last executing test programs: 4m40.302100785s ago: executing program 0 (id=434): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x1, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x1}, 0x803}, 0xfffffff9, 0x10, 0x0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) r3 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0) writev$auto(r3, &(0x7f0000001500)={0x0, 0x1}, 0xf7) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mbind$auto(0x0, 0x5, 0x6, &(0x7f0000000000)=0x6, 0x8, 0x3) ioctl$auto(r0, 0x5601, r1) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x1, 0x0) (async) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) (async) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x1}, 0x803}, 0xfffffff9, 0x10, 0x0) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={0x0}, 0x1, 0x0, 0x0, 0x8800}, 0x0) (async) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0) (async) writev$auto(r3, &(0x7f0000001500)={0x0, 0x1}, 0xf7) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mbind$auto(0x0, 0x5, 0x6, &(0x7f0000000000)=0x6, 0x8, 0x3) (async) ioctl$auto(r0, 0x5601, r1) (async) 4m38.851170951s ago: executing program 0 (id=438): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram2/queue/fua\x00', 0x40000, 0x0) openat$auto_stat_fops_per_vm_kvm_main(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/kvm/mmu_pte_write\x00', 0x440702, 0x0) mmap$auto(0x0, 0x4005, 0x2, 0x40eb2, 0x401, 0x300000000000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x1) socket(0x22, 0x2, 0x1) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x101, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) r3 = socket(0xa, 0x3, 0x3b) fstat$auto(r3, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0x4048aecb, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/64, 0x40) 4m37.919866288s ago: executing program 0 (id=442): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00022abd7000fbdbdf2502e0"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) mmap$auto(0x0, 0xa9, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x163340, 0x6a) (async) socket(0xa, 0x2, 0x88) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) (async) bpf$auto(0x7, &(0x7f00000000c0)=@bpf_attr_3={0x400, 0xc, 0x400000000000, 0x4, 0x2000003, 0xa9e3, 0x7, 0x1ff, 0xfffffff8, "6c11060881f63dc0147d57604a90d48c", 0x0, 0x7fffffff, 0xffffffffffffffff, 0x4, 0x6, 0x5, 0x8, 0x4, 0x2, 0xfffffffb, @attach_prog_fd, 0x2, 0x4007, 0x80000001, 0xc3d, 0x1}, 0xf) (async) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x8) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x50, 0x0, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@HWSIM_ATTR_CIPHER_SUPPORT={0x3c, 0x18, "c28634e6de69a1509e3e2906366733f6e527fcafadc243f23eedbf507c12e884e8bcda563017beb016a851e6051ecd459d29ca53a3a5445e"}]}, 0x50}, 0x1, 0x0, 0x0, 0x44048058}, 0x4000800) (async) mmap$auto(0x0, 0x20009, 0x20004000004000df, 0xeb1, 0xffffffffffffffff, 0x8000) (async) connect$auto(0x4, 0x0, 0x10) 4m36.950899035s ago: executing program 0 (id=444): madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x21, 0x2, 0x2) socket(0x1d, 0x2, 0x2) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) r0 = socket(0x2c, 0x2, 0x4) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/fb0\x00', 0x800, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x200, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r1, 0xc0385720, &(0x7f0000000080)={0x0, "aa8c44a1", 0x6, 0x8, 0x3, 0x6e48, "9f929aabd06e2686b720bf916f3fa0df"}) socket$nl_generic(0x10, 0x3, 0x10) r2 = fcntl$auto(0x8000000000000001, 0x5, 0x8) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1d, 0x2, 0x7) getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x8) readv$auto(0x3, 0x0, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="78f16ede811a7bc5fd06f105146236f3c7c76ee0e97fedb09c4f4df0c37671055e03caedd45db50d663a2e83133ab01561d1a0b77b21ba7a9fbe1f01f3cfdac29f40e6a8ba4caac82aab24f4fa13b7f261a2597a6e778948721b539c498b6bb8418e83139b11a216dd9154fdde10a1f7c324b62acc8f68a984ba40b654e3c7d51ebde87fa2670f8a800d52e0516ad4e6140200000000000000a7b10249065298a30000041754e842bae98ab0bfd1712d8fbbaf5946458d982e7e88daed94bcf4075e682ebd9e5d5b0b0548a26482e86cd70595f58cde58c6025a62a2e0089ce3b25a", @ANYRES16=r4, @ANYBLOB="250f26bd7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4044054) mmap$auto(0x0, 0xe983, 0xdf, 0x16, 0x401, 0x7ffc) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xb, 0x4, 0x16, 0x940, 0x1ffe0, 0x0, 0x6, 0x2, 0x2, 0x25, 0xfff, 0x7, 0x4, 0x1, 0x5, 0x20000003, 0x5, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [0x0, 0x2, 0x0, 0x5, 0x0, 0x3, 0x3, 0x3, 0x1000000000000, 0x0, 0x40000000003, 0x0, 0x0, 0x0, 0x72d5, 0x0, 0x0, 0x0, 0xbd0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x401, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x10000, 0xbf]}, 0x1fe, 0xfffffb26) ioctl$auto(0x3, 0x8008743f, 0x1) r5 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r0) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET2(r0, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r5, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008091}, 0x440ecc4159a90d00) r6 = semctl$auto_GETPID(0x1c02, 0x0, 0xb, 0x9) fcntl$auto_F_GETSIG(r2, 0xb, r6) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) socket(0x26, 0x2, 0xfffffffe) acct$auto(&(0x7f0000000400)='ethtool\x00') 4m35.97785983s ago: executing program 0 (id=450): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram2/queue/fua\x00', 0x40000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x11, 0xa, 0xfffffffc) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) listen$auto(0x3, 0x8d) setsockopt$auto(0x3, 0x1, 0xd, 0x0, 0x8) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mremap$auto(0x1fc000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) munmap$auto(0x0, 0xffffffff) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/64, 0x40) 4m35.536069666s ago: executing program 0 (id=451): mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x121800, 0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x5, 0x0) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, &(0x7f0000000340)="9a1adb2887fbe86020116ff7c895e026d0c45f95a01b69cd544f38c66a54859c78e89bbf058c26f4a003e0c31f275f029c98bcf1e86efedc2053a1f4bc9d60a2540692ae99200456f734d7b8a8f411d15e02666e7e125ee9a4d35f708603cedc4740eebbb9f2f83545e87a9872be1952eefb18e8293e91c52872411ec0033049a52f7c32435a6b298f4f9d3e604d776cadf14ca60fba7cb563a81fc81680661d2fa4ecd05f6ecf5c3b1f04f78a61b434d42071a382735041dd73d8288116acbb31e06802d55b832d79e5dc47fa87e062ae62") setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) read$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000002d40)=""/16, 0x10) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@buf=0x0, 0x2, 0x48000, 0x3000}, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) fstatfs$auto(0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = open_tree$auto(r0, &(0x7f0000000040)='./file0\x00', 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x800000002, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe) move_pages$auto(0x0, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) read$auto(0x3, 0x0, 0x10) ioctl$auto_BLKTRACESETUP32(r3, 0xc0401273, &(0x7f0000000180)={"5eb63aea01c58f9548aa47be5997de7a25c07daa3b2ecfbf01b03f50246825e6", 0x2, 0x6, 0x6, 0x6, 0x1ff, 0x0}) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c000000092d12ea8e6d50ae53cf8d5c1738da6f570d83db4d0128085803caa2cbe01979404f7ccc339d1475df114a3ce08fa32ce6666b2fb0890da6b9f9e24f92cebbb43415efdd217d207830c4ae10be74a67f2bf2275593a548ce3af430e14868753767b075a06bce8838588d5bf6d3b577f33596be07659beb631bac0d49a29305dc0485c43c54816aa3156c275366abd058daf314986bb22e4195a6e6abe526b67817fb020f165a39c01df6f6d8551addca14292f21eeb21c016a7299687219db0936f6b3f91fd9a8e7ce17d7ca65ab37b28cdfefe184b", @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf25010000006c002e802a959cee4707741fc9ca20d5cf18051f88656bd2bf90eefd965fa041a73b25bc0b1e473e5ae608caafd7894202edf8778ce9a30ddff2886c5932115f6a5fc2538739f0060bc38eb1c213d36fae729db4bd0cdfdcf1eb0f1e2118977fca82d4e27b5af60eba9ba66e05001f000200000008002100000400000800210009000000080016008efcb77f050029000000000008001c00", @ANYRES32=r4, @ANYBLOB="08000c000daf0000080016000e000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) ioctl$auto_RTC_PIE_ON(r5, 0x7005, 0x0) readv$auto(r5, &(0x7f0000001280)={&(0x7f0000001240), 0x8}, 0x4) getsockopt$auto_SO_LINGER(r3, 0x0, 0xd, &(0x7f00000000c0)='\'!],\x00', &(0x7f0000000100)=0x1) mincore$auto(0x1000, 0x4000000, 0x0) getsockopt$auto_SO_LINGER(r2, 0x2, 0xd, &(0x7f0000000440)='\x00', &(0x7f0000000480)=0x2) 4m20.22049083s ago: executing program 32 (id=451): mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x121800, 0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000002d00)='/dev/sequencer2\x00', 0xa00, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x5, 0x0) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, &(0x7f0000000340)="9a1adb2887fbe86020116ff7c895e026d0c45f95a01b69cd544f38c66a54859c78e89bbf058c26f4a003e0c31f275f029c98bcf1e86efedc2053a1f4bc9d60a2540692ae99200456f734d7b8a8f411d15e02666e7e125ee9a4d35f708603cedc4740eebbb9f2f83545e87a9872be1952eefb18e8293e91c52872411ec0033049a52f7c32435a6b298f4f9d3e604d776cadf14ca60fba7cb563a81fc81680661d2fa4ecd05f6ecf5c3b1f04f78a61b434d42071a382735041dd73d8288116acbb31e06802d55b832d79e5dc47fa87e062ae62") setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x8) read$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000002d40)=""/16, 0x10) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) kexec_load$auto(0xff, 0x2, &(0x7f0000000080)={@buf=0x0, 0x2, 0x48000, 0x3000}, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) fstatfs$auto(0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = open_tree$auto(r0, &(0x7f0000000040)='./file0\x00', 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x800000002, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendto$auto(0x4, 0x0, 0xff, 0x6, 0x0, 0xe) move_pages$auto(0x0, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) read$auto(0x3, 0x0, 0x10) ioctl$auto_BLKTRACESETUP32(r3, 0xc0401273, &(0x7f0000000180)={"5eb63aea01c58f9548aa47be5997de7a25c07daa3b2ecfbf01b03f50246825e6", 0x2, 0x6, 0x6, 0x6, 0x1ff, 0x0}) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c000000092d12ea8e6d50ae53cf8d5c1738da6f570d83db4d0128085803caa2cbe01979404f7ccc339d1475df114a3ce08fa32ce6666b2fb0890da6b9f9e24f92cebbb43415efdd217d207830c4ae10be74a67f2bf2275593a548ce3af430e14868753767b075a06bce8838588d5bf6d3b577f33596be07659beb631bac0d49a29305dc0485c43c54816aa3156c275366abd058daf314986bb22e4195a6e6abe526b67817fb020f165a39c01df6f6d8551addca14292f21eeb21c016a7299687219db0936f6b3f91fd9a8e7ce17d7ca65ab37b28cdfefe184b", @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf25010000006c002e802a959cee4707741fc9ca20d5cf18051f88656bd2bf90eefd965fa041a73b25bc0b1e473e5ae608caafd7894202edf8778ce9a30ddff2886c5932115f6a5fc2538739f0060bc38eb1c213d36fae729db4bd0cdfdcf1eb0f1e2118977fca82d4e27b5af60eba9ba66e05001f000200000008002100000400000800210009000000080016008efcb77f050029000000000008001c00", @ANYRES32=r4, @ANYBLOB="08000c000daf0000080016000e000000"], 0xc0}, 0x1, 0x0, 0x0, 0x4000081}, 0x0) r5 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000100), 0x240, 0x0) ioctl$auto_RTC_PIE_ON(r5, 0x7005, 0x0) readv$auto(r5, &(0x7f0000001280)={&(0x7f0000001240), 0x8}, 0x4) getsockopt$auto_SO_LINGER(r3, 0x0, 0xd, &(0x7f00000000c0)='\'!],\x00', &(0x7f0000000100)=0x1) mincore$auto(0x1000, 0x4000000, 0x0) getsockopt$auto_SO_LINGER(r2, 0x2, 0xd, &(0x7f0000000440)='\x00', &(0x7f0000000480)=0x2) 1m27.935942236s ago: executing program 4 (id=952): mmap$auto(0x0, 0x2000b, 0x4000000000df, 0x16, 0x4, 0x8001) r0 = socket(0x10, 0x3, 0x6) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="010026bd7000fddbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) 1m27.514787054s ago: executing program 4 (id=953): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/i915/parameters/mitigations\x00', 0x80302, 0x0) r0 = openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/projid_map\x00', 0x20000, 0x0) preadv$auto(r0, &(0x7f00000012c0)={0x0, 0xffff}, 0x1, 0xbb6f, 0x4000000000000) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfdf3) read$auto(0x3, 0x0, 0xfdef) 1m27.062555795s ago: executing program 4 (id=956): pipe$auto(&(0x7f0000001480)) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/card0\x00', 0x80002, 0x0) ioctl$auto(r0, 0x64d0, 0xffffffffffffd4b4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x8a002, 0x0) mmap$auto(0x400000, 0x7ffffffc, 0xdc, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x1, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0x100082) prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) setns(0xffffffffffffffff, 0x0) unshare$auto(0x40000080) 1m25.125711379s ago: executing program 4 (id=960): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/001/001\x00', 0x883, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) quotactl_fd$auto(r0, 0x1000, 0x0, 0x0) socket(0x2, 0x3, 0xfffffff1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket(0x2, 0x1, 0x0) mmap$auto(0x1000, 0x400004, 0x200, 0xcd2, 0x2, 0x1) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r1, 0x80045515, 0xffffffffffffffff) r2 = socket(0x15, 0x5, 0x0) bind$auto(r2, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(r2, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) socket(0x1d, 0x5, 0x0) read$auto(0x3, 0x0, 0x80) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) execveat$auto(r3, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x11000) r4 = openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mounts\x00', 0x40, 0x0) r5 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$auto(r4, 0x8, r5) 1m24.076959119s ago: executing program 4 (id=961): sendmmsg$auto(0x3, 0x0, 0xfff, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/dfscache\x00', 0x101000, 0x0) pread64$auto(r0, 0x0, 0x8, 0x54) r1 = openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x5f8e170e09843677, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/oss\x00', 0x480, 0x0) mmap$auto(0x0, 0x5, 0x1, 0x8011, 0x3, 0x8000) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000080)="5766219c0c91824271f2ff518cf70b1df810868be2c02d203bf0e47565fa9b7e764948e7cf0025a3fd0c821735e3356b09984bb466c5a7be9bed84f8dfa30d77e84777d6ab4856c3b0815b4fde143a71e2ab7bf5ca17d39365d071682da179aa77099b404f3fb62b32a60f00c8be394e30020433000b627f2deff2b8f9b54282adacea7b780ec9e7b5d5d367e0a317d8e8abaae91b5d487fe7e7af78bd1718d9a35ad7023fc0f5fff8fb9ff2ba2f0052810b0fecfdada9108432e502b9ec4704915e534498e129e57c286c33b84233d5aa2cad145eef26527ed6ee3e4221884d68a9f394593e34dd330c", 0xea) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) mseal$auto(0x0, 0x2000d64f, 0x0) read$auto(r1, &(0x7f0000000040)='/sys/kernel/trpcing/events/vmalloc/purge_vmap_area_lazy/filter\x00', 0x7) 1m18.465602175s ago: executing program 4 (id=967): mmap$auto(0x0, 0x5020009, 0x5720, 0x1c, 0x401, 0x101) r0 = socket(0x1d, 0x4, 0x20000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) set_mempolicy$auto(0x7, 0x0, 0x4) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x4) r1 = io_uring_setup$auto(0x40005, 0x0) madvise$auto(0x108000, 0x800034, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x69) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x62, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4048880) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0x4129c0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x1, 0x5, 0x200) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x303400, 0x0) sendmsg$auto_IPVS_CMD_GET_INFO(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES8=r2, @ANYRES8, @ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x200000c5}, 0x11) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x1a1402, 0x0) read$auto(r4, 0x0, 0x9) write$auto(0x3, 0x0, 0x1) r5 = socket(0x1, 0x1, 0x106) setsockopt$auto(r5, 0x1, 0x9, &(0x7f0000000000)='\'-+\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0x10eb66) bpf$auto(0x16, &(0x7f0000000000)=@info={0x2800, 0x1ff, 0x2}, 0xcf) bind$auto(0x3, &(0x7f0000000300)=@xdp={0x2c, 0xa, r2, 0x1f}, 0x6c) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) setreuid$auto(0x0, 0xee00) close_range$auto(0x2, 0x8, 0x0) 1m18.023168002s ago: executing program 33 (id=967): mmap$auto(0x0, 0x5020009, 0x5720, 0x1c, 0x401, 0x101) r0 = socket(0x1d, 0x4, 0x20000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) set_mempolicy$auto(0x7, 0x0, 0x4) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x4) r1 = io_uring_setup$auto(0x40005, 0x0) madvise$auto(0x108000, 0x800034, 0x9) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00', 0x0}) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x69) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x62, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_GET(r1, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYRES8=r1], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4048880) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/mm/mempolicy/weighted_interleave/node0\x00', 0x4129c0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x1, 0x5, 0x200) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x303400, 0x0) sendmsg$auto_IPVS_CMD_GET_INFO(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYRES8=r2, @ANYRES8, @ANYRESOCT=r3], 0x1c}, 0x1, 0x0, 0x0, 0x200000c5}, 0x11) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x1a1402, 0x0) read$auto(r4, 0x0, 0x9) write$auto(0x3, 0x0, 0x1) r5 = socket(0x1, 0x1, 0x106) setsockopt$auto(r5, 0x1, 0x9, &(0x7f0000000000)='\'-+\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0x10eb66) bpf$auto(0x16, &(0x7f0000000000)=@info={0x2800, 0x1ff, 0x2}, 0xcf) bind$auto(0x3, &(0x7f0000000300)=@xdp={0x2c, 0xa, r2, 0x1f}, 0x6c) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) setreuid$auto(0x0, 0xee00) close_range$auto(0x2, 0x8, 0x0) 9.708976113s ago: executing program 1 (id=1221): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC2\x00', 0x80, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x2000c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0xffffffffffffffff, 0x1, 0x12, 0x0, 0xa4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) r0 = semctl$auto_GETNCNT(0xefac, 0x8, 0xe, 0x6) prctl$auto_PR_SME_SET_VL(0x3f, 0x5, r0, 0xa12b, 0x4) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/mice\x00', 0x1e1782, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = socket(0xa, 0x5, 0x84) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r2, 0x0, 0xffffff4b) r4 = gettid() process_vm_writev$auto(r4, &(0x7f0000002980)={0x0, 0x7ff}, 0x3, &(0x7f0000002a40)={0x0, 0x100000004007}, 0x4, 0x0) sendto$auto(r1, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fef08d00"}, 0x1c) recvfrom$auto(0xffffffffffffffff, 0x0, 0x5, 0xe, 0x0, &(0x7f0000000480)=0x3) clone$auto(0x20040000007, 0x9, 0xffffffffffffffff, 0x0, 0x1) madvise$auto(0x0, 0x200007, 0x19) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) 8.60354801s ago: executing program 3 (id=1226): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x1a800, 0x0) set_tid_address$auto(0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/dirty_ratio\x00', 0x2, 0x0) sendfile$auto(r0, r0, 0x0, 0x7fffe000) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x8001) socket(0x25, 0x6, 0x10001) 7.89478449s ago: executing program 3 (id=1227): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='^\x00', @ANYRES32, @ANYRES32, @ANYRES64, @ANYRES32], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000180)={{0x0, 0x10001, &(0x7f0000000080)={&(0x7f0000000040), 0x200}, 0x4, 0x0, 0x8, 0x7}, 0x7}, 0x5, 0x66a6, 0x0) r1 = syz_clone(0x20004100, &(0x7f0000000340)="64a1c53ae9f396d04954a95f7aa370f034ac07b57515533c350bd5e5b81cb9028d709a93fe5056d8290caa354002e23e59f30cad1ac0ed1d9a15a5ee9874ccb7ce10bf404a9088a4668a4a11845d39c4cd09fd5dff74f88ac41355222ff6c9ffab7ea19833cc28a128ff2e76059efe42846dc8128f79a2e5293427e965439c103c4a0b0d5988d7372e0d2b010bd7cc137570d6d03c8be13253c385fd94b3da12c7788a9f73ee614fdf411a381874c24f7999fe5ec5a71cd99df0039f6d7db9637b8ee46947a122f515a9c1dfaa97ff5b7bb6a9df1a6fd29dc0529f38d0bb2d4d3205b097e2237cfb", 0xe8, &(0x7f0000000140), &(0x7f00000001c0), &(0x7f0000000280)="fea0bca6") socket(0x2, 0x3, 0x4) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x0, 0x7352, 0x3d, 0x200000000045f, 0x401ffde, 0x7, 0x3, 0x2, 0x9, 0x3eb, 0x5, 0x2, 0x3000, 0x9, 0x6, 0x10003, 0x80, 0x1, 0x0, 0x5, 0x1ffb, 0x203, 0x400, 0x84, [0x0, 0xfffffffffffffffe, 0x0, 0x100, 0x2000000000000000, 0x2000, 0xfffffffffffffffd, 0xa, 0x2000000070604ce7, 0x0, 0xfffffffffffffffd, 0x80000000, 0x3, 0x1, 0x4, 0x4, 0x800, 0xfffffffffffffffd, 0x200000000000, 0x0, 0xffffffffefffffff, 0xffffffff80000000, 0x0, 0xd, 0x2, 0xfffffffffffffffd, 0x400000000005b8, 0xc, 0x3fffffffff, 0x8, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x800000000000a, 0xfffffffffffffffc, 0x1000, 0x8000000a38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x5, 0x6, 0x0, 0xfffff]}, 0x9, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) syz_open_procfs$namespace(r1, &(0x7f0000000440)='ns/pid_for_children\x00') mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0xa, 0x3, 0x73) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r4 = getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) setsockopt$auto(r3, 0xff, 0xa, 0x0, 0x1000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c890}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x20010010}, 0x40081) ioctl$auto_AUTOFS_IOC_SETTIMEOUT32(r4, 0xc0049364, &(0x7f0000000480)=0x5) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6.503901769s ago: executing program 3 (id=1233): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1d, 0xfffffffffffffffb, 0x8, 0x10000005, 0xfffffffffffffff9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) r1 = socket(0x11, 0x80003, 0x300) fanotify_init$auto(0x7, 0x4) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_GETISPACE(r2, 0x8010500d, &(0x7f0000000040)) setsockopt$auto(r1, 0x107, 0xc, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'ip6gre0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x1, 0x0) r6 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r6, 0x5423, 0x0) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5\x85\x91p\xe6\x1eRN8\x90\x86\xdde\x1cJ\x99\x1f\x11:\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) ioctl$auto_TIOCVHANGUP2(r6, 0x5437, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd7000fddbdf", @ANYRES32=r8, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}, 0x1, 0x0, 0x0, 0x24048080}, 