing/set_event\x00', 0x40, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/mtd/mtd0/mtdblock0/trace/pid\x00', 0x1a1842, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(0xffffffffffffffff, &(0x7f0000001480)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000001440)={&(0x7f0000001540)=ANY=[@ANYBLOB="28110000", @ANYRES16=r2, @ANYBLOB="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"], 0x1128}, 0x1, 0x0, 0x0, 0x88c0}, 0x4000) write$auto(r1, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) read$auto(0x3, 0x0, 0xf34) (fail_nth: 2) pread64$auto(r0, &(0x7f00000014c0)='\xae\xa9\x16\xee\xb5\x84\xde\xff\x9f_\a\xa9\x89N\x86\xbc\xb1\xfe\xf6&\v\xe9\xac\',Yd[\xac\x94C\x93\xe8\'-\x92N\xc6\xeaKZA\xde\x98j\x10\xe0f\xc7\x81\xa1\xf3L\xec\'c\xe4\xe8\xe5\xfdU\xa39\x11a\xb7\xf7\xef\xf3^w\xbeP\xfbynT|l;\xf2\xc7u\xcd\x17', 0xf, 0x5) openat$auto_bdi_debug_stats_fops_(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/bdi/7:13/stats\x00', 0x70000, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/set_event_pid\x00', 0x8100, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) io_uring_setup$auto(0xc, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r3, 0x403c6f2b, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) readv$auto(0x3, 0x0, 0x1) read$auto(r3, 0x0, 0x1f40) close_range$auto(0x2, 0x8, 0x0) 70.964505ms ago: executing program 0 (id=3222): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) socket(0x2, 0x6, 0x0) sysfs$auto(0x2, 0x0, 0x0) r0 = epoll_create$auto(0x4) get_mempolicy$auto(&(0x7f0000000040)=0x10, &(0x7f0000000080)=0x9, 0x4000000000005, 0x2, 0x100000001) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r1, 0x0) mmap$auto(0x0, 0x20009, 0x100000000000df, 0xeb1, 0x401, 0x8000) epoll_ctl$auto(0x5, 0x3, r1, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x6, 0x8000000000000001, 0xd4, 0x1, 0x6, 0x0, 0xfffffffffffffffd, 0x368e, 0x2, {0x32c, 0x10000}, 0x5, 0x6, 0xfffffffffffffdfd, 0x11008000, 0x0, 0x40002000000b, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0xb}) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(r0, 0x1, 0x790b, 0x0, 0x40) madvise$auto(0x0, 0xffffffffffff0005, 0x19) move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000001140)=0x2, 0x0, 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.3/usb4/avoid_reset_quirk\x00', 0x129302, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0) mmap$auto(0x0, 0x8, 0xffb, 0x8000000008011, 0x3, 0x0) write$auto(r2, &(0x7f0000000000)='y\x8c', 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r3, 0x0, 0x18800) fsetxattr$auto(0x1, &(0x7f0000000000)='%\x175\xc0\x8d\xbb\x04\xb3\x97\xd8\xf4\xf6', 0x0, 0x0, 0x2) brk$auto(0xffffffffffffff66) close_range$auto(0x2, 0x8, 0x0) futex$auto(0x0, 0x8, 0xa, 0x0, 0x0, 0x80800001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) 0s ago: executing program 1 (id=3223): prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x6, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="210026bd7000fadbdf25010000000800088004004080"], 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x80) ioctl$auto_SNDCTL_TMR_CONTINUE(r0, 0x5404, &(0x7f0000000100)="0537af53ed9030cd811d944ea9fa540bcc2e935093eb0a8bf7a36a7a49241f82525a20d768f76bd71f261e20c4f095dac74a15a83e4bc7292aa6b0f487f3c7136462e3e943aadf737f432b53eda491d572d3358a8aa6596c8581a929526e22cb0505fbb9780a2a47af540f7909743b") write$auto(0x3, 0x0, 0x8) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) prctl$auto_PR_SET_MM_START_STACK(0x46, 0x5, 0x0, 0xcd8, 0x100) close_range$auto(0x2, 0xa, 0x0) unshare$auto(0x40000080) prctl$auto(0x23, 0x3, 0x2009, 0x0, 0x0) socket(0xa, 0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x10, 0x401, 0x300000000000) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x82, 0x0) clock_adjtime$auto(0x6a, &(0x7f00000002c0)={0xc, 0x0, 0x1fffc0, 0x7, 0x0, 0xffff, 0x51, 0x0, 0x7, 0x9, 0x1, {0xf3e, 0x6}, 0x2, 0x5, 0x100000001, 0x4, 0x0, 0x9d98, 0x4, 0x0, 0x0, 0x8}) r2 = socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/config/target/dbroot\x00', 0x42180, 0x0) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r2, 0x0, 0x20) kernel console output (not intermixed with test programs): T7478] RSP: 002b:00007f60bd54a038 EFLAGS: 00010217 [ 900.392256][ T7478] RAX: 000055555c24f000 RBX: 00007f60bc9a6080 RCX: 00007f60bc78d169 [ 900.392272][ T7478] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff66 [ 900.392287][ T7478] RBP: 00007f60bd54a090 R08: 0000000000000000 R09: 0000000000000000 [ 900.392301][ T7478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.392315][ T7478] R13: 0000000000000000 R14: 00007f60bc9a6080 R15: 00007ffe25b87d28 [ 900.392347][ T7478] [ 900.859938][ C1] vkms_vblank_simulate: vblank timer overrun [ 902.497578][ T7543] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 902.522692][ T7543] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 902.548225][ T7543] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 902.559354][ T7543] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 903.184065][ T7577] Invalid ELF header magic: != ELF [ 903.906534][T30219] Bluetooth: hci0: command 0x0c1a tx timeout [ 904.536490][T30219] Bluetooth: hci2: command 0x0419 tx timeout [ 904.616717][T31304] Bluetooth: hci3: command 0x0c1a tx timeout [ 904.623019][T30219] Bluetooth: hci4: command 0x040f tx timeout [ 906.515230][ T7594] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 906.532270][ T7594] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 906.558788][ T7594] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 906.579108][ T7594] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 907.175873][ T7640] zswap: compressor not available [ 907.191723][T30219] Bluetooth: hci0: command 0x0c1a tx timeout [ 908.170606][ T7703] Invalid ELF header magic: != ELF [ 908.536627][T30219] Bluetooth: hci2: command 0x0419 tx timeout [ 908.616724][T30219] Bluetooth: hci4: command 0x040f tx timeout [ 908.622819][T31304] Bluetooth: hci3: command 0x0c1a tx timeout [ 909.379977][T31304] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 909.392227][T31304] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 909.401615][T31304] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 909.416794][T31304] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 909.427151][T31304] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 909.436535][T31304] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 909.883847][ T7771] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2591'. [ 910.332733][ T7739] chnl_net:caif_netlink_parms(): no params data found [ 910.501451][ T7739] bridge0: port 1(bridge_slave_0) entered blocking state [ 910.517071][ T7739] bridge0: port 1(bridge_slave_0) entered disabled state [ 910.524587][ T7739] bridge_slave_0: entered allmulticast mode [ 910.536543][ T7739] bridge_slave_0: entered promiscuous mode [ 910.546080][ T7739] bridge0: port 2(bridge_slave_1) entered blocking state [ 910.566618][ T7739] bridge0: port 2(bridge_slave_1) entered disabled state [ 910.575861][ T7739] bridge_slave_1: entered allmulticast mode [ 910.584687][ T7739] bridge_slave_1: entered promiscuous mode [ 910.659660][ T7916] Invalid ELF header magic: != ELF [ 910.883192][ T7739] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 910.939433][ T7739] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 911.319597][ T7739] team0: Port device team_slave_0 added [ 911.375248][ T7739] team0: Port device team_slave_1 added [ 911.511921][T31304] Bluetooth: hci1: command tx timeout [ 911.621767][ T7739] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 911.630520][ T7739] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.657721][ T7739] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 911.670855][ T7739] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 911.679060][ T7739] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 911.714027][ T7739] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 911.973203][ T7739] hsr_slave_0: entered promiscuous mode [ 912.002153][ T7739] hsr_slave_1: entered promiscuous mode [ 912.989905][ T8070] FAULT_INJECTION: forcing a failure. [ 912.989905][ T8070] name failslab, interval 1, probability 0, space 0, times 0 [ 913.123024][ T8070] CPU: 0 UID: 0 PID: 8070 Comm: syz.2.2597 Not tainted 6.14.0-syzkaller #0 [ 913.123053][ T8070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 913.123062][ T8070] Call Trace: [ 913.123067][ T8070] [ 913.123074][ T8070] dump_stack_lvl+0x16c/0x1f0 [ 913.123103][ T8070] should_fail_ex+0x50a/0x650 [ 913.123117][ T8070] ? fs_reclaim_acquire+0xae/0x150 [ 913.123138][ T8070] should_failslab+0xc2/0x120 [ 913.123152][ T8070] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 913.123174][ T8070] ? __pmd_alloc+0xc3/0x870 [ 913.123195][ T8070] __pmd_alloc+0xc3/0x870 [ 913.123224][ T8070] __handle_mm_fault+0x94a/0x2a40 [ 913.123249][ T8070] ? __pfx___handle_mm_fault+0x10/0x10 [ 913.123267][ T8070] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 913.123297][ T8070] ? find_vma+0xc0/0x140 [ 913.123312][ T8070] ? __pfx_find_vma+0x10/0x10 [ 913.123330][ T8070] handle_mm_fault+0x3fa/0xaa0 [ 913.123352][ T8070] do_user_addr_fault+0x7a3/0x13f0 [ 913.123376][ T8070] exc_page_fault+0x5c/0xc0 [ 913.123402][ T8070] asm_exc_page_fault+0x26/0x30 [ 913.123422][ T8070] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 913.123440][ T8070] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 913.123453][ T8070] RSP: 0018:ffffc90003b57a30 EFLAGS: 00050206 [ 913.123465][ T8070] RAX: 0000000000000001 RBX: 0000000000001000 RCX: 0000000000001000 [ 913.123474][ T8070] RDX: 0000000000000000 RSI: ffff88804ed62000 RDI: 0000200000000080 [ 913.123482][ T8070] RBP: 0000200000000080 R08: 0000000000000000 R09: ffffed1009dac5ff [ 913.123490][ T8070] R10: ffff88804ed62fff R11: 0000000000000000 R12: ffffc90003b57da0 [ 913.123498][ T8070] R13: 0000200000001080 R14: ffff88804ed62000 R15: 00007ffffffff000 [ 913.123516][ T8070] _copy_to_iter+0x385/0x1560 [ 913.123535][ T8070] ? pipe_read+0x832/0x1290 [ 913.123554][ T8070] ? find_held_lock+0x2d/0x110 [ 913.123568][ T8070] ? __pfx__copy_to_iter+0x10/0x10 [ 913.123581][ T8070] ? __pfx___mutex_lock+0x10/0x10 [ 913.123609][ T8070] copy_page_to_iter+0xf1/0x180 [ 913.123626][ T8070] pipe_read+0x499/0x1290 [ 913.123660][ T8070] ? __pfx_pipe_read+0x10/0x10 [ 913.123683][ T8070] ? __pfx_autoremove_wake_function+0x10/0x10 [ 913.123703][ T8070] ? bpf_lsm_file_permission+0x9/0x10 [ 913.123723][ T8070] ? security_file_permission+0x71/0x210 [ 913.123743][ T8070] ? rw_verify_area+0xcf/0x680 [ 913.123762][ T8070] vfs_read+0xa53/0xbf0 [ 913.123783][ T8070] ? __pfx_vfs_read+0x10/0x10 [ 913.123801][ T8070] ? __fget_files+0x40/0x3a0 [ 913.123830][ T8070] ksys_read+0x207/0x250 [ 913.123847][ T8070] ? __pfx_ksys_read+0x10/0x10 [ 913.123869][ T8070] do_syscall_64+0xcd/0x250 [ 913.123890][ T8070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 913.123907][ T8070] RIP: 0033:0x7f60bc78d169 [ 913.123919][ T8070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 913.123932][ T8070] RSP: 002b:00007f60bd56b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 913.123944][ T8070] RAX: ffffffffffffffda RBX: 00007f60bc9a5fa0 RCX: 00007f60bc78d169 [ 913.123952][ T8070] RDX: 000000000000fdef RSI: 0000200000000080 RDI: 0000000000000004 [ 913.123960][ T8070] RBP: 00007f60bd56b090 R08: 0000000000000000 R09: 0000000000000000 [ 913.123968][ T8070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 913.123975][ T8070] R13: 0000000000000000 R14: 00007f60bc9a5fa0 R15: 00007ffe25b87d28 [ 913.123992][ T8070] [ 913.577521][T31304] Bluetooth: hci1: command tx timeout [ 913.989204][ T7739] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 914.117115][ T7739] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 914.159978][ T7739] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 914.229206][ T7739] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 914.646240][ T7739] 8021q: adding VLAN 0 to HW filter on device bond0 [ 914.688126][ T7739] 8021q: adding VLAN 0 to HW filter on device team0 [ 914.804061][ T8159] FAULT_INJECTION: forcing a failure. [ 914.804061][ T8159] name failslab, interval 1, probability 0, space 0, times 0 [ 914.828415][ T1256] bridge0: port 1(bridge_slave_0) entered blocking state [ 914.830836][ T8159] CPU: 1 UID: 0 PID: 8159 Comm: syz.2.2599 Not tainted 6.14.0-syzkaller #0 [ 914.830865][ T8159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 914.830878][ T8159] Call Trace: [ 914.830886][ T8159] [ 914.830895][ T8159] dump_stack_lvl+0x16c/0x1f0 [ 914.830936][ T8159] should_fail_ex+0x50a/0x650 [ 914.830959][ T8159] ? fs_reclaim_acquire+0xae/0x150 [ 914.830993][ T8159] should_failslab+0xc2/0x120 [ 914.831016][ T8159] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 914.831051][ T8159] ? security_file_alloc+0x34/0x2b0 [ 914.831088][ T8159] security_file_alloc+0x34/0x2b0 [ 914.831127][ T8159] init_file+0x93/0x4c0 [ 914.831151][ T8159] alloc_empty_file+0x91/0x1e0 [ 914.831176][ T8159] path_openat+0xe1/0x2d80 [ 914.831205][ T8159] ? hlock_class+0x4e/0x130 [ 914.831230][ T8159] ? __lock_acquire+0x15a9/0x3c40 [ 914.831270][ T8159] ? __pfx_path_openat+0x10/0x10 [ 914.831299][ T8159] ? __pfx___lock_acquire+0x10/0x10 [ 914.831327][ T8159] ? lock_acquire.part.0+0x11b/0x380 [ 914.831357][ T8159] ? find_held_lock+0x2d/0x110 [ 914.831383][ T8159] do_filp_open+0x20c/0x470 [ 914.831413][ T8159] ? __pfx_do_filp_open+0x10/0x10 [ 914.831442][ T8159] ? find_held_lock+0x2d/0x110 [ 914.831485][ T8159] ? alloc_fd+0x41f/0x760 [ 914.831523][ T8159] do_sys_openat2+0x17a/0x1e0 [ 914.831548][ T8159] ? __pfx_do_sys_openat2+0x10/0x10 [ 914.831574][ T8159] ? __fget_files+0x206/0x3a0 [ 914.831609][ T8159] __x64_sys_openat+0x175/0x210 [ 914.831633][ T8159] ? __pfx___x64_sys_openat+0x10/0x10 [ 914.831656][ T8159] ? ksys_write+0x1ba/0x250 [ 914.831692][ T8159] do_syscall_64+0xcd/0x250 [ 914.831727][ T8159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.831758][ T8159] RIP: 0033:0x7f60bc78d169 [ 914.831776][ T8159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.831797][ T8159] RSP: 002b:00007f60bd54a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 914.831819][ T8159] RAX: ffffffffffffffda RBX: 00007f60bc9a6080 RCX: 00007f60bc78d169 [ 914.831833][ T8159] RDX: 0000000000000001 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 914.831847][ T8159] RBP: 00007f60bd54a090 R08: 0000000000000000 R09: 0000000000000000 [ 914.831861][ T8159] R10: 000000000000ffeb R11: 0000000000000246 R12: 0000000000000001 [ 914.831874][ T8159] R13: 0000000000000000 R14: 00007f60bc9a6080 R15: 00007ffe25b87d28 [ 914.831901][ T8159] [ 915.084149][ T1256] bridge0: port 1(bridge_slave_0) entered forwarding state [ 915.288158][ T1256] bridge0: port 2(bridge_slave_1) entered blocking state [ 915.295427][ T1256] bridge0: port 2(bridge_slave_1) entered forwarding state [ 915.657074][T31304] Bluetooth: hci1: command tx timeout [ 915.971823][ T8206] Invalid ELF header magic: != ELF [ 915.974566][ T7739] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 915.993492][ T8229] Invalid ELF header magic: != ELF [ 917.108674][ T7739] veth0_vlan: entered promiscuous mode [ 917.153258][ T7739] veth1_vlan: entered promiscuous mode [ 917.338436][ T7739] veth0_macvtap: entered promiscuous mode [ 917.417119][ T7739] veth1_macvtap: entered promiscuous mode [ 917.504731][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.530817][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.557073][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.586693][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.626549][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.653540][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.703272][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 917.737077][T31304] Bluetooth: hci1: command tx timeout [ 917.744692][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.794526][ T7739] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 917.830536][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.856419][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.899375][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 917.937009][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 917.979143][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.016591][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.054683][ T7739] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 918.095991][ T7739] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 918.127838][ T7739] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 918.169198][ T7739] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.198886][ T7739] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.246508][ T7739] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.255460][ T7739] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 918.701149][ T8725] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 918.764407][ T8725] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 919.055368][ T1258] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 919.069261][ T1258] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 920.151171][ T8312] FAULT_INJECTION: forcing a failure. [ 920.151171][ T8312] name failslab, interval 1, probability 0, space 0, times 0 [ 920.376265][ T8312] CPU: 1 UID: 0 PID: 8312 Comm: syz.4.2588 Not tainted 6.14.0-syzkaller #0 [ 920.376301][ T8312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 920.376314][ T8312] Call Trace: [ 920.376321][ T8312] [ 920.376329][ T8312] dump_stack_lvl+0x16c/0x1f0 [ 920.376369][ T8312] should_fail_ex+0x50a/0x650 [ 920.376389][ T8312] ? fs_reclaim_acquire+0xae/0x150 [ 920.376417][ T8312] should_failslab+0xc2/0x120 [ 920.376437][ T8312] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 920.376467][ T8312] ? security_file_alloc+0x34/0x2b0 [ 920.376497][ T8312] security_file_alloc+0x34/0x2b0 [ 920.376523][ T8312] init_file+0x93/0x4c0 [ 920.376555][ T8312] alloc_empty_file+0x91/0x1e0 [ 920.376579][ T8312] path_openat+0xe1/0x2d80 [ 920.376609][ T8312] ? hlock_class+0x4e/0x130 [ 920.376637][ T8312] ? __lock_acquire+0x15a9/0x3c40 [ 920.376678][ T8312] ? __pfx_path_openat+0x10/0x10 [ 920.376710][ T8312] ? __pfx___lock_acquire+0x10/0x10 [ 920.376739][ T8312] ? lock_acquire.part.0+0x11b/0x380 [ 920.376769][ T8312] ? find_held_lock+0x2d/0x110 [ 920.376796][ T8312] do_filp_open+0x20c/0x470 [ 920.376828][ T8312] ? __pfx_do_filp_open+0x10/0x10 [ 920.376859][ T8312] ? find_held_lock+0x2d/0x110 [ 920.376904][ T8312] ? _raw_spin_unlock+0x28/0x50 [ 920.376930][ T8312] ? alloc_fd+0x41f/0x760 [ 920.376964][ T8312] do_sys_openat2+0x17a/0x1e0 [ 920.376988][ T8312] ? __pfx_do_sys_openat2+0x10/0x10 [ 920.377013][ T8312] ? __fget_files+0x206/0x3a0 [ 920.377048][ T8312] __x64_sys_open+0x154/0x1e0 [ 920.377072][ T8312] ? __pfx___x64_sys_open+0x10/0x10 [ 920.377104][ T8312] do_syscall_64+0xcd/0x250 [ 920.377134][ T8312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 920.377164][ T8312] RIP: 0033:0x7fdac8b8d169 [ 920.377182][ T8312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 920.377203][ T8312] RSP: 002b:00007fdac9a8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 920.377225][ T8312] RAX: ffffffffffffffda RBX: 00007fdac8da5fa0 RCX: 00007fdac8b8d169 [ 920.377240][ T8312] RDX: 0000000000000000 RSI: 0000000000008162 RDI: 0000200000000100 [ 920.377255][ T8312] RBP: 00007fdac9a8d090 R08: 0000000000000000 R09: 0000000000000000 [ 920.377269][ T8312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 920.377282][ T8312] R13: 0000000000000000 R14: 00007fdac8da5fa0 R15: 00007ffe6f9823f8 [ 920.377416][ T8312] [ 920.673807][ T8256] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 920.688386][ T8256] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 920.706702][ T8256] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 920.712871][ T8256] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 920.757581][ T8256] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 920.785876][ T8256] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 921.272689][ T8399] usb usb32: usbfs: process 8399 (syz.1.2614) did not claim interface 0 before use [ 921.337471][T31304] Bluetooth: hci0: command 0x0c1a tx timeout [ 921.362543][ T1259] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.392012][ T8407] Invalid ELF header magic: != ELF [ 921.558788][ T8409] Invalid ELF header magic: != ELF [ 921.806235][ T1259] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.248008][ T1259] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.552596][ T1259] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.697855][T31304] Bluetooth: hci3: command 0x0c1a tx timeout [ 922.787067][T31304] Bluetooth: hci1: command 0x0c1a tx timeout [ 922.793482][T30219] Bluetooth: hci4: command 0x040f tx timeout [ 923.481430][ T1259] bridge_slave_1: left allmulticast mode [ 923.511009][ T1259] bridge_slave_1: left promiscuous mode [ 923.532331][ T1259] bridge0: port 2(bridge_slave_1) entered disabled state [ 923.655670][ T1259] bridge_slave_0: left allmulticast mode [ 923.669631][ T1259] bridge_slave_0: left promiscuous mode [ 923.699248][ T1259] bridge0: port 1(bridge_slave_0) entered disabled state [ 924.856534][T31304] Bluetooth: hci1: command 0x0c1a tx timeout [ 925.477846][ T8586] busy [ 925.676867][ T8581] GUP no longer grows the stack in syz.0.2623 (8581): 1000-401000 (0) [ 925.726782][ T8581] CPU: 1 UID: 0 PID: 8581 Comm: syz.0.2623 Not tainted 6.14.0-syzkaller #0 [ 925.726818][ T8581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 925.726834][ T8581] Call Trace: [ 925.726842][ T8581] [ 925.726852][ T8581] dump_stack_lvl+0x16c/0x1f0 [ 925.726896][ T8581] gup_vma_lookup+0x1d2/0x220 [ 925.726932][ T8581] __get_user_pages+0x236/0x36f0 [ 925.726969][ T8581] ? __gup_longterm_locked+0x124/0x1870 [ 925.727007][ T8581] ? __gup_longterm_locked+0x124/0x1870 [ 925.727183][ T8581] ? __pfx___get_user_pages+0x10/0x10 [ 925.727230][ T8581] ? down_read_killable+0xcc/0x380 [ 925.727260][ T8581] ? __pfx_down_read_killable+0x10/0x10 [ 925.727288][ T8581] ? __pfx___lock_acquire+0x10/0x10 [ 925.727331][ T8581] __gup_longterm_locked+0x212/0x1870 [ 925.727385][ T8581] ? __pfx___gup_longterm_locked+0x10/0x10 [ 925.727531][ T8581] ? gup_fast_fallback+0x84c/0x2690 [ 925.727570][ T8581] ? __pfx_lock_release+0x10/0x10 [ 925.727605][ T8581] ? lock_acquire+0x2f/0xb0 [ 925.727636][ T8581] ? ___pte_offset_map+0x42/0x540 [ 925.727678][ T8581] gup_fast_fallback+0x1802/0x2690 [ 925.727735][ T8581] ? __pfx_gup_fast_fallback+0x10/0x10 [ 925.727767][ T8581] ? do_syscall_64+0xcd/0x250 [ 925.727802][ T8581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.727853][ T8581] get_user_pages_fast+0xa8/0x100 [ 925.727888][ T8581] ? __pfx_get_user_pages_fast+0x10/0x10 [ 925.727933][ T8581] get_futex_key+0x1f5/0x1000 [ 925.727966][ T8581] ? __pfx_get_futex_key+0x10/0x10 [ 925.727999][ T8581] ? kasan_save_track+0x14/0x30 [ 925.728033][ T8581] ? __kasan_kmalloc+0xaa/0xb0 [ 925.728068][ T8581] futex_lock_pi+0x282/0x7b0 [ 925.728104][ T8581] ? find_held_lock+0x2d/0x110 [ 925.728131][ T8581] ? __pfx_futex_lock_pi+0x10/0x10 [ 925.728179][ T8581] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 925.728226][ T8581] ? futex_wait+0x121/0x380 [ 925.728264][ T8581] ? __pfx_futex_wake_mark+0x10/0x10 [ 925.728325][ T8581] do_futex+0x340/0x350 [ 925.728361][ T8581] ? __pfx_do_futex+0x10/0x10 [ 925.728403][ T8581] __x64_sys_futex+0x1e1/0x4c0 [ 925.728440][ T8581] ? __pfx___x64_sys_futex+0x10/0x10 [ 925.728474][ T8581] ? rcu_is_watching+0x12/0xc0 [ 925.728513][ T8581] do_syscall_64+0xcd/0x250 [ 925.728552][ T8581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 925.728585][ T8581] RIP: 0033:0x7fed4a78d169 [ 925.728607][ T8581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 925.728631][ T8581] RSP: 002b:00007fed485b4038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 925.728657][ T8581] RAX: ffffffffffffffda RBX: 00007fed4a9a6160 RCX: 00007fed4a78d169 [ 925.728676][ T8581] RDX: 000000000000000a RSI: 0000000000000008 RDI: 0000000000000000 [ 925.728691][ T8581] RBP: 00007fed4a80e2a0 R08: 0000000000000000 R09: 0000000080800001 [ 925.728706][ T8581] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 925.728723][ T8581] R13: 0000000000000000 R14: 00007fed4a9a6160 R15: 00007ffc96d7a6d8 [ 925.728757][ T8581] [ 926.409149][ T1259] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 926.421815][ T1259] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 926.441445][ T1259] bond0 (unregistering): Released all slaves [ 926.946464][T31304] Bluetooth: hci1: command 0x0c1a tx timeout [ 927.356489][ T1259] hsr_slave_0: left promiscuous mode [ 927.377019][ T1259] hsr_slave_1: left promiscuous mode [ 927.395124][ T1259] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 927.886479][ T1259] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 928.008779][ T1259] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 928.018343][ T1259] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 928.063906][ T1259] veth1_macvtap: left promiscuous mode [ 928.070202][ T1259] veth0_macvtap: left promiscuous mode [ 928.078252][ T1259] veth1_vlan: left promiscuous mode [ 928.084458][ T1259] veth0_vlan: left promiscuous mode [ 929.714780][ T1259] team0 (unregistering): Port device team_slave_1 removed [ 929.776458][ T1259] team0 (unregistering): Port device team_slave_0 removed [ 931.980558][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.026516][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.080572][ T8879] netlink: 544 bytes leftover after parsing attributes in process `syz.0.2638'. [ 935.603587][ T8963] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2641'. [ 936.022517][ T8982] busy [ 939.303719][ T9109] busy [ 939.499862][ T9105] Invalid ELF header magic: != ELF [ 940.299019][ T9146] syz.1.2651(9146): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 941.427684][ T9110] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 941.434712][ T9110] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 941.462158][ T9162] Invalid ELF header magic: != ELF [ 941.478583][ T9110] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 941.550931][ T9110] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 941.818392][T31304] Bluetooth: hci0: command 0x0c1a tx timeout [ 942.013753][ T9209] netlink: 93 bytes leftover after parsing attributes in process `syz.0.2654'. [ 942.056112][ T9205] netlink: 93 bytes leftover after parsing attributes in process `syz.0.2654'. [ 943.199714][ T9229] busy [ 943.496942][T31304] Bluetooth: hci4: command 0x040f tx timeout [ 943.507078][T30219] Bluetooth: hci3: command 0x0c1a tx timeout [ 943.582608][T30219] Bluetooth: hci1: command 0x0c1a tx timeout [ 943.901292][ T9237] netlink: 544 bytes leftover after parsing attributes in process `syz.2.2657'. [ 946.233072][ T9337] Invalid ELF header magic: != ELF [ 948.128581][ T9420] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2666'. [ 948.597446][ T9427] Invalid ELF header magic: != ELF [ 949.208544][ T9405] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 949.214890][ T9405] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 949.224139][ T9405] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 949.243637][ T9405] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 950.136624][T30219] Bluetooth: hci0: command 0x0c1a tx timeout [ 951.258493][T30219] Bluetooth: hci1: command 0x0c1a tx timeout [ 951.265028][T31304] Bluetooth: hci4: command 0x040f tx timeout [ 951.271533][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 951.790252][ T9594] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input21 [ 952.918519][ T9656] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input22 [ 954.416011][ T9660] Invalid ELF header magic: != ELF [ 955.282319][ T9773] Invalid ELF header magic: != ELF [ 955.428988][ T9790] busy [ 957.040788][ T9841] Invalid ELF header magic: != ELF [ 958.889634][ T9917] busy [ 960.213734][ T9956] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(92.0.0), cmd(1) [ 964.413621][T10224] Invalid ELF header magic: != ELF [ 964.924679][T10238] busy [ 966.372327][T10292] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2703'. [ 966.971335][T10311] Invalid ELF header magic: != ELF [ 967.250716][T10324] busy [ 967.353082][T10236] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 967.429698][T10236] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 967.464357][T10236] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 967.585251][T10236] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 967.736750][T31304] Bluetooth: hci0: command 0x0c1a tx timeout [ 968.192803][T10356] Invalid ELF header magic: != ELF [ 968.567879][T10348] Invalid ELF header magic: != ELF [ 969.195574][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2710'. [ 969.499226][T31304] Bluetooth: hci4: command 0x040f tx timeout [ 969.505454][T31304] Bluetooth: hci3: command 0x0c1a tx timeout [ 969.662687][T31304] Bluetooth: hci1: command 0x0c1a tx timeout [ 970.757777][T10440] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 971.402146][T10464] Invalid ELF header magic: != ELF [ 974.089997][T10646] FAULT_INJECTION: forcing a failure. [ 974.089997][T10646] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 974.117055][T10646] CPU: 0 UID: 0 PID: 10646 Comm: syz.2.2721 Not tainted 6.14.0-syzkaller #0 [ 974.117089][T10646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 974.117104][T10646] Call Trace: [ 974.117111][T10646] [ 974.117121][T10646] dump_stack_lvl+0x16c/0x1f0 [ 974.117176][T10646] should_fail_ex+0x50a/0x650 [ 974.117204][T10646] ? __pfx___might_resched+0x10/0x10 [ 974.117250][T10646] should_fail_alloc_page+0xe7/0x130 [ 974.117272][T10646] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 974.117305][T10646] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 974.117347][T10646] ? hlock_class+0x4e/0x130 [ 974.117374][T10646] ? mark_lock+0xb5/0xc60 [ 974.117409][T10646] ? __pfx_mark_lock+0x10/0x10 [ 974.117439][T10646] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 974.117471][T10646] ? hlock_class+0x4e/0x130 [ 974.117491][T10646] ? mark_lock+0xb5/0xc60 [ 974.117524][T10646] ? __pfx_mark_lock+0x10/0x10 [ 974.117564][T10646] ? hlock_class+0x4e/0x130 [ 974.117588][T10646] ? __lock_acquire+0xcc5/0x3c40 [ 974.117621][T10646] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 974.117655][T10646] ? cpuset_nodemask_valid_mems_allowed+0x5f/0x80 [ 974.117684][T10646] ? policy_nodemask+0xea/0x4e0 [ 974.117707][T10646] alloc_pages_mpol+0x1fc/0x540 [ 974.117728][T10646] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 974.117751][T10646] ? hlock_class+0x4e/0x130 [ 974.117783][T10646] folio_alloc_mpol_noprof+0x36/0x2f0 [ 974.117811][T10646] vma_alloc_folio_noprof+0xee/0x1b0 [ 974.117838][T10646] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 974.117866][T10646] ? find_held_lock+0x2d/0x110 [ 974.117899][T10646] do_pte_missing+0x202f/0x3e10 [ 974.117947][T10646] __handle_mm_fault+0x103c/0x2a40 [ 974.117993][T10646] ? __pfx___handle_mm_fault+0x10/0x10 [ 974.118026][T10646] ? follow_page_pte+0x3ac/0x1490 [ 974.118059][T10646] ? __pfx_lock_release+0x10/0x10 [ 974.118118][T10646] handle_mm_fault+0x3fa/0xaa0 [ 974.118159][T10646] __get_user_pages+0x773/0x36f0 [ 974.118202][T10646] ? __pfx_mt_find+0x10/0x10 [ 974.118237][T10646] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 974.118272][T10646] ? __pfx___get_user_pages+0x10/0x10 [ 974.118307][T10646] ? __mm_populate+0x21d/0x380 [ 974.118344][T10646] populate_vma_page_range+0x27f/0x3a0 [ 974.118378][T10646] ? __pfx_populate_vma_page_range+0x10/0x10 [ 974.118411][T10646] ? __pfx_find_vma_intersection+0x10/0x10 [ 974.118443][T10646] ? vm_mmap_pgoff+0x31a/0x440 [ 974.118481][T10646] __mm_populate+0x1d6/0x380 [ 974.118517][T10646] ? __pfx___mm_populate+0x10/0x10 [ 974.118567][T10646] ? up_write+0x1b2/0x520 [ 974.118609][T10646] vm_mmap_pgoff+0x352/0x440 [ 974.118644][T10646] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 974.118685][T10646] ? __x64_sys_futex+0x1e1/0x4c0 [ 974.118712][T10646] ? __x64_sys_futex+0x1ea/0x4c0 [ 974.118746][T10646] ksys_mmap_pgoff+0x7d/0x5c0 [ 974.118775][T10646] ? rcu_is_watching+0x12/0xc0 [ 974.118805][T10646] __x64_sys_mmap+0x125/0x190 [ 974.118844][T10646] do_syscall_64+0xcd/0x250 [ 974.118882][T10646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 974.118918][T10646] RIP: 0033:0x7f60bc78d169 [ 974.118941][T10646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 974.118965][T10646] RSP: 002b:00007f60bd56b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 974.118988][T10646] RAX: ffffffffffffffda RBX: 00007f60bc9a5fa0 RCX: 00007f60bc78d169 [ 974.119005][T10646] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 974.119021][T10646] RBP: 00007f60bc80e2a0 R08: 0000000000000002 R09: 0000000000008000 [ 974.119037][T10646] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 974.119053][T10646] R13: 0000000000000000 R14: 00007f60bc9a5fa0 R15: 00007ffe25b87d28 [ 974.119085][T10646] [ 975.235060][T10688] busy [ 976.174573][T10750] Invalid ELF header magic: != ELF [ 977.342324][T10782] busy [ 978.044504][T10639] kexec: Could not allocate control_code_buffer [ 978.456532][T10826] busy [ 978.979125][T10844] FAULT_INJECTION: forcing a failure. [ 978.979125][T10844] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 978.992737][T10844] CPU: 1 UID: 0 PID: 10844 Comm: syz.0.2736 Not tainted 6.14.0-syzkaller #0 [ 978.992766][T10844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 978.992779][T10844] Call Trace: [ 978.992786][T10844] [ 978.992795][T10844] dump_stack_lvl+0x16c/0x1f0 [ 978.992844][T10844] should_fail_ex+0x50a/0x650 [ 978.992872][T10844] _copy_from_iter+0x2a1/0x1560 [ 978.992900][T10844] ? trace_lock_acquire+0x14e/0x1f0 [ 978.992928][T10844] ? __alloc_skb+0x1fe/0x380 [ 978.992959][T10844] ? __pfx__copy_from_iter+0x10/0x10 [ 978.992980][T10844] ? __virt_addr_valid+0x1a4/0x590 [ 978.993008][T10844] ? __virt_addr_valid+0x5e/0x590 [ 978.993028][T10844] ? __phys_addr_symbol+0x30/0x80 [ 978.993049][T10844] ? __check_object_size+0x488/0x710 [ 978.993074][T10844] netlink_sendmsg+0x813/0xd70 [ 978.993110][T10844] ? __pfx_netlink_sendmsg+0x10/0x10 [ 978.993152][T10844] ____sys_sendmsg+0xaaf/0xc90 [ 978.993180][T10844] ? copy_msghdr_from_user+0x10b/0x160 [ 978.993214][T10844] ? __pfx_____sys_sendmsg+0x10/0x10 [ 978.993238][T10844] ? __lock_acquire+0xcc5/0x3c40 [ 978.993281][T10844] ___sys_sendmsg+0x135/0x1e0 [ 978.993311][T10844] ? __pfx____sys_sendmsg+0x10/0x10 [ 978.993345][T10844] ? trace_lock_acquire+0x14e/0x1f0 [ 978.993387][T10844] __sys_sendmmsg+0x201/0x420 [ 978.993412][T10844] ? __pfx___sys_sendmmsg+0x10/0x10 [ 978.993445][T10844] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 978.993485][T10844] ? fput+0x67/0x440 [ 978.993506][T10844] ? ksys_write+0x1ba/0x250 [ 978.993532][T10844] ? __pfx_ksys_write+0x10/0x10 [ 978.993562][T10844] __x64_sys_sendmmsg+0x9c/0x100 [ 978.993581][T10844] ? lockdep_hardirqs_on+0x7c/0x110 [ 978.993607][T10844] do_syscall_64+0xcd/0x250 [ 978.993638][T10844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 978.993667][T10844] RIP: 0033:0x7fed4a78d169 [ 978.993691][T10844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 978.993713][T10844] RSP: 002b:00007fed485f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 978.993736][T10844] RAX: ffffffffffffffda RBX: 00007fed4a9a5fa0 RCX: 00007fed4a78d169 [ 978.993750][T10844] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 978.993764][T10844] RBP: 00007fed485f6090 R08: 0000000000000000 R09: 0000000000000000 [ 978.993777][T10844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 978.993791][T10844] R13: 0000000000000000 R14: 00007fed4a9a5fa0 R15: 00007ffc96d7a6d8 [ 978.993830][T10844] [ 979.690471][T10852] busy [ 980.052391][T10858] Invalid ELF header magic: != ELF [ 980.120573][T10861] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2741'. [ 980.545009][T10894] Invalid ELF header magic: != ELF [ 983.524922][T11007] busy [ 985.422446][T11112] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2751'. [ 986.257129][T11159] busy [ 987.767499][T11129] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 987.773738][T11129] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 987.814429][T11129] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 987.824047][T11129] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 988.216444][T30219] Bluetooth: hci0: command 0x0c1a tx timeout [ 988.265036][T11215] hub 2-0:1.0: USB hub found [ 988.303372][T11215] hub 2-0:1.0: 1 port detected [ 989.776180][T11238] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2768'. [ 989.823855][T30219] Bluetooth: hci3: command 0x0c1a tx timeout [ 989.896690][T30219] Bluetooth: hci1: command 0x0c1a tx timeout [ 989.902950][T31304] Bluetooth: hci4: command 0x040f tx timeout [ 990.460239][T11286] blktrace: Concurrent blktraces are not allowed on ram12 [ 991.009992][T11308] Invalid ELF header magic: != ELF [ 991.931915][T11355] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2773'. [ 993.423661][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.431694][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 993.625952][T11455] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 900000000 [ 995.561042][T11534] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2784'. [ 995.935070][T11547] Invalid ELF header magic: != ELF [ 996.032159][T11582] FAULT_INJECTION: forcing a failure. [ 996.032159][T11582] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 996.045715][T11582] CPU: 0 UID: 0 PID: 11582 Comm: syz.4.2790 Not tainted 6.14.0-syzkaller #0 [ 996.045745][T11582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 996.045759][T11582] Call Trace: [ 996.045769][T11582] [ 996.045779][T11582] dump_stack_lvl+0x16c/0x1f0 [ 996.045820][T11582] should_fail_ex+0x50a/0x650 [ 996.045849][T11582] _copy_from_user+0x2e/0xd0 [ 996.045877][T11582] vt_ioctl+0x10ec/0x2f80 [ 996.045905][T11582] ? __pfx_vt_ioctl+0x10/0x10 [ 996.045928][T11582] ? tomoyo_path_number_perm+0x46d/0x590 [ 996.045964][T11582] ? tomoyo_path_number_perm+0x190/0x590 [ 996.045994][T11582] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 996.046022][T11582] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 996.046080][T11582] ? do_vfs_ioctl+0x513/0x1990 [ 996.046106][T11582] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 996.046148][T11582] ? tty_jobctrl_ioctl+0x152/0xe00 [ 996.046172][T11582] ? __pfx_vt_ioctl+0x10/0x10 [ 996.046195][T11582] tty_ioctl+0x651/0x15d0 [ 996.046226][T11582] ? __pfx_tty_ioctl+0x10/0x10 [ 996.046261][T11582] ? __pfx_lock_release+0x10/0x10 [ 996.046291][T11582] ? trace_lock_acquire+0x14e/0x1f0 [ 996.046333][T11582] ? __fget_files+0x206/0x3a0 [ 996.046363][T11582] ? __pfx_tty_ioctl+0x10/0x10 [ 996.046390][T11582] __x64_sys_ioctl+0x190/0x200 [ 996.046417][T11582] do_syscall_64+0xcd/0x250 [ 996.046453][T11582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 996.046485][T11582] RIP: 0033:0x7fdac8b8d169 [ 996.046505][T11582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 996.046527][T11582] RSP: 002b:00007fdac9a8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 996.046549][T11582] RAX: ffffffffffffffda RBX: 00007fdac8da5fa0 RCX: 00007fdac8b8d169 [ 996.046565][T11582] RDX: 0000000000000001 RSI: 0000000000004b67 RDI: 0000000000000004 [ 996.046578][T11582] RBP: 00007fdac9a8d090 R08: 0000000000000000 R09: 0000000000000000 [ 996.046593][T11582] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 996.046606][T11582] R13: 0000000000000000 R14: 00007fdac8da5fa0 R15: 00007ffe6f9823f8 [ 996.046637][T11582] [ 997.779372][T11619] busy [ 998.773276][T11566] kexec: Could not allocate control_code_buffer [ 999.196853][T11612] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 999.203590][T11612] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 999.210893][T11612] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 999.218079][T11612] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 999.702602][T11660] busy [ 1000.303757][T30219] Bluetooth: hci0: command 0x0c1a tx timeout [ 1001.266673][T30219] Bluetooth: hci1: command 0x0c1a tx timeout [ 1001.266744][T30219] Bluetooth: hci4: command 0x040f tx timeout [ 1001.266789][T30219] Bluetooth: hci3: command 0x0c1a tx timeout [ 1002.266648][T11757] Console: switching to colour VGA+ 80x25 [ 1002.835709][T11757] FAULT_INJECTION: forcing a failure. [ 1002.835709][T11757] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1002.851074][T11757] CPU: 0 UID: 0 PID: 11757 Comm: syz.0.2806 Not tainted 6.14.0-syzkaller #0 [ 1002.851110][T11757] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1002.851123][T11757] Call Trace: [ 1002.851129][T11757] [ 1002.851138][T11757] dump_stack_lvl+0x16c/0x1f0 [ 1002.851179][T11757] should_fail_ex+0x50a/0x650 [ 1002.851203][T11757] ? __lock_acquire+0x15a9/0x3c40 [ 1002.851238][T11757] get_futex_key+0xac1/0x1000 [ 1002.851266][T11757] ? __pfx_get_futex_key+0x10/0x10 [ 1002.851300][T11757] futex_wake+0xe8/0x4e0 [ 1002.851333][T11757] ? __pfx_futex_wake+0x10/0x10 [ 1002.851361][T11757] ? find_held_lock+0x2d/0x110 [ 1002.851390][T11757] do_futex+0x1e5/0x350 [ 1002.851416][T11757] ? __pfx_do_futex+0x10/0x10 [ 1002.851441][T11757] ? __might_fault+0xe3/0x190 [ 1002.851465][T11757] ? __might_fault+0xe3/0x190 [ 1002.851491][T11757] mm_release+0x24e/0x300 [ 1002.851525][T11757] do_exit+0x886/0x2db0 [ 1002.851564][T11757] ? get_signal+0x8f7/0x26c0 [ 1002.851607][T11757] ? __pfx_do_exit+0x10/0x10 [ 1002.851632][T11757] ? do_raw_spin_lock+0x12d/0x2c0 [ 1002.851654][T11757] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1002.851681][T11757] do_group_exit+0xd3/0x2a0 [ 1002.851708][T11757] get_signal+0x24ed/0x26c0 [ 1002.851743][T11757] ? preempt_schedule_thunk+0x1a/0x30 [ 1002.851782][T11757] ? __pfx_get_signal+0x10/0x10 [ 1002.851817][T11757] ? __pfx_do_futex+0x10/0x10 [ 1002.851841][T11757] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1002.851880][T11757] arch_do_signal_or_restart+0x90/0x7e0 [ 1002.851909][T11757] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1002.851943][T11757] ? rcu_is_watching+0x12/0xc0 [ 1002.851975][T11757] syscall_exit_to_user_mode+0x150/0x2a0 [ 1002.852008][T11757] do_syscall_64+0xda/0x250 [ 1002.852043][T11757] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1002.852074][T11757] RIP: 0033:0x7fed4a78d169 [ 1002.852091][T11757] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1002.852109][T11757] RSP: 002b:00007fed485f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1002.852132][T11757] RAX: fffffffffffffe00 RBX: 00007fed4a9a5fa8 RCX: 00007fed4a78d169 [ 1002.852147][T11757] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fed4a9a5fa8 [ 1002.852161][T11757] RBP: 00007fed4a9a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1002.852175][T11757] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fed4a9a5fac [ 1002.852189][T11757] R13: 0000000000000000 R14: 00007ffc96d7a5f0 R15: 00007ffc96d7a6d8 [ 1002.852218][T11757] [ 1004.336321][T11938] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1004.370747][T11980] busy [ 1004.449782][T11938] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1004.532109][T11938] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1004.584703][T11938] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1005.251449][T11990] busy [ 1005.736624][T31304] Bluetooth: hci0: command 0x0c1a tx timeout [ 1006.111504][T11996] busy [ 1006.456983][T31304] Bluetooth: hci3: command 0x0c1a tx timeout [ 1006.546465][T30219] Bluetooth: hci4: command 0x040f tx timeout [ 1006.602450][T12080] snd_aloop snd_aloop.0: control 16781581:65535:6:'x?F/zF˷fC:0 is already present [ 1006.620978][T30219] Bluetooth: hci1: command 0x0c1a tx timeout [ 1007.906980][T12153] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2827'. [ 1008.485938][T12188] Invalid ELF header magic: != ELF [ 1008.508459][T12138] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1008.514794][T12138] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1008.522195][T12138] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1008.552613][T12138] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1008.584170][T12130] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1009.816477][T30219] Bluetooth: hci0: command 0x0c1a tx timeout [ 1009.958980][T12277] Invalid ELF header magic: != ELF [ 1010.543387][T30219] Bluetooth: hci4: command 0x040f tx timeout [ 1010.549932][T30219] Bluetooth: hci3: command 0x0c1a tx timeout [ 1010.626508][T31304] Bluetooth: hci1: command 0x0c1a tx timeout [ 1011.535684][T12324] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2834'. [ 1011.646959][T12324] geneve1: entered promiscuous mode [ 1011.657684][T12324] geneve1: entered allmulticast mode [ 1011.793127][T12344] FAULT_INJECTION: forcing a failure. [ 1011.793127][T12344] name failslab, interval 1, probability 0, space 0, times 0 [ 1011.859550][T12344] CPU: 0 UID: 0 PID: 12344 Comm: syz.1.2839 Not tainted 6.14.0-syzkaller #0 [ 1011.859592][T12344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1011.859606][T12344] Call Trace: [ 1011.859613][T12344] [ 1011.859622][T12344] dump_stack_lvl+0x16c/0x1f0 [ 1011.859668][T12344] should_fail_ex+0x50a/0x650 [ 1011.859695][T12344] ? fs_reclaim_acquire+0xae/0x150 [ 1011.859734][T12344] ? kvm_dev_ioctl+0xa44/0x1a90 [ 1011.859771][T12344] should_failslab+0xc2/0x120 [ 1011.859798][T12344] __kmalloc_cache_noprof+0x68/0x410 [ 1011.859840][T12344] ? kasan_save_track+0x14/0x30 [ 1011.859877][T12344] kvm_dev_ioctl+0xa44/0x1a90 [ 1011.859918][T12344] ? trace_lock_acquire+0x14e/0x1f0 [ 1011.859948][T12344] ? __sys_sendmsg+0x19a/0x220 [ 1011.859973][T12344] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1011.860038][T12344] ? __fget_files+0x206/0x3a0 [ 1011.860081][T12344] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1011.860114][T12344] __x64_sys_ioctl+0x190/0x200 [ 1011.860145][T12344] do_syscall_64+0xcd/0x250 [ 1011.860183][T12344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1011.860218][T12344] RIP: 0033:0x7f133538d169 [ 1011.860237][T12344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1011.860263][T12344] RSP: 002b:00007f133626d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1011.860291][T12344] RAX: ffffffffffffffda RBX: 00007f13355a5fa0 RCX: 00007f133538d169 [ 1011.860310][T12344] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000006 [ 1011.860326][T12344] RBP: 00007f133540e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1011.860341][T12344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1011.860354][T12344] R13: 0000000000000000 R14: 00007f13355a5fa0 R15: 00007fff104db598 [ 1011.860384][T12344] [ 1011.886998][T12372] cgroup: fork rejected by pids controller in /syz0 [ 1012.374301][T12445] netlink: get zone limit has 8 unknown bytes [ 1012.727980][T12474] ovs_: entered promiscuous mode [ 1013.453534][T12595] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2845'. [ 1013.518762][T12574] Invalid ELF header magic: != ELF [ 1014.147584][T12614] page: refcount:6 mapcount:5 mapping:0000000000000000 index:0xffff888078000000 pfn:0x78000 [ 1014.206275][T12614] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1014.251627][T12614] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1014.332911][T12614] raw: ffff888078000000 0000000000000000 0000000600000004 0000000000000000 [ 1014.367958][T12614] page dumped because: unmovable page [ 1014.389946][T12614] page_owner tracks the page as allocated [ 1014.515757][T12614] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 7707, tgid 7707 (syz-executor), ts 908711160510, free_ts 902255397635 [ 1014.726091][T12614] post_alloc_hook+0x181/0x1b0 [ 1014.751982][T12614] get_page_from_freelist+0xfce/0x2f80 [ 1014.830084][T12614] __alloc_frozen_pages_noprof+0x221/0x2470 [ 1014.866246][T12614] alloc_pages_mpol+0x1fc/0x540 [ 1014.952394][T12614] alloc_pages_noprof+0x131/0x390 [ 1015.052608][T12614] __vmalloc_node_range_noprof+0x721/0x1530 [ 1015.164110][T12614] vmalloc_user_noprof+0x6b/0x90 [ 1015.172154][T12614] kcov_ioctl+0x4c/0x730 [ 1015.196995][T12614] __x64_sys_ioctl+0x190/0x200 [ 1015.206694][T12614] do_syscall_64+0xcd/0x250 [ 1015.211334][T12614] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1015.237079][T12614] page last free pid 7558 tgid 7552 stack trace: [ 1015.272538][T12614] free_frozen_pages+0x6db/0xfb0 [ 1015.303114][T12614] __put_partials+0x14c/0x170 [ 1015.316617][T12614] qlist_free_all+0x4e/0x120 [ 1015.329087][T12614] kasan_quarantine_reduce+0x195/0x1e0 [ 1015.367644][T12614] __kasan_slab_alloc+0x69/0x90 [ 1015.393290][T12614] kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 1015.424972][T12614] zswap_store+0x84e/0x2690 [ 1015.446446][T12614] swap_writepage+0x3b6/0x1120 [ 1015.476593][T12614] pageout+0x3b2/0xaa0 [ 1015.485724][T12614] shrink_folio_list+0x2f7f/0x40c0 [ 1015.505744][T12614] reclaim_folio_list+0xd8/0x5e0 [ 1015.531967][T12614] reclaim_pages+0x481/0x650 [ 1015.554269][T12614] madvise_cold_or_pageout_pte_range+0x13ae/0x20d0 [ 1015.584214][T12614] walk_pgd_range+0xc7b/0x1a70 [ 1015.603681][T12614] __walk_page_range+0x161/0x820 [ 1015.622356][T12614] walk_page_range_mm+0x55a/0x940 [ 1016.675926][T12701] netlink: 178 bytes leftover after parsing attributes in process `syz.4.2855'. [ 1016.770456][T12704] can: request_module (can-proto-0) failed. [ 1017.665003][T12725] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2861'. [ 1017.818921][T12725] FAULT_INJECTION: forcing a failure. [ 1017.818921][T12725] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1017.891108][T12725] CPU: 1 UID: 0 PID: 12725 Comm: syz.0.2861 Not tainted 6.14.0-syzkaller #0 [ 1017.891143][T12725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1017.891157][T12725] Call Trace: [ 1017.891164][T12725] [ 1017.891174][T12725] dump_stack_lvl+0x16c/0x1f0 [ 1017.891215][T12725] should_fail_ex+0x50a/0x650 [ 1017.891239][T12725] ? __pfx___might_resched+0x10/0x10 [ 1017.891277][T12725] should_fail_alloc_page+0xe7/0x130 [ 1017.891303][T12725] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1017.891336][T12725] ? hlock_class+0x4e/0x130 [ 1017.891365][T12725] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 1017.891401][T12725] ? __pfx_mark_lock+0x10/0x10 [ 1017.891431][T12725] ? __pfx_stack_trace_save+0x10/0x10 [ 1017.891458][T12725] ? stack_depot_save_flags+0x28/0x9c0 [ 1017.891491][T12725] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1017.891533][T12725] ? hlock_class+0x4e/0x130 [ 1017.891570][T12725] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1017.891611][T12725] ? policy_nodemask+0xea/0x4e0 [ 1017.891637][T12725] alloc_pages_mpol+0x1fc/0x540 [ 1017.891662][T12725] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1017.891696][T12725] alloc_pages_noprof+0x131/0x390 [ 1017.891720][T12725] pte_alloc_one+0x20/0x390 [ 1017.891755][T12725] do_pte_missing+0x1aff/0x3e10 [ 1017.891790][T12725] ? do_raw_spin_unlock+0x172/0x230 [ 1017.891815][T12725] ? __pmd_alloc+0x3c2/0x870 [ 1017.891848][T12725] __handle_mm_fault+0x103c/0x2a40 [ 1017.891891][T12725] ? __pfx___handle_mm_fault+0x10/0x10 [ 1017.891922][T12725] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1017.891973][T12725] ? find_vma+0xc0/0x140 [ 1017.892005][T12725] ? __pfx_find_vma+0x10/0x10 [ 1017.892037][T12725] handle_mm_fault+0x3fa/0xaa0 [ 1017.892076][T12725] do_user_addr_fault+0x7a3/0x13f0 [ 1017.892115][T12725] exc_page_fault+0x5c/0xc0 [ 1017.892148][T12725] asm_exc_page_fault+0x26/0x30 [ 1017.892178][T12725] RIP: 0010:rep_movs_alternative+0x13/0x70 [ 1017.892207][T12725] Code: cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 1017.892229][T12725] RSP: 0018:ffffc90005f0fd60 EFLAGS: 00050202 [ 1017.892248][T12725] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 1017.892261][T12725] RDX: fffff52000be1fbc RSI: 0000000000000000 RDI: ffffc90005f0fde0 [ 1017.892276][T12725] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000be1fbc [ 1017.892290][T12725] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 1017.892303][T12725] R13: ffffc90005f0fde0 R14: 0000000000000000 R15: 0000000000000065 [ 1017.892335][T12725] _copy_from_user+0x98/0xd0 [ 1017.892362][T12725] do_sock_getsockopt+0x5f6/0x800 [ 1017.892390][T12725] ? trace_lock_acquire+0x80/0x1f0 [ 1017.892418][T12725] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 1017.892445][T12725] ? lock_acquire+0x2f/0xb0 [ 1017.892472][T12725] ? __fget_files+0x40/0x3a0 [ 1017.892510][T12725] ? __fget_files+0x206/0x3a0 [ 1017.892548][T12725] __sys_getsockopt+0x12f/0x260 [ 1017.892590][T12725] __x64_sys_getsockopt+0xbd/0x160 [ 1017.892622][T12725] ? do_syscall_64+0x91/0x250 [ 1017.892653][T12725] ? lockdep_hardirqs_on+0x7c/0x110 [ 1017.892684][T12725] do_syscall_64+0xcd/0x250 [ 1017.892718][T12725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1017.892748][T12725] RIP: 0033:0x7fed4a78d169 [ 1017.892766][T12725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1017.892787][T12725] RSP: 002b:00007fed485f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 1017.892808][T12725] RAX: ffffffffffffffda RBX: 00007fed4a9a5fa0 RCX: 00007fed4a78d169 [ 1017.892823][T12725] RDX: 0000000000000001 RSI: 0000000000000065 RDI: 0000000000000004 [ 1017.892837][T12725] RBP: 00007fed485f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1017.892850][T12725] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 1017.892865][T12725] R13: 0000000000000000 R14: 00007fed4a9a5fa0 R15: 00007ffc96d7a6d8 [ 1017.892896][T12725] [ 1018.368254][T12713] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1018.374830][T12713] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1018.427874][T12713] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1018.434215][T12713] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1018.524380][T12732] FAULT_INJECTION: forcing a failure. [ 1018.524380][T12732] name failslab, interval 1, probability 0, space 0, times 0 [ 1018.537692][T12732] CPU: 1 UID: 0 PID: 12732 Comm: syz.4.2864 Not tainted 6.14.0-syzkaller #0 [ 1018.537723][T12732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1018.537737][T12732] Call Trace: [ 1018.537745][T12732] [ 1018.537753][T12732] dump_stack_lvl+0x16c/0x1f0 [ 1018.537795][T12732] should_fail_ex+0x50a/0x650 [ 1018.537821][T12732] ? fs_reclaim_acquire+0xae/0x150 [ 1018.537852][T12732] ? copy_splice_read+0x1a8/0xb80 [ 1018.537880][T12732] should_failslab+0xc2/0x120 [ 1018.537904][T12732] __kmalloc_noprof+0xcb/0x510 [ 1018.537945][T12732] copy_splice_read+0x1a8/0xb80 [ 1018.537974][T12732] ? __pfx_pipe_to_null+0x10/0x10 [ 1018.538012][T12732] ? __pfx_copy_splice_read+0x10/0x10 [ 1018.538039][T12732] ? pipe_unlock+0x4a/0x70 [ 1018.538075][T12732] ? __pfx_splice_from_pipe+0x10/0x10 [ 1018.538103][T12732] ? __pfx_register_lock_class+0x10/0x10 [ 1018.538150][T12732] ? __pfx_copy_splice_read+0x10/0x10 [ 1018.538179][T12732] do_splice_read+0x282/0x370 [ 1018.538212][T12732] splice_direct_to_actor+0x2a4/0xa40 [ 1018.538243][T12732] ? __pfx_direct_splice_actor+0x10/0x10 [ 1018.538279][T12732] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 1018.538313][T12732] ? __fget_files+0x1fc/0x3a0 [ 1018.538363][T12732] do_splice_direct+0x178/0x250 [ 1018.538390][T12732] ? __pfx_do_splice_direct+0x10/0x10 [ 1018.538421][T12732] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 1018.538453][T12732] ? bpf_lsm_file_permission+0x9/0x10 [ 1018.538487][T12732] ? security_file_permission+0x71/0x210 [ 1018.538520][T12732] ? rw_verify_area+0xcf/0x680 [ 1018.538555][T12732] do_sendfile+0xafb/0xe40 [ 1018.538590][T12732] ? __pfx_do_sendfile+0x10/0x10 [ 1018.538620][T12732] ? __fget_files+0x206/0x3a0 [ 1018.538659][T12732] __x64_sys_sendfile64+0x1da/0x220 [ 1018.538676][T12732] ? ksys_write+0x1ba/0x250 [ 1018.538701][T12732] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 1018.538734][T12732] do_syscall_64+0xcd/0x250 [ 1018.538770][T12732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.538803][T12732] RIP: 0033:0x7fdac8b8d169 [ 1018.538825][T12732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1018.538846][T12732] RSP: 002b:00007fdac9a8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 1018.538870][T12732] RAX: ffffffffffffffda RBX: 00007fdac8da5fa0 RCX: 00007fdac8b8d169 [ 1018.538886][T12732] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000002 [ 1018.538899][T12732] RBP: 00007fdac9a8d090 R08: 0000000000000000 R09: 0000000000000000 [ 1018.538914][T12732] R10: 0010000800000003 R11: 0000000000000246 R12: 0000000000000002 [ 1018.538928][T12732] R13: 0000000000000000 R14: 00007fdac8da5fa0 R15: 00007ffe6f9823f8 [ 1018.538959][T12732] [ 1019.166939][T12738] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2867'. [ 1019.178165][T31304] Bluetooth: hci0: command 0x0c1a tx timeout [ 1019.740299][T12783] busy [ 1019.853198][T12789] busy [ 1020.376606][T31304] Bluetooth: hci3: command 0x0c1a tx timeout [ 1020.393365][T12793] busy [ 1020.466599][T31304] Bluetooth: hci1: command 0x0c1a tx timeout [ 1020.466614][T30219] Bluetooth: hci4: command 0x040f tx timeout [ 1020.617067][T12798] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2875'. [ 1020.618029][T12798] veth0_macvtap: left promiscuous mode [ 1020.794574][T12804] FAULT_INJECTION: forcing a failure. [ 1020.794574][T12804] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1020.794602][T12804] CPU: 1 UID: 0 PID: 12804 Comm: syz.0.2877 Not tainted 6.14.0-syzkaller #0 [ 1020.794617][T12804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1020.794625][T12804] Call Trace: [ 1020.794629][T12804] [ 1020.794635][T12804] dump_stack_lvl+0x16c/0x1f0 [ 1020.794662][T12804] should_fail_ex+0x50a/0x650 [ 1020.794680][T12804] _copy_from_user+0x2e/0xd0 [ 1020.794696][T12804] move_addr_to_kernel+0x68/0x160 [ 1020.794717][T12804] __copy_msghdr+0x386/0x470 [ 1020.794738][T12804] copy_msghdr_from_user+0xc2/0x160 [ 1020.794765][T12804] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1020.794801][T12804] ? hlock_class+0x4e/0x130 [ 1020.794824][T12804] ? __lock_acquire+0x15a9/0x3c40 [ 1020.794861][T12804] ___sys_sendmsg+0xff/0x1e0 [ 1020.794894][T12804] ? __pfx____sys_sendmsg+0x10/0x10 [ 1020.794913][T12804] ? __pfx___lock_acquire+0x10/0x10 [ 1020.794945][T12804] ? __pfx___might_resched+0x10/0x10 [ 1020.794976][T12804] ? __might_fault+0xe3/0x190 [ 1020.794993][T12804] __sys_sendmmsg+0x201/0x420 [ 1020.795007][T12804] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1020.795024][T12804] ? do_sys_openat2+0xb1/0x1e0 [ 1020.795040][T12804] ? __pfx_do_sys_openat2+0x10/0x10 [ 1020.795061][T12804] ? ksys_write+0x1ba/0x250 [ 1020.795078][T12804] ? __pfx_ksys_write+0x10/0x10 [ 1020.795098][T12804] __x64_sys_sendmmsg+0x9c/0x100 [ 1020.795110][T12804] ? lockdep_hardirqs_on+0x7c/0x110 [ 1020.795129][T12804] do_syscall_64+0xcd/0x250 [ 1020.795150][T12804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1020.795171][T12804] RIP: 0033:0x7fed4a78d169 [ 1020.795183][T12804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1020.795196][T12804] RSP: 002b:00007fed485f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1020.795208][T12804] RAX: ffffffffffffffda RBX: 00007fed4a9a5fa0 RCX: 00007fed4a78d169 [ 1020.795217][T12804] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1020.795225][T12804] RBP: 00007fed485f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1020.795232][T12804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1020.795240][T12804] R13: 0000000000000000 R14: 00007fed4a9a5fa0 R15: 00007ffc96d7a6d8 [ 1020.795256][T12804] [ 1022.132041][T12824] vhci_hcd: invalid port number 242 [ 1022.141835][T12824] vhci_hcd: default hub control req: f2ff vffff i00f2 l65535 [ 1022.172652][T12824] Invalid ELF header magic: != ELF [ 1022.443813][T12836] busy [ 1025.499405][T12937] netlink: 130 bytes leftover after parsing attributes in process `syz.2.2899'. [ 1025.965290][T12949] FAULT_INJECTION: forcing a failure. [ 1025.965290][T12949] name failslab, interval 1, probability 0, space 0, times 0 [ 1026.005080][T12957] Format for deleting device is "id" (uint). [ 1026.103501][T12949] CPU: 0 UID: 0 PID: 12949 Comm: syz.2.2902 Not tainted 6.14.0-syzkaller #0 [ 1026.103538][T12949] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1026.103554][T12949] Call Trace: [ 1026.103562][T12949] [ 1026.103572][T12949] dump_stack_lvl+0x16c/0x1f0 [ 1026.103620][T12949] should_fail_ex+0x50a/0x650 [ 1026.103645][T12949] ? fs_reclaim_acquire+0xae/0x150 [ 1026.103684][T12949] should_failslab+0xc2/0x120 [ 1026.103712][T12949] __kmalloc_cache_node_noprof+0x6e/0x420 [ 1026.103751][T12949] ? lockdep_init_map_type+0x16d/0x7d0 [ 