last executing test programs: 23m29.054100866s ago: executing program 3 (id=3651): socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) 23m27.642365128s ago: executing program 3 (id=3658): mmap$auto(0x0, 0x2020009, 0x3, 0x411, 0xfffffffffffffffa, 0x800008000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/geneve0/proxy_ndp\x00', 0x4ea8e886b6fb4b41, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) socket(0xa, 0x2, 0x800077) socketpair$auto(0x3, 0x5, 0x8000000000000000, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000180), 0x8c00, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x200000000000203, 0x0, 0xc, 0x5, 0x7, 0x6, 0x1f2, 0x6, 0xe8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) mmap$auto(0x0, 0xff, 0xdb, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x1, 0x0) madvise$auto(0x0, 0x7ffffffffffffffc, 0x40c) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) fanotify_init$auto(0x65, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) write$auto(0xc8, 0x0, 0x8201) ioctl$auto(r1, 0x5603, 0x7) pwritev2$auto(0x4, &(0x7f0000001fc0)={0x0, 0x7}, 0x1, 0xffffffffffffffff, 0x81, 0x8) r2 = socket(0x1, 0x1, 0x0) bind$auto(r2, 0x0, 0x6b) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x240002, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) (fail_nth: 3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_LOOP_CTL_GET_FREE(r3, 0x4c82, 0x24) shutdown$auto(0x200000003, 0x2) 23m27.017559721s ago: executing program 3 (id=3664): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0xffffffffffffffff, 0x4bfa, 0x100000000000afcb) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000180), 0xffffffffffffffff) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x13, 0x940, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x200000009, 0x5, 0x3, 0x5, 0x7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7802aafb]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x4, 0x2}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x209b72, 0x4e477f5a, 0x8000) socket(0x1d, 0x2, 0x6) accept$auto(0x3, 0xffffffffffffffff, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/sys/devices/virtual/mtd/mtd0/mtd0/type\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000b40)=""/99, 0x63) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0x8915, 0x93) socket(0x2, 0x2, 0x106) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x8, 0xffffffffffffffff, 0x9b72, 0x2, 0x8000) get_mempolicy$auto(0x0, 0x0, 0x81, 0x8, 0x3) 23m25.113720467s ago: executing program 3 (id=3671): setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) 23m24.680060247s ago: executing program 3 (id=3673): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/pid_for_children\x00') pread64$auto(r0, 0x0, 0xfffffffd, 0x7) 23m23.074076688s ago: executing program 3 (id=3676): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x82, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x29, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x3) setsockopt$auto(0x4, 0x2000000000000116, 0x80, 0xfffffffffffffffd, 0x9) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) (fail_nth: 1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc050}, 0x140000e4) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_evdev_fops_evdev(r0, 0xfffeffff80004520, 0x0) 23m22.731525296s ago: executing program 32 (id=3676): r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x82, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x29, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x1, 0x3) setsockopt$auto(0x4, 0x2000000000000116, 0x80, 0xfffffffffffffffd, 0x9) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) keyctl$auto(0x1, 0x7, 0x100, 0x8, 0x4) (fail_nth: 1) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_SET_MESH(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc050}, 0x140000e4) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_evdev_fops_evdev(r0, 0xfffeffff80004520, 0x0) 19m42.115687757s ago: executing program 0 (id=4606): sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r0 = openat$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/rc_stats_csv\x00', 0x40002, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000002c0), 0xffffffffffffffff) close_range$auto(r0, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000f40)=0x9) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000fc0), 0xffffffffffffffff) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) socket(0x2a, 0x2, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) open(0x0, 0xa240, 0x15e) open(0x0, 0x161342, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) 19m39.853014691s ago: executing program 0 (id=4618): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6nA6\x1a\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\xcf\x00'/236, 0x4, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x8000, &(0x7f0000000640)={0x0, 0xf6, 0x100000}, 0x283) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/vendor\x00', 0x400, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) mmap$auto(0xffffffffffffffff, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8003) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/ip6_tables_targets\x00', 0x400000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) msgget$auto(0xa, 0x77d9) msgrcv$auto(0x0, 0x0, 0xffc, 0x1, 0xb1) msgctl$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) msgget$auto(0x4, 0xfffffff9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x7, 0x1, 0xfffffffffffffff9, 0x10, 0x5, 0x2) prctl$auto(0x29, 0x5, 0x0, 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r0, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/wlan1/forwarding\x00', 0x202, 0x0) sendfile$auto(r2, r1, 0x0, 0x401) 19m36.033029071s ago: executing program 0 (id=4620): sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r0 = openat$auto_minstrel_ht_stat_csv_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy4/netdev:wlan1/stations/08:02:11:00:00:00/rc_stats_csv\x00', 0x40002, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000002c0), 0xffffffffffffffff) close_range$auto(r0, 0xffffffffffffffff, 0x8) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(0xffffffffffffffff, 0xc0045516, &(0x7f0000000f40)=0x9) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000fc0), 0xffffffffffffffff) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) socket(0x2a, 0x2, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) open(0x0, 0xa240, 0x15e) open(0x0, 0x161342, 0x100) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00'}) 19m34.495848605s ago: executing program 0 (id=4625): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x68141, 0x0) ioctl$auto(r0, 0x5456, 0xce01) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x22, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x80044942, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x20009, 0x12, 0xeb1, 0x401, 0x8000) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sched_getparam$auto(0x0, &(0x7f0000000040)={0x7}) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x200) ioctl$auto_TIOCGETD(r2, 0x5424, 0x0) close_range$auto(r0, r0, 0x9) open(0x0, 0x22040, 0x75) socket(0x10, 0x2, 0x4) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000180)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010027bd"], 0x2c}, 0x1, 0x0, 0x0, 0x4801}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x1, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mincore$auto(0x1000, 0x8001, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x9, 0x0) fcntl$auto(0x8000000000000001, 0x26, 0x8) 19m29.105484362s ago: executing program 0 (id=4633): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6nA6\x1a\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\xcf\x00'/236, 0x4, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x8000, &(0x7f0000000640)={0x0, 0xf6, 0x100000}, 0x283) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/vendor\x00', 0x400, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) mmap$auto(0xffffffffffffffff, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8003) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/ip6_tables_targets\x00', 0x400000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) msgget$auto(0xa, 0x77d9) msgrcv$auto(0x0, 0x0, 0xffc, 0x1, 0xb1) msgctl$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) msgget$auto(0x4, 0xfffffff9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x7, 0x1, 0xfffffffffffffff9, 0x10, 0x5, 0x2) prctl$auto(0x29, 0x5, 0x0, 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r0, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/wlan1/forwarding\x00', 0x202, 0x0) sendfile$auto(r2, r1, 0x0, 0x401) 19m23.981530545s ago: executing program 0 (id=4649): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6nA6\x1a\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\xcf\x00'/236, 0x4, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x8000, &(0x7f0000000640)={0x0, 0xf6, 0x100000}, 0x283) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/vendor\x00', 0x400, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) mmap$auto(0xffffffffffffffff, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8003) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/ip6_tables_targets\x00', 0x400000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) msgget$auto(0xa, 0x77d9) msgrcv$auto(0x0, 0x0, 0xffc, 0x1, 0xb1) msgctl$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) msgget$auto(0x4, 0xfffffff9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x7, 0x1, 0xfffffffffffffff9, 0x10, 0x5, 0x2) prctl$auto(0x29, 0x5, 0x0, 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r0, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/wlan1/forwarding\x00', 0x202, 0x0) sendfile$auto(r2, r1, 0x0, 0x401) 19m8.496844374s ago: executing program 33 (id=4649): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\t\xf8p\xc6nA6\x1a\xb9\xac\xde\x0e\x90\x18\xf1\x13I\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd\x14\x81\xbe\xab\xed\xd5MI\x830_\xc2\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x94o\x1b[\xa8]\x9b\x03\x95\xc3\xad\xad\x1d#oi|\x04\x93N\xfa\x17\xf3b\xf6\xcf\x00'/236, 0x4, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x8000, &(0x7f0000000640)={0x0, 0xf6, 0x100000}, 0x283) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/pci0000:00/0000:00:03.0/virtio0/vendor\x00', 0x400, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x18, 0x0, 0x8) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) mmap$auto(0xffffffffffffffff, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8003) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/ip6_tables_targets\x00', 0x400000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) msgget$auto(0xa, 0x77d9) msgrcv$auto(0x0, 0x0, 0xffc, 0x1, 0xb1) msgctl$auto(0x0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) msgget$auto(0x4, 0xfffffff9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x7, 0x1, 0xfffffffffffffff9, 0x10, 0x5, 0x2) prctl$auto(0x29, 0x5, 0x0, 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r0, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/wlan1/forwarding\x00', 0x202, 0x0) sendfile$auto(r2, r1, 0x0, 0x401) 15m3.829469776s ago: executing program 1 (id=5574): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000140), 0x405080, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000000ac0)={0x28, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NL80211_ATTR_KEY_DATA={0x4}, @NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x7}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x890) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/smaps\x00', 0x400, 0x0) read$auto_proc_pid_smaps_operations_internal(r0, &(0x7f0000000700)=""/4096, 0x1000) 15m2.905346457s ago: executing program 1 (id=5577): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) set_mempolicy$auto(0x1, &(0x7f0000000000)=0xc, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r1 = landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r0, 0x0) rename$auto(0x0, 0x0) mkdir$auto(&(0x7f0000004440)='./file0\x00', 0x1) mmap$auto(0x8, 0x967, 0x90ed, 0xffffffffffffffff, r1, 0x6) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r2 = socket(0x2b, 0x1, 0x0) sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r2, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x2404c040) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/dummy_udc.3/udc/dummy_udc.3/b_hnp_enable\x00', 0x400, 0x0) read$auto(r3, &(0x7f0000002440)='&\x00', 0x9) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) mkdir$auto(&(0x7f0000000100)='./file0/file0\x00', 0x40) rename$auto(&(0x7f0000000480)='./file1\x00', &(0x7f0000000040)='./file0/file0\x00') mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tk_debug_sleep_time_fops_(0xffffffffffffff9c, &(0x7f00000004c0), 0x40082, 0x0) r4 = waitid$auto(0x3, r1, &(0x7f0000000180)={@_si_pad}, 0x40, &(0x7f0000000240)={{0x63, 0x100}, {0x0, 0x800}, 0x400, 0x940e, 0xfffffffffffffff7, 0x3, 0x2ade, 0x1ff, 0x1, 0x10, 0x1c0000000000, 0xd, 0x97, 0x0, 0xffff, 0x4}) move_pages$auto(r4, 0xffffffff, &(0x7f0000000080)=&(0x7f0000000300)="3654c6001a9827d7e28d57a759b4bbccfdfba2eecd01107701334d4d425c9649205225d2a86c7c9e54035e34c0a7f460d295cff03d1aad1b823abb2f63908584744c7c834171ff3dffab45f1d20e4145402bff1b5573be28486a70302ed43780e14b157ef231c1b4e69dd13c2c5af43954e4eb9afd06c8b9edd56461473ca5959e6cd3e4059f53337c185dc7ce6aef34472092b626d03acfb5f0ff251875e64b39335577a87ce7197c05339903d083672292ed2bb1c2e68afc8a0134561aae8c3eada7bfcd0cfecfd5b6c6b80e7ff2b1", &(0x7f0000000400)=0x4b8, &(0x7f0000000440)=0x1000, 0xfffffffe) r5 = socket(0x2, 0xa, 0xa) sendmmsg$auto(r5, &(0x7f0000000200)={{&(0x7f0000000140), 0x101, 0x0, 0x7, 0x0, 0x3, 0x1}, 0x7}, 0x8, 0x7fff) 15m2.681457843s ago: executing program 1 (id=5578): r0 = socket(0x848000000015, 0x805, 0x200) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x25, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf250100000008000a0008000000051a070058000000080009009c781e01060002000500000006001a0000010000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) r3 = socket(0x10, 0x2, 0xc) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10ffffbd7000fbdbdf250a00000a08000a400500000020000100"], 0xf8}}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) settimeofday$auto(0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="a52f0000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004853520008000200", @ANYRES32=0x9, @ANYBLOB="080005000a0000000800070001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x2, 0x8000) r8 = socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) sendto$auto(r8, 0x0, 0xb, 0xc, &(0x7f0000000000), 0x1c) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000300fafbeb454e050695aed41d913575407f7989b6b89d61443daaa47763f0a8cc79f4cc96cbf8db7c1e053f23198a335682cafa84b65a97667a9042bae37f68cd7be9516d66929bbf4a5fdf034d98a5fe57aee7f0f187fda11381ce27be0dcc97457f4c76e253807a868c4d16dddeb3dbb5a6caa621d9caf532e63fde3ade95da8d82a4f0a708bc39dc890920a41275bcd68d78fb097c056a2da8ec08cb9ae52b2f643952aae7c34b53d8a7740d4328a50c1d1485fa8b3b03859e54f3ab6edfc20ecf4fd1f00e38112021debfd3f00c55fe34bbe822", @ANYRES16=r6, @ANYBLOB="01002cbd7000fcdbdf25010000000c000100862dbd5c2421210008000900", @ANYRES32=r7, @ANYBLOB="07000100255e0000080005000000000008000900", @ANYRES32=r7, @ANYBLOB="08000700090000000500010000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4801}, 0x8000000) 15m1.588950758s ago: executing program 1 (id=5581): r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000700)='/dev/binderfs/binder0\x00', 0x2280, 0x0) mmap$auto_binder_fops_binder_internal(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x100000000) r1 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) mmap$auto_tracing_buffers_fops_trace(&(0x7f0000ffc000/0x4000)=nil, 0x401f, 0x1, 0x8e051, r1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/demote\x00', 0x1, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/user\x00') ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) ioperm$auto(0x4d5, 0x7, 0x3) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$auto(r4, 0x0, 0x0) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r5 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000240)={0x14, r5, 0x6c5679fc7dece1a9, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20008000) mount_setattr$auto(r3, &(0x7f00000000c0)='./file0\x00', 0x3, &(0x7f0000000140)={0x2, 0x7, 0xde}, 0x3) close_range$auto(0x2, 0xa, 0x0) msync$auto(0x0, 0x2000000005, 0x6) fchdir$auto(0xffffffffffffffff) openat$auto_tracing_saved_tgids_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_tgids\x00', 0x82900, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x400, 0x0) setsockopt$auto(0x1, 0x1, 0x43, &(0x7f0000000000)='\x00', 0xbb) 15m1.141251838s ago: executing program 1 (id=5584): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x4a, 0x0) open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) io_uring_setup$auto(0x9, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x4, 0x401, r2, @relative_fd=r3, 0xe600}, 0xf) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x22, 0x940, 0x1ffde, 0x3, 0x6, 0x8000002, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, [0x0, 0x0, 0x0, 0x243efbdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6e]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r6 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 14m57.393455045s ago: executing program 1 (id=5589): fdatasync$auto(0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_submit$auto(0x6703, 0x2, &(0x7f0000000040)=&(0x7f0000000000)={0x1, 0xfffffe00, 0xc756, 0x3ff, 0x9, 0xffffffffffffffff, 0x1, 0x1, 0xbb5, 0x0, 0x4}) mmap$auto(0x0, 0x1, 0x4000000000df, 0x44eb2, 0x3, 0x300000000000) truncate$auto(&(0x7f00000000c0)='./cgroup\x00', 0x100000000000001) fcntl$auto(0x8000000000000001, 0x26, 0x8) migrate_pages$auto(0x0, 0x4, &(0x7f0000000100)=0x7f, &(0x7f0000000140)=0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/slab/kmalloc-64/reclaim_account\x00', 0x2600, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) arch_prctl$auto(0x2001, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, &(0x7f0000000080)={0xd, 0x0, 0xd, 0x4, 0x9}) sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x20000000) acct$auto(0x0) fcntl$auto(0x0, 0x407, 0xffffffff80000000) close_range$auto(0x2, 0x8, 0x0) write$auto_ima_measure_policy_ops_ima_fs(r0, &(0x7f0000000080)="a45428e8a7e2be5c83fc30b36b4d8b615b9792fcf30ee8a09cd45965ba3e74754298ace0f86145515ab033ecb2093ac36cfc463c18a175f65ccf54fe4e674467328f5932b53ca4fabf0907a4e3252736c13957", 0x53) r1 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) 14m42.042318857s ago: executing program 34 (id=5589): fdatasync$auto(0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_submit$auto(0x6703, 0x2, &(0x7f0000000040)=&(0x7f0000000000)={0x1, 0xfffffe00, 0xc756, 0x3ff, 0x9, 0xffffffffffffffff, 0x1, 0x1, 0xbb5, 0x0, 0x4}) mmap$auto(0x0, 0x1, 0x4000000000df, 0x44eb2, 0x3, 0x300000000000) truncate$auto(&(0x7f00000000c0)='./cgroup\x00', 0x100000000000001) fcntl$auto(0x8000000000000001, 0x26, 0x8) migrate_pages$auto(0x0, 0x4, &(0x7f0000000100)=0x7f, &(0x7f0000000140)=0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/slab/kmalloc-64/reclaim_account\x00', 0x2600, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) arch_prctl$auto(0x2001, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, &(0x7f0000000080)={0xd, 0x0, 0xd, 0x4, 0x9}) sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x20000000) acct$auto(0x0) fcntl$auto(0x0, 0x407, 0xffffffff80000000) close_range$auto(0x2, 0x8, 0x0) write$auto_ima_measure_policy_ops_ima_fs(r0, &(0x7f0000000080)="a45428e8a7e2be5c83fc30b36b4d8b615b9792fcf30ee8a09cd45965ba3e74754298ace0f86145515ab033ecb2093ac36cfc463c18a175f65ccf54fe4e674467328f5932b53ca4fabf0907a4e3252736c13957", 0x53) r1 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) 14m39.942128952s ago: executing program 2 (id=5596): futex$auto(&(0x7f0000000480)=0xffffffff, 0xfff, 0x34e, &(0x7f0000000440)={0x80000082, 0x4}, &(0x7f0000000100)=0x3668, 0xb) setresgid$auto(0x81, 0x800000a0, 0x8) setgroups$auto(0xc00000000, 0xfffffffffffffffc) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:01.1/ata1/host0/target0:0:0/0:0:0:0/bsg/0:0:0:0/dev\x00', 0x7e4a179b526fbfc0, 0x0) bpf$auto(0x18, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex, 0xffffffffffffffff, 0x15, 0x8, 0xffffffffffffffff, @relative_fd=r0, 0x841b5c1fd}, 0x92) r1 = socket(0x2, 0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [0x6], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x6, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) socket(0xa, 0x3, 0xff) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000004c0)="735d350144e3f020cd2b17d0bff42fb4000ff1040066", 0x7, 0xa505}, 0x800}, 0x7, 0x8) r2 = open_by_handle_at$auto(r0, &(0x7f0000000180)={0xe1, 0x4, "53cf216d0071d99f5d26207268f7161411825c2e492a7acaf848eea5a530b5b4a584028ad3d69fd3cabd4ec2c609d2e1bce5bcc3cdde2653d9c6c535e2b1fb2dfb30648104657ea49e56e2d817625b749eaa51f28cc3f31a9e50c9d96a611729ae55497f65660be8bf4c17f816fa65a8a0a992ed2cb0a8bb8143143010d6036d2d470c808fe66148cb4fab229bc2bdf123afe5901201e0c123f5e7a5f5bc5d53d504ef8b28ca358785ea47fdee41e6243aa52af6b2d135081c3fec7bc4d2f6f60568587a72f91422d442373b64ab154be0eb35e2e07266740f4a848bc71c473ebb"}, 0x2) fstat$auto(r0, &(0x7f0000000280)={0x10001, 0x5, 0x38b, 0x401, 0xee00, 0xee00, 0x0, 0x7fff, 0x7ff, 0x3, 0x7, 0x6, 0x0, 0x8000000000000000, 0xda, 0x9, 0xffffffff00000001}) r4 = getegid() statx$auto(r2, &(0x7f0000000080)='./file0\x00', 0x101, 0xc, &(0x7f0000000340)={0x10001, 0x4, 0x63f, 0x400, r3, r4, 0xcda9, 0x2, 0x8000000000000001, 0x90000000000, 0x0, 0x8000000000000001, {0x9, 0x2}, {0xffffffffffdffff9, 0x31b}, {0x1, 0x8}, {0x8, 0x5}, 0x7ff, 0x5, 0xc6, 0x7fffffff, 0x3, 0xffffff7e, 0x4, 0x0, 0x4, 0xfffffff8, 0xe346, 0x3, [0x9, 0x52, 0x4, 0x0, 0x6, 0x3, 0x6850fdf8, 0x0, 0xb]}) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000540)='/sys/devices/virtual/block/nbd1/queue/write_same_max_bytes\x00', 0x8080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000040)=""/9, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) getpeername$auto(0x3, 0x0, 0x0) r6 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000580)={0x8, 0x1, 0xfffffffd, 0x8, 0x21, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x5, 0x5, 0x2, 0x8, 0xae, 0x7, 0x6, 0x7, 0x5, 0x7, 0x0, 0x0, 0x0, 0x200, 0x1c, 0x0, [0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x10000000, 0x0, 0xfffffffffffffffd, 0x0, 0x80000001, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x4, 0x0, 0x0, 0x400000, 0x0, 0x80000000000, 0x400000000000000, 0x0, 0x8000000000000000, 0x80000000000000, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffbfe, 0x0, 0x0, 0x3, 0xffffffffffffffff, 0xfffffffffffffffe, 0x8, 0xfffffffffffffffe], "a2a31c099bb0686c744099a431686e02ed6373c5e647d357f258ba87bf7bd3e648462f5a4351a4a7a49b"}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x2000c881) sendmsg$auto_NL80211_CMD_DEL_TX_TS(r6, 0x0, 0x40000) sendmmsg$auto(r6, &(0x7f0000000200)={{0x0, 0x800, &(0x7f0000000100)={0x0, 0x42}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x9e58) read$auto_kernfs_file_fops_kernfs_internal(r5, 0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dsp1\x00', 0x401, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/time\x00') 14m37.626243456s ago: executing program 2 (id=5599): r0 = socket(0x848000000015, 0x805, 0x200) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x25, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf250100000008000a0008000000051a070058000000080009009c781e01060002000500000006001a0000010000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) r3 = socket(0x10, 0x2, 0xc) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="10ffffbd7000fbdbdf250a00000a08000a400500000020000100"], 0xf8}}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) settimeofday$auto(0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="a52f0000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004853520008000200", @ANYRES32=0x9, @ANYBLOB="080005000a0000000800070001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x2, 0x8000) r8 = socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) sendto$auto(r8, 0x0, 0xb, 0xc, &(0x7f0000000000), 0x1c) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000300fafbeb454e050695aed41d913575407f7989b6b89d61443daaa47763f0a8cc79f4cc96cbf8db7c1e053f23198a335682cafa84b65a97667a9042bae37f68cd7be9516d66929bbf4a5fdf034d98a5fe57aee7f0f187fda11381ce27be0dcc97457f4c76e253807a868c4d16dddeb3dbb5a6caa621d9caf532e63fde3ade95da8d82a4f0a708bc39dc890920a41275bcd68d78fb097c056a2da8ec08cb9ae52b2f643952aae7c34b53d8a7740d4328a50c1d1485fa8b3b03859e54f3ab6edfc20ecf4fd1f00e38112021debfd3f00c55fe34bbe822", @ANYRES16=r6, @ANYBLOB="01002cbd7000fcdbdf25010000000c000100862dbd5c2421210008000900", @ANYRES32=r7, @ANYBLOB="07000100255e0000080005000000000008000900", @ANYRES32=r7, @ANYBLOB="08000700090000000500010000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4801}, 