0x80) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r0, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x60818}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x48, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x150}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) openat$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0xa400, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r9) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x18, r10, 0x1, 0x70bd25, 0x25dfdbff, {}, [@HWSIM_ATTR_MULTI_RADIO={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) close_range$auto(0x2, 0x8000, 0x0) getsockopt$auto_SO_PEERSEC(0xffffffffffffffff, 0x0, 0x1f, &(0x7f0000000000)='\x1d(^\x90([\x00', &(0x7f0000000040)=0x7) socket(0x22, 0x80000, 0x88) 4.775926001s ago: executing program 3 (id=1238): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x200, 0xffffffffffff0005, 0x19) rt_sigprocmask$auto(0x7, &(0x7f0000000040)={0xff}, &(0x7f00000000c0)={0x3}, 0x8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0) set_tid_address$auto(0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x48041, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) openat$auto_clk_summary_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/clk/clk_orphan_summary\x00', 0x440042, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_5={@target_ifindex=r2, r1, 0x8, 0x1, 0xffffffffffffffff, @relative_fd, 0xe600}, 0xf) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="2f212cbd70a442afce8b975d7b0008000300", @ANYRES32=r6], 0x1c}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'veth1_vlan\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'pimreg0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_PHY_GET(r0, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00082cbd7000fcdbdf252d0000002000018008000100", @ANYRES32=r2, @ANYBLOB="140002006d6163736563300000000000000000002400018008000100", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRES32=r8, @ANYBLOB="0800030002000000"], 0x58}, 0x1, 0x0, 0x0, 0x400c0}, 0x20000000) ioctl$auto_BTRFS_IOC_SNAP_DESTROY_V2(0xffffffffffffffff, 0x5000943f, &(0x7f0000000480)={@inferred=r3, 0x7, 0x6, @btrfs_ioctl_vol_args_v2_3_0={0x1, &(0x7f0000000140)={0x8, 0xfff, 0x1, 0x4, {0x0, 0x0, 0x10001, 0x4, 0x6}, [0x7, 0x2, 0x0, 0x6]}}, @devid}) sendmsg$auto_NCSI_CMD_SET_PACKAGE_MASK(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0xfebf0c436aa031f1) seccomp$auto(0x1, 0x8, &(0x7f0000000400)) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/tty34\x00', 0x8000, 0x0) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(0xffffffffffffffff, 0x0, 0x8001) socket(0x21, 0x6, 0x10001) madvise$auto(0x1, 0x8, 0x7) 4.758975864s ago: executing program 5 (id=1239): mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d63882a712, 0x0) socket(0x2b, 0x1, 0x1) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/traceSMB\x00', 0x40c01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) r1 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/current_tracer\x00', 0x1a3642, 0x0) writev$auto(r1, &(0x7f0000000100)={0x0, 0x8}, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) unshare$auto(0x40000080) openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000080), 0x2140, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x65f, 0x1ffde, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x200000000001, 0x0, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x10006]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0xd3, &(0x7f0000000100)={&(0x7f0000000380)="9f4ac11b83ee56b1da796cd26138b69127d74500000000000000669f5336f8090f420f6c2e71584aeaad276787c3d2435a587cdbfc6ab459057628ba55aaabb875", 0xfc2}, 0x2, &(0x7f00000000c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4005) ioperm$auto(0xc5, 0x3, 0xc115) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x2, 0x0) ioctl$auto_EVIOCGKEYCODE_V2(r3, 0x80284504, &(0x7f0000000040)={0x20, 0xfd, 0x2, 0x804, "e7fec7d2d40d83bdcedb6cd542ab39cc5c1a90c1ab40f57eaff8a07f4eb716a9"}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) ioctl$auto(0x3, 0x80000541b, 0x38) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) readv$auto(0x3, 0x0, 0x1) 3.61786044s ago: executing program 2 (id=1241): socket(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYBLOB], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r0 = openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) pread64$auto(r0, 0x0, 0x3, 0xd8) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x20008810) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r1, 0x4018bc13, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) (async) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x2, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f4) r2 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="13000300", @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf250a000000040002"], 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x40) (async) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="13000300", @ANYRES16=0x0, @ANYBLOB="010027bd7000fcdbdf250a000000040002"], 0x18}, 0x1, 0x0, 0x0, 0x801}, 0x40) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES8=0x0, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) (async) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="18000000", @ANYRES8=0x0, @ANYRES8=r2], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x80) r3 = socket(0x10, 0x2, 0xc) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) getpeername$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x0, 0xdf, 0x9b72, 0x7, 0x28000) r4 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/nbd13/hctx0/dispatch_busy\x00', 0x989000, 0x0) read$auto(r4, 0x0, 0x3) (async) read$auto(r4, 0x0, 0x3) writev$auto(0xffffffffffffffff, 0x0, 0x9) unshare$auto(0x6) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000680)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/enable\x00', 0x0, 0x0) 3.533957076s ago: executing program 3 (id=1242): mmap$auto(0x20000, 0x400007, 0x20000000000df, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x1b70000000000, 0xffffffffffffffff, 0x5) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x2b, 0x0, 0x9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0xa0000, 0x0) mmap$auto(0x0, 0x20009, 0x2000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r0, 0x7, 0x3) fcntl$auto(0x8000000000000001, 0x26, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioperm$auto(0x7, 0x6, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x2, 0x1, 0x106) getcwd$auto(0x0, 0xffffffffffffffff) inotify_init1$auto(0x3000000000000) inotify_add_watch$auto(0x4, 0x0, 0x9) write$auto(0xca, &(0x7f0000000040)='\x042\x00\x00\x00\x00\xa6\xb8\xd8\xc6\xb08>\xcb\xcf9\x8e\x84v6\x1b\x1a\xd9\b\x83h\xc9\x9c\xc4\x96/\xd6\xb3\xf6\x00'/46, 0xd) mlock$auto(0xfbe8, 0x4) syz_clone(0x8124400, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) 3.248540663s ago: executing program 1 (id=1243): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/sys/net/ipv6/conf/bridge_slave_0/mldv1_unsolicited_report_interval\x00', 0x88542, 0x0) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000000140), 0x40, 0x0) read$auto_snd_seq_f_ops_seq_clientmgr(r1, &(0x7f0000000180)=""/4096, 0x1000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000005e00)='/sys/power/suspend_stats/last_failed_step\x00', 0xa8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000005e40)=""/115, 0x73) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) r3 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) read$auto_proc_sessionid_operations_base(r3, &(0x7f00000000c0)=""/4096, 0x1000) lseek$auto(r0, 0x0, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000001180)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x80, 0x0) 3.003171757s ago: executing program 2 (id=1244): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/traceSMB\x00', 0x62441, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video6\x00', 0x280, 0x0) (async) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video6\x00', 0x280, 0x0) ioctl$auto_v4l2_fops_v4l2_dev(r0, 0x80085617, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/sg/device_strs\x00', 0x1c9802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x82040, 0x0) (async) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x82040, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000040)=0x1) (async) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PVERSION(r1, 0x80045700, &(0x7f0000000040)=0x1) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) ioctl$auto_FBIOGET_CON2FBMAP(0xffffffffffffffff, 0x460f, &(0x7f0000000080)="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") r2 = setfsuid$auto(0xee00) setreuid$auto(r2, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x64842, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) (async) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) write$auto(0x3, 0x0, 0x7fffffff) (async) write$auto(0x3, 0x0, 0x7fffffff) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) 2.697096207s ago: executing program 5 (id=1245): mmap$auto(0x0, 0x2020006, 0x1000000000000007, 0xeb1, 0x0, 0x1008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x8, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) bpf$auto(0x16, 0xffffffffffffffff, 0x0) bpf$auto(0x4, 0x0, 0xe) unshare$auto(0x40000080) ioperm$auto(0x3, 0xe, 0x2000000000000149) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) 2.00623474s ago: executing program 2 (id=1246): mmap$auto(0xfffffffffffffffc, 0x400006, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r0 = socket(0xa, 0x1, 0x84) bind$auto(r0, &(0x7f0000000040)=@in={0x2, 0x13, @empty}, 0x6c) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/rpc/auth.rpcsec.init/flush\x00', 0x441, 0x0) write$auto(r1, &(0x7f0000000080)='\\sys kernel/tracing/set_event_notrace_pid\x00', 0x9) openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bsg/1:0:0:0\x00', 0xe800, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) 1.946129974s ago: executing program 5 (id=1247): sigaltstack$auto(&(0x7f0000000180)={0x0, 0x1, 0x2}, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) (async) r1 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000004000), 0x40, 0x0) (async) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid\x00') fchown$auto(r2, 0xfffe, 0x7ff) (async) r3 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/mac80211_hwsim/hwsim15\x00', 0x280, 0x0) ioctl$auto_XFS_IOC_READLINK_BY_HANDLE(r3, 0xc038586c, &(0x7f00000003c0)={r2, &(0x7f00000001c0)="30aa9a84511d6900d1b405e32b00cee9df9fa70833025066b98928fd36cae94f8d2cde60cfabd044ac1f08cc005943831becf92feb00a5636ed187eb9e196a4d371ebd4e251adcd122cdb4846760824f4c82c2fbf41d5262ff43b7891eb31ce2e83f0e697c5f4586d77422756bdbe80aa80c8809bf821867a85cc69dea4f2ff86ec53250414ec01c796b047a335ece828264da84a32edd29b9245e27953d73232de1ea73221f99de26b18511f026d26f4f51536f5dea4d6ae9a3c3572744ddf347fbd5fb37c3b262857fbdfac5981521cd9bbcbb90327098a7b62a27393481", 0x5, &(0x7f00000002c0)="2edd90f27d1a8f527059e0d1ad34886b0fe0714ac406096c927ba59283034fe94053eb3639271057f7f76e9aef3fcdb22f7daa876c311b9ea8d20ff464441dba76724cf7f354b3145d2e481f517a04184c41837e1f4919e9afe19ebd8d49f043dacd7bc8e94e12413bd18d9e75b184d190c318e3950368efe2532463219d7739c62bbc0c9e28e40f0343a5ef5587615cd430d4bd096a8ef7036d0ac1", 0xfff, &(0x7f0000000100)="d1cce72a08a0e760cbe400", &(0x7f0000000380)=0x6}) (async) ioctl$auto_RNDADDENTROPY2(r1, 0x40085203, 0x0) (async) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0xa0501, 0x4) fspick$auto(r4, &(0x7f0000000040)='./file0\x00', 0x0) 1.734149163s ago: executing program 1 (id=1248): r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000000), 0x100, 0x0) close_range$auto(0x2, r0, 0x0) socket(0x18, 0xa, 0x1) (async) r1 = socket(0x18, 0xa, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000) r2 = socket(0x2, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, r1, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) (async) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000080)=""/27, 0x1b) r4 = semctl$auto_GETZCNT(0x8, 0x6, 0xf, 0xe2) process_vm_readv$auto(r4, &(0x7f00000001c0)={&(0x7f0000000140)="deb68dfebc7e4ce2b473215111696889fdd268e5f21d117505003442387ff5e89d9dd42bd730dd02d427ef6ab5baf8c1071ba9a19d6f4e472bb0e95a06249784edfe9b616441c0", 0x2}, 0x9, &(0x7f0000000300)={&(0x7f0000000200)="46b035574f497cfb8646f51d24677b35caf0f75b23f746b4fa81cd69ad0316663da52d7ec31e5078afaee1af56662cb2694ccaf6c66e65aff08ab4be1b54bcf1dcea2544ec69b443563425b6c3a33090ea94f7347821d7e62e810c156b4035b99eb0157442fb8caf2f815ea242a29953c6f1e249ac9ec01ad5a314643b60165133e2109fdc69c4acfee0ee96c2f0e3a4b5bc71233f6bc0bb474c90adad8b851987a1e6efad79808bf6525ca044d1ffe79909c5bf52fff3ef36182381c1b4c0166e9284b5ad4dc2f45a9c3428227bed74c4fa18cf32e0ef19611489d9adf37bf5fbf545c6ff373b3489a5a6876aceb7954eae44", 0x3}, 0x800, 0x1000) (async) process_vm_readv$auto(r4, &(0x7f00000001c0)={&(0x7f0000000140)="deb68dfebc7e4ce2b473215111696889fdd268e5f21d117505003442387ff5e89d9dd42bd730dd02d427ef6ab5baf8c1071ba9a19d6f4e472bb0e95a06249784edfe9b616441c0", 0x2}, 0x9, &(0x7f0000000300)={&(0x7f0000000200)="46b035574f497cfb8646f51d24677b35caf0f75b23f746b4fa81cd69ad0316663da52d7ec31e5078afaee1af56662cb2694ccaf6c66e65aff08ab4be1b54bcf1dcea2544ec69b443563425b6c3a33090ea94f7347821d7e62e810c156b4035b99eb0157442fb8caf2f815ea242a29953c6f1e249ac9ec01ad5a314643b60165133e2109fdc69c4acfee0ee96c2f0e3a4b5bc71233f6bc0bb474c90adad8b851987a1e6efad79808bf6525ca044d1ffe79909c5bf52fff3ef36182381c1b4c0166e9284b5ad4dc2f45a9c3428227bed74c4fa18cf32e0ef19611489d9adf37bf5fbf545c6ff373b3489a5a6876aceb7954eae44", 0x3}, 0x800, 0x1000) open(0x0, 0x22240, 0x155) socket(0x2, 0x5, 0x0) (async) socket(0x2, 0x5, 0x0) r5 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000002bc0), 0x400, 0x0) read$auto_ocfs2_control_fops_stack_user(r5, &(0x7f0000002c00)=""/51, 0x33) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(r2, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xff80}, 0x7, 0x0, 0x2, 0xb}, 0x40000fff}, 0x5, 0x7fffffff) (async) sendmmsg$auto(r2, &(0x7f0000000100)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xff80}, 0x7, 0x0, 0x2, 0xb}, 0x40000fff}, 0x5, 0x7fffffff) close_range$auto(0x2, 0x8, 0x0) 1.63414585s ago: executing program 2 (id=1249): madvise$auto(0x0, 0xffffffffffff0001, 0x15) rseq$auto(0x0, 0x8004, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto_PR_SET_FP_MODE(0x2d, 0xfffffffffffffffa, 0x0, 0xffffffffffffffff, 0x1) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, r0, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/vmcoreinfo\x00', 0x20000, 0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$auto(0x4, 0x1, 0x4b, 0x0, 0x0) socket(0xa, 0x801, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x800, 0x2020009, 0x5, 0x8011, r1, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) capget$auto(0x0, 0xfffffffffffffffe) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b52, r3) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) bpf$auto(0xfffffffe, &(0x7f00000001c0)=@test={0xffffffffffffffff, 0xffff, 0xfffff0b6, 0xffff, 0x88, 0xac1, 0x2, 0x36242398, 0x7ff, 0x3bb, 0x8, 0xfffe, 0x1, 0x81, 0x68198}, 0x6f2) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) 1.574819588s ago: executing program 5 (id=1250): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x200) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x801, 0x84) socket(0xa, 0x801, 0x106) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0xa, 0x1) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) r2 = socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) socket(0x2a, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) bpf$auto(0x0, 0x0, 0xa3) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/midi2\x00', 0xc2001, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000140), 0xffffffffffffffff) r5 = geteuid() setreuid$auto(r5, 0x0) setuid$auto(r5) sendmsg$auto_OVS_VPORT_CMD_SET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000340)={0x29c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@OVS_VPORT_ATTR_OPTIONS={0x100, 0x4, 0x0, 0x1, [@nested={0x4, 0xb2}, @typed={0x8, 0x142, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @typed={0x8, 0xf8, 0x0, 0x0, @uid=0xee01}, @nested={0xe5, 0x1f, 0x0, 0x1, [@nested={0x4, 0x77}, @generic="1194ee670d3804958133b52b43e9ff02eaf714890badad3c6565dec96cd7aae83cc8a53400a671d6893f797e73c058409eaa7caf6029b8780be036c3cbd22ba1684d1ca080236cb88cfd2fbe64df8fa5171248ceb2e5e291729b9f1d0d4db08a0b7ae253d99dbc199491f3af1b2054325f3e29180aff33a0f51417b13bbd7222cf1f13b74f2b5b90182a591621d2c18190fb3c5f52620379528e1c03f4904f2e99fd6abebc601e117ff13adc273499e83d2085893d82f5ead337b808c2a00a6dd4e76aed35", @typed={0x8, 0x10, 0x0, 0x0, @ipv4=@local}, @typed={0x8, 0x147, 0x0, 0x0, @uid=r5}, @typed={0x8, 0x11, 0x0, 0x0, @fd}]}]}, @OVS_VPORT_ATTR_TYPE={0x8, 0x2, 0x80}, @OVS_VPORT_ATTR_OPTIONS={0x4}, @OVS_VPORT_ATTR_NAME={0xf, 0x3, 'netdevsim0\x00'}, @OVS_VPORT_ATTR_IFINDEX={0x8, 0x8, r3}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0xffffffffffffffff, 0x1, 0x3b2e, 0xfffffffffffffff8, 0x7, 0x1, 0x6ff0, 0x78f31b64}}, @OVS_VPORT_ATTR_STATS={0x44, 0x6, {0x8, 0x2000, 0x0, 0x3, 0x6, 0x1, 0xf, 0x8}}, @OVS_VPORT_ATTR_UPCALL_PID={0xda, 0x5, "0c671ad7c027c2a6641952f8541f6553f8db2fb8623a7f26cd14620ede969c47a97cc1e7009ce41ff83a183a8b87f8b7e2f2a65528017fe58e76b5fc4079e20a7a3f4c5377229f7ef86f547c32a0c3b2ce170747cb0e6f0ac074339abbff8534c7af7c0840ef549dea2cbee067fab7491a12738b667e14953758f930c9e6c7f072a45509f9cabd7da6c4b3d6001df7915633a4d6c36693e6b64085f43ff5f0633aaa1dbf08dc6b766e4928ab318ecd2c82872bed2ae215772f916a46d9060848990cc4326ce07e4c75fd641d452206b7329e5f644c68"}]}, 0x29c}, 0x1, 0x0, 0x0, 0x8080}, 0x40) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r2, &(0x7f0000002840)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000002800)={&(0x7f0000002880)={0x258c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x4}, @NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x8}, @NL802154_ATTR_PEER={0x111c, 0x28, 0x0, 0x1, [@nested={0x14, 0x3f, 0x0, 0x1, [@typed={0x8, 0x9c, 0x0, 0x0, @u32=0x4}, @nested={0x4, 0x9}, @typed={0x4, 0x141}]}, @typed={0x4, 0x1}, @nested={0x1100, 0x117, 0x0, 0x1, [@typed={0xf, 0xaf, 0x0, 0x0, @str='::}@&]{*\\\xa0\x00'}, @typed={0xc, 0xb6, 0x0, 0x0, @u64=0xfd74}, @nested={0x4, 0x28}, @typed={0x14, 0x12e, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @generic="b161e126bcb30518144760b5a1c5c7793446bcf951ba33974adb5a9b41349ce139d01478a1da45c6ebb9d5ddaca4d5ad83f37aa4af6b0b98d51d85541544eb1ead548914e2297dfbbb5d5cddb3446ae84853d0253c141d64173242314f1b6c49f8a1797cc75858c620d295090d13fd8fe8a7226634b47f25e09d810a14f5c3cadb0722801778dd46318ccb2018aad5b706704138a07d567e08ca378482c2824b0f9854ed726933718ff71fa8c5fd4efc8f10d013a570a27e85b5a9a7ac4ac08e29e9b4962ea8ea99", @generic="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"]}]}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x7}, @NL802154_ATTR_BEACON_INTERVAL={0x5, 0x26, 0x1}, @NL802154_ATTR_SCAN_CHANNELS={0x8, 0x21, 0x3}, @NL802154_ATTR_WPAN_PHY_CAPS={0x320, 0x18, 0x0, 0x1, [@typed={0x14, 0xdc, 0x0, 0x0, @ipv6=@loopback}, @nested={0x2f3, 0xaf, 0x0, 0x1, [@typed={0x8, 0x85, 0x0, 0x0, @ipv4=@remote}, @typed={0xc, 0x106, 0x0, 0x0, @u64=0x200}, @typed={0x7, 0x8d, 0x0, 0x0, @str='\xb7+\x00'}, @generic="be3c87acdcb5042b1427774662992b92308b1f75e6bc23597d236d34b9e2590697e9853ca99511788c48526f8d389e596f83f1368adde45461380e977e9ff6ebca5a8adc2c2709755f27e94e67307e5e74de4deb5e02f5682d6ca2cc646753f440066f681d5bbdc9a2f488aa2de84fc49d247ee7174c4ff6f7ec9f5249edd5059dc192621d3cdfbcac1fa2023f6809d541d8de1adcfd5162cd487efd17", @generic="a815f4c73c226e9706a084bb65e6f92bb1a818029d11dc5f2fc5cf408a8f8e85ae8a764886db3757684370a1ec0f596853b9146254b494d91167e923eb345db73b11998e9df4d8b7657dc2d7200d8520170d1b7a6bcbc69cad224a22bdf8ba61a66fc7ac3bdb3a8c4086fb7478f2bd6d7d8a2a4feefa80016d8f47f21aebee08a2c6b219fb86862df95ea85ccbafad718124619e13b0e0f124370f7729bca1dad05ad83461b430cc909347661199ca87fc87afcc28fa0aea013cc36e03b9b7734ed952b225c56627d5e7cc02b4d80c9127b77f9fa7b17145077a92ff92d51de31373cfbff5d38f8698c9ce55aeba40cebd411e", @generic="04c709a73e1523231e2c702611a9d44f8617738f7b33a69020371150de01eef161be806c58e2e982bd7b9ba7897672179ca43f864fb6435fde4ff3b3a701906fc30ee90ebdb4ee13f7a26fc23fd90624d37073a35b25dbb3b44df1f10a15f8780c3f815f3510220f4d38d03da157df95e020e9faadac0b8665f5837f76a73b8237e089041233a8b8cc9a58753c2a584ccc447a7d435a798f6e907e003099bf25f5", @typed={0x2e, 0x7, 0x0, 0x0, @binary="cfe6b0ae48e23d85e3f3173a8eca904d08c0709371f8611dec3688c484338b812c261e12788326072e4b"}, @generic="481ee34a421b86e50ddea37aadf42934b829fe8d59e92038302e8d6604a95a9cda27f0bfa6614cf5a5a50a28471d4b69b41764eef2f5a646a181920abd1170abc9b8b384155bdf9bfa85613d81b8fc5dacba03b2081786cb38465aa01a8ea1c2c20e9391ded999a319647c118515", @nested={0x4, 0x132}]}, @typed={0x14, 0x84, 0x0, 0x0, @ipv6=@remote}]}, @NL802154_ATTR_SEC_KEY={0x1111, 0x30, 0x0, 0x1, [@generic="12e0051a9af61b3affe1e9403e68bb", @nested={0x1010, 0x54, 0x0, 0x1, [@nested={0x4, 0x6f}, @typed={0x8, 0xef, 0x0, 0x0, @uid}, @generic="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", @generic]}, @typed={0x5, 0x13c, 0x0, 0x0, @str='\x00'}, @generic="bec917ae1a5d17372f62dd5caa540c3f11a5f075f98efb71fd7e0611339549c8b5e489f7ed8bf5a4ae3ccfffc819cc8b33666000", @typed={0x8, 0xc, 0x0, 0x0, @uid}, @generic="fa753d09dc8bc4f0c0cf73cd7db7ba9ece9e3a608972e330ab3dfaa340def4913c7f2491f7a3117f08a23f20de5aba2cd64722431acecefd3374572eef88e09c91dabf84f81bf29696b89c210dcc9fd37862c4046e32aeb4fa64e70b14a92c09600db34696e831dc8413a5ee360d53f189232c45b9544a4a7154a650db305063da3fd8e6333519fc7ef6dc621e604e762686e51748288453e1abbbfb704f292387db", @typed={0x8, 0x52, 0x0, 0x0, @uid=r5}]}]}, 0x258c}, 0x1, 0x0, 0x0, 0x4010}, 0x20008051) 1.076634003s ago: executing program 3 (id=1251): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) set_tid_address$auto(0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r0, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x3, 0x6) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/fail-nth\x00', 0x28902, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_BEACON(r3, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0400987d887c55e4fd7f0e004008"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x20000800) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002240), r3) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003980), r3) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r3, &(0x7f0000003b00)={0x0, 0x0, &(0x7f0000003ac0)={&(0x7f0000000140)=ANY=[@ANYBLOB="6bbad02af83bda2e713860caf2f81b5760520abeb1a201830248606da19254720100010001000000eecd5d5eee773962a22a695aa4ae2f8410e7381fb9", @ANYRES16=r4, @ANYBLOB="010028bd7000ffdbdf250200000004000180"], 0x18}, 0x1, 0x0, 0x0, 0x240448c4}, 0x80) io_uring_setup$auto(0xd, 0x0) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x101140, 0x0) mprotect$auto(0x0, 0x83e, 0x1) ioctl$auto_SNDCTL_DSP_SPEED(r5, 0xc0045002, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) close_range$auto(0x2, 0x8000, 0x0) 1.034893959s ago: executing program 5 (id=1252): socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x40, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mprotect$auto(0x40001ffff000, 0x3, 0x10004) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(&(0x7f00000000c0), r0) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0xa0000, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) (async) read$auto(0x3, 0x0, 0x80) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = bpf$auto(0x10, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x80000200, 0x5, 0x4c01da68, 0x2, 0x100000000, 0x1ff, 0xae2, 0x9, 0xc7, 0x75, 0x3, 0x9, 0x9, 0x1}, 0xa3) (async) socket(0x18, 0xa, 0x1) (async) socket(0xa, 0x2, 0x0) (async) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/power/pm_trace_dev_match\x00', 0x40040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) (async) write$auto(0xca, &(0x7f0000000040)='\x042\x00\x00\x00\x00\xa6\xb8\xd8\xc6\xb08>\xcb\xcf9\x8e\x84v6\x1b\x1a\xd9\b\x83h\xc9\x9c\xc4\x96/\xd6\xb3\xf6\x00'/46, 0xd) (async) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r3 = openat$auto_bsg_fops_bsg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bsg/1:0:0:0\x00', 0x280082, 0x0) ioctl$auto_21538(r1, 0x5422, &(0x7f00000002c0)="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") (async) ioctl$auto_SG_GET_RESERVED_SIZE(r3, 0x2272, &(0x7f0000001900)) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/uprobe_events\x00', 0x0, 0x0) 755.066189ms ago: executing program 1 (id=1253): prctl$auto_PR_PAC_GET_ENABLED_KEYS(0x3d, 0xfffffffffffffff8, 0x0, 0x3f, 0xffffffffffffffff) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/timer_source\x00', 0x208802, 0x0) (async, rerun: 64) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (rerun: 64) setns(0xffffffffffffffff, 0x20000) (async) write$auto(r0, 0x0, 0x0) (async) r1 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/trace_marker\x00', 0x1, 0x0) write$auto_tracing_mark_fops_trace(r1, 0x0, 0x0) (async) socket(0xf040313d38ab62e9, 0x6, 0x258f) (async) close_range$auto(0x2, 0x8000, 0x0) 562.795296ms ago: executing program 1 (id=1254): socket(0x2, 0x80802, 0x0) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x21, 0x1, 0x0, 0x0, 0x0) timer_delete$auto(0x9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/virtual/tty/ttywa/power/runtime_status\x00', 0x141840, 0x0) munmap$auto(0x20001000, 0x7) mount$auto(0x0, 0x0, 0x0, 0x200, &(0x7f00000001c0)) statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x38a1, 0x3, 0x9, 0x940, 0x1ffde, 0x3, 0x6, 0x902c, 0x29, 0x400005, 0x3, 0x4, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, [0x3, 0x3, 0x200000000, 0x400000004, 0x0, 0x3903, 0x0, 0x4, 0x3, 0x800000, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffeffffffffe, 0x4, 0x0, 0xceb, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x96f, 0xffffffffffffffff, 0x2, 0x4001, 0x3, 0x0, 0xb548, 0x8, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0xe87, 0xfffffffffffffffb, 0x3]}, 0xfffff7fffffffffa, 0x81) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) move_pages$auto(0x1, 0x2000000000003, 0xffffffffffffffff, 0x0, 0x0, 0x8000000000000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0), 0x55) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) ioctl$auto(0x3, 0x894b, 0x38) socket(0x11, 0x2, 0x50) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0xfffffffffffffff9, 0x7352, 0x3a, 0x694c, 0x1ffde, 0x7, 0x0, 0x80001000, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x4, 0x0, 0x80, 0x7, 0x0, 0x8a6, 0x0, 0x200, 0x0, 0x84, [0x0, 0x0, 0x4001, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffdfffffffc, 0x1, 0x0, 0x1, 0x2, 0x3b37, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x9, 0x0, 0xffffffffffffffff, 0x4, 0x7, 0x1, 0x0, 0x5, 0x400000000005b8, 0x4, 0x5, 0x1000, 0x1, 0x7, 0xffffffffffffffff, 0x1, 0x800000000000b, 0xc8, 0xf42c, 0x4, 0x0, 0x0, 0xffffffffffffffff, 0x2, 0x6, 0x5]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) madvise$auto(0x110c230000, 0x31ca, 0x9) 535.021509ms ago: executing program 2 (id=1255): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio1\x00', 0x101000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), 0xffffffffffffffff) ioperm$auto(0xfffffffd, 0x1, 0x1) io_cancel$auto(0x7, 0x0, 0x0) sendmsg$auto_HANDSHAKE_CMD_DONE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002abd7000fedbdf250300000008000200", @ANYRES32, @ANYBLOB="f3cf60f75395d9af160e4be61dad85234282d3b694ecae5d2b124cf06164833fd1b3a6f18c76a613332e0104118c4713763111f5811fa40e13ff7778d5d7d41d6993bfc134993bf759281254bf112f2a40c910b445544621c578bacaa84c37c1b6c5d070e85195e66b6b5d9b4badd0"], 0x1c}}, 0x0) futex$auto(&(0x7f0000000000)=0x1, 0x6, 0x9, &(0x7f0000000040)={0x2}, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x80044df9, 0x38) r2 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r2, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x2, 0x1, 0x106) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000180), r3) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000012c0)=ANY=[@ANYBLOB="0200000452fe1c2b1f2aa1860249b0b1b7d36fd949ebb0871b02780d78fd8418a7bb18466aedb20b30515c0571f1e681308de21d695699904a9fabcd30238cef16e206853bb101ede0606d6117f404b28be879b07fd5e93d2fd20c01ec0573f6780065ffea6c981312d474872a25000593192ff0261a96eee024fae7", @ANYRES16=r6, @ANYBLOB="27212cbd7000fcdbdf252100000008000300", @ANYRES32=r5, @ANYBLOB="0c002d800400428096404e84"], 0x28}}, 0x4000000) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r3, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18010000", @ANYRES16=r6, @ANYBLOB="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"], 0x118}, 0x1, 0x0, 0x0, 0x4900}, 0x4000801) socket(0x25, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/devices/platform/dummy_hcd.7/usb8/devnum\x00', 0x2000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000000c0)=""/4096, 0x1000) r8 = open(&(0x7f0000000000)='./file0\x00', 0x149443, 0x14) fcntl$auto(r8, 0x409, 0x40003f) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40802, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) 140.53826ms ago: executing program 1 (id=1256): openat$auto_tracing_entries_fops_trace(0xffffffffffffff9c, &(0x7f00000029c0)='/sys/kernel/debug/tracing/buffer_size_kb\x00', 0x181041, 0x0) r0 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0xc0300, 0x0) pread64$auto(r0, 0x0, 0x7fff, 0x800000000003) r1 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000980), 0x102001, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp1\x00', 0x551c40, 0x0) getsockopt$auto_SO_TIMESTAMPING_OLD(r1, 0x7, 0x25, &(0x7f0000000080)='.:\x00', &(0x7f0000000140)=0x1) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), 0xffffffffffffffff) io_cancel$auto(0x7, 0x0, 0x0) sendmsg$auto_HANDSHAKE_CMD_DONE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x184}, 0x20004810) futex$auto(&(0x7f0000000000)=0x4, 0x6, 0x9, 0x0, 0x0, 0x9) mmap$auto(0xff, 0x400008, 0x7fffffffffffffff, 0x9b7d, r1, 0x5) socket(0x25, 0x1, 0x0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x40000, 0x0) ioctl$auto_RTC_PARAM_SET(r2, 0x40187014, 0x0) clone$auto(0x7, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x400640, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x80f, 0x400000) r3 = socket(0x1e, 0x4, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) setsockopt$auto(r3, 0x10f, 0x87, 0x0, 0xec) setsockopt$auto(0x3, 0x23c, 0x87, 0x0, 0x14) r4 = socket(0x1e, 0x4, 0x3) setsockopt$auto(r4, 0x10f, 0x87, 0x0, 0x14) sendmmsg$auto(r4, 0x0, 0x926, 0x7ffffe) close_range$auto(0x2, 0xffffffffffffffff, 0x1) pwrite64$auto(r1, 0x0, 0x4, 0x3bf0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) 113.288641ms ago: executing program 2 (id=1257): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/sys/net/ipv6/conf/bridge_slave_0/mldv1_unsolicited_report_interval\x00', 0x88542, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x2, 0x3, 0x100) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f00000001c0), 0x1cb803, 0x0) r2 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci4/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) socket(0x1e, 0x805, 0x0) r4 = openat$auto_proc_pid_numa_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/numa_maps\x00', 0x20000, 0x0) mq_notify$auto(r1, &(0x7f0000001200)={@sival_ptr=&(0x7f00000010c0)="17ac28aa71049359211933f523469cbc0ec31bd079bc98dd9250610162055a857f014ee5217a9e51f1a271c5bee325dcc04ad703d696e82ac464b69f7e050630879f60a285ab77c5f5a715cf2d9c27886270d04a2529f2f1522b971016177441b87bac0c61d2ccc78b5977edb8fee63a00066e188e726a77bfaecc919f4d6d7c71203cadd83747448799cd74b71a94c9f904c5b340077e6041c3c8f5399c8ed5b0999483d23a3545accc0795f79102c729838e640157bc18335a74e043ca773af1ff22f434af9d", @inferred=r2, 0xc46, @_sigev_thread={&(0x7f0000000080)=&(0x7f0000000000)=0x60, &(0x7f00000011c0)="56ea5a432d992e89e4309a5f90c30432765a3ba20b383d4ed3eb19c7a84fd03f63635e6f6b7687b82dd3a7c3d9c21960472a85970510ca6da283f3"}}) read$auto_proc_sessionid_operations_base(r4, &(0x7f00000000c0)=""/4096, 0x1000) lseek$auto(r0, 0x0, 0x0) 0s ago: executing program 5 (id=1258): socket(0x2, 0x1, 0x0) socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x1, 0x8903, 0x8) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/dmi/id/uevent\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000002140)=""/64, 0x40) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/cable#0\x00', 0x1c1282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000140)=""/75, 0xfffffddb) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000240)="ed31f84a0c3142ade64a044a38bd689d6ec45fe177d558da985035db28f0c9bcdfb6619d70b5e597e668d1f49656301cec77b019f1250dfefc9ac7995e00009b19043f65ec671400000000000000f3b477108a9f67422b7be3d30050293e52f3682eef39a123e9332951f70c847e956d3d6fc1d361dd14e6321b6ed85ab538c81e1ddd497d3c", 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x31}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x86082, 0x0) read$auto(r2, 0x0, 0x39b8) mmap$auto(0x0, 0x400008, 0xdf, 0xf1, 0x2, 0x8000) openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) remap_file_pages$auto(0x5, 0x1000, 0x0, 0x8, 0x10007) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) ioctl$auto(0xc8, 0x401054d5, 0x0) writev$auto(0x3, 0x0, 0x8) ioctl$auto_BTRFS_IOC_GET_DEV_STATS(r1, 0xc4089434, &(0x7f0000000480)={0x7, 0x3, 0x3, [0x81, 0x9, 0x7, 0xa1, 0xffffffffffff16f9]}) kernel console output (not intermixed with test programs): 802 audit(6033924314.321:36): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.496" res=0 errno=0 [ 283.565095][ T29] audit: type=1800 audit(6033924314.801:37): pid=8164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.497" name="dummy_udc" dev="gadgetfs" ino=7167 res=0 errno=0 [ 284.339552][ T8119] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 284.376314][ T5146] Bluetooth: hci4: command tx timeout [ 284.426113][ T8119] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 284.513630][ T8119] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 284.584188][ T8119] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 284.875657][ T8119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.973842][ T8119] 8021q: adding VLAN 0 to HW filter on device team0 [ 285.011378][ T7270] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.019273][ T7270] bridge0: port 1(bridge_slave_0) entered forwarding state [ 285.107586][ T7270] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.115478][ T7270] bridge0: port 2(bridge_slave_1) entered forwarding state [ 285.238591][ T8119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 285.714918][ T8119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.457253][ T5146] Bluetooth: hci4: command tx timeout [ 286.679820][ T8119] veth0_vlan: entered promiscuous mode [ 286.724662][ T8119] veth1_vlan: entered promiscuous mode [ 286.848888][ T8119] veth0_macvtap: entered promiscuous mode [ 286.872240][ T8119] veth1_macvtap: entered promiscuous mode [ 286.913743][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 286.952480][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 286.977742][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.032942][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.052105][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.083624][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.101174][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.132889][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.158431][ T8119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.232402][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.277617][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.307612][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.335938][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.356451][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.392808][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.423120][ T8119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 287.452841][ T8119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.490081][ T8119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.552556][ T8119] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.579158][ T8119] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.596502][ T8119] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.619650][ T8119] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.984959][ T8202] netlink: 28 bytes leftover after parsing attributes in process `syz.1.505'. [ 288.740641][ T8192] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 288.750892][ T8192] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 288.782534][ T8192] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 288.796355][ T8192] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 288.819223][ T8192] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 288.825889][ T8192] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 288.911178][ T8192] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 289.013383][ T8202] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.045947][ T8202] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.069735][ T8202] bond0 (unregistering): Released all slaves [ 289.219746][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.266318][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.362497][ T7260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.402589][ T7260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.746181][ T5146] Bluetooth: hci0: command 0x0406 tx timeout [ 289.978008][ T29] audit: type=1800 audit(6033924321.221:38): pid=8254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.510" name="dummy_udc" dev="gadgetfs" ino=7167 res=0 errno=0 [ 290.787875][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 290.856401][ T5146] Bluetooth: hci4: command 0x0c1a tx timeout [ 290.856673][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 290.864291][ T5146] Bluetooth: hci2: command 0x0406 tx timeout [ 291.401016][ T8284] [U] [ 291.404391][ T8284] [U] [ 291.407620][ T8284] [U] [ 291.410657][ T8284] [U] [ 291.514214][ T8284] [U] [ 291.517332][ T8284] [U] [ 291.520368][ T8284] [U] [ 291.523398][ T8284] [U] [ 291.605541][ T8284] [U] [ 291.608668][ T8284] [U] [ 291.611722][ T8284] [U] [ 291.614764][ T8284] [U] [ 291.671724][ T8284] [U] [ 291.674823][ T8284] [U] [ 291.677855][ T8284] [U] [ 291.680886][ T8284] [U] [ 291.729110][ T8284] [U] [ 291.732170][ T8284] [U] [ 291.735193][ T8284] [U] [ 291.738219][ T8284] [U] [ 291.794081][ T8284] [U] [ 291.797165][ T8284] [U] [ 291.800197][ T8284] [U] [ 291.803230][ T8284] [U] [ 291.845058][ T8284] [U] [ 291.848139][ T8284] [U] [ 291.851202][ T8284] [U] [ 291.854230][ T8284] [U] [ 291.927047][ T8284] [U] [ 291.930118][ T8284] [U] [ 291.933146][ T8284] [U] [ 291.936174][ T8284] [U] [ 292.025641][ T8284] [U] [ 292.028714][ T8284] [U] [ 292.031742][ T8284] [U] [ 292.034762][ T8284] [U] [ 292.112617][ T8284] [U] [ 292.115695][ T8284] [U] [ 292.118726][ T8284] [U] [ 292.121753][ T8284] [U] [ 292.186755][ T8284] [U] [ 292.189892][ T8284] [U] [ 292.193024][ T8284] [U] [ 292.196049][ T8284] [U] [ 292.276430][ T8284] [U] [ 292.279500][ T8284] [U] [ 292.282531][ T8284] [U] [ 292.285571][ T8284] [U] [ 292.402060][ T8288] [U] [ 292.936471][ T5146] Bluetooth: hci4: command 0x0c1a tx timeout [ 293.465840][ T8308] could not allocate digest TFM handle binfmt_misc [ 294.478374][ T8340] netlink: 326 bytes leftover after parsing attributes in process `syz.3.533'. [ 295.016466][ T5146] Bluetooth: hci4: command 0x0c1a tx timeout [ 296.218054][ T29] audit: type=1800 audit(6033924327.451:39): pid=8361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.538" name="dummy_udc" dev="gadgetfs" ino=7167 res=0 errno=0 [ 296.866519][ T8374] Invalid ELF header magic: != ELF [ 299.686329][ T29] audit: type=1800 audit(6033924330.901:40): pid=8399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.545" name="dummy_udc" dev="gadgetfs" ino=7167 res=0 errno=0 [ 300.348375][ T8405] netlink: 28 bytes leftover after parsing attributes in process `syz.1.547'. [ 300.396445][ T8405] team_slave_0: entered allmulticast mode [ 302.026721][ T8426] vivid-003: ================= START STATUS ================= [ 302.035542][ T8426] vivid-003: Radio HW Seek Mode: Bounded [ 302.142653][ T8426] vivid-003: Radio Programmable HW Seek: false [ 302.226169][ T8426] vivid-003: RDS Rx I/O Mode: Block I/O [ 302.286283][ T8426] vivid-003: Generate RBDS Instead of RDS: false [ 302.346162][ T8426] vivid-003: RDS Reception: true [ 302.351701][ T8426] vivid-003: RDS Program Type: 0 inactive [ 302.532117][ T8426] vivid-003: RDS PS Name: inactive [ 302.629355][ T8426] vivid-003: RDS Radio Text: inactive [ 302.635486][ T8426] vivid-003: RDS Traffic Announcement: false inactive [ 302.738596][ T8426] vivid-003: RDS Traffic Program: false inactive [ 302.886129][ T8426] vivid-003: RDS Music: false inactive [ 302.935144][ T8426] vivid-003: ================== END STATUS ================== [ 307.473507][ T8470] Process accounting resumed syzkaller syzkaller login: [ 308.508483][ T8486] netlink: 'syz.4.564': attribute type 16 has an invalid length. [ 308.612549][ T8485] netlink: 28 bytes leftover after parsing attributes in process `syz.2.565'. [ 308.622713][ T8485] team_slave_0: entered allmulticast mode [ 308.656583][ T8486] netlink: 322 bytes leftover after parsing attributes in process `syz.4.564'. [ 309.109706][ T8491] FAULT_INJECTION: forcing a failure. [ 309.109706][ T8491] name fail_futex, interval 1, probability 0, space 0, times 0 [ 309.173450][ T8491] CPU: 0 UID: 0 PID: 8491 Comm: syz.2.567 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 309.173498][ T8491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 309.173517][ T8491] Call Trace: [ 309.173527][ T8491] [ 309.173539][ T8491] dump_stack_lvl+0x16c/0x1f0 [ 309.173597][ T8491] should_fail_ex+0x50a/0x650 [ 309.173643][ T8491] get_futex_key+0x4a3/0x1000 [ 309.173694][ T8491] ? stack_depot_save_flags+0x28/0x9e0 [ 309.173737][ T8491] ? __pfx_get_futex_key+0x10/0x10 [ 309.173792][ T8491] ? kasan_save_stack+0x42/0x60 [ 309.173826][ T8491] ? kasan_save_stack+0x33/0x60 [ 309.173859][ T8491] ? kasan_save_track+0x14/0x30 [ 309.173892][ T8491] ? kasan_save_free_info+0x3b/0x60 [ 309.173938][ T8491] ? __kasan_slab_free+0x51/0x70 [ 309.173973][ T8491] ? kfree+0x2c4/0x4d0 [ 309.174001][ T8491] ? __do_sys_memfd_create+0x334/0x8a0 [ 309.174051][ T8491] futex_wake+0xe8/0x4e0 [ 309.174103][ T8491] ? __pfx_futex_wake+0x10/0x10 [ 309.174160][ T8491] do_futex+0x1e5/0x350 [ 309.174192][ T8491] ? __pfx_do_futex+0x10/0x10 [ 309.174236][ T8491] __x64_sys_futex+0x1e1/0x4c0 [ 309.174273][ T8491] ? __pfx___x64_sys_futex+0x10/0x10 [ 309.174322][ T8491] do_syscall_64+0xcd/0x250 [ 309.174354][ T8491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.174400][ T8491] RIP: 0033:0x7f15f778cde9 [ 309.174424][ T8491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.174455][ T8491] RSP: 002b:00007f15f863d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 309.174485][ T8491] RAX: ffffffffffffffda RBX: 00007f15f79a5fa8 RCX: 00007f15f778cde9 [ 309.174505][ T8491] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f15f79a5fac [ 309.174523][ T8491] RBP: 00007f15f79a5fa0 R08: 00007f15f863e000 R09: 0000000000000000 [ 309.174541][ T8491] R10: 000000000000000f R11: 0000000000000246 R12: 00007f15f79a5fac [ 309.174559][ T8491] R13: 0000000000000000 R14: 00007ffdb98ac690 R15: 00007ffdb98ac778 [ 309.174596][ T8491] [ 309.395681][ C0] vkms_vblank_simulate: vblank timer overrun [ 310.659797][ T8517] netlink: 20 bytes leftover after parsing attributes in process `syz.3.572'. [ 311.217026][ T8517] hsr_slave_0: left promiscuous mode [ 311.254161][ T8517] hsr_slave_1: left promiscuous mode [ 313.896585][ T8538] Process accounting resumed [ 315.338973][ T8553] netlink: 'syz.1.581': attribute type 1 has an invalid length. [ 315.397560][ T8561] netlink: 'syz.1.581': attribute type 1 has an invalid length. [ 315.430220][ T8555] netlink: 'syz.1.581': attribute type 1 has an invalid length. [ 315.456449][ T8553] netlink: 'syz.1.581': attribute type 1 has an invalid length. [ 315.522412][ T8561] netlink: 'syz.1.581': attribute type 1 has an invalid length. [ 315.536310][ T8555] netlink: 'syz.1.581': attribute type 1 has an invalid length. [ 315.576555][ T8553] netlink: 25 bytes leftover after parsing attributes in process `syz.1.581'. [ 315.591812][ T8561] netlink: 25 bytes leftover after parsing attributes in process `syz.1.581'. [ 315.629334][ T8555] netlink: 25 bytes leftover after parsing attributes in process `syz.1.581'. [ 316.919142][ T8577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.588'. [ 317.331096][ T8575] sd 0:0:1:0: PR command failed: 1026 [ 317.353988][ T8575] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 317.416676][ T8575] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 321.440878][ T8615] FAULT_INJECTION: forcing a failure. [ 321.440878][ T8615] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 321.596313][ T8615] CPU: 0 UID: 0 PID: 8615 Comm: syz.1.594 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 321.596357][ T8615] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 321.596375][ T8615] Call Trace: [ 321.596384][ T8615] [ 321.596396][ T8615] dump_stack_lvl+0x16c/0x1f0 [ 321.596450][ T8615] should_fail_ex+0x50a/0x650 [ 321.596495][ T8615] _copy_from_iter+0x29b/0x1400 [ 321.596541][ T8615] ? trace_lock_acquire+0x14e/0x1f0 [ 321.596577][ T8615] ? __pfx__copy_from_iter+0x10/0x10 [ 321.596620][ T8615] ? __virt_addr_valid+0x1a4/0x590 [ 321.596655][ T8615] ? __virt_addr_valid+0x5e/0x590 [ 321.596682][ T8615] ? __phys_addr+0xc6/0x150 [ 321.596708][ T8615] ? __phys_addr_symbol+0x30/0x80 [ 321.596756][ T8615] ? __check_object_size+0x488/0x710 [ 321.596803][ T8615] proc_sys_call_handler+0x31e/0x5a0 [ 321.596842][ T8615] ? __pfx_proc_sys_call_handler+0x10/0x10 [ 321.596894][ T8615] vfs_write+0x5ae/0x1150 [ 321.596925][ T8615] ? __pfx_proc_sys_write+0x10/0x10 [ 321.596961][ T8615] ? __pfx___mutex_lock+0x10/0x10 [ 321.597011][ T8615] ? __pfx_vfs_write+0x10/0x10 [ 321.597074][ T8615] ksys_write+0x12b/0x250 [ 321.597105][ T8615] ? __pfx_ksys_write+0x10/0x10 [ 321.597148][ T8615] do_syscall_64+0xcd/0x250 [ 321.597179][ T8615] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.597222][ T8615] RIP: 0033:0x7fe91398cde9 [ 321.597245][ T8615] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.597277][ T8615] RSP: 002b:00007fe9117d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 321.597305][ T8615] RAX: ffffffffffffffda RBX: 00007fe913ba6080 RCX: 00007fe91398cde9 [ 321.597324][ T8615] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 321.597345][ T8615] RBP: 00007fe9117d5090 R08: 0000000000000000 R09: 0000000000000000 [ 321.597363][ T8615] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 321.597379][ T8615] R13: 0000000000000000 R14: 00007fe913ba6080 R15: 00007ffc91252088 [ 321.597417][ T8615] [ 322.636562][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.643554][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.010001][ T29] audit: type=1800 audit(6033924356.251:41): pid=8631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.597" name="dummy_udc" dev="gadgetfs" ino=7167 res=0 errno=0 [ 325.442563][ T8639] bridge0: port 3(gretap0) entered blocking state [ 325.460324][ T8639] bridge0: port 3(gretap0) entered disabled state [ 325.493354][ T8639] gretap0: entered allmulticast mode [ 325.520232][ T8639] gretap0: entered promiscuous mode [ 325.531198][ T8639] bridge0: port 3(gretap0) entered blocking state [ 325.538445][ T8639] bridge0: port 3(gretap0) entered forwarding state [ 326.387170][ T8646] FAULT_INJECTION: forcing a failure. [ 326.387170][ T8646] name failslab, interval 1, probability 0, space 0, times 0 [ 326.512858][ T8646] CPU: 1 UID: 0 PID: 8646 Comm: syz.4.601 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 326.512901][ T8646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 326.512925][ T8646] Call Trace: [ 326.512934][ T8646] [ 326.512946][ T8646] dump_stack_lvl+0x16c/0x1f0 [ 326.513001][ T8646] should_fail_ex+0x50a/0x650 [ 326.513038][ T8646] ? fs_reclaim_acquire+0xae/0x150 [ 326.513092][ T8646] should_failslab+0xc2/0x120 [ 326.513132][ T8646] __kmalloc_noprof+0xce/0x4f0 [ 326.513164][ T8646] ? d_absolute_path+0x137/0x1b0 [ 326.513205][ T8646] ? tomoyo_encode2+0x100/0x3e0 [ 326.513250][ T8646] tomoyo_encode2+0x100/0x3e0 [ 326.513292][ T8646] tomoyo_realpath_from_path+0x1a7/0x710 [ 326.513343][ T8646] tomoyo_path_number_perm+0x248/0x5b0 [ 326.513372][ T8646] ? tomoyo_path_number_perm+0x235/0x5b0 [ 326.513408][ T8646] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 326.513477][ T8646] ? __pfx_lock_release+0x10/0x10 [ 326.513514][ T8646] ? trace_lock_acquire+0x14e/0x1f0 [ 326.513549][ T8646] ? lock_acquire+0x2f/0xb0 [ 326.513584][ T8646] ? __fget_files+0x40/0x3a0 [ 326.513621][ T8646] ? __fget_files+0x206/0x3a0 [ 326.513659][ T8646] security_file_ioctl+0x9b/0x240 [ 326.513697][ T8646] __x64_sys_ioctl+0xb7/0x200 [ 326.513746][ T8646] do_syscall_64+0xcd/0x250 [ 326.513778][ T8646] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.513822][ T8646] RIP: 0033:0x7f14ead8cde9 [ 326.513846][ T8646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.513880][ T8646] RSP: 002b:00007f14ebbd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 326.513908][ T8646] RAX: ffffffffffffffda RBX: 00007f14eafa5fa0 RCX: 00007f14ead8cde9 [ 326.513939][ T8646] RDX: 00002000000000c0 RSI: 0000000040107447 RDI: 0000000000000003 [ 326.513957][ T8646] RBP: 00007f14ebbd7090 R08: 0000000000000000 R09: 0000000000000000 [ 326.513973][ T8646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.513989][ T8646] R13: 0000000000000000 R14: 00007f14eafa5fa0 R15: 00007fff50755448 [ 326.514025][ T8646] [ 327.027369][ T8646] ERROR: Out of memory at tomoyo_realpath_from_path. [ 327.941692][ T8659] FAULT_INJECTION: forcing a failure. [ 327.941692][ T8659] name failslab, interval 1, probability 0, space 0, times 0 [ 328.007634][ T8659] CPU: 1 UID: 0 PID: 8659 Comm: syz.3.607 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 328.007677][ T8659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 328.007695][ T8659] Call Trace: [ 328.007704][ T8659] [ 328.007715][ T8659] dump_stack_lvl+0x16c/0x1f0 [ 328.007780][ T8659] should_fail_ex+0x50a/0x650 [ 328.007820][ T8659] ? fs_reclaim_acquire+0xae/0x150 [ 328.007876][ T8659] should_failslab+0xc2/0x120 [ 328.007918][ T8659] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 328.007959][ T8659] ? sock_alloc_inode+0x25/0x1c0 [ 328.008005][ T8659] ? __pfx_sock_alloc_inode+0x10/0x10 [ 328.008042][ T8659] sock_alloc_inode+0x25/0x1c0 [ 328.008080][ T8659] alloc_inode+0x5d/0x230 [ 328.008121][ T8659] sock_alloc+0x40/0x280 [ 328.008159][ T8659] __sock_create+0xc1/0x8d0 [ 328.008210][ T8659] __sys_socket+0x14f/0x260 [ 328.008255][ T8659] ? __pfx___sys_socket+0x10/0x10 [ 328.008299][ T8659] ? rcu_is_watching+0x12/0xc0 [ 328.008356][ T8659] __x64_sys_socket+0x72/0xb0 [ 328.008405][ T8659] ? lockdep_hardirqs_on+0x7c/0x110 [ 328.008453][ T8659] do_syscall_64+0xcd/0x250 [ 328.008484][ T8659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.008529][ T8659] RIP: 0033:0x7fe702b8cde9 [ 328.008553][ T8659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.008584][ T8659] RSP: 002b:00007fe7039fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 328.008612][ T8659] RAX: ffffffffffffffda RBX: 00007fe702da5fa0 RCX: 00007fe702b8cde9 [ 328.008632][ T8659] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000002a [ 328.008650][ T8659] RBP: 00007fe702c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 328.008668][ T8659] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.008686][ T8659] R13: 0000000000000000 R14: 00007fe702da5fa0 R15: 00007ffccacde5f8 [ 328.008730][ T8659] [ 328.015597][ T8659] socket: no more sockets [ 328.749539][ T8669] netlink: 342 bytes leftover after parsing attributes in process `syz.2.609'. [ 329.236494][ T8676] netlink: 12 bytes leftover after parsing attributes in process `syz.4.611'. [ 330.110423][ T8698] FAULT_INJECTION: forcing a failure. [ 330.110423][ T8698] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 330.234763][ T8698] CPU: 1 UID: 0 PID: 8698 Comm: syz.3.617 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 330.234804][ T8698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 330.234820][ T8698] Call Trace: [ 330.234829][ T8698] [ 330.234840][ T8698] dump_stack_lvl+0x16c/0x1f0 [ 330.234892][ T8698] should_fail_ex+0x50a/0x650 [ 330.234934][ T8698] strncpy_from_user+0x3b/0x2d0 [ 330.234971][ T8698] getname_flags.part.0+0x8f/0x550 [ 330.235019][ T8698] getname_flags+0x93/0xf0 [ 330.235050][ T8698] user_path_at+0x24/0x60 [ 330.235084][ T8698] __do_sys_pivot_root+0x175/0x1660 [ 330.235127][ T8698] ? __fget_files+0x206/0x3a0 [ 330.235165][ T8698] ? __pfx___do_sys_pivot_root+0x10/0x10 [ 330.235204][ T8698] ? fput+0x67/0x440 [ 330.235247][ T8698] ? __pfx_ksys_write+0x10/0x10 [ 330.235288][ T8698] do_syscall_64+0xcd/0x250 [ 330.235329][ T8698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.235373][ T8698] RIP: 0033:0x7fe702b8cde9 [ 330.235395][ T8698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.235425][ T8698] RSP: 002b:00007fe7039fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000009b [ 330.235453][ T8698] RAX: ffffffffffffffda RBX: 00007fe702da5fa0 RCX: 00007fe702b8cde9 [ 330.235473][ T8698] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000080 [ 330.235490][ T8698] RBP: 00007fe7039fb090 R08: 0000000000000000 R09: 0000000000000000 [ 330.235508][ T8698] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 330.235525][ T8698] R13: 0000000000000001 R14: 00007fe702da5fa0 R15: 00007ffccacde5f8 [ 330.235561][ T8698] [ 330.871351][ T8704] FAULT_INJECTION: forcing a failure. [ 330.871351][ T8704] name fail_futex, interval 1, probability 0, space 0, times 0 [ 330.931298][ T8704] CPU: 0 UID: 0 PID: 8704 Comm: syz.2.619 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 330.931345][ T8704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 330.931364][ T8704] Call Trace: [ 330.931373][ T8704] [ 330.931385][ T8704] dump_stack_lvl+0x16c/0x1f0 [ 330.931442][ T8704] should_fail_ex+0x50a/0x650 [ 330.931488][ T8704] get_futex_key+0x4a3/0x1000 [ 330.931541][ T8704] ? stack_depot_save_flags+0x28/0x9e0 [ 330.931591][ T8704] ? __pfx_get_futex_key+0x10/0x10 [ 330.931646][ T8704] ? kasan_save_stack+0x42/0x60 [ 330.931679][ T8704] ? kasan_save_stack+0x33/0x60 [ 330.931713][ T8704] ? kasan_save_track+0x14/0x30 [ 330.931747][ T8704] ? kasan_save_free_info+0x3b/0x60 [ 330.931795][ T8704] ? __kasan_slab_free+0x51/0x70 [ 330.931830][ T8704] ? kfree+0x2c4/0x4d0 [ 330.931857][ T8704] ? __do_sys_memfd_create+0x334/0x8a0 [ 330.931907][ T8704] futex_wake+0xe8/0x4e0 [ 330.931949][ T8704] ? __pfx_futex_wake+0x10/0x10 [ 330.932005][ T8704] do_futex+0x1e5/0x350 [ 330.932036][ T8704] ? __pfx_do_futex+0x10/0x10 [ 330.932079][ T8704] __x64_sys_futex+0x1e1/0x4c0 [ 330.932118][ T8704] ? __pfx___x64_sys_futex+0x10/0x10 [ 330.932167][ T8704] do_syscall_64+0xcd/0x250 [ 330.932199][ T8704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 330.932245][ T8704] RIP: 0033:0x7f15f778cde9 [ 330.932269][ T8704] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 330.932301][ T8704] RSP: 002b:00007f15f863d0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 330.932330][ T8704] RAX: ffffffffffffffda RBX: 00007f15f79a5fa8 RCX: 00007f15f778cde9 [ 330.932351][ T8704] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f15f79a5fac [ 330.932369][ T8704] RBP: 00007f15f79a5fa0 R08: 00007f15f863e000 R09: 0000000000000000 [ 330.932389][ T8704] R10: 000000000000000f R11: 0000000000000246 R12: 00007f15f79a5fac [ 330.932407][ T8704] R13: 0000000000000000 R14: 00007ffdb98ac690 R15: 00007ffdb98ac778 [ 330.932445][ T8704] [ 333.371176][ T8713] ima: policy update failed [ 333.426872][ T29] audit: type=1802 audit(6033924364.661:42): pid=8713 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.620" res=0 errno=0 [ 334.117023][ T8730] netlink: 342 bytes leftover after parsing attributes in process `syz.1.622'. [ 335.817285][ T8782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.631'. [ 337.832725][ T8798] Process accounting paused [ 338.256734][ T8782] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.496747][ T8782] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.650110][ T8782] bond0 (unregistering): Released all slaves [ 339.614113][ T29] audit: type=1800 audit(6033924370.851:43): pid=8804 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.634" name="dummy_udc" dev="gadgetfs" ino=7167 res=0 errno=0 [ 340.498502][ T8816] FAULT_INJECTION: forcing a failure. [ 340.498502][ T8816] name failslab, interval 1, probability 0, space 0, times 0 [ 340.615334][ T8816] CPU: 1 UID: 0 PID: 8816 Comm: syz.4.638 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 340.615380][ T8816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 340.615400][ T8816] Call Trace: [ 340.615417][ T8816] [ 340.615430][ T8816] dump_stack_lvl+0x16c/0x1f0 [ 340.615489][ T8816] should_fail_ex+0x50a/0x650 [ 340.615528][ T8816] ? fs_reclaim_acquire+0xae/0x150 [ 340.615583][ T8816] should_failslab+0xc2/0x120 [ 340.615625][ T8816] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 340.615665][ T8816] ? alloc_empty_file+0x73/0x1e0 [ 340.615713][ T8816] alloc_empty_file+0x73/0x1e0 [ 340.615759][ T8816] alloc_file_pseudo+0x131/0x1e0 [ 340.615806][ T8816] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 340.615854][ T8816] ? alloc_fd+0x41f/0x760 [ 340.615893][ T8816] sock_alloc_file+0x50/0x1d0 [ 340.615932][ T8816] __sys_socket+0x1c2/0x260 [ 340.615977][ T8816] ? __pfx___sys_socket+0x10/0x10 [ 340.616026][ T8816] ? rcu_is_watching+0x12/0xc0 [ 340.616080][ T8816] __x64_sys_socket+0x72/0xb0 [ 340.616124][ T8816] ? lockdep_hardirqs_on+0x7c/0x110 [ 340.616172][ T8816] do_syscall_64+0xcd/0x250 [ 340.616204][ T8816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.616250][ T8816] RIP: 0033:0x7f14ead8cde9 [ 340.616276][ T8816] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.616307][ T8816] RSP: 002b:00007f14ebbd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 340.616337][ T8816] RAX: ffffffffffffffda RBX: 00007f14eafa5fa0 RCX: 00007f14ead8cde9 [ 340.616357][ T8816] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000002a [ 340.616375][ T8816] RBP: 00007f14eae0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 340.616394][ T8816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.616420][ T8816] R13: 0000000000000000 R14: 00007f14eafa5fa0 R15: 00007fff50755448 [ 340.616459][ T8816] [ 341.079176][ T8823] Malformed UNC in devname [ 341.079176][ T8823] [ 341.096464][ T8823] CIFS: VFS: Malformed UNC in devname [ 341.117984][ T8827] Malformed UNC in devname [ 341.117984][ T8827] [ 341.125306][ T8827] CIFS: VFS: Malformed UNC in devname [ 341.707701][ T8835] netlink: 'syz.1.645': attribute type 2 has an invalid length. [ 342.162757][ T8849] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'. [ 344.898622][ T8891] FAULT_INJECTION: forcing a failure. [ 344.898622][ T8891] name failslab, interval 1, probability 0, space 0, times 0 [ 344.927420][ T8876] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 344.935985][ T8876] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 344.942896][ T8876] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 344.944237][ T8891] CPU: 0 UID: 0 PID: 8891 Comm: syz.3.656 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 344.944278][ T8891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 344.944298][ T8891] Call Trace: [ 344.944307][ T8891] [ 344.944318][ T8891] dump_stack_lvl+0x16c/0x1f0 [ 344.944374][ T8891] should_fail_ex+0x50a/0x650 [ 344.944413][ T8891] ? fs_reclaim_acquire+0xae/0x150 [ 344.944469][ T8891] should_failslab+0xc2/0x120 [ 344.944512][ T8891] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 344.944550][ T8891] ? lockdep_init_map_type+0x16d/0x7d0 [ 344.944595][ T8891] ? __d_alloc+0x35/0x8c0 [ 344.944640][ T8891] __d_alloc+0x35/0x8c0 [ 344.944684][ T8891] d_alloc_pseudo+0x1c/0xc0 [ 344.944733][ T8891] alloc_file_pseudo+0xc6/0x1e0 [ 344.944780][ T8891] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 344.944826][ T8891] ? shmem_get_inode+0x737/0xf00 [ 344.944875][ T8891] __shmem_file_setup+0x210/0x300 [ 344.944923][ T8891] shmem_zero_setup+0x93/0x1b0 [ 344.944976][ T8891] __mmap_region+0x2021/0x2760 [ 344.945021][ T8891] ? __pfx___mmap_region+0x10/0x10 [ 344.945061][ T8891] ? lock_acquire+0x2f/0xb0 [ 344.945096][ T8891] ? is_bpf_text_address+0x30/0x1a0 [ 344.945138][ T8891] ? bpf_ksym_find+0x124/0x1c0 [ 344.945192][ T8891] ? hlock_class+0x4e/0x130 [ 344.945241][ T8891] ? mark_lock+0xb5/0xc60 [ 344.945344][ T8891] ? cap_capable+0xb3/0x250 [ 344.945401][ T8891] mmap_region+0x1ab/0x3f0 [ 344.945450][ T8891] do_mmap+0xd8d/0x11b0 [ 344.945489][ T8891] ? __pfx_do_mmap+0x10/0x10 [ 344.945521][ T8891] ? __pfx_down_write_killable+0x10/0x10 [ 344.945565][ T8891] vm_mmap_pgoff+0x203/0x3a0 [ 344.945607][ T8891] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 344.945658][ T8891] ksys_mmap_pgoff+0x7d/0x5c0 [ 344.945688][ T8891] ? rcu_is_watching+0x12/0xc0 [ 344.945742][ T8891] __x64_sys_mmap+0x125/0x190 [ 344.945793][ T8891] do_syscall_64+0xcd/0x250 [ 344.945826][ T8891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.945871][ T8891] RIP: 0033:0x7fe702b8cde9 [ 344.945896][ T8891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.945927][ T8891] RSP: 002b:00007fe7039da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 344.945955][ T8891] RAX: ffffffffffffffda RBX: 00007fe702da6080 RCX: 00007fe702b8cde9 [ 344.945977][ T8891] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 344.945996][ T8891] RBP: 00007fe702c0e2a0 R08: fffffffffffffffa R09: 0000000000008000 [ 344.946019][ T8891] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 344.946039][ T8891] R13: 0000000000000000 R14: 00007fe702da6080 R15: 00007ffccacde5f8 [ 344.946080][ T8891] [ 344.968836][ T8785] Process accounting paused [ 345.059299][ T8876] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 345.259580][ T8876] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 346.306105][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 346.957328][ T8906] netlink: 20 bytes leftover after parsing attributes in process `syz.3.659'. [ 347.016311][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 347.016675][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 347.106851][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 347.248748][ T8922] netlink: 54 bytes leftover after parsing attributes in process `syz.2.664'. [ 347.336234][ T5146] Bluetooth: hci4: command 0x0c1a tx timeout [ 347.811004][ T8906] netlink: 306 bytes leftover after parsing attributes in process `syz.3.659'. [ 349.227212][ T29] audit: type=1800 audit(6033924380.471:44): pid=8965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.670" name="dummy_udc" dev="gadgetfs" ino=7167 res=0 errno=0 syzkaller syzkaller login: [ 353.499385][ T9029] warning: `syz.4.680' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 355.877211][ T29] audit: type=1326 audit(6033925410.117:45): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9059 comm="syz.1.688" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe91398cde9 code=0x0 [ 356.008080][ T9057] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 356.188969][ T9057] CIFS mount error: No usable UNC path provided in device string! [ 356.188969][ T9057] [ 356.240050][ T9057] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 361.625386][ T29] audit: type=1800 audit(4294967298.419:46): pid=9125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.702" name="dummy_udc" dev="gadgetfs" ino=7167 res=0 errno=0 [ 361.742805][ T9138] netlink: 342 bytes leftover after parsing attributes in process `syz.3.706'. [ 363.719569][ T9162] FAULT_INJECTION: forcing a failure. [ 363.719569][ T9162] name failslab, interval 1, probability 0, space 0, times 0 [ 363.798424][ T9162] CPU: 0 UID: 0 PID: 9162 Comm: syz.1.713 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 363.798471][ T9162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 363.798490][ T9162] Call Trace: [ 363.798499][ T9162] [ 363.798511][ T9162] dump_stack_lvl+0x16c/0x1f0 [ 363.798569][ T9162] should_fail_ex+0x50a/0x650 [ 363.798609][ T9162] ? fs_reclaim_acquire+0xae/0x150 [ 363.798666][ T9162] should_failslab+0xc2/0x120 [ 363.798707][ T9162] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 363.798747][ T9162] ? security_file_alloc+0x34/0x2b0 [ 363.798791][ T9162] security_file_alloc+0x34/0x2b0 [ 363.798838][ T9162] init_file+0x93/0x480 [ 363.798883][ T9162] alloc_empty_file+0x91/0x1e0 [ 363.798930][ T9162] alloc_file_pseudo+0x131/0x1e0 [ 363.798978][ T9162] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 363.799025][ T9162] ? alloc_fd+0x41f/0x760 [ 363.799064][ T9162] sock_alloc_file+0x50/0x1d0 [ 363.799103][ T9162] __sys_socket+0x1c2/0x260 [ 363.799150][ T9162] ? __pfx___sys_socket+0x10/0x10 [ 363.799197][ T9162] ? rcu_is_watching+0x12/0xc0 [ 363.799254][ T9162] __x64_sys_socket+0x72/0xb0 [ 363.799297][ T9162] ? lockdep_hardirqs_on+0x7c/0x110 [ 363.799346][ T9162] do_syscall_64+0xcd/0x250 [ 363.799383][ T9162] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.799430][ T9162] RIP: 0033:0x7fe91398cde9 [ 363.799455][ T9162] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.799488][ T9162] RSP: 002b:00007fe9117f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 363.799517][ T9162] RAX: ffffffffffffffda RBX: 00007fe913ba5fa0 RCX: 00007fe91398cde9 [ 363.799538][ T9162] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000002a [ 363.799557][ T9162] RBP: 00007fe913a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 363.799576][ T9162] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 363.799594][ T9162] R13: 0000000000000000 R14: 00007fe913ba5fa0 R15: 00007ffc91252088 [ 363.799633][ T9162] [ 365.259484][ T29] audit: type=1800 audit(4294967302.067:47): pid=9174 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.716" name="dummy_udc" dev="gadgetfs" ino=7167 res=0 errno=0 [ 365.862176][ T9182] ubi0: attaching mtd0 [ 365.883506][ T9182] ubi0: scanning is finished [ 365.943955][ T9182] ubi0: empty MTD device detected [ 365.964003][ T9182] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 366.235001][ T9182] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 366.628206][ T9192] netlink: 334 bytes leftover after parsing attributes in process `syz.1.721'. [ 366.809663][ T9200] FAULT_INJECTION: forcing a failure. [ 366.809663][ T9200] name failslab, interval 1, probability 0, space 0, times 0 [ 366.855166][ T9199] netlink: 334 bytes leftover after parsing attributes in process `syz.1.721'. [ 366.904350][ T9200] CPU: 1 UID: 0 PID: 9200 Comm: syz.2.723 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 366.904399][ T9200] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 366.904418][ T9200] Call Trace: [ 366.904428][ T9200] [ 366.904454][ T9200] dump_stack_lvl+0x16c/0x1f0 [ 366.904511][ T9200] should_fail_ex+0x50a/0x650 [ 366.904551][ T9200] ? fs_reclaim_acquire+0xae/0x150 [ 366.904608][ T9200] should_failslab+0xc2/0x120 [ 366.904651][ T9200] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 366.904692][ T9200] ? sock_alloc_inode+0x25/0x1c0 [ 366.904738][ T9200] ? __pfx_sock_alloc_inode+0x10/0x10 [ 366.904778][ T9200] sock_alloc_inode+0x25/0x1c0 [ 366.904817][ T9200] alloc_inode+0x5d/0x230 [ 366.904857][ T9200] sock_alloc+0x40/0x280 [ 366.904895][ T9200] __sock_create+0xc1/0x8d0 [ 366.904947][ T9200] __sys_socket+0x14f/0x260 [ 366.904993][ T9200] ? __pfx___sys_socket+0x10/0x10 [ 366.905039][ T9200] ? rcu_is_watching+0x12/0xc0 [ 366.905096][ T9200] __x64_sys_socket+0x72/0xb0 [ 366.905140][ T9200] ? lockdep_hardirqs_on+0x7c/0x110 [ 366.905188][ T9200] do_syscall_64+0xcd/0x250 [ 366.905220][ T9200] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.905266][ T9200] RIP: 0033:0x7f15f778cde9 [ 366.905292][ T9200] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.905324][ T9200] RSP: 002b:00007f15f863d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 366.905355][ T9200] RAX: ffffffffffffffda RBX: 00007f15f79a5fa0 RCX: 00007f15f778cde9 [ 366.905376][ T9200] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000002a [ 366.905393][ T9200] RBP: 00007f15f780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 366.905412][ T9200] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 366.905430][ T9200] R13: 0000000000000000 R14: 00007f15f79a5fa0 R15: 00007ffdb98ac778 [ 366.905478][ T9200] [ 366.905533][ T9200] socket: no