last executing test programs: 17m55.248459313s ago: executing program 0 (id=2667): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec27\x00', 0x80200, 0x0) ioctl$auto_CEC_S_MODE(r0, 0x40046109, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x3ff) unshare$auto(0x40000080) r1 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r1, 0x1, 0x1a, 0x0, 0x0) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01032bbc700002dcdf2526000000cc6fe5909d08246ac3f43afb6ef3d58d3a0b6c"], 0x14}, 0x1, 0x0, 0x0, 0x8086}, 0x4010) r4 = prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x6, 0x0, 0x6, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(r7, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000000240)={0x18, r8, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44}, 0x80000) r9 = geteuid() setreuid$auto(r9, 0x0) statx$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x4, 0x2, &(0x7f0000000480)={0x5, 0xf, 0x7, 0x7, r9, 0xffffffffffffffff, 0x7, 0xa1c9, 0x8, 0x1ff, 0x2, 0x6, {0x9, 0x80}, {0x2, 0x1}, {0x9, 0xfffffc00}, {0x5, 0x2}, 0x11, 0xdfa, 0x7, 0x2, 0x4, 0x855a, 0x7f, 0xfffffffffffffff8, 0x4, 0x0, 0x87, 0x5, [0x8, 0x2d52, 0x8, 0x9, 0x0, 0x9, 0xfffffffffffdfffc, 0x3, 0x3391]}) sendmsg$auto_TIPC_NL_PUBL_GET(r4, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x818}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x3c, r8, 0x400, 0x70bd26, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@nested={0x24, 0x2c, 0x0, 0x1, [@typed={0x8, 0x36, 0x0, 0x0, @uid=r9}, @nested={0x4, 0x4b}, @typed={0x14, 0xe7, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @broadcast}}]}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20024011}, 0x0) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x303, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x8050}, 0x4000004) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r4, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r6, 0x400, 0x70bd27, 0x25dfdbfe, {}, [@BATADV_ATTR_BANDWIDTH_DOWN={0x8, 0x1c, 0x7}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x50) r10 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r10, 0x0, 0x20) r11 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001240)='/proc/thread-self/fail-nth\x00', 0xa0302, 0x0) writev$auto(r11, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40009, 0xbf, 0x9b72, r11, 0x28000) 17m52.149322736s ago: executing program 0 (id=2673): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) r1 = prctl$auto_PR_SET_MDWE(0x41, 0x3af, 0xffffffffffffffff, 0x4, 0x8) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(0x3, 0x4008550c, 0x1) mq_notify$auto(0x3, &(0x7f0000000100)={@sival_int=0x9, @inferred, 0x2, @_sigev_thread={0x0, 0x0}}) r2 = memfd_create$auto(&(0x7f0000000000)='\xa0\x00', 0x9) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) r5 = socket(0x10, 0x2, 0xf) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r4, 0x9, r5}, 0x210) bpf$auto(0x1, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x702955be, 0x5c, 0x4, 0x9, 0x80, 0xe4, 0xfffff800, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x2, 0xffffffffffffffff, 0x7, 0x9, 0x4, 0x7, 0x10001, 0x0, 0x8001, @attach_prog_fd, 0x7e, 0x4, 0x1, 0x5, 0x3}, 0x5) sendmsg$auto_NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="000427bd7000fddbdf2502ff9c4d61db3ab1cfd30000"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) sendmsg$auto_NFC_CMD_DEV_UP(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x24, r3, 0x300, 0x70bd29, 0x25dfdbfb, {}, [@NFC_ATTR_SE_INDEX={0x8, 0x15, 0x2}, @NFC_ATTR_SE_INDEX={0x8, 0x15, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x800) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r6, &(0x7f0000000200)=""/238, 0xee) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) 17m50.848180522s ago: executing program 0 (id=2678): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) write$auto(r0, 0x0, 0xeffd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) ioctl$auto(0x3, 0x5411, 0x38) ioctl$auto(0x3, 0x402c542b, 0x38) socket(0xa, 0x3, 0x100) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b0026bd7000fddbdf0300001f040008000c000380050014800900000012000100898771f1c19f177904859082884500000400028000"], 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0x20048810) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/module/hid_magicmouse/parameters/scroll_speed\x00', 0x1011c2, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) acct$auto(&(0x7f0000000040)='\x00') acct$auto(0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xfffffffc}, 0x6, 0x0) write$auto(0x3, 0x0, 0x5dc) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range$auto(0x2, 0xa, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0xb3e, 0x8, 0x6) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0x7980, 0x6}, 0x2, 0x0, 0x0, 0x8) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/tty15\x00', 0x20000, 0x0) mmap$auto(0x4, 0x2020009, 0xa, 0xeb1, r2, 0x7ffd) getrandom$auto(0x0, 0x6000000, 0x3) 17m45.585869896s ago: executing program 0 (id=2687): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r2 = socket(0x23, 0x5, 0x0) connect$auto(r2, &(0x7f00000018c0)=@phonet={0x23, 0x65, 0xd3, 0x5}, 0x55) r3 = socket(0x2, 0x3, 0x100) bind$auto(r3, &(0x7f0000000080)=@in={0x2, 0x4e23, @multicast2}, 0x7b) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x142, 0x1c7) move_mount$auto(r4, 0x0, r1, 0x0, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video2\x00', 0x80000, 0x0) mmap$auto(0x0, 0xff, 0x3, 0x8000000000018, r0, 0x8000) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x200000000101, 0x7fd, 0x200004) socket(0x1e, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000380)={0x8, 0x6, 0x1ff, 0x7, 0x8, 0x4909b6f8, 0x1ffdf, 0x9, 0x200003, 0x2, 0xa121, 0x3, 0x0, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0xfffffffffffffffd, 0x50100000000000, 0x6, 0x2000, 0x0, 0x6, 0x70624ce7, 0x0, 0x94cf, 0xfffffffffffffffd, 0x0, 0x80000, 0x5, 0x7ff, 0xffffffffffffbfff, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0xc, 0xa38, 0x9, 0x3, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x8000], "0a5d23e26642a40691a58432f805dd2b8efa0b2972bba087ce06d30bd77b00bed80631cedfaff54298f5c1b2a367ca74eef2196309507e1da5a8bfae1fb6a6ef992854420892c7af3308702a269f3599728f6d326501d9d99b4bbc7845da6149463bb21b6fe386dbb883ddfd5b3e179d0439e0da1b46a276ea893935d0582a51e219b79309549e893871b9b5d94f62cf07a4f1df1c19bbc829ff44f82be5f0b5253f649f556d833465d8ab242c8076a57b9d0da565b77d7b0485c4"}, 0x1fe, 0xe) sendmsg$auto_OVS_VPORT_CMD_DEL(r5, 0x0, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x87, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) setdomainname$auto(0x0, 0x551) mq_unlink$auto(&(0x7f0000000040)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') close_range$auto(0x2, 0x8, 0x0) setfsuid$auto(0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) 17m39.304102026s ago: executing program 0 (id=2698): socket(0x10, 0x3, 0x6) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() r1 = wait4$auto(r0, 0x0, 0x80000001, 0x0) ptrace$auto_PTRACE_CONT(0x7, r1, 0x0, 0x4) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) getsockopt$auto(0x6, 0x11b, 0x8, 0xfffffffffffffffd, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) r3 = open(&(0x7f0000000040)='./file0\x00', 0x48841, 0x8) ioctl$auto(r3, 0x0, 0xffffffffffffffff) 17m37.766385056s ago: executing program 0 (id=2701): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ipvlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003e00), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="09032bbd7000fedbdf250b00000008000100", @ANYRES32=r1, @ANYBLOB="6ff1071825655994b7aa0824558af5ffe802dac8a89af80f2f3b43fbcc559046acda091d1685bb2228775404e403e49a94447b8cf7c8eafe5c58d3f8eded8d620922678b0688f815c83ce50d6138191629b289d1845b3ed06aa7bc6fecb02e1ab091c373f7eee11d48ea41d1e9037fa7308faef3f16ad1008c206ff83be502a44302e84ff3198724160f6f127b00a2ef8681c598eac49bfb23854335c6a5506bc65cfba2f6b120f0efd13a8d1e7a68be0d3f4196297ef1eac4f97c8609789f6ef18873356aaa9ac6fbb3317115a0de6fce27eb991dc72e866ba981b6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000100), r0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="00020000fdb740579da3091dbecee46ed5d91168cdf48be8f2e3b5e1f82a6458cb8dcfc9c5f0494d7a", @ANYRES16=r3, @ANYBLOB="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"], 0x200}, 0x1, 0x0, 0x0, 0xc800}, 0x8000) r4 = openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/tracing_thresh\x00', 0x2, 0x0) write$auto_tracing_thresh_fops_trace(r4, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = prctl$auto(0xc8, 0x2, 0x9, 0xffffffffffff8001, 0xbef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) futex$auto(0x0, 0x8d, 0x0, 0x0, 0x0, 0x100) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) ioctl$auto_VHOST_GET_BACKEND_FEATURES(r5, 0x8008af26, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.1/usb12/12-0:1.0/usb12-port4/location\x00', 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/overlay/parameters/check_copy_up\x00', 0x0, 0x0) cachestat$auto(r6, &(0x7f0000000140)={0x1, 0x7}, 0x0, 0xc) 17m21.895206818s ago: executing program 32 (id=2701): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ipvlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003e00), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_NAPI_GET2(r0, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000003f00)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="09032bbd7000fedbdf250b00000008000100", @ANYRES32=r1, @ANYBLOB="6ff1071825655994b7aa0824558af5ffe802dac8a89af80f2f3b43fbcc559046acda091d1685bb2228775404e403e49a94447b8cf7c8eafe5c58d3f8eded8d620922678b0688f815c83ce50d6138191629b289d1845b3ed06aa7bc6fecb02e1ab091c373f7eee11d48ea41d1e9037fa7308faef3f16ad1008c206ff83be502a44302e84ff3198724160f6f127b00a2ef8681c598eac49bfb23854335c6a5506bc65cfba2f6b120f0efd13a8d1e7a68be0d3f4196297ef1eac4f97c8609789f6ef18873356aaa9ac6fbb3317115a0de6fce27eb991dc72e866ba981b6"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000100), r0) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TRIP(r0, &(0x7f00000003c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="00020000fdb740579da3091dbecee46ed5d91168cdf48be8f2e3b5e1f82a6458cb8dcfc9c5f0494d7a", @ANYRES16=r3, @ANYBLOB="00042cbd7000fedbdf2502000000cc010180450120802d31b0281517fe8c5fd04d8ee9c6121dca52a92dcdbd94ffbb68398d6e78867fc1879bd304001000490006002f7379732f646576696365732f706c6174666f726d2f766863695f6863642e312f75736231322f31322d303a312e302f75736231322d706f7274342f6c6f636174696f6e00000000a57f69a9d0fa81d24344bb4716451362328bd283ca3a30c862d3c360d456f79e851813d8a21c07a6856d2c8a863f3971c9a8d1ced4461e335d9cf84d727282e09812444df51471d7950d1b6f2fef7fefab15e7b5d0ce6a1e254d53f0d1626ed6f3c415e3cc0aba0446305c7f4a6aa458d8e235d825498f35572de01483f58cf17eeed34432543b75e705fe91a2ea0bb15367f755d92f340427eaa44f2e2c3a53f5c6a46795f965528258d771ff1cea40a625197c55baffac86a5b075df6029c4f8baca1e9adfdfa35e0baba3a000000008004a00f000000076005580fe33f0bced63fedacac388bbee9c98c5fb31a733af2a79cafa870b45dce605e4f435dadd73e1173cdd15c0d24f52040be73628578e813b6bec77365f41b59330cf3cd823a569d84475180ee8c90c5431a9120c93cd4b8876ad66a2ef1ddbb96de91ba973b0dd541b8e9dce37455a040049800000080016001c7a0000080010000200000008000c00070000000800110004000000"], 0x200}, 0x1, 0x0, 0x0, 0xc800}, 0x8000) r4 = openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/tracing_thresh\x00', 0x2, 0x0) write$auto_tracing_thresh_fops_trace(r4, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r5 = prctl$auto(0xc8, 0x2, 0x9, 0xffffffffffff8001, 0xbef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) futex$auto(0x0, 0x8d, 0x0, 0x0, 0x0, 0x100) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) ioctl$auto_VHOST_GET_BACKEND_FEATURES(r5, 0x8008af26, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/platform/vhci_hcd.1/usb12/12-0:1.0/usb12-port4/location\x00', 0x800, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/overlay/parameters/check_copy_up\x00', 0x0, 0x0) cachestat$auto(r6, &(0x7f0000000140)={0x1, 0x7}, 0x0, 0xc) 7m6.053718428s ago: executing program 2 (id=5330): socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, 0x0, 0xa3) open(&(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x103040, 0xd1) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x9, 0x101, 0xffffffff, &(0x7f0000000140)=0x401) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) lseek$auto(0x0, 0x57, 0x1) getdents$auto(r0, 0x0, 0xffffffff) select$auto(0x80000000, &(0x7f0000000000)={[0x76d1, 0x2, 0x1, 0x8, 0x7, 0x9, 0x2, 0x5, 0xff, 0xff, 0x7, 0x7, 0x1ff, 0xff, 0x7fff, 0xb]}, &(0x7f0000000280)={[0x7e, 0x0, 0x400, 0x7fff, 0x3, 0xd4cb, 0xfffffffffffffffb, 0x2, 0x4, 0x5, 0x971, 0x100000000, 0x3, 0x4, 0x30f8048b, 0x7ff]}, &(0x7f0000000300)={[0x40, 0x3d1e, 0x7, 0x401, 0x2, 0x7dd5, 0x0, 0x0, 0x4, 0xa, 0x4, 0x5, 0x6bfd, 0x78d, 0x9, 0x4]}, &(0x7f0000000080)={0x9, 0xfffffffffffffff8}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f00000000c0), 0x108881, 0x0) ioctl$auto_TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000940)=0x3) write$auto(r1, &(0x7f0000000180)='/dvo/kvm\x00', 0x20) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) bpf$auto(0x5, 0x0, 0x7) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x3, &(0x7f0000000180), 0x83) bpf$auto(0x3, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) writev$auto(0x3, &(0x7f0000000100)={0x0, 0xfffffdef}, 0x8) 7m4.846828546s ago: executing program 2 (id=5336): close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x28, 0x1, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000100)=@vsock={0x28, 0x0, 0x2710}, 0x55) connect$auto(r0, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x56) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x2400, 0x0) socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) adjtimex$auto(&(0x7f00000004c0)={0xf332b6b, 0x0, 0x7d, 0xfffffffffffffffd, 0xd4, 0x4, 0x4, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0x0, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/ad_num_ports\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000240)=""/254, 0xfe) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000001140), 0xa0100, 0x0) socket(0x2, 0x1, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x4f1, 0x1) fanotify_mark$auto(0x0, 0x80, 0x8, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) 6m52.534210795s ago: executing program 2 (id=5374): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x30) writev$auto(r0, &(0x7f0000000100)={&(0x7f0000000040)="a06d6a0eb9f11ab69eb877bd165dd2217e36bc1b3a4f37a0fba2c30a2eecf5d33c26399716237eec791bf02df7e7fccd62ff30ac751603c2322fc4b2c837c3ee7eba85f08f8f28f677d022ca8fb6c482be86a9fe4a01058a60fa00a1d5887f83926f12e797a090f54bcd5d463ee8ccf085a2c51f27aeaa9020e1d4531a46d382b771", 0x4}, 0x7) msgctl$auto_MSG_STAT_ANY(0x7, 0xd, &(0x7f00000011c0)={{0x3, 0xee01, 0xffffffffffffffff, 0xfa0, 0xe4fb, 0x6, 0x80}, &(0x7f0000001140)=0x7, &(0x7f0000001180)=0x40, 0x0, 0x51, 0x5b, 0x7, 0x2, 0x7, 0x2, 0x8001, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) r2 = io_uring_setup$auto(0x6, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x400, 0x9, 0x6, 0xee00, 0xee00, 0x0, 0x5, 0x1, 0x1, 0x100000001, 0x1, 0x2, 0x8, 0x4, 0xffffffffffffffff, 0x9}) setregid$auto(0x0, 0x0) chown$auto(&(0x7f00000000c0)='./file0\x00', r3, 0x0) msgctl$auto_IPC_RMID(0x80000000, 0x0, &(0x7f0000001380)={{0x1000, r1, r4, 0x2, 0x1, 0x6, 0x5}, &(0x7f0000001300)=0xf4, &(0x7f0000001340)=0xc, 0xfffffffffffffffa, 0x8, 0x4, 0x80000000, 0x9, 0x5, 0x7ff, 0xfffc, @raw=0x7, @raw=0x2}) fchown$auto(r2, 0xffffffffffffffff, 0x0) lstat$auto(&(0x7f0000000140)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000001240)={0x7, 0x1867, 0x0, 0x5, r1, 0x0, 0x0, 0x100, 0x15e3, 0x6, 0xffffffffffffffff, 0x12b, 0x0, 0x2, 0xffffffff, 0x120000, 0x9}) mremap$auto(0x400000, 0x4, 0x4, 0x7, 0x1000) 6m42.402141982s ago: executing program 2 (id=5413): acct$auto(&(0x7f0000000280)='/sys/kernel/config/t\xda\xe8\xda\x1f[\x03+\xbdC\x14\x02\x00\x00\x00\x00\x00\x00\x00o[e/alua/lu_gps/default_lu_gp/lu_gp_id\x00\x95\xc4e\xb7\x82m\x00\x00\x00\x00 \xdb\xa3\xe6\xfa~\xc8\xd1\xe1\x1eu:xO\xb4\x062U:\xb8\xc2\x83>\x96`~\xe9/\x11!\xfai\xcfUK\x06\xbdnb&\xc9\x8b\xae\x9f7\xef\xba\xa4B\x99\xa4\xa9I\xb2\xad\xa5\x1e\x9a\x997T\x1d\xe0-\x19\xdf\xf9;\xbb\x0e\x88G\xdb\x12hE\xa9\xf8\xcf&1\xb7xH\x1d8%\xaa\xf1O\a\x8a\x81\xc44\xed.\x1d\xcc\xc3R/\x01\x0eZ\xe2\xa4\x7fX\x8b\xd5\x03\xad\x11\xea\xb0i\xb3\x9d\x9f\xe5\xc3\xf8\x10\xdaF6\xabJ\x9dJ\x94B@?\x83\xb8eMs9,\xeb\x93\xd0\xc0$\n\xab\a\v\x06\xae\xd6\x00\x02\x00\x00\x00\x00\x00\x00t\xc5D\xcd\tm\xbfp\xfb^\xb571\xc6^\x06\x00\x00\x00\x00\x00\x00\x00\xedt\xb32\xd4\f\x8f\x80\x85@\x1br\xe8\xd0\x99-\r\x9e\x1c\xb5\xcd\x8e\xc9\v\x94\a\x03\fP)\xdd\xa6\n}\xf0%\xbd8\xb7\x00\x97\x90\x05\xc8\xe8\x93\xf7B\x1b\xba\xa3f\x04\x9e\'\xa6\xbf\xb7\x83\xaa\x1fu;\x03Y[H\xed`Lnt\xf35\xa4N\xfd\x04)\xc2\xa0\xca!#\x88\x8b\x9dp\x93\x9bZ\xf9B,x\xce\xc6n\xb4x\"\x1fr-\xbe\x1d\x1em\bE\x1eG\xf3\x18\x7f\x80\x81\xbf.\x13\xb14z\x1fA\xca\xf6\xb8bA\xc7{\xf9\x9dr\x8b\a\x9f\xc4\x01\x00\x00\x80\x9a\xddv;3@\xf0\xd36\xf9\x8f#\xecw\x88<\xae\bn@t\x8d\\\x86\x97L\xa2\x17\xb1\xda\x19\xb3`0L0v=\xbb\x18\xec\xf8\x12\x9e\xad\xa2\x01djH\x87\xd7K\xf4\xd2\xdc\x99\x18\xa2`\xb3N\xd6\x02\xfc\x14/\x114\x9a\xd5\x85\xa8\xfe\x1d*o\x8bdaj\x11\xcb\xb74\x93\xc2\x1e\xca\x81 \xa8\xb4\xb69S\xd1\x8b\x9d\x00\x00\x00\x00\x00\x00\x00\x19\x00\xdb\x87\x9c\x9c0\xe26IaH\t\xc7tf{6\xfc\xb1V\x14\xb5\x95\xb6\xfb?\xeb\xe1\xa9V\x9a\xbdW\xa5Y\x95\x98$\x89i\x83*y\x1c\x06\xf23\xbekc6\x16VN\x93\xcb\x1d\xda\x002R\x9eu[\x8cGX\x93\x01\xf4F\xa1%]\xb3\x7f\xc6\x8c/\xcd;\xf6sX`erJ\x1eN\x1b\xf3i\x0e\x88\xd1\x83\xde\xa8Lr\xdcV\xf8\x87\xdft\xb0\xbcN\x01e\xcaS\xa9\xd6S\xbf\xb7\xfa\xa8\x1b\xb4\x84\xe6\xc5\x92\xff\xc1\xd3\xb3\xb6\xf1\xfdm\xd9\xd2\x893\xafQm}N(\x19=\xb4z\xc8/j\x11\x97\x8a<\f\x8f\x86\xb7\xe6\xc0_\x01\x11\xe8+u\xc72~\x0e\x01&\xb9\xf4\xb1\x91\xbbnR\xc6$\x1a\xaf\xfdg\xf5\xfc5\x92\x02FVm.\xc1\xe4y\xf0\x9d%\xbe\xa5fe\xe8\n\x12ymUS\xe3\xe6\xb7?Z\xc0RxU7Ny\x18`\xcf^c\xef\xa6\x90\xa8|h\xf8V\x80\xa3\x18%~!\xb9lhl\x16~\xed\xeb5>\x06\x1c`uU\x99W\xa3hc\xf2\x15\x0f\xcd\xb5') mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x80008, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x0, 0xa, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x202, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x0, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0xff, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x3, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffa, 0x3, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0xdf8]}, 0x1fe, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r2], 0x1ac}}, 0x40000) (fail_nth: 2) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x0) socket(0x11, 0x2, 0x73) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) memfd_create$auto(0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0xaa, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) futex$auto(&(0x7f0000000080)=0xa, 0x5, 0x8, 0x0, 0x0, 0x440248d3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) removexattr$auto(0x0, 0x0) syz_open_procfs$namespace(0x0, 0x0) 6m34.020169712s ago: executing program 2 (id=5446): socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8100, 0x0) ioctl$auto(r0, 0x8004510b, 0x3) quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) socket(0x2, 0x3, 0xfffffff1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb3, 0x401, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6b, 0x0, 0x7d, 0xfffffffffffffffd, 0xd4, 0x4, 0x4, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0x0, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) sigaltstack$auto(&(0x7f0000000200)={0x0, 0x1, 0xfffffffffffffff9}, 0x0) r2 = getpid() r3 = gettid() rt_tgsigqueueinfo$auto(r2, r3, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_sigsys={0x0, 0x2, 0xffffffff}}}) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, 0x0, 0xa0100, 0x0) socket(0x2, 0x1, 0x0) r4 = epoll_create$auto(0x4) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0xa0202, 