0x8000000) 14m31.233478145s ago: executing program 2 (id=5603): r0 = socket(0x848000000015, 0x805, 0x200) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x25, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000fcdbdf250100000008000a0008000000051a070058000000080009009c781e01060002000500000006001a0000010000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) r3 = socket(0x10, 0x2, 0xc) r4 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="10ffffbd7000fbdbdf250a00000a08000a40050000002000010006"], 0xf8}}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) settimeofday$auto(0x0, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="a52f0000", @ANYRES16=r6, @ANYBLOB="010026bd7000fcdbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="080001004853520008000200", @ANYRES32=0x9, @ANYBLOB="080005000a0000000800070001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x80) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x2, 0x8000) r8 = socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) sendto$auto(r8, 0x0, 0xb, 0xc, &(0x7f0000000000), 0x1c) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000300fafbeb454e050695aed41d913575407f7989b6b89d61443daaa47763f0a8cc79f4cc96cbf8db7c1e053f23198a335682cafa84b65a97667a9042bae37f68cd7be9516d66929bbf4a5fdf034d98a5fe57aee7f0f187fda11381ce27be0dcc97457f4c76e253807a868c4d16dddeb3dbb5a6caa621d9caf532e63fde3ade95da8d82a4f0a708bc39dc890920a41275bcd68d78fb097c056a2da8ec08cb9ae52b2f643952aae7c34b53d8a7740d4328a50c1d1485fa8b3b03859e54f3ab6edfc20ecf4fd1f00e38112021debfd3f00c55fe34bbe822", @ANYRES16=r6, @ANYBLOB="01002cbd7000fcdbdf25010000000c000100862dbd5c2421210008000900", @ANYRES32=r7, @ANYBLOB="07000100255e0000080005000000000008000900", @ANYRES32=r7, @ANYBLOB="08000700090000000500010000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4801}, 0x8000000) 14m29.037251588s ago: executing program 2 (id=5605): close_range$auto(0x0, 0xfffffffffffff000, 0x3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/ipc\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/time\x00') r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/rpc/nfsd.export/channel\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/queue_id\x00', 0x80, 0x0) fanotify_init$auto(0x200, 0x1) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip_mr_vif\x00', 0x100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000) socket(0x11, 0x80003, 0x304) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x420008, 0x4000000000df, 0xeb1, 0x401, 0x400008000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/arp\x00', 0x60000, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) msync$auto(0x0, 0x2000000005, 0x6) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/tty27\x00', 0x1530c1, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_ADD_RXSA(r2, &(0x7f0000001c80)={0x0, 0x0, &(0x7f0000001c40)={&(0x7f0000000ac0)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@MACSEC_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000804}, 0x8880) r4 = open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) write$auto(r4, 0x0, 0xeffd) ioctl$auto_TIOCVHANGUP2(r1, 0x5437, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) pipe2$auto(0x0, 0x800) socketpair$auto(0x1, 0x1, 0x200000, 0x0) pipe$auto(0x0) 14m27.481844261s ago: executing program 2 (id=5608): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) io_uring_setup$auto(0x4a, 0x0) r0 = open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) io_uring_setup$auto(0x9, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wg0\x00'}) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x22, 0x940, 0x1ffde, 0x3, 0x6, 0x8000002, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, [0x0, 0x0, 0x0, 0x243efbdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6e]}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 14m25.330344452s ago: executing program 2 (id=5610): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getxattrat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000, &(0x7f00000000c0)='nbd\x00', &(0x7f00000001c0)={0x0, 0xa50}, 0x1000) sendfile$auto(r0, r0, 0x0, 0x9) mmap$auto(0x80000000efbf, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x6) munmap$auto(0x20001000, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0xa) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) ioctl$auto(0x1, 0x89a0, 0x8) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x9, 0x3, 0x10000000000002) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) socket(0x2b, 0x1, 0x0) socket(0x2, 0x3, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040804) socket(0x2, 0x5, 0x0) socket(0xa, 0x801, 0x84) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0xf, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) getsockopt$auto(0x6, 0x7, 0x10, 0x0, &(0x7f00000000c0)=0x10000) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) 14m9.323257513s ago: executing program 35 (id=5610): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) getxattrat$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x1000, &(0x7f00000000c0)='nbd\x00', &(0x7f00000001c0)={0x0, 0xa50}, 0x1000) sendfile$auto(r0, r0, 0x0, 0x9) mmap$auto(0x80000000efbf, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x6) munmap$auto(0x20001000, 0x7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0xf, 0x3, 0xa) lsm_list_modules$auto(0x0, &(0x7f0000000100)=0xbefc, 0x0) ioctl$auto(0x1, 0x89a0, 0x8) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x9, 0x3, 0x10000000000002) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) socket(0x2b, 0x1, 0x0) socket(0x2, 0x3, 0xa) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040804) socket(0x2, 0x5, 0x0) socket(0xa, 0x801, 0x84) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', 0x0, 0xf, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) getsockopt$auto(0x6, 0x7, 0x10, 0x0, &(0x7f00000000c0)=0x10000) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) 14m4.672676127s ago: executing program 4 (id=5625): fdatasync$auto(0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) open_by_handle_at$auto(0x1, &(0x7f0000000040)={0x2, 0x2, 'Ll'}, 0x2) io_submit$auto(0x6703, 0x2, &(0x7f0000000040)=&(0x7f0000000000)={0x1, 0xfffffe00, 0xc756, 0x3ff, 0x9, 0xffffffffffffffff, 0x1, 0x1, 0xbb5, 0x0, 0x4}) mmap$auto(0x0, 0x1, 0x4000000000df, 0x44eb2, 0x3, 0x300000000000) truncate$auto(&(0x7f00000000c0)='./cgroup\x00', 0x100000000000001) fcntl$auto(0x8000000000000001, 0x26, 0x8) migrate_pages$auto(0x0, 0x4, &(0x7f0000000100)=0x7f, &(0x7f0000000140)=0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/slab/kmalloc-64/reclaim_account\x00', 0x2600, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) arch_prctl$auto(0x2001, 0x2) madvise$auto(0x0, 0xffffffffffff0001, 0x15) ioctl$auto_UBI_IOCATT(0xffffffffffffffff, 0x40186f40, &(0x7f0000000080)={0xd, 0x0, 0xd, 0x4, 0x9}) sendmsg$auto_TIPC_NL_MON_SET(0xffffffffffffffff, 0x0, 0x20000000) acct$auto(0x0) fcntl$auto(0x0, 0x407, 0xffffffff80000000) close_range$auto(0x2, 0x8, 0x0) write$auto_ima_measure_policy_ops_ima_fs(r0, &(0x7f0000000080)="a45428e8a7e2be5c83fc30b36b4d8b615b9792fcf30ee8a09cd45965ba3e74754298ace0f86145515ab033ecb2093ac36cfc463c18a175f65ccf54fe4e674467328f5932b53ca4fabf0907a4e3252736c13957", 0x53) r1 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r1, 0x107, 0x12, 0x0, 0x4) 14m0.759927809s ago: executing program 4 (id=5629): r0 = creat$auto(&(0x7f0000000000)='./file0\x00', 0x3) write$auto_tracing_err_log_fops_trace(r0, &(0x7f0000000080)="e01d86a3b1cab08c", 0x8) mmap$auto(0x0, 0x20009, 0xe, 0xeb1, 0x403, 0x8000) close_range$auto(r0, 0x8, 0x0) r1 = mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) close_range$auto(r1, r0, 0x3) bpf$auto(0x0, &(0x7f0000000000)=@enable_stats={0x1b}, 0xa3) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x6, 0x0, 0x1) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) semctl$auto(0x80001ff, 0x804, 0x13, 0x4) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) userfaultfd$auto(0x816) mlockall$auto(0x7) mprotect$auto(0x0, 0x8000000000000001, 0x6) clone3$auto(0x0, 0x40) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0xffc, 0x100000004, 0x100000002, 0x0, 0x7ff, 0x5) setuid$auto(0xe) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/rxrpc/locals\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000280)=""/120, 0x78) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000100)=""/248, 0xf8) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r3, @new_prog_fd=0x4, 0x4, @old_map_fd=r4}, 0xa3) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) fcntl$auto(0x2, 0x5, 0x1) 13m58.500945665s ago: executing program 4 (id=5630): r0 = socket(0x2, 0x801, 0x106) getsockopt$auto(r0, 0x11c, 0x3, 0x0, 0x0) mmap$auto(0x0, 0x2e, 0x3, 0xeb1, r0, 0xa000) r1 = socket(0x2, 0x3, 0xa) mmap$auto(0xb65e, 0xde, 0x0, 0x15, r1, 0x0) read$auto(0x3, 0x0, 0x80) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, &(0x7f00000000c0)="0a1b9a5c300f8262cd1aec49ec53c2efa01492586e163bb154d7886d8ea5c2574c58e9867ecec3371cadb848770dc8f745b2c76eedba12b9f694dabdbcf3401910bb733aca465c9bd40a", 0x4a) connect$auto(0x3, &(0x7f00000000c0)=@l2tp={0x2, 0x0, @rand_addr=0x64010101, 0x3}, 0xa) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) getrandom$auto(0x0, 0x7fffffffffffffff, 0x7fff) ioctl$auto_RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) fcntl$auto(0x0, 0x407, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000140)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010029bd7000fedbdf250200000004000180190001800800bb00", @ANYRES32, @ANYBLOB="00000000b25de7c0a50a35", @ANYRES32, @ANYBLOB="dac8f9b74b000000"], 0x34}, 0x1, 0x0, 0x0, 0x40c4}, 0x8800) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) openat$auto_rfcomm_sock_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x144402, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x840000000002, 0x3, 0x6) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x12, 0x0, 0x4) connect$auto(0x3, &(0x7f0000000040), 0x55) write$auto(0x3, 0x0, 0xfdf3) r5 = io_uring_setup$auto(0x6, 0x0) pidfd_send_signal$auto(r5, 0x7, &(0x7f00000000c0)={@_si_pad}, 0x1) 13m56.167136748s ago: executing program 4 (id=5632): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000040), 0xffffffffffffffff) sendmmsg$auto(r0, &(0x7f0000001300)={{&(0x7f0000000140)="dad0f2254734bc6d6b76a40307cbc1fc8d3a0dd09c5fd64a3318287e59adf3c2cfc52fb84c3c2dfbfe1a313c34f0e5a5dbb32ae24a6a547b4feb5a3173f645a7b56bc4b02050fa3f94ccec95735d0e0c343119f738fe18b7ebf8579aa7da1583b1b589ef0d7a8d8fd691b6a915bd76f4a4d4021512da924a9a4a13f7ce226dfce323131e932df003e2126399e03402a83aadf67715195c0eae74e7890e1424f194b9", 0x2, &(0x7f0000000000)={&(0x7f0000000200)="a02d74c97803c1c5318c2dc401e1a9cb31627659eb5ad3aa3e85608d5ffb1877bfe575b5d5b0ea0067dbbb15e46768542d501985a7aa0825905e06acefebff2fe6819824f40464c823fa48ef8d1ac1933192441cb57267f8385390f3432e92b054966ba7f780c8b62cf28e25b043f720692106f3c49a1c9d1c26bf9d492f060a186b59b9e1bcdccd7ecf765bd55da91f86f44b52c3faa2588a87b15df952c47a7e56d1aff5b15d4027ad00b67a6624cf49315fa6626b5e9de9daef49e218bac2b556935dbce240d43e1ae34d0e7a4b490e88ec58d47651c63c", 0x1}, 0x9, &(0x7f0000000300)="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", 0x7, 0x6}, 0x4}, 0x3, 0x7) sendmsg$auto_IOAM6_CMD_DUMP_NAMESPACES(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r1, 0x70b, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4008041}, 0x20000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x3, 0x1) socket(0x2, 0x1, 0x106) ioctl$auto(0x1, 0x890c, 0x8) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6e) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x10, 0x0, 0x8) 13m44.641408886s ago: executing program 4 (id=5634): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/sys/net/ipv6/conf/default/ioam6_enabled\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) sendmmsg$auto(0x3, 0x0, 0x7, 0x1f) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x5dc}, 0x8) shutdown$auto(0x200000003, 0x2) read$auto_bdi_debug_stats_fops_(r0, &(0x7f0000000300)=""/62, 0x3e) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/est_nice\x00', 0x80000, 0x0) mprotect$auto(0x1fffefff, 0x100000007ff, 0x40000000000000d) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_to_batadv/ra_honor_pio_pflag\x00', 0x8202, 0x0) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cec8\x00', 0x101901, 0x0) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r2, 0xc05c6104, &(0x7f0000000100)={'\x00', 0xffff, 0x46, 0x2, 0x9b4, 0xd, "ce7009002ce100", '\x00', "0201ccb7", '\x00', ["00009f0003010000007abfc1", "0a00170000b4f7f212004000", "228675c1b82444c2000000ec", "00deff100000deff1900"]}) sendfile$auto(r1, r0, 0x0, 0x48) mmap$auto(0x0, 0x4020009, 0x1, 0xeb1, 0x3fd, 0x8000) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r3, 0xc0045103, 0x3) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_DEV_UP(r4, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x30, r5, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@NFC_ATTR_DEVICE_NAME={0x4}, @NFC_ATTR_VENDOR_ID={0x8, 0x1d, 0x2}, @NFC_ATTR_COMM_MODE={0x5, 0xa, 0x1}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x6}]}, 0x30}, 0x1, 0x0, 0x0, 0x26080804}, 0x4000045) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x6) mseal$auto(0x1ffff000, 0x7dda, 0x0) syz_clone(0x9808000, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/tracing_on\x00', 0x8000, 0x0) setresgid$auto(0x4000009, 0x8, 0x7fffffffffffffff) openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/fail_iommufd/space\x00', 0x6ab81, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000100), r6) 13m39.675913991s ago: executing program 4 (id=5636): mmap$auto(0x7, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x2, 0x1, 0x0) clock_gettime$auto(0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x100, 0x0) write$auto(r0, &(0x7f0000000440)='t\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x10000, 0x10400208, 0x0, 0xef94, 0x2, 0xfffffffe) ioctl$auto_evdev_fops_evdev(0xffffffffffffffff, 0x400445a0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x48, 0x3, 0x3b) capget$auto(0x0, 0xfffffffffffffffe) getsockopt$auto(r3, 0x29, 0x20, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf251600000283000180140002006e65746465767369ae00f903304aa0ede66d300000000000000500030004000000a19b04004000300b8b36efeba247d1abf1bfa0be219eabbbb4ac3031e041e7060fd9d730deab992dfcc7f55ebfd51f8b74b9530d3a97bae7a049d8c7ed0e07817e02dbc577bc980b703b329c445d8c93ebb643a8aa5ebac489ea5a9c"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) mmap$auto(0x6, 0x5, 0xfffffffffffffff8, 0x40000000009b7f, r1, 0x8000) timer_create$auto(0x4, 0x0, 0x0) r4 = socket(0x2a, 0x1, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x5, 0x0) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0x6, 0x2009b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) gettid() connect$auto(r4, 0x0, 0x4) 13m23.171036489s ago: executing program 36 (id=5636): mmap$auto(0x7, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) socket(0x2, 0x1, 0x0) clock_gettime$auto(0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40}, 0x6a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/system/cpu/cpu1/online\x00', 0x100, 0x0) write$auto(r0, &(0x7f0000000440)='t\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xacA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3CRnz\xc2\x13<\xf0\v\x1f\x14\xf3\xd0\xf2\xd1L!\x81\xea\x83\xa0\r|%\xbf\x02trg\x9a\xe7)\a\xf4\xaa\x05\xc0\xa0r\xd2\x85\x8dH\xd0>\xca\xfc5\x01\x95O4\xca\x95\x1d\x83\xec\nD\x8e\xfb\xce\xd1w\x15:\xe9\x81/B#\xc6\xa1\xfa-\x1b\x8cr\x92nM\xa1\xbb\xe4pd$\xd7\x1b\v\x82\rd\xd2\xaa\v!\xb1}\x92\x89\x8d\xcd\x1e\xc7N\xeeO\x8dO\xe9\xfc\x91\xa1\xa8=R+\a\xb7R\t\f+\x7f\xd5H\x90G=\x9a\r\xb10\x17n\x1b\xf8\v\x11\v\xbb', 0x98c7) mmap$auto(0x10000, 0x10400208, 0x0, 0xef94, 0x2, 0xfffffffe) ioctl$auto_evdev_fops_evdev(0xffffffffffffffff, 0x400445a0, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x2020008, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socket(0x48, 0x3, 0x3b) capget$auto(0x0, 0xfffffffffffffffe) getsockopt$auto(r3, 0x29, 0x20, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fedbdf251600000283000180140002006e65746465767369ae00f903304aa0ede66d300000000000000500030004000000a19b04004000300b8b36efeba247d1abf1bfa0be219eabbbb4ac3031e041e7060fd9d730deab992dfcc7f55ebfd51f8b74b9530d3a97bae7a049d8c7ed0e07817e02dbc577bc980b703b329c445d8c93ebb643a8aa5ebac489ea5a9c"], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) mmap$auto(0x6, 0x5, 0xfffffffffffffff8, 0x40000000009b7f, r1, 0x8000) timer_create$auto(0x4, 0x0, 0x0) r4 = socket(0x2a, 0x1, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x5, 0x0) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc0}, 0x40) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0x6, 0x2009b72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000002d, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) gettid() connect$auto(r4, 0x0, 0x4) 9m25.446304871s ago: executing program 7 (id=6609): openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000003c0), 0x80303, 0x0) prctl$auto(0x1000000001c, 0x5, 0x8, 0x9, 0x80001) setreuid$auto(0x15, 0x5) eventfd$auto(0x8c) r0 = socket(0x10, 0x2, 0x4) r1 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x4, &(0x7f0000000000), 0x1) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0x1, 0x1, 0x0, 0x0, 0x7) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0xfffffffffffffffd, 0x8000) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa1\x00', 0x48080, 0x0) r2 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/mice\x00', 0x42, 0x0) bind$auto(r2, &(0x7f0000000080)=@vsock={0x28, 0x0, 0x2711}, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/o2cb/logmask/ERROR\x00', 0x122d82, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) read$auto(0x3, 0x0, 0x80) statx$auto(0xffffffffffffff9c, 0x0, 0x2, 0x9, &(0x7f0000001400)={0x1, 0xe23b, 0xebee, 0x80000001, 0xffffffffffffffff, 0x0, 0x81, 0x1, 0xffff, 0xc, 0x4, 0x8, {0x0, 0xfb0}, {0x7, 0x401}, {0xb03, 0x6}, {0x7, 0x9}, 0x3, 0x7, 0x5, 0x9, 0x7, 0x7, 0x6, 0x3, 0xff, 0x40, 0x8001, 0x401, [0x9b, 0x0, 0x7fff, 0x3, 0x935c, 0x9, 0x4, 0x9e1]}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="44010000", @ANYRES32=r0, @ANYBLOB="01002dbd7000fddbdf250a00000008000100", @ANYRES32=r3, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0b0042006d6163736563000014002d00fc010000000000000000000000000001080001"], 0x144}, 0x1, 0x0, 0x0, 0x4040085}, 0x10) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/midi2\x00', 0x42841, 0x0) writev$auto(0x4, &(0x7f0000000080)={&(0x7f0000000040), 0x8}, 0x5) 9m24.208594093s ago: executing program 7 (id=6614): r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x80400, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tracing_err_log_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/error_log\x00', 0x50802, 0x0) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/netdevsim/netdevsim2/max_vfs\x00', 0x800000, 0x0) read$auto(r1, &(0x7f0000000180)='$G\x00', 0x6) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="2f212dbd7000fcdbdf2521000000080003"], 0x24}}, 0x4000000) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(r0, 0x8, 0x4) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptys4\x00', 0x301, 0x0) write$auto(r2, &(0x7f0000000040)='\x00', 0xdb01) 9m23.173866322s ago: executing program 7 (id=6616): r0 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2200, 0x0) ioctl$auto_NVRAM_SETCKS(r0, 0x7041, 0x0) r1 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_UBI_IOCATT(r1, 0x40186f40, &(0x7f0000000040)={0xfffffff9, 0x2, 0x800, 0x9, 0x7f, 0x1}) r2 = socket(0x23, 0x800, 0x200) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040), 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x5, 0x20000000) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x8004) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x400c000) bpf$auto(0x0, 0x0, 0xfbf) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89b0, &(0x7f0000000140)={'vlan0\x00'}) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x296) sendmsg$auto_NLBL_MGMT_C_LISTDEF(r3, 0x0, 0x20048800) select$auto(0x1000009, 0x0, &(0x7f0000000100)={[0xa, 0x200, 0x80000000000000b, 0xc, 0x9, 0xf4, 0x6, 0x1, 0x40009, 0x2000000000003, 0x4000000000000000, 0x6, 0x95, 0x8, 0x8, 0x6]}, 0x0, 0x0) pipe2$auto(&(0x7f0000000000)=r2, 0x4) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01032cbd700000000000000010000015000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4019}, 0x0) settimeofday$auto(&(0x7f0000000080)={0x5, 0x9}, &(0x7f00000000c0)={0x3, 0x2}) 9m22.34651207s ago: executing program 7 (id=6619): mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/smaps\x00', 0x20a000, 0x0) pselect6$auto(0x5, 0x0, 0x0, 0x0, 0x0, 0x0) 9m21.219307352s ago: executing program 7 (id=6623): capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x4a}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_IEEE802154_LLSEC_ADD_KEY(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000ffdbdf2527000000050028000300000013f7a2002343c6cc737eff488e00000000f4ccf006000600e1f08aedd8db358a060000000600080004"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x8001) mmap$auto(0x0, 0x2020009, 0xfffffffffffffff3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/debug_objects/stats\x00', 0x200000, 0x0) r0 = open(&(0x7f0000000100)='.