more sockets [ 367.810710][ T9211] ACPI: EC: Assuming SCI_EVT clearing on QR_EC writes [ 368.202864][ T9211] Process accounting resumed [ 369.514980][ T9242] FAULT_INJECTION: forcing a failure. [ 369.514980][ T9242] name failslab, interval 1, probability 0, space 0, times 0 [ 369.578068][ T9242] CPU: 0 UID: 0 PID: 9242 Comm: syz.1.735 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 369.578114][ T9242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 369.578134][ T9242] Call Trace: [ 369.578143][ T9242] [ 369.578156][ T9242] dump_stack_lvl+0x16c/0x1f0 [ 369.578221][ T9242] should_fail_ex+0x50a/0x650 [ 369.578262][ T9242] ? fs_reclaim_acquire+0xae/0x150 [ 369.578319][ T9242] should_failslab+0xc2/0x120 [ 369.578360][ T9242] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 369.578400][ T9242] ? sock_alloc_inode+0x25/0x1c0 [ 369.578443][ T9242] ? __pfx_sock_alloc_inode+0x10/0x10 [ 369.578480][ T9242] sock_alloc_inode+0x25/0x1c0 [ 369.578519][ T9242] alloc_inode+0x5d/0x230 [ 369.578560][ T9242] sock_alloc+0x40/0x280 [ 369.578598][ T9242] __sock_create+0xc1/0x8d0 [ 369.578649][ T9242] __sys_socket+0x14f/0x260 [ 369.578695][ T9242] ? __pfx___sys_socket+0x10/0x10 [ 369.578741][ T9242] ? rcu_is_watching+0x12/0xc0 [ 369.578799][ T9242] __x64_sys_socket+0x72/0xb0 [ 369.578842][ T9242] ? lockdep_hardirqs_on+0x7c/0x110 [ 369.578890][ T9242] do_syscall_64+0xcd/0x250 [ 369.578923][ T9242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.578968][ T9242] RIP: 0033:0x7fe91398cde9 [ 369.578993][ T9242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.579024][ T9242] RSP: 002b:00007fe9117f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 369.579054][ T9242] RAX: ffffffffffffffda RBX: 00007fe913ba5fa0 RCX: 00007fe91398cde9 [ 369.579081][ T9242] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000002a [ 369.579100][ T9242] RBP: 00007fe913a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 369.579118][ T9242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.579136][ T9242] R13: 0000000000000000 R14: 00007fe913ba5fa0 R15: 00007ffc91252088 [ 369.579174][ T9242] [ 369.585059][ T9242] socket: no more sockets [ 370.994392][ T9259] netlink: 20 bytes leftover after parsing attributes in process `syz.4.739'. [ 373.424294][ T9284] Invalid ELF header magic: != ELF [ 373.618003][ T9287] FAULT_INJECTION: forcing a failure. [ 373.618003][ T9287] name failslab, interval 1, probability 0, space 0, times 0 [ 373.643989][ T9287] CPU: 0 UID: 0 PID: 9287 Comm: syz.2.747 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 373.644038][ T9287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 373.644058][ T9287] Call Trace: [ 373.644068][ T9287] [ 373.644082][ T9287] dump_stack_lvl+0x16c/0x1f0 [ 373.644140][ T9287] should_fail_ex+0x50a/0x650 [ 373.644179][ T9287] ? fs_reclaim_acquire+0xae/0x150 [ 373.644236][ T9287] should_failslab+0xc2/0x120 [ 373.644278][ T9287] __kmalloc_noprof+0xce/0x4f0 [ 373.644317][ T9287] ? lsm_blob_alloc+0x68/0x90 [ 373.644369][ T9287] lsm_blob_alloc+0x68/0x90 [ 373.644414][ T9287] security_sk_alloc+0x30/0x270 [ 373.644469][ T9287] sk_prot_alloc+0xfb/0x2a0 [ 373.644514][ T9287] sk_alloc+0x36/0xb90 [ 373.644567][ T9287] qrtr_create+0x84/0x1d0 [ 373.644617][ T9287] __sock_create+0x335/0x8d0 [ 373.644668][ T9287] __sys_socket+0x14f/0x260 [ 373.644713][ T9287] ? __pfx___sys_socket+0x10/0x10 [ 373.644762][ T9287] ? rcu_is_watching+0x12/0xc0 [ 373.644818][ T9287] __x64_sys_socket+0x72/0xb0 [ 373.644860][ T9287] ? lockdep_hardirqs_on+0x7c/0x110 [ 373.644909][ T9287] do_syscall_64+0xcd/0x250 [ 373.644941][ T9287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.644992][ T9287] RIP: 0033:0x7f15f778cde9 [ 373.645018][ T9287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.645050][ T9287] RSP: 002b:00007f15f863d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 373.645079][ T9287] RAX: ffffffffffffffda RBX: 00007f15f79a5fa0 RCX: 00007f15f778cde9 [ 373.645100][ T9287] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000002a [ 373.645117][ T9287] RBP: 00007f15f780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 373.645135][ T9287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 373.645153][ T9287] R13: 0000000000000000 R14: 00007f15f79a5fa0 R15: 00007ffdb98ac778 [ 373.645191][ T9287] [ 374.349280][ T9291] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 375.182427][ T9290] Process accounting resumed [ 375.750124][ T9289] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 375.756856][ T9289] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 375.969125][ T9289] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 375.975874][ T9289] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 376.079344][ T9289] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 377.669915][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 377.833232][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 377.999892][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 378.007468][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 378.149983][ T5146] Bluetooth: hci4: command 0x0c1a tx timeout [ 379.057612][ T9339] netlink: 338 bytes leftover after parsing attributes in process `syz.4.760'. [ 379.108554][ T9339] netlink: 338 bytes leftover after parsing attributes in process `syz.4.760'. [ 379.169036][ T9341] netlink: 110 bytes leftover after parsing attributes in process `syz.4.760'. [ 379.240790][ T9341] veth0_macvtap: left promiscuous mode [ 379.567212][ T9346] nvme_fcloop: unknown parameter or missing value '-' [ 382.920048][ T9364] bond0: option all_slaves_active: invalid value () [ 383.493570][ T9394] netlink: 20 bytes leftover after parsing attributes in process `syz.2.773'. [ 384.077504][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.093461][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.297638][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.775'. [ 384.780318][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.4.778'. [ 385.469975][ T9416] FAULT_INJECTION: forcing a failure. [ 385.469975][ T9416] name failslab, interval 1, probability 0, space 0, times 0 [ 385.519849][ T9416] CPU: 1 UID: 0 PID: 9416 Comm: syz.2.781 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 385.519897][ T9416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 385.519916][ T9416] Call Trace: [ 385.519925][ T9416] [ 385.519938][ T9416] dump_stack_lvl+0x16c/0x1f0 [ 385.520000][ T9416] should_fail_ex+0x50a/0x650 [ 385.520040][ T9416] ? fs_reclaim_acquire+0xae/0x150 [ 385.520095][ T9416] should_failslab+0xc2/0x120 [ 385.520136][ T9416] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 385.520176][ T9416] ? __d_alloc+0x35/0x8c0 [ 385.520220][ T9416] __d_alloc+0x35/0x8c0 [ 385.520263][ T9416] d_alloc_pseudo+0x1c/0xc0 [ 385.520312][ T9416] alloc_file_pseudo+0xc6/0x1e0 [ 385.520359][ T9416] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 385.520404][ T9416] ? alloc_fd+0x41f/0x760 [ 385.520442][ T9416] sock_alloc_file+0x50/0x1d0 [ 385.520481][ T9416] __sys_socket+0x1c2/0x260 [ 385.520526][ T9416] ? __pfx___sys_socket+0x10/0x10 [ 385.520572][ T9416] ? rcu_is_watching+0x12/0xc0 [ 385.520637][ T9416] __x64_sys_socket+0x72/0xb0 [ 385.520680][ T9416] ? lockdep_hardirqs_on+0x7c/0x110 [ 385.520730][ T9416] do_syscall_64+0xcd/0x250 [ 385.520763][ T9416] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.520807][ T9416] RIP: 0033:0x7f15f778cde9 [ 385.520831][ T9416] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 385.520862][ T9416] RSP: 002b:00007f15f863d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 385.520891][ T9416] RAX: ffffffffffffffda RBX: 00007f15f79a5fa0 RCX: 00007f15f778cde9 [ 385.520912][ T9416] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000002a [ 385.520929][ T9416] RBP: 00007f15f780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 385.520947][ T9416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 385.520965][ T9416] R13: 0000000000000000 R14: 00007f15f79a5fa0 R15: 00007ffdb98ac778 [ 385.521003][ T9416] [ 390.360038][ T9440] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 390.426230][ T9440] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 390.528852][ T9440] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 390.535657][ T9440] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 390.656478][ T9440] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 391.036453][ T5146] Bluetooth: hci0: command 0x0406 tx timeout [ 391.105335][ T9484] FAULT_INJECTION: forcing a failure. [ 391.105335][ T9484] name failslab, interval 1, probability 0, space 0, times 0 [ 391.130083][ T9484] CPU: 1 UID: 0 PID: 9484 Comm: syz.2.794 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 391.130133][ T9484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 391.130153][ T9484] Call Trace: [ 391.130163][ T9484] [ 391.130175][ T9484] dump_stack_lvl+0x16c/0x1f0 [ 391.130234][ T9484] should_fail_ex+0x50a/0x650 [ 391.130273][ T9484] ? fs_reclaim_acquire+0xae/0x150 [ 391.130328][ T9484] should_failslab+0xc2/0x120 [ 391.130369][ T9484] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 391.130410][ T9484] ? __d_alloc+0x35/0x8c0 [ 391.130459][ T9484] __d_alloc+0x35/0x8c0 [ 391.130501][ T9484] d_alloc_pseudo+0x1c/0xc0 [ 391.130555][ T9484] alloc_file_pseudo+0xc6/0x1e0 [ 391.130603][ T9484] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 391.130648][ T9484] ? alloc_fd+0x41f/0x760 [ 391.130687][ T9484] sock_alloc_file+0x50/0x1d0 [ 391.130725][ T9484] __sys_socket+0x1c2/0x260 [ 391.130772][ T9484] ? __pfx___sys_socket+0x10/0x10 [ 391.130819][ T9484] ? rcu_is_watching+0x12/0xc0 [ 391.130876][ T9484] __x64_sys_socket+0x72/0xb0 [ 391.130920][ T9484] ? lockdep_hardirqs_on+0x7c/0x110 [ 391.130968][ T9484] do_syscall_64+0xcd/0x250 [ 391.131000][ T9484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.131045][ T9484] RIP: 0033:0x7f15f778cde9 [ 391.131070][ T9484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 391.131102][ T9484] RSP: 002b:00007f15f863d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 391.131132][ T9484] RAX: ffffffffffffffda RBX: 00007f15f79a5fa0 RCX: 00007f15f778cde9 [ 391.131154][ T9484] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000002a [ 391.131172][ T9484] RBP: 00007f15f780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 391.131192][ T9484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.131210][ T9484] R13: 0000000000000000 R14: 00007f15f79a5fa0 R15: 00007ffdb98ac778 [ 391.131248][ T9484] [ 391.722784][ T9488] netlink: 4 bytes leftover after parsing attributes in process `syz.4.796'. [ 392.487259][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 392.562505][ T5146] Bluetooth: hci3: command 0x0406 tx timeout [ 392.569274][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 392.717406][ T5146] Bluetooth: hci4: command 0x0c1a tx timeout [ 394.079604][ T9514] netlink: 20 bytes leftover after parsing attributes in process `syz.1.802'. [ 396.884031][ T9557] netlink: 20 bytes leftover after parsing attributes in process `syz.3.813'. [ 397.430567][ T9566] netlink: 'syz.4.824': attribute type 27 has an invalid length. [ 397.459718][ T9566] netlink: 334 bytes leftover after parsing attributes in process `syz.4.824'. [ 398.210740][ T5146] Bluetooth: hci4: unexpected subevent 0x0a length: 124 > 30 [ 398.265351][ T9577] netlink: 330 bytes leftover after parsing attributes in process `syz.4.817'. [ 398.433260][ T9577] Process accounting paused [ 398.580302][ T9564] bond0: option all_slaves_active: invalid value () [ 399.550668][ T9588] netlink: 28 bytes leftover after parsing attributes in process `syz.4.822'. [ 399.621362][ T9595] netlink: 4 bytes leftover after parsing attributes in process `syz.4.822'. [ 399.667328][ T9588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 399.718816][ T9588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 399.852469][ T9588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 399.890878][ T9588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 401.848600][ T29] audit: type=1800 audit(4294967338.639:48): pid=9631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.832" name="discovery_nqn" dev="configfs" ino=23650 res=0 errno=0 [ 402.782228][ T9613] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 402.876507][ T9613] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 402.986255][ T9613] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 403.106186][ T9613] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 403.212970][ T9613] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 403.442613][ T5844] Bluetooth: hci0: command 0x0406 tx timeout [ 403.579591][ T9658] FAULT_INJECTION: forcing a failure. [ 403.579591][ T9658] name failslab, interval 1, probability 0, space 0, times 0 [ 403.612855][ T9658] CPU: 0 UID: 0 PID: 9658 Comm: syz.4.839 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 403.612902][ T9658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 403.612920][ T9658] Call Trace: [ 403.612929][ T9658] [ 403.612941][ T9658] dump_stack_lvl+0x16c/0x1f0 [ 403.613000][ T9658] should_fail_ex+0x50a/0x650 [ 403.613040][ T9658] ? fs_reclaim_acquire+0xae/0x150 [ 403.613095][ T9658] should_failslab+0xc2/0x120 [ 403.613138][ T9658] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 403.613211][ T9658] ? lockdep_hardirqs_on+0x7c/0x110 [ 403.613262][ T9658] ? ip6_route_net_init+0x30f/0x8d0 [ 403.613310][ T9658] ? __percpu_counter_init_many+0x2c6/0x3b0 [ 403.613352][ T9658] kmemdup_noprof+0x29/0x60 [ 403.613405][ T9658] ip6_route_net_init+0x30f/0x8d0 [ 403.613454][ T9658] ? __pfx_ip6_route_net_init+0x10/0x10 [ 403.613503][ T9658] ops_init+0x1df/0x5f0 [ 403.613544][ T9658] setup_net+0x21f/0x860 [ 403.613582][ T9658] ? __pfx_setup_net+0x10/0x10 [ 403.613615][ T9658] ? down_read_killable+0xcc/0x380 [ 403.613650][ T9658] ? __pfx_down_read_killable+0x10/0x10 [ 403.613687][ T9658] ? debug_mutex_init+0x37/0x70 [ 403.613743][ T9658] copy_net_ns+0x2b4/0x6c0 [ 403.613786][ T9658] create_new_namespaces+0x3ea/0xad0 [ 403.613842][ T9658] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 403.613894][ T9658] ksys_unshare+0x45d/0xa40 [ 403.613946][ T9658] ? __pfx_ksys_unshare+0x10/0x10 [ 403.613994][ T9658] ? xfd_validate_state+0x5d/0x180 [ 403.614052][ T9658] __x64_sys_unshare+0x31/0x40 [ 403.614102][ T9658] do_syscall_64+0xcd/0x250 [ 403.614135][ T9658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 403.614191][ T9658] RIP: 0033:0x7f14ead8cde9 [ 403.614218][ T9658] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 403.614249][ T9658] RSP: 002b:00007f14ebbd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 403.614280][ T9658] RAX: ffffffffffffffda RBX: 00007f14eafa5fa0 RCX: 00007f14ead8cde9 [ 403.614302][ T9658] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 403.614321][ T9658] RBP: 00007f14eae0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 403.614339][ T9658] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 403.614358][ T9658] R13: 0000000000000000 R14: 00007f14eafa5fa0 R15: 00007fff50755448 [ 403.614398][ T9658] [ 404.278409][ T9660] syz.1.838 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 404.890526][ T9671] misc userio: No port type given on /dev/userio [ 404.898840][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 405.043440][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 405.132322][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 405.203707][ T5844] Bluetooth: hci4: command 0x0c1a tx timeout [ 405.429017][ T9670] netlink: 252 bytes leftover after parsing attributes in process `syz.4.842'. [ 405.826857][ T9681] netlink: 28 bytes leftover after parsing attributes in process `syz.3.843'. [ 406.417204][ T9681] veth0_macvtap: left promiscuous mode [ 407.181581][ T9704] openvswitch: netlink: IP tunnel dst address not specified [ 408.891318][ T9710] tipc: Started in network mode [ 408.897114][ T9710] tipc: Node identity ee00, cluster identity 4711 [ 408.904224][ T9710] tipc: Node number set to 60928 [ 409.648200][ T9726] FAULT_INJECTION: forcing a failure. [ 409.648200][ T9726] name failslab, interval 1, probability 0, space 0, times 0 [ 409.717211][ T9726] CPU: 1 UID: 0 PID: 9726 Comm: syz.2.856 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 409.717259][ T9726] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 409.717279][ T9726] Call Trace: [ 409.717289][ T9726] [ 409.717301][ T9726] dump_stack_lvl+0x16c/0x1f0 [ 409.717360][ T9726] should_fail_ex+0x50a/0x650 [ 409.717401][ T9726] ? fs_reclaim_acquire+0xae/0x150 [ 409.717458][ T9726] should_failslab+0xc2/0x120 [ 409.717502][ T9726] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 409.717543][ T9726] ? __kernfs_new_node+0xd3/0x890 [ 409.717602][ T9726] __kernfs_new_node+0xd3/0x890 [ 409.717661][ T9726] ? __pfx___kernfs_new_node+0x10/0x10 [ 409.717713][ T9726] ? __pfx_lock_release+0x10/0x10 [ 409.717754][ T9726] ? kernfs_add_one+0x39d/0x520 [ 409.717803][ T9726] ? up_write+0x1b2/0x520 [ 409.717853][ T9726] kernfs_new_node+0x186/0x240 [ 409.717895][ T9726] __kernfs_create_file+0x53/0x350 [ 409.717953][ T9726] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 409.718014][ T9726] sysfs_merge_group+0x1b1/0x340 [ 409.718046][ T9726] ? __pfx_sysfs_merge_group+0x10/0x10 [ 409.718084][ T9726] ? __pfx_dev_add_physical_location+0x10/0x10 [ 409.718123][ T9726] ? bus_to_subsys+0x12d/0x160 [ 409.718179][ T9726] dpm_sysfs_add+0x237/0x280 [ 409.718222][ T9726] device_add+0x9a8/0x1a70 [ 409.718271][ T9726] ? __pfx_device_add+0x10/0x10 [ 409.718320][ T9726] ? __init_waitqueue_head+0xca/0x150 [ 409.718382][ T9726] rfkill_register+0x1ad/0xb40 [ 409.718426][ T9726] nfc_register_device+0x11f/0x3c0 [ 409.718479][ T9726] nci_register_device+0x7f4/0xb80 [ 409.718521][ T9726] ? __pfx_nci_register_device+0x10/0x10 [ 409.718580][ T9726] virtual_ncidev_open+0x141/0x220 [ 409.718628][ T9726] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 409.718674][ T9726] misc_open+0x35a/0x420 [ 409.718714][ T9726] ? __pfx_misc_open+0x10/0x10 [ 409.718752][ T9726] chrdev_open+0x237/0x6a0 [ 409.718789][ T9726] ? __pfx_apparmor_file_open+0x10/0x10 [ 409.718825][ T9726] ? __pfx_chrdev_open+0x10/0x10 [ 409.718867][ T9726] ? file_set_fsnotify_mode+0x163/0x5d0 [ 409.718947][ T9726] do_dentry_open+0x735/0x1c40 [ 409.718986][ T9726] ? __pfx_chrdev_open+0x10/0x10 [ 409.719025][ T9726] ? inode_permission+0xdd/0x5f0 [ 409.719074][ T9726] vfs_open+0x82/0x3f0 [ 409.719115][ T9726] ? may_open+0x1f2/0x400 [ 409.719166][ T9726] path_openat+0x1e88/0x2d80 [ 409.719217][ T9726] ? __pfx_path_openat+0x10/0x10 [ 409.719254][ T9726] ? __pfx___lock_acquire+0x10/0x10 [ 409.719292][ T9726] ? lock_acquire.part.0+0x11b/0x380 [ 409.719331][ T9726] ? find_held_lock+0x2d/0x110 [ 409.719388][ T9726] do_filp_open+0x20c/0x470 [ 409.719430][ T9726] ? __pfx_do_filp_open+0x10/0x10 [ 409.719463][ T9726] ? find_held_lock+0x2d/0x110 [ 409.719543][ T9726] ? alloc_fd+0x41f/0x760 [ 409.719590][ T9726] do_sys_openat2+0x17a/0x1e0 [ 409.719634][ T9726] ? __pfx_do_sys_openat2+0x10/0x10 [ 409.719697][ T9726] __x64_sys_openat+0x175/0x210 [ 409.719742][ T9726] ? __pfx___x64_sys_openat+0x10/0x10 [ 409.719806][ T9726] do_syscall_64+0xcd/0x250 [ 409.719841][ T9726] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 409.719885][ T9726] RIP: 0033:0x7f15f778cde9 [ 409.719911][ T9726] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 409.719955][ T9726] RSP: 002b:00007f15f863d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 409.719985][ T9726] RAX: ffffffffffffffda RBX: 00007f15f79a5fa0 RCX: 00007f15f778cde9 [ 409.720006][ T9726] RDX: 0000000000000002 RSI: 0000200000000400 RDI: ffffffffffffff9c [ 409.720026][ T9726] RBP: 00007f15f780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 409.720044][ T9726] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 409.720062][ T9726] R13: 0000000000000000 R14: 00007f15f79a5fa0 R15: 00007ffdb98ac778 [ 409.720103][ T9726] [ 410.136630][ T9730] nbd: must specify a size in bytes for the device [ 410.595730][ T9743] netlink: 93 bytes leftover after parsing attributes in process `syz.2.859'. [ 412.527343][ T9774] netlink: 28 bytes leftover after parsing attributes in process `syz.2.867'. syzkaller syzkaller login: [ 414.898391][ T5146] Bluetooth: hci2: unexpected subevent 0x0a length: 124 > 30 [ 414.952258][ T9824] netlink: 330 bytes leftover after parsing attributes in process `syz.1.876'. [ 415.012624][ T9825] netlink: 4 bytes leftover after parsing attributes in process `syz.1.876'. [ 415.719011][ T9841] FAULT_INJECTION: forcing a failure. [ 415.719011][ T9841] name failslab, interval 1, probability 0, space 0, times 0 [ 415.741241][ T9841] CPU: 0 UID: 0 PID: 9841 Comm: syz.2.880 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 415.741289][ T9841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 415.741308][ T9841] Call Trace: [ 415.741317][ T9841] [ 415.741329][ T9841] dump_stack_lvl+0x16c/0x1f0 [ 415.741386][ T9841] should_fail_ex+0x50a/0x650 [ 415.741424][ T9841] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 415.741480][ T9841] should_failslab+0xc2/0x120 [ 415.741521][ T9841] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 415.741561][ T9841] ? __alloc_skb+0x2b3/0x380 [ 415.741600][ T9841] __alloc_skb+0x2b3/0x380 [ 415.741632][ T9841] ? __pfx___alloc_skb+0x10/0x10 [ 415.741669][ T9841] ? aoecmd_cfg+0xec/0x7d0 [ 415.741713][ T9841] new_skb+0x21/0x230 [ 415.741745][ T9841] aoecmd_cfg+0x20e/0x7d0 [ 415.741785][ T9841] ? __pfx_aoecmd_cfg+0x10/0x10 [ 415.741835][ T9841] ? apparmor_file_permission+0x251/0x400 [ 415.741895][ T9841] ? __pfx_aoechr_write+0x10/0x10 [ 415.741929][ T9841] ? aoechr_write+0x120/0x160 [ 415.741980][ T9841] aoechr_write+0x120/0x160 [ 415.742012][ T9841] vfs_write+0x24c/0x1150 [ 415.742047][ T9841] ? __fget_files+0x1fc/0x3a0 [ 415.742092][ T9841] ? __pfx_lock_release+0x10/0x10 [ 415.742133][ T9841] ? __pfx_vfs_write+0x10/0x10 [ 415.742164][ T9841] ? do_futex+0x123/0x350 [ 415.742197][ T9841] ? lock_acquire+0x2f/0xb0 [ 415.742233][ T9841] ? __fget_files+0x40/0x3a0 [ 415.742272][ T9841] ? __fget_files+0x206/0x3a0 [ 415.742318][ T9841] ksys_write+0x12b/0x250 [ 415.742349][ T9841] ? __pfx_ksys_write+0x10/0x10 [ 415.742393][ T9841] do_syscall_64+0xcd/0x250 [ 415.742427][ T9841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 415.742472][ T9841] RIP: 0033:0x7f15f778cde9 [ 415.742498][ T9841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 415.742530][ T9841] RSP: 002b:00007f15f863d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 415.742560][ T9841] RAX: ffffffffffffffda RBX: 00007f15f79a5fa0 RCX: 00007f15f778cde9 [ 415.742581][ T9841] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 415.742600][ T9841] RBP: 00007f15f780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 415.742619][ T9841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 415.742637][ T9841] R13: 