1026.103787][T12949] ? __raw_spin_lock_init+0x3a/0x110 [ 1026.103809][T12949] ? __alloc_workqueue+0x506/0x1810 [ 1026.103844][T12949] __alloc_workqueue+0x506/0x1810 [ 1026.103885][T12949] alloc_workqueue+0xd3/0x200 [ 1026.103912][T12949] ? __pfx_alloc_workqueue+0x10/0x10 [ 1026.103945][T12949] ? rcu_is_watching+0x12/0xc0 [ 1026.103972][T12949] ? trace_kmalloc+0x2d/0xd0 [ 1026.103997][T12949] ? __kmalloc_noprof+0x23b/0x510 [ 1026.104030][T12949] ? __pfx_lock_release+0x10/0x10 [ 1026.104060][T12949] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1026.104103][T12949] ieee80211_register_hw+0x1e3b/0x4060 [ 1026.104154][T12949] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 1026.104188][T12949] ? net_generic+0xea/0x2a0 [ 1026.104222][T12949] ? lockdep_init_map_type+0x16d/0x7d0 [ 1026.104260][T12949] ? __asan_memset+0x23/0x50 [ 1026.104293][T12949] ? __hrtimer_init+0x106/0x2c0 [ 1026.104334][T12949] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 1026.104393][T12949] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1026.104446][T12949] hwsim_new_radio_nl+0xb42/0x12b0 [ 1026.104492][T12949] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1026.104543][T12949] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1026.104575][T12949] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1026.104611][T12949] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1026.104642][T12949] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1026.104667][T12949] ? trace_cap_capable+0x1a2/0x210 [ 1026.104705][T12949] ? bpf_lsm_capable+0x9/0x10 [ 1026.104730][T12949] ? security_capable+0x7e/0x260 [ 1026.104758][T12949] ? ns_capable+0xd7/0x110 [ 1026.104796][T12949] genl_rcv_msg+0x565/0x800 [ 1026.104826][T12949] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1026.104853][T12949] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1026.104902][T12949] netlink_rcv_skb+0x16b/0x440 [ 1026.104938][T12949] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1026.104965][T12949] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1026.105016][T12949] ? down_read+0xc9/0x330 [ 1026.105053][T12949] ? __pfx_down_read+0x10/0x10 [ 1026.105090][T12949] ? netlink_deliver_tap+0x1ae/0xd30 [ 1026.105132][T12949] genl_rcv+0x28/0x40 [ 1026.105153][T12949] netlink_unicast+0x53c/0x7f0 [ 1026.105193][T12949] ? __pfx_netlink_unicast+0x10/0x10 [ 1026.105228][T12949] ? __phys_addr_symbol+0x30/0x80 [ 1026.105254][T12949] ? __check_object_size+0x488/0x710 [ 1026.105284][T12949] netlink_sendmsg+0x8b8/0xd70 [ 1026.105326][T12949] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1026.105376][T12949] ____sys_sendmsg+0xaaf/0xc90 [ 1026.105407][T12949] ? copy_msghdr_from_user+0x10b/0x160 [ 1026.105444][T12949] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1026.105507][T12949] ___sys_sendmsg+0x135/0x1e0 [ 1026.105550][T12949] ? __pfx____sys_sendmsg+0x10/0x10 [ 1026.105602][T12949] ? __pfx_lock_release+0x10/0x10 [ 1026.105626][T12949] ? trace_lock_acquire+0x14e/0x1f0 [ 1026.105658][T12949] ? __fget_files+0x206/0x3a0 [ 1026.105692][T12949] __sys_sendmsg+0x16e/0x220 [ 1026.105711][T12949] ? __pfx___sys_sendmsg+0x10/0x10 [ 1026.105732][T12949] ? __x64_sys_futex+0x1e1/0x4c0 [ 1026.105772][T12949] do_syscall_64+0xcd/0x250 [ 1026.105802][T12949] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1026.105831][T12949] RIP: 0033:0x7f60bc78d169 [ 1026.105850][T12949] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1026.105873][T12949] RSP: 002b:00007f60bd54a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1026.105898][T12949] RAX: ffffffffffffffda RBX: 00007f60bc9a6080 RCX: 00007f60bc78d169 [ 1026.105915][T12949] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000006 [ 1026.105929][T12949] RBP: 00007f60bc80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1026.105943][T12949] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1026.105957][T12949] R13: 0000000000000000 R14: 00007f60bc9a6080 R15: 00007ffe25b87d28 [ 1026.105990][T12949] [ 1028.114175][T13005] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2905'. [ 1031.753022][T13127] busy [ 1031.892376][T13130] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2921'. [ 1032.158954][T13137] raw_sendmsg: syz.4.2923 forgot to set AF_INET. Fix it! [ 1033.752368][T13171] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2934'. [ 1033.966189][T13174] FAULT_INJECTION: forcing a failure. [ 1033.966189][T13174] name failslab, interval 1, probability 0, space 0, times 0 [ 1034.001018][T13174] CPU: 1 UID: 0 PID: 13174 Comm: syz.1.2933 Not tainted 6.14.0-syzkaller #0 [ 1034.001059][T13174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1034.001075][T13174] Call Trace: [ 1034.001083][T13174] [ 1034.001093][T13174] dump_stack_lvl+0x16c/0x1f0 [ 1034.001140][T13174] should_fail_ex+0x50a/0x650 [ 1034.001165][T13174] ? fs_reclaim_acquire+0xae/0x150 [ 1034.001201][T13174] ? sk_prot_alloc+0x1a8/0x2a0 [ 1034.001230][T13174] should_failslab+0xc2/0x120 [ 1034.001256][T13174] __kmalloc_noprof+0xcb/0x510 [ 1034.001291][T13174] ? find_held_lock+0x2d/0x110 [ 1034.001323][T13174] sk_prot_alloc+0x1a8/0x2a0 [ 1034.001352][T13174] sk_alloc+0x36/0xc20 [ 1034.001388][T13174] mISDN_sock_create+0x275/0x410 [ 1034.001422][T13174] __sock_create+0x335/0x8d0 [ 1034.001458][T13174] __sys_socket+0x14f/0x260 [ 1034.001488][T13174] ? __pfx___sys_socket+0x10/0x10 [ 1034.001519][T13174] ? rcu_is_watching+0x12/0xc0 [ 1034.001551][T13174] __x64_sys_socket+0x72/0xb0 [ 1034.001579][T13174] ? lockdep_hardirqs_on+0x7c/0x110 [ 1034.001612][T13174] do_syscall_64+0xcd/0x250 [ 1034.001658][T13174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1034.001697][T13174] RIP: 0033:0x7f133538d169 [ 1034.001718][T13174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1034.001742][T13174] RSP: 002b:00007f133626d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1034.001768][T13174] RAX: ffffffffffffffda RBX: 00007f13355a5fa0 RCX: 00007f133538d169 [ 1034.001786][T13174] RDX: 0000000000000024 RSI: 0000000000000002 RDI: 0000000000000022 [ 1034.001802][T13174] RBP: 00007f133540e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1034.001817][T13174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1034.001831][T13174] R13: 0000000000000000 R14: 00007f13355a5fa0 R15: 00007fff104db598 [ 1034.001862][T13174] [ 1034.436717][T13176] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1034.442939][T13176] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1034.490482][T13176] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1034.515100][T13176] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1035.015134][T13213] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2937'. [ 1036.456593][T31304] Bluetooth: hci0: command 0x0c1a tx timeout [ 1036.462872][T30219] Bluetooth: hci3: command 0x0c1a tx timeout [ 1036.536760][T30219] Bluetooth: hci1: command 0x0c1a tx timeout [ 1036.543078][T30219] Bluetooth: hci4: command 0x040f tx timeout [ 1037.621737][ T30] audit: type=1800 audit(4294968385.189:13): pid=13265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2947" name="dummy_udc" dev="gadgetfs" ino=6959 res=0 errno=0 [ 1037.956261][T30219] Bluetooth: hci4: unexpected subevent 0x01 length: 4 < 18 [ 1038.070246][ T30] audit: type=1800 audit(4294968385.639:14): pid=13244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2946" name="dbroot" dev="configfs" ino=84892 res=0 errno=0 [ 1038.416642][T13277] netlink: 'syz.4.2949': attribute type 7 has an invalid length. [ 1038.726442][T13242] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1038.746296][T13242] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1038.776905][T13242] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1038.816492][T13242] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1039.536617][T13305] netlink: 544 bytes leftover after parsing attributes in process `syz.4.2956'. [ 1039.628194][T13295] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2954'. [ 1039.896988][T30219] Bluetooth: hci0: command 0x0c1a tx timeout [ 1040.586149][T13319] busy [ 1040.776467][T30219] Bluetooth: hci4: command 0x040f tx timeout [ 1040.782641][T30219] Bluetooth: hci3: command 0x0c1a tx timeout [ 1040.817458][T13328] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2962'. [ 1040.857099][T30219] Bluetooth: hci1: command 0x0c1a tx timeout -/dev/ttyS0 ,  `/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/lu_gp_id /dev/sequencer2[ 1043.571188][T13396] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 1044.065588][T13420] Process accounting resumed [ 1044.074073][T13432] busy [ 1044.667660][T13431] netlink: 544 bytes leftover after parsing attributes in process `syz.2.2977'. [ 1044.693139][T13418] ima: policy update failed [ 1044.766533][ T30] audit: type=1802 audit(4294968469.306:15): pid=13418 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2975" res=0 errno=0 [ 1045.546174][T13465] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2979'. [ 1049.414564][T13648] FAULT_INJECTION: forcing a failure. [ 1049.414564][T13648] name failslab, interval 1, probability 0, space 0, times 0 [ 1049.516027][T13648] CPU: 1 UID: 0 PID: 13648 Comm: syz.2.2993 Not tainted 6.14.0-syzkaller #0 [ 1049.516065][T13648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1049.516082][T13648] Call Trace: [ 1049.516089][T13648] [ 1049.516099][T13648] dump_stack_lvl+0x16c/0x1f0 [ 1049.516145][T13648] should_fail_ex+0x50a/0x650 [ 1049.516170][T13648] ? fs_reclaim_acquire+0xae/0x150 [ 1049.516210][T13648] should_failslab+0xc2/0x120 [ 1049.516237][T13648] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1049.516273][T13648] ? get_random_u64+0x57e/0x7d0 [ 1049.516296][T13648] ? prepare_creds+0x2e/0x750 [ 1049.516330][T13648] prepare_creds+0x2e/0x750 [ 1049.516353][T13648] ? __pfx_get_random_u64+0x10/0x10 [ 1049.516376][T13648] copy_creds+0xa7/0xa50 [ 1049.516407][T13648] copy_process+0x10b2/0x8c50 [ 1049.516427][T13648] ? plist_add+0x458/0x600 [ 1049.516453][T13648] ? lock_acquire+0x2f/0xb0 [ 1049.516484][T13648] ? schedule+0x1fd/0x350 [ 1049.516512][T13648] ? futex_wait_queue+0x41/0x1f0 [ 1049.516539][T13648] ? schedule+0xf1/0x350 [ 1049.516567][T13648] ? futex_unqueue+0xba/0x140 [ 1049.516597][T13648] ? __pfx_copy_process+0x10/0x10 [ 1049.516618][T13648] ? __pfx___futex_wait+0x10/0x10 [ 1049.516652][T13648] ? try_to_wake_up+0x158/0x1490 [ 1049.516685][T13648] ? __pfx_futex_wake_mark+0x10/0x10 [ 1049.516729][T13648] kernel_clone+0xfd/0x960 [ 1049.516752][T13648] ? __pfx_kernel_clone+0x10/0x10 [ 1049.516793][T13648] __do_sys_clone+0xcf/0x120 [ 1049.516816][T13648] ? __pfx___do_sys_clone+0x10/0x10 [ 1049.516840][T13648] ? bpf_lsm_capable+0x9/0x10 [ 1049.516892][T13648] ? rcu_is_watching+0x12/0xc0 [ 1049.516929][T13648] do_syscall_64+0xcd/0x250 [ 1049.516967][T13648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1049.517001][T13648] RIP: 0033:0x7f60bc78d169 [ 1049.517021][T13648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1049.517044][T13648] RSP: 002b:00007f60bd507fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1049.517067][T13648] RAX: ffffffffffffffda RBX: 00007f60bc9a6240 RCX: 00007f60bc78d169 [ 1049.517083][T13648] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 1049.517096][T13648] RBP: 00007f60bc80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1049.517110][T13648] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1049.517125][T13648] R13: 0000000000000000 R14: 00007f60bc9a6240 R15: 00007ffe25b87d28 [ 1049.517156][T13648] [ 1051.546587][T13730] busy [ 1051.822637][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 1052.472036][T13767] bond0: no command found in slaves file - use +ifname or -ifname [ 1052.579624][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880126e0c00: rx timeout, send abort [ 1053.089899][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880126e0c00: abort rx timeout. Force session deactivation [ 1053.213303][T13766] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1053.250148][T13766] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1053.265437][T13766] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1053.281369][T13766] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1053.772644][T13853] busy [ 1054.257944][T13878] blktrace: Concurrent blktraces are not allowed on ram12 [ 1054.334484][T13874] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3018'. [ 1054.867206][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1054.874073][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.096509][T30219] Bluetooth: hci0: command 0x0c1a tx timeout [ 1055.258753][T30219] Bluetooth: hci3: command 0x0c1a tx timeout [ 1055.336617][T31304] Bluetooth: hci4: command 0x040f tx timeout [ 1055.342767][T30219] Bluetooth: hci1: command 0x0c1a tx timeout [ 1055.766567][T13902] busy [ 1056.062896][T13928] bridge0: port 3(syz_tun) entered blocking state [ 1056.069699][T13928] bridge0: port 3(syz_tun) entered disabled state [ 1056.076972][T13928] syz_tun: entered allmulticast mode [ 1056.083587][T13928] syz_tun: entered promiscuous mode [ 1056.132377][T13928] bridge0: port 3(syz_tun) entered blocking state [ 1056.139112][T13928] bridge0: port 3(syz_tun) entered forwarding state [ 1056.267007][T13932] vivid-003: ================= START STATUS ================= [ 1056.290195][T13932] vivid-003: Radio HW Seek Mode: Bounded [ 1056.308172][T13932] vivid-003: Radio Programmable HW Seek: false [ 1056.314447][T13932] vivid-003: RDS Rx I/O Mode: Block I/O [ 1056.336072][T13932] vivid-003: Generate RBDS Instead of RDS: false [ 1056.349244][T13932] vivid-003: RDS Reception: true [ 1056.354386][T13932] vivid-003: RDS Program Type: 0 inactive [ 1056.396974][T13932] vivid-003: RDS PS Name: inactive [ 1056.402332][T13932] vivid-003: RDS Radio Text: inactive [ 1056.447779][T13932] vivid-003: RDS Traffic Announcement: false inactive [ 1056.496085][T13932] vivid-003: RDS Traffic Program: false inactive [ 1056.545922][T13932] vivid-003: RDS Music: false inactive [ 1056.622738][T13932] vivid-003: ================== END STATUS ================== [ 1060.606010][T14051] FAULT_INJECTION: forcing a failure. [ 1060.606010][T14051] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1060.678397][T14051] CPU: 0 UID: 0 PID: 14051 Comm: syz.0.3035 Not tainted 6.14.0-syzkaller #0 [ 1060.678431][T14051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1060.678443][T14051] Call Trace: [ 1060.678450][T14051] [ 1060.678459][T14051] dump_stack_lvl+0x16c/0x1f0 [ 1060.678497][T14051] should_fail_ex+0x50a/0x650 [ 1060.678517][T14051] ? __pfx___might_resched+0x10/0x10 [ 1060.678551][T14051] should_fail_alloc_page+0xe7/0x130 [ 1060.678574][T14051] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1060.678610][T14051] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 1060.678647][T14051] ? __pfx_mark_lock+0x10/0x10 [ 1060.678687][T14051] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1060.678725][T14051] ? hlock_class+0x4e/0x130 [ 1060.678765][T14051] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1060.678809][T14051] ? policy_nodemask+0xea/0x4e0 [ 1060.678833][T14051] alloc_pages_mpol+0x1fc/0x540 [ 