\x00', 0x591002, 0x408) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) socket(0xa, 0x801, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) msync$auto(0x0, 0x5, 0x6) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x41ff, 0x3) write$auto(0x3, 0x0, 0x7fffffff) read$auto(0x3, 0x0, 0x80) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x2, 0x0) syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NLBL_UNLABEL_C_ACCEPT(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x120204}, 0xc, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[], 0x14c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) setuid$auto(0xe) get_robust_list$auto(0x1, 0xffffffffffffffff, 0x0) sendmsg$auto_NLBL_UNLABEL_C_LIST(r1, 0x0, 0x11) move_mount$auto(r0, 0x0, 0x4, 0x0, 0x176) r2 = socket(0x11, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f00000003c0), 0x5, 0x1000}, 0x5}, 0x2, 0x100) r3 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r3, 0x29, 0x2, 0x0, 0x2) 9m20.469276139s ago: executing program 7 (id=6628): r0 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000003640)={r0, 0x7, 0x6}, 0x6, 0x100000) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000080)={0x3, 0x26, 0x1e2, @inferred, 0x0, "9d4f8ef3f785aae5a5ff69c61ed549546c1eadce39439cb9f7fe26fe87659c9dd52e80eb5a7b5bdce62f726f940b383b8d24"}) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r3, 0x40045402, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{@raw=0x8, 0x0, 0x20e, 0x9, "669cbbd9e97551b991bea188e0f1a57ce2a1facac1f00b2f4ab8635524133f9e22c7717f6050f2d2252ca5f2", @raw=0x8}, 0x0, @iec958={"31bee81a1537292d6d5cf10129461bcfe21944de67f2c7e2", "45805e24089c633fd962e093b796e736916cd56e8b2bb35e3c8f947e52f345a1832f06560b67fb3b43f9ac6cda5b59234d4f1ac1daa73642e017db1ec71d66d872484e2a198dc86694a7d8f8384d7756ad802f6499b1fc34778aafcfefebb863950c6eed81b14c2e00f36951fbcd5e61ab4cf1444ed57899112d9183f5c351b7f8f3f4c814582e3fbfab15956b11ea2f621365", 0x0, "d8eb943c"}, "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01032cbd7000fddbdf250a00000008000200", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) writev$auto(0x4, &(0x7f0000000080)={0x0, 0x8}, 0x1) 9m20.234318535s ago: executing program 37 (id=6628): r0 = socket$nl_generic(0x10, 0x3, 0x10) poll$auto(&(0x7f0000003640)={r0, 0x7, 0x6}, 0x6, 0x100000) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_LIST(0xffffffffffffffff, 0xc0505510, &(0x7f0000000080)={0x3, 0x26, 0x1e2, @inferred, 0x0, "9d4f8ef3f785aae5a5ff69c61ed549546c1eadce39439cb9f7fe26fe87659c9dd52e80eb5a7b5bdce62f726f940b383b8d24"}) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r3 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r3, 0x40045402, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000100)={{@raw=0x8, 0x0, 0x20e, 0x9, "669cbbd9e97551b991bea188e0f1a57ce2a1facac1f00b2f4ab8635524133f9e22c7717f6050f2d2252ca5f2", @raw=0x8}, 0x0, @iec958={"31bee81a1537292d6d5cf10129461bcfe21944de67f2c7e2", "45805e24089c633fd962e093b796e736916cd56e8b2bb35e3c8f947e52f345a1832f06560b67fb3b43f9ac6cda5b59234d4f1ac1daa73642e017db1ec71d66d872484e2a198dc86694a7d8f8384d7756ad802f6499b1fc34778aafcfefebb863950c6eed81b14c2e00f36951fbcd5e61ab4cf1444ed57899112d9183f5c351b7f8f3f4c814582e3fbfab15956b11ea2f621365", 0x0, "d8eb943c"}, "282f77b07e718ed4d99a34617774e3a82f982e0f05e516c299a28a585e87e0d908e2c8e50de5016f1de5d432da2cc20e951d8fcdc4f791a11996aad5af504c0d9927e62ef70b23a13735a4fe805c1ce1b6b1d83d21bb42794ec925b4547a3d52d4b5210392111e181719fef9d685b6534b171d76ad633f94a608b818600a6c85"}) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r1, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="01032cbd7000fddbdf250a00000008000200", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/audit\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x2a801, 0x0) writev$auto(0x4, &(0x7f0000000080)={0x0, 0x8}, 0x1) 6.576659917s ago: executing program 5 (id=8648): io_cancel$auto(0x8, 0x0, &(0x7f0000000140)={0x0, 0x100000001, 0x2, 0x6}) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.6/usb7/7-0:1.0/modalias\x00', 0x40900, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000280)=""/4096, 0x1000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x6, 0x5, 0x3, 0x2000000000010006, 0x0, 0x7, 0x5, 0x0, 0x7, 0xaf, 0x9, 0x2, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, [0x1b16, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x77, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc06f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x107, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x80000000000]}, 0x1fe, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f2000000", @ANYBLOB='O\x00', @ANYRES16], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0xb, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='*'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbff, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x8, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x4}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x894}, 0x4) 5.283619877s ago: executing program 5 (id=8654): unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) removexattr$auto(0x0, 0x0) mmap$auto(0x4, 0x2020009, 0x8, 0xeb1, 0xffffffffffeffffa, 0x7ffd) rseq$auto(&(0x7f0000000000)={0xe, 0x400, 0x0, 0x20006, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) msgsnd$auto(0x9, 0x0, 0x10001, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000001080)=""/4092, 0xffc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x4000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1d, 0x2, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x252802, 0x190) socket(0x1, 0x1, 0x0) r1 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000380), 0x82002, 0x0) ioctl$auto_RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000300)={0xb, 0x7, 0x2, 0x2, 0x110f, 0x3, 0x7f, 0x1ff, 0xd}) setsockopt$auto(0x3, 0x1, 0xf44, 0x0, 0x9) connect$auto(0x3, &(0x7f00000001c0), 0x55) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 4.372741209s ago: executing program 6 (id=8658): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000140)={0x0, 0x7800, &(0x7f0000000280)={&(0x7f0000000080)={0x64, r1, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6}, @L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x80}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x1}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x8}, @L2TP_ATTR_IP6_SADDR={0x14, 0x1f, @ipv4={'\x00', '\xff\xff', @remote}}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @loopback}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x64}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) 4.152290378s ago: executing program 6 (id=8659): mmap$auto(0x0, 0x9, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/lockd/nlm_end_grace\x00', 0xc0000, 0x0) (async) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) (async) r0 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x40, 0x0) r1 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r1, &(0x7f0000008d40)='($}-)#@\x00', 0x40) (async) close_range$auto(r0, r0, 0x0) (async, rerun: 32) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x101, 0x0) (rerun: 32) write$auto(r2, 0x0, 0x8d19) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async, rerun: 64) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') (async, rerun: 64) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) (async) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) (async) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x7, 0x5, 0x1000, 0x100000001, 0xc, 0xf, 0xffffffffffffffff, 0x40, 0x5, 0xd59, 0x101, 0xff, 0x3, 0x8007ffff]}, 0x0, 0x0) (async) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zram0\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) 3.381570896s ago: executing program 6 (id=8661): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x29, 0x940, 0x1ffde, 0x3, 0xa, 0x2, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x1ff, 0xfffffffffffffffe, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x1fe, 0x81) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 3.220637281s ago: executing program 8 (id=8662): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x3c, r1, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0xfb}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0xe0}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000840}, 0x2000c840) socket(0xa, 0x3, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x21, 0x2, 0x2) ioperm$auto(0x8, 0x5, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x2) connect$auto(0x5, 0x0, 0x9) socket(0x1d, 0x2, 0x7) setsockopt$auto(0x3, 0x6b, 0x2, 0xffffffffffffffff, 0x3) fanotify_init$auto(0x2, 0x2000000000002) open(&(0x7f0000000000)='./bus\x00', 0x12ba7e, 0x45) socket(0xa, 0x3, 0x3a) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/raw6\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000e80)=""/215, 0xd7) ioctl$auto(0x3, 0xc058560f, 0x38) read$auto(0x3, 0x0, 0xf34) connect$auto(0xffffffffffffffff, 0x0, 0x6) sendmsg$auto_MACSEC_CMD_DEL_RXSC(0xffffffffffffffff, 0x0, 0x80) r3 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/current_tracer\x00', 0x240482, 0x0) pwrite64$auto(r3, 0x0, 0x0, 0x80000000000444c) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000040)=""/4096, 0x1000) 3.170914652s ago: executing program 6 (id=8663): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) r0 = socket(0x2a, 0x1, 0x0) mmap$auto(0x6, 0x400008, 0xdf, 0x9b72, 0x2, 0x7ffe) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) open(0x0, 0x1a1043, 0x2a) bind$auto(0x3, 0x0, 0x6b) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000140)) connect$auto(r0, &(0x7f0000000040)=@can, 0x8) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0xca, 0x0, 0x567) syz_genetlink_get_family_id$auto_ovs_datapath(0x0, r0) mbind$auto(0x0, 0x100080004, 0x8, 0x0, 0x6, 0x9) gettid() connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x5, 0x3, 0x16, 0x3, 0x8000) unshare$auto(0x40000080) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) madvise$auto(0x0, 0x20200, 0x15) r1 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000240)={0x93, 0x4, "4ff9166d473ec56fba5b6ef5aaf7b809c57c826a03e955b56d7d5cddb91b84097aae6a7f34d5fabfb5c7a668c682a13e9d798715ae928db098f1d65a585d8095c59b5e884f81ca41eaa9c3645f9c8a632d8e491f22e662abe747bb087843fbcf0a4feca35a24c40430b825b0f918aade6ee006982b34c7684c3c15de59bea67c560c0fa48a6ccf028d0ad13ff9509d9c1fde6d"}, 0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_to_hsr\x00'}) 2.14929501s ago: executing program 8 (id=8664): ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x80045438, 0xfdfdffffffffffff) 1.883830691s ago: executing program 8 (id=8666): r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/power/suspend_stats/fail\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/213, 0xd5) socket(0x15, 0x5, 0x0) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f0000006700), 0x103480, 0x0) close_range$auto(0x2, 0x8000, 0x0) r2 = socket(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'ip6tnl0\x00'}) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x3, 0x6) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r4, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x3}, 0x6) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r3, 0x0, 0x8000000000007}, 0x9) mmap$auto(0x0, 0xda, 0x1, 0xeb1, 0x40000000000a5, 0x8000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000180), r0) statx$auto(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x28, 0x4, &(0x7f0000000200)={0xd7, 0x4, 0x9, 0x6, 0xffffffffffffffff, 0xee00, 0x4, 0x6, 0x7, 0x9, 0xffffffffffffffff, 0x2, {0x2, 0x7}, {0x3, 0x200}, {0x9, 0x8000}, {0xfffffffffffffff7, 0x1}, 0x5, 0x8, 0xab7, 0x400, 0x100, 0x9, 0x7f, 0x90000, 0x5, 0x80, 0x663, 0x200, [0x7fffffffffffffff, 0x5, 0x8, 0x6ae, 0x2, 0x1bd, 0x1, 0x7, 0x4]}) r5 = openat$auto_o2hb_debug_fops_heartbeat(0xffffffffffffff9c, &(0x7f0000000340)='/sys/kernel/debug/o2hb/livenodes\x00', 0x800, 0x0) r6 = set_tid_address$auto(&(0x7f0000000380)=0x9) mq_notify$auto(r1, &(0x7f00000003c0)={@sival_int=0xff, @inferred=r5, 0xb, @_tid=r6}) 1.755429148s ago: executing program 9 (id=8667): mmap$auto(0x0, 0x2020009, 0x3, 0x411, 0xfffffffffffffffa, 0x800008000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/neigh/netdevsim0/unres_qlen_bytes\x00', 0x4ea8e886b6e91c40, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) socket(0x20, 0x4, 0x800077) socketpair$auto(0x3, 0x5, 0x8000000000000000, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000180), 0x8c00, 0x0) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x200000000000203, 0x0, 0x9, 0x5, 0x7, 0x6, 0x1f2, 0x6, 0xe8, 0x400000001ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) mmap$auto(0x0, 0xff, 0x6, 0x9b73, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x1, 0x0) madvise$auto(0x0, 0x7ffffffffffffffc, 0x40c) prctl$auto(0x5, 0x1000000000000017, 0x0, 0x0, 0x0) fanotify_init$auto(0x65, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty43\x00', 0x800, 0x0) write$auto(0xc8, 0x0, 0x8201) r1 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/block/mtdblock0/pm_only\x00', 0x46340, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r1, &(0x7f0000000380)=""/193, 0xc1) ioctl$auto(r1, 0x5603, 0x7) pwritev2$auto(0x4, &(0x7f0000001fc0)={0x0, 0x7}, 0x1, 0xffffffffffffffff, 0x81, 0x8) r2 = socket(0x1, 0x1, 0x0) bind$auto(r2, 0x0, 0x6b) r3 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000080), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r3, 0x4c81, 0x0) mmap$auto(0x7, 0x20007, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) io_setup$auto(0x8001, &(0x7f0000000040)=0x10000) r4 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r4, &(0x7f0000000000)={{&(0x7f0000000040), 0xc88, 0x0, 0x0, &(0x7f0000000140), 0x8, 0x80000000}, 0x5}, 0x3b8b, 0x800) 1.554372901s ago: executing program 5 (id=8668): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/slabinfo\x00', 0x62140, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) socket(0x8, 0x5, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x200800, 0x0) memfd_secret$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptywa\x00', 0x400, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$auto(0x1, 0x2, 0xfffffffe, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000, 0x0) setresuid$auto(0x2, 0xffffffffffffffff, 0x200) mmap$auto(0x0, 0x400008, 0x400000000000df, 0x19, 0x2, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xc, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x2, 0x7, 0x5, 0x7}, 0x1fe, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) bind$auto(r1, &(0x7f0000000040)=@isdn={0x22, 0xe, 0x8, 0x8, 0x5}, 0x67) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x5, 0x20000000) rseq$auto(0x0, 0x8000, 0x0, 0x6) geteuid() prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 1.464585806s ago: executing program 9 (id=8669): openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x40000) ioctl$auto(0x3, 0x80000541b, 0x38) 1.17654732s ago: executing program 9 (id=8670): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) mmap$auto(0xb, 0xfffffffffffffff8, 0x1ff, 0xff, 0x0, 0x23) r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000200), 0x100000, 0x0) ioctl$auto(r0, 0xfffff369, 0x2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/rose6/statistics/tx_window_errors\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r1, 0x8004) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) futex_wake$auto(&(0x7f0000000300)="86da91d92c382b03a7bd93d0507a5a71c1178f5cd2d5881ea661e8201fb8da96e1f0230b93fb6a789d825e124a0a5884b31d73f7ca62d0cb4dc83c6f87bf82e8d61999c100e8360c39bd136d59b765e7bbb5a69d6b2fc19345da0c2f61f95796e6c33a7c462f48e99f3456aaee2e27f68fecde3e4a3b8e70d2ac066b0ec7f805b7572325e9556bfff131a5b07192cded38159179c6b3db359e78be34f834aaedae4a2135c116de7890af5ad6d45aef4e386bc7a97070e885ca7ca1a70441610e5c0c5877019b48047611dda16a99caefbc0c8f5f15ce1a428e50b289fe9cf9b218e0f008e58fcc67ead8d1ea402b538ce3a8c6d1810134216d3cf667597f7f67bc27b70e47933196e28c55e39695cbd761ce0f0ec87bd5937064b545752a89afe054a544061a8881199a025486db22dacc431da29b8ca58626d07ebd1a9af5eb89593ab49f1c819ce777a7668afb8f0bf967a491a7365dfb2f383713333f7bb579326022c6ec6c9bcafff7822f54c7f19d938b1d1d0559b4937da7f79f88cfaa38d63a73040f4629e3af3b43a49591768d6444f01096c7f53669e1f90baa1d5844b809f6404f1335f8442ed1a34ad47c2a20240257889a0b7f0c1e5af202409b4a2947fd99414426ef69aaa3657b4b74e1d7faafbf39e7ded4085cede9ee80714b2c7deb25839084da34719fb1fc0ca4c64cea7ac76c5f5c406813b2c6a3bb62cadba09361c4a0f712009c33a0d5d2a957be6ebe32b03633ea9dbac49f03d7a8bfdd80fb0515c20ad5eff90d0b82105564bb6864be84b307091a9fc820492435e4dbd2af0df4afa0a334e3ab230693ad7239883666407b54182932457bf86c16e58b40d0cad23a05b8c309878e8db03dcc098e33f84e0b13fcb320173b09eaa8e1c09e1e19887ef637f290f101f80c83c7acce05d6d4da93f1201ec302267e688f272545d847a200b34ad73bb07092d80eeb55752501e3580f04748fcbfae0bb40649c6a32a0723a40d6b60c8819f8cf872968913928b117d3f5d5b86b5e8102cb05fde4052b38d8107ab8ce7fb6dcb886dda5449f00b82ffc99696ad45be9baeee882ab91a6e5ef0b9b3ee70cb5f1f4ce918410044a496b73b4a7a07502e32fb6b0366f597bb4ad45c83e245e6af293b54e3c95ca1f57505a8778f8a90535293655c44df48bec9edfda04dff373d507deaaad53b041161ddd9a9c3d2aa26d50d52a47d0ca97d65ee16d0dc9da47d0cde4f59a084b9f65aa6a6e097eb1173d9092724e944d81d024aeff07a6f25de4b7ebfe623aaabe0fa4c7b6b0aa8cf6e396dd02616d215771c20b9886a8bf923278cf33b9cc7c3642d239ea5d0a7a2c260c0b6e0e1c62919dad580787a3e492ec7e4fcb82ba708b5505b7e7cd569558c330a6c29d6ca17f5195c60f38794dfcd40f6710f60e7acc216f42f173c4799c0f207090d3e593b236b0742b6b0cb5a9d814db13ebd9342bb265fb29f530e94c513b1e158f1e51497039d41d570d1cc076c506b15ff6a9415989b5a1b52813dfdb3ebf323a62185aa33185cc272af5b6a9fb7520d08bba53e72c06f28cca83aed59fe27e3e0e185139281d79cd3d12fd4cc50e43e87a8101cbc1fb9b32adcdb1f08faa64f09f1d0daa3b99637b1400c26da24cfad60d190188d93f4dc728f01693c892beae702e5a5fb2d9ab61d3b120a456cf6639c7ad9cac89eb3dde01a02ba817030f03839eb63cfb964271ec982a6af31699a2076b6ea49a61781ec3adce3bcd3eeee99b42ef828cf847d9ce4ea2db8bdd74c773417c1342b5e4d33ba0cc6463368c55ce551dcdd4b9192c24350b741d0cc605f8e7760a46b5e8bb360796651879787e1d7aa665f23bb2367e4ae11cd86586a7c8460360442faad6c26b9dc342cb04956422e1196a036e7035dfef97611c6576d963d189a0cbef37fb85de7198e3f7cb6131a042f2c845d9998074a3a431668e425861bcaddcc51a423ff62d027545b341f536ae108a3abf9017bf45a5dde6fabbbf755e05c2125c251935eca3f81048ca98069f67b4442dbb9cc51e717240115fb245773c4d75e88c761e7079801736035f84fa8df6f907b84971f88d0c9d174f230461a66a9fc02303d5bbfc65642ef0883b935399691f1120918527cca128945951944a42a9f265c53238b98d3ee1e9cab23e1edb3c8d92cdd2443397ef59d10598ef06bf1723a7515c187f8c1ae3678a8424624e3c8b9fc9f314b4e4fb32eea9cfac1dda0808cbd70e12c29b02f3494897982654672324be3fac2a52c1130f3043515b5c7732e9d1ee1008f1ef4a0a8b9981fdcc36fbeca45ef34cabced1008ce3053d1cbd76c2e5d1b0c1bac184e08bc99b91cb33d23603b5bb34b3d43b5c824fbf64b24062d36ff2fe04d71748131562a7e3d1e93c51dcc33162c4c89c031d8033a65a410fb06a726500efb04f29b0ec6e95b61ab2fb8ac2e37fbc6892b8042b46f62828a6d46a3900a3f1fd3c355ccd3ffb09e5b3c1e6717707f63c7248f21015d2a061910f28b45918e57a1157eeb8046df5a47ca3856989081fc7068f86773b2a5cb93e2ebd76ea47429b73f888419486483003bbd1bb502e192e214ed52f1e85db6cff396e05c152a3cd9675de2c5ba465b3d7576db299ef36637634c55bda4d0b27a3c4f022a3e3b7a890682dfe180a75899b68f4460c1ccff7e8318095df36e5876d03830a766cc42aec4ba6f2d640ef533cc1a402aa15476189cbe3eb0eca3ba1f63dd4c6f7873849395d3d9cbac3d2227542c207541a694ef0abe49f0372d209e4c22f4d5b145a902acea36073fbec34da90250d1696677ef3a88b6d9a4a5ad05df2f1b7c559c46faa87eeb33bd030e8b9be94afdedd8aecb8fbabbbd2020d650bcdf7d21570183f070a4e9278c917ce1c2dd54625cc58f6dac49c66f551e3de31f3c2f6e2091f56ca6514810432236372879fb603f7e45aea96fde9e7fe25095407918db8b593481fa9896882b7eefa7e20caf32c8df3cb61f0c772769e4d57199d8aa66c272e184c40e70379b68998b9709734563ad3107995011d04d7229830edc40dc69837b25e73b6a4f82d73712737f697be5a67f719951b520fb049f81f13cfb6c446183babd1637b1262325fc5b47d81f049484b5969a18ef8163a050c4731d30f450ab4597b45669dcfa8cef58921239a07e32b90b7b2a89d8fb962f7c061d5ced057ec5f7e7126fe657e2c0761a7adeb792d00cb2dd7ae17ee1193bb29b092b4b6f5d300ce5e529ea3eb4ab6e7902934d938b442248b8138d20b267e879f3a47157da7208ab00afbab6c96d9bbb5a6759f72b20ecf915a772d5bc938ddc09f5af4f5219047633ce4f1e4d9cb3a780994aff2059012b99f3b23197f0aa7d4240c1108052350a8cbe06c43cafb9e0613ae8bee34a8d3b7232dd670c7c777e6817b99d6460801d695a34d08265402a8143be0c7590034a2d429d49a73aa953cb8ea6128fe6cf7c276f7756320508cc669a6faa98e6f702d3dc91d89d523b6d72064a7f1d9b48668b9996d9fd66d018e3df0df3cf2e6d911259c825716d27893978f5f31cf7737a988e88de3f5249bc20ceb1632e1b7426a80f13907746adb279e3424c2665e09ca9171ea1186d57e3004ad1e05e57fe56d62c471add00de634ec3d8e696283e584fe7d2506e5b6a394b6d1ae94704fabf74a55557cca88cb737bff3a0e1d3afd83cd2ba7151488cc8d9f7de4e1ae1d3b02353ef256efa7c30c8e79adeef910dea4326952f136addfeefaf06508e2c9bfb69e1dc34b74bebe95e91dcee2b99abc54bc555039e24f662eea7960f4c0dd06ebbe93c9575c2de68f61cace28e6028a9c258c18ce199375896845de2d8aee3369381545cc7dbdda333290d513f6cf5673a7f453b64346baea2e5b37b86b6eb5a36d91bb06d0c3320e55d527919b659c7e0a5310f47e4dc91052f2f6564a659289b93931850208f35286520451ddb31abe7ce22398cd29e75c18e87d701bd0ff98c2a8acef1dce0751404ab7d25e61c44b0a326d40a25a2e09cff321bafa19358d228d3688fea518796386299af3efc1d2f6b0d482842b30785ff42c3ada4b11ab9bbb3c3bd13e385f415572b7e17c7c8da1d92a3d0dd637ec4167b261301d9b60dd0474786fbd4d1935106d0d286d7acab24a8a5a243074640a889080f1882b17cbe9b01a71c0100688de6e8184084142cfaf77a32297a6ef2410bcd3b8f8bc2ad848a598d9c06899957a4ee350da97ff49a55810c81bc4eee1be7f09bbc98779a17d641b7ebb2d3c66c7317ec16d454b46bb99e15bd26c4749359c8092cf0871a8deee839f138a81fab41bf4c2422709812e9c52d58fce5cf981fc92c14de058879a6cf9bc830107c0c0da5624a239b9312f47835d1e5c44411f87aab93773e9e88d8984121bedc6982e25f03231c3be76af712bac9a68256479b80a52365942c42fb849ec5f53ceac83b79398e315a31d85cdc3114f6e3d0c5f5a5836c7eade521386fa4bf40b242acfd114e515a299dd020b592f135103eae4a5de5dd465c42008c654e2f0a3ef634597adbbee0cf94273ffc5a23e4daf846cc01c9ec00b7781c206664ae5a43469d1feb5e4979dee932a3adc45b8af6389fb8231ad1091351c0df0cdce86b1ae0bafa039a4781d43cff2b7466ae5e917b5c6bbf25cc75804df1012f60f4162ce11185e83831d6c2efdc0ad0716149cf2c7d8e2a5e2f6ab601fc6fb190fb0c201edce94f26217c1884cdb51b040766e2f63f87846c4da45a64aed3618478f2cb21968b1230f55b67e3df88207d1db2c40b98f847055c4bb7cf7a8357334a0ecee7768cb96be6df4d624e8c88673d3bc6cb729f3d364987cd74bc974ea9118a0af88c432b8bafb12f410c05429547afeda174b8acb2e1aa2c527138a0aff478cb58a137e98cd1ea75b75f48a4a80126803e3908071f8cc9aa7b47eafd003db9d8f04f724a2991a4eac51acff143d82d2e59c1b332ed37ff77af307a3a99993d1e474f708ab9e27db437fa76715fd42eabb379b3091c2d08fe92d800c28077aeb72f6234840fb9d0a28b356b3358eb53186deceec177c40474476a35886c87fae326d15bc32807af6f50577d7c335d49ea3bf6dd850bce9916205b1f7cf6b6eb2d4f794773ab30a258c61e4cf91eab4d676e7b6e944f318c65e5c2b7b211b5b5d26f4d48347b27cce3cab94fa0b0203fce67074fb8de39fc57c7191e1840974db7d2c928018759d51ae07934cd109ee5ce2cf0f6eebf02de5fa8299446745424097083d3bbcfdf1d91874983f37a4676cf12f431ed1cf26606b8b2d3e77aad4e115869b2418550d70b72c", 0x98, 0x9, 0x5) uname$auto(0x0) ioctl$auto(0x3, 0x5413, 0x38) 1.095974615s ago: executing program 8 (id=8671): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x29, 0x940, 0x1ffde, 0x3, 0xa, 0x2, 0x9, 0x5, 0x2, 0x4, 0xb0, 0x1ff, 0xfffffffffffffffe, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, [0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x1fe, 0x81) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 1.059177122s ago: executing program 6 (id=8672): select$auto(0x5, &(0x7f0000000080)={[0x400020000008, 0xfffffffffffffffc, 0x7, 0x6, 0xc, 0x3, 0x401, 0x1ffe000, 0xcad, 0x2, 0x9, 0xb, 0xa657, 0x202, 0x1, 0x1]}, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_bm_register_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000300), 0x841, 0x0) write$auto_bm_register_operations_binfmt_misc(r2, &(0x7f0000000340)="4d96b15940349a69c8f63c", 0xb) socket(0x2, 0x1, 0x106) setsockopt$auto(0x200000004, 0x6, 0x19, 0xffffffffffffffff, 0x2) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000280), r0) openat$auto_ftrace_event_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/filter\x00', 0x8800, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0xffff}, 0x1) sendmsg$auto_NL80211_CMD_UPDATE_FT_IES(0xffffffffffffffff, &(0x7f0000001140)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1409000033982804f5c8233c325df342af3736d8f3de7a40a20e45daf9556897d19027c266c9966f21edc1b6fa00e8365201b2d6657bfffdd382d55cf678d92b2a829ecde414806a7f92725101f5f6ce9278bd95aabeda2add4e48a793fbf3ebfb3ad5dc331aeab6ea3c563e34db3f38f179c1072c7dcc35cf1f1601808a8dcc1bcea40a7925d0449a0c6e36be1ba6ea6c1939617ba95a0644c0dcf1735865e8f47ff464f687a020595ab9eef373fab1c10f50dc32ed73eff84608", @ANYRES16=r4, @ANYBLOB="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"], 0x914}, 0x1, 0x0, 0x0, 0x4000014}, 0x810) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fddbdf250201000008000300", @ANYRES32=r7, @ANYBLOB="b1002500"], 0xd0}, 0x1, 0x0, 0x0, 0x4000023}, 0x80) setxattrat$auto(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0, 0x10) openat$auto_page_owner_stack_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x200000, 0x7fe000000000, 0x2, 0x9b72, 0x5, 0x4000000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x2, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000001040)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000001000)={&(0x7f0000001180)={0x288, r4, 0x300, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_CQM={0xb5, 0x5e, 0x0, 0x1, [@generic="bb3a69dc65d344aea75eae0834f84c5639e069e1de47053d2e14eec471b7ca0b0d1491ab07625102776fdbcf829e6a638399cd1f5a331f76555a52f678c6476d601e3990c944f1715aeffd6d6290d0e994b5017225983c3a2ef55ead990a54281cfa814128b63c468d8326759457f069b21c8c608ca060781c240dd22ffcda0da2ad7670c0ead32343b56196f237a55afbd0790c6a08be53fa7a2a17a901c108c54ef748ec14d7d0641f10440c4ad77407"]}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x3}, @NL80211_ATTR_IE_RIC={0x10c, 0xb2, "2a7231bc18c99b33862c2a5b75636188c0d04c4a43a2b1fc77472c7d3e0463bd0980c5ba84b9e5026649136b9d062638bd703f990ec4176120271a2fd7c319ec534025104dc36d163946d498d2b0dc2b8c99ad7b878a388c09ba96c5489ac6bec4339407499f31d8535db41ce184b43d6e3da2215258c275ffa87f6955e09d31e43f6ba5e2b64cd401c7c09735740182cce8502a856d6e8ff4f913ca3f62044bbd1fcfbe99b49d6f3009fb20ad073a24043430cfc48df55b189d65901e50755e03534b18436fb2cea8dad71631f54e26365f02d55102b62ea27afb0d974d3bd5cc8013665c428576157f36f4c406ee724d6a6e6960bd2d571e8f391a52da576d8ad56e755ee9f547"}, @NL80211_ATTR_SAE_PWE={0x0, 0x12a, 0xea}, @NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "a610c74318fa29bbeb5e6bc2e36363d6cfd73b99ef616871"}, @NL80211_ATTR_STA_FLAGS2={0xe, 0x43, "36a266713a0b8856bb28"}, @NL80211_ATTR_CENTER_FREQ1_OFFSET={0x8, 0x123, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2c00}, @NL80211_ATTR_FILS_ERP_REALM={0x101, 0xfa, "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"}]}, 0x324}, 0x1, 0x0, 0x0, 0x44800}, 0x1) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x4) fallocate$auto(0x3, 0x8, 0x200000000000b, 0x9) getpid() 889.480969ms ago: executing program 5 (id=8673): mmap$auto(0x0, 0x2000b, 0xdf, 0x17, 0x401, 0x8004) mmap$auto(0x9, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, 0x0, 0x0, 0x0, 0x400, 0x15e2b}, 0x5}, 0xfffffffe, 0x100) socket(0xa, 0x801, 0x84) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55) capget$auto(0x0, 0xfffffffffffffffe) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) r1 = socket(0xa, 0x2, 0x0) setsockopt$auto(r1, 0x29, 0x17, 0x0, 0x3) r2 = open(&(0x7f0000000000)='./file0\x00', 0x600140, 0x50d) getdents$auto(r2, 0x0, 0x400018) mmap$auto(0x0, 0x2000b, 0xdf, 0x17, 0x401, 0x8004) (async) mmap$auto(0x9, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) socket(0x11, 0x3, 0x9) (async) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x1aa, 0x0, 0x0, 0x0, 0x400, 0x15e2b}, 0x5}, 0xfffffffe, 0x100) (async) socket(0xa, 0x801, 0x84) (async) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x7, @local}, 0x55) (async) capget$auto(0x0, 0xfffffffffffffffe) (async) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) (async) socket(0xa, 0x2, 0x0) (async) setsockopt$auto(r1, 0x29, 0x17, 0x0, 0x3) (async) open(&(0x7f0000000000)='./file0\x00', 0x600140, 0x50d) (async) getdents$auto(r2, 0x0, 0x400018) (async) 877.920205ms ago: executing program 9 (id=8674): ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x80045438, 0xfdfdffffffffffff) 840.568776ms ago: executing program 8 (id=8675): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x6041, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x60442, 0x0) write$auto(0x3, 0x0, 0xfffffdef) 745.121579ms ago: executing program 9 (id=8676): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = socketpair$auto(0x1, 0x20002, 0x8000000000000000, 0x0) splice$auto(0x4, 0x0, r0, 0x0, 0x1000, 0xf) syslog$auto(0x3, &(0x7f0000000000)='\x00', 0xa) (async) fcntl$auto(r0, 0x407, 0xffffffff80000000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async, rerun: 32) r1 = openat$auto_l2cap_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000100), 0x2182, 0x0) (rerun: 32) ioctl$auto(r1, 0x1ff, 0x1) modify_ldt$auto(0x6b26, &(0x7f0000000100), 0x1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket(0x2, 0x801, 0x100) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NBD_CMD_CONNECT(r2, 0x0, 0x20040000) socket(0xa, 0x801, 0x84) (async) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) (async) mlockall$auto(0x9) (async) ioctl$auto(0xc8, 0x6, 0x5d6e859b) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x9) (async) r3 = open(&(0x7f0000000080)='./file0\x00', 0x243c3, 0x84) (async) fallocate$auto(0x8000000000000003, 0x8000003, 0xf, 0x2cbd5d) (async) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x6) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r2) (rerun: 64) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r4, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000240)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="020824bd7200fbdbdfa41c00000014d03980080003000600000008000100", @ANYRES32=0x0, @ANYBLOB="40000180140002006d6163766c616e30000000000000000014000200766c616e3100000000000000000000001400020073797a6b616c6c657230000000000000"], 0x68}, 0x1, 0x0, 0x0, 0x4008010}, 0x4001c) (async, rerun: 32) readv$auto(0x3, 0x0, 0x1) (async, rerun: 32) sendmsg$auto_GTP_CMD_NEWPDP(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x4040886) (async) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x7, 0x40000402, 0x7ffffffb, 0x8, 0xffffffff80000000, 0x9, 0x7, 0x200000100103}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'veth1_to_bridge\x00'}) (rerun: 32) 585.489327ms ago: executing program 5 (id=8677): ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = socket(0x2, 0x801, 0x106) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x1fd, 0x7, 0x5, 0x7184, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x8, 0x4, 0x200000000001, 0xb4, 0xfffffffffffffff8, 0x8, 0x6, 0x4000080, 0x0, 0x100, 0xe, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x3, 0x0, 0x2, 0x3, 0x2000, 0x0, 0xc, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x1000000000000000, 0x6, 0x0, 0xfffffffffffbfffd, 0x2000000000000004, 0x10000000000001, 0x10000000000, 0xffffffffffffffff, 0x4, 0xfffffffffffffe00, 0x0, 0x8, 0x1005, 0x400000000005b8, 0xffff, 0x0, 0x100, 0x0, 0x1, 0x2, 0x88e, 0x40, 0xfffffffffffffffc, 0x8, 0xa3c, 0x0, 0x3, 0x3ff, 0x2, 0x8, 0x7, 0xc567]}, 0x1fe, 0x4000d) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r2, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000881}, 0x8000) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f00000000c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000080)={&(0x7f0000000380)={0x1b8, r2, 0x205, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_CABLE_TEST_TDR_CFG={0xcc, 0x2, 0x0, 0x1, [@generic="babb6c64430a0960b457f4620dd8d532f4a9f9d4c408864f930e037b5e86b31bf7fec11a0120aa0e23bb94f55f849f435d23a5b63e036c16273da85204dc12b143e3ca26312051583fb424f879836ec5f8070f8c64ac5e3c3dffb602b548d8449ca6d5b32f5a38e576c1b8bf4f11d72516be44e5472743ad682b95dce4c85f381a7b55e77d7cece9c5936df2eeaedce34a95a4559a81931eeb423e3e3d51c3b55ce0bf546c560df31bb250792b809ad12e5a52b992d693b63e5d0b20ac92b41f", @typed={0x8, 0x1b, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}]}, @ETHTOOL_A_CABLE_TEST_TDR_CFG={0xd6, 0x2, 0x0, 0x1, [@generic="bc7a7a1a8d378271b61c871adf829967d0282fb7eea21fd526b226094f0dc8d5ab2fce21f81c01950ac36b8cd1dd310fae6956b2b0fcef36f20d7f3857522c4000d3c618c75a32b23daa1a8d96e05672d2dd1dc34caaddc5990108acda13cedafa09b4e63ce315d96218f848bc7fb2045aebfcd7ec21f4f2cc7056aa9b20a88f6fe3c9dadad2a30480175f127bd006639b044b0c0296c48055f04f436d375b0bcaeff8c76c071c8039ad5a09a016db958b1fe909c8956168b293fb48361232d4315678119fc6faf3f46a0289b0121f2bb0b6"]}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x8000}, 0x488c1) poll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x6, 0x5}, 0x81, 0x4) 450.607316ms ago: executing program 8 (id=8678): openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, 0x0, 0x40000) ioctl$auto(0x3, 0x80000541b, 0x38) 384.930735ms ago: executing program 5 (id=8679): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfff, 0x25, 0xffffff04, &(0x7f0000000000)) r0 = socket(0x2, 0x1, 0x0) clock_gettime$auto(0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x40}, 0x6a) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram0/queue/stable_writes\x00', 0xc0202, 0x0) write$auto(r1, &(0x7f0000000000)='P^\x00', 0x8) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x5, 0x20000000) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) 61.596168ms ago: executing program 9 (id=8680): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x7, 0x4a}) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={0x0, 0x20000000046}, 0x5, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="44000000267cf0d52b8a3e086dd759bf2bbb1a6c581a414a25bfa95a1857c280748e71e22a24e915a8d61f", @ANYRES16=r1, @ANYBLOB="1b0026bd7000fddbdf2503000000040008001400038010000b800c003100ff0f00000000000012000100898771f1c19f1779048590828847000004000280"], 0x44}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 0s ago: executing program 6 (id=8681): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/slabinfo\x00', 0x62140, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x1, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) socket(0x22, 0x3, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x200800, 0x0) memfd_secret$auto(0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/smaps\x00', 0x42000, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ptywa\x00', 0x400, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = gettid() pidfd_open$auto(r4, 0x0) r5 = gettid() kill$auto(r5, 0x11) r6 = getsid$auto(0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'veth1_to_team\x00', 0x0}) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f00000006c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x54, 0x0, 0x400, 0x70bd2d, 0x25dfdbfd, {}, [@OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x4}, @OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x7}, @OVS_DP_ATTR_NAME={0xf, 0x1, '/dev/ptywa\x00'}, @OVS_DP_ATTR_IFINDEX={0x8}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x40}, @OVS_DP_ATTR_IFINDEX={0x8}, @OVS_DP_ATTR_IFINDEX={0x8, 0x9, r7}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000801}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x240, r3, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_NAN_FUNC={0x212, 0xf0, 0x0, 0x1, [@nested={0x3a, 0x4e, 0x0, 0x1, [@generic="4d6d8b90b9f3838900b85647c4020d18b3566df387cab44200cdb64d753b8cd9076d0994c932c822d2e53cb9a7b450710013e0567d2e"]}, @generic="c59dd2b69406bf495b2f6dd6e98c312e6065befdcf5b5c18bd99ff1ced9e83a0c58365773a574bdc8136d6f3fdcb6bb2d1bdce9efadf0de3aed66e969c1e1cbda373b43f757f38de339e664e60", @nested={0xf1, 0x7d, 0x0, 0x1, [@typed={0x8, 0x115, 0x0, 0x0, @ipv4=@multicast1}, @nested={0x4, 0x32}, @generic="090c13b5c6e714a435898580f0ef0155be965e5747f71b18f6d41cb5a33ab1fd6d8ce90fa01bed42cbde59bb5a95bcd4faee9a6427ea195591b62920a2104a4c18ac5a1a39cce3f94f9aa2fb8e033ed1530d92e56f830351f183c01d407eb55d9be5936e87", @generic="27c3f07d3ddcd03ad66c4835708330620dc47341892e262f528af2f5de5f333b4ddda9b6500770b7d7d7819f3713ec62000c436aacc2ec623001e2de58bda11d5b71c0e912bbeda1beabc65d9adc8238ead56add340dc288cbd994ef25c62903ff490a4a7c20e85c", @nested={0x4, 0x11d}, @typed={0x8, 0x7a, 0x0, 0x0, @pid=r4}, @typed={0x8, 0xd4, 0x0, 0x0, @pid=r5}]}, @generic, @typed={0x8, 0x116, 0x0, 0x0, @pid=r6}, @generic="6245147d2780feefdd44cc64a1687a155e1f90394f02a0c75916ee2a98fc6d2f740a869a046771685054dc2c26487b2593f17e354f155954757a6a4143cdbd837133c978ea1a390a7eb93d98da53c01c0963a639ed5f65cd9c72c4fa78c41756e216298985732d738ac4bbaa536a81395de4ed5e0398e84b896c75f2d5e79f2224", @typed={0x6, 0x74, 0x0, 0x0, @str='+\x00'}]}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x8}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x7}]}, 0x240}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TCFLSH2(r2, 0x8910, 0x0) kernel console output (not intermixed with test programs): unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2089.415841][ T6912] lowmem_reserve[]: 0 2465 2466 0 0 [ 2089.456911][ T6912] Node 0 DMA32 free:1212620kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:87316kB inactive_anon:64kB active_file:73024kB inactive_file:179084kB unevictable:1668kB writepending:2588kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:6820kB local_pcp:2216kB free_cma:0kB [ 2089.496844][ T6912] lowmem_reserve[]: 0 0 0 0 0 [ 2089.502172][ T6912] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2089.586794][ T6912] lowmem_reserve[]: 0 0 0 0 0 [ 2089.592144][ T6912] Node 1 Normal free:3912984kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2089.656826][ T6912] lowmem_reserve[]: 0 0 0 0 0 [ 2089.664452][ T6912] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2089.686690][ T6912] Node 0 DMA32: 6405*4kB (UME) 5111*8kB (UME) 2946*16kB (UME) 2462*32kB (UME) 1886*64kB (UME) 1076*128kB (UME) 496*256kB (UME) 221*512kB (UME) 136*1024kB (UM) 16*2048kB (UME) 85*4096kB (UM) = 1211180kB [ 2089.726884][ T6912] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2089.740816][ T6912] Node 1 Normal: 250*4kB (UME) 58*8kB (UME) 40*16kB (UME) 213*32kB (UME) 93*64kB (UME) 30*128kB (UME) 18*256kB (UME) 9*512kB (UME) 6*1024kB (UM) 6*2048kB (UME) 944*4096kB (M) = 3912984kB [ 2089.767125][ T6912] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2089.779508][ T6912] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2089.794056][ T6912] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2089.805416][ T6912] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2089.818777][ T6912] 66164 total pagecache pages [ 2089.825192][ T6912] 41 pages in swap cache [ 2089.839889][ T6912] Free swap = 124368kB [ 2089.850316][ T6912] Total swap = 124996kB [ 2089.855239][ T6912] 2097051 pages RAM [ 2089.860222][ T6912] 0 pages HighMem/MovableOnly [ 2089.865714][ T6912] 427367 pages reserved [ 2089.871597][ T6912] 0 pages cma reserved [ 2092.521411][ T6947] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8004'. [ 2092.559504][ T6947] netlink: 'syz.9.8004': attribute type 1 has an invalid length. [ 2092.607436][ T6947] netlink: 53 bytes leftover after parsing attributes in process `syz.9.8004'. [ 2093.315639][ T6959] program syz.9.8007 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2094.048599][ T6971] Process accounting resumed [ 2095.129356][ T6982] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8019'. [ 2095.177707][ T6982] netlink: 'syz.5.8019': attribute type 1 has an invalid length. [ 2095.216978][ T6982] netlink: 53 bytes leftover after parsing attributes in process `syz.5.8019'. [ 2095.397937][ T6989] Process accounting resumed [ 2098.956465][ T7029] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8022'. [ 2099.107649][ T7029] netlink: 'syz.5.8022': attribute type 1 has an invalid length. [ 2099.126930][ T7029] netlink: 53 bytes leftover after parsing attributes in process `syz.5.8022'. [ 2099.764608][ T7055] warn_alloc: 1 callbacks suppressed [ 2099.764633][ T7055] syz.9.8026: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2099.941554][ T7055] CPU: 0 UID: 0 PID: 7055 Comm: syz.9.8026 Not tainted 6.13.0-rc4-syzkaller #0 [ 2099.951503][ T7055] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2099.962630][ T7055] Call Trace: [ 2099.966295][ T7055] [ 2099.969582][ T7055] dump_stack_lvl+0x16c/0x1f0 [ 2099.974821][ T7055] warn_alloc+0x24d/0x3a0 [ 2099.979688][ T7055] ? __pfx_warn_alloc+0x10/0x10 [ 2099.985112][ T7055] ? __pfx_mark_lock+0x10/0x10 [ 2099.990454][ T7055] ? lock_acquire.part.0+0x11b/0x380 [ 2099.996360][ T7055] __vmalloc_node_range_noprof+0x10df/0x1530 [ 2100.003029][ T7055] ? rcu_is_watching+0x12/0xc0 [ 2100.008359][ T7055] ? trace_contention_end+0xee/0x140 [ 2100.014260][ T7055] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2100.020172][ T7055] ? dvb_demux_do_ioctl+0x496/0x1340 [ 2100.026086][ T7055] ? __pfx___mutex_lock+0x10/0x10 [ 2100.031706][ T7055] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2100.038763][ T7055] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2100.045335][ T7055] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2100.051245][ T7055] vmalloc_noprof+0x6b/0x90 [ 2100.056281][ T7055] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2100.062289][ T7055] dvb_demux_do_ioctl+0x54d/0x1340 [ 2100.068012][ T7055] dvb_usercopy+0x165/0x320 [ 2100.073051][ T7055] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 2100.079248][ T7055] ? __pfx_dvb_usercopy+0x10/0x10 [ 2100.084860][ T7055] ? __pfx_lock_release+0x10/0x10 [ 2100.090484][ T7055] ? __fget_files+0x206/0x3a0 [ 2100.095719][ T7055] dvb_demux_ioctl+0x29/0x40 [ 2100.100859][ T7055] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 2100.106769][ T7055] __x64_sys_ioctl+0x190/0x200 [ 2100.112088][ T7055] do_syscall_64+0xcd/0x250 [ 2100.117137][ T7055] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2100.123713][ T7055] RIP: 0033:0x7f26d2385d29 [ 2100.128642][ T7055] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2100.150290][ T7055] RSP: 002b:00007f26d01f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2100.159620][ T7055] RAX: ffffffffffffffda RBX: 00007f26d2576080 RCX: 00007f26d2385d29 [ 2100.168456][ T7055] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 2100.177289][ T7055] RBP: 00007f26d2401aa8 R08: 0000000000000000 R09: 0000000000000000 [ 2100.186118][ T7055] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2100.194958][ T7055] R13: 0000000000000000 R14: 00007f26d2576080 R15: 00007ffcc2cce6f8 [ 2100.199029][ T7053] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8036'. [ 2100.203780][ T7055] [ 2100.286279][ T7055] Mem-Info: [ 2100.296375][ T7055] active_anon:26104 inactive_anon:16 isolated_anon:0 [ 2100.296375][ T7055] active_file:18256 inactive_file:45000 isolated_file:0 [ 2100.296375][ T7055] unevictable:801 dirty:573 writeback:0 [ 2100.296375][ T7055] slab_reclaimable:12793 slab_unreclaimable:117306 [ 2100.296375][ T7055] mapped:28949 shmem:6718 pagetables:1115 [ 2100.296375][ T7055] sec_pagetables:0 bounce:0 [ 2100.296375][ T7055] kernel_misc_reclaimable:0 [ 2100.296375][ T7055] free:1281945 free_pcp:1821 free_cma:0 [ 2100.301768][ T7053] netlink: 'syz.5.8036': attribute type 1 has an invalid length. [ 2100.355491][ T7053] netlink: 53 bytes leftover after parsing attributes in process `syz.5.8036'. [ 2100.488263][ T7055] Node 0 active_anon:106216kB inactive_anon:64kB active_file:73024kB inactive_file:179928kB unevictable:1668kB isolated(anon):0kB isolated(file):0kB mapped:115896kB dirty:2392kB writeback:0kB shmem:26836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12560kB pagetables:4460kB sec_pagetables:0kB all_unreclaimable? no [ 2100.606263][ T7055] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2100.780476][ T7055] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2100.917715][ T7055] lowmem_reserve[]: 0 2465 2466 0 0 [ 2100.923630][ T7055] Node 0 DMA32 free:1190600kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:107408kB inactive_anon:64kB active_file:73024kB inactive_file:179100kB unevictable:1668kB writepending:2648kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:8496kB local_pcp:7700kB free_cma:0kB [ 2100.993428][ T7055] lowmem_reserve[]: 0 0 0 0 0 [ 2101.058348][ T7055] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2101.151132][ T7072] Process accounting resumed [ 2101.227166][ T7055] lowmem_reserve[]: 0 0 0 0 0 [ 2101.247015][ T7055] Node 1 Normal free:3912932kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2101.325239][ T7055] lowmem_reserve[]: 0 0 0 0 0 [ 2101.362716][ T7055] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2101.411954][ T7055] Node 0 DMA32: 1179*4kB (UME) 5279*8kB (UM) 2647*16kB (UME) 2599*32kB (UME) 1930*64kB (UME) 1080*128kB (UME) 496*256kB (UME) 220*512kB (UME) 137*1024kB (UM) 11*2048kB (UME) 85*4096kB (UM) = 1184820kB [ 2101.468000][ T7055] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2101.515291][ T7055] Node 1 Normal: 252*4kB (UME) 59*8kB (UME) 41*16kB (UME) 214*32kB (UME) 94*64kB (UME) 29*128kB (UE) 18*256kB (UME) 9*512kB (UME) 6*1024kB (UM) 6*2048kB (UME) 944*4096kB (M) = 3912984kB [ 2101.572995][ T7055] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2101.626990][ T7055] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2101.696740][ T7055] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2101.754828][ T7055] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2101.836893][ T7055] 72997 total pagecache pages [ 2101.842126][ T7055] 68 pages in swap cache [ 2101.891708][ T7055] Free swap = 124416kB [ 2101.896366][ T7055] Total swap = 124996kB [ 2101.936224][ T7055] 2097051 pages RAM [ 2101.946361][ T7055] 0 pages HighMem/MovableOnly [ 2101.970148][ T7055] 427367 pages reserved [ 2101.985587][ T7055] 0 pages cma reserved [ 2102.286996][ T7083] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8033'. [ 2102.388262][ T7083] netlink: 'syz.5.8033': attribute type 1 has an invalid length. [ 2102.409029][ T7083] netlink: 53 bytes leftover after parsing attributes in process `syz.5.8033'. [ 2102.996816][ T7100] program syz.6.8039 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 2103.677888][ T7106] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8041'. [ 2103.740270][ T7106] netlink: 'syz.8.8041': attribute type 1 has an invalid length. [ 2103.758750][ T7106] netlink: 53 bytes leftover after parsing attributes in process `syz.8.8041'. [ 2104.704734][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2104.711882][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2105.155354][T28690] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2105.186912][T28690] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2105.198412][T28690] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2105.227607][T28690] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2105.246900][T28690] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2105.257125][T28690] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2107.052130][ T7125] chnl_net:caif_netlink_parms(): no params data found [ 2107.418664][ T7125] bridge0: port 1(bridge_slave_0) entered blocking state [ 2107.427078][ T7125] bridge0: port 1(bridge_slave_0) entered disabled state [ 2107.435375][ T7125] bridge_slave_0: entered allmulticast mode [ 2107.445389][T28690] Bluetooth: hci2: command tx timeout [ 2107.483329][ T7125] bridge_slave_0: entered promiscuous mode [ 2107.510237][ T7125] bridge0: port 2(bridge_slave_1) entered blocking state [ 2107.526398][ T7125] bridge0: port 2(bridge_slave_1) entered disabled state [ 2107.575629][ T7125] bridge_slave_1: entered allmulticast mode [ 2107.604976][ T7125] bridge_slave_1: entered promiscuous mode [ 2107.781486][ T7125] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2107.881286][ T7125] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2108.178995][ T7125] team0: Port device team_slave_0 added [ 2108.301006][ T7125] team0: Port device team_slave_1 added [ 2108.417037][ T7125] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2108.436732][ T7125] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2108.496718][ T7125] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2108.627290][ T7125] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2108.635078][ T7125] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2108.642004][ T7163] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8051'. [ 2108.665915][ T7125] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2108.732059][ T7163] netlink: 'syz.6.8051': attribute type 1 has an invalid length. [ 2108.741015][ T7163] netlink: 53 bytes leftover after parsing attributes in process `syz.6.8051'. [ 2109.072716][ T7125] hsr_slave_0: entered promiscuous mode [ 2109.087392][ T7125] hsr_slave_1: entered promiscuous mode [ 2109.094856][ T7125] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2109.114907][ T7125] Cannot create hsr debugfs directory [ 2109.497198][T28690] Bluetooth: hci2: command tx timeout [ 2109.580249][ T7125] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2109.781519][ T7125] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2110.033460][ T7125] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2110.191931][ T7176] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8054'. [ 2110.231605][ T7125] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2110.248032][ T7176] netlink: 'syz.5.8054': attribute type 1 has an invalid length. [ 2110.276699][ T7176] netlink: 53 bytes leftover after parsing attributes in process `syz.5.8054'. [ 2110.793445][ T7187] warn_alloc: 1 callbacks suppressed [ 2110.793470][ T7187] syz.5.8056: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2110.854551][ T7187] CPU: 0 UID: 0 PID: 7187 Comm: syz.5.8056 Not tainted 6.13.0-rc4-syzkaller #0 [ 2110.864509][ T7187] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2110.875629][ T7187] Call Trace: [ 2110.879283][ T7187] [ 2110.882550][ T7187] dump_stack_lvl+0x16c/0x1f0 [ 2110.887769][ T7187] warn_alloc+0x24d/0x3a0 [ 2110.892608][ T7187] ? __pfx_warn_alloc+0x10/0x10 [ 2110.898020][ T7187] ? __pfx_mark_lock+0x10/0x10 [ 2110.903350][ T7187] ? lock_acquire.part.0+0x11b/0x380 [ 2110.909252][ T7187] __vmalloc_node_range_noprof+0x10df/0x1530 [ 2110.915918][ T7187] ? rcu_is_watching+0x12/0xc0 [ 2110.921232][ T7187] ? trace_contention_end+0xee/0x140 [ 2110.927120][ T7187] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2110.933021][ T7187] ? dvb_demux_do_ioctl+0x496/0x1340 [ 2110.938934][ T7187] ? __pfx___mutex_lock+0x10/0x10 [ 2110.944545][ T7187] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2110.951600][ T7187] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2110.958166][ T7187] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2110.964083][ T7187] vmalloc_noprof+0x6b/0x90 [ 2110.969122][ T7187] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2110.975025][ T7187] dvb_demux_do_ioctl+0x54d/0x1340 [ 2110.980759][ T7187] dvb_usercopy+0x165/0x320 [ 2110.985786][ T7187] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 2110.991971][ T7187] ? __pfx_dvb_usercopy+0x10/0x10 [ 2110.997579][ T7187] ? __pfx_lock_release+0x10/0x10 [ 2111.003189][ T7187] ? __fget_files+0x206/0x3a0 [ 2111.008418][ T7187] dvb_demux_ioctl+0x29/0x40 [ 2111.013543][ T7187] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 2111.019443][ T7187] __x64_sys_ioctl+0x190/0x200 [ 2111.024766][ T7187] do_syscall_64+0xcd/0x250 [ 2111.029806][ T7187] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2111.036373][ T7187] RIP: 0033:0x7fa838d85d29 [ 2111.041290][ T7187] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2111.062944][ T7187] RSP: 002b:00007fa839b48038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2111.072280][ T7187] RAX: ffffffffffffffda RBX: 00007fa838f76160 RCX: 00007fa838d85d29 [ 2111.081116][ T7187] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 2111.089960][ T7187] RBP: 00007fa838e01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 2111.098794][ T7187] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2111.107626][ T7187] R13: 0000000000000000 R14: 00007fa838f76160 R15: 00007ffdd2d7f978 [ 2111.116479][ T7187] [ 2111.145801][ T7187] Mem-Info: [ 2111.152198][ T7187] active_anon:28120 inactive_anon:16 isolated_anon:25 [ 2111.152198][ T7187] active_file:18256 inactive_file:45005 isolated_file:0 [ 2111.152198][ T7187] unevictable:801 dirty:951 writeback:0 [ 2111.152198][ T7187] slab_reclaimable:12811 slab_unreclaimable:119061 [ 2111.152198][ T7187] mapped:26686 shmem:9531 pagetables:1052 [ 2111.152198][ T7187] sec_pagetables:0 bounce:0 [ 2111.152198][ T7187] kernel_misc_reclaimable:0 [ 2111.152198][ T7187] free:1269227 free_pcp:8438 free_cma:0 [ 2111.285255][ T7187] Node 0 active_anon:110180kB inactive_anon:64kB active_file:73024kB inactive_file:179948kB unevictable:1668kB isolated(anon):100kB isolated(file):0kB mapped:106744kB dirty:3800kB writeback:0kB shmem:34188kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12596kB pagetables:4208kB sec_pagetables:0kB all_unreclaimable? no [ 2111.328448][ T7125] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 2111.366002][ T7187] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2111.400145][ T7187] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2111.432551][ T7187] lowmem_reserve[]: 0 2465 2466 0 0 [ 2111.439675][ T7187] Node 0 DMA32 free:1155972kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:106040kB inactive_anon:64kB active_file:73024kB inactive_file:179120kB unevictable:1668kB writepending:3796kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:34472kB local_pcp:21736kB free_cma:0kB [ 2111.494379][ T7125] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 2111.520545][ T7125] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 2111.538589][ T7187] lowmem_reserve[]: 0 0 0 0 0 [ 2111.549647][ T7187] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2111.558477][ T7125] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 2111.581895][T28690] Bluetooth: hci2: command tx timeout [ 2111.594138][ T7187] lowmem_reserve[]: 0 0 0 0 0 [ 2111.600086][ T7187] Node 1 Normal free:3912988kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2111.633663][ T7187] lowmem_reserve[]: 0 0 0 0 0 [ 2111.639934][ T7187] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2111.654842][ T7187] Node 0 DMA32: 13859*4kB (UME) 2214*8kB (UME) 416*16kB (UM) 1722*32kB (UM) 1922*64kB (UME) 1144*128kB (UME) 522*256kB (UME) 238*512kB (UME) 145*1024kB (UM) 6*2048kB (UE) 82*4096kB (UM) = 1156476kB [ 2111.678430][ T7187] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2111.692327][ T7187] Node 1 Normal: 251*4kB (UME) 58*8kB (UME) 40*16kB (UME) 213*32kB (UME) 93*64kB (UME) 30*128kB (UME) 18*256kB (UME) 9*512kB (UME) 6*1024kB (UM) 6*2048kB (UME) 944*4096kB (M) = 3912988kB [ 2111.714760][ T7187] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2111.725980][ T7187] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2111.738584][ T7187] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2111.786851][ T7187] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2111.815867][ T7187] 69372 total pagecache pages [ 2111.857734][ T7187] 27 pages in swap cache [ 2111.873187][ T7187] Free swap = 124364kB [ 2111.889738][ T7187] Total swap = 124996kB [ 2111.899415][ T7187] 2097051 pages RAM [ 2111.914153][ T7187] 0 pages HighMem/MovableOnly [ 2111.928742][ T7187] 427367 pages reserved [ 2111.936990][ T7187] 0 pages cma reserved [ 2112.198988][ T7125] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2112.546422][ T7125] 8021q: adding VLAN 0 to HW filter on device team0 [ 2112.613465][T11879] bridge0: port 1(bridge_slave_0) entered blocking state [ 2112.621486][T11879] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2112.744474][T28661] bridge0: port 2(bridge_slave_1) entered blocking state [ 2112.752410][T28661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2112.975085][ T7201] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8059'. [ 2113.029751][ T7201] netlink: 'syz.9.8059': attribute type 1 has an invalid length. [ 2113.062574][ T7201] netlink: 53 bytes leftover after parsing attributes in process `syz.9.8059'. [ 2113.300979][ T7125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2113.657348][ T2021] Bluetooth: hci2: command tx timeout [ 2114.042429][ T7125] veth0_vlan: entered promiscuous mode [ 2114.111217][ T7125] veth1_vlan: entered promiscuous mode [ 2114.329142][ T7125] veth0_macvtap: entered promiscuous mode [ 2114.451347][ T7125] veth1_macvtap: entered promiscuous mode [ 2114.633872][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.645850][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.657096][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.669278][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.680752][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.692614][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.704002][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.715745][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.727092][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2114.739393][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.752686][ T7125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2114.784942][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2114.798244][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.813035][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2114.857036][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.876862][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2114.888967][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.900558][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2114.912958][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.925140][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2114.958781][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2114.971676][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2114.985864][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.011161][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.033778][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.056421][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.099667][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.124731][ T7125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2115.147796][ T7125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2115.161260][ T7125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2115.300222][ T7125] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.326750][ T7125] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.338407][ T7125] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.349821][ T7125] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2115.653839][T31179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2115.689902][T31179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2115.739792][T11882] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2115.768254][T11882] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2116.012950][ T7251] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8069'. [ 2116.030704][ T7251] netlink: 'syz.6.8069': attribute type 1 has an invalid length. [ 2116.040614][ T7251] netlink: 53 bytes leftover after parsing attributes in process `syz.6.8069'. [ 2116.298553][ T7260] Process accounting resumed [ 2116.747792][ T7271] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8073'. [ 2116.776489][ T7271] netlink: 'syz.9.8073': attribute type 1 has an invalid length. [ 2116.806887][ T7271] netlink: 53 bytes leftover after parsing attributes in process `syz.9.8073'. [ 2117.646984][ T7285] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8085'. [ 2117.667433][ T7285] netlink: 'syz.6.8085': attribute type 1 has an invalid length. [ 2117.695597][ T7285] netlink: 53 bytes leftover after parsing attributes in process `syz.6.8085'. [ 2118.338811][ T7294] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8078'. [ 2118.403960][ T7294] netlink: 'syz.8.8078': attribute type 1 has an invalid length. [ 2118.414251][ T7294] netlink: 53 bytes leftover after parsing attributes in process `syz.8.8078'. [ 2118.447845][ T7296] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8087'. [ 2118.508246][ T7296] netlink: 'syz.6.8087': attribute type 1 has an invalid length. [ 2118.538354][ T7296] netlink: 53 bytes leftover after parsing attributes in process `syz.6.8087'. [ 2120.008632][ T7325] Process accounting resumed [ 2121.895631][ T7350] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8091'. [ 2121.936942][ T7350] netlink: 'syz.6.8091': attribute type 1 has an invalid length. [ 2121.965014][ T7350] netlink: 53 bytes leftover after parsing attributes in process `syz.6.8091'. [ 2122.051801][ T7353] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8092'. [ 2122.112807][ T7353] netlink: 'syz.5.8092': attribute type 1 has an invalid length. [ 2122.142210][ T7353] netlink: 53 bytes leftover after parsing attributes in process `syz.5.8092'. [ 2123.515352][ T7378] warn_alloc: 5 callbacks suppressed [ 2123.515374][ T7378] syz.6.8096: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2123.586945][ T7378] CPU: 1 UID: 0 PID: 7378 Comm: syz.6.8096 Not tainted 6.13.0-rc4-syzkaller #0 [ 2123.596894][ T7378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2123.608012][ T7378] Call Trace: [ 2123.611649][ T7378] [ 2123.614932][ T7378] dump_stack_lvl+0x16c/0x1f0 [ 2123.620156][ T7378] warn_alloc+0x24d/0x3a0 [ 2123.624973][ T7378] ? __pfx_warn_alloc+0x10/0x10 [ 2123.630349][ T7378] ? __pfx_mark_lock+0x10/0x10 [ 2123.635652][ T7378] ? lock_acquire.part.0+0x11b/0x380 [ 2123.641524][ T7378] __vmalloc_node_range_noprof+0x10df/0x1530 [ 2123.648160][ T7378] ? rcu_is_watching+0x12/0xc0 [ 2123.653443][ T7378] ? trace_contention_end+0xee/0x140 [ 2123.659294][ T7378] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2123.665159][ T7378] ? dvb_demux_do_ioctl+0x496/0x1340 [ 2123.671023][ T7378] ? __pfx___mutex_lock+0x10/0x10 [ 2123.676602][ T7378] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2123.683625][ T7378] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2123.690174][ T7378] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2123.696037][ T7378] vmalloc_noprof+0x6b/0x90 [ 2123.701035][ T7378] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2123.706899][ T7378] dvb_demux_do_ioctl+0x54d/0x1340 [ 2123.712579][ T7378] dvb_usercopy+0x165/0x320 [ 2123.717579][ T7378] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 2123.723730][ T7378] ? __pfx_dvb_usercopy+0x10/0x10 [ 2123.729299][ T7378] ? __pfx_lock_release+0x10/0x10 [ 2123.734871][ T7378] ? __fget_files+0x206/0x3a0 [ 2123.740072][ T7378] dvb_demux_ioctl+0x29/0x40 [ 2123.745177][ T7378] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 2123.751076][ T7378] __x64_sys_ioctl+0x190/0x200 [ 2123.756371][ T7378] do_syscall_64+0xcd/0x250 [ 2123.761377][ T7378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2123.767909][ T7378] RIP: 0033:0x7fdbc6385d29 [ 2123.772797][ T7378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2123.794410][ T7378] RSP: 002b:00007fdbc41d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2123.803721][ T7378] RAX: ffffffffffffffda RBX: 00007fdbc6576080 RCX: 00007fdbc6385d29 [ 2123.812518][ T7378] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 2123.821325][ T7378] RBP: 00007fdbc6401aa8 R08: 0000000000000000 R09: 0000000000000000 [ 2123.830138][ T7378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2123.838938][ T7378] R13: 0000000000000000 R14: 00007fdbc6576080 R15: 00007ffc077082a8 [ 2123.847759][ T7378] [ 2123.903430][ T7378] Mem-Info: [ 2123.907108][ T7378] active_anon:20114 inactive_anon:16 isolated_anon:0 [ 2123.907108][ T7378] active_file:18253 inactive_file:45012 isolated_file:0 [ 2123.907108][ T7378] unevictable:801 dirty:786 writeback:0 [ 2123.907108][ T7378] slab_reclaimable:12946 slab_unreclaimable:120070 [ 2123.907108][ T7378] mapped:25698 shmem:1460 pagetables:1068 [ 2123.907108][ T7378] sec_pagetables:0 bounce:0 [ 2123.907108][ T7378] kernel_misc_reclaimable:0 [ 2123.907108][ T7378] free:1285749 free_pcp:666 free_cma:0 [ 2124.076884][ T7378] Node 0 active_anon:82520kB inactive_anon:64kB active_file:73012kB inactive_file:179976kB unevictable:1668kB isolated(anon):0kB isolated(file):0kB mapped:102796kB dirty:3140kB writeback:0kB shmem:4448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:12688kB pagetables:4272kB sec_pagetables:0kB all_unreclaimable? no [ 2124.147060][ T7378] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2124.207558][ T7378] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2124.262969][ T7378] lowmem_reserve[]: 0 2465 2466 0 0 [ 2124.289249][ T7378] Node 0 DMA32 free:1214032kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:82480kB inactive_anon:64kB active_file:73012kB inactive_file:179148kB unevictable:1668kB writepending:3136kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:3620kB local_pcp:860kB free_cma:0kB [ 2124.367073][ T7378] lowmem_reserve[]: 0 0 0 0 0 [ 2124.382756][ T7378] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2124.443810][ T7378] lowmem_reserve[]: 0 0 0 0 0 [ 2124.450892][ T7378] Node 1 Normal free:3912980kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2124.531915][ T7378] lowmem_reserve[]: 0 0 0 0 0 [ 2124.558209][ T7378] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2124.628587][ T7378] Node 0 DMA32: 5429*4kB (UME) 4183*8kB (UME) 2800*16kB (UME) 2522*32kB (UME) 1890*64kB (UME) 1142*128kB (UME) 521*256kB (UME) 234*512kB (UME) 152*1024kB (UM) 6*2048kB (UE) 84*4096kB (UM) = 1213004kB [ 2124.652198][ T7378] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2124.666303][ T7378] Node 1 Normal: 123*4kB (UME) 58*8kB (UME) 40*16kB (UME) 213*32kB (UME) 93*64kB (UME) 30*128kB (UME) 18*256kB (UME) 9*512kB (UME) 6*1024kB (UM) 6*2048kB (UME) 944*4096kB (M) = 3912476kB [ 2124.687837][ T7378] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2124.698485][ T7378] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2124.708946][ T7378] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2124.720051][ T7378] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2124.731082][ T7378] 64814 total pagecache pages [ 2124.736427][ T7378] 64 pages in swap cache [ 2124.764884][ T7378] Free swap = 124448kB [ 2124.781084][ T7378] Total swap = 124996kB [ 2124.798383][ T7378] 2097051 pages RAM [ 2124.805822][ T7378] 0 pages HighMem/MovableOnly [ 2124.828440][ T7378] 427367 pages reserved [ 2124.833108][ T7378] 0 pages cma reserved [ 2126.187304][ T7416] Invalid ELF header magic: != ELF [ 2126.413616][ T7414] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8103'. [ 2126.479440][ T7414] netlink: 'syz.9.8103': attribute type 1 has an invalid length. [ 2126.516869][ T7414] netlink: 53 bytes leftover after parsing attributes in process `syz.9.8103'. [ 2127.908421][ T7441] Process accounting resumed [ 2131.221891][ T7487] Process accounting resumed [ 2131.434207][ T7491] Invalid ELF header magic: != ELF [ 2132.927914][ T7507] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8126'. [ 2133.016175][ T7513] netlink: 'syz.5.8126': attribute type 1 has an invalid length. [ 2133.089854][ T7513] netlink: 53 bytes leftover after parsing attributes in process `syz.5.8126'. [ 2134.109605][ T7522] warn_alloc: 2 callbacks suppressed [ 2134.109630][ T7522] syz.9.8130: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2134.223472][ T7522] CPU: 1 UID: 0 PID: 7522 Comm: syz.9.8130 Not tainted 6.13.0-rc4-syzkaller #0 [ 2134.233420][ T7522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2134.244540][ T7522] Call Trace: [ 2134.248178][ T7522] [ 2134.251428][ T7522] dump_stack_lvl+0x16c/0x1f0 [ 2134.256623][ T7522] warn_alloc+0x24d/0x3a0 [ 2134.261455][ T7522] ? __pfx_warn_alloc+0x10/0x10 [ 2134.266957][ T7522] ? __pfx_mark_lock+0x10/0x10 [ 2134.272274][ T7522] ? lock_acquire.part.0+0x11b/0x380 [ 2134.278142][ T7522] __vmalloc_node_range_noprof+0x10df/0x1530 [ 2134.284798][ T7522] ? rcu_is_watching+0x12/0xc0 [ 2134.290085][ T7522] ? trace_contention_end+0xee/0x140 [ 2134.295941][ T7522] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2134.301828][ T7522] ? dvb_demux_do_ioctl+0x496/0x1340 [ 2134.307709][ T7522] ? __pfx___mutex_lock+0x10/0x10 [ 2134.313289][ T7522] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2134.320299][ T7522] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2134.326828][ T7522] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2134.332690][ T7522] vmalloc_noprof+0x6b/0x90 [ 2134.337685][ T7522] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2134.343538][ T7522] dvb_demux_do_ioctl+0x54d/0x1340 [ 2134.349211][ T7522] dvb_usercopy+0x165/0x320 [ 2134.354209][ T7522] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 2134.360369][ T7522] ? __pfx_dvb_usercopy+0x10/0x10 [ 2134.365959][ T7522] ? __pfx_lock_release+0x10/0x10 [ 2134.371560][ T7522] ? __fget_files+0x206/0x3a0 [ 2134.376762][ T7522] dvb_demux_ioctl+0x29/0x40 [ 2134.381860][ T7522] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 2134.387717][ T7522] __x64_sys_ioctl+0x190/0x200 [ 2134.393008][ T7522] do_syscall_64+0xcd/0x250 [ 2134.398025][ T7522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2134.404557][ T7522] RIP: 0033:0x7f26d2385d29 [ 2134.409446][ T7522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2134.431053][ T7522] RSP: 002b:00007f26d30d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2134.440345][ T7522] RAX: ffffffffffffffda RBX: 00007f26d2575fa0 RCX: 00007f26d2385d29 [ 2134.449195][ T7522] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 2134.458089][ T7522] RBP: 00007f26d2401aa8 R08: 0000000000000000 R09: 0000000000000000 [ 2134.466927][ T7522] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2134.475830][ T7522] R13: 0000000000000000 R14: 00007f26d2575fa0 R15: 00007ffcc2cce6f8 [ 2134.484662][ T7522] [ 2134.606958][ T7522] Mem-Info: [ 2134.610489][ T7522] active_anon:64526 inactive_anon:16 isolated_anon:0 [ 2134.610489][ T7522] active_file:18256 inactive_file:45016 isolated_file:0 [ 2134.610489][ T7522] unevictable:801 dirty:644 writeback:0 [ 2134.610489][ T7522] slab_reclaimable:13059 slab_unreclaimable:119790 [ 2134.610489][ T7522] mapped:45383 shmem:42649 pagetables:1206 [ 2134.610489][ T7522] sec_pagetables:0 bounce:0 [ 2134.610489][ T7522] kernel_misc_reclaimable:0 [ 2134.610489][ T7522] free:1240876 free_pcp:1504 free_cma:0 [ 2134.748685][ T7522] Node 0 active_anon:261504kB inactive_anon:64kB active_file:73024kB inactive_file:179992kB unevictable:1668kB isolated(anon):0kB isolated(file):0kB mapped:187232kB dirty:2672kB writeback:0kB shmem:171360kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12828kB pagetables:4824kB sec_pagetables:0kB all_unreclaimable? no [ 2134.807124][ T7522] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2134.843001][ T7522] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2134.873424][ T7522] lowmem_reserve[]: 0 2465 2466 0 0 [ 2134.879831][ T7522] Node 0 DMA32 free:1035168kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:259064kB inactive_anon:64kB active_file:73024kB inactive_file:179164kB unevictable:1668kB writepending:2768kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:5456kB local_pcp:4356kB free_cma:0kB [ 2134.937849][ T7522] lowmem_reserve[]: 0 0 0 0 0 [ 2134.966792][ T7522] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2135.045146][ T7522] lowmem_reserve[]: 0 0 0 0 0 [ 2135.050762][ T7522] Node 1 Normal free:3912972kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2135.086808][ T7522] lowmem_reserve[]: 0 0 0 0 0 [ 2135.092146][ T7522] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2135.107074][ T7522] Node 0 DMA32: 17*4kB (UE) 68*8kB (UE) 97*16kB (UE) 527*32kB (UME) 1920*64kB (UME) 1160*128kB (UME) 530*256kB (UME) 234*512kB (UME) 152*1024kB (UM) 8*2048kB (UME) 77*4096kB (UM) = 1033300kB [ 2135.129149][ T7522] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2135.142297][ T7522] Node 1 Normal: 247*4kB (UME) 58*8kB (UME) 40*16kB (UME) 213*32kB (UME) 93*64kB (UME) 30*128kB (UME) 18*256kB (UME) 9*512kB (UME) 6*1024kB (UM) 6*2048kB (UME) 944*4096kB (M) = 3912972kB [ 2135.163468][ T7522] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2135.174493][ T7522] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2135.185148][ T7522] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2135.196254][ T7522] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2135.206882][ T7522] 107799 total pagecache pages [ 2135.212191][ T7522] 45 pages in swap cache [ 2135.220656][ T7522] Free swap = 124188kB [ 2135.226296][ T7522] Total swap = 124996kB [ 2135.231112][ T7522] 2097051 pages RAM [ 2135.235385][ T7522] 0 pages HighMem/MovableOnly [ 2135.240648][ T7522] 427367 pages reserved [ 2135.245607][ T7522] 0 pages cma reserved [ 2135.647428][ T7542] Process accounting resumed [ 2142.042527][ T7615] netlink: 338 bytes leftover after parsing attributes in process `syz.9.8150'. [ 2142.181857][ T7613] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8148'. [ 2142.196696][ T7613] netlink: 'syz.6.8148': attribute type 1 has an invalid length. [ 2142.206780][ T7613] netlink: 53 bytes leftover after parsing attributes in process `syz.6.8148'. [ 2143.188335][ T7629] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8154'. [ 2143.257070][ T7629] netlink: 'syz.6.8154': attribute type 1 has an invalid length. [ 2143.265661][ T7629] netlink: 53 bytes leftover after parsing attributes in process `syz.6.8154'. [ 2143.889065][ T7638] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8156'. [ 2143.951373][ T7638] netlink: 'syz.9.8156': attribute type 1 has an invalid length. [ 2143.967136][ T7638] netlink: 53 bytes leftover after parsing attributes in process `syz.9.8156'. [ 2144.250736][ T7646] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8158'. [ 2144.266013][ T7646] netlink: 'syz.8.8158': attribute type 1 has an invalid length. [ 2144.285044][ T7646] netlink: 53 bytes leftover after parsing attributes in process `syz.8.8158'. [ 2144.468441][ T7652] warn_alloc: 4 callbacks suppressed [ 2144.468467][ T7652] syz.9.8159: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2144.511997][ T7652] CPU: 0 UID: 0 PID: 7652 Comm: syz.9.8159 Not tainted 6.13.0-rc4-syzkaller #0 [ 2144.521960][ T7652] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2144.533183][ T7652] Call Trace: [ 2144.536834][ T7652] [ 2144.540102][ T7652] dump_stack_lvl+0x16c/0x1f0 [ 2144.545333][ T7652] warn_alloc+0x24d/0x3a0 [ 2144.550188][ T7652] ? __pfx_warn_alloc+0x10/0x10 [ 2144.555614][ T7652] ? __pfx_mark_lock+0x10/0x10 [ 2144.560958][ T7652] ? lock_acquire.part.0+0x11b/0x380 [ 2144.566868][ T7652] __vmalloc_node_range_noprof+0x10df/0x1530 [ 2144.573534][ T7652] ? rcu_is_watching+0x12/0xc0 [ 2144.578858][ T7652] ? trace_contention_end+0xee/0x140 [ 2144.584757][ T7652] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2144.590666][ T7652] ? dvb_demux_do_ioctl+0x496/0x1340 [ 2144.596570][ T7652] ? __pfx___mutex_lock+0x10/0x10 [ 2144.602178][ T7652] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2144.609237][ T7652] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2144.615810][ T7652] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2144.621720][ T7652] vmalloc_noprof+0x6b/0x90 [ 2144.626757][ T7652] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2144.632676][ T7652] dvb_demux_do_ioctl+0x54d/0x1340 [ 2144.638405][ T7652] dvb_usercopy+0x165/0x320 [ 2144.643439][ T7652] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 2144.649629][ T7652] ? __pfx_dvb_usercopy+0x10/0x10 [ 2144.655241][ T7652] ? __pfx_lock_release+0x10/0x10 [ 2144.660864][ T7652] ? __fget_files+0x206/0x3a0 [ 2144.666100][ T7652] dvb_demux_ioctl+0x29/0x40 [ 2144.671235][ T7652] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 2144.677137][ T7652] __x64_sys_ioctl+0x190/0x200 [ 2144.682452][ T7652] do_syscall_64+0xcd/0x250 [ 2144.687597][ T7652] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2144.694162][ T7652] RIP: 0033:0x7f26d2385d29 [ 2144.699089][ T7652] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2144.720730][ T7652] RSP: 002b:00007f26d01f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2144.730095][ T7652] RAX: ffffffffffffffda RBX: 00007f26d2576080 RCX: 00007f26d2385d29 [ 2144.738934][ T7652] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 2144.747762][ T7652] RBP: 00007f26d2401aa8 R08: 0000000000000000 R09: 0000000000000000 [ 2144.756593][ T7652] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2144.765424][ T7652] R13: 0000000000000000 R14: 00007f26d2576080 R15: 00007ffcc2cce6f8 [ 2144.774291][ T7652] [ 2144.777823][ C0] vkms_vblank_simulate: vblank timer overrun [ 2144.877197][ T7652] Mem-Info: [ 2144.881560][ T7652] active_anon:39982 inactive_anon:16 isolated_anon:0 [ 2144.881560][ T7652] active_file:18255 inactive_file:45021 isolated_file:0 [ 2144.881560][ T7652] unevictable:801 dirty:924 writeback:0 [ 2144.881560][ T7652] slab_reclaimable:13227 slab_unreclaimable:119977 [ 2144.881560][ T7652] mapped:25899 shmem:20361 pagetables:1070 [ 2144.881560][ T7652] sec_pagetables:0 bounce:0 [ 2144.881560][ T7652] kernel_misc_reclaimable:0 [ 2144.881560][ T7652] free:1261113 free_pcp:5531 free_cma:0 [ 2144.931769][ C0] vkms_vblank_simulate: vblank timer overrun [ 2145.025356][ T7652] Node 0 active_anon:147128kB inactive_anon:64kB active_file:73020kB inactive_file:180012kB unevictable:1668kB isolated(anon):0kB isolated(file):0kB mapped:103596kB dirty:3696kB writeback:0kB shmem:65608kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12708kB pagetables:4280kB sec_pagetables:0kB all_unreclaimable? no [ 2145.061494][ C0] vkms_vblank_simulate: vblank timer overrun [ 2145.120218][ T7652] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2145.153544][ C0] vkms_vblank_simulate: vblank timer overrun [ 2145.267848][ T7652] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2145.306840][ T7652] lowmem_reserve[]: 0 2465 2466 0 0 [ 2145.312912][ T7652] Node 0 DMA32 free:1144004kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:137988kB inactive_anon:64kB active_file:73020kB inactive_file:179184kB unevictable:1668kB