0000000000000000 R14: 00007f15f79a5fa0 R15: 00007ffdb98ac778 [ 415.742676][ T9841] [ 415.742690][ T9841] aoe: skb alloc failure [ 415.950133][ C0] vkms_vblank_simulate: vblank timer overrun [ 416.075803][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 416.082982][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 419.916028][ T1132] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.814615][ T1132] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.797672][ T1132] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 syzkaller syzkaller login: [ 422.409355][ T29] audit: type=1800 audit(4294967359.178:49): pid=9941 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.899" name="discovery_nqn" dev="configfs" ino=25059 res=0 errno=0 [ 423.030414][ T1132] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.270931][ T9895] tipc: Started in network mode [ 423.342469][ T9895] tipc: Node identity ee00, cluster identity 4711 [ 423.382556][ T9895] tipc: Node number set to 60928 [ 424.127854][ T9946] netlink: 28 bytes leftover after parsing attributes in process `syz.4.900'. [ 425.635140][ T1132] gretap0: left allmulticast mode [ 425.641231][ T1132] gretap0: left promiscuous mode [ 425.655967][ T1132] bridge0: port 3(gretap0) entered disabled state [ 425.814859][ T1132] bridge_slave_1: left allmulticast mode [ 425.821202][ T1132] bridge_slave_1: left promiscuous mode [ 425.839465][ T1132] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.004640][ T1132] bridge_slave_0: left allmulticast mode [ 426.010922][ T1132] bridge_slave_0: left promiscuous mode [ 426.033956][ T1132] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.087948][ T1132] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 428.109179][ T1132] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 428.137366][ T1132] bond0 (unregistering): Released all slaves [ 429.743755][ T9947] Process accounting resumed [ 429.809585][ T1132] hsr_slave_0: left promiscuous mode [ 429.946954][ T1132] hsr_slave_1: left promiscuous mode [ 429.953544][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.070917][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 430.417435][ T1132] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.460670][ T1132] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.502777][ T9984] can: request_module (can-proto-0) failed. [ 430.599242][ T1132] veth1_macvtap: left promiscuous mode [ 430.631841][ T1132] veth0_macvtap: left promiscuous mode [ 430.795847][ T9994] random: crng reseeded on system resumption [ 432.225969][ T1132] team0 (unregistering): Port device team_slave_1 removed [ 432.437447][ T9999] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 432.457990][ T1132] team0 (unregistering): Port device team_slave_0 removed [ 432.886354][T10007] aoe: skb alloc failure [ 432.905955][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 432.913496][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 432.925264][T10007] netlink: 8 bytes leftover after parsing attributes in process `syz.3.911'. [ 437.152757][T10070] zswap: compressor not available [ 439.602332][T10121] FAULT_INJECTION: forcing a failure. [ 439.602332][T10121] name failslab, interval 1, probability 0, space 0, times 0 [ 439.674700][T10121] CPU: 1 UID: 0 PID: 10121 Comm: syz.2.927 Not tainted 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 439.674749][T10121] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 439.674768][T10121] Call Trace: [ 439.674778][T10121] [ 439.674790][T10121] dump_stack_lvl+0x16c/0x1f0 [ 439.674850][T10121] should_fail_ex+0x50a/0x650 [ 439.674890][T10121] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 439.674946][T10121] should_failslab+0xc2/0x120 [ 439.674987][T10121] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 439.675026][T10121] ? __alloc_skb+0x2b3/0x380 [ 439.675074][T10121] __alloc_skb+0x2b3/0x380 [ 439.675106][T10121] ? __pfx___alloc_skb+0x10/0x10 [ 439.675143][T10121] ? aoecmd_cfg+0xec/0x7d0 [ 439.675189][T10121] new_skb+0x21/0x230 [ 439.675221][T10121] aoecmd_cfg+0x20e/0x7d0 [ 439.675262][T10121] ? __pfx_aoecmd_cfg+0x10/0x10 [ 439.675311][T10121] ? apparmor_file_permission+0x251/0x400 [ 439.675371][T10121] ? __pfx_aoechr_write+0x10/0x10 [ 439.675405][T10121] ? aoechr_write+0x120/0x160 [ 439.675434][T10121] aoechr_write+0x120/0x160 [ 439.675468][T10121] vfs_write+0x24c/0x1150 [ 439.675502][T10121] ? __fget_files+0x1fc/0x3a0 [ 439.675535][T10121] ? __pfx_lock_release+0x10/0x10 [ 439.675575][T10121] ? __pfx_vfs_write+0x10/0x10 [ 439.675604][T10121] ? do_futex+0x123/0x350 [ 439.675637][T10121] ? lock_acquire+0x2f/0xb0 [ 439.675673][T10121] ? __fget_files+0x40/0x3a0 [ 439.675710][T10121] ? __fget_files+0x206/0x3a0 [ 439.675756][T10121] ksys_write+0x12b/0x250 [ 439.675788][T10121] ? __pfx_ksys_write+0x10/0x10 [ 439.675832][T10121] do_syscall_64+0xcd/0x250 [ 439.675866][T10121] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.675911][T10121] RIP: 0033:0x7f15f778cde9 [ 439.675937][T10121] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.675968][T10121] RSP: 002b:00007f15f863d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 439.675998][T10121] RAX: ffffffffffffffda RBX: 00007f15f79a5fa0 RCX: 00007f15f778cde9 [ 439.676018][T10121] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 439.676035][T10121] RBP: 00007f15f780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 439.676084][T10121] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 439.676103][T10121] R13: 0000000000000000 R14: 00007f15f79a5fa0 R15: 00007ffdb98ac778 [ 439.676142][T10121] [ 439.676157][T10121] aoe: skb alloc failure [ 440.112664][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.119665][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.164898][T10171] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 443.332176][T10169] netlink: 338 bytes leftover after parsing attributes in process `syz.1.934'. [ 444.393511][T10199] netlink: 16 bytes leftover after parsing attributes in process `syz.2.941'. [ 445.546454][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.553653][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.272453][T10270] netlink: 338 bytes leftover after parsing attributes in process `syz.3.949'. [ 448.444762][T10266] zswap: compressor not available [ 449.252891][T10280] page: refcount:7 mapcount:6 mapping:0000000000000000 index:0x7f6fb9d57 pfn:0x78000 [ 449.315532][T10280] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 449.374159][T10280] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 449.474461][T10280] raw: 00000007f6fb9d57 0000000000000000 0000000700000005 0000000000000000 [ 449.515338][T10280] page dumped because: unmovable page [ 449.555638][T10280] page_owner tracks the page as allocated [ 449.600158][T10280] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 5831, tgid 5831 (syz-executor), ts 88696479156, free_ts 88467534671 [ 449.721050][T10280] post_alloc_hook+0x181/0x1b0 [ 449.747960][T10289] Setting dangerous option i915.mitigations - tainting kernel [ 449.775706][T10280] get_page_from_freelist+0xfce/0x2f80 [ 449.805880][T10280] __alloc_frozen_pages_noprof+0x221/0x2470 [ 449.842509][T10280] alloc_pages_mpol+0x1fc/0x540 [ 449.889233][T10280] alloc_pages_noprof+0x131/0x390 [ 449.935823][T10280] __vmalloc_node_range_noprof+0x721/0x1530 [ 449.982656][T10280] vmalloc_user_noprof+0x6b/0x90 [ 450.010200][T10280] kcov_ioctl+0x4c/0x730 [ 450.014981][T10280] __x64_sys_ioctl+0x190/0x200 [ 450.066105][T10280] do_syscall_64+0xcd/0x250 [ 450.071164][T10280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.135931][T10280] page last free pid 5824 tgid 5824 stack trace: [ 450.168111][T10280] free_unref_folios+0xa7b/0x1500 [ 450.173771][T10280] folios_put_refs+0x587/0x7b0 [ 450.243526][T10280] free_pages_and_swap_cache+0x351/0x500 [ 450.274035][T10280] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 450.308607][T10280] tlb_finish_mmu+0x168/0x7b0 [ 450.313866][T10280] vms_clear_ptes+0x560/0x770 [ 450.370311][T10280] vms_complete_munmap_vmas+0x1ca/0x970 [ 450.410407][T10280] do_vmi_align_munmap+0x619/0x890 [ 450.454035][T10280] do_vmi_munmap+0x208/0x3e0 [ 450.479838][T10280] __vm_munmap+0x19b/0x390 [ 450.525570][T10280] __x64_sys_munmap+0x59/0x80 [ 450.547809][T10280] do_syscall_64+0xcd/0x250 [ 450.565928][T10280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.583138][T10298] FAULT_INJECTION: forcing a failure. [ 450.583138][T10298] name failslab, interval 1, probability 0, space 0, times 0 [ 450.641746][T10298] CPU: 0 UID: 0 PID: 10298 Comm: syz.4.956 Tainted: G U 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 450.641801][T10298] Tainted: [U]=USER [ 450.641812][T10298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 450.641831][T10298] Call Trace: [ 450.641841][T10298] [ 450.641853][T10298] dump_stack_lvl+0x16c/0x1f0 [ 450.641912][T10298] should_fail_ex+0x50a/0x650 [ 450.641951][T10298] ? fs_reclaim_acquire+0xae/0x150 [ 450.642007][T10298] should_failslab+0xc2/0x120 [ 450.642048][T10298] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 450.642090][T10298] ? lockdep_hardirqs_on+0x7c/0x110 [ 450.642139][T10298] ? fib_notifier_ops_register+0x32/0x270 [ 450.642199][T10298] kmemdup_noprof+0x29/0x60 [ 450.642252][T10298] fib_notifier_ops_register+0x32/0x270 [ 450.642307][T10298] fib4_notifier_init+0x4f/0xd0 [ 450.642343][T10298] fib_net_init+0xc0/0x3d0 [ 450.642380][T10298] ? __pfx_fib_net_init+0x10/0x10 [ 450.642429][T10298] ? do_init_timer+0xc9/0x110 [ 450.642460][T10298] ? devinet_init_net+0x5b3/0x8f0 [ 450.642506][T10298] ? __pfx_fib_net_init+0x10/0x10 [ 450.642542][T10298] ops_init+0x1df/0x5f0 [ 450.642581][T10298] setup_net+0x21f/0x860 [ 450.642619][T10298] ? __pfx_setup_net+0x10/0x10 [ 450.642652][T10298] ? down_read_killable+0xcc/0x380 [ 450.642686][T10298] ? __pfx_down_read_killable+0x10/0x10 [ 450.642729][T10298] ? debug_mutex_init+0x37/0x70 [ 450.642786][T10298] copy_net_ns+0x2b4/0x6c0 [ 450.642829][T10298] create_new_namespaces+0x3ea/0xad0 [ 450.642888][T10298] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 450.642939][T10298] ksys_unshare+0x45d/0xa40 [ 450.642989][T10298] ? __pfx_ksys_unshare+0x10/0x10 [ 450.643038][T10298] ? xfd_validate_state+0x5d/0x180 [ 450.643094][T10298] __x64_sys_unshare+0x31/0x40 [ 450.643142][T10298] do_syscall_64+0xcd/0x250 [ 450.643175][T10298] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.643220][T10298] RIP: 0033:0x7f14ead8cde9 [ 450.643246][T10298] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 450.643276][T10298] RSP: 002b:00007f14ebbd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 450.643307][T10298] RAX: ffffffffffffffda RBX: 00007f14eafa5fa0 RCX: 00007f14ead8cde9 [ 450.643327][T10298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 450.643345][T10298] RBP: 00007f14eae0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 450.643363][T10298] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 450.643381][T10298] R13: 0000000000000000 R14: 00007f14eafa5fa0 R15: 00007fff50755448 [ 450.643430][T10298] [ 451.496986][T10308] sg_write: data in/out 875901198/1872 bytes for SCSI command 0x0-- guessing data in; [ 451.496986][T10308] program syz.3.958 not setting count and/or reply_len properly [ 451.960779][T10314] netlink: 16 bytes leftover after parsing attributes in process `syz.3.959'. [ 452.162494][T10317] can: request_module (can-proto-0) failed. [ 454.351123][T10339] Process accounting resumed [ 454.571546][T10332] FAULT_INJECTION: forcing a failure. [ 454.571546][T10332] name failslab, interval 1, probability 0, space 0, times 0 [ 454.674126][T10332] CPU: 1 UID: 0 PID: 10332 Comm: syz.4.961 Tainted: G U 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 454.674166][T10332] Tainted: [U]=USER [ 454.674173][T10332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 454.674186][T10332] Call Trace: [ 454.674193][T10332] [ 454.674202][T10332] dump_stack_lvl+0x16c/0x1f0 [ 454.674244][T10332] should_fail_ex+0x50a/0x650 [ 454.674272][T10332] ? fs_reclaim_acquire+0xae/0x150 [ 454.674312][T10332] should_failslab+0xc2/0x120 [ 454.674342][T10332] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 454.674370][T10332] ? __kernfs_new_node+0xd3/0x890 [ 454.674412][T10332] __kernfs_new_node+0xd3/0x890 [ 454.674453][T10332] ? __pfx___kernfs_new_node+0x10/0x10 [ 454.674499][T10332] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 454.674530][T10332] ? rwsem_read_trylock+0x12d/0x250 [ 454.674563][T10332] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 454.674600][T10332] kernfs_new_node+0x186/0x240 [ 454.674630][T10332] __kernfs_create_file+0x53/0x350 [ 454.674664][T10332] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 454.674705][T10332] sysfs_merge_group+0x1b1/0x340 [ 454.674728][T10332] ? __pfx_sysfs_merge_group+0x10/0x10 [ 454.674754][T10332] ? __pfx_dev_add_physical_location+0x10/0x10 [ 454.674783][T10332] ? bus_to_subsys+0x12d/0x160 [ 454.674822][T10332] dpm_sysfs_add+0x237/0x280 [ 454.674858][T10332] device_add+0x9a8/0x1a70 [ 454.674893][T10332] ? __pfx_device_add+0x10/0x10 [ 454.674927][T10332] ? __init_waitqueue_head+0xca/0x150 [ 454.674971][T10332] netdev_register_kobject+0x183/0x3a0 [ 454.675000][T10332] register_netdevice+0x147b/0x1e50 [ 454.675029][T10332] ? idr_alloc+0xde/0x130 [ 454.675062][T10332] ? __pfx_register_netdevice+0x10/0x10 [ 454.675096][T10332] ppp_dev_configure+0x99e/0xc80 [ 454.675129][T10332] ? alloc_netdev_mqs+0x1038/0x13e0 [ 454.675164][T10332] ppp_ioctl+0x17eb/0x2590 [ 454.675197][T10332] ? __pfx_lock_release+0x10/0x10 [ 454.675224][T10332] ? trace_lock_acquire+0x14e/0x1f0 [ 454.675247][T10332] ? __pfx_ppp_ioctl+0x10/0x10 [ 454.675287][T10332] ? __fget_files+0x206/0x3a0 [ 454.675315][T10332] ? __pfx_ppp_ioctl+0x10/0x10 [ 454.675350][T10332] __x64_sys_ioctl+0x190/0x200 [ 454.675387][T10332] do_syscall_64+0xcd/0x250 [ 454.675411][T10332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.675444][T10332] RIP: 0033:0x7f14ead8cde9 [ 454.675461][T10332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.675483][T10332] RSP: 002b:00007f14ebbd7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 454.675505][T10332] RAX: ffffffffffffffda RBX: 00007f14eafa5fa0 RCX: 00007f14ead8cde9 [ 454.675520][T10332] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000008 [ 454.675536][T10332] RBP: 00007f14eae0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 454.675550][T10332] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 454.675563][T10332] R13: 0000000000000000 R14: 00007f14eafa5fa0 R15: 00007fff50755448 [ 454.675591][T10332] [ 455.595439][T10356] netlink: zone id is out of range [ 455.608630][T10356] netlink: set zone limit has 4 unknown bytes [ 457.304808][T10359] Invalid ELF header magic: != ELF [ 459.603853][ T5146] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 459.616685][ T5146] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 459.631214][ T5146] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 459.672469][ T5146] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 459.692778][ T5146] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 459.711229][ T5146] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 460.121904][T10399] chnl_net:caif_netlink_parms(): no params data found [ 460.447235][T10399] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.455832][T10399] bridge0: port 1(bridge_slave_0) entered disabled state [ 460.465386][T10399] bridge_slave_0: entered allmulticast mode [ 460.477591][T10399] bridge_slave_0: entered promiscuous mode [ 460.493701][T10399] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.502053][T10399] bridge0: port 2(bridge_slave_1) entered disabled state [ 460.510013][T10399] bridge_slave_1: entered allmulticast mode [ 460.543888][T10399] bridge_slave_1: entered promiscuous mode [ 460.662116][T10399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 460.686707][T10399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.903780][T10399] team0: Port device team_slave_0 added [ 460.944512][T10399] team0: Port device team_slave_1 added [ 461.394129][T10399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 461.438227][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.531573][T10399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 461.592642][T10399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 461.630978][T10399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 461.744207][T10399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 461.797762][ T5844] Bluetooth: hci5: command tx timeout [ 462.210473][T10399] hsr_slave_0: entered promiscuous mode [ 462.240599][T10399] hsr_slave_1: entered promiscuous mode [ 463.376255][T10399] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 463.497208][T10399] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 463.576415][T10399] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 463.783263][T10399] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 463.876390][ T5844] Bluetooth: hci5: command tx timeout [ 464.341552][T10399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.468149][T10399] 8021q: adding VLAN 0 to HW filter on device team0 [ 464.501973][ T8225] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.509869][ T8225] bridge0: port 1(bridge_slave_0) entered forwarding state [ 464.564865][ T8225] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.572749][ T8225] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.056691][T10485] FAULT_INJECTION: forcing a failure. [ 465.056691][T10485] name failslab, interval 1, probability 0, space 0, times 0 [ 465.072502][T10485] CPU: 0 UID: 0 PID: 10485 Comm: syz.3.979 Tainted: G U 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 465.072552][T10485] Tainted: [U]=USER [ 465.072562][T10485] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 465.072581][T10485] Call Trace: [ 465.072590][T10485] [ 465.072601][T10485] dump_stack_lvl+0x16c/0x1f0 [ 465.072657][T10485] should_fail_ex+0x50a/0x650 [ 465.072694][T10485] ? fs_reclaim_acquire+0xae/0x150 [ 465.072749][T10485] ? __do_sys_memfd_create+0x17b/0x8a0 [ 465.072792][T10485] should_failslab+0xc2/0x120 [ 465.072830][T10485] __kmalloc_cache_noprof+0x68/0x420 [ 465.072872][T10485] __do_sys_memfd_create+0x17b/0x8a0 [ 465.072921][T10485] do_syscall_64+0xcd/0x250 [ 465.072952][T10485] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.072999][T10485] RIP: 0033:0x7fe702b8cde9 [ 465.073023][T10485] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.073057][T10485] RSP: 002b:00007fe7039fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 465.073087][T10485] RAX: ffffffffffffffda RBX: 00007fe702da5fa0 RCX: 00007fe702b8cde9 [ 465.073108][T10485] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000000 [ 465.073128][T10485] RBP: 00007fe702c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 465.073147][T10485] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.073165][T10485] R13: 0000000000000000 R14: 00007fe702da5fa0 R15: 00007ffccacde5f8 [ 465.073203][T10485] [ 465.592523][T10399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 465.954006][ T5844] Bluetooth: hci5: command tx timeout [ 466.236476][ T29] audit: type=1326 audit(4294967402.996:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10506 comm="syz.1.981" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe91398cde9 code=0x0 [ 466.406972][T10399] veth0_vlan: entered promiscuous mode [ 466.830007][T10399] veth1_vlan: entered promiscuous mode [ 466.889557][T10399] veth0_macvtap: entered promiscuous mode [ 466.928888][T10399] veth1_macvtap: entered promiscuous mode [ 466.970052][T10523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.982'. [ 467.006684][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.044314][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.084469][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.108658][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.139677][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 467.166856][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.203721][T10399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 467.275494][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.312615][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.354719][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.404547][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.426833][T10399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 467.442533][T10399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 467.491297][T10399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 467.516674][T10399] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.531573][T10399] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.559755][T10399] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.619780][T10399] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 467.900521][ T7261] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.930427][ T7261] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.967035][ T29] audit: type=1800 audit(4294967404.706:51): pid=10541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.983" name="dbroot" dev="configfs" ino=27274 res=0 errno=0 [ 467.993873][ T7261] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 468.015990][ T7261] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 468.048627][ T5844] Bluetooth: hci5: command tx timeout [ 469.344470][T10574] netlink: 20 bytes leftover after parsing attributes in process `syz.3.987'. [ 469.677638][T10580] aoe: skb alloc failure [ 469.711346][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 469.720701][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 473.638234][ T29] audit: type=1800 audit(4294967410.383:52): pid=10657 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1011" name="discovery_nqn" dev="configfs" ino=27960 res=0 errno=0 [ 478.031475][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1028'. [ 479.359287][T10740] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 479.370614][T10740] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 479.377333][T10740] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 479.401242][T10740] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 479.411242][T10740] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 479.449197][T10740] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 480.102982][T10755] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.287293][T10755] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.503311][T10755] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.789259][T10755] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.085231][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 481.402440][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 481.407589][ T5146] Bluetooth: hci2: command 0x0406 tx timeout [ 481.492607][ T5146] Bluetooth: hci5: command 