0x0) pwrite64$auto(r5, &(0x7f00000001c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x948\xd3\xb0\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\xad\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9W\xdd*\xd1\x14^\xbe\xa2', 0x31ce, 0x9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) epoll_ctl$auto(r4, 0x1, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_seg6(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x18, 0x5, 0x0) 6m26.691993244s ago: executing program 2 (id=5468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000002540)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x109402, 0x0) ioctl$auto_UBI_IOCDET(r2, 0x40046f41, 0x0) 6m11.386404012s ago: executing program 33 (id=5468): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000002580)={&(0x7f0000002540)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x109402, 0x0) ioctl$auto_UBI_IOCDET(r2, 0x40046f41, 0x0) 3m3.149264507s ago: executing program 3 (id=6753): pidfd_open$auto(0x1, 0x0) (async, rerun: 64) r0 = socket(0x28, 0x5, 0x9) (rerun: 64) sendmsg$auto_NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000004c04"], 0x14}, 0x1, 0x0, 0x0, 0x4040040}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) r1 = socket(0xa, 0x3, 0x3c) (rerun: 64) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/tty48\x00', 0x666601, 0x0) ioctl$auto(r2, 0x5603, r1) (async) r3 = socket(0x2, 0x2, 0x1) r4 = socket(0x10, 0x2, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0xe0180, 0x0) (async) r6 = prctl$auto_PR_GET_ENDIAN(0x13, 0x0, 0x0, 0x1d0, 0xc6e) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'vxcan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_DEL_INTERFACE(r6, &(0x7f00000015c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000001580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7a43c5064b6c3bc875de5d793cd48ffc3380dec100000000130000", @ANYRESOCT=r7, @ANYRES32=r2, @ANYRESHEX=r4, @ANYRES32=r2], 0x13ec}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000) (async) r8 = openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, &(0x7f0000001400)='/sys/kernel/tracing/tracing_on\x00', 0x682, 0x0) writev$auto(r8, &(0x7f0000001500)={0x0, 0x1}, 0xf7) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2a, 0x80805, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x10009b72, 0x7, 0x28000) (async, rerun: 32) r9 = clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (rerun: 32) ioctl$auto(0x3, 0xff01, 0x0) (async) ioctl$auto_KVM_CREATE_VM(r6, 0xae01, 0x0) (async) writev$auto(r1, &(0x7f0000001700)={&(0x7f0000001600)="eb29cea18fea2b423e4daf61be1af52ec53c6c49b8a7f0b6a043523a4acfd01ee6ae164296b9d390829b17125304f27054effe49031449c8d5832aa1faa9388c0381ee508a52b43888f14b05f2ec137e3856b1f96681957ea5568a8904d8ca2da4b54d059e59867e1ed0d422b25245de3c9b764b90a014f11ed923888e789017b848e79d4c692cc6eeb636099e8ac9ff0ac8680077f7fdebfd6ce01112f37edcc23cb7bf73d114f46153f43cf10f518ea4bf747a859383738221316b70913a5b3b34aba60251ddeb6119b5e0fcd664895c102d97e7d3b51114d57d36f6e793d9be5a8ed63b9edd090e", 0x1800000000000}, 0x1000) (async) ioctl$auto(0x3, 0xc00caee0, r5) mincore$auto(0x3ff, 0x1, &(0x7f0000000000)='\x00') (async, rerun: 64) pidfd_open$auto(r9, 0x2) (async, rerun: 64) mincore$auto(0xffffffffffffffff, 0xfd0, &(0x7f0000000040)='\xb9%-%}%@[\x00') 3m2.026337181s ago: executing program 3 (id=6755): mmap$auto(0x0, 0x2000000000000752, 0x5, 0x9b72, 0x5, 0x6) r0 = signalfd4$auto(0xffffffff, &(0x7f0000000080)={0x8000}, 0x8, 0x0) readv$auto(r0, 0x0, 0x1) unshare$auto(0x40000080) r1 = socket(0x29, 0x4, 0x4) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x40000000005, 0x7) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) munmap$auto(0x1ffff000, 0x2000000c) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r1) sendmsg$auto_SMC_NETLINK_FLUSH_UEID(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000000c0)={&(0x7f00000005c0)={0x1014, r3, 0x100, 0x70bd28, 0x25dfdbfd, {}, "07f6d44183cc8e9fc6054b4b836625698203bb27e22379a38c8cdf0ba0deee2c562469790afedb4dac3bab8525d3883a477e6c1a168d0507c9fabf8a606aac4fd48cb063d934bd5a653f51a1ea9b32f2c11c007cb68289a3c065639eb70ff8c63e30a5f1a459c0bde019a5e400ddb77c074b9fa1ab750411ece0fe0218c2f91de9c3bba5c78b223e820f24f1067a6a3084cbb3f1b3f5602deb9f3415fc65abd3b1a6d95ab9a641987376d303688528c7fa788cfc9c0d93f4f099b47b898e57e068772af7e568e8f9a9bba7696972e55be044700aa7bc3344349880fad23eb5a483737e882d24bdf7af037ef27b6b3f4dc735e1747fdfadffbdd22470af4431970c6ec786b9a4a8a5d7a530151c17af9eefeab0019917c20a7a9687343260a5089ff83cbe4ee6349599f06001a0952e8df7b50fc91cf6fd64b154be0a9c531d1244d3fbf23bb3cbf0636bc264de6076a06fd882368a4fc1e96bfbe3dc78aed00fc320744ecdaff757a55755575b33d3125b8d86aa03c5636e3b795d693d63d317c3026295eca9f37f605caebf8efe52dd3d4101843bce655b5ff14a8b585f513fa70b34d2063189254ec27a80db6d3f8fe9c38cab3ea9647cc9157c9369ecbbeef2986bfc2358fd80473611437942354a6e24876ef57dd4c2ab92419a165162da766507bc883d4227aaefe5ebaf8ca4b28dcd0c0c1af6c2b8717dbe96ebfc99d1cae22dc0260093e47c4c6ff1cfa8a38e916a52f2ad72ab334f4e1e2e47935f2d692d3ba455aea604b0d3c74a07115c248dfb3152f3d424a7807946957df96941fce41a6e4bc088ecd5d55e88ee4f3d41345de150c634003ef126b3530789cc7e97441a060318ef88eeb74767439d1753137f475672465383e48462f5354a5f2a36c50791a9df1210aae7fe823dc59e1a96301c7922f1b1bc7a1fe60e293a4e2769eea4dab9f828ca9ab19234278b52125ba887eb558fd4498bb260318fd3337dbf8eb53105fe6644966ef97d712169c23a92391672276ae96146382a05725f1f0d29ca4ef917bb57d1cf8348148181e7a52a57bab1e96b2ec6df04e2505a6056596728c5b25b8e362f4480261b13c3934957decacdb9f5837e31c7f97f27880b06bb62375b956c55eef6b888a02cee4071da37e26089f3db9d30cd9a89bcb6df980b835e76b0cbd4abff6bc100bd463177de59994ef9c046befa460ecd1fe749affbe49bf46edad8e3213bcf6bb628bb694745b31dc522691e75eb79c7e8a6b74b4f3d953da6dcec744586038b63d757e0458f2388a643c46468f29bd65bd8e2ee9123582deee215273c84c46fa0dbbd00ec242e2a7ae193c67e8d0be3f89b1532d0f7559a4de77aa1e00abc6563e58f0b4539b9f6686ca2bef3d836e144392cc59d2726c065a7ca450f05c62858509d600fae051c5e731b481b5adca765c029f3dafd5eeb3a0fb9f0415fe04f90e94919e512666f17d8584babd8e913d702b62cb4530223ca393db99074403bb571f7308e2957b42f5817e73091cfd9030765a67996c01fa2b09dca831c7c262d6e44ada4179d5539693d51699557bd9a8e1113a59e7f9ae2dd3d922eec15b770ae78b402ed920ea0a22927024f8363cae492e8a4eb9b62c4cad33de6c0f28b240c33b27ca1316a624d5c65bada04fcf4a4d43cfab4dbe411921999c3f1e0ea139d0c3fd0e2e98c2e2cd33bdb8f8b4e3b1e72011af227471903d04b0ee6d0a9fa4bae947926699ceed1ccff03d63f06c58e1c5412d6e29809791789bd7616fc7f5fcf5de2164a17712221ea2c1d2f01777fb98b05ea67fd45290eccdb508268f9781cd17ac552eec0849b6c5173efb4820ea8d7ce161764d65c6ec64529490b7c9a3c4866cbc6298db49b83f2ba79b29ad47f20fadc236f6f8729e66b78a6505beaac8ffd3347aa8bd0777ccf656dd78684c7abd56acaf9e36f9881d190b16a812ed768f26f6c398f665c6e59276c3c407cb533163a49287af59120e08befaf510a566c20874c24559f67030a8049af4104a43f36db18e23636f85bd17cdac143251cb3959403d4a5575114dfd1bf00d15d4d07246cd758670610f577abfa4276f687b947cd10ed698221463687adb84fb197fdd20f630f78da4511860761a3de1c6e62e3365f89dccedd7f7b584c72d4624e61803a4438fa86495e6ef08dd0dc347fa6b03414e2dfd9f08c59e7337a030faaecc8d060a0d53b257b760dd852991119ee11880d80d1781a629f7c0a8e44a95fda6f8c8b2bd157faaa89b9e3d10238358ecffff981e28ad04541471f0c1184dd868d5b1f82b945c1b8dcafb4fdc1cf9dadbe3cd9e2d13bbb445abba4886c375a8cbcf4923773cc1fede2996221ae37ac435d6def788092ddc1b2af65f2b7b6b1cf03e0a7efd5f36aea2087a6771d85b14957d430514b738762f1283a754f5439c151152ee5b2e3e97f00f5882fae49124ff5b67a77fa912e1345fa0ec52609df2ca5e230d5b73cbf08062912d2c58364139f037ac65dd44000eb8b045548b3586916bf1a701bf667a0715c42600fe1a21e436ac77265cec125edf93ec8ee4e369a98d77b2de5af24fe722a902ec5b1a42413326c4e71a13a2952b6149de1b6662cc5f32017f9e902d8d8b67989ed130642f1b9a4fc4df34126c8b9ba5a51bcc33a7936fc3eabf057ac96c3af19842d56584ce049e00655b1132ccb64370c6aa76cc4d5a0af3e4002016da4c62022a97fc157821e1fec0e4f12a75c4cfdf62d58a62080dc5f00a978483a5800c0dd6446ae034b8a32bf4c6f3a508d5f2dfbe53187b321cd14c1e3f559f3a293bca327bc2b30be4fbd4b0e5142a76c31c8ac637d288a3edef46d8cb10e9e35aa5fd07c75ffb3f10685751e40ca8850d854d669c39aefb7e5b0fc5630127dc64d477b6466eefd1a93c0c76c0a4772305c14be5de9c68a1ac32f7975c339d0e83cb5bf76087e68a9c4e5af07f55b8620e3e0e05daf77347741e429b6b2c130b359f3ba4f184a62247dfce5d7687e3024294deb3b75877d35f29f839751b0175589968fd162746f8d19dc179c7db193ca3eb2282f191f28ac801f1b2bd02721041efd482658b8f4d256722859a2a27d77320bc98283ef4ee2aef077e6b8d8cb8a2d4f362bbc27a51902bfe9d0efba8f5a651145baebd40a22cd447781054cea048a21fd9992efc38d039f507d274f14972a00f3feb37920c3f5c2896bfb34dc0a8edfff59a7db9679b75e864a4d64bd03286116814c79e05ae0db79df0961522fc8f6d988b21a6f2009312383b8213bb73b9d9bb425b8042bff45a3b1ec0a3cfa600a5ed0acde7c0592bec0a7890833dfad63be9ea2ad60987e7b226f0ffc8498f3a86444704e7aae3d9eb969b69e4c3409a2a612b82f097d9598f24d78dada7385382f8e5ab9f244a7576d45bd3eaa561e78e5c56bfb4beabaff8c3c9bf0db24f80464cd532c5194fbf1c0555423de35a1ffb4af521eac15e9505b2b317a58f6011f1ed0c474a9f3dffce3b90d819285e57f0bfa66355ea258aeaf417d857e3f73e93e9c1337b45302d399289431174e3c978ba40657c4643c42df537e95f3dbb74da973c00bfb3ee2e1d0d97ea3902908850d57ffc75b73d8b808ff9287bcbdc405c55d2f4fc46b8ca028e91959eeb25dc3db0a0f663c3d35cb1519dcacc3ce73dfc458e0567653e84b54f5f394776ec30c6edcf8361d5bf9ff4a71b5273ddd3f7edf349e559f671ef39a6339984c5decca1227df6006605e39f4e97c3364997c85070c01b5499c3e5c05fc94ea0a368843951854e5d4b57421cd307e8d27e60bddeeed44d3a410cf6a0682972111be04d861134487a4937924a8731685d637285b4eccf9b5432911cf27c4a9629f8144ec5b945841aa9b926294346924d61b1c74506e6ed5c3777f704b2df21050bcf29c1858bb3be434721dff6a50b536354c84bde45dfa291bd6659b82f5fc0c25e681cf2d620eedaa2e5ac889b2492ebe783eb0c97fa5e05e32c289f8ba22e121cf09c0b031397291b003222e35035e79d35a5d6ef9d2f340dc85483c68f143eecf67de78d100196b1572b64f29d09e064ec26515b78fb0d5b9804a97d6732b653e56ff2bae7fb0804397d3a4c48cc81454c652c5424f81109282bdad0bb7eba036183a2cc405e149e2e10df107d1e56a41e61342f7d1ea667334c85639b16dd549ca7c909ba46c228cf2da167e1cba0467681dd262bf35e131328e5e1163bae0dace6e07fc0233d8c2041c9f9f83d524ba747ab54d4a8651f2ffa85173137af493013abc6abac07e760bace61dcd3548c156696c850dd0e0263373