1060.678858][T14051] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1060.678882][T14051] ? find_held_lock+0x2d/0x110 [ 1060.678911][T14051] alloc_pages_noprof+0x131/0x390 [ 1060.678935][T14051] __pmd_alloc+0x3f/0x870 [ 1060.678968][T14051] __handle_mm_fault+0x94a/0x2a40 [ 1060.679011][T14051] ? __pfx___handle_mm_fault+0x10/0x10 [ 1060.679041][T14051] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1060.679091][T14051] ? find_vma+0xc0/0x140 [ 1060.679117][T14051] ? __pfx_find_vma+0x10/0x10 [ 1060.679148][T14051] handle_mm_fault+0x3fa/0xaa0 [ 1060.679187][T14051] do_user_addr_fault+0x7a3/0x13f0 [ 1060.679224][T14051] exc_page_fault+0x5c/0xc0 [ 1060.679251][T14051] asm_exc_page_fault+0x26/0x30 [ 1060.679276][T14051] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 1060.679299][T14051] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 1060.679317][T14051] RSP: 0018:ffffc9000cf477e0 EFLAGS: 00050206 [ 1060.679334][T14051] RAX: 0000000000000001 RBX: 00000000000000c4 RCX: 00000000000000c4 [ 1060.679345][T14051] RDX: ffffed1009d00cf9 RSI: 0000000000000000 RDI: ffff88804e806700 [ 1060.679358][T14051] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed1009d00cf8 [ 1060.679369][T14051] R10: ffff88804e8067c3 R11: 0000000000000000 R12: ffffc9000cf47d60 [ 1060.679381][T14051] R13: 00000000000000c4 R14: ffff88804e806700 R15: 00007ffffffff000 [ 1060.679410][T14051] _copy_from_iter+0x385/0x1560 [ 1060.679433][T14051] ? trace_lock_acquire+0x14e/0x1f0 [ 1060.679455][T14051] ? __alloc_skb+0x1fe/0x380 [ 1060.679484][T14051] ? __pfx__copy_from_iter+0x10/0x10 [ 1060.679503][T14051] ? __virt_addr_valid+0x1a4/0x590 [ 1060.679525][T14051] ? __virt_addr_valid+0x5e/0x590 [ 1060.679544][T14051] ? __phys_addr_symbol+0x30/0x80 [ 1060.679563][T14051] ? __check_object_size+0x488/0x710 [ 1060.679585][T14051] netlink_sendmsg+0x813/0xd70 [ 1060.679618][T14051] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1060.679655][T14051] ____sys_sendmsg+0xaaf/0xc90 [ 1060.679679][T14051] ? copy_msghdr_from_user+0x10b/0x160 [ 1060.679730][T14051] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1060.679752][T14051] ? __lock_acquire+0xcc5/0x3c40 [ 1060.679789][T14051] ___sys_sendmsg+0x135/0x1e0 [ 1060.679824][T14051] ? __pfx____sys_sendmsg+0x10/0x10 [ 1060.679864][T14051] ? trace_lock_acquire+0x14e/0x1f0 [ 1060.679904][T14051] __sys_sendmmsg+0x201/0x420 [ 1060.679925][T14051] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1060.679952][T14051] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1060.679990][T14051] ? fput+0x67/0x440 [ 1060.680010][T14051] ? ksys_write+0x1ba/0x250 [ 1060.680034][T14051] ? __pfx_ksys_write+0x10/0x10 [ 1060.680064][T14051] __x64_sys_sendmmsg+0x9c/0x100 [ 1060.680082][T14051] ? lockdep_hardirqs_on+0x7c/0x110 [ 1060.680125][T14051] do_syscall_64+0xcd/0x250 [ 1060.680153][T14051] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1060.680178][T14051] RIP: 0033:0x7fed4a78d169 [ 1060.680194][T14051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1060.680210][T14051] RSP: 002b:00007fed485f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1060.680233][T14051] RAX: ffffffffffffffda RBX: 00007fed4a9a5fa0 RCX: 00007fed4a78d169 [ 1060.680245][T14051] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1060.680257][T14051] RBP: 00007fed485f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1060.680268][T14051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1060.680279][T14051] R13: 0000000000000000 R14: 00007fed4a9a5fa0 R15: 00007ffc96d7a6d8 [ 1060.680304][T14051] [ 1061.422916][T14055] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3039'. [ 1061.843609][T14060] FAULT_INJECTION: forcing a failure. [ 1061.843609][T14060] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1061.912020][T14060] CPU: 1 UID: 0 PID: 14060 Comm: syz.4.3040 Not tainted 6.14.0-syzkaller #0 [ 1061.912052][T14060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1061.912065][T14060] Call Trace: [ 1061.912072][T14060] [ 1061.912079][T14060] dump_stack_lvl+0x16c/0x1f0 [ 1061.912116][T14060] should_fail_ex+0x50a/0x650 [ 1061.912142][T14060] _copy_to_user+0x32/0xd0 [ 1061.912169][T14060] simple_read_from_buffer+0xd0/0x160 [ 1061.912198][T14060] proc_fail_nth_read+0x198/0x270 [ 1061.912226][T14060] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1061.912251][T14060] ? rw_verify_area+0xcf/0x680 [ 1061.912275][T14060] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1061.912302][T14060] vfs_read+0x1df/0xbf0 [ 1061.912329][T14060] ? __fget_files+0x1fc/0x3a0 [ 1061.912359][T14060] ? __pfx___mutex_lock+0x10/0x10 [ 1061.912391][T14060] ? __pfx_vfs_read+0x10/0x10 [ 1061.912426][T14060] ? __fget_files+0x206/0x3a0 [ 1061.912474][T14060] ksys_read+0x12b/0x250 [ 1061.912502][T14060] ? __pfx_ksys_read+0x10/0x10 [ 1061.912536][T14060] do_syscall_64+0xcd/0x250 [ 1061.912571][T14060] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1061.912598][T14060] RIP: 0033:0x7fdac8b8bb7c [ 1061.912616][T14060] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1061.912635][T14060] RSP: 002b:00007fdac9a6c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1061.912658][T14060] RAX: ffffffffffffffda RBX: 00007fdac8da6080 RCX: 00007fdac8b8bb7c [ 1061.912671][T14060] RDX: 000000000000000f RSI: 00007fdac9a6c0a0 RDI: 0000000000000008 [ 1061.912683][T14060] RBP: 00007fdac9a6c090 R08: 0000000000000000 R09: 0000000000000000 [ 1061.912696][T14060] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1061.912710][T14060] R13: 0000000000000000 R14: 00007fdac8da6080 R15: 00007ffe6f9823f8 [ 1061.912740][T14060] [ 1062.409766][T14056] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1062.419299][T14059] kexec: Could not allocate control_code_buffer [ 1062.426630][T14056] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1062.459096][T14056] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1062.491620][T14056] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1063.847846][T14082] input input24: cannot allocate more than FF_MAX_EFFECTS effects [ 1064.296631][T30219] Bluetooth: hci0: command 0x0c1a tx timeout [ 1064.471759][T30219] Bluetooth: hci3: command 0x0c1a tx timeout [ 1064.536547][T30219] Bluetooth: hci1: command 0x0c1a tx timeout [ 1064.536553][T31304] Bluetooth: hci4: command 0x040f tx timeout [ 1065.143145][T14161] busy [ 1067.315826][T14180] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1067.323275][T14180] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1067.330089][T14180] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1067.337422][T14180] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1069.016551][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 1069.369736][T14207] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3060'. [ 1069.426628][ T5838] Bluetooth: hci4: command 0x040f tx timeout [ 1069.432768][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 1069.439105][T31304] Bluetooth: hci3: command 0x0c1a tx timeout [ 1069.688597][T14270] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3065'. [ 1070.762527][T14293] cifs: Unknown parameter 'no+ 1`rsFn)aHāh`9kA}1\D@.ZCg^' [ 1071.889445][T14309] FAULT_INJECTION: forcing a failure. [ 1071.889445][T14309] name failslab, interval 1, probability 0, space 0, times 0 [ 1071.933748][T14312] sg_read: process 583 (syz.2.3072) changed security contexts after opening file descriptor, this is not allowed. [ 1072.022392][T14309] CPU: 0 UID: 0 PID: 14309 Comm: syz.1.3071 Not tainted 6.14.0-syzkaller #0 [ 1072.022429][T14309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1072.022445][T14309] Call Trace: [ 1072.022453][T14309] [ 1072.022463][T14309] dump_stack_lvl+0x16c/0x1f0 [ 1072.022507][T14309] should_fail_ex+0x50a/0x650 [ 1072.022534][T14309] ? fs_reclaim_acquire+0xae/0x150 [ 1072.022571][T14309] should_failslab+0xc2/0x120 [ 1072.022596][T14309] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 1072.022636][T14309] ? rhashtable_init_noprof+0x4e9/0x7e0 [ 1072.022660][T14309] ? rhashtable_init_noprof+0x55e/0x7e0 [ 1072.022682][T14309] ? ipv4_frags_init_net+0x14d/0x3d0 [ 1072.022720][T14309] kmemdup_noprof+0x29/0x60 [ 1072.022751][T14309] ipv4_frags_init_net+0x14d/0x3d0 [ 1072.022784][T14309] ? __pfx_ipv4_frags_init_net+0x10/0x10 [ 1072.022816][T14309] ops_init+0x1df/0x5f0 [ 1072.022845][T14309] setup_net+0x21f/0x860 [ 1072.022872][T14309] ? __pfx_setup_net+0x10/0x10 [ 1072.022895][T14309] ? down_read_killable+0xcc/0x380 [ 1072.022931][T14309] ? __pfx_down_read_killable+0x10/0x10 [ 1072.022953][T14309] ? __raw_spin_lock_init+0x3a/0x110 [ 1072.022978][T14309] ? debug_mutex_init+0x37/0x70 [ 1072.023004][T14309] copy_net_ns+0x2a6/0x5f0 [ 1072.023031][T14309] create_new_namespaces+0x3ea/0xad0 [ 1072.023074][T14309] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1072.023108][T14309] ksys_unshare+0x45d/0xa40 [ 1072.023131][T14309] ? __pfx_ksys_unshare+0x10/0x10 [ 1072.023156][T14309] ? xfd_validate_state+0x5d/0x180 [ 1072.023201][T14309] __x64_sys_unshare+0x31/0x40 [ 1072.023227][T14309] do_syscall_64+0xcd/0x250 [ 1072.023267][T14309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1072.023300][T14309] RIP: 0033:0x7f133538d169 [ 1072.023323][T14309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1072.023347][T14309] RSP: 002b:00007f133626d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1072.023370][T14309] RAX: ffffffffffffffda RBX: 00007f13355a5fa0 RCX: 00007f133538d169 [ 1072.023386][T14309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1072.023404][T14309] RBP: 00007f133540e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1072.023420][T14309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1072.023435][T14309] R13: 0000000000000000 R14: 00007f13355a5fa0 R15: 00007fff104db598 [ 1072.023468][T14309] [ 1073.185404][T14349] Invalid ELF header magic: != ELF [ 1074.378563][T14394] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3077'. [ 1074.407904][T14123] Process accounting paused [ 1077.707494][T14529] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3083'. [ 1077.831389][T14532] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3084'. [ 1078.236668][T14262] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 1078.356585][ T30] audit: type=1800 audit(4294968510.889:16): pid=14565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3086" name="dbroot" dev="configfs" ino=87867 res=0 errno=0 [ 1079.219087][T14568] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3088'. [ 1080.190757][T14565] kexec: Could not allocate control_code_buffer [ 1080.453288][T14616] busy [ 1081.920966][T14262] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 1081.993782][ T30] audit: type=1800 audit(4294968514.559:17): pid=14656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3092" name="dbroot" dev="configfs" ino=88352 res=0 errno=0 [ 1082.380019][T14772] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3097'. [ 1083.123368][T14765] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1083.131978][T14765] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1083.146580][T14765] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1083.152954][T14765] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1083.238966][T14792] FAULT_INJECTION: forcing a failure. [ 1083.238966][T14792] name failslab, interval 1, probability 0, space 0, times 0 [ 1083.306645][T14792] CPU: 1 UID: 0 PID: 14792 Comm: syz.0.3103 Not tainted 6.14.0-syzkaller #0 [ 1083.306685][T14792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1083.306702][T14792] Call Trace: [ 1083.306710][T14792] [ 1083.306720][T14792] dump_stack_lvl+0x16c/0x1f0 [ 1083.306765][T14792] should_fail_ex+0x50a/0x650 [ 1083.306795][T14792] ? fs_reclaim_acquire+0xae/0x150 [ 1083.306831][T14792] ? snd_pcm_plugin_build+0x434/0x650 [ 1083.306865][T14792] should_failslab+0xc2/0x120 [ 1083.306890][T14792] __kmalloc_noprof+0xcb/0x510 [ 1083.306933][T14792] snd_pcm_plugin_build+0x434/0x650 [ 1083.306970][T14792] snd_pcm_plugin_build_io+0x208/0x5f0 [ 1083.307005][T14792] ? __pfx_snd_pcm_plugin_build_io+0x10/0x10 [ 1083.307041][T14792] ? kfree+0x2c4/0x4d0 [ 1083.307081][T14792] snd_pcm_oss_change_params_locked+0x2f08/0x3a60 [ 1083.307128][T14792] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1083.307159][T14792] ? __mutex_lock+0x1cc/0xb10 [ 1083.307220][T14792] snd_pcm_oss_get_active_substream+0x168/0x1d0 [ 1083.307255][T14792] snd_pcm_oss_set_channels+0x23e/0x370 [ 1083.307288][T14792] ? __pfx_snd_pcm_oss_set_channels+0x10/0x10 [ 1083.307318][T14792] ? lock_acquire+0x2f/0xb0 [ 1083.307352][T14792] ? __might_fault+0xe3/0x190 [ 1083.307383][T14792] snd_pcm_oss_ioctl+0x218d/0x3780 [ 1083.307412][T14792] ? trace_lock_acquire+0x14e/0x1f0 [ 1083.307445][T14792] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1083.307480][T14792] ? __fget_files+0x206/0x3a0 [ 1083.307518][T14792] ? __pfx_snd_pcm_oss_ioctl+0x10/0x10 [ 1083.307552][T14792] __x64_sys_ioctl+0x190/0x200 [ 1083.307597][T14792] do_syscall_64+0xcd/0x250 [ 1083.307639][T14792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1083.307673][T14792] RIP: 0033:0x7fed4a78d169 [ 1083.307694][T14792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1083.307718][T14792] RSP: 002b:00007fed485f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1083.307742][T14792] RAX: ffffffffffffffda RBX: 00007fed4a9a5fa0 RCX: 00007fed4a78d169 [ 1083.307759][T14792] RDX: 00002000000001c0 RSI: 00000000c0045006 RDI: 0000000000000005 [ 1083.307774][T14792] RBP: 00007fed4a80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1083.307790][T14792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1083.307805][T14792] R13: 0000000000000000 R14: 00007fed4a9a5fa0 R15: 00007ffc96d7a6d8 [ 1083.307835][T14792] [ 1084.129293][T14826] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3108'. [ 1084.267038][T14839] FAULT_INJECTION: forcing a failure. [ 1084.267038][T14839] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1084.292882][T14830] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3109'. [ 1084.297013][T14839] CPU: 0 UID: 0 PID: 14839 Comm: syz.0.3110 Not tainted 6.14.0-syzkaller #0 [ 1084.297044][T14839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1084.297057][T14839] Call Trace: [ 1084.297064][T14839] [ 1084.297072][T14839] dump_stack_lvl+0x16c/0x1f0 [ 1084.297112][T14839] should_fail_ex+0x50a/0x650 [ 1084.297139][T14839] _copy_to_user+0x32/0xd0 [ 1084.297168][T14839] simple_read_from_buffer+0xd0/0x160 [ 1084.297200][T14839] proc_fail_nth_read+0x198/0x270 [ 1084.297229][T14839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1084.297258][T14839] ? rw_verify_area+0xcf/0x680 [ 1084.297284][T14839] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1084.297311][T14839] vfs_read+0x1df/0xbf0 [ 1084.297344][T14839] ? __pfx_vfs_read+0x10/0x10 [ 1084.297373][T14839] ? do_sys_openat2+0xb1/0x1e0 [ 1084.297419][T14839] ? __pfx_do_sys_openat2+0x10/0x10 [ 1084.297457][T14839] ksys_read+0x12b/0x250 [ 1084.297483][T14839] ? __pfx_ksys_read+0x10/0x10 [ 1084.297520][T14839] do_syscall_64+0xcd/0x250 [ 1084.297558][T14839] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1084.297590][T14839] RIP: 0033:0x7fed4a78bb7c [ 