writepending:3696kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:16100kB local_pcp:0kB free_cma:0kB [ 2145.350922][ T7652] lowmem_reserve[]: 0 0 0 0 0 [ 2145.356242][ T7652] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2145.387447][ T7652] lowmem_reserve[]: 0 0 0 0 0 [ 2145.392756][ T7652] Node 1 Normal free:3912924kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2145.446757][ T7652] lowmem_reserve[]: 0 0 0 0 0 [ 2145.453027][ T7652] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2145.493270][ T7652] Node 0 DMA32: 9791*4kB (UME) 3830*8kB (UME) 2567*16kB (UME) 1266*32kB (UME) 1551*64kB (UME) 1145*128kB (UM) 542*256kB (UME) 240*512kB (UME) 158*1024kB (UM) 6*2048kB (UE) 76*4096kB (UM) = 1144220kB [ 2145.556340][ T7652] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2145.592798][ T7652] Node 1 Normal: 247*4kB (UME) 58*8kB (UME) 40*16kB (UME) 213*32kB (UME) 93*64kB (UME) 30*128kB (UME) 18*256kB (UME) 9*512kB (UME) 6*1024kB (UM) 6*2048kB (UME) 944*4096kB (M) = 3912972kB [ 2145.637129][ T7652] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2145.659753][ T7652] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2145.703478][ T7652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2145.734783][ T7652] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2145.776676][ T7652] 76061 total pagecache pages [ 2145.781906][ T7652] 16 pages in swap cache [ 2145.802355][ T7652] Free swap = 124360kB [ 2145.816878][ T7652] Total swap = 124996kB [ 2145.821585][ T7652] 2097051 pages RAM [ 2145.825808][ T7652] 0 pages HighMem/MovableOnly [ 2145.836342][ T7652] 427367 pages reserved [ 2145.847288][ T7652] 0 pages cma reserved [ 2146.352496][ T7672] Process accounting resumed [ 2147.792762][ T7683] netlink: 32 bytes leftover after parsing attributes in process `syz.6.8166'. [ 2147.824413][ T7683] netlink: 'syz.6.8166': attribute type 1 has an invalid length. [ 2147.856965][ T7683] netlink: 53 bytes leftover after parsing attributes in process `syz.6.8166'. [ 2148.884258][ T7701] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8171'. [ 2148.902818][ T7701] netlink: 'syz.9.8171': attribute type 1 has an invalid length. [ 2148.916833][ T7701] netlink: 53 bytes leftover after parsing attributes in process `syz.9.8171'. [ 2148.971795][ T7705] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8179'. [ 2148.999441][ T7705] netlink: 'syz.5.8179': attribute type 1 has an invalid length. [ 2149.031769][ T7705] netlink: 53 bytes leftover after parsing attributes in process `syz.5.8179'. [ 2149.333863][ T7715] netlink: 338 bytes leftover after parsing attributes in process `syz.5.8175'. [ 2149.922565][ T7728] Process accounting resumed [ 2150.755719][ T7733] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8177'. [ 2150.776934][ T7733] netlink: 'syz.9.8177': attribute type 1 has an invalid length. [ 2150.789217][ T7733] netlink: 53 bytes leftover after parsing attributes in process `syz.9.8177'. [ 2151.544458][ T7749] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8183'. [ 2151.580147][ T7749] netlink: 'syz.9.8183': attribute type 1 has an invalid length. [ 2152.186130][ T7759] netlink: 'syz.9.8185': attribute type 1 has an invalid length. [ 2153.756972][ T7786] Process accounting resumed [ 2154.235454][ T7779] __nla_validate_parse: 3 callbacks suppressed [ 2154.235484][ T7779] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8191'. [ 2154.305841][ T7779] netlink: 'syz.5.8191': attribute type 1 has an invalid length. [ 2154.315292][ T7779] netlink: 53 bytes leftover after parsing attributes in process `syz.5.8191'. [ 2155.539313][ T7810] warn_alloc: 4 callbacks suppressed [ 2155.539338][ T7810] syz.9.8197: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2155.562348][ T7810] CPU: 1 UID: 0 PID: 7810 Comm: syz.9.8197 Not tainted 6.13.0-rc4-syzkaller #0 [ 2155.572268][ T7810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2155.583425][ T7810] Call Trace: [ 2155.587085][ T7810] [ 2155.590359][ T7810] dump_stack_lvl+0x16c/0x1f0 [ 2155.595582][ T7810] warn_alloc+0x24d/0x3a0 [ 2155.600442][ T7810] ? __pfx_warn_alloc+0x10/0x10 [ 2155.605864][ T7810] ? __pfx_mark_lock+0x10/0x10 [ 2155.611201][ T7810] ? lock_acquire.part.0+0x11b/0x380 [ 2155.617134][ T7810] __vmalloc_node_range_noprof+0x10df/0x1530 [ 2155.623803][ T7810] ? rcu_is_watching+0x12/0xc0 [ 2155.629125][ T7810] ? trace_contention_end+0xee/0x140 [ 2155.635012][ T7810] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2155.640900][ T7810] ? dvb_demux_do_ioctl+0x496/0x1340 [ 2155.646793][ T7810] ? __pfx___mutex_lock+0x10/0x10 [ 2155.652402][ T7810] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2155.659457][ T7810] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2155.666031][ T7810] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2155.671980][ T7810] vmalloc_noprof+0x6b/0x90 [ 2155.677015][ T7810] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2155.682908][ T7810] dvb_demux_do_ioctl+0x54d/0x1340 [ 2155.688633][ T7810] dvb_usercopy+0x165/0x320 [ 2155.693679][ T7810] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 2155.699878][ T7810] ? __pfx_dvb_usercopy+0x10/0x10 [ 2155.705476][ T7810] ? __pfx_lock_release+0x10/0x10 [ 2155.711085][ T7810] ? __fget_files+0x206/0x3a0 [ 2155.716321][ T7810] dvb_demux_ioctl+0x29/0x40 [ 2155.721456][ T7810] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 2155.727356][ T7810] __x64_sys_ioctl+0x190/0x200 [ 2155.732681][ T7810] do_syscall_64+0xcd/0x250 [ 2155.737720][ T7810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2155.744282][ T7810] RIP: 0033:0x7f26d2385d29 [ 2155.749204][ T7810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2155.770850][ T7810] RSP: 002b:00007f26d01d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2155.780179][ T7810] RAX: ffffffffffffffda RBX: 00007f26d2576160 RCX: 00007f26d2385d29 [ 2155.789018][ T7810] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 2155.797847][ T7810] RBP: 00007f26d2401aa8 R08: 0000000000000000 R09: 0000000000000000 [ 2155.806676][ T7810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2155.815506][ T7810] R13: 0000000000000000 R14: 00007f26d2576160 R15: 00007ffcc2cce6f8 [ 2155.824395][ T7810] [ 2155.846886][ T7810] Mem-Info: [ 2155.850393][ T7810] active_anon:40919 inactive_anon:16 isolated_anon:0 [ 2155.850393][ T7810] active_file:18255 inactive_file:45025 isolated_file:0 [ 2155.850393][ T7810] unevictable:801 dirty:744 writeback:0 [ 2155.850393][ T7810] slab_reclaimable:13197 slab_unreclaimable:119590 [ 2155.850393][ T7810] mapped:30454 shmem:21189 pagetables:1075 [ 2155.850393][ T7810] sec_pagetables:0 bounce:0 [ 2155.850393][ T7810] kernel_misc_reclaimable:0 [ 2155.850393][ T7810] free:1264380 free_pcp:1718 free_cma:0 [ 2155.920175][ T7810] Node 0 active_anon:164276kB inactive_anon:64kB active_file:73020kB inactive_file:180028kB unevictable:1668kB isolated(anon):0kB isolated(file):0kB mapped:123816kB dirty:2976kB writeback:0kB shmem:83920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12712kB pagetables:4300kB sec_pagetables:0kB all_unreclaimable? no [ 2155.964633][ T7810] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2156.008087][ T7810] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2156.038660][ T7810] lowmem_reserve[]: 0 2465 2466 0 0 [ 2156.045004][ T7810] Node 0 DMA32 free:1125124kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:168140kB inactive_anon:64kB active_file:73020kB inactive_file:179200kB unevictable:1668kB writepending:2976kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:6480kB local_pcp:5660kB free_cma:0kB [ 2156.079924][ T7810] lowmem_reserve[]: 0 0 0 0 0 [ 2156.085685][ T7810] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2156.117465][ T7810] lowmem_reserve[]: 0 0 0 0 0 [ 2156.122866][ T7810] Node 1 Normal free:3912976kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 2156.155297][ T7810] lowmem_reserve[]: 0 0 0 0 0 [ 2156.161093][ T7810] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2156.175651][ T7810] Node 0 DMA32: 339*4kB (UE) 85*8kB (UE) 822*16kB (UME) 2545*32kB (UM) 1914*64kB (UME) 1118*128kB (UM) 517*256kB (UME) 232*512kB (UME) 154*1024kB (UM) 12*2048kB (UME) 80*4096kB (UM) = 1123316kB [ 2156.207934][ T7810] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2156.221217][ T7810] Node 1 Normal: 248*4kB (UME) 58*8kB (UME) 40*16kB (UME) 213*32kB (UME) 93*64kB (UME) 30*128kB (UME) 18*256kB (UME) 9*512kB (UME) 6*1024kB (UM) 6*2048kB (UME) 944*4096kB (M) = 3912976kB [ 2156.242350][ T7810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2156.253493][ T7810] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2156.264207][ T7810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2156.275223][ T7810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2156.285926][ T7810] 85955 total pagecache pages [ 2156.291495][ T7810] 28 pages in swap cache [ 2156.297056][ T7810] Free swap = 124292kB [ 2156.301687][ T7810] Total swap = 124996kB [ 2156.306906][ T7810] 2097051 pages RAM [ 2156.311717][ T7810] 0 pages HighMem/MovableOnly [ 2156.317068][ T7810] 427367 pages reserved [ 2156.321678][ T7810] 0 pages cma reserved [ 2161.669681][ T7863] netlink: 32 bytes leftover after parsing attributes in process `syz.8.8208'. [ 2161.699921][ T7863] netlink: 'syz.8.8208': attribute type 1 has an invalid length. [ 2161.736849][ T7863] netlink: 53 bytes leftover after parsing attributes in process `syz.8.8208'. [ 2162.906724][ T7895] Process accounting resumed [ 2166.149649][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2166.156882][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2166.911490][ T7944] netlink: 338 bytes leftover after parsing attributes in process `syz.6.8226'. [ 2167.053964][ T7946] warn_alloc: 1 callbacks suppressed [ 2167.053990][ T7946] syz.9.8225: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2167.098386][ T7946] CPU: 1 UID: 0 PID: 7946 Comm: syz.9.8225 Not tainted 6.13.0-rc4-syzkaller #0 [ 2167.108321][ T7946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2167.119451][ T7946] Call Trace: [ 2167.123113][ T7946] [ 2167.126389][ T7946] dump_stack_lvl+0x16c/0x1f0 [ 2167.131639][ T7946] warn_alloc+0x24d/0x3a0 [ 2167.136493][ T7946] ? __pfx_warn_alloc+0x10/0x10 [ 2167.141916][ T7946] ? __pfx_mark_lock+0x10/0x10 [ 2167.147251][ T7946] ? lock_acquire.part.0+0x11b/0x380 [ 2167.153139][ T7946] __vmalloc_node_range_noprof+0x10df/0x1530 [ 2167.159777][ T7946] ? rcu_is_watching+0x12/0xc0 [ 2167.165103][ T7946] ? trace_contention_end+0xee/0x140 [ 2167.170974][ T7946] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2167.176839][ T7946] ? dvb_demux_do_ioctl+0x496/0x1340 [ 2167.182701][ T7946] ? __pfx___mutex_lock+0x10/0x10 [ 2167.188274][ T7946] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2167.195283][ T7946] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2167.201823][ T7946] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2167.207709][ T7946] vmalloc_noprof+0x6b/0x90 [ 2167.212704][ T7946] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2167.218581][ T7946] dvb_demux_do_ioctl+0x54d/0x1340 [ 2167.224286][ T7946] dvb_usercopy+0x165/0x320 [ 2167.229291][ T7946] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 2167.235441][ T7946] ? __pfx_dvb_usercopy+0x10/0x10 [ 2167.241035][ T7946] ? xfd_validate_state+0x5d/0x180 [ 2167.246728][ T7946] dvb_demux_ioctl+0x29/0x40 [ 2167.251831][ T7946] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 2167.257727][ T7946] __x64_sys_ioctl+0x190/0x200 [ 2167.263009][ T7946] do_syscall_64+0xcd/0x250 [ 2167.268008][ T7946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2167.274540][ T7946] RIP: 0033:0x7f26d2385d29 [ 2167.279420][ T7946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2167.301530][ T7946] RSP: 002b:00007f26d01f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2167.310834][ T7946] RAX: ffffffffffffffda RBX: 00007f26d2576080 RCX: 00007f26d2385d29 [ 2167.319628][ T7946] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 2167.328434][ T7946] RBP: 00007f26d2401aa8 R08: 0000000000000000 R09: 0000000000000000 [ 2167.337236][ T7946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2167.346033][ T7946] R13: 0000000000000000 R14: 00007f26d2576080 R15: 00007ffcc2cce6f8 [ 2167.354854][ T7946] [ 2167.507061][ T7946] Mem-Info: [ 2167.510585][ T7946] active_anon:29792 inactive_anon:16 isolated_anon:0 [ 2167.510585][ T7946] active_file:18255 inactive_file:45029 isolated_file:0 [ 2167.510585][ T7946] unevictable:801 dirty:931 writeback:0 [ 2167.510585][ T7946] slab_reclaimable:13139 slab_unreclaimable:119072 [ 2167.510585][ T7946] mapped:26732 shmem:11063 pagetables:1088 [ 2167.510585][ T7946] sec_pagetables:0 bounce:0 [ 2167.510585][ T7946] kernel_misc_reclaimable:0 [ 2167.510585][ T7946] free:1272198 free_pcp:5449 free_cma:0 [ 2167.590407][ T7946] Node 0 active_anon:117460kB inactive_anon:64kB active_file:73020kB inactive_file:180044kB unevictable:1668kB isolated(anon):0kB isolated(file):0kB mapped:111032kB dirty:3728kB writeback:0kB shmem:41020kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12752kB pagetables:4332kB sec_pagetables:0kB all_unreclaimable? no [ 2167.608956][ T7955] Process accounting resumed [ 2167.627272][ T7946] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2167.676692][ T7946] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2167.720389][ T7946] lowmem_reserve[]: 0 2465 2466 0 0 [ 2167.726278][ T7946] Node 0 DMA32 free:1160444kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:114420kB inactive_anon:64kB active_file:73020kB inactive_file:179216kB unevictable:1668kB writepending:3728kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:26224kB local_pcp:7896kB free_cma:0kB [ 2167.796692][ T7946] lowmem_reserve[]: 0 0 0 0 0 [ 2167.802015][ T7946] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2167.846848][ T7946] lowmem_reserve[]: 0 0 0 0 0 [ 2167.852763][ T7946] Node 1 Normal free:3912732kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 2167.918762][ T7946] lowmem_reserve[]: 0 0 0 0 0 [ 2167.926198][ T7946] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2167.940478][ T7946] Node 0 DMA32: 4445*4kB (ME) 1433*8kB (UME) 2002*16kB (UME) 2703*32kB (UME) 1929*64kB (UME) 1131*128kB (UM) 513*256kB (UME) 239*512kB (UME) 154*1024kB (UM) 7*2048kB (UME) 81*4096kB (UM) = 1173500kB [ 2167.968873][ T7946] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2167.982982][ T7946] Node 1 Normal: 187*4kB (UME) 58*8kB (UME) 40*16kB (UME) 213*32kB (UME) 93*64kB (UME) 30*128kB (UME) 18*256kB (UME) 9*512kB (UME) 6*1024kB (UM) 6*2048kB (UME) 944*4096kB (M) = 3912732kB [ 2168.003861][ T7946] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2168.015015][ T7946] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2168.025785][ T7946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2168.036654][ T7946] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2168.047061][ T7946] 69472 total pagecache pages [ 2168.052275][ T7946] 16 pages in swap cache [ 2168.062787][ T7946] Free swap = 124544kB [ 2168.068637][ T7946] Total swap = 124996kB [ 2168.073275][ T7946] 2097051 pages RAM [ 2168.127944][ T7946] 0 pages HighMem/MovableOnly [ 2168.133193][ T7946] 427367 pages reserved [ 2168.170843][ T7946] 0 pages cma reserved [ 2168.216864][ T2021] Bluetooth: hci1: command 0x0406 tx timeout [ 2168.767744][ T7975] Process accounting resumed [ 2169.976994][ T8001] Process accounting resumed [ 2172.077396][ T8018] Process accounting resumed [ 2173.206473][ T8026] netlink: 32 bytes leftover after parsing attributes in process `syz.5.8243'. [ 2173.270022][ T8026] netlink: 'syz.5.8243': attribute type 1 has an invalid length. [ 2173.280914][ T8026] netlink: 53 bytes leftover after parsing attributes in process `syz.5.8243'. [ 2173.445101][ T8037] Process accounting resumed [ 2174.003014][ T8055] Process accounting resumed [ 2176.805934][ T8090] Process accounting resumed [ 2178.744925][ T8113] netlink: 32 bytes leftover after parsing attributes in process `syz.9.8257'. [ 2178.822394][ T8113] netlink: 'syz.9.8257': attribute type 1 has an invalid length. [ 2178.867662][ T8113] netlink: 53 bytes leftover after parsing attributes in process `syz.9.8257'. [ 2179.669467][ T8134] warn_alloc: 1 callbacks suppressed [ 2179.669495][ T8134] syz.8.8259: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2179.721782][ T8134] CPU: 1 UID: 0 PID: 8134 Comm: syz.8.8259 Not tainted 6.13.0-rc4-syzkaller #0 [ 2179.731731][ T8134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2179.742859][ T8134] Call Trace: [ 2179.746526][ T8134] [ 2179.749810][ T8134] dump_stack_lvl+0x16c/0x1f0 [ 2179.755043][ T8134] warn_alloc+0x24d/0x3a0 [ 2179.759906][ T8134] ? __pfx_warn_alloc+0x10/0x10 [ 2179.765335][ T8134] ? __pfx_mark_lock+0x10/0x10 [ 2179.770679][ T8134] ? lock_acquire.part.0+0x11b/0x380 [ 2179.776580][ T8134] __vmalloc_node_range_noprof+0x10df/0x1530 [ 2179.783250][ T8134] ? rcu_is_watching+0x12/0xc0 [ 2179.788572][ T8134] ? trace_contention_end+0xee/0x140 [ 2179.794483][ T8134] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2179.800384][ T8134] ? dvb_demux_do_ioctl+0x496/0x1340 [ 2179.806281][ T8134] ? __pfx___mutex_lock+0x10/0x10 [ 2179.811898][ T8134] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2179.818950][ T8134] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2179.825520][ T8134] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2179.831441][ T8134] vmalloc_noprof+0x6b/0x90 [ 2179.836490][ T8134] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2179.842405][ T8134] dvb_demux_do_ioctl+0x54d/0x1340 [ 2179.848130][ T8134] dvb_usercopy+0x165/0x320 [ 2179.853172][ T8134] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 2179.859369][ T8134] ? __pfx_dvb_usercopy+0x10/0x10 [ 2179.864992][ T8134] ? __pfx_lock_release+0x10/0x10 [ 2179.870617][ T8134] ? __fget_files+0x206/0x3a0 [ 2179.875854][ T8134] dvb_demux_ioctl+0x29/0x40 [ 2179.880986][ T8134] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 2179.886885][ T8134] __x64_sys_ioctl+0x190/0x200 [ 2179.892207][ T8134] do_syscall_64+0xcd/0x250 [ 2179.897248][ T8134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2179.903814][ T8134] RIP: 0033:0x7f01b2385d29 [ 2179.908734][ T8134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2179.930377][ T8134] RSP: 002b:00007f01b3130038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2179.939712][ T8134] RAX: ffffffffffffffda RBX: 00007f01b2576240 RCX: 00007f01b2385d29 [ 2179.948543][ T8134] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 2179.957384][ T8134] RBP: 00007f01b2401aa8 R08: 0000000000000000 R09: 0000000000000000 [ 2179.966207][ T8134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2179.975027][ T8134] R13: 0000000000000000 R14: 00007f01b2576240 R15: 00007ffe5be71a88 [ 2179.983862][ T8134] [ 2180.016755][ T8134] Mem-Info: [ 2180.020499][ T8134] active_anon:21133 inactive_anon:16 isolated_anon:0 [ 2180.020499][ T8134] active_file:18255 inactive_file:45035 isolated_file:0 [ 2180.020499][ T8134] unevictable:801 dirty:761 writeback:0 [ 2180.020499][ T8134] slab_reclaimable:12875 slab_unreclaimable:119259 [ 2180.020499][ T8134] mapped:26730 shmem:1476 pagetables:1060 [ 2180.020499][ T8134] sec_pagetables:0 bounce:0 [ 2180.020499][ T8134] kernel_misc_reclaimable:0 [ 2180.020499][ T8134] free:1284302 free_pcp:1574 free_cma:0 [ 2180.157347][ T8134] Node 0 active_anon:84888kB inactive_anon:64kB active_file:73020kB inactive_file:180068kB unevictable:1668kB isolated(anon):1100kB isolated(file):0kB mapped:106920kB dirty:3044kB writeback:0kB shmem:4368kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:4096kB writeback_tmp:0kB kernel_stack:12736kB pagetables:4440kB sec_pagetables:0kB all_unreclaimable? no [ 2180.199529][ T8134] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2180.319106][ T8134] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2180.350489][ T8134] lowmem_reserve[]: 0 2465 2466 0 0 [ 2180.373730][ T8134] Node 0 DMA32 free:1209944kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:84804kB inactive_anon:64kB active_file:73020kB inactive_file:179240kB unevictable:1668kB writepending:3044kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:5692kB local_pcp:980kB free_cma:0kB [ 2180.431940][ T8134] lowmem_reserve[]: 0 0 0 0 0 [ 2180.502805][ T8134] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2180.591701][ T8134] lowmem_reserve[]: 0 0 0 0 0 [ 2180.625596][ T8134] Node 1 Normal free:3912928kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2180.700979][ T8134] lowmem_reserve[]: 0 0 0 0 0 [ 2180.706415][ T8134] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2180.721347][ T8134] Node 0 DMA32: 5597*4kB (UME) 4193*8kB (UME) 2783*16kB (UM) 2702*32kB (UME) 1894*64kB (UME) 1122*128kB (UME) 510*256kB (UME) 235*512kB (UME) 156*1024kB (UM) 10*2048kB (UME) 81*4096kB (UM) = 1214636kB [ 2180.743973][ T8134] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2180.759489][ T8134] Node 1 Normal: 248*4kB (UME) 58*8kB (UME) 40*16kB (UME) 213*32kB (UME) 93*64kB (UME) 30*128kB (UME) 18*256kB (UME) 9*512kB (UME) 6*1024kB (UM) 6*2048kB (UME) 944*4096kB (M) = 3912976kB [ 2180.793173][ T8134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2180.816808][ T8134] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2180.836860][ T8134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2180.854034][ T8134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2180.893259][ T8134] 64844 total pagecache pages [ 2180.904732][ T8134] 44 pages in swap cache [ 2180.946881][ T8134] Free swap = 124348kB [ 2180.951543][ T8134] Total swap = 124996kB [ 2180.976919][ T8134] 2097051 pages RAM [ 2180.981197][ T8134] 0 pages HighMem/MovableOnly [ 2181.030464][ T8134] 427367 pages reserved [ 2181.040882][ T8134] 0 pages cma reserved [ 2185.575888][ T8194] netlink: 338 bytes leftover after parsing attributes in process `syz.9.8273'. [ 2186.557632][ T8226] netlink: 338 bytes leftover after parsing attributes in process `syz.8.8286'. [ 2186.827205][ T8236] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8290'. [ 2187.628937][ T8248] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8291'. [ 2187.756382][ T8254] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 2188.010743][ T8248] bond0: (slave bond_slave_1): Releasing backup interface [ 2188.603059][ T8270] netlink: 338 bytes leftover after parsing attributes in process `syz.9.8298'. [ 2188.638089][ T8267] FAULT_INJECTION: forcing a failure. [ 2188.638089][ T8267] name failslab, interval 1, probability 0, space 0, times 0 [ 2188.656070][ T8267] CPU: 0 UID: 0 PID: 8267 Comm: syz.8.8299 Not tainted 6.13.0-rc4-syzkaller #0 [ 2188.666032][ T8267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2188.677159][ T8267] Call Trace: [ 2188.680817][ T8267] [ 2188.684095][ T8267] dump_stack_lvl+0x16c/0x1f0 [ 2188.689329][ T8267] should_fail_ex+0x497/0x5b0 [ 2188.694548][ T8267] ? fs_reclaim_acquire+0xae/0x150 [ 2188.700249][ T8267] should_failslab+0xc2/0x120 [ 2188.705482][ T8267] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 2188.711955][ T8267] ? __alloc_skb+0x2b3/0x380 [ 2188.717079][ T8267] __alloc_skb+0x2b3/0x380 [ 2188.722008][ T8267] ? __pfx___alloc_skb+0x10/0x10 [ 2188.727505][ T8267] ? lock_acquire+0x2f/0xb0 [ 2188.732540][ T8267] netlink_alloc_large_skb+0x69/0x130 [ 2188.738533][ T8267] netlink_sendmsg+0x689/0xd70 [ 2188.743858][ T8267] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2188.749756][ T8267] ____sys_sendmsg+0x9ae/0xb40 [ 2188.755107][ T8267] ? copy_msghdr_from_user+0x10b/0x160 [ 2188.761203][ T8267] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2188.767093][ T8267] ___sys_sendmsg+0x135/0x1e0 [ 2188.772293][ T8267] ? __pfx____sys_sendmsg+0x10/0x10 [ 2188.778065][ T8267] ? __pfx_lock_release+0x10/0x10 [ 2188.783643][ T8267] ? trace_lock_acquire+0x14e/0x1f0 [ 2188.789411][ T8267] ? __fget_files+0x206/0x3a0 [ 2188.794596][ T8267] __sys_sendmsg+0x16e/0x220 [ 2188.799785][ T8267] ? __pfx___sys_sendmsg+0x10/0x10 [ 2188.805470][ T8267] do_syscall_64+0xcd/0x250 [ 2188.810473][ T8267] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2188.817032][ T8267] RIP: 0033:0x7f01b2385d29 [ 2188.821914][ T8267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2188.843517][ T8267] RSP: 002b:00007f01b3193038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2188.852816][ T8267] RAX: ffffffffffffffda RBX: 00007f01b2575fa0 RCX: 00007f01b2385d29 [ 2188.861618][ T8267] RDX: 0000000000040000 RSI: 0000000020000240 RDI: 0000000000000006 [ 2188.870513][ T8267] RBP: 00007f01b3193090 R08: 0000000000000000 R09: 0000000000000000 [ 2188.879312][ T8267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2188.888103][ T8267] R13: 0000000000000000 R14: 00007f01b2575fa0 R15: 00007ffe5be71a88 [ 2188.896920][ T8267] [ 2189.254807][ T8289] FAULT_INJECTION: forcing a failure. [ 2189.254807][ T8289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2189.336901][ T8289] CPU: 1 UID: 0 PID: 8289 Comm: syz.6.8300 Not tainted 