538d2eebd834003410020910136b3290ccfd4ef30d45055294a10b01cda61113d50b44cf133e843817ffdd48390ce203067e3861550b0da5d3e8e68d7465492bb6604c529a105efe63c6be363082bcd8c7d15ccdfb3b78da9e83cd3ffc4de64b34f3baf9a68b5b1a65dc1302888dc280dc1f9231ef6b04b32f7b72ea3c206c80ecfeb23e25d830d1622b7e8cb6dca79b9a59cf865f80fa701a833b58ca9436d701857f40a877afc20b79152ce466bda67e7d778eac5329ff1be63b0c8a16275513afcb79a7ce7990fd326920941b261c0b9276fc3665e1db70bd459f7134c701b18aa9ba5d67508ccf9b21fffa72bf3026df9afa86d281ef7e900eca90e87d8d43082e8c3921226aaef429a04a04cea78ad86466133483cd2dc5453321e293f73a2e9cd038faa099abd64ba794303a467df9e15feb888ef2a6edc254c7a9580ff517cef553f22466610fcc1a009265b47c6c96819e1fcd435b5eefda0d951e3ecec4de82b47d0ba53dac71786d561570fd7e217872e43c25990bbd71354a16ba3aff01b400f82bb4e569ed049a3f439ab5f05d2b1180369ecb341ebf683b25e4048c9dbd55c65e73421b9ca66e3c4b8600d224868e6bddc57a9a2aeae665b0557cf1a9ddcd025255ad9a96bb4f22e9cb19a077e0ce6d213ed24cb379b216d8d427c37e16324e9f0ea0759e8e815342b909836f14fc447a9384a08587732f3b1669d74c7044504e128b23fc315782c3940c5fc333f3a23ff4cc6d2a0bd27c932db9ed924440e2a38bc930f81df526ff3396be04c18bac7556e7f55d9d9a93d88cb99174d6f2edc24b5d60ad40cbd3563f2dc34c16b6a95c91eb6ee0ac413406b842aa576fb69e54dd46656e02464026eb3b1cb7ebc7bacfa04749ae3e1e7f6aea7b414d35b6f61d53257754f77e174e1d38726056c00e9eff9ccbf6616ae46bf9fb0142f73b707e99648a6b4f412414ecb6605998f8cea1fdf6105a98f455877f79bacbca11ea8642a28d9db278a8e58d740f239848d1b681d01f84d3dcbca2d6c9cbde9db8fe3f836951d86a5559b2732df649dd972dbfba91dbce6823b72a443f88c3178bac07860d99cc6aee30d5b994e066f8c36d506af9c63087477ed7d643d8d96a026c333c27368dbe26f9999fbf2fe9c9aa21be13480fcf6952bc27b0be40786229dc3844f108f558105ac4fe6b548bfaa874dd41db6b2b3e29496199475b4f8638d8140a85150e2ab10fdb9091a6106ba33a6b81a28b9890e4da38601ad8ecefe668547a7793f1426f59c5e7e45da039bd45e9c341e8cb1ba0d72743340667b348e474ff0f69e6f7f4cf99e7669183e11709b3daf8546479e56063e2b094e30e150474dfa96888c8ef0ac585fe9b333eaf4d101f4e60ffd2fd8f621f8c75c3239174859beabd241f121f5658c726f7f01def9d0bb8881041a57a3db6ffcab39fa3f5a102d62e"}, 0x1014}, 0x1, 0x0, 0x0, 0x5}, 0x804) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x23, 0x2, 0x0) io_uring_register$auto(0x2, 0x17, 0x0, 0x1) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x1) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) msgget$auto(0xa, 0x77d9) msgctl$auto(0x0, 0xd00, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000002c00)='/dev/cec4\x00', 0x101901, 0x0) 2m56.597349067s ago: executing program 3 (id=6775): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)={0x58, r1, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@HWSIM_ATTR_RADIO_NAME={0x43, 0x11, '\x00\x87B\xfeP\xc6\xae\x16\x8eC\x9f\xdf*x$\xe5\xc1\x9b\xfd\x94\x8bY\xb5\xcb]\x1f\x1cR&\xf1v^g\xfe[\x822\x01E^(ZZ\xf9\xb1O\x8e\xf6-`r~\x86\xf0\x00\x00\x00\x00\x00\x00\x00\x00\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x801}, 0x20000010) socket(0x2, 0x3, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x2, 0x3, 0xa) getsockopt$auto(r2, 0x0, 0x80, 0x0, 0x0) ioctl$auto(0x3, 0x89e1, 0x91) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/pci0000:00/0000:00:01.0/driver_override\x00', 0xa001, 0x0) write$auto(r4, &(0x7f00000003c0)=',l\x00\x00\x00\x00\x00\x00\xb2s\x83\xbd\xc5_A\x87[\xd1{\xe6\x10\x1aX\xe0\xebQL\xe6&[\xa9X6\x86\x9c\a\x00\b\x00\x00\x00\x00\x00\x00\x00%m_\x96A\"\xdd\xe40\xa7\xc3\x00\x00\x00\x00\x00\x00\x00\x00\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x10\xbeC+$V\x91\xab\xf7\xf57\xe8\a\x15\xcb\x8e\xb1\n\x13HY\xf79b\xc2\x00\x82m\xdcz\x17\xfa\x8d\\\xe8(\x81\x96N\rZ\xf1E\x85\xe3#D\xfd\xa9\n3%p\xdc\xab\n%\x84\x1e\x05\x8cm\xe3\xd6\xa4\xab\x9fr\xc2\xef\xf4\tu\xdd\x16\xc3T\x1a\x11[@a\xa2\x19rO\xeb\xb4d\xc4\f=)\xba\x19\x83\x87+\x00'/206, 0x1000) r5 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000001500), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001540)={'netdevsim0\x00', 0x0}) sendmsg$auto_NET_SHAPER_CMD_GROUP(r3, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000015c0)={&(0x7f0000000000)={0x48, r5, 0x100, 0x70bd29, 0x25dfdbfe, {}, [@NET_SHAPER_A_HANDLE={0xc, 0x1, 0x0, 0x1, [@NET_SHAPER_A_HANDLE_ID={0x8, 0x2, 0x108}]}, @NET_SHAPER_A_LEAVES={0x14, 0xa, 0x0, 0x1, [@NET_SHAPER_A_PRIORITY={0x8, 0x6, 0x1}, @NET_SHAPER_A_WEIGHT={0x8, 0x7, 0x5}]}, @NET_SHAPER_A_IFINDEX={0x8, 0x8, r6}, @NET_SHAPER_A_BW_MIN={0xc}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x14) 2m52.813050755s ago: executing program 3 (id=6794): set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) r0 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r0, 0x0, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x40, 0x0) move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000001140), 0x0, 0x2) socket(0x2, 0x800, 0x0) 2m51.923027399s ago: executing program 3 (id=6798): socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x8a2c0, 0xa) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000340)={{0x0, 0x4, &(0x7f0000000100)={&(0x7f0000000080), 0x3}, 0xf269, 0x0, 0x1ff, 0x1}, 0x6}, 0x2, 0x5) r0 = socket(0x2a, 0x2, 0x1) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x40) open(0x0, 0x44040, 0x1) r1 = open(&(0x7f00009e1000)='./file0\x00', 0xc162, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r2 = socket(0x10, 0x80002, 0x0) timerfd_settime$auto(r2, 0x3, &(0x7f0000000000)={{0x6, 0x7}, {0x0, 0xa2b}}, 0x0) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x18e40, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DROP2(r3, 0x4143, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x40400, 0x0) socket(0xa, 0x1, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) pipe$auto(&(0x7f0000000780)=0xffffffffffffffff) splice$auto(r4, 0x0, r1, &(0x7f0000002100)=0x1, 0x768, 0x9) 2m51.70904313s ago: executing program 3 (id=6800): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket(0x2, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) close_range$auto(0x2, r0, 0xfffff001) r1 = socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x14, 0x0, 0x6) read$auto(0x3, 0x0, 0x80) connect$auto(0x3, &(0x7f00000000c0), 0x55) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x3, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) write$auto(r1, 0x0, 0x8) 2m36.645127216s ago: executing program 34 (id=6800): mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r0 = socket(0x2, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) close_range$auto(0x2, r0, 0xfffff001) r1 = socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x0, 0x14, 0x0, 0x6) read$auto(0x3, 0x0, 0x80) connect$auto(0x3, &(0x7f00000000c0), 0x55) mmap$auto(0x0, 0xffff, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x3, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) write$auto(r1, 0x0, 0x8) 4.767249851s ago: executing program 4 (id=7682): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0x9, 0x9b72, r0, 0x5) mbind$auto(0x0, 0x2, 0x2, 0x0, 0x7, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) landlock_create_ruleset$auto(0x0, 0x4dc, 0x0) bpf$auto(0x0, &(0x7f00000003c0)=@task_fd_query={0x0, r0, 0xd, 0x89, 0x2, 0x4, r0, 0x81, 0x9}, 0x6f4) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x2841, 0x0) read$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x3, 0x0, 0x9b72, r1, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b76, 0x2, 0x7) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x10002}, 0x401) close_range$auto(0x2, 0xa, 0xfffffffc) socket(0x18, 0xa, 0x1) connect$auto(0x3, 0x0, 0x55) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x125900, 0x0) ioctl$auto_OTPLOCK(r2, 0x800c4d10, &(0x7f00000000c0)={0x10001}) r3 = accept$auto(0xffffffffffffffff, &(0x7f0000000040)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, &(0x7f0000000080)=0x9) r4 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_FTM_RESPONDER_STATS(r3, &(0x7f0000000300)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x82808800}, 0xc, &(0x7f00000002c0)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="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"], 0x14dc}, 0x1, 0x0, 0x0, 0x20048010}, 0xa001) sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4], 0x44}, 0x1, 0x0, 0x0, 0x4004004}, 0x8000) bpf$auto(0x1, 0x0, 0x10000010) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) io_uring_setup$auto(0xa, 0x0) open(0x0, 0x101000, 0x15e) msync$auto(0x0, 0x2000000005, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 3.423795632s ago: executing program 4 (id=7686): r0 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x672402, 0x0) pwrite64$auto(0xc8, &(0x7f0000000200)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x06\x00\x06\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0x507, 0x3) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x80003, 0x300) ioctl$auto(0x20000000000003, 0x8946, 0x2) syz_clone(0x2022711, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(r0, &(0x7f0000000100)={&(0x7f0000000000)="8a1774a3f11c4fca1f232d8d0a4adf3221a22ace47503384050d1e8f1672e651712d6e174f995526e505d03e8af611f1488092538dbaa3aeed3caee4cfdbf1006f936d7556002738aee62c2ca7cf554f05ee6961ab40c84d17af1fb6be39859e58a2a051bb08eb3c9cef59c53a89bc6f46eb34e0aa582da0cda7d34c4cb7755a70d7132806336afea9984ee76d8ca01e401fefb61f42c1a0028f2707445c354b4a233e1782e371e3fee7b77d062003fe3c367d9453e47faea71c9d", 0x8001}, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) ioctl$auto(0x20000000000003, 0x8946, 0x2) r1 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000380)='/sys/kernel/debug/usb/usbmon/32u\x00', 0x0, 0x0) read$auto_mon_fops_text_t_mon_text(r1, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/032/001\x00', 0x28402, 0x0) 3.375295095s ago: executing program 6 (id=7688): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clone3$auto(&(0x7f0000001100)={0x990, 0x9, 0x1, 0x1, 0x2, 0x0, 0xff, 0x7, 0x6, 0x9, 0x3}, 0x9) r1 = socketpair$auto(0x2000001, 0x3, 0x8, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x2, 0x0) sendfile$auto(0x1, r3, 0x0, 0x2) sendfile$auto(0x1, 0x3, 0x0, 