1084.297609][T14839] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1084.297633][T14839] RSP: 002b:00007fed485f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1084.297655][T14839] RAX: ffffffffffffffda RBX: 00007fed4a9a5fa0 RCX: 00007fed4a78bb7c [ 1084.297670][T14839] RDX: 000000000000000f RSI: 00007fed485f60a0 RDI: 0000000000000004 [ 1084.297685][T14839] RBP: 00007fed485f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1084.297698][T14839] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1084.297710][T14839] R13: 0000000000000000 R14: 00007fed4a9a5fa0 R15: 00007ffc96d7a6d8 [ 1084.297748][T14839] [ 1084.536508][T14262] Bluetooth: hci0: command 0x0c1a tx timeout [ 1085.186804][T14262] Bluetooth: hci1: command 0x0c1a tx timeout [ 1085.186956][T30219] Bluetooth: hci4: command 0x040f tx timeout [ 1085.193026][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 1085.343619][T14910] FAULT_INJECTION: forcing a failure. [ 1085.343619][T14910] name failslab, interval 1, probability 0, space 0, times 0 [ 1085.415011][T30219] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 1085.453818][T14910] CPU: 1 UID: 0 PID: 14910 Comm: syz.1.3117 Not tainted 6.14.0-syzkaller #0 [ 1085.453857][T14910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1085.453875][T14910] Call Trace: [ 1085.453884][T14910] [ 1085.453894][T14910] dump_stack_lvl+0x16c/0x1f0 [ 1085.453942][T14910] should_fail_ex+0x50a/0x650 [ 1085.453967][T14910] ? fs_reclaim_acquire+0xae/0x150 [ 1085.454004][T14910] should_failslab+0xc2/0x120 [ 1085.454032][T14910] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1085.454071][T14910] ? __pfx___might_resched+0x10/0x10 [ 1085.454108][T14910] ? __anon_vma_prepare+0xae/0x5e0 [ 1085.454149][T14910] __anon_vma_prepare+0xae/0x5e0 [ 1085.454182][T14910] ? __pfx___pte_alloc+0x10/0x10 [ 1085.454216][T14910] __vmf_anon_prepare+0x11c/0x240 [ 1085.454249][T14910] do_pte_missing+0x1032/0x3e10 [ 1085.454289][T14910] ? _raw_spin_unlock+0x28/0x50 [ 1085.454320][T14910] ? __pmd_alloc+0x3c2/0x870 [ 1085.454354][T14910] __handle_mm_fault+0x103c/0x2a40 [ 1085.454408][T14910] ? __pfx___handle_mm_fault+0x10/0x10 [ 1085.454482][T14910] handle_mm_fault+0x3fa/0xaa0 [ 1085.454532][T14910] __get_user_pages+0x773/0x36f0 [ 1085.454581][T14910] ? __pfx_mt_find+0x10/0x10 [ 1085.454618][T14910] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1085.454652][T14910] ? __pfx___get_user_pages+0x10/0x10 [ 1085.454687][T14910] ? __mm_populate+0x21d/0x380 [ 1085.454729][T14910] populate_vma_page_range+0x27f/0x3a0 [ 1085.454767][T14910] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1085.454802][T14910] ? __pfx_find_vma_intersection+0x10/0x10 [ 1085.454835][T14910] ? vm_mmap_pgoff+0x31a/0x440 [ 1085.454874][T14910] __mm_populate+0x1d6/0x380 [ 1085.454911][T14910] ? __pfx___mm_populate+0x10/0x10 [ 1085.454950][T14910] ? up_write+0x1b2/0x520 [ 1085.454990][T14910] vm_mmap_pgoff+0x352/0x440 [ 1085.455027][T14910] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1085.455069][T14910] ? __x64_sys_futex+0x1e1/0x4c0 [ 1085.455098][T14910] ? __x64_sys_futex+0x1ea/0x4c0 [ 1085.455132][T14910] ksys_mmap_pgoff+0x7d/0x5c0 [ 1085.455162][T14910] ? rcu_is_watching+0x12/0xc0 [ 1085.455192][T14910] __x64_sys_mmap+0x125/0x190 [ 1085.455232][T14910] do_syscall_64+0xcd/0x250 [ 1085.455270][T14910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1085.455304][T14910] RIP: 0033:0x7f133538d169 [ 1085.455325][T14910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1085.455349][T14910] RSP: 002b:00007f133626d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1085.455375][T14910] RAX: ffffffffffffffda RBX: 00007f13355a5fa0 RCX: 00007f133538d169 [ 1085.455392][T14910] RDX: ffffffffffeffffe RSI: 0000000000400005 RDI: 0000000000000000 [ 1085.455415][T14910] RBP: 00007f133540e2a0 R08: 0000000000000c76 R09: 0000000000008000 [ 1085.455431][T14910] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1085.455447][T14910] R13: 0000000000000000 R14: 00007f13355a5fa0 R15: 00007fff104db598 [ 1085.455482][T14910] [ 1086.175581][T14925] FAULT_INJECTION: forcing a failure. [ 1086.175581][T14925] name failslab, interval 1, probability 0, space 0, times 0 [ 1086.224713][T14925] CPU: 1 UID: 0 PID: 14925 Comm: syz.1.3117 Not tainted 6.14.0-syzkaller #0 [ 1086.224750][T14925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1086.224766][T14925] Call Trace: [ 1086.224774][T14925] [ 1086.224784][T14925] dump_stack_lvl+0x16c/0x1f0 [ 1086.224828][T14925] should_fail_ex+0x50a/0x650 [ 1086.224853][T14925] ? fs_reclaim_acquire+0xae/0x150 [ 1086.224890][T14925] should_failslab+0xc2/0x120 [ 1086.224915][T14925] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1086.224955][T14925] ? jbd2__journal_start+0x193/0x6a0 [ 1086.224997][T14925] jbd2__journal_start+0x193/0x6a0 [ 1086.225039][T14925] __ext4_journal_start_sb+0x19f/0x660 [ 1086.225071][T14925] ? ext4_dirty_inode+0xa1/0x130 [ 1086.225105][T14925] ? __pfx_ext4_dirty_inode+0x10/0x10 [ 1086.225137][T14925] ext4_dirty_inode+0xa1/0x130 [ 1086.225168][T14925] ? rcu_is_watching+0x12/0xc0 [ 1086.225200][T14925] __mark_inode_dirty+0x1ec/0xe50 [ 1086.225235][T14925] generic_update_time+0xcf/0xf0 [ 1086.225265][T14925] file_modified+0x207/0x240 [ 1086.225302][T14925] ext4_punch_hole+0x34a/0x10d0 [ 1086.225351][T14925] ext4_fallocate+0x9b7/0x3950 [ 1086.225389][T14925] ? rcu_is_watching+0x12/0xc0 [ 1086.225417][T14925] ? trace_lock_acquire+0x14e/0x1f0 [ 1086.225447][T14925] ? madvise_vma_behavior+0x1ae3/0x1de0 [ 1086.225479][T14925] ? __pfx_ext4_fallocate+0x10/0x10 [ 1086.225516][T14925] vfs_fallocate+0x60d/0x10d0 [ 1086.225552][T14925] ? __pfx_vfs_fallocate+0x10/0x10 [ 1086.225588][T14925] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1086.225631][T14925] madvise_vma_behavior+0x1ae3/0x1de0 [ 1086.225664][T14925] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1086.225694][T14925] ? find_vma_prev+0xdb/0x160 [ 1086.225726][T14925] ? __pfx_find_vma_prev+0x10/0x10 [ 1086.225767][T14925] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 1086.225805][T14925] ? do_madvise+0x2b3/0x7c0 [ 1086.225835][T14925] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 1086.225860][T14925] madvise_walk_vmas+0x1cf/0x2c0 [ 1086.225888][T14925] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 1086.225925][T14925] do_madvise+0x366/0x7c0 [ 1086.225956][T14925] ? __pfx_do_madvise+0x10/0x10 [ 1086.225982][T14925] ? __x64_sys_futex+0x1e1/0x4c0 [ 1086.226012][T14925] ? rcu_is_watching+0x12/0xc0 [ 1086.226039][T14925] __x64_sys_madvise+0xa9/0x110 [ 1086.226065][T14925] ? lockdep_hardirqs_on+0x7c/0x110 [ 1086.226098][T14925] do_syscall_64+0xcd/0x250 [ 1086.226135][T14925] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1086.226169][T14925] RIP: 0033:0x7f133538d169 [ 1086.226189][T14925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1086.226212][T14925] RSP: 002b:00007f133622b038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 1086.226238][T14925] RAX: ffffffffffffffda RBX: 00007f13355a6160 RCX: 00007f133538d169 [ 1086.226255][T14925] RDX: 0000000000000009 RSI: 00000000000031ca RDI: 000000110c230000 [ 1086.226271][T14925] RBP: 00007f133540e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1086.226295][T14925] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1086.226311][T14925] R13: 0000000000000000 R14: 00007f13355a6160 R15: 00007fff104db598 [ 1086.226341][T14925] [ 1087.674125][T14944] page: refcount:5 mapcount:4 mapping:0000000000000000 index:0xffff888078000000 pfn:0x78000 [ 1087.689754][T14944] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 1087.706044][T14944] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 1087.765879][T14944] raw: ffff888078000000 0000000000000000 0000000500000003 0000000000000000 [ 1087.778580][T14944] page dumped because: unmovable page [ 1087.785456][T14944] page_owner tracks the page as allocated [ 1087.800202][T14944] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 7707, tgid 7707 (syz-executor), ts 908711160510, free_ts 902255397635 [ 1087.873888][T14944] post_alloc_hook+0x181/0x1b0 [ 1087.884236][T14944] get_page_from_freelist+0xfce/0x2f80 [ 1087.894068][T14944] __alloc_frozen_pages_noprof+0x221/0x2470 [ 1087.929765][T14944] alloc_pages_mpol+0x1fc/0x540 [ 1087.934892][T14944] alloc_pages_noprof+0x131/0x390 [ 1087.990180][T14944] __vmalloc_node_range_noprof+0x721/0x1530 [ 1088.011102][T14944] vmalloc_user_noprof+0x6b/0x90 [ 1088.016185][T14944] kcov_ioctl+0x4c/0x730 [ 1088.032214][T14944] __x64_sys_ioctl+0x190/0x200 [ 1088.055162][T14944] do_syscall_64+0xcd/0x250 [ 1088.072388][T14944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.096499][T14944] page last free pid 7558 tgid 7552 stack trace: [ 1088.113329][T14944] free_frozen_pages+0x6db/0xfb0 [ 1088.126504][T14944] __put_partials+0x14c/0x170 [ 1088.147296][T14944] qlist_free_all+0x4e/0x120 [ 1088.152104][T14944] kasan_quarantine_reduce+0x195/0x1e0 [ 1088.176495][T14944] __kasan_slab_alloc+0x69/0x90 [ 1088.181496][T14944] kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 1088.206402][T14944] zswap_store+0x84e/0x2690 [ 1088.211121][T14944] swap_writepage+0x3b6/0x1120 [ 1088.231449][T14944] pageout+0x3b2/0xaa0 [ 1088.235740][T14944] shrink_folio_list+0x2f7f/0x40c0 [ 1088.256492][T14944] reclaim_folio_list+0xd8/0x5e0 [ 1088.261630][T14944] reclaim_pages+0x481/0x650 [ 1088.266720][T14944] madvise_cold_or_pageout_pte_range+0x13ae/0x20d0 [ 1088.276397][T14944] walk_pgd_range+0xc7b/0x1a70 [ 1088.281273][T14944] __walk_page_range+0x161/0x820 [ 1088.306505][T14944] walk_page_range_mm+0x55a/0x940 [ 1088.663670][T15020] FAULT_INJECTION: forcing a failure. [ 1088.663670][T15020] name failslab, interval 1, probability 0, space 0, times 0 [ 1088.828507][T15020] CPU: 1 UID: 0 PID: 15020 Comm: syz.0.3128 Not tainted 6.14.0-syzkaller #0 [ 1088.828542][T15020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1088.828556][T15020] Call Trace: [ 1088.828563][T15020] [ 1088.828573][T15020] dump_stack_lvl+0x16c/0x1f0 [ 1088.828612][T15020] should_fail_ex+0x50a/0x650 [ 1088.828636][T15020] ? fs_reclaim_acquire+0xae/0x150 [ 1088.828668][T15020] ? vb2_core_allocated_buffers_storage+0x184/0x220 [ 1088.828702][T15020] should_failslab+0xc2/0x120 [ 1088.828726][T15020] __kmalloc_noprof+0xcb/0x510 [ 1088.828767][T15020] vb2_core_allocated_buffers_storage+0x184/0x220 [ 1088.828803][T15020] vb2_core_reqbufs+0x381/0xfb0 [ 1088.828843][T15020] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 1088.828897][T15020] __vb2_init_fileio+0x3f3/0x1110 [ 1088.828930][T15020] ? __mutex_lock+0x1cc/0xb10 [ 1088.828965][T15020] ? vb2_fop_read+0xe2/0x3e0 [ 1088.829000][T15020] __vb2_perform_fileio+0x9de/0x1620 [ 1088.829050][T15020] ? __pfx___vb2_perform_fileio+0x10/0x10 [ 1088.829086][T15020] ? iovec_from_user.part.0+0x7e/0x130 [ 1088.829119][T15020] vb2_fop_read+0x213/0x3e0 [ 1088.829157][T15020] v4l2_read+0x226/0x360 [ 1088.829183][T15020] ? __pfx_v4l2_read+0x10/0x10 [ 1088.829209][T15020] vfs_readv+0x6c2/0x8a0 [ 1088.829236][T15020] ? find_held_lock+0x2d/0x110 [ 1088.829270][T15020] ? __pfx_vfs_readv+0x10/0x10 [ 1088.829296][T15020] ? find_held_lock+0x2d/0x110 [ 1088.829328][T15020] ? __pfx_lock_release+0x10/0x10 [ 1088.829358][T15020] ? trace_lock_acquire+0x14e/0x1f0 [ 1088.829397][T15020] ? __fget_files+0x206/0x3a0 [ 1088.829439][T15020] ? do_readv+0x133/0x340 [ 1088.829468][T15020] do_readv+0x133/0x340 [ 1088.829495][T15020] ? __pfx_do_readv+0x10/0x10 [ 1088.829534][T15020] do_syscall_64+0xcd/0x250 [ 1088.829570][T15020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1088.829603][T15020] RIP: 0033:0x7fed4a78d169 [ 1088.829622][T15020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1088.829644][T15020] RSP: 002b:00007fed485f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 1088.829667][T15020] RAX: ffffffffffffffda RBX: 00007fed4a9a5fa0 RCX: 00007fed4a78d169 [ 1088.829683][T15020] RDX: 0000000000000008 RSI: 0000200000000080 RDI: 0000000000000003 [ 1088.829698][T15020] RBP: 00007fed485f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1088.829711][T15020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1088.829725][T15020] R13: 0000000000000000 R14: 00007fed4a9a5fa0 R15: 00007ffc96d7a6d8 [ 1088.829758][T15020] [ 1090.002385][T15098] FAULT_INJECTION: forcing a failure. [ 1090.002385][T15098] name failslab, interval 1, probability 0, space 0, times 0 [ 1090.016319][T15098] CPU: 0 UID: 0 PID: 15098 Comm: syz.4.3135 Not tainted 6.14.0-syzkaller #0 [ 1090.016352][T15098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1090.016367][T15098] Call Trace: [ 1090.016374][T15098] [ 1090.016382][T15098] dump_stack_lvl+0x16c/0x1f0 [ 1090.016426][T15098] should_fail_ex+0x50a/0x650 [ 1090.016451][T15098] ? fs_reclaim_acquire+0xae/0x150 [ 1090.016486][T15098] should_failslab+0xc2/0x120 [ 1090.016510][T15098] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1090.016545][T15098] ? security_inode_alloc+0x3b/0x2b0 [ 1090.016575][T15098] security_inode_alloc+0x3b/0x2b0 [ 1090.016604][T15098] inode_init_always_gfp+0xce4/0x1030 [ 1090.016644][T15098] alloc_inode+0x82/0x230 [ 1090.016667][T15098] sock_alloc+0x40/0x280 [ 1090.016694][T15098] __sock_create+0xc1/0x8d0 [ 1090.016724][T15098] ? crng_make_state+0x27d/0x6d0 [ 1090.016764][T15098] udp_sock_create4+0xa7/0x450 [ 1090.016797][T15098] ? __pfx_udp_sock_create4+0x10/0x10 [ 1090.016852][T15098] ? mark_held_locks+0x9f/0xe0 [ 1090.016891][T15098] ? lockdep_hardirqs_on+0x7c/0x110 [ 1090.016925][T15098] ? crng_make_state+0x48e/0x6d0 [ 1090.016964][T15098] rxrpc_open_socket+0x500/0x6c0 [ 1090.016997][T15098] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 1090.017042][T15098] ? lockdep_init_map_type+0x16d/0x7d0 [ 1090.017077][T15098] ? rcu_is_watching+0x12/0xc0 [ 1090.017107][T15098] rxrpc_lookup_local+0xa02/0x1220 [ 1090.017143][T15098] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 1090.017177][T15098] ? __local_bh_enable_ip+0xa4/0x120 [ 1090.017216][T15098] rxrpc_sendmsg+0x375/0x5f0 [ 1090.017252][T15098] ____sys_sendmsg+0xaaf/0xc90 [ 1090.017282][T15098] ? copy_msghdr_from_user+0x10b/0x160 [ 1090.017317][T15098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1090.017361][T15098] ___sys_sendmsg+0x135/0x1e0 [ 1090.017398][T15098] ? __pfx____sys_sendmsg+0x10/0x10 [ 1090.017449][T15098] ? __pfx_lock_release+0x10/0x10 [ 1090.017479][T15098] ? trace_lock_acquire+0x14e/0x1f0 [ 1090.017516][T15098] ? __fget_files+0x206/0x3a0 [ 1090.017556][T15098] __sys_sendmsg+0x16e/0x220 [ 1090.017578][T15098] ? __pfx___sys_sendmsg+0x10/0x10 [ 1090.017599][T15098] ? __x64_sys_futex+0x1e1/0x4c0 [ 1090.017649][T15098] do_syscall_64+0xcd/0x250 [ 1090.017686][T15098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1090.017717][T15098] RIP: 0033:0x7fdac8b8d169 [ 1090.017738][T15098] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1090.017760][T15098] RSP: 002b:00007fdac9a8d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1090.017785][T15098] RAX: ffffffffffffffda RBX: 00007fdac8da5fa0 RCX: 00007fdac8b8d169 [ 1090.017802][T15098] RDX: 0a00000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1090.017817][T15098] RBP: 00007fdac8c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1090.017829][T15098] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1090.017852][T15098] R13: 