6.13.0-rc4-syzkaller #0 [ 2189.346894][ T8289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2189.358010][ T8289] Call Trace: [ 2189.361660][ T8289] [ 2189.364929][ T8289] dump_stack_lvl+0x16c/0x1f0 [ 2189.370152][ T8289] should_fail_ex+0x497/0x5b0 [ 2189.375367][ T8289] strncpy_from_user+0x3b/0x2d0 [ 2189.380813][ T8289] getname_flags.part.0+0x8f/0x550 [ 2189.386528][ T8289] getname_flags+0x93/0xf0 [ 2189.391457][ T8289] __x64_sys_rename+0x65/0xa0 [ 2189.396681][ T8289] do_syscall_64+0xcd/0x250 [ 2189.401719][ T8289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2189.408284][ T8289] RIP: 0033:0x7fdbc6385d29 [ 2189.413203][ T8289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2189.434831][ T8289] RSP: 002b:00007fdbc41d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 2189.444122][ T8289] RAX: ffffffffffffffda RBX: 00007fdbc6576080 RCX: 00007fdbc6385d29 [ 2189.452920][ T8289] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000080 [ 2189.461728][ T8289] RBP: 00007fdbc41d5090 R08: 0000000000000000 R09: 0000000000000000 [ 2189.470563][ T8289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2189.479374][ T8289] R13: 0000000000000000 R14: 00007fdbc6576080 R15: 00007ffc077082a8 [ 2189.488190][ T8289] [ 2190.387364][ T8315] warn_alloc: 1 callbacks suppressed [ 2190.387389][ T8315] syz.5.8309: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2190.450635][ T8315] CPU: 1 UID: 0 PID: 8315 Comm: syz.5.8309 Not tainted 6.13.0-rc4-syzkaller #0 [ 2190.460617][ T8315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2190.471758][ T8315] Call Trace: [ 2190.475403][ T8315] [ 2190.478679][ T8315] dump_stack_lvl+0x16c/0x1f0 [ 2190.483911][ T8315] warn_alloc+0x24d/0x3a0 [ 2190.488785][ T8315] ? __pfx_warn_alloc+0x10/0x10 [ 2190.494248][ T8315] ? __pfx_mark_lock+0x10/0x10 [ 2190.499585][ T8315] ? lock_acquire.part.0+0x11b/0x380 [ 2190.505491][ T8315] __vmalloc_node_range_noprof+0x10df/0x1530 [ 2190.512165][ T8315] ? rcu_is_watching+0x12/0xc0 [ 2190.517486][ T8315] ? trace_contention_end+0xee/0x140 [ 2190.523384][ T8315] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2190.529290][ T8315] ? dvb_demux_do_ioctl+0x496/0x1340 [ 2190.535205][ T8315] ? __pfx___mutex_lock+0x10/0x10 [ 2190.540823][ T8315] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2190.547886][ T8315] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2190.554458][ T8315] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2190.560371][ T8315] vmalloc_noprof+0x6b/0x90 [ 2190.565414][ T8315] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2190.571319][ T8315] dvb_demux_do_ioctl+0x54d/0x1340 [ 2190.577066][ T8315] dvb_usercopy+0x165/0x320 [ 2190.582108][ T8315] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 2190.588302][ T8315] ? __pfx_dvb_usercopy+0x10/0x10 [ 2190.593958][ T8315] ? __pfx_lock_release+0x10/0x10 [ 2190.599582][ T8315] ? __fget_files+0x206/0x3a0 [ 2190.604779][ T8315] dvb_demux_ioctl+0x29/0x40 [ 2190.609878][ T8315] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 2190.615937][ T8315] __x64_sys_ioctl+0x190/0x200 [ 2190.621253][ T8315] do_syscall_64+0xcd/0x250 [ 2190.626288][ T8315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2190.632816][ T8315] RIP: 0033:0x7fa838d85d29 [ 2190.637699][ T8315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2190.659307][ T8315] RSP: 002b:00007fa839b69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2190.668605][ T8315] RAX: ffffffffffffffda RBX: 00007fa838f76080 RCX: 00007fa838d85d29 [ 2190.677407][ T8315] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 2190.686210][ T8315] RBP: 00007fa838e01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 2190.695051][ T8315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2190.703852][ T8315] R13: 0000000000000000 R14: 00007fa838f76080 R15: 00007ffdd2d7f978 [ 2190.712677][ T8315] [ 2190.781001][ T8319] netlink: 338 bytes leftover after parsing attributes in process `syz.8.8310'. [ 2190.810016][ T8315] Mem-Info: [ 2190.815660][ T8315] active_anon:25117 inactive_anon:16 isolated_anon:0 [ 2190.815660][ T8315] active_file:18254 inactive_file:45099 isolated_file:0 [ 2190.815660][ T8315] unevictable:801 dirty:993 writeback:0 [ 2190.815660][ T8315] slab_reclaimable:13200 slab_unreclaimable:119961 [ 2190.815660][ T8315] mapped:26039 shmem:5426 pagetables:1108 [ 2190.815660][ T8315] sec_pagetables:0 bounce:0 [ 2190.815660][ T8315] kernel_misc_reclaimable:0 [ 2190.815660][ T8315] free:1278850 free_pcp:2370 free_cma:0 [ 2190.868339][ T8315] Node 0 active_anon:100968kB inactive_anon:64kB active_file:73016kB inactive_file:180324kB unevictable:1668kB isolated(anon):0kB isolated(file):0kB mapped:104156kB dirty:3968kB writeback:0kB shmem:20568kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12616kB pagetables:4432kB sec_pagetables:0kB all_unreclaimable? no [ 2190.926790][ T8315] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2190.981592][ T8315] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2191.099045][ T8315] lowmem_reserve[]: 0 2465 2466 0 0 [ 2191.104958][ T8315] Node 0 DMA32 free:1181916kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:104296kB inactive_anon:64kB active_file:73016kB inactive_file:179496kB unevictable:1668kB writepending:3968kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:9120kB local_pcp:5464kB free_cma:0kB [ 2191.179083][ T8315] lowmem_reserve[]: 0 0 0 0 0 [ 2191.201287][ T8315] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2191.264635][ T8315] lowmem_reserve[]: 0 0 0 0 0 [ 2191.284105][ T8315] Node 1 Normal free:3912964kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 2191.382950][ T8315] lowmem_reserve[]: 0 0 0 0 0 [ 2191.405782][ T8315] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2191.433908][ T8315] Node 0 DMA32: 129*4kB (UE) 3381*8kB (UME) 2855*16kB (UME) 2555*32kB (UME) 1905*64kB (UME) 1126*128kB (UM) 512*256kB (UM) 234*512kB (UME) 154*1024kB (UM) 10*2048kB (UME) 80*4096kB (UM) = 1177788kB [ 2191.490191][ T8315] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2191.559837][ T8315] Node 1 Normal: 246*4kB (UME) 58*8kB (UME) 40*16kB (UME) 213*32kB (UME) 93*64kB (UME) 30*128kB (UME) 18*256kB (UME) 9*512kB (UME) 6*1024kB (UM) 6*2048kB (UME) 944*4096kB (M) = 3912968kB [ 2191.652209][ T8315] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2191.663148][ T8315] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2191.673520][ T8315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2191.684194][ T8315] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2191.694566][ T8315] 70482 total pagecache pages [ 2191.700055][ T8315] 34 pages in swap cache [ 2191.704821][ T8315] Free swap = 122336kB [ 2191.711761][ T8315] Total swap = 124996kB [ 2191.716400][ T8315] 2097051 pages RAM [ 2191.720793][ T8315] 0 pages HighMem/MovableOnly [ 2191.725983][ T8315] 427367 pages reserved [ 2191.730727][ T8315] 0 pages cma reserved [ 2195.699807][ T8385] FAULT_INJECTION: forcing a failure. [ 2195.699807][ T8385] name failslab, interval 1, probability 0, space 0, times 0 [ 2195.742000][ T8380] Process accounting resumed [ 2195.762496][ T8385] CPU: 0 UID: 0 PID: 8385 Comm: syz.8.8326 Not tainted 6.13.0-rc4-syzkaller #0 [ 2195.772432][ T8385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2195.783550][ T8385] Call Trace: [ 2195.787198][ T8385] [ 2195.790472][ T8385] dump_stack_lvl+0x16c/0x1f0 [ 2195.795697][ T8385] should_fail_ex+0x497/0x5b0 [ 2195.800914][ T8385] ? fs_reclaim_acquire+0xae/0x150 [ 2195.806620][ T8385] should_failslab+0xc2/0x120 [ 2195.811843][ T8385] __kmalloc_noprof+0xce/0x4f0 [ 2195.817165][ T8385] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2195.823425][ T8385] ? tomoyo_realpath_from_path+0xbf/0x710 [ 2195.829772][ T8385] tomoyo_realpath_from_path+0xbf/0x710 [ 2195.835915][ T8385] ? tomoyo_path_number_perm+0x235/0x5b0 [ 2195.842170][ T8385] tomoyo_path_number_perm+0x248/0x5b0 [ 2195.848222][ T8385] ? tomoyo_path_number_perm+0x235/0x5b0 [ 2195.854467][ T8385] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2195.861115][ T8385] ? __pfx_lock_release+0x10/0x10 [ 2195.866670][ T8385] ? trace_lock_acquire+0x14e/0x1f0 [ 2195.872456][ T8385] ? lock_acquire+0x2f/0xb0 [ 2195.877442][ T8385] ? __fget_files+0x40/0x3a0 [ 2195.882532][ T8385] ? __fget_files+0x206/0x3a0 [ 2195.887716][ T8385] security_file_ioctl+0x9b/0x240 [ 2195.893294][ T8385] __x64_sys_ioctl+0xb7/0x200 [ 2195.898497][ T8385] do_syscall_64+0xcd/0x250 [ 2195.903490][ T8385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2195.910012][ T8385] RIP: 0033:0x7f01b2385d29 [ 2195.914892][ T8385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2195.936500][ T8385] RSP: 002b:00007f01b3193038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2195.945811][ T8385] RAX: ffffffffffffffda RBX: 00007f01b2575fa0 RCX: 00007f01b2385d29 [ 2195.954613][ T8385] RDX: 0000000000000007 RSI: 0000000000005001 RDI: 0000000000000003 [ 2195.963402][ T8385] RBP: 00007f01b3193090 R08: 0000000000000000 R09: 0000000000000000 [ 2195.972298][ T8385] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2195.981092][ T8385] R13: 0000000000000000 R14: 00007f01b2575fa0 R15: 00007ffe5be71a88 [ 2195.989901][ T8385] [ 2196.029087][ T8385] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2197.419168][ T8390] kexec: Could not allocate control_code_buffer [ 2199.133120][ T8436] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 2199.717581][ T8440] Process accounting resumed [ 2203.878067][ T8505] can0: slcan on ptm0. [ 2203.988181][ T8504] can0 (unregistered): slcan off ptm0. [ 2206.297836][ T8557] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8359'. [ 2207.429064][ T8569] syz.9.8361: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2207.488372][ T8569] CPU: 0 UID: 0 PID: 8569 Comm: syz.9.8361 Not tainted 6.13.0-rc4-syzkaller #0 [ 2207.498324][ T8569] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2207.509449][ T8569] Call Trace: [ 2207.513134][ T8569] [ 2207.516412][ T8569] dump_stack_lvl+0x16c/0x1f0 [ 2207.521643][ T8569] warn_alloc+0x24d/0x3a0 [ 2207.526513][ T8569] ? __pfx_warn_alloc+0x10/0x10 [ 2207.531948][ T8569] ? __pfx_mark_lock+0x10/0x10 [ 2207.537288][ T8569] ? lock_acquire.part.0+0x11b/0x380 [ 2207.543232][ T8569] __vmalloc_node_range_noprof+0x10df/0x1530 [ 2207.549903][ T8569] ? rcu_is_watching+0x12/0xc0 [ 2207.555226][ T8569] ? trace_contention_end+0xee/0x140 [ 2207.561123][ T8569] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2207.567028][ T8569] ? dvb_demux_do_ioctl+0x496/0x1340 [ 2207.572937][ T8569] ? __pfx___mutex_lock+0x10/0x10 [ 2207.578569][ T8569] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2207.585624][ T8569] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2207.592194][ T8569] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2207.598100][ T8569] vmalloc_noprof+0x6b/0x90 [ 2207.603135][ T8569] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2207.609037][ T8569] dvb_demux_do_ioctl+0x54d/0x1340 [ 2207.614752][ T8569] dvb_usercopy+0x165/0x320 [ 2207.619773][ T8569] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 2207.625952][ T8569] ? __pfx_dvb_usercopy+0x10/0x10 [ 2207.631560][ T8569] ? __pfx_lock_release+0x10/0x10 [ 2207.637178][ T8569] ? __fget_files+0x206/0x3a0 [ 2207.642409][ T8569] dvb_demux_ioctl+0x29/0x40 [ 2207.647548][ T8569] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 2207.653452][ T8569] __x64_sys_ioctl+0x190/0x200 [ 2207.658777][ T8569] do_syscall_64+0xcd/0x250 [ 2207.663817][ T8569] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2207.670387][ T8569] RIP: 0033:0x7f26d2385d29 [ 2207.675327][ T8569] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2207.696968][ T8569] RSP: 002b:00007f26d01f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2207.706301][ T8569] RAX: ffffffffffffffda RBX: 00007f26d2576080 RCX: 00007f26d2385d29 [ 2207.715137][ T8569] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 2207.723934][ T8569] RBP: 00007f26d2401aa8 R08: 0000000000000000 R09: 0000000000000000 [ 2207.723965][ T8569] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2207.741595][ T8569] R13: 0000000000000000 R14: 00007f26d2576080 R15: 00007ffcc2cce6f8 [ 2207.750557][ T8569] [ 2207.776795][ T8569] Mem-Info: [ 2207.781598][ T8569] active_anon:51470 inactive_anon:16 isolated_anon:0 [ 2207.781598][ T8569] active_file:18254 inactive_file:45105 isolated_file:0 [ 2207.781598][ T8569] unevictable:801 dirty:1317 writeback:0 [ 2207.781598][ T8569] slab_reclaimable:12832 slab_unreclaimable:119960 [ 2207.781598][ T8569] mapped:40712 shmem:30730 pagetables:1115 [ 2207.781598][ T8569] sec_pagetables:0 bounce:0 [ 2207.781598][ T8569] kernel_misc_reclaimable:0 [ 2207.781598][ T8569] free:1252428 free_pcp:2661 free_cma:0 [ 2207.835315][ T8569] Node 0 active_anon:205880kB inactive_anon:64kB active_file:73016kB inactive_file:180348kB unevictable:1668kB isolated(anon):0kB isolated(file):0kB mapped:162848kB dirty:5264kB writeback:0kB shmem:121384kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12560kB pagetables:4560kB sec_pagetables:0kB all_unreclaimable? no [ 2207.872609][ T8569] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2207.947819][ T8569] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2207.977710][ C1] vkms_vblank_simulate: vblank timer overrun [ 2208.039888][ T8569] lowmem_reserve[]: 0 2465 2466 0 0 [ 2208.047120][ T8569] Node 0 DMA32 free:1087132kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:199328kB inactive_anon:64kB active_file:73016kB inactive_file:179528kB unevictable:1668kB writepending:5264kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:11936kB local_pcp:5192kB free_cma:0kB [ 2208.081017][ C1] vkms_vblank_simulate: vblank timer overrun [ 2208.126880][ T8569] lowmem_reserve[]: 0 0 0 0 0 [ 2208.154886][ T8569] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2208.184476][ C1] vkms_vblank_simulate: vblank timer overrun [ 2208.250951][ T8569] lowmem_reserve[]: 0 0 0 0 0 [ 2208.266868][ T8569] Node 1 Normal free:3912968kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2208.330463][ T8569] lowmem_reserve[]: 0 0 0 0 0 [ 2208.364242][ T8569] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2208.409779][ T8569] Node 0 DMA32: 553*4kB (UME) 196*8kB (UME) 358*16kB (UME) 2144*32kB (UME) 1930*64kB (UME) 1144*128kB (UME) 538*256kB (UME) 251*512kB (UME) 159*1024kB (UM) 8*2048kB (UME) 73*4096kB (UM) = 1092516kB [ 2208.485165][ T8569] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2208.510360][ T8569] Node 1 Normal: 246*4kB (UME) 58*8kB (UME) 40*16kB (UME) 213*32kB (UME) 93*64kB (UME) 30*128kB (UME) 18*256kB (UME) 9*512kB (UME) 6*1024kB (UM) 6*2048kB (UME) 944*4096kB (M) = 3912968kB [ 2208.558507][ T8569] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2208.583863][ T8569] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2208.599047][ T8569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2208.620193][ T8569] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2208.641123][ T8569] 94162 total pagecache pages [ 2208.654344][ T8569] 16 pages in swap cache [ 2208.686740][ T8569] Free swap = 124328kB [ 2208.694420][ T8569] Total swap = 124996kB [ 2208.706688][ T8569] 2097051 pages RAM [ 2208.711210][ T8569] 0 pages HighMem/MovableOnly [ 2208.726783][ T8569] 427367 pages reserved [ 2208.735401][ T8577] can: request_module (can-proto-0) failed. [ 2208.753210][ T8569] 0 pages cma reserved [ 2210.935104][ T8619] ima: policy update failed [ 2210.965353][ T29] audit: type=1802 audit(8277292424.490:30): pid=8619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.8.8376" res=0 errno=0 [ 2211.118633][ T8624] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8378'. [ 2211.409813][ T8624] team0: Port device team_slave_0 removed [ 2211.965432][ T8649] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 2212.796256][ T8668] netlink: 28 bytes leftover after parsing attributes in process `syz.8.8391'. [ 2213.323002][ T8668] team0: Port device team_slave_0 removed [ 2215.270002][ T8719] rnbd_client L213: map_device: Parameters missing [ 2215.334555][ T8719] rnbd_client L213: map_device: Parameters missing [ 2218.615739][ T8752] netlink: zone id is out of range [ 2219.417576][ T8766] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 2220.385960][ T8778] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8422'. [ 2222.347975][ T8823] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 2223.440021][ T8833] Process accounting resumed [ 2226.181610][ T8868] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8444'. [ 2226.947633][ T8869] netlink: 330 bytes leftover after parsing attributes in process `syz.9.8442'. [ 2227.590057][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 2227.597176][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 2229.648054][ T8909] warn_alloc: 1 callbacks suppressed [ 2229.648081][ T8909] syz.6.8453: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null) [ 2229.658125][ T2021] Bluetooth: hci2: command 0x0406 tx timeout [ 2229.667099][ T8909] ,cpuset=/,mems_allowed=0-1 [ 2229.766407][ T8909] CPU: 0 UID: 0 PID: 8909 Comm: syz.6.8453 Not tainted 6.13.0-rc4-syzkaller #0 [ 2229.776351][ T8909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2229.787474][ T8909] Call Trace: [ 2229.791129][ T8909] [ 2229.794398][ T8909] dump_stack_lvl+0x16c/0x1f0 [ 2229.799623][ T8909] warn_alloc+0x24d/0x3a0 [ 2229.804474][ T8909] ? __pfx_warn_alloc+0x10/0x10 [ 2229.809886][ T8909] ? __pfx_mark_lock+0x10/0x10 [ 2229.815214][ T8909] ? lock_acquire.part.0+0x11b/0x380 [ 2229.821102][ T8909] __vmalloc_node_range_noprof+0x10df/0x1530 [ 2229.827738][ T8909] ? rcu_is_watching+0x12/0xc0 [ 2229.833024][ T8909] ? trace_contention_end+0xee/0x140 [ 2229.838878][ T8909] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2229.844737][ T8909] ? dvb_demux_do_ioctl+0x496/0x1340 [ 2229.850591][ T8909] ? __pfx___mutex_lock+0x10/0x10 [ 2229.856160][ T8909] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2229.863168][ T8909] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2229.869697][ T8909] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2229.875569][ T8909] vmalloc_noprof+0x6b/0x90 [ 2229.880566][ T8909] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2229.886420][ T8909] dvb_demux_do_ioctl+0x54d/0x1340 [ 2229.892096][ T8909] dvb_usercopy+0x165/0x320 [ 2229.897083][ T8909] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 2229.903261][ T8909] ? __pfx_dvb_usercopy+0x10/0x10 [ 2229.908836][ T8909] ? __pfx_lock_release+0x10/0x10 [ 2229.914411][ T8909] ? __fget_files+0x206/0x3a0 [ 2229.919602][ T8909] dvb_demux_ioctl+0x29/0x40 [ 2229.924694][ T8909] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 2229.930569][ T8909] __x64_sys_ioctl+0x190/0x200 [ 2229.935854][ T8909] do_syscall_64+0xcd/0x250 [ 2229.940867][ T8909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2229.947432][ T8909] RIP: 0033:0x7fdbc6385d29 [ 2229.952314][ T8909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2229.973930][ T8909] RSP: 002b:00007fdbc41d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2229.983233][ T8909] RAX: ffffffffffffffda RBX: 00007fdbc6576080 RCX: 00007fdbc6385d29 [ 2229.992035][ T8909] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 2230.000827][ T8909] RBP: 00007fdbc6401aa8 R08: 0000000000000000 R09: 0000000000000000 [ 2230.009653][ T8909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2230.018455][ T8909] R13: 0000000000000000 R14: 00007fdbc6576080 R15: 00007ffc077082a8 [ 2230.027279][ T8909] [ 2230.035934][ T8909] Mem-Info: [ 2230.039628][ T8909] active_anon:63943 inactive_anon:16 isolated_anon:0 [ 2230.039628][ T8909] active_file:9359 inactive_file:52339 isolated_file:0 [ 2230.039628][ T8909] unevictable:2691 dirty:848 writeback:0 [ 2230.039628][ T8909] slab_reclaimable:12775 slab_unreclaimable:120979 [ 2230.039628][ T8909] mapped:37216 shmem:45338 pagetables:1198 [ 2230.039628][ T8909] sec_pagetables:0 bounce:0 [ 2230.039628][ T8909] kernel_misc_reclaimable:0 [ 2230.039628][ T8909] free:1237045 free_pcp:3409 free_cma:0 [ 2230.090481][ T8909] Node 0 active_anon:255872kB inactive_anon:64kB active_file:37436kB inactive_file:209284kB unevictable:9228kB isolated(anon):0kB isolated(file):0kB mapped:148864kB dirty:3288kB writeback:0kB shmem:179816kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12740kB pagetables:4792kB sec_pagetables:0kB all_unreclaimable? no [ 2230.127493][ T8909] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2230.163472][ T8909] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2230.215349][ T8909] lowmem_reserve[]: 0 2465 2466 0 0 [ 2230.258077][ T8909] Node 0 DMA32 free:1029736kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:255432kB inactive_anon:64kB active_file:37436kB inactive_file:212556kB unevictable:5128kB writepending:3388kB present:3129332kB managed:2551336kB mlocked:3592kB bounce:0kB free_pcp:4556kB local_pcp:4360kB free_cma:0kB [ 2230.326885][ T8909] lowmem_reserve[]: 0 0 0 0 0 [ 2230.332381][ T8909] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2230.432521][ T8909] lowmem_reserve[]: 0 0 0 0 0 [ 2230.471720][ T8909] Node 1 Normal free:3906500kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:6376kB local_pcp:1204kB free_cma:0kB [ 2230.596758][ T8909] lowmem_reserve[]: 0 0 0 0 0 [ 2230.602086][ T8909] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2230.679407][ T8909] Node 0 DMA32: 101*4kB (UE) 116*8kB (UME) 148*16kB (UE) 394*32kB (UME) 1954*64kB (UME) 1134*128kB (UME) 531*256kB (UME) 264*512kB (UME) 162*1024kB (UM) 8*2048kB (UME) 71*4096kB (UME) = 1030708kB [ 2230.800619][ T8909] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2230.851750][ T8909] Node 1 Normal: 251*4kB (UME) 60*8kB (UME) 42*16kB (UME) 216*32kB (UME) 95*64kB (UME) 30*128kB (UME) 18*256kB (UME) 8*512kB (UME) 6*1024kB (UM) 5*2048kB (UME) 943*4096kB (M) = 3906604kB [ 2230.878445][ T8909] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2230.889975][ T8909] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 2230.909455][ T8909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2230.920139][ T8909] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2230.933309][ T8909] 108999 total pagecache pages [ 2230.939091][ T8909] 40 pages in swap cache [ 2230.944531][ T8909] Free swap = 124248kB [ 2230.949522][ T8909] Total swap = 124996kB [ 2230.955050][ T8909] 2097051 pages RAM [ 2230.960290][ T8909] 0 pages HighMem/MovableOnly [ 2230.965519][ T8909] 427367 pages reserved [ 2230.970244][ T8909] 0 pages cma reserved [ 2232.261717][ T29] audit: type=1326 audit(8277292445.790:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8942 comm="syz.9.8462" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f26d2385d29 code=0x0 [ 2232.956808][ T8950] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8462'. [ 2232.975480][ T8959] netlink: 'syz.8.8466': attribute type 4 has an invalid length. [ 2233.019828][ T8959] netlink: 314 bytes leftover after parsing attributes in process `syz.8.8466'. [ 2234.070983][ T8979] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8470'. [ 2235.484515][ T8999] erspan0: entered allmulticast mode [ 2236.066347][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz.9.8484'. [ 2238.117023][ T9072] rnbd_client L213: map_device: Parameters missing [ 2238.181302][ T9070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 2240.958476][ T9122] FAULT_INJECTION: forcing a failure. [ 2240.958476][ T9122] name failslab, interval 1, probability 0, space 0, times 0 [ 2241.006712][ T9122] CPU: 0 UID: 0 PID: 9122 Comm: syz.6.8510 Not tainted 6.13.0-rc4-syzkaller #0 [ 2241.016644][ T9122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2241.027756][ T9122] Call Trace: [ 2241.031412][ T9122] [ 2241.034678][ T9122] dump_stack_lvl+0x16c/0x1f0 [ 2241.039889][ T9122] should_fail_ex+0x497/0x5b0 [ 2241.045097][ T9122] ? fs_reclaim_acquire+0xae/0x150 [ 2241.050790][ T9122] should_failslab+0xc2/0x120 [ 2241.056005][ T9122] __kmalloc_noprof+0xce/0x4f0 [ 2241.061311][ T9122] ? d_absolute_path+0x137/0x1b0 [ 2241.066831][ T9122] ? tomoyo_encode2+0x100/0x3e0 [ 2241.072239][ T9122] tomoyo_encode2+0x100/0x3e0 [ 2241.077490][ T9122] tomoyo_realpath_from_path+0x1a7/0x710 [ 2241.083770][ T9122] tomoyo_path_number_perm+0x248/0x5b0 [ 2241.089862][ T9122] ? tomoyo_path_number_perm+0x235/0x5b0 [ 2241.096145][ T9122] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 2241.102808][ T9122] ? __pfx_lock_release+0x10/0x10 [ 2241.108361][ T9122] ? trace_lock_acquire+0x14e/0x1f0 [ 2241.114124][ T9122] ? lock_acquire+0x2f/0xb0 [ 2241.119106][ T9122] ? __fget_files+0x40/0x3a0 [ 2241.124201][ T9122] ? __fget_files+0x206/0x3a0 [ 2241.129394][ T9122] security_file_ioctl+0x9b/0x240 [ 2241.134955][ T9122] __x64_sys_ioctl+0xb7/0x200 [ 2241.140133][ T9122] do_syscall_64+0xcd/0x250 [ 2241.145122][ T9122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2241.151652][ T9122] RIP: 0033:0x7fdbc6385d29 [ 2241.156532][ T9122] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2241.178261][ T9122] RSP: 002b:00007fdbc41d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2241.187554][ T9122] RAX: ffffffffffffffda RBX: 00007fdbc6576080 RCX: 00007fdbc6385d29 [ 2241.196364][ T9122] RDX: 0000000000000000 RSI: 00000000c0045002 RDI: 0000000000000003 [ 2241.205168][ T9122] RBP: 00007fdbc41d5090 R08: 0000000000000000 R09: 0000000000000000 [ 2241.213976][ T9122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2241.222795][ T9122] R13: 0000000000000001 R14: 00007fdbc6576080 R15: 00007ffc077082a8 [ 2241.231632][ T9122] [ 2241.308659][ T9122] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2243.207443][ T9159] syz.6.8518: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 2243.316777][ T9159] CPU: 1 UID: 0 PID: 9159 Comm: syz.6.8518 Not tainted 6.13.0-rc4-syzkaller #0 [ 2243.326721][ T9159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2243.337830][ T9159] Call Trace: [ 2243.341478][ T9159] [ 2243.344751][ T9159] dump_stack_lvl+0x16c/0x1f0 [ 2243.350000][ T9159] warn_alloc+0x24d/0x3a0 [ 2243.354853][ T9159] ? __pfx_warn_alloc+0x10/0x10 [ 2243.360257][ T9159] ? __pfx_mark_lock+0x10/0x10 [ 2243.365578][ T9159] ? lock_acquire.part.0+0x11b/0x380 [ 2243.371468][ T9159] __vmalloc_node_range_noprof+0x10df/0x1530 [ 2243.378110][ T9159] ? rcu_is_watching+0x12/0xc0 [ 2243.383409][ T9159] ? trace_contention_end+0xee/0x140 [ 2243.389285][ T9159] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2243.395188][ T9159] ? dvb_demux_do_ioctl+0x496/0x1340 [ 2243.401113][ T9159] ? __pfx___mutex_lock+0x10/0x10 [ 2243.406730][ T9159] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 2243.413856][ T9159] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 2243.420410][ T9159] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2243.426309][ T9159] vmalloc_noprof+0x6b/0x90 [ 2243.431335][ T9159] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 2243.437221][ T9159] dvb_demux_do_ioctl+0x54d/0x1340 [ 2243.442926][ T9159] dvb_usercopy+0x165/0x320 [ 2243.447971][ T9159] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 2243.454152][ T9159] ? __pfx_dvb_usercopy+0x10/0x10 [ 2243.459743][ T9159] ? __pfx_lock_release+0x10/0x10 [ 2243.465341][ T9159] ? __fget_files+0x206/0x3a0 [ 2243.470552][ T9159] dvb_demux_ioctl+0x29/0x40 [ 2243.475707][ T9159] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 2243.481603][ T9159] __x64_sys_ioctl+0x190/0x200 [ 2243.486909][ T9159] do_syscall_64+0xcd/0x250 [ 2243.491934][ T9159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2243.498498][ T9159] RIP: 0033:0x7fdbc6385d29 [ 2243.503500][ T9159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2243.525135][ T9159] RSP: 002b:00007fdbc41d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2243.534461][ T9159] RAX: ffffffffffffffda RBX: 00007fdbc6576080 RCX: 00007fdbc6385d29 [ 2243.543311][ T9159] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 2243.552144][ T9159] RBP: 00007fdbc6401aa8 R08: 0000000000000000 R09: 0000000000000000 [ 2243.560974][ T9159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2243.569821][ T9159] R13: 0000000000000000 R14: 00007fdbc6576080 R15: 00007ffc077082a8 [ 2243.578689][ T9159] [ 2243.637331][ T9159] Mem-Info: [ 2243.641276][ T9159] active_anon:56088 inactive_anon:23 isolated_anon:0 [ 2243.641276][ T9159] active_file:9352 inactive_file:54023 isolated_file:0 [ 2243.641276][ T9159] unevictable:768 dirty:1296 writeback:0 [ 2243.641276][ T9159] slab_reclaimable:12808 slab_unreclaimable:120449 [ 2243.641276][ T9159] mapped:25801 shmem:34678 pagetables:1099 [ 2243.641276][ T9159] sec_pagetables:0 bounce:0 [ 2243.641276][ T9159] kernel_misc_reclaimable:0 [ 2243.641276][ T9159] free:1238364 free_pcp:11359 free_cma:0 [ 2243.693247][ T9159] Node 0 active_anon:221352kB inactive_anon:92kB active_file:37408kB inactive_file:216020kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:103204kB dirty:5180kB writeback:0kB shmem:136276kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:2048kB writeback_tmp:0kB kernel_stack:12812kB pagetables:4396kB sec_pagetables:0kB all_unreclaimable? no [ 2243.735649][ T9159] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 2243.773221][ T9159] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 2243.808612][ T9159] lowmem_reserve[]: 0 2465 2466 0 0 [ 2243.814505][ T9159] Node 0 DMA32 free:1035444kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:217312kB inactive_anon:92kB active_file:37408kB inactive_file:215192kB unevictable:1536kB writepending:5180kB present:3129332kB managed:2551336kB mlocked:0kB bounce:0kB free_pcp:38992kB local_pcp:19364kB free_cma:0kB [ 2243.851625][ T9159] lowmem_reserve[]: 0 0 0 0 0 [ 2243.857440][ T9159] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:828kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 2243.914839][ T9159] lowmem_reserve[]: 0 0 0 0 0 [ 2243.926814][ T9159] Node 1 Normal free:3908368kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:4608kB local_pcp:4164kB free_cma:0kB [ 2244.027101][ T9159] lowmem_reserve[]: 0 0 0 0 0 [ 2244.032429][ T9159] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 2244.076879][ T9159] Node 0 DMA32: 8486*4kB (UME) 796*8kB (UME) 342*16kB (UME) 94*32kB (UME) 1890*64kB (UME) 1156*128kB (UME) 542*256kB (UME) 267*512kB (UME) 162*1024kB (UM) 7*2048kB (UME) 65*4096kB (UME) = 1039640kB [ 2244.139088][ T9159] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 2244.176777][ T9159] Node 1 Normal: 248*4kB (UME) 60*8kB (UME) 41*16kB (UME) 214*32kB (UME) 94*64kB (UME) 31*128kB (UME) 19*256kB (UME) 9*512kB (UME) 5*1024kB (U) 6*2048kB (UME) 943*4096kB (M) = 3908368kB [ 2244.270144][ T9159] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2244.287653][ T9159] Node 0 hugepages_total=4 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 2244.355851][ T9159] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 2244.366787][ T9159] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 2244.377776][ T9159] 89403 total pagecache pages [ 2244.382978][ T9159] 50 pages in swap cache [ 2244.388360][ T9159] Free swap = 122240kB [ 2244.393018][ T9159] Total swap = 124996kB [ 2244.397700][ T9159] 2097051 pages RAM [ 2244.402046][ T9159] 0 pages HighMem/MovableOnly [ 2244.407854][ T9159] 427367 pages reserved [ 2244.412656][ T9159] 0 pages cma reserved [ 2244.615816][ T9169] Line length is too long: Should be less than 4094 [ 2244.828594][ T9171] Process accounting resumed [ 2244.874355][ T9164] netlink: 330 bytes leftover after parsing attributes in process `syz.5.8519'. [ 2247.051538][ T9204] netlink: 342 bytes leftover after parsing attributes in process `syz.9.8529'. [ 2249.795907][ T9273] Invalid ELF header magic: != ELF [ 2250.559015][ T9276] netlink: 28 bytes leftover after parsing attributes in process `syz.9.8546'. [ 2250.858667][ T9276] geneve1: entered allmulticast mode [ 2252.122138][ T9317] ALSA: mixer_oss: invalid OSS volume '' [ 2253.879708][ T9342] netlink: 'syz.5.8561': attribute type 7 has an invalid length. [ 2254.085462][ T9344] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8562'. [ 2254.430617][ T9348] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8563'. [ 2255.670982][ T9366] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 2257.098047][ T9399] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 2257.916914][ T9421] FAULT_INJECTION: forcing a failure. [ 2257.916914][ T9421] name failslab, interval 1, probability 0, space 0, times 0 [ 2257.964551][ T9421] CPU: 1 UID: 0 PID: 9421 Comm: syz.5.8577 Not tainted 6.13.0-rc4-syzkaller #0 [ 2257.974526][ T9421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2257.985644][ T9421] Call Trace: [ 2257.989295][ T9421] [ 2257.992554][ T9421] dump_stack_lvl+0x16c/0x1f0 [ 2257.997747][ T9421] should_fail_ex+0x497/0x5b0 [ 2258.002933][ T9421] ? fs_reclaim_acquire+0xae/0x150 [ 2258.008654][ T9421] should_failslab+0xc2/0x120 [ 2258.013845][ T9421] __kmalloc_noprof+0xce/0x4f0 [ 2258.019131][ T9421] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2258.025367][ T9421] ? tomoyo_realpath_from_path+0xbf/0x710 [ 2258.031704][ T9421] tomoyo_realpath_from_path+0xbf/0x710 [ 2258.037844][ T9421] ? tomoyo_path2_perm+0x298/0x760 [ 2258.043526][ T9421] tomoyo_path2_perm+0x2a6/0x760 [ 2258.049005][ T9421] ? tomoyo_path2_perm+0x298/0x760 [ 2258.054700][ T9421] ? __pfx_tomoyo_path2_perm+0x10/0x10 [ 2258.060769][ T9421] ? hlock_class+0x4e/0x130 [ 2258.065786][ T9421] ? current_check_refer_path+0x2be/0x710 [ 2258.072177][ T9421] ? __pfx_current_check_refer_path+0x10/0x10 [ 2258.078924][ T9421] tomoyo_path_rename+0x102/0x1b0 [ 2258.084519][ T9421] ? __pfx_tomoyo_path_rename+0x10/0x10 [ 2258.090682][ T9421] ? __d_lookup+0x266/0x4a0 [ 2258.095692][ T9421] ? d_lookup+0xe9/0x180 [ 2258.100435][ T9421] security_path_rename+0x18e/0x3c0 [ 2258.106190][ T9421] do_renameat2+0x7a0/0xdd0 [ 2258.111197][ T9421] ? __pfx_do_renameat2+0x10/0x10 [ 2258.116766][ T9421] ? lock_acquire+0x2f/0xb0 [ 2258.121753][ T9421] ? __virt_addr_valid+0x5e/0x590 [ 2258.127322][ T9421] ? __phys_addr_symbol+0x30/0x80 [ 2258.132929][ T9421] ? getname_flags.part.0+0x1c5/0x550 [ 2258.138919][ T9421] __x64_sys_rename+0x7d/0xa0 [ 2258.144136][ T9421] do_syscall_64+0xcd/0x250 [ 2258.149132][ T9421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2258.155656][ T9421] RIP: 0033:0x7fa838d85d29 [ 2258.160543][ T9421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2258.182150][ T9421] RSP: 002b:00007fa839b69038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 2258.191475][ T9421] RAX: ffffffffffffffda RBX: 00007fa838f76080 RCX: 00007fa838d85d29 [ 2258.200305][ T9421] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000020000080 [ 2258.209102][ T9421] RBP: 00007fa839b69090 R08: 0000000000000000 R09: 0000000000000000 [ 2258.217919][ T9421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2258.226714][ T9421] R13: 0000000000000000 R14: 00007fa838f76080 R15: 00007ffdd2d7f978 [ 2258.235542][ T9421] [ 2258.294215][ T9406] netlink: 28 bytes leftover after parsing attributes in process `syz.6.8574'. [ 2258.386993][ T9421] ERROR: Out of memory at tomoyo_realpath_from_path. [ 2258.462006][ T9417] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(1.0.4294967293), cmd(3) [ 2258.965042][ T9406] bond0: (slave bond_slave_1): Releasing backup interface [ 2259.448178][ T9439] snd_aloop snd_aloop.0: Parsing timer source '' failed with -22 [ 2260.569604][ T9459] netlink: 334 bytes leftover after parsing attributes in process `syz.5.8589'. [ 2260.682026][ T9459] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8589'. [ 2260.744308][ T9459] netlink: 4 bytes leftover after parsing attributes in process `syz.5.8589'. [ 2260.863195][ T9463] netlink: 4 bytes leftover after parsing attributes in process `syz.6.8590'. [ 2261.310778][ T9469] netlink: 8 bytes leftover after parsing attributes in process `syz.5.8593'. [ 2263.879406][ T9518] can0: slcan on ptm0. [ 2264.146155][ T9517] can0 (unregistered): slcan off ptm0. [ 2265.052717][ T9552] netlink: 334 bytes leftover after parsing attributes in process `syz.8.8610'. [ 2266.051715][ T9577] ALSA: mixer_oss: invalid OSS volume '' [ 2269.705918][ T9641] FAULT_INJECTION: forcing a failure. [ 2269.705918][ T9641] name failslab, interval 1, probability 0, space 0, times 0 [ 2269.757198][ T9641] CPU: 1 UID: 0 PID: 9641 Comm: syz.8.8629 Not tainted 6.13.0-rc4-syzkaller #0 [ 2269.767139][ T9641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2269.778298][ T9641] Call Trace: [ 2269.781948][ T9641] [ 2269.785228][ T9641] dump_stack_lvl+0x16c/0x1f0 [ 2269.790452][ T9641] should_fail_ex+0x497/0x5b0 [ 2269.795672][ T9641] ? fs_reclaim_acquire+0xae/0x150 [ 2269.801371][ T9641] should_failslab+0xc2/0x120 [ 2269.806595][ T9641] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 2269.813067][ T9641] ? __alloc_skb+0x2b3/0x380 [ 2269.818207][ T9641] __alloc_skb+0x2b3/0x380 [ 2269.823150][ T9641] ? __pfx___alloc_skb+0x10/0x10 [ 2269.828654][ T9641] ? ip6_mroute_setsockopt+0x12bf/0x25b0 [ 2269.834972][ T9641] ? __pfx_lock_release+0x10/0x10 [ 2269.840570][ T9641] ? do_raw_spin_lock+0x12d/0x2c0 [ 2269.846187][ T9641] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 2269.852181][ T9641] inet6_netconf_notify_devconf+0x87/0x180 [ 2269.858649][ T9641] ip6_mroute_setsockopt+0x12fb/0x25b0 [ 2269.864737][ T9641] ? hlock_class+0x4e/0x130 [ 2269.869770][ T9641] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 2269.876237][ T9641] ? hlock_class+0x4e/0x130 [ 2269.881258][ T9641] ? mark_lock+0xb5/0xc60 [ 2269.886104][ T9641] ? __pfx_mark_lock+0x10/0x10 [ 2269.891431][ T9641] ? __pfx_mark_lock+0x10/0x10 [ 2269.896755][ T9641] ? __pfx___lock_acquire+0x10/0x10 [ 2269.902558][ T9641] ? hlock_class+0x4e/0x130 [ 2269.907588][ T9641] ? __pfx___lock_acquire+0x10/0x10 [ 2269.913381][ T9641] ? __pfx_mark_lock+0x10/0x10 [ 2269.918695][ T9641] ? __lock_acquire+0x15a9/0x3c40 [ 2269.924301][ T9641] ? do_ipv6_setsockopt+0x8f7/0x4660 [ 2269.930190][ T9641] do_ipv6_setsockopt+0x8f7/0x4660 [ 2269.935899][ T9641] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 2269.942081][ T9641] ? __lock_acquire+0xcc5/0x3c40 [ 2269.947590][ T9641] ? hlock_class+0x4e/0x130 [ 2269.952625][ T9641] ? mark_lock+0xb5/0xc60 [ 2269.957459][ T9641] ? aa_label_sk_perm+0x19d/0x5a0 [ 2269.963076][ T9641] ? __pfx_mark_lock+0x10/0x10 [ 2269.968410][ T9641] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 2269.974422][ T9641] ? find_held_lock+0x2d/0x110 [ 2269.979760][ T9641] ? ipv6_setsockopt+0xcb/0x170 [ 2269.985153][ T9641] ipv6_setsockopt+0xcb/0x170 [ 2269.990375][ T9641] rawv6_setsockopt+0xdc/0x700 [ 2269.995676][ T9641] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 2270.001666][ T9641] ? sock_common_setsockopt+0x2e/0xf0 [ 2270.007664][ T9641] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2270.014223][ T9641] do_sock_setsockopt+0x222/0x480 [ 2270.019865][ T9641] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2270.026045][ T9641] ? lock_acquire+0x2f/0xb0 [ 2270.031085][ T9641] __sys_setsockopt+0x1a0/0x230 [ 2270.036602][ T9641] __x64_sys_setsockopt+0xbd/0x160 [ 2270.042304][ T9641] ? do_syscall_64+0x91/0x250 [ 2270.047527][ T9641] ? lockdep_hardirqs_on+0x7c/0x110 [ 2270.053323][ T9641] do_syscall_64+0xcd/0x250 [ 2270.058358][ T9641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2270.064917][ T9641] RIP: 0033:0x7f01b2385d29 [ 2270.069843][ T9641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2270.091610][ T9641] RSP: 002b:00007f01b3193038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2270.100960][ T9641] RAX: ffffffffffffffda RBX: 00007f01b2575fa0 RCX: 00007f01b2385d29 [ 2270.109785][ T9641] RDX: 00000000000000c8 RSI: 0000000000000029 RDI: 0400000000000003 [ 2270.118661][ T9641] RBP: 00007f01b3193090 R08: 0000000000000567 R09: 0000000000000000 [ 2270.127486][ T9641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2270.136313][ T9641] R13: 0000000000000000 R14: 00007f01b2575fa0 R15: 00007ffe5be71a88 [ 2270.145162][ T9641] [ 2271.369971][ T9673] netlink: 20 bytes leftover after parsing attributes in process `syz.9.8641'. [ 2271.418253][ T9673] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2271.577430][ T9673] sctp: [Deprecated]: syz.9.8641 (pid 9673) Use of struct sctp_assoc_value in delayed_ack socket option. [ 2271.577430][ T9673] Use struct sctp_sack_info instead [ 2271.771101][ T9681] netlink: zone id is out of range [ 2272.025871][ T9688] tipc: Started in network mode [ 2272.035812][ T9688] tipc: Node identity ffffffff, cluster identity 4711 [ 2272.063688][ T9688] tipc: Node number set to 4294967295 [ 2273.378289][ T9713] netlink: 334 bytes leftover after parsing attributes in process `syz.6.8653'. [ 2273.783100][ T9711] Process accounting resumed [ 2273.840137][ T9721] sd 0:0:1:0: PR command failed: 1026 [ 2273.867718][ T9721] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 2273.875214][ T9721] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 2277.514289][ T9768] netlink: 28 bytes leftover after parsing attributes in process `syz.5.8668'. [ 2278.718084][ T9795] [ 2278.720774][ T9795] ====================================================== [ 2278.728536][ T9795] WARNING: possible circular locking dependency detected [ 2278.736310][ T9795] 6.13.0-rc4-syzkaller #0 Not tainted [ 2278.742268][ T9795] ------------------------------------------------------ [ 2278.750041][ T9795] syz.5.8679/9795 is trying to acquire lock: [ 2278.756657][ T9795] ffff888024e185d8 (&q->sysfs_lock){+.+.}-{4:4}, at: queue_attr_store+0xe2/0x170 [ 2278.766805][ T9795] [ 2278.766805][ T9795] but task is already holding lock: [ 2278.774946][ T9795] ffff888024e180a8 (&q->q_usage_counter(io)){++++}-{0:0}, at: queue_attr_store+0xd8/0x170 [ 2278.786062][ T9795] [ 2278.786062][ T9795] which lock already depends on the new lock. [ 2278.786062][ T9795] [ 2278.797548][ T9795] [ 2278.797548][ T9795] the existing dependency chain (in reverse order) is: [ 2278.807602][ T9795] [ 2278.807602][ T9795] -> #4 (&q->q_usage_counter(io)){++++}-{0:0}: [ 2278.816837][ T9795] __submit_bio+0x49c/0x540 [ 2278.822410][ T9795] submit_bio_noacct_nocheck+0x892/0xd70 [ 2278.829237][ T9795] submit_bio_noacct+0x93a/0x1e20 [ 2278.835412][ T9795] mpage_readahead+0x41d/0x590 [ 2278.841397][ T9795] read_pages+0x1a8/0xdc0 [ 2278.846779][ T9795] page_cache_ra_unbounded+0x3dc/0x750 [ 2278.853401][ T9795] page_cache_ra_order+0x8f2/0xc80 [ 2278.859645][ T9795] page_cache_sync_ra+0x4b4/0x9c0 [ 2278.865770][ T9795] filemap_get_pages+0xd7b/0x1be0 [ 2278.871926][ T9795] filemap_read+0x3ca/0xd70 [ 2278.877503][ T9795] blkdev_read_iter+0x187/0x480 [ 2278.883487][ T9795] vfs_read+0x87f/0xbe0 [ 2278.888662][ T9795] ksys_read+0x12b/0x250 [ 2278.893936][ T9795] do_syscall_64+0xcd/0x250 [ 2278.899523][ T9795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2278.906654][ T9795] [ 2278.906654][ T9795] -> #3 (mapping.invalidate_lock#2){++++}-{4:4}: [ 2278.916067][ T9795] down_read+0x9a/0x330 [ 2278.921259][ T9795] filemap_fault+0x2e0/0x2820 [ 2278.927025][ T9795] __do_fault+0x10a/0x490 [ 2278.932541][ T9795] do_pte_missing+0xebd/0x3e00 [ 2278.938417][ T9795] __handle_mm_fault+0x103c/0x2a40 [ 2278.944643][ T9795] handle_mm_fault+0x3fa/0xaa0 [ 2278.950498][ T9795] __get_user_pages+0x8d9/0x3b50 [ 2278.956635][ T9795] populate_vma_page_range+0x27f/0x3a0 [ 2278.963252][ T9795] __mm_populate+0x1d6/0x380 [ 2278.968934][ T9795] vm_mmap_pgoff+0x293/0x360 [ 2278.974639][ T9795] ksys_mmap_pgoff+0x32c/0x5c0 [ 2278.980530][ T9795] __x64_sys_mmap+0x125/0x190 [ 2278.986303][ T9795] do_syscall_64+0xcd/0x250 [ 2278.991877][ T9795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2278.998964][ T9795] [ 2278.998964][ T9795] -> #2 (&mm->mmap_lock){++++}-{4:4}: [ 2279.007304][ T9795] __might_fault+0x11b/0x190 [ 2279.013024][ T9795] _copy_from_user+0x29/0xd0 [ 2279.018691][ T9795] __blk_trace_setup+0xa8/0x180 [ 2279.024657][ T9795] blk_trace_setup+0x47/0x70 [ 2279.030331][ T9795] sg_ioctl+0x7a3/0x26b0 [ 2279.035630][ T9795] __x64_sys_ioctl+0x190/0x200 [ 2279.041466][ T9795] do_syscall_64+0xcd/0x250 [ 2279.047035][ T9795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2279.054136][ T9795] [ 2279.054136][ T9795] -> #1 (&q->debugfs_mutex){+.+.}-{4:4}: [ 2279.062790][ T9795] __mutex_lock+0x19b/0xa60 [ 2279.068369][ T9795] blk_register_queue+0x13c/0x4f0 [ 2279.074501][ T9795] add_disk_fwnode+0x785/0x1300 [ 2279.080445][ T9795] brd_alloc.isra.0+0x50a/0x7c0 [ 2279.086408][ T9795] brd_init+0x12b/0x1d0 [ 2279.091572][ T9795] do_one_initcall+0x128/0x630 [ 2279.097417][ T9795] kernel_init_freeable+0x58f/0x8b0 [ 2279.103756][ T9795] kernel_init+0x1c/0x2b0 [ 2279.109135][ T9795] ret_from_fork+0x45/0x80 [ 2279.114606][ T9795] ret_from_fork_asm+0x1a/0x30 [ 2279.120455][ T9795] [ 2279.120455][ T9795] -> #0 (&q->sysfs_lock){+.+.}-{4:4}: [ 2279.128809][ T9795] __lock_acquire+0x249e/0x3c40 [ 2279.134760][ T9795] lock_acquire.part.0+0x11b/0x380 [ 2279.141080][ T9795] __mutex_lock+0x19b/0xa60 [ 2279.146635][ T9795] queue_attr_store+0xe2/0x170 [ 2279.152500][ T9795] sysfs_kf_write+0x117/0x170 [ 2279.158458][ T9795] kernfs_fop_write_iter+0x33d/0x500 [ 2279.164882][ T9795] vfs_write+0x5ae/0x1150 [ 2279.170273][ T9795] ksys_write+0x12b/0x250 [ 2279.175634][ T9795] do_syscall_64+0xcd/0x250 [ 2279.181207][ T9795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2279.188322][ T9795] [ 2279.188322][ T9795] other info that might help us debug this: [ 2279.188322][ T9795] [ 2279.199613][ T9795] Chain exists of: [ 2279.199613][ T9795] &q->sysfs_lock --> mapping.invalidate_lock#2 --> &q->q_usage_counter(io) [ 2279.199613][ T9795] [ 2279.215627][ T9795] Possible unsafe locking scenario: [ 2279.215627][ T9795] [ 2279.223833][ T9795] CPU0 CPU1 [ 2279.229768][ T9795] ---- ---- [ 2279.235696][ T9795] lock(&q->q_usage_counter(io)); [ 2279.241334][ T9795] lock(mapping.invalidate_lock#2); [ 2279.249978][ T9795] lock(&q->q_usage_counter(io)); [ 2279.258419][ T9795] lock(&q->sysfs_lock); [ 2279.263203][ T9795] [ 2279.263203][ T9795] *** DEADLOCK *** [ 2279.263203][ T9795] [ 2279.272180][ T9795] 6 locks held by syz.5.8679/9795: [ 2279.277862][ T9795] #0: ffff8880a4d23cf8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 2279.287934][ T9795] #1: ffff88807ed32420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 2279.297956][ T9795] #2: ffff888028c6cc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 2279.308737][ T9795] #3: ffff8880248a9878 (kn->active#249){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 2279.319930][ T9795] #4: ffff888024e180a8 (&q->q_usage_counter(io)){++++}-{0:0}, at: queue_attr_store+0xd8/0x170 [ 2279.331407][ T9795] #5: ffff888024e180e0 (&q->q_usage_counter(queue)#53){+.+.}-{0:0}, at: queue_attr_store+0xd8/0x170 [ 2279.343426][ T9795] [ 2279.343426][ T9795] stack backtrace: [ 2279.349917][ T9795] CPU: 0 UID: 0 PID: 9795 Comm: syz.5.8679 Not tainted 6.13.0-rc4-syzkaller #0 [ 2279.359812][ T9795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 2279.370912][ T9795] Call Trace: [ 2279.374550][ T9795] [ 2279.377805][ T9795] dump_stack_lvl+0x116/0x1f0 [ 2279.383018][ T9795] print_circular_bug+0x41c/0x610 [ 2279.388663][ T9795] check_noncircular+0x31a/0x400 [ 2279.394188][ T9795] ? __pfx_check_noncircular+0x10/0x10 [ 2279.400277][ T9795] ? save_trace+0x290/0xa10 [ 2279.405268][ T9795] ? add_lock_to_list+0x17d/0x390 [ 2279.410849][ T9795] __lock_acquire+0x249e/0x3c40 [ 2279.416229][ T9795] ? __pfx___lock_acquire+0x10/0x10 [ 2279.421987][ T9795] ? __pfx___lock_acquire+0x10/0x10 [ 2279.427759][ T9795] lock_acquire.part.0+0x11b/0x380 [ 2279.433450][ T9795] ? queue_attr_store+0xe2/0x170 [ 2279.438935][ T9795] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2279.445192][ T9795] ? rcu_is_watching+0x12/0xc0 [ 2279.450481][ T9795] ? trace_lock_acquire+0x14e/0x1f0 [ 2279.456236][ T9795] ? find_held_lock+0x2d/0x110 [ 2279.461527][ T9795] ? queue_attr_store+0xe2/0x170 [ 2279.466994][ T9795] ? lock_acquire+0x2f/0xb0 [ 2279.471978][ T9795] ? queue_attr_store+0xe2/0x170 [ 2279.477451][ T9795] __mutex_lock+0x19b/0xa60 [ 2279.482455][ T9795] ? queue_attr_store+0xe2/0x170 [ 2279.487907][ T9795] ? mark_held_locks+0x9f/0xe0 [ 2279.493237][ T9795] ? queue_attr_store+0xe2/0x170 [ 2279.498704][ T9795] ? __pfx___mutex_lock+0x10/0x10 [ 2279.504374][ T9795] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 2279.510809][ T9795] ? blk_mq_freeze_queue_wait+0xaf/0x190 [ 2279.517029][ T9795] ? __pfx_autoremove_wake_function+0x10/0x10 [ 2279.523757][ T9795] ? queue_attr_store+0xd8/0x170 [ 2279.529233][ T9795] ? queue_attr_store+0xe2/0x170 [ 2279.534746][ T9795] queue_attr_store+0xe2/0x170 [ 2279.540035][ T9795] ? __pfx_queue_attr_store+0x10/0x10 [ 2279.545968][ T9795] sysfs_kf_write+0x117/0x170 [ 2279.551145][ T9795] kernfs_fop_write_iter+0x33d/0x500 [ 2279.556983][ T9795] ? __pfx_sysfs_kf_write+0x10/0x10 [ 2279.562730][ T9795] vfs_write+0x5ae/0x1150 [ 2279.567525][ T9795] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 2279.573974][ T9795] ? __pfx___mutex_lock+0x10/0x10 [ 2279.579557][ T9795] ? __pfx_vfs_write+0x10/0x10 [ 2279.584877][ T9795] ksys_write+0x12b/0x250 [ 2279.589723][ T9795] ? __pfx_ksys_write+0x10/0x10 [ 2279.595106][ T9795] do_syscall_64+0xcd/0x250 [ 2279.600101][ T9795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2279.606635][ T9795] RIP: 0033:0x7fa838d85d29 [ 2279.611502][ T9795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2279.633093][ T9795] RSP: 002b:00007fa839b8a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2279.642367][ T9795] RAX: ffffffffffffffda RBX: 00007fa838f75fa0 RCX: 00007fa838d85d29 [ 2279.651178][ T9795] RDX: 0000000000000008 RSI: 0000000020000000 RDI: 0000000000000004 [ 2279.660031][ T9795] RBP: 00007fa838e01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 2279.668826][ T9795] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2279.677634][ T9795] R13: 0000000000000000 R14: 00007fa838f75fa0 R15: 00007ffdd2d7f978 [ 2279.686451][ T9795] [ 2279.715485][ T9801] base_sock_release(ffff888043376600) sk=ffff88807cc65000