0xc01) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1a00279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) waitid$auto(0x2, r1, &(0x7f0000000240)={@siginfo_0_0={0x7, 0x7f, 0x5, @_sigchld={r2, 0x0, 0x0, 0x3a5, 0x3}}}, 0x7, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000600), r4) sendmsg$auto_IOAM6_CMD_NS_SET_SCHEMA(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="01002bd32000000600de3ddb03002300000000000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) inotify_add_watch$auto(r0, &(0x7f0000000080)='./file0\x00', 0xe) socket$nl_generic(0x10, 0x3, 0x10) 3.056718797s ago: executing program 4 (id=7691): migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x101140, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) clone3$auto(0xfffffffffffffffe, 0x101) read$auto_v4l2_fops_v4l2_dev(r0, &(0x7f0000000040)=""/18, 0x12) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000080), r1) mmap$auto(0x0, 0xfff, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x200, 0x5079, 0x3f59, 0x1d, r1, 0x2) socket(0x2, 0x1, 0x0) r3 = socket(0x2, 0x6, 0x0) r4 = epoll_create$auto(0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x5, 0x1) connect$auto(0xffffffffffffffff, &(0x7f0000000000)=@in={0x2, 0x100, @rand_addr=0x64010102}, 0x3a) r6 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(r5, r4, 0x3ff) keyctl$auto(0xc, 0xffffffff, 0x0, 0x7, 0x40) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x9, 0x10000000000007, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x3, 0x0, 0x80000001, 0x7, 0x6d3c, 0x249be691, 0x2]}, 0x0) epoll_ctl$auto(r4, 0x1, r3, 0x0) sendmsg$auto_GTP_CMD_GETPDP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000cc0)=ANY=[@ANYBLOB="1c00000087b4628f6e185e0230cbad1ff3", @ANYRES16=r2, @ANYRES8=r2], 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8014) syz_clone(0xc024000, &(0x7f0000000000)="abed812e9c8200efff0000", 0xb, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)="aced430bfbffcd5ac747bf63824976d089b08aed97490c") r7 = getsockopt$auto_SO_PASSPIDFD(r1, 0x8, 0x4c, &(0x7f0000000d00)='\x99(($!\x00', &(0x7f0000000d40)=0x7) getsockopt$auto_SO_TIMESTAMPNS_OLD(r7, 0x4, 0x23, &(0x7f0000000d80)='gtp\x00', &(0x7f0000000dc0)=0x1) r8 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000e40), r1) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(r6, &(0x7f0000000f00)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000e80)=ANY=[@ANYBLOB="1c002df9", @ANYRES16=r8, @ANYBLOB="00042abd7000ffdbdf25080000000500250048000000"], 0x1c}}, 0x8088) sendmsg$auto_NL80211_CMD_FLUSH_PMKSA(r5, &(0x7f0000000280)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYBLOB='l\t\x00\x00', @ANYRES16=0x0, @ANYBLOB="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"], 0x96c}}, 0x4000040) 2.922300081s ago: executing program 6 (id=7692): mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) 2.852883375s ago: executing program 1 (id=7693): r0 = prctl$auto_PR_SCHED_CORE_GET(0x2000000, 0x0, 0xffffffffffffffff, 0x2, 0xd6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto(0x3, 0x6f2d, r2) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x2a0a00, 0x0) memfd_secret$auto(0x800000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) socket(0x23, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) eventfd$auto(0x34b) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socketpair$auto(0x1e, 0x3, 0x24df, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) close_range$auto(0x2, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x81}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000001) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) 2.832300227s ago: executing program 6 (id=7694): mmap$auto(0x0, 0x2020005, 0x2003, 0x20eb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ftruncate$auto(0x1ff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8d0}, 0x800) r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r0, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r0, 0x4, 0x6, 0x101, 0x1, r0}, 0x6f3) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) ioctl$auto(0x3, 0x80045505, 0x1) 2.716225431s ago: executing program 1 (id=7695): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mq_getsetattr$auto(0xd, &(0x7f0000000200)={0x0, 0x5, 0x7f, 0x10}, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000000040)=0x5) preadv$auto(r1, &(0x7f0000000080)={&(0x7f0000000100)="143be58227c81e42fffd7f19bd67a233d35ec4b81616ce0eff1af30ca96389e81881c96e92ce41eca87cebd6994b9403fa2868c2cee7996f77b1fdb31040cd73d5b367c6c7e65534d4dfbd0375f0ac0e08c42290dcd453bbe5cd833f6e1cfa28c28f8eb31e0c47b17745a6f98ae2c9d0f66f98e35c70d457f1ae7ca74539"}, 0x0, 0x9, 0xff) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) ioctl$auto(0xffffffffffffffff, 0x89f1, 0x24) read$auto(0x3, 0x0, 0x80) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) read$auto(0x3, 0x0, 0x80) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f00000002c0)={{@inferred, 0x5, 0x9, 0x1, "4941aa833e2fc65b6b3cf7cec76d6778ad8eac3cda35ba9c2b2d43eeb0dc59c8dd3500f11581916caa0d3053"}, 0x4, 0xfffffff9, 0x1, @inferred, @enumerated={0xffff, 0xffe, "4bd04167d52dbe3758dcb7641f58661870525adcaedaa5deaa336a58b7382f979a0ff0b3d9583c08610104000049d9f994ef5578e78507d4f25cd03a4c4b5700", 0x9, 0x3fd}, "6cc1888a6393f1b4285854c5368de438f8cc142ef6df1259b05ba1183bedbd31b642b4051bc7955610c61c329794e5311121c760cb8211c78e6947a99807bcc1"}) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r0, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r0, 0x4, 0x6, 0x101, 0x1, r0}, 0x6f3) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3ff, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(0x3, 0x8008551d, 0xffffffffffffffff) 2.653286397s ago: executing program 6 (id=7696): r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000900), 0x8a000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x5412, 0x38) r1 = socket(0xf, 0x3, 0x2) syz_genetlink_get_family_id$auto_cifs(&(0x7f0000000180), r1) setreuid$auto(0x0, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = gettid() process_vm_readv$auto(r2, &(0x7f0000000040)={0x0, 0x2}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x3, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r3, 0x6) r4 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) linkat$auto(r4, &(0x7f0000000040)='\x00', 0xffffffffffffff9c, &(0x7f0000000080)='&&\x00', 0x1000) move_pages$auto(r2, 0x9, &(0x7f0000000200)=&(0x7f00000009c0)="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", &(0x7f0000000080)=0x1ff, &(0x7f00000000c0)=0x46e5ff65, 0x2) r5 = socket(0x23, 0x80805, 0x0) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r5, 0x0, 0x840) io_getevents$auto(0x1, 0x401, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f00000001c0), 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) clone$auto(0x3fff, 0xad3, 0x0, 0x0, 0x8000002) socket(0xa, 0x5, 0x0) setsockopt$auto(0x4, 0x0, 0x8000000041, 0xfffffffffffffffc, 0x70) ioctl$auto_IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x8) read$auto(r0, &(0x7f0000000100)='\'\x00', 0xf94) 2.618976934s ago: executing program 1 (id=7697): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/system/node/node0/hugepages/hugepages-1048576kB/demote_size\x00', 0x123902, 0x0) write$auto(r1, &(0x7f00000001c0)='0p\xfb]$|\xcb1j\xeb0B|d\x1e\xec\x99\xb9\xfd\xd3\x89O\x9f\xac+\xf6\xd7/\xc9\xe9x\xd4\xf3\xc8\xf5\x7fW\xd3\xa6\x96\xd3^\xb8\xb4gq%H\xcc\x88r\xeaO\x8e\x10\t\xc7 P\xcf\xa7H\b\x04\x87\x98\x16`\xa3S\xd46\x10Wf\xc9<7\xcf\xc9\xf1\b\x9b\x8c\x9fu;\xc48(u\xf9Bx\n\xafW%/bBT\xa9\a\xed\xd2H4\x96\xa3U\xca\xf1\xef\x14dU\x15\x16\xa7\xdd\x01\x0e\xda\xc8\xd3\x00\xc5\b\x1a\xb0mN\x01\xb1\xc8B.U\xd1\x02\'\x9a\'\xf1;\xedJ\xf6@\xac\a\xf5\xf5 |\x1ex\xb7@=\xad\xe7\xff\xd6\xc1\xcf\x11\x0f\x99+v\x873\xc4\x17]\x17!]ct\xff\t\xb2A\x0f\x91\x02\xca&\x910x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100cda4429629bd7100f9db5f2502000000000000", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x404c0c0}, 0x80) r5 = socket(0x10, 0x2, 0x0) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/pids.max\x00', 0x281, 0x0) write$auto(r6, &(0x7f0000000000)='.&\x00', 0x9) sendmmsg$auto(r5, &(0x7f0000000200)={{0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x8, 0x4008) io_uring_setup$auto(0x6, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) 1.901900518s ago: executing program 5 (id=7701): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x29, 0x10, 0x0, 0x202) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0xffffffffffffffff, 0x0, 0x18) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffff6, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000dba6cbe734148e671d827bd7000fedbdf25160000001800018014fcd0aa7df488820002006e657464657673696d3200000000000005"], 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4040000) lseek$auto(r0, 0xffffffffffffffc0, 0x4) r3 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r3, &(0x7f0000000080)="632d1bfe595046ab5c98399adf270600de80", 0x12) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) write$auto(0x4, 0x0, 0x100082) setsockopt$auto(0xffffffffffffffff, 0x1, 0x21, 0x0, 0x0) socket(0x11, 0x80003, 0x300) sendmmsg$auto(0x3, 0x0, 0x7, 0x1f) shutdown$auto(0x200000003, 0x2) 1.886384394s ago: executing program 4 (id=7702): r0 = socket(0x2b, 0x1, 0x0) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x55) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x328, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_DEVICE_LIST={0x14, 0x9, 0x0, 0x1, [@typed={0xc, 0x100, 0x0, 0x0, @u64=0xc31}, @typed={0x4, 0xf2}]}, @NBD_ATTR_DEVICE_LIST={0x2e6, 0x9, 0x0, 0x1, [@generic="1c0e2aebe6e785d84d4df741dfc70b38e3f636d6f8a4fcdf19c543e3cee95f4fe95d72c1dac6f99cd1c76bf04e22d01e192b1729bd7324c52a365a7d50726e9212fb1b8c66914a041fa25b80a21590295d63cc021ac5f52df480fda48cb9c291f9c8d6b4a9c6a54bafcdf52f4f5efc9ceb90cd88d36ac201b0228c8ad99d7089f536bbc996cfafa95c5b207d3d713fb97eba8324247b50e4fa67662d5b64676707d76e9c7c24d4d57759", @generic="8c3f4e0f4c84bb4038b15fdce253be196ee7958a0716c54744defc5b7a5342a2133c0bd13a3dd605b39e1ce70782e4129ce85752951579f076e38caf99c990e6b824636a2838d21d", @generic="0d1a37777be6ecc667a8ef8bca643b3b95976358bf2627c5daf1a9aa65852a966a6dbf5f2314140b38316b87f55a70c76c04913b70cfb9aa5c9c94282d2eb336537e41d36181442ba8005118e3d54e01292ef58c3fc07724fc6b6ad79176e42a8864ebe292278ac773dbe9194bf9b6ec63a5b1be69cff1850dcb3ff6be79250463c7c36c6182a16e925f19ee829b3e8d5ac3802fdc66561bd7835d5ffae0", @typed={0xc, 