0x0c1a tx timeout [ 483.049188][T10804] FAULT_INJECTION: forcing a failure. [ 483.049188][T10804] name failslab, interval 1, probability 0, space 0, times 0 [ 483.097228][T10804] CPU: 1 UID: 0 PID: 10804 Comm: syz.2.1040 Tainted: G U 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 483.097281][T10804] Tainted: [U]=USER [ 483.097292][T10804] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 483.097311][T10804] Call Trace: [ 483.097320][T10804] [ 483.097332][T10804] dump_stack_lvl+0x16c/0x1f0 [ 483.097390][T10804] should_fail_ex+0x50a/0x650 [ 483.097430][T10804] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 483.097496][T10804] should_failslab+0xc2/0x120 [ 483.097539][T10804] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 483.097579][T10804] ? __alloc_skb+0x2b3/0x380 [ 483.097615][T10804] __alloc_skb+0x2b3/0x380 [ 483.097646][T10804] ? __pfx___alloc_skb+0x10/0x10 [ 483.097681][T10804] ? aoecmd_cfg+0xec/0x7d0 [ 483.097724][T10804] new_skb+0x21/0x230 [ 483.097757][T10804] aoecmd_cfg+0x20e/0x7d0 [ 483.097797][T10804] ? __pfx_aoecmd_cfg+0x10/0x10 [ 483.097848][T10804] ? apparmor_file_permission+0x251/0x400 [ 483.097906][T10804] ? __pfx_aoechr_write+0x10/0x10 [ 483.097939][T10804] ? aoechr_write+0x120/0x160 [ 483.097969][T10804] aoechr_write+0x120/0x160 [ 483.098002][T10804] vfs_write+0x24c/0x1150 [ 483.098037][T10804] ? __fget_files+0x1fc/0x3a0 [ 483.098071][T10804] ? __pfx_lock_release+0x10/0x10 [ 483.098111][T10804] ? __pfx_vfs_write+0x10/0x10 [ 483.098141][T10804] ? do_futex+0x123/0x350 [ 483.098174][T10804] ? lock_acquire+0x2f/0xb0 [ 483.098211][T10804] ? __fget_files+0x40/0x3a0 [ 483.098250][T10804] ? __fget_files+0x206/0x3a0 [ 483.098295][T10804] ksys_write+0x12b/0x250 [ 483.098327][T10804] ? __pfx_ksys_write+0x10/0x10 [ 483.098372][T10804] do_syscall_64+0xcd/0x250 [ 483.098404][T10804] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 483.098450][T10804] RIP: 0033:0x7f15f778cde9 [ 483.098486][T10804] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 483.098518][T10804] RSP: 002b:00007f15f863d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 483.098547][T10804] RAX: ffffffffffffffda RBX: 00007f15f79a5fa0 RCX: 00007f15f778cde9 [ 483.098568][T10804] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 483.098586][T10804] RBP: 00007f15f780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 483.098604][T10804] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 483.098621][T10804] R13: 0000000000000000 R14: 00007f15f79a5fa0 R15: 00007ffdb98ac778 [ 483.098659][T10804] [ 483.098672][T10804] aoe: skb alloc failure [ 483.404389][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 483.411447][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 483.562758][ T5146] Bluetooth: hci5: command 0x0c1a tx timeout [ 484.147547][T10824] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1045'. [ 484.422573][T10811] Process accounting paused [ 485.092254][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 485.099913][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 485.645114][ T5146] Bluetooth: hci5: command 0x0c1a tx timeout [ 486.079228][T10853] FAULT_INJECTION: forcing a failure. [ 486.079228][T10853] name failslab, interval 1, probability 0, space 0, times 0 [ 486.122930][T10851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1055'. [ 486.151664][T10853] CPU: 0 UID: 0 PID: 10853 Comm: syz.5.1053 Tainted: G U 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 486.151718][T10853] Tainted: [U]=USER [ 486.151729][T10853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 486.151746][T10853] Call Trace: [ 486.151755][T10853] [ 486.151766][T10853] dump_stack_lvl+0x16c/0x1f0 [ 486.151824][T10853] should_fail_ex+0x50a/0x650 [ 486.151865][T10853] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 486.151921][T10853] should_failslab+0xc2/0x120 [ 486.151965][T10853] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 486.152005][T10853] ? __alloc_skb+0x2b3/0x380 [ 486.152042][T10853] __alloc_skb+0x2b3/0x380 [ 486.152074][T10853] ? __pfx___alloc_skb+0x10/0x10 [ 486.152110][T10853] ? aoecmd_cfg+0xec/0x7d0 [ 486.152169][T10853] new_skb+0x21/0x230 [ 486.152202][T10853] aoecmd_cfg+0x20e/0x7d0 [ 486.152242][T10853] ? __pfx_aoecmd_cfg+0x10/0x10 [ 486.152292][T10853] ? apparmor_file_permission+0x251/0x400 [ 486.152353][T10853] ? __pfx_aoechr_write+0x10/0x10 [ 486.152386][T10853] ? aoechr_write+0x120/0x160 [ 486.152416][T10853] aoechr_write+0x120/0x160 [ 486.152449][T10853] vfs_write+0x24c/0x1150 [ 486.152484][T10853] ? __fget_files+0x1fc/0x3a0 [ 486.152519][T10853] ? __pfx_lock_release+0x10/0x10 [ 486.152559][T10853] ? __pfx_vfs_write+0x10/0x10 [ 486.152587][T10853] ? do_futex+0x123/0x350 [ 486.152621][T10853] ? lock_acquire+0x2f/0xb0 [ 486.152657][T10853] ? __fget_files+0x40/0x3a0 [ 486.152696][T10853] ? __fget_files+0x206/0x3a0 [ 486.152742][T10853] ksys_write+0x12b/0x250 [ 486.152779][T10853] ? __pfx_ksys_write+0x10/0x10 [ 486.152823][T10853] do_syscall_64+0xcd/0x250 [ 486.152857][T10853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.152903][T10853] RIP: 0033:0x7efecdf8cde9 [ 486.152929][T10853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.152960][T10853] RSP: 002b:00007efecee7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 486.152991][T10853] RAX: ffffffffffffffda RBX: 00007efece1a5fa0 RCX: 00007efecdf8cde9 [ 486.153012][T10853] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 486.153030][T10853] RBP: 00007efece00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 486.153048][T10853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.153067][T10853] R13: 0000000000000000 R14: 00007efece1a5fa0 R15: 00007ffee28dc248 [ 486.153105][T10853] [ 486.153232][T10853] aoe: skb alloc failure [ 486.435768][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 486.443057][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 486.516649][T10851] gretap0: left allmulticast mode [ 486.522389][T10851] gretap0: left promiscuous mode [ 486.545317][T10851] bridge0: port 3(gretap0) entered disabled state [ 486.555372][T10851] bridge_slave_1: left allmulticast mode [ 486.561700][T10851] bridge_slave_1: left promiscuous mode [ 486.574323][T10851] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.609661][T10851] bridge_slave_0: left allmulticast mode [ 486.616661][T10851] bridge_slave_0: left promiscuous mode [ 486.623011][T10851] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.894332][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 487.902997][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 488.509017][T10891] HfR: entered promiscuous mode [ 488.529658][T10891] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1063'. [ 488.560292][T10891] HfR: left promiscuous mode [ 489.061035][T10886] cgroup: fork rejected by pids controller in /syz1 = =ôôÿ[ 490.106312][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 490.113445][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 491.705452][T11091] HfR: entered promiscuous mode [ 491.768066][T11091] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1080'. [ 491.786864][T11091] HfR: left promiscuous mode [ 491.821063][T11092] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 491.831729][T11094] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1080'. [ 493.386006][T11107] nfs: Unknown parameter 'ù©ý×' [ 494.506684][T11129] syz.2.1092 (11129): /proc/11128/oom_adj is deprecated, please use /proc/11128/oom_score_adj instead. [ 494.604978][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 494.612035][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 498.819547][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 498.840176][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.527599][T11214] [U] [ 500.530672][T11214] [U] [ 500.533698][T11214] [U] [ 500.536726][T11214] [U] [ 500.706445][T11214] [U] [ 500.709512][T11214] [U] [ 500.712536][T11214] [U] [ 500.715658][T11214] [U] [ 500.719334][T11214] [U] [ 500.722365][T11214] [U] [ 500.725494][T11214] [U] [ 500.728542][T11214] [U] [ 500.853095][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.860141][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 500.899547][T11203] [U] [ 503.367711][T11254] HfR: entered promiscuous mode [ 503.390095][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1124'. [ 503.421019][T11254] HfR: left promiscuous mode [ 503.635079][T11263] FAULT_INJECTION: forcing a failure. [ 503.635079][T11263] name failslab, interval 1, probability 0, space 0, times 0 [ 503.783497][T11263] CPU: 0 UID: 0 PID: 11263 Comm: syz.5.1128 Tainted: G U 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 503.783545][T11263] Tainted: [U]=USER [ 503.783555][T11263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 503.783572][T11263] Call Trace: [ 503.783581][T11263] [ 503.783592][T11263] dump_stack_lvl+0x16c/0x1f0 [ 503.783646][T11263] should_fail_ex+0x50a/0x650 [ 503.783684][T11263] ? fs_reclaim_acquire+0xae/0x150 [ 503.783739][T11263] should_failslab+0xc2/0x120 [ 503.783781][T11263] __kmalloc_noprof+0xce/0x4f0 [ 503.783818][T11263] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 503.783857][T11263] ? tomoyo_realpath_from_path+0xbf/0x710 [ 503.783903][T11263] tomoyo_realpath_from_path+0xbf/0x710 [ 503.783961][T11263] ? tomoyo_path_number_perm+0x235/0x5b0 [ 503.783999][T11263] tomoyo_path_number_perm+0x248/0x5b0 [ 503.784030][T11263] ? tomoyo_path_number_perm+0x235/0x5b0 [ 503.784066][T11263] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 503.784136][T11263] ? __pfx_lock_release+0x10/0x10 [ 503.784173][T11263] ? trace_lock_acquire+0x14e/0x1f0 [ 503.784207][T11263] ? lock_acquire+0x2f/0xb0 [ 503.784241][T11263] ? __fget_files+0x40/0x3a0 [ 503.784278][T11263] ? __fget_files+0x206/0x3a0 [ 503.784318][T11263] security_file_ioctl+0x9b/0x240 [ 503.784355][T11263] __x64_sys_ioctl+0xb7/0x200 [ 503.784407][T11263] do_syscall_64+0xcd/0x250 [ 503.784439][T11263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.784482][T11263] RIP: 0033:0x7efecdf8cde9 [ 503.784505][T11263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.784535][T11263] RSP: 002b:00007efecee7e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 503.784563][T11263] RAX: ffffffffffffffda RBX: 00007efece1a5fa0 RCX: 00007efecdf8cde9 [ 503.784583][T11263] RDX: ffffffffffffd4b4 RSI: 00000000000064d0 RDI: 0000000000000003 [ 503.784601][T11263] RBP: 00007efecee7e090 R08: 0000000000000000 R09: 0000000000000000 [ 503.784619][T11263] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 503.784636][T11263] R13: 0000000000000000 R14: 00007efece1a5fa0 R15: 00007ffee28dc248 [ 503.784674][T11263] [ 503.784685][T11263] ERROR: Out of memory at tomoyo_realpath_from_path. [ 507.030365][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.044661][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.674989][T11385] Process accounting resumed [ 511.556268][T11415] FAULT_INJECTION: forcing a failure. [ 511.556268][T11415] name failslab, interval 1, probability 0, space 0, times 0 [ 511.614992][T11415] CPU: 0 UID: 0 PID: 11415 Comm: syz.1.1162 Tainted: G U 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 511.615047][T11415] Tainted: [U]=USER [ 511.615057][T11415] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 511.615075][T11415] Call Trace: [ 511.615084][T11415] [ 511.615096][T11415] dump_stack_lvl+0x16c/0x1f0 [ 511.615157][T11415] should_fail_ex+0x50a/0x650 [ 511.615193][T11415] ? fs_reclaim_acquire+0xae/0x150 [ 511.615247][T11415] should_failslab+0xc2/0x120 [ 511.615288][T11415] __kmalloc_noprof+0xce/0x4f0 [ 511.615323][T11415] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 511.615362][T11415] ? tomoyo_realpath_from_path+0xbf/0x710 [ 511.615409][T11415] tomoyo_realpath_from_path+0xbf/0x710 [ 511.615454][T11415] ? tomoyo_path_number_perm+0x235/0x5b0 [ 511.615491][T11415] tomoyo_path_number_perm+0x248/0x5b0 [ 511.615522][T11415] ? tomoyo_path_number_perm+0x235/0x5b0 [ 511.615559][T11415] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 511.615628][T11415] ? __pfx_lock_release+0x10/0x10 [ 511.615665][T11415] ? trace_lock_acquire+0x14e/0x1f0 [ 511.615700][T11415] ? lock_acquire+0x2f/0xb0 [ 511.615735][T11415] ? __fget_files+0x40/0x3a0 [ 511.615773][T11415] ? __fget_files+0x206/0x3a0 [ 511.615812][T11415] security_file_ioctl+0x9b/0x240 [ 511.615850][T11415] __x64_sys_ioctl+0xb7/0x200 [ 511.615902][T11415] do_syscall_64+0xcd/0x250 [ 511.615934][T11415] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.615977][T11415] RIP: 0033:0x7fe91398cde9 [ 511.616001][T11415] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.616031][T11415] RSP: 002b:00007fe9117f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.616067][T11415] RAX: ffffffffffffffda RBX: 00007fe913ba5fa0 RCX: 00007fe91398cde9 [ 511.616088][T11415] RDX: 0000000000000038 RSI: 00000000c040563e RDI: 0000000000000003 [ 511.616106][T11415] RBP: 00007fe9117f6090 R08: 0000000000000000 R09: 0000000000000000 [ 511.616124][T11415] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.616142][T11415] R13: 0000000000000000 R14: 00007fe913ba5fa0 R15: 00007ffc91252088 [ 511.616180][T11415] [ 511.616219][T11415] ERROR: Out of memory at tomoyo_realpath_from_path. [ 511.856394][T11418] FAULT_INJECTION: forcing a failure. [ 511.856394][T11418] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 511.917551][T11418] CPU: 1 UID: 0 PID: 11418 Comm: syz.2.1163 Tainted: G U 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 511.917600][T11418] Tainted: [U]=USER [ 511.917611][T11418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 511.917628][T11418] Call Trace: [ 511.917637][T11418] [ 511.917648][T11418] dump_stack_lvl+0x16c/0x1f0 [ 511.917704][T11418] should_fail_ex+0x50a/0x650 [ 511.917747][T11418] _copy_to_user+0x32/0xd0 [ 511.917794][T11418] drm_ioctl+0x5a6/0xba0 [ 511.917842][T11418] ? __pfx_drm_ioctl+0x10/0x10 [ 511.917894][T11418] ? __pfx_lock_release+0x10/0x10 [ 511.917931][T11418] ? trace_lock_acquire+0x14e/0x1f0 [ 511.917982][T11418] ? __pfx_drm_ioctl+0x10/0x10 [ 511.918022][T11418] __x64_sys_ioctl+0x190/0x200 [ 511.918074][T11418] do_syscall_64+0xcd/0x250 [ 511.918106][T11418] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.918151][T11418] RIP: 0033:0x7f15f778cde9 [ 511.918175][T11418] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.918205][T11418] RSP: 002b:00007f15f863d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 511.918239][T11418] RAX: ffffffffffffffda RBX: 00007f15f79a5fa0 RCX: 00007f15f778cde9 [ 511.918259][T11418] RDX: ffffffffffffd4b4 RSI: 00000000000064d0 RDI: 0000000000000003 [ 511.918277][T11418] RBP: 00007f15f863d090 R08: 0000000000000000 R09: 0000000000000000 [ 511.918295][T11418] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.918312][T11418] R13: 0000000000000000 R14: 00007f15f79a5fa0 R15: 00007ffdb98ac778 [ 511.918349][T11418] [ 513.435751][T11457] sd 0:0:1:0: PR command failed: 1026 [ 513.457281][T11457] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 513.485208][T11457] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 513.684128][T11433] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 513.738053][T11433] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 513.755146][T11433] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 513.816080][T11433] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 514.079401][T11464] FAULT_INJECTION: forcing a failure. [ 514.079401][T11464] name failslab, interval 1, probability 0, space 0, times 0 [ 514.117962][T11464] CPU: 1 UID: 0 PID: 11464 Comm: syz.3.1173 Tainted: G U 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 514.118015][T11464] Tainted: [U]=USER [ 514.118034][T11464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 514.118052][T11464] Call Trace: [ 514.118062][T11464] [ 514.118074][T11464] dump_stack_lvl+0x16c/0x1f0 [ 514.118129][T11464] should_fail_ex+0x50a/0x650 [ 514.118168][T11464] ? fs_reclaim_acquire+0xae/0x150 [ 514.118223][T11464] ? __do_sys_memfd_create+0x17b/0x8a0 [ 514.118269][T11464] should_failslab+0xc2/0x120 [ 514.118311][T11464] __kmalloc_cache_noprof+0x68/0x420 [ 514.118355][T11464] __do_sys_memfd_create+0x17b/0x8a0 [ 514.118403][T11464] do_syscall_64+0xcd/0x250 [ 514.118436][T11464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.118482][T11464] RIP: 0033:0x7fe702b8cde9 [ 514.118507][T11464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.118539][T11464] RSP: 002b:00007fe7039fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 514.118569][T11464] RAX: ffffffffffffffda RBX: 00007fe702da5fa0 RCX: 00007fe702b8cde9 [ 514.118590][T11464] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000000 [ 514.118610][T11464] RBP: 00007fe702c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 514.118629][T11464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 514.118647][T11464] R13: 0000000000000000 R14: 00007fe702da5fa0 R15: 00007ffccacde5f8 [ 514.118685][T11464] [ 514.578329][T11468] Process accounting resumed [ 515.105147][ T5146] Bluetooth: hci1: command 0x0406 tx timeout [ 515.826837][ T5146] Bluetooth: hci5: command 0x0c1a tx timeout [ 515.826864][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 515.838878][ T5146] Bluetooth: hci2: command 0x0406 tx timeout [ 516.118541][T11492] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1181'. [ 516.156925][T11492] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1181'. [ 517.740410][T11501] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1182'. [ 518.112571][T11520] FAULT_INJECTION: forcing a failure. [ 518.112571][T11520] name failslab, interval 1, probability 0, space 0, times 0 [ 518.137039][T11520] CPU: 0 UID: 0 PID: 11520 Comm: syz.3.1188 Tainted: G U 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 518.137092][T11520] Tainted: [U]=USER [ 518.137102][T11520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 518.137123][T11520] Call Trace: [ 518.137131][T11520] [ 518.137144][T11520] dump_stack_lvl+0x16c/0x1f0 [ 518.137201][T11520] should_fail_ex+0x50a/0x650 [ 518.137241][T11520] ? fs_reclaim_acquire+0xae/0x150 [ 518.137298][T11520] should_failslab+0xc2/0x120 [ 518.137340][T11520] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 518.137380][T11520] ? alloc_empty_file+0x73/0x1e0 [ 518.137430][T11520] alloc_empty_file+0x73/0x1e0 [ 518.137476][T11520] alloc_file_pseudo+0x131/0x1e0 [ 518.137523][T11520] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 518.137570][T11520] ? do_raw_spin_unlock+0x172/0x230 [ 518.137625][T11520] __anon_inode_getfile+0xf8/0x370 [ 518.137665][T11520] __do_sys_timerfd_create+0x209/0x410 [ 518.137699][T11520] ? do_syscall_64+0x91/0x250 [ 518.137731][T11520] do_syscall_64+0xcd/0x250 [ 518.137771][T11520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 518.137819][T11520] RIP: 0033:0x7fe702b8cde9 [ 518.137844][T11520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 518.137876][T11520] RSP: 002b:00007fe7039fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000011b [ 518.137905][T11520] RAX: ffffffffffffffda RBX: 00007fe702da5fa0 RCX: 00007fe702b8cde9 [ 518.137926][T11520] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 518.137943][T11520] RBP: 00007fe702c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 518.137962][T11520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 518.137980][T11520] R13: 0000000000000000 R14: 00007fe702da5fa0 R15: 00007ffccacde5f8 [ 518.138017][T11520] [ 518.349082][T11520] block2mtd: error: cannot open device n [ 520.041798][T11532] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 520.048573][T11532] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 520.176646][T11532] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 520.221079][T11532] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 520.837657][T11539] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1192'. [ 521.024699][T11539] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1192'. [ 522.062020][ T5146] Bluetooth: hci2: command 0x0406 tx timeout [ 522.063280][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 522.155556][T11559] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1197'. [ 522.222363][ T5844] Bluetooth: hci3: command 0x0406 tx timeout [ 522.302116][ T5844] Bluetooth: hci5: command 0x0c1a tx timeout [ 523.141199][T11584] FAULT_INJECTION: forcing a failure. [ 523.141199][T11584] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 523.222728][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 523.229709][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 523.236987][T11584] CPU: 1 UID: 0 PID: 11584 Comm: syz.1.1203 Tainted: G U 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 523.237034][T11584] Tainted: [U]=USER [ 523.237044][T11584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 523.237062][T11584] Call Trace: [ 523.237070][T11584] [ 523.237082][T11584] dump_stack_lvl+0x16c/0x1f0 [ 523.237137][T11584] should_fail_ex+0x50a/0x650 [ 523.237181][T11584] _copy_to_user+0x32/0xd0 [ 523.237228][T11584] simple_read_from_buffer+0xd0/0x160 [ 523.237281][T11584] proc_fail_nth_read+0x198/0x270 [ 523.237336][T11584] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 523.237386][T11584] ? rw_verify_area+0xcf/0x680 [ 523.237434][T11584] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 523.237481][T11584] vfs_read+0x1df/0xbf0 [ 523.237513][T11584] ? __fget_files+0x1fc/0x3a0 [ 523.237547][T11584] ? __pfx___mutex_lock+0x10/0x10 [ 523.237598][T11584] ? __pfx_vfs_read+0x10/0x10 [ 523.237640][T11584] ? __fget_files+0x206/0x3a0 [ 523.237685][T11584] ksys_read+0x12b/0x250 [ 523.237716][T11584] ? __pfx_ksys_read+0x10/0x10 [ 523.237760][T11584] do_syscall_64+0xcd/0x250 [ 523.237792][T11584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 523.237837][T11584] RIP: 0033:0x7fe91398b7fc [ 523.237860][T11584] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 523.237890][T11584] RSP: 002b:00007fe9117d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 523.237918][T11584] RAX: ffffffffffffffda RBX: 00007fe913ba6080 RCX: 00007fe91398b7fc [ 523.237938][T11584] RDX: 000000000000000f RSI: 00007fe9117d50a0 RDI: 0000000000000004 [ 523.237956][T11584] RBP: 00007fe9117d5090 R08: 0000000000000000 R09: 0000000000000000 [ 523.237975][T11584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 523.237992][T11584] R13: 0000000000000001 R14: 00007fe913ba6080 R15: 00007ffc91252088 [ 523.238037][T11584] [ 524.079091][T11599] FAULT_INJECTION: forcing a failure. [ 524.079091][T11599] name failslab, interval 1, probability 0, space 0, times 0 [ 524.093300][T11599] CPU: 1 UID: 0 PID: 11599 Comm: syz.2.1209 Tainted: G U 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 524.093348][T11599] Tainted: [U]=USER [ 524.093359][T11599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 524.093377][T11599] Call Trace: [ 524.093386][T11599] [ 524.093398][T11599] dump_stack_lvl+0x16c/0x1f0 [ 524.093455][T11599] should_fail_ex+0x50a/0x650 [ 524.093494][T11599] ? fs_reclaim_acquire+0xae/0x150 [ 524.093549][T11599] should_failslab+0xc2/0x120 [ 524.093592][T11599] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 524.093628][T11599] ? lockdep_init_map_type+0x16d/0x7d0 [ 524.093671][T11599] ? security_inode_alloc+0x3b/0x2b0 [ 524.093709][T11599] security_inode_alloc+0x3b/0x2b0 [ 524.093741][T11599] inode_init_always_gfp+0xce4/0x1030 [ 524.093783][T11599] alloc_inode+0x82/0x230 [ 524.093823][T11599] sock_alloc+0x40/0x280 [ 524.093861][T11599] __sock_create+0xc1/0x8d0 [ 524.093911][T11599] __sys_socket+0x14f/0x260 [ 524.093957][T11599] ? __pfx___sys_socket+0x10/0x10 [ 524.094003][T11599] ? rcu_is_watching+0x12/0xc0 [ 524.094059][T11599] __x64_sys_socket+0x72/0xb0 [ 524.094101][T11599] ? lockdep_hardirqs_on+0x7c/0x110 [ 524.094148][T11599] do_syscall_64+0xcd/0x250 [ 524.094180][T11599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 524.094223][T11599] RIP: 0033:0x7f15f778cde9 [ 524.094256][T11599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 524.094288][T11599] RSP: 002b:00007f15f863d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 524.094318][T11599] RAX: ffffffffffffffda RBX: 00007f15f79a5fa0 RCX: 00007f15f778cde9 [ 524.094340][T11599] RDX: 0000000000000006 RSI: 0000000000000002 RDI: 000000000000002a [ 524.094359][T11599] RBP: 00007f15f780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 524.094378][T11599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 524.094398][T11599] R13: 0000000000000000 R14: 00007f15f79a5fa0 R15: 00007ffdb98ac778 [ 524.094436][T11599] [ 524.094466][T11599] socket: no more sockets [ 524.467925][T11607] Invalid ELF header magic: != ELF [ 525.594394][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 525.601696][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 525.723818][T11622] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1211'. [ 525.784121][T11622] netdevsim netdevsim5 netdevsim1: entered allmulticast mode [ 527.284816][T11644] Invalid ELF header magic: != ELF [ 528.017273][T11656] FAULT_INJECTION: forcing a failure. [ 528.017273][T11656] name failslab, interval 1, probability 0, space 0, times 0 [ 528.046142][T11656] CPU: 0 UID: 0 PID: 11656 Comm: syz.3.1223 Tainted: G U 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 528.046199][T11656] Tainted: [U]=USER [ 528.046210][T11656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 528.046229][T11656] Call Trace: [ 528.046239][T11656] [ 528.046252][T11656] dump_stack_lvl+0x16c/0x1f0 [ 528.046312][T11656] should_fail_ex+0x50a/0x650 [ 528.046353][T11656] ? fs_reclaim_acquire+0xae/0x150 [ 528.046412][T11656] should_failslab+0xc2/0x120 [ 528.046454][T11656] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 528.046495][T11656] ? security_inode_alloc+0x3b/0x2b0 [ 528.046532][T11656] security_inode_alloc+0x3b/0x2b0 [ 528.046565][T11656] inode_init_always_gfp+0xce4/0x1030 [ 528.046609][T11656] alloc_inode+0x82/0x230 [ 528.046664][T11656] new_inode+0x22/0x210 [ 528.046712][T11656] hugetlbfs_get_inode+0x358/0x740 [ 528.046759][T11656] hugetlb_file_setup+0x15b/0x620 [ 528.046805][T11656] __do_sys_memfd_create+0x400/0x8a0 [ 528.046857][T11656] do_syscall_64+0xcd/0x250 [ 528.046892][T11656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.046939][T11656] RIP: 0033:0x7fe702b8cde9 [ 528.046966][T11656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.046999][T11656] RSP: 002b:00007fe7039fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 528.047031][T11656] RAX: ffffffffffffffda RBX: 00007fe702da5fa0 RCX: 00007fe702b8cde9 [ 528.047052][T11656] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000000 [ 528.047071][T11656] RBP: 00007fe702c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 528.047091][T11656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.047110][T11656] R13: 0000000000000000 R14: 00007fe702da5fa0 R15: 00007ffccacde5f8 [ 528.047149][T11656] [ 529.100647][T11666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1224'. [ 529.121298][T11666] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1224'. [ 529.213824][T11670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1227'. [ 531.625518][T11695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1234'. [ 531.663801][T11708] FAULT_INJECTION: forcing a failure. [ 531.663801][T11708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 531.681004][T11708] CPU: 0 UID: 0 PID: 11708 Comm: syz.5.1236 Tainted: G U 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 531.681058][T11708] Tainted: [U]=USER [ 531.681069][T11708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 531.681089][T11708] Call Trace: [ 531.681100][T11708] [ 531.681111][T11708] dump_stack_lvl+0x16c/0x1f0 [ 531.681172][T11708] should_fail_ex+0x50a/0x650 [ 531.681219][T11708] strncpy_from_user+0x3b/0x2d0 [ 531.681261][T11708] __do_sys_memfd_create+0x1b1/0x8a0 [ 531.681313][T11708] do_syscall_64+0xcd/0x250 [ 531.681347][T11708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.681397][T11708] RIP: 0033:0x7efecdf8cde9 [ 531.681422][T11708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.681456][T11708] RSP: 002b:00007efecee7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 531.681486][T11708] RAX: ffffffffffffffda RBX: 00007efece1a5fa0 RCX: 00007efecdf8cde9 [ 531.681507][T11708] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000000 [ 531.681527][T11708] RBP: 00007efece00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 531.681546][T11708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 531.681588][T11708] R13: 0000000000000000 R14: 00007efece1a5fa0 R15: 00007ffee28dc248 [ 531.681628][T11708] [ 531.851725][T11695] veth1_macvtap: entered allmulticast mode [ 532.157922][T11712] FAULT_INJECTION: forcing a failure. [ 532.157922][T11712] name failslab, interval 1, probability 0, space 0, times 0 [ 532.236972][T11712] CPU: 1 UID: 0 PID: 11712 Comm: syz.2.1237 Tainted: G U 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 532.237018][T11712] Tainted: [U]=USER [ 532.237027][T11712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 532.237043][T11712] Call Trace: [ 532.237051][T11712] [ 532.237061][T11712] dump_stack_lvl+0x16c/0x1f0 [ 532.237113][T11712] should_fail_ex+0x50a/0x650 [ 532.237149][T11712] ? fs_reclaim_acquire+0xae/0x150 [ 532.237201][T11712] should_failslab+0xc2/0x120 [ 532.237239][T11712] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 532.237275][T11712] ? security_file_alloc+0x34/0x2b0 [ 532.237315][T11712] security_file_alloc+0x34/0x2b0 [ 532.237350][T11712] init_file+0x93/0x480 [ 532.237401][T11712] alloc_empty_file+0x91/0x1e0 [ 532.237443][T11712] path_openat+0xe1/0x2d80 [ 532.237471][T11712] ? hlock_class+0x4e/0x130 [ 532.237517][T11712] ? __lock_acquire+0x15a9/0x3c40 [ 532.237565][T11712] ? __pfx_path_openat+0x10/0x10 [ 532.237598][T11712] ? __pfx___lock_acquire+0x10/0x10 [ 532.237632][T11712] ? lock_acquire.part.0+0x11b/0x380 [ 532.237668][T11712] ? find_held_lock+0x2d/0x110 [ 532.237717][T11712] do_filp_open+0x20c/0x470 [ 532.237750][T11712] ? __pfx_do_filp_open+0x10/0x10 [ 532.237781][T11712] ? find_held_lock+0x2d/0x110 [ 532.237852][T11712] ? alloc_fd+0x41f/0x760 [ 532.237893][T11712] do_sys_openat2+0x17a/0x1e0 [ 532.237935][T11712] ? __pfx_do_sys_openat2+0x10/0x10 [ 532.237992][T11712] __x64_sys_openat+0x175/0x210 [ 532.238035][T11712] ? __pfx___x64_sys_openat+0x10/0x10 [ 532.238092][T11712] do_syscall_64+0xcd/0x250 [ 532.238122][T11712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.238165][T11712] RIP: 0033:0x7f15f778b750 [ 532.238188][T11712] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 532.238218][T11712] RSP: 002b:00007f15f863cfe0 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 532.238245][T11712] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f15f778b750 [ 532.238264][T11712] RDX: 0000000000000002 RSI: 00007f15f780e585 RDI: 00000000ffffff9c [ 532.238282][T11712] RBP: 00007f15f780e585 R08: 0000000000000000 R09: 00007f15f863e000 [ 532.238299][T11712] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000002 [ 532.238316][T11712] R13: 0000000000000000 R14: 00007f15f79a5fa0 R15: 00007ffdb98ac778 [ 532.238352][T11712] [ 532.967827][T11724] FAULT_INJECTION: forcing a failure. [ 532.967827][T11724] name failslab, interval 1, probability 0, space 0, times 0 [ 533.027421][T11724] CPU: 0 UID: 0 PID: 11724 Comm: syz.2.1240 Tainted: G U 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 533.027477][T11724] Tainted: [U]=USER [ 533.027488][T11724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 533.027506][T11724] Call Trace: [ 533.027516][T11724] [ 533.027528][T11724] dump_stack_lvl+0x16c/0x1f0 [ 533.027585][T11724] should_fail_ex+0x50a/0x650 [ 533.027625][T11724] ? fs_reclaim_acquire+0xae/0x150 [ 533.027678][T11724] should_failslab+0xc2/0x120 [ 533.027718][T11724] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 533.027759][T11724] ? hugetlbfs_alloc_inode+0x8c/0x1d0 [ 533.027798][T11724] hugetlbfs_alloc_inode+0x8c/0x1d0 [ 533.027832][T11724] ? __pfx_hugetlbfs_alloc_inode+0x10/0x10 [ 533.027870][T11724] alloc_inode+0x5d/0x230 [ 533.027909][T11724] new_inode+0x22/0x210 [ 533.027952][T11724] hugetlbfs_get_inode+0x358/0x740 [ 533.027997][T11724] hugetlb_file_setup+0x15b/0x620 [ 533.028040][T11724] __do_sys_memfd_create+0x400/0x8a0 [ 533.028092][T11724] do_syscall_64+0xcd/0x250 [ 533.028124][T11724] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.028170][T11724] RIP: 0033:0x7f15f778cde9 [ 533.028194][T11724] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.028238][T11724] RSP: 002b:00007f15f863d038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 533.028269][T11724] RAX: ffffffffffffffda RBX: 00007f15f79a5fa0 RCX: 00007f15f778cde9 [ 533.028290][T11724] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000000 [ 533.028309][T11724] RBP: 00007f15f780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 533.028328][T11724] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 533.028346][T11724] R13: 0000000000000000 R14: 00007f15f79a5fa0 R15: 00007ffdb98ac778 [ 533.028386][T11724] [ 534.820280][ T5844] Bluetooth: hci1: unexpected event 0x32 length: 10 > 9 [ 535.487167][T11786] FAULT_INJECTION: forcing a failure. [ 535.487167][T11786] name failslab, interval 1, probability 0, space 0, times 0 [ 535.513857][T11786] CPU: 1 UID: 0 PID: 11786 Comm: syz.5.1250 Tainted: G U 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 535.513910][T11786] Tainted: [U]=USER [ 535.513921][T11786] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 535.513940][T11786] Call Trace: [ 535.513949][T11786] [ 535.513961][T11786] dump_stack_lvl+0x16c/0x1f0 [ 535.514019][T11786] should_fail_ex+0x50a/0x650 [ 535.514058][T11786] ? fs_reclaim_acquire+0xae/0x150 [ 535.514115][T11786] should_failslab+0xc2/0x120 [ 535.514157][T11786] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 535.514198][T11786] ? security_inode_alloc+0x3b/0x2b0 [ 535.514235][T11786] security_inode_alloc+0x3b/0x2b0 [ 535.514268][T11786] inode_init_always_gfp+0xce4/0x1030 [ 535.514310][T11786] alloc_inode+0x82/0x230 [ 535.514362][T11786] new_inode+0x22/0x210 [ 535.514406][T11786] hugetlbfs_get_inode+0x358/0x740 [ 535.514451][T11786] hugetlb_file_setup+0x15b/0x620 [ 535.514494][T11786] __do_sys_memfd_create+0x400/0x8a0 [ 535.514545][T11786] do_syscall_64+0xcd/0x250 [ 535.514577][T11786] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.514622][T11786] RIP: 0033:0x7efecdf8cde9 [ 535.514646][T11786] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.514678][T11786] RSP: 002b:00007efecee7e038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 535.514708][T11786] RAX: ffffffffffffffda RBX: 00007efece1a5fa0 RCX: 00007efecdf8cde9 [ 535.514728][T11786] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000200000000000 [ 535.514747][T11786] RBP: 00007efece00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 535.514766][T11786] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.514784][T11786] R13: 0000000000000000 R14: 00007efece1a5fa0 R15: 00007ffee28dc248 [ 535.514822][T11786] [ 535.729750][T11783] Invalid ELF header magic: != ELF [ 536.306470][ T5844] Bluetooth: hci5: unexpected event 0x32 length: 10 > 9 [ 536.655526][T11804] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1254'. [ 536.683434][T11804] macvlan1: entered promiscuous mode [ 537.131196][T11815] ================================================================== [ 537.140138][T11815] BUG: KASAN: slab-out-of-bounds in force_devcd_write+0x31f/0x350 [ 537.148787][T11815] Read of size 8 at addr ffff88807a41a800 by task syz.2.1257/11815 [ 537.157511][T11815] [ 537.160106][T11815] CPU: 1 UID: 0 PID: 11815 Comm: syz.2.1257 Tainted: G U 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 537.160146][T11815] Tainted: [U]=USER [ 537.160155][T11815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 537.160171][T11815] Call Trace: [ 537.160179][T11815] [ 537.160190][T11815] dump_stack_lvl+0x116/0x1f0 [ 537.160238][T11815] print_report+0xc3/0x620 [ 537.160271][T11815] ? __virt_addr_valid+0x5e/0x590 [ 537.160295][T11815] ? __phys_addr+0xc6/0x150 [ 537.160319][T11815] kasan_report+0xd9/0x110 [ 537.160351][T11815] ? force_devcd_write+0x31f/0x350 [ 537.160384][T11815] ? force_devcd_write+0x31f/0x350 [ 537.160418][T11815] force_devcd_write+0x31f/0x350 [ 537.160450][T11815] ? __pfx_force_devcd_write+0x10/0x10 [ 537.160483][T11815] ? __debugfs_file_get+0x1ff/0x850 [ 537.160527][T11815] ? __pfx___debugfs_file_get+0x10/0x10 [ 537.160570][T11815] ? rcu_is_watching+0x12/0xc0 [ 537.160610][T11815] ? trace_lock_acquire+0x14e/0x1f0 [ 537.160637][T11815] full_proxy_write+0x13c/0x200 [ 537.160662][T11815] ? __pfx_full_proxy_write+0x10/0x10 [ 537.160686][T11815] vfs_write+0x24c/0x1150 [ 537.160713][T11815] ? __fget_files+0x1fc/0x3a0 [ 537.160740][T11815] ? __pfx___mutex_lock+0x10/0x10 [ 537.160782][T11815] ? __pfx_vfs_write+0x10/0x10 [ 537.160812][T11815] ? __fget_files+0x206/0x3a0 [ 537.160844][T11815] ksys_write+0x12b/0x250 [ 537.160869][T11815] ? __pfx_ksys_write+0x10/0x10 [ 537.160899][T11815] do_syscall_64+0xcd/0x250 [ 537.160924][T11815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.160962][T11815] RIP: 0033:0x7f15f778cde9 [ 537.160982][T11815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.161009][T11815] RSP: 002b:00007f15f863d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 537.161034][T11815] RAX: ffffffffffffffda RBX: 00007f15f79a5fa0 RCX: 00007f15f778cde9 [ 537.161051][T11815] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000006 [ 537.161066][T11815] RBP: 00007f15f780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 537.161089][T11815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 537.161105][T11815] R13: 0000000000000000 R14: 00007f15f79a5fa0 R15: 00007ffdb98ac778 [ 537.161129][T11815] [ 537.161137][T11815] [ 537.411733][T11815] Allocated by task 10399: [ 537.416589][T11815] kasan_save_stack+0x33/0x60 [ 537.421752][T11815] kasan_save_track+0x14/0x30 [ 537.426911][T11815] __kasan_kmalloc+0xaa/0xb0 [ 537.431973][T11815] __kmalloc_node_noprof+0x21f/0x520 [ 537.437803][T11815] __kvmalloc_node_noprof+0xad/0x1a0 [ 537.443727][T11815] alloc_fdtable+0xee/0x2b0 [ 537.448688][T11815] dup_fd+0x92b/0xca0 [ 537.453078][T11815] copy_process+0x2217/0x6f20 [ 537.458264][T11815] kernel_clone+0xfd/0x960 [ 537.463264][T11815] __do_sys_clone+0xba/0x100 [ 537.468344][T11815] do_syscall_64+0xcd/0x250 [ 537.473404][T11815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.479914][T11815] [ 537.482480][T11815] Freed by task 11677: [ 537.486953][T11815] kasan_save_stack+0x33/0x60 [ 537.492206][T11815] kasan_save_track+0x14/0x30 [ 537.497363][T11815] kasan_save_free_info+0x3b/0x60 [ 537.502918][T11815] __kasan_slab_free+0x51/0x70 [ 537.508174][T11815] kfree+0x2c4/0x4d0 [ 537.512471][T11815] kvfree+0x47/0x50 [ 537.516666][T11815] put_files_struct+0x270/0x370 [ 537.522112][T11815] exit_files+0x82/0xb0 [ 537.526695][T11815] do_exit+0xaa4/0x2d70 [ 537.531273][T11815] do_group_exit+0xd3/0x2a0 [ 537.536237][T11815] get_signal+0x2576/0x2610 [ 537.541213][T11815] arch_do_signal_or_restart+0x90/0x7e0 [ 537.547345][T11815] syscall_exit_to_user_mode+0x150/0x2a0 [ 537.553592][T11815] do_syscall_64+0xda/0x250 [ 537.558674][T11815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.565179][T11815] [ 537.567734][T11815] The buggy address belongs to the object at ffff88807a41a000 [ 537.567734][T11815] which belongs to the cache kmalloc-cg-2k of size 2048 [ 537.583509][T11815] The buggy address is located 0 bytes to the right of [ 537.583509][T11815] allocated 2048-byte region [ffff88807a41a000, ffff88807a41a800) [ 537.599677][T11815] [ 537.602249][T11815] The buggy address belongs to the physical page: [ 537.609399][T11815] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7a418 [ 537.619043][T11815] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 537.628400][T11815] memcg:ffff88803231ee81 [ 537.633072][T11815] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 537.641412][T11815] page_type: f5(slab) [ 537.645823][T11815] raw: 00fff00000000040 ffff88801b04f3c0 dead000000000100 dead000000000122 [ 537.655279][T11815] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff88803231ee81 [ 537.664731][T11815] head: 00fff00000000040 ffff88801b04f3c0 dead000000000100 dead000000000122 [ 537.674280][T11815] head: 0000000000000000 0000000000080008 00000000f5000000 ffff88803231ee81 [ 537.683834][T11815] head: 00fff00000000003 ffffea0001e90601 ffffffffffffffff 0000000000000000 [ 537.693407][T11815] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 537.702947][T11815] page dumped because: kasan: bad access detected [ 537.710008][T11815] page_owner tracks the page as allocated [ 537.716293][T11815] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 11303, tgid 11299 (syz.5.1140), ts 505792879602, free_ts 505706237675 [ 537.740028][T11815] post_alloc_hook+0x181/0x1b0 [ 537.745348][T11815] get_page_from_freelist+0xfce/0x2f80 [ 537.751371][T11815] __alloc_frozen_pages_noprof+0x221/0x2470 [ 537.757877][T11815] alloc_pages_mpol+0x1fc/0x540 [ 537.763232][T11815] new_slab+0x23d/0x330 [ 537.767809][T11815] ___slab_alloc+0xbfa/0x1600 [ 537.772964][T11815] __slab_alloc.constprop.0+0x56/0xb0 [ 537.778985][T11815] __kmalloc_cache_noprof+0xf6/0x420 [ 537.784820][T11815] ipv6_add_dev+0xfe/0x13e0 [ 537.790093][T11815] addrconf_notify+0x53e/0x19c0 [ 537.795446][T11815] notifier_call_chain+0xb7/0x410 [ 537.801024][T11815] call_netdevice_notifiers_info+0xbe/0x140 [ 537.807529][T11815] register_netdevice+0x174a/0x1e50 [ 537.813260][T11815] __ip_tunnel_create+0x37b/0x4c0 [ 537.818803][T11815] ip_tunnel_init_net+0x1c2/0x6e0 [ 537.824349][T11815] ops_init+0x1df/0x5f0 [ 537.828936][T11815] page last free pid 11303 tgid 11299 stack trace: [ 537.836099][T11815] free_frozen_pages+0x6db/0xfb0 [ 537.841552][T11815] __put_partials+0x14c/0x170 [ 537.846711][T11815] qlist_free_all+0x4e/0x120 [ 537.851771][T11815] kasan_quarantine_reduce+0x195/0x1e0 [ 537.857790][T11815] __kasan_slab_alloc+0x69/0x90 [ 537.863143][T11815] kmem_cache_alloc_noprof+0x1c8/0x3b0 [ 537.869162][T11815] __proc_create+0x2c3/0x8b0 [ 537.874224][T11815] _proc_mkdir+0xbb/0x200 [ 537.879004][T11815] sctp_proc_init+0x59/0x270 [ 537.884072][T11815] sctp_defaults_init+0x74a/0xd80 [ 537.889617][T11815] ops_init+0x1df/0x5f0 [ 537.894206][T11815] setup_net+0x21f/0x860 [ 537.898889][T11815] copy_net_ns+0x2b4/0x6c0 [ 537.903765][T11815] create_new_namespaces+0x3ea/0xad0 [ 537.909603][T11815] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 537.915829][T11815] ksys_unshare+0x45d/0xa40 [ 537.920809][T11815] [ 537.923365][T11815] Memory state around the buggy address: [ 537.929561][T11815] ffff88807a41a700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 537.938444][T11815] ffff88807a41a780: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 537.947326][T11815] >ffff88807a41a800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 537.956197][T11815] ^ [ 537.961017][T11815] ffff88807a41a880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 537.969897][T11815] ffff88807a41a900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 537.978770][T11815] ================================================================== [ 537.987837][ C1] vkms_vblank_simulate: vblank timer overrun [ 538.087009][T11815] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 538.095092][T11815] CPU: 0 UID: 0 PID: 11815 Comm: syz.2.1257 Tainted: G U 6.14.0-rc1-syzkaller-00081-gbb066fe812d6 #0 [ 538.108617][T11815] Tainted: [U]=USER [ 538.112835][T11815] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 538.123939][T11815] Call Trace: [ 538.127573][T11815] [ 538.130830][T11815] dump_stack_lvl+0x3d/0x1f0 [ 538.135942][T11815] panic+0x71d/0x800 [ 538.140276][T11815] ? __pfx_panic+0x10/0x10 [ 538.145176][T11815] ? preempt_schedule_thunk+0x1a/0x30 [ 538.151137][T11815] ? preempt_schedule_common+0x44/0xc0 [ 538.157205][T11815] check_panic_on_warn+0xab/0xb0 [ 538.162793][T11815] end_report+0x117/0x180 [ 538.167601][T11815] kasan_report+0xe9/0x110 [ 538.172509][T11815] ? force_devcd_write+0x31f/0x350 [ 538.178179][T11815] ? force_devcd_write+0x31f/0x350 [ 538.183853][T11815] force_devcd_write+0x31f/0x350 [ 538.189340][T11815] ? __pfx_force_devcd_write+0x10/0x10 [ 538.195401][T11815] ? __debugfs_file_get+0x1ff/0x850 [ 538.201182][T11815] ? __pfx___debugfs_file_get+0x10/0x10 [ 538.207341][T11815] ? rcu_is_watching+0x12/0xc0 [ 538.212648][T11815] ? trace_lock_acquire+0x14e/0x1f0 [ 538.218414][T11815] full_proxy_write+0x13c/0x200 [ 538.223807][T11815] ? __pfx_full_proxy_write+0x10/0x10 [ 538.229756][T11815] vfs_write+0x24c/0x1150 [ 538.234573][T11815] ? __fget_files+0x1fc/0x3a0 [ 538.239767][T11815] ? __pfx___mutex_lock+0x10/0x10 [ 538.245369][T11815] ? __pfx_vfs_write+0x10/0x10 [ 538.250661][T11815] ? __fget_files+0x206/0x3a0 [ 538.255864][T11815] ksys_write+0x12b/0x250 [ 538.260868][T11815] ? __pfx_ksys_write+0x10/0x10 [ 538.266253][T11815] do_syscall_64+0xcd/0x250 [ 538.271252][T11815] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.277808][T11815] RIP: 0033:0x7f15f778cde9 [ 538.282705][T11815] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.304328][T11815] RSP: 002b:00007f15f863d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 538.313630][T11815] RAX: ffffffffffffffda RBX: 00007f15f79a5fa0 RCX: 00007f15f778cde9 [ 538.322439][T11815] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000006 [ 538.331347][T11815] RBP: 00007f15f780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 538.340152][T11815] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 538.349055][T11815] R13: 0000000000000000 R14: 00007f15f79a5fa0 R15: 00007ffdb98ac778 [ 538.357884][T11815] [ 538.361597][T11815] Kernel Offset: disabled [ 538.366381][T11815] Rebooting in 86400 seconds..