0000000000000000 R14: 00007fdac8da5fa0 R15: 00007ffe6f9823f8 [ 1090.017885][T15098] [ 1090.317329][T15098] socket: no more sockets [ 1090.415270][T15100] busy [ 1091.290203][T15103] netlink: 342 bytes leftover after parsing attributes in process `syz.2.3137'. [ 1091.388331][T15202] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3144'. [ 1091.615792][T30219] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 1091.765250][ T30] audit: type=1800 audit(4294968524.289:18): pid=15132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3142" name="dbroot" dev="configfs" ino=89527 res=0 errno=0 [ 1092.635233][T15274] busy [ 1094.659084][T15363] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3157'. [ 1095.538363][T15442] FAULT_INJECTION: forcing a failure. [ 1095.538363][T15442] name failslab, interval 1, probability 0, space 0, times 0 [ 1095.607005][T15442] CPU: 1 UID: 0 PID: 15442 Comm: syz.1.3160 Not tainted 6.14.0-syzkaller #0 [ 1095.607040][T15442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1095.607053][T15442] Call Trace: [ 1095.607060][T15442] [ 1095.607069][T15442] dump_stack_lvl+0x16c/0x1f0 [ 1095.607108][T15442] should_fail_ex+0x50a/0x650 [ 1095.607131][T15442] ? fs_reclaim_acquire+0xae/0x150 [ 1095.607161][T15442] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1095.607187][T15442] should_failslab+0xc2/0x120 [ 1095.607210][T15442] __kmalloc_noprof+0xcb/0x510 [ 1095.607243][T15442] ? kasan_quarantine_put+0x10a/0x240 [ 1095.607282][T15442] ? lockdep_hardirqs_on+0x7c/0x110 [ 1095.607317][T15442] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 1095.607348][T15442] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 1095.607384][T15442] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1095.607410][T15442] ? trace_cap_capable+0x1a2/0x210 [ 1095.607443][T15442] ? bpf_lsm_capable+0x9/0x10 [ 1095.607474][T15442] ? security_capable+0x7e/0x260 [ 1095.607496][T15442] ? ns_capable+0xd7/0x110 [ 1095.607529][T15442] genl_rcv_msg+0x565/0x800 [ 1095.607556][T15442] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1095.607581][T15442] ? __pfx_ovs_vport_cmd_set+0x10/0x10 [ 1095.607627][T15442] netlink_rcv_skb+0x16b/0x440 [ 1095.607659][T15442] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1095.607687][T15442] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1095.607733][T15442] ? down_read+0xc9/0x330 [ 1095.607765][T15442] ? __pfx_down_read+0x10/0x10 [ 1095.607798][T15442] ? netlink_deliver_tap+0x1ae/0xd30 [ 1095.607833][T15442] genl_rcv+0x28/0x40 [ 1095.607853][T15442] netlink_unicast+0x53c/0x7f0 [ 1095.607909][T15442] ? __pfx_netlink_unicast+0x10/0x10 [ 1095.607942][T15442] ? __phys_addr_symbol+0x30/0x80 [ 1095.607964][T15442] ? __check_object_size+0x488/0x710 [ 1095.608018][T15442] netlink_sendmsg+0x8b8/0xd70 [ 1095.608055][T15442] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1095.608099][T15442] ____sys_sendmsg+0xaaf/0xc90 [ 1095.608128][T15442] ? copy_msghdr_from_user+0x10b/0x160 [ 1095.608161][T15442] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1095.608207][T15442] ___sys_sendmsg+0x135/0x1e0 [ 1095.608242][T15442] ? __pfx____sys_sendmsg+0x10/0x10 [ 1095.608296][T15442] ? __pfx_lock_release+0x10/0x10 [ 1095.608325][T15442] ? trace_lock_acquire+0x14e/0x1f0 [ 1095.608369][T15442] ? __fget_files+0x206/0x3a0 [ 1095.608409][T15442] __sys_sendmsg+0x16e/0x220 [ 1095.608431][T15442] ? __pfx___sys_sendmsg+0x10/0x10 [ 1095.608473][T15442] do_syscall_64+0xcd/0x250 [ 1095.608507][T15442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1095.608538][T15442] RIP: 0033:0x7f133538d169 [ 1095.608557][T15442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1095.608577][T15442] RSP: 002b:00007f133626d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1095.608598][T15442] RAX: ffffffffffffffda RBX: 00007f13355a5fa0 RCX: 00007f133538d169 [ 1095.608612][T15442] RDX: 0000000000000040 RSI: 00002000000001c0 RDI: 0000000000000003 [ 1095.608634][T15442] RBP: 00007f133626d090 R08: 0000000000000000 R09: 0000000000000000 [ 1095.608647][T15442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1095.608660][T15442] R13: 0000000000000000 R14: 00007f13355a5fa0 R15: 00007fff104db598 [ 1095.608690][T15442] [ 1096.327077][T15453] busy [ 1098.174164][T15486] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3166'. [ 1098.372325][T15527] Invalid ELF header magic: != ELF [ 1099.036800][ T30] audit: type=1800 audit(4294968531.599:19): pid=15566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3170" name="dummy_udc" dev="gadgetfs" ino=6959 res=0 errno=0 [ 1100.750770][T15657] busy [ 1102.402186][T15735] busy [ 1102.582162][T15733] netlink: 342 bytes leftover after parsing attributes in process `syz.4.3179'. [ 1103.589066][T15753] FAULT_INJECTION: forcing a failure. [ 1103.589066][T15753] name failslab, interval 1, probability 0, space 0, times 0 [ 1103.612407][T15756] netlink: 544 bytes leftover after parsing attributes in process `syz.2.3184'. [ 1103.738545][T15753] CPU: 0 UID: 0 PID: 15753 Comm: syz.0.3182 Not tainted 6.14.0-syzkaller #0 [ 1103.738583][T15753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1103.738599][T15753] Call Trace: [ 1103.738608][T15753] [ 1103.738620][T15753] dump_stack_lvl+0x16c/0x1f0 [ 1103.738666][T15753] should_fail_ex+0x50a/0x650 [ 1103.738691][T15753] ? fs_reclaim_acquire+0xae/0x150 [ 1103.738726][T15753] ? lsm_blob_alloc+0x68/0x90 [ 1103.738764][T15753] should_failslab+0xc2/0x120 [ 1103.738789][T15753] __kmalloc_noprof+0xcb/0x510 [ 1103.738832][T15753] lsm_blob_alloc+0x68/0x90 [ 1103.738869][T15753] security_sk_alloc+0x30/0x270 [ 1103.738899][T15753] sk_prot_alloc+0xfb/0x2a0 [ 1103.738932][T15753] sk_alloc+0x36/0xc20 [ 1103.738968][T15753] inet_create+0x3a1/0x10a0 [ 1103.738996][T15753] ? inet_create+0x90/0x10a0 [ 1103.739026][T15753] __sock_create+0x335/0x8d0 [ 1103.739063][T15753] udp_sock_create4+0xa7/0x450 [ 1103.739096][T15753] ? __pfx_udp_sock_create4+0x10/0x10 [ 1103.739133][T15753] ? mark_held_locks+0x9f/0xe0 [ 1103.739173][T15753] ? lockdep_hardirqs_on+0x7c/0x110 [ 1103.739209][T15753] ? crng_make_state+0x48e/0x6d0 [ 1103.739253][T15753] rxrpc_open_socket+0x500/0x6c0 [ 1103.739285][T15753] ? __pfx_rxrpc_open_socket+0x10/0x10 [ 1103.739331][T15753] ? lockdep_init_map_type+0x16d/0x7d0 [ 1103.739367][T15753] ? rcu_is_watching+0x12/0xc0 [ 1103.739399][T15753] rxrpc_lookup_local+0xa02/0x1220 [ 1103.739441][T15753] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 1103.739476][T15753] ? __local_bh_enable_ip+0xa4/0x120 [ 1103.739516][T15753] rxrpc_sendmsg+0x375/0x5f0 [ 1103.739566][T15753] ____sys_sendmsg+0xaaf/0xc90 [ 1103.739598][T15753] ? copy_msghdr_from_user+0x10b/0x160 [ 1103.739638][T15753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1103.739688][T15753] ___sys_sendmsg+0x135/0x1e0 [ 1103.739732][T15753] ? __pfx____sys_sendmsg+0x10/0x10 [ 1103.739787][T15753] ? __pfx_lock_release+0x10/0x10 [ 1103.739818][T15753] ? trace_lock_acquire+0x14e/0x1f0 [ 1103.739859][T15753] ? __fget_files+0x206/0x3a0 [ 1103.739903][T15753] __sys_sendmsg+0x16e/0x220 [ 1103.739932][T15753] ? __pfx___sys_sendmsg+0x10/0x10 [ 1103.739956][T15753] ? __x64_sys_futex+0x1e1/0x4c0 [ 1103.740009][T15753] do_syscall_64+0xcd/0x250 [ 1103.740047][T15753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1103.740082][T15753] RIP: 0033:0x7fed4a78d169 [ 1103.740105][T15753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1103.740129][T15753] RSP: 002b:00007fed485f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1103.740154][T15753] RAX: ffffffffffffffda RBX: 00007fed4a9a5fa0 RCX: 00007fed4a78d169 [ 1103.740172][T15753] RDX: 1f00000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 1103.740188][T15753] RBP: 00007fed4a80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1103.740205][T15753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1103.740221][T15753] R13: 0000000000000000 R14: 00007fed4a9a5fa0 R15: 00007ffc96d7a6d8 [ 1103.740257][T15753] [ 1104.096809][T15757] random: crng reseeded on system resumption [ 1104.448494][T15758] Process accounting resumed [ 1104.850883][T15777] ptrace attach of "./syz-executor exec"[7739] was attempted by "./syz-executor exec"[15777] [ 1107.506408][T15829] busy [ 1108.548447][T15872] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input25 [ 1110.015112][T15911] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1110.025037][T15911] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1110.054256][T15911] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1110.062329][T15911] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1110.292609][T15949] Invalid ELF header magic: != ELF [ 1111.229146][T15963] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1111.251730][T15963] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1111.264266][T15963] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1111.298052][T15963] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1112.536723][T30219] Bluetooth: hci0: command 0x0c1a tx timeout [ 1112.904105][T16025] busy [ 1113.256810][T30219] Bluetooth: hci3: command 0x0c1a tx timeout [ 1113.336606][T30219] Bluetooth: hci1: command 0x0c1a tx timeout [ 1113.343004][T14262] Bluetooth: hci4: command 0x040f tx timeout [ 1113.792500][T16031] FAULT_INJECTION: forcing a failure. [ 1113.792500][T16031] name failslab, interval 1, probability 0, space 0, times 0 [ 1113.807982][T16031] CPU: 0 UID: 0 PID: 16031 Comm: syz.4.3221 Not tainted 6.14.0-syzkaller #0 [ 1113.808012][T16031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1113.808026][T16031] Call Trace: [ 1113.808033][T16031] [ 1113.808041][T16031] dump_stack_lvl+0x16c/0x1f0 [ 1113.808080][T16031] should_fail_ex+0x50a/0x650 [ 1113.808103][T16031] ? fs_reclaim_acquire+0xae/0x150 [ 1113.808134][T16031] ? s_start+0x7b/0x320 [ 1113.808163][T16031] should_failslab+0xc2/0x120 [ 1113.808186][T16031] __kmalloc_cache_noprof+0x68/0x410 [ 1113.808216][T16031] ? trace_kmalloc+0x2d/0xd0 [ 1113.808240][T16031] ? __kmalloc_node_noprof+0x23d/0x510 [ 1113.808279][T16031] s_start+0x7b/0x320 [ 1113.808313][T16031] seq_read_iter+0x2ab/0x12b0 [ 1113.808359][T16031] seq_read+0x39f/0x4e0 [ 1113.808387][T16031] ? __pfx_seq_read+0x10/0x10 [ 1113.808436][T16031] ? rw_verify_area+0xcf/0x680 [ 1113.808463][T16031] ? __pfx_seq_read+0x10/0x10 [ 1113.808492][T16031] vfs_read+0x1df/0xbf0 [ 1113.808522][T16031] ? __fget_files+0x1fc/0x3a0 [ 1113.808549][T16031] ? __pfx___mutex_lock+0x10/0x10 [ 1113.808589][T16031] ? __pfx_vfs_read+0x10/0x10 [ 1113.808628][T16031] ? __fget_files+0x206/0x3a0 [ 1113.808667][T16031] ksys_read+0x12b/0x250 [ 1113.808695][T16031] ? __pfx_ksys_read+0x10/0x10 [ 1113.808734][T16031] do_syscall_64+0xcd/0x250 [ 1113.808768][T16031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1113.808800][T16031] RIP: 0033:0x7fdac8b8d169 [ 1113.808820][T16031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1113.808841][T16031] RSP: 002b:00007fdac9a8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1113.808863][T16031] RAX: ffffffffffffffda RBX: 00007fdac8da5fa0 RCX: 00007fdac8b8d169 [ 1113.808878][T16031] RDX: 0000000000000f34 RSI: 0000000000000000 RDI: 0000000000000003 [ 1113.808892][T16031] RBP: 00007fdac9a8d090 R08: 0000000000000000 R09: 0000000000000000 [ 1113.808905][T16031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1113.808918][T16031] R13: 0000000000000000 R14: 00007fdac8da5fa0 R15: 00007ffe6f9823f8 [ 1113.808949][T16031] [ 1113.808962][T16031] [ 1114.020594][T16031] ===================================== [ 1114.026147][T16031] WARNING: bad unlock balance detected! [ 1114.031779][T16031] 6.14.0-syzkaller #0 Not tainted [ 1114.036894][T16031] ------------------------------------- [ 1114.042446][T16031] syz.4.3221/16031 is trying to release lock (event_mutex) at: [ 1114.050011][T16031] [] seq_read_iter+0x5ff/0x12b0 [ 1114.056453][T16031] but there are no more locks to release! [ 1114.062174][T16031] [ 1114.062174][T16031] other info that might help us debug this: [ 1114.070244][T16031] 2 locks held by syz.4.3221/16031: [ 1114.075445][T16031] #0: ffff88805a4ea9b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 1114.084557][T16031] #1: ffff8880298ff9e0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xd8/0x12b0 [ 1114.093567][T16031] [ 1114.093567][T16031] stack backtrace: [ 1114.099462][T16031] CPU: 0 UID: 0 PID: 16031 Comm: syz.4.3221 Not tainted 6.14.0-syzkaller #0 [ 1114.099486][T16031] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1114.099497][T16031] Call Trace: [ 1114.099505][T16031] [ 1114.099514][T16031] dump_stack_lvl+0x116/0x1f0 [ 1114.099552][T16031] ? seq_read_iter+0x5ff/0x12b0 [ 1114.099575][T16031] print_unlock_imbalance_bug+0x1aa/0x1f0 [ 1114.099602][T16031] lock_release+0x525/0x6f0 [ 1114.099625][T16031] ? seq_read_iter+0x5ff/0x12b0 [ 1114.099646][T16031] ? __pfx_lock_release+0x10/0x10 [ 1114.099669][T16031] ? s_start+0x7b/0x320 [ 1114.099693][T16031] ? mark_held_locks+0x9f/0xe0 [ 1114.099717][T16031] ? dump_stack_lvl+0x185/0x1f0 [ 1114.099742][T16031] ? lockdep_hardirqs_on+0x7c/0x110 [ 1114.099768][T16031] __mutex_unlock_slowpath+0xa3/0x6a0 [ 1114.099795][T16031] ? rcu_is_watching+0x12/0xc0 [ 1114.099815][T16031] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1114.099840][T16031] ? __kmalloc_cache_noprof+0x2a2/0x410 [ 1114.099866][T16031] ? rcu_is_watching+0x12/0xc0 [ 1114.099885][T16031] ? kfree+0x260/0x4d0 [ 1114.099907][T16031] ? s_start+0x28a/0x320 [ 1114.099931][T16031] seq_read_iter+0x5ff/0x12b0 [ 1114.099957][T16031] seq_read+0x39f/0x4e0 [ 1114.099979][T16031] ? __pfx_seq_read+0x10/0x10 [ 1114.100006][T16031] ? rw_verify_area+0xcf/0x680 [ 1114.100027][T16031] ? __pfx_seq_read+0x10/0x10 [ 1114.100049][T16031] vfs_read+0x1df/0xbf0 [ 1114.100072][T16031] ? __fget_files+0x1fc/0x3a0 [ 1114.100098][T16031] ? __pfx___mutex_lock+0x10/0x10 [ 1114.100123][T16031] ? __pfx_vfs_read+0x10/0x10 [ 1114.100149][T16031] ? __fget_files+0x206/0x3a0 [ 1114.100176][T16031] ksys_read+0x12b/0x250 [ 1114.100198][T16031] ? __pfx_ksys_read+0x10/0x10 [ 1114.100224][T16031] do_syscall_64+0xcd/0x250 [ 1114.100251][T16031] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1114.100277][T16031] RIP: 0033:0x7fdac8b8d169 [ 1114.100293][T16031] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1114.100310][T16031] RSP: 002b:00007fdac9a8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1114.100328][T16031] RAX: ffffffffffffffda RBX: 00007fdac8da5fa0 RCX: 00007fdac8b8d169 [ 1114.100341][T16031] RDX: 0000000000000f34 RSI: 0000000000000000 RDI: 0000000000000003 [ 1114.100352][T16031] RBP: 00007fdac9a8d090 R08: 0000000000000000 R09: 0000000000000000 [ 1114.100363][T16031] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1114.100375][T16031] R13: 0000000000000000 R14: 00007fdac8da5fa0 R15: 00007ffe6f9823f8 [ 1114.100396][T16031] [ 1114.941443][ T30] audit: type=1800 audit(4294968547.509:20): pid=16041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.3223" name="dbroot" dev="configfs" ino=91524 res=0 errno=0 [ 1116.298812][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.305250][ T1295] ieee802154 phy1 wpan1: encryption failed: -22