0x57, 0x0, 0x0, @u64=0x8}, @generic="f4098cd03926c7d5f706bccdc1a0d2bf528b0f8019e3cbf52fcd5c90e98f6f0a8ee0ab0c24c3af92f513918eebba94c40d3539ebe78e95c884c6e1afa2f45d74e7861802e9c4e915f7ccc58685e77120bf1446cf1916475639839597cb895a6bda7373407bb90ef9693011ce667818b84e2c57c24337e798d8", @nested={0x8, 0xb6, 0x0, 0x1, [@nested={0x4, 0xd5}]}, @generic="5157e3686a9433265750be174e317880a5caa99d606dbea9b1e2be47d9cfb2a7897fa7c91fdae2808d1abcb716f6ccceb7118e32a0ba9aaa89d762a76069c4b541d0a14af86917f310c4f044e4a528132cee880ca4f1be48c820d9b475fbfaf2ad188afbb7c09dcdba669366eb828d47ba5edf157fb685fd562ffaab901f2d1a6a84a9954da4c8b1dd285d9b63f01f2eb2765c2747138307eb062af2d957db4eb37367502bf1ec656841ab5abce879fc9f8e5b586456a3bd3fd6d07ce9364d2d328caf634f"]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffd}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000000000000000}]}, 0x328}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x3, 0x0) madvise$auto(0x0, 0x20499d, 0x9) socket$nl_generic(0x10, 0x3, 0x10) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x6, 0x0, 0x5) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) socket(0xf, 0x3, 0x2) socket(0x2, 0xa, 0xe579) r4 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x11, &(0x7f0000000240)='!\x00\xba\xe4\x8a\xf0t\xaf\x82\xd7{\x98\xdd\xee\xc2f\xcaH\x90\xc57M\x87<<\n\xf2L\"Y\xa9\f\n\xbd?\xdd\b\xf7vu:\x00\xeaP\xa7=\xef\xc3\xdc\xf3=J\xf9\x9e\xd9\x02\xbb\xd3\xf8\xff*\xc2\xd8w\xe9\x00\x00\x01\x00h\xe2\x0f\x1b\x95L\xbf\xa5\xacH\"xV#\xc7e\x12\x83\xed\xc7\xc5\x9e\x84?\xfa=\f\xd8\x14\x00\x9fJl\xdd)i\x9f(#\xb7\xff:\x94\x8bd,\xb2\xfc\xde32\x87;\tx\xffM\x1f\x1d\xd8b\xa5\r\xb7v;\xfd\xa14M\xd3\x95\x86\x04\xd4\xda}\xcat}\x18K\x85\x9bBj\x8e\x95\xca\x87\xfe\x125\x154\x83\x94X,\xa4\xf3\xf6\xef\x1a\xb5iX\x99\xa1NO\xc5R\xc9\xc7\xd6\x8d?\x13\x9f\xaf\xf4\xbc\xa3j\xefQ\x7f\xc4\x86\xe8\xc6\xf8\xfe\x115\xd7\x89\x86\xc6T\x14\x00\x13\xb9mf\xc0\xc2%_N\xed\xa9\x02\xe5\x83\xa0\x01O%NHKp\xe0\xb3u\xdc\x8bb\xfa\xabD\x1d\x8a\x1e\xb4C\x05R\xdco\xa5\xce\xc9+\xf8\xf2X#', 0x1fe) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x6, 0x8000000000000006, 0x1d, 0x0, 0x6) 1.559723384s ago: executing program 5 (id=7703): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event1\x00', 0x40002, 0x0) ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000400)={0x2, 0x9, 0xc}) (fail_nth: 4) 974.717411ms ago: executing program 5 (id=7704): r0 = prctl$auto_PR_SCHED_CORE_GET(0x2000000, 0x0, 0xffffffffffffffff, 0x2, 0xd6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) ioctl$auto(0x3, 0x6f2d, r2) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x2a0a00, 0x0) memfd_secret$auto(0x800000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) socket(0x23, 0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) eventfd$auto(0x34b) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socketpair$auto(0x1e, 0x3, 0x24df, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) close_range$auto(0x2, 0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_SET_CQM(r0, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x2, 0x70bd26, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x7}, @NL80211_ATTR_DTIM_PERIOD={0x8, 0xd, 0x81}, @NL80211_ATTR_BSS_CTS_PROT={0x5, 0x1c, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000004}, 0x20000001) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x110) 971.234152ms ago: executing program 6 (id=7705): mmap$auto(0x0, 0x2020005, 0x2003, 0x20eb1, 0xfffffffffffffffa, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ftruncate$auto(0x1ff, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8d0}, 0x800) r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r0, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r0, 0x4, 0x6, 0x101, 0x1, r0}, 0x6f3) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/035/001\x00', 0xa901, 0x0) ioctl$auto(0x3, 0x80045505, 0x1) 897.708261ms ago: executing program 5 (id=7706): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) socket(0x1f, 0x800, 0xffffff01) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) r0 = socket(0x28, 0x1, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYRESHEX=r0, @ANYRES16=0x0, @ANYBLOB="2f212abd7800fddbdf2521000000"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dmmidi2\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x200000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) madvise$auto(0x108000, 0x800034, 0xa) unshare$auto(0x40000080) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400fe00e4e819d1eba5df4b92b50cc7c1119b183cb8c20711833e16fef33721c375387424ae26cfad96b2ad946a", @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x0) open$auto(0x0, 0x49193, 0xff90) r3 = openat$auto_fuse_conn_congestion_threshold_ops_control(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) fanotify_init$auto(0x65, 0x2) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) ioctl$auto_COMEDI_LOCK(r3, 0x6405, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000c80)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba4291bae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d7b519a855da7ac6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc000cd84061c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5e1", 0x300) close_range$auto(0x0, 0xfffffffffffff000, 0x0) 631.926249ms ago: executing program 5 (id=7707): openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cec27\x00', 0x80200, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) splice$auto(0x4, 0x0, 0x2, 0x0, 0x1000, 0xf) fcntl$auto(0x0, 0x407, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0) socket(0x28, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_NEW(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000940)={0x18, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x50040}, 0x810) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB="2f212abd7800fddbdf25"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x2, 0x15f4da0a, 0x6, 0x3, 0x300000000000000, 0x80000001, 0x5, 0x6d3c, 0x5, 0x2]}, 0x0) unshare$auto(0x40000080) open$auto(0x0, 0x49191, 0xff90) write$auto_tomoyo_operations_securityfs_if(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) readv$auto(0x3, &(0x7f0000000140)={0x0, 0x9}, 0x100000007) close_range$auto(0x0, 0xfffffffffffff000, 0x0) ioctl$auto(0xc8, 0x6, 0x5d6e859b) ioctl$auto_CEC_S_MODE(r0, 0x40046109, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x3ff) unshare$auto(0x40000080) socket(0x2a, 0x1, 0x1) 486.353096ms ago: executing program 1 (id=7708): r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @private=0xa010100}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x85, 0x0, 0xbe7, 0x0, 0x1e, 0x9}, 0x81}, 0x8000005, 0x8001) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) r1 = socket(0x23, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/setgroups\x00', 0x80100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) r5 = socket(0x10, 0x3, 0xa) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=ANY=[@ANYBLOB="24050000", @ANYRES16=0x0, @ANYBLOB="10002bbd7000fedbdf257f0000000600960012ff00000800a50001000000"], 0x24}}, 0x10) write$auto(r4, 0x0, 0x45c) openat$auto_dfs_dom_ops_debugfs(0xffffffffffffff9c, &(0x7f0000000100), 0x181000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r3, 0xc0285700, &(0x7f00000000c0)={0x8, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500"}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x5, 0x0) sendto$auto(0x3, 0x0, 0x79, 0x2, &(0x7f0000000440)=@tipc=@name={0x1e, 0x2, 0x3, {{0x1, 0x1}}}, 0x20) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) fstat$auto(0x2, 0x0) socket(0x2, 0x3, 0xa) 413.049746ms ago: executing program 4 (id=7709): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r0 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/input/event1\x00', 0x40002, 0x0) ioctl$auto_EVIOCGMASK(r0, 0x80104592, &(0x7f0000000400)={0x1f, 0x9, 0xc}) 209.435416ms ago: executing program 6 (id=7710): shmget$auto(0x6, 0x7ffffff8, 0x4) mmap$auto(0x0, 0x2020009, 0xffffffffffffffff, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0x7, &(0x7f0000000540)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_coun\xee\x00') madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xb) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x0, 0x12, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), r0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000700)='/sys/devices/virtual/net/rose9/statistics/rx_frame_errors\x00', 0x10080, 0x0) write$auto(r2, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r5 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, 0x0) ioctl$auto_VHOST_VSOCK_SET_GUEST_CID(r5, 0x4008af60, &(0x7f0000000000)=0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r3, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="050323bd7000fbdbdf250600000008000300", @ANYRES32=r7, @ANYBLOB="1b963e027b42dd99a7a53d24a5dfdfb1741c8f1e507a7799b4a5ee800c544373debbb40f004d05c50f1fb01fe99f68c38e0c197cd61b61ebd9c53382e7b8ce4db3018eb8d0865958bae8ce0ab229ab9c0e83b15e33974314d15705fe7a59735e4c0b5e69094692f48969579e857c586c083e56d6203c6d10"], 0x1c}, 0x1, 0x0, 0x0, 0x4019}, 0x4000040) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'nr0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'ipvlan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'vxcan1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10c2a494}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r1, @ANYBLOB="20002abd7000fcdbdf25040000001400018008000100", @ANYRES16=r7, @ANYRES32=r3, @ANYRES32=r8, @ANYBLOB="0c000180080003000100000058000180080003000700000008000100", @ANYRES32=0x0, @ANYBLOB="080003000e000000080003004000000008000100", @ANYRES8=r10, @ANYBLOB="080003000300000008000300f9ffffff0800d6c2", @ANYRES32=r9, @ANYBLOB="140002006272696467653000000000000000000044000180080003000001000008000100", @ANYRES32=r10, @ANYBLOB="1400020067656e657665310000000000000000001400020062617461647630000000000000000000080003002a320000"], 0xd0}, 0x1, 0x0, 0x0, 0x40}, 0x40000) statmount$auto(0x0, &(0x7f0000000180)={0x408, 0x4, 0x1ff, 0xe, 0xf, 0x7fffffffffffffff, 0x1ffdf, 0x9, 0x200003, 0x4, 0xa121, 0x8, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x8000, 0x7, 0x31d, 0x200, 0x0, 0x84, [0x0, 0x0, 0x40000000, 0x50100000000000, 0x2, 0x2000, 0x2, 0x6, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x698, 0xfffffffffffffffe, 0xffffffffffffbfff, 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x5, 0x145e, 0x3, 0x0, 0x0, 0x400000000005b8, 0xe, 0x3, 0x0, 0x0, 0x6, 0xfffffffffffffffd, 0x88e, 0x8000000000008, 0x0, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffa, 0x408, 0x4000000000, 0x7, 0x0, 0x4]}, 0x30001fe, 0x8) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x80}, 0x20040000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 21.360577ms ago: executing program 5 (id=7711): msgctl$auto(0x6, 0x944, 0x0) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty43\x00', 0x101240, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x1, 0x40009, 0xdf, 0x9b72, 0x7, 0x4a50) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) write$auto(0x3, 0x0, 0x7fffffff) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) write$auto_proc_timens_offsets_operations_base(0xffffffffffffffff, &(0x7f0000000040), 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r1, 0x0, 0xe) ioctl$auto_TCFLSH2(r0, 0x4b40, 0x0) 0s ago: executing program 4 (id=7712): r0 = socket(0x2b, 0x1, 0x0) connect$auto(r0, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x55) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000380)={0x328, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_DEVICE_LIST={0x14, 0x9, 0x0, 0x1, [@typed={0xc, 0x100, 0x0, 0x0, @u64=0xc31}, @typed={0x4, 0xf2}]}, @NBD_ATTR_DEVICE_LIST={0x2e6, 0x9, 0x0, 0x1, [@generic="1c0e2aebe6e785d84d4df741dfc70b38e3f636d6f8a4fcdf19c543e3cee95f4fe95d72c1dac6f99cd1c76bf04e22d01e192b1729bd7324c52a365a7d50726e9212fb1b8c66914a041fa25b80a21590295d63cc021ac5f52df480fda48cb9c291f9c8d6b4a9c6a54bafcdf52f4f5efc9ceb90cd88d36ac201b0228c8ad99d7089f536bbc996cfafa95c5b207d3d713fb97eba8324247b50e4fa67662d5b64676707d76e9c7c24d4d57759", @generic="8c3f4e0f4c84bb4038b15fdce253be196ee7958a0716c54744defc5b7a5342a2133c0bd13a3dd605b39e1ce70782e4129ce85752951579f076e38caf99c990e6b824636a2838d21d", @generic="0d1a37777be6ecc667a8ef8bca643b3b95976358bf2627c5daf1a9aa65852a966a6dbf5f2314140b38316b87f55a70c76c04913b70cfb9aa5c9c94282d2eb336537e41d36181442ba8005118e3d54e01292ef58c3fc07724fc6b6ad79176e42a8864ebe292278ac773dbe9194bf9b6ec63a5b1be69cff1850dcb3ff6be79250463c7c36c6182a16e925f19ee829b3e8d5ac3802fdc66561bd7835d5ffae0", @typed={0xc, 0x57, 0x0, 0x0, @u64=0x8}, @generic="f4098cd03926c7d5f706bccdc1a0d2bf528b0f8019e3cbf52fcd5c90e98f6f0a8ee0ab0c24c3af92f513918eebba94c40d3539ebe78e95c884c6e1afa2f45d74e7861802e9c4e915f7ccc58685e77120bf1446cf1916475639839597cb895a6bda7373407bb90ef9693011ce667818b84e2c57c24337e798d8", @nested={0x8, 0xb6, 0x0, 0x1, [@nested={0x4, 0xd5}]}, @generic="5157e3686a9433265750be174e317880a5caa99d606dbea9b1e2be47d9cfb2a7897fa7c91fdae2808d1abcb716f6ccceb7118e32a0ba9aaa89d762a76069c4b541d0a14af86917f310c4f044e4a528132cee880ca4f1be48c820d9b475fbfaf2ad188afbb7c09dcdba669366eb828d47ba5edf157fb685fd562ffaab901f2d1a6a84a9954da4c8b1dd285d9b63f01f2eb2765c2747138307eb062af2d957db4eb37367502bf1ec656841ab5abce879fc9f8e5b586456a3bd3fd6d07ce9364d2d328caf634f"]}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0xfffffffffffffffd}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0x8000000000000000}]}, 0x328}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x3, 0x0) madvise$auto(0x0, 0x20499d, 0x9) socket$nl_generic(0x10, 0x3, 0x10) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PAUSE_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x2}, @ETHTOOL_A_PAUSE_RX={0x5, 0x3, 0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) bpf$auto(0x6, 0x0, 0x5) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) socket(0xf, 0x3, 0x2) socket(0x2, 0xa, 0xe579) r4 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r4, 0x29, 0x11, &(0x7f0000000240)='!\x00\xba\xe4\x8a\xf0t\xaf\x82\xd7{\x98\xdd\xee\xc2f\xcaH\x90\xc57M\x87<<\n\xf2L\"Y\xa9\f\n\xbd?\xdd\b\xf7vu:\x00\xeaP\xa7=\xef\xc3\xdc\xf3=J\xf9\x9e\xd9\x02\xbb\xd3\xf8\xff*\xc2\xd8w\xe9\x00\x00\x01\x00h\xe2\x0f\x1b\x95L\xbf\xa5\xacH\"xV#\xc7e\x12\x83\xed\xc7\xc5\x9e\x84?\xfa=\f\xd8\x14\x00\x9fJl\xdd)i\x9f(#\xb7\xff:\x94\x8bd,\xb2\xfc\xde32\x87;\tx\xffM\x1f\x1d\xd8b\xa5\r\xb7v;\xfd\xa14M\xd3\x95\x86\x04\xd4\xda}\xcat}\x18K\x85\x9bBj\x8e\x95\xca\x87\xfe\x125\x154\x83\x94X,\xa4\xf3\xf6\xef\x1a\xb5iX\x99\xa1NO\xc5R\xc9\xc7\xd6\x8d?\x13\x9f\xaf\xf4\xbc\xa3j\xefQ\x7f\xc4\x86\xe8\xc6\xf8\xfe\x115\xd7\x89\x86\xc6T\x14\x00\x13\xb9mf\xc0\xc2%_N\xed\xa9\x02\xe5\x83\xa0\x01O%NHKp\xe0\xb3u\xdc\x8bb\xfa\xabD\x1d\x8a\x1e\xb4C\x05R\xdco\xa5\xce\xc9+\xf8\xf2X#', 0x1fe) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x6, 0x8000000000000006, 0x1d, 0x0, 0x6) kernel console output (not intermixed with test programs):                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                                   [ 1726.353996][T32427] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1726.409110][T32427] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1727.349279][ T29] audit: type=1804 audit(4294967307.529:96): pid=32438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.6926" name="/newroot/519/file0" dev="tmpfs" ino=2742 res=1 errno=0 [ 1727.412505][ T29] audit: type=1800 audit(4294967307.529:97): pid=32438 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.6926" name="file0" dev="tmpfs" ino=2742 res=0 errno=0 [ 1727.677202][T32444] sock: sock_timestamping_bind_phc: sock not bind to device [ 1728.989791][T13996] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 1731.257052][T32500] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1734.327775][T32518] caif:caif_disconnect_client(): nothing to disconnect [ 1735.787196][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1735.795286][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1736.707597][T32559] netlink: 4 bytes leftover after parsing attributes in process `syz.6.6959'. [ 1737.066588][T32574] netlink: 342 bytes leftover after parsing attributes in process `syz.6.6967'. [ 1737.102706][T32574] netlink: 342 bytes leftover after parsing attributes in process `syz.6.6967'. [ 1738.172431][T32594] netlink: 4 bytes leftover after parsing attributes in process `syz.1.6973'. [ 1738.517848][T32602] netlink: 330 bytes leftover after parsing attributes in process `syz.5.6975'. [ 1738.925335][T32616] scsi_dev_info_list_add_str: bad dev info string '/&c' 'W' '' [ 1739.036907][T32618] caif:caif_disconnect_client(): nothing to disconnect [ 1739.589131][T32605] caif:caif_disconnect_client(): nothing to disconnect [ 1741.896988][T32656] caif:caif_disconnect_client(): nothing to disconnect [ 1742.526043][T32684] FAULT_INJECTION: forcing a failure. [ 1742.526043][T32684] name failslab, interval 1, probability 0, space 0, times 0 [ 1742.567016][T32684] CPU: 0 UID: 0 PID: 32684 Comm: syz.6.7002 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1742.567071][T32684] Tainted: [U]=USER [ 1742.567082][T32684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1742.567103][T32684] Call Trace: [ 1742.567112][T32684] [ 1742.567125][T32684] dump_stack_lvl+0x16c/0x1f0 [ 1742.567183][T32684] should_fail_ex+0x497/0x5b0 [ 1742.567234][T32684] ? fs_reclaim_acquire+0xae/0x150 [ 1742.567278][T32684] should_failslab+0xc2/0x120 [ 1742.567312][T32684] __kmalloc_node_noprof+0xd1/0x520 [ 1742.567364][T32684] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 1742.567413][T32684] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1742.567453][T32684] __kvmalloc_node_noprof+0xad/0x1a0 [ 1742.567502][T32684] v4l2_ctrl_new+0x962/0x2030 [ 1742.567556][T32684] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1742.567603][T32684] ? __pfx_v4l2_ctrl_new+0x10/0x10 [ 1742.567651][T32684] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1742.567692][T32684] v4l2_ctrl_new_std+0x1b3/0x280 [ 1742.567745][T32684] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1742.567792][T32684] ? __pfx_v4l2_ctrl_new_std+0x10/0x10 [ 1742.567851][T32684] ? trace_kmalloc+0x2d/0xd0 [ 1742.567888][T32684] ? lockdep_init_map_type+0x16d/0x7d0 [ 1742.567931][T32684] ? media_request_object_init+0x100/0x180 [ 1742.567974][T32684] vicodec_open+0x201/0xf80 [ 1742.568017][T32684] v4l2_open+0x222/0x490 [ 1742.568059][T32684] ? __pfx_v4l2_open+0x10/0x10 [ 1742.568100][T32684] chrdev_open+0x237/0x6a0 [ 1742.568148][T32684] ? __pfx_apparmor_file_open+0x10/0x10 [ 1742.568190][T32684] ? __pfx_chrdev_open+0x10/0x10 [ 1742.568244][T32684] do_dentry_open+0xf59/0x1ea0 [ 1742.568290][T32684] ? __pfx_chrdev_open+0x10/0x10 [ 1742.568338][T32684] ? inode_permission+0xdd/0x5f0 [ 1742.568374][T32684] vfs_open+0x82/0x3f0 [ 1742.568403][T32684] ? may_open+0x1f2/0x400 [ 1742.568438][T32684] path_openat+0x1e81/0x2d70 [ 1742.568490][T32684] ? __pfx_path_openat+0x10/0x10 [ 1742.568540][T32684] do_filp_open+0x20c/0x470 [ 1742.568585][T32684] ? __pfx_do_filp_open+0x10/0x10 [ 1742.568644][T32684] ? alloc_fd+0x41f/0x760 [ 1742.568692][T32684] do_sys_openat2+0x17a/0x1e0 [ 1742.568724][T32684] ? __pfx_do_sys_openat2+0x10/0x10 [ 1742.568759][T32684] ? __pfx___might_resched+0x10/0x10 [ 1742.568808][T32684] __x64_sys_openat+0x175/0x210 [ 1742.568843][T32684] ? __pfx___x64_sys_openat+0x10/0x10 [ 1742.568879][T32684] ? rcu_is_watching+0x12/0xc0 [ 1742.568925][T32684] ? rcu_is_watching+0x12/0xc0 [ 1742.568973][T32684] do_syscall_64+0xcd/0x250 [ 1742.569008][T32684] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1742.569046][T32684] RIP: 0033:0x7f661058cd29 [ 1742.569071][T32684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1742.569106][T32684] RSP: 002b:00007f66114c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1742.569138][T32684] RAX: ffffffffffffffda RBX: 00007f66107a5fa0 RCX: 00007f661058cd29 [ 1742.569160][T32684] RDX: 00000000001ab442 RSI: 0000000020000340 RDI: ffffffffffffff9c [ 1742.569182][T32684] RBP: 00007f661060e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1742.569203][T32684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1742.569222][T32684] R13: 0000000000000000 R14: 00007f66107a5fa0 R15: 00007ffc1620a908 [ 1742.569252][T32684] [ 1744.472101][T32711] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7009'. [ 1745.524032][T32730] netlink: 326 bytes leftover after parsing attributes in process `syz.6.7014'. [ 1745.947968][T32740] delete_channel: no stack [ 1746.776309][T32722] pty pty38: ldisc open failed (-12), clearing slot 38 [ 1749.955353][ T343] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7038'. [ 1751.690247][T32759] Process accounting paused [ 1752.462620][ T400] FAULT_INJECTION: forcing a failure. [ 1752.462620][ T400] name failslab, interval 1, probability 0, space 0, times 0 [ 1752.493848][ T400] CPU: 0 UID: 0 PID: 400 Comm: syz.1.7056 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1752.493911][ T400] Tainted: [U]=USER [ 1752.493921][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1752.493940][ T400] Call Trace: [ 1752.493950][ T400] [ 1752.493961][ T400] dump_stack_lvl+0x16c/0x1f0 [ 1752.494018][ T400] should_fail_ex+0x497/0x5b0 [ 1752.494069][ T400] ? fs_reclaim_acquire+0xae/0x150 [ 1752.494111][ T400] should_failslab+0xc2/0x120 [ 1752.494148][ T400] __kmalloc_cache_noprof+0x68/0x420 [ 1752.494204][ T400] ? css_put+0x118/0x300 [ 1752.494254][ T400] allocate_file_region_entries+0x1a3/0x620 [ 1752.494319][ T400] ? __pfx_allocate_file_region_entries+0x10/0x10 [ 1752.494376][ T400] region_chg+0x85/0x140 [ 1752.494405][ T400] __vma_reservation_common+0x43d/0x740 [ 1752.494437][ T400] ? __pfx___vma_reservation_common+0x10/0x10 [ 1752.494468][ T400] ? __anon_vma_prepare+0x2e2/0x5e0 [ 1752.494520][ T400] ? __pfx___might_resched+0x10/0x10 [ 1752.494563][ T400] ? folio_zero_user+0x1a2/0x5f0 [ 1752.494614][ T400] hugetlb_fault+0x1cca/0x2fb0 [ 1752.494661][ T400] ? __pfx_hugetlb_fault+0x10/0x10 [ 1752.494711][ T400] ? find_vma+0xc0/0x140 [ 1752.494750][ T400] ? __pfx_find_vma+0x10/0x10 [ 1752.494792][ T400] handle_mm_fault+0x930/0xaa0 [ 1752.494844][ T400] do_user_addr_fault+0x7a3/0x13f0 [ 1752.494882][ T400] exc_page_fault+0x5c/0xc0 [ 1752.494931][ T400] asm_exc_page_fault+0x26/0x30 [ 1752.494966][ T400] RIP: 0010:rep_stos_alternative+0x13/0x80 [ 1752.495007][ T400] Code: 00 00 00 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 36 83 f9 08 73 13 85 c9 74 0a <88> 07 48 ff c7 48 ff c9 75 f6 c3 cc cc cc cc 48 89 07 48 83 c7 08 [ 1752.495041][ T400] RSP: 0018:ffffc9000b17fd40 EFLAGS: 00050206 [ 1752.495068][ T400] RAX: 0000000000000000 RBX: 000000000000000c RCX: 0000000000000003 [ 1752.495088][ T400] RDX: ffff8880316e9e00 RSI: ffffffff87691c7f RDI: 000000000000000c [ 1752.495109][ T400] RBP: 1ffff9200162ffaf R08: 0000000000000000 R09: fffffbfff20bfd52 [ 1752.495130][ T400] R10: ffffffff905fea97 R11: 00000000000a4001 R12: 000000000000000f [ 1752.495151][ T400] R13: 00007ffffffff000 R14: 0000000000000003 R15: 0000000000000000 [ 1752.495176][ T400] ? evdev_do_ioctl+0xe8f/0x1ae0 [ 1752.495228][ T400] evdev_do_ioctl+0xe9f/0x1ae0 [ 1752.495275][ T400] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 1752.495322][ T400] ? trace_lock_acquire+0x14e/0x1f0 [ 1752.495374][ T400] ? __pfx_evdev_ioctl+0x10/0x10 [ 1752.495420][ T400] evdev_ioctl+0x16a/0x1a0 [ 1752.495464][ T400] ? __pfx_evdev_ioctl+0x10/0x10 [ 1752.495509][ T400] __x64_sys_ioctl+0x190/0x200 [ 1752.495547][ T400] do_syscall_64+0xcd/0x250 [ 1752.495580][ T400] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1752.495616][ T400] RIP: 0033:0x7f158698cd29 [ 1752.495637][ T400] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1752.495667][ T400] RSP: 002b:00007f15867f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1752.495695][ T400] RAX: ffffffffffffffda RBX: 00007f1586ba5fa0 RCX: 00007f158698cd29 [ 1752.495714][ T400] RDX: 0000000020000400 RSI: 0000000080104592 RDI: 0000000000000003 [ 1752.495733][ T400] RBP: 00007f15867f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1752.495752][ T400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1752.495771][ T400] R13: 0000000000000000 R14: 00007f1586ba5fa0 R15: 00007ffc00c8eb18 [ 1752.495800][ T400] [ 1753.445173][ T408] Invalid ELF header magic: != ELF [ 1754.374327][ T422] Invalid ELF header magic: != ELF [ 1755.279787][ T439] FAULT_INJECTION: forcing a failure. [ 1755.279787][ T439] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1755.423821][ T439] CPU: 1 UID: 0 PID: 439 Comm: syz.1.7069 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1755.423870][ T439] Tainted: [U]=USER [ 1755.423880][ T439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1755.423898][ T439] Call Trace: [ 1755.423907][ T439] [ 1755.423919][ T439] dump_stack_lvl+0x16c/0x1f0 [ 1755.423978][ T439] should_fail_ex+0x497/0x5b0 [ 1755.424028][ T439] ? fs_reclaim_acquire+0xae/0x150 [ 1755.424070][ T439] should_fail_alloc_page+0xe7/0x130 [ 1755.424102][ T439] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1755.424146][ T439] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1755.424197][ T439] __alloc_pages_noprof+0x18e/0x2470 [ 1755.424248][ T439] ? unwind_get_return_address+0x59/0xa0 [ 1755.424287][ T439] ? arch_stack_walk+0xa7/0x100 [ 1755.424332][ T439] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1755.424382][ T439] ? stack_trace_save+0x95/0xd0 [ 1755.424425][ T439] ? __pfx_stack_trace_save+0x10/0x10 [ 1755.424470][ T439] ? trace_lock_acquire+0x14e/0x1f0 [ 1755.424534][ T439] ? stack_depot_save_flags+0x28/0x9e0 [ 1755.424583][ T439] ? is_bpf_text_address+0x30/0x1a0 [ 1755.424616][ T439] ? kasan_save_stack+0x42/0x60 [ 1755.424659][ T439] ? kasan_save_stack+0x33/0x60 [ 1755.424703][ T439] ? kasan_save_track+0x14/0x30 [ 1755.424756][ T439] ? __kasan_slab_alloc+0x89/0x90 [ 1755.424802][ T439] ? kmem_cache_alloc_node_noprof+0x1ca/0x3b0 [ 1755.424850][ T439] ? alloc_vmap_area+0x636/0x2a70 [ 1755.424887][ T439] ? __get_vm_area_node+0x19e/0x2f0 [ 1755.424927][ T439] ? __vmalloc_node_range_noprof+0x26a/0x1530 [ 1755.424973][ T439] ? __vmalloc_noprof+0x6d/0x90 [ 1755.425016][ T439] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1755.425054][ T439] ? policy_nodemask+0xea/0x4e0 [ 1755.425086][ T439] alloc_pages_mpol_noprof+0x2c8/0x620 [ 1755.425124][ T439] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1755.425161][ T439] ? do_raw_spin_lock+0x12d/0x2c0 [ 1755.425201][ T439] ? __pfx___page_table_check_ptes_set+0x10/0x10 [ 1755.425255][ T439] ? lock_acquire+0x2f/0xb0 [ 1755.425286][ T439] ? kasan_populate_vmalloc_pte+0xfb/0x160 [ 1755.425334][ T439] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 1755.425380][ T439] get_free_pages_noprof+0xc/0x40 [ 1755.425416][ T439] kasan_populate_vmalloc_pte+0x2d/0x160 [ 1755.425462][ T439] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 1755.425507][ T439] __apply_to_page_range+0x5fd/0xd30 [ 1755.425554][ T439] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 1755.425603][ T439] ? __pfx___apply_to_page_range+0x10/0x10 [ 1755.425650][ T439] ? insert_vmap_area+0x2ef/0x4d0 [ 1755.425688][ T439] alloc_vmap_area+0x93e/0x2a70 [ 1755.425740][ T439] ? __pfx_alloc_vmap_area+0x10/0x10 [ 1755.425784][ T439] __get_vm_area_node+0x19e/0x2f0 [ 1755.425830][ T439] __vmalloc_node_range_noprof+0x26a/0x1530 [ 1755.425876][ T439] ? __do_sys_init_module+0x13c/0x220 [ 1755.425908][ T439] ? rcu_is_watching+0x12/0xc0 [ 1755.425950][ T439] ? lock_release+0x4e2/0x6f0 [ 1755.425982][ T439] ? ksys_write+0x12b/0x250 [ 1755.426024][ T439] ? __pfx_lock_release+0x10/0x10 [ 1755.426058][ T439] ? rcu_is_watching+0x12/0xc0 [ 1755.426102][ T439] ? __do_sys_init_module+0x13c/0x220 [ 1755.426133][ T439] ? aa_get_newest_label+0x376/0x680 [ 1755.426166][ T439] ? __pfx_aa_get_newest_label+0x10/0x10 [ 1755.426200][ T439] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1755.426250][ T439] ? apparmor_capable+0x114/0x1d0 [ 1755.426281][ T439] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1755.426318][ T439] ? __do_sys_init_module+0x13c/0x220 [ 1755.426351][ T439] __vmalloc_noprof+0x6d/0x90 [ 1755.426396][ T439] ? __do_sys_init_module+0x13c/0x220 [ 1755.426429][ T439] __do_sys_init_module+0x13c/0x220 [ 1755.426462][ T439] ? __pfx___do_sys_init_module+0x10/0x10 [ 1755.426502][ T439] ? rcu_is_watching+0x12/0xc0 [ 1755.426546][ T439] ? rcu_is_watching+0x12/0xc0 [ 1755.426591][ T439] do_syscall_64+0xcd/0x250 [ 1755.426624][ T439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1755.426660][ T439] RIP: 0033:0x7f158698cd29 [ 1755.426683][ T439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1755.426720][ T439] RSP: 002b:00007f15867f9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000af [ 1755.426749][ T439] RAX: ffffffffffffffda RBX: 00007f1586ba5fa0 RCX: 00007f158698cd29 [ 1755.426771][ T439] RDX: 9999999999999999 RSI: 00000000000ffffc RDI: 0000000000000000 [ 1755.426790][ T439] RBP: 00007f15867f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1755.426809][ T439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1755.426828][ T439] R13: 0000000000000000 R14: 00007f1586ba5fa0 R15: 00007ffc00c8eb18 [ 1755.426857][ T439] [ 1755.975056][ C1] vkms_vblank_simulate: vblank timer overrun [ 1762.281630][ T503] syz.1.7086 invoked oom-killer: gfp_mask=0x100cca(GFP_HIGHUSER_MOVABLE), order=0, oom_score_adj=1000 [ 1762.317297][ T503] CPU: 0 UID: 0 PID: 503 Comm: syz.1.7086 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1762.317353][ T503] Tainted: [U]=USER [ 1762.317364][ T503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1762.317383][ T503] Call Trace: [ 1762.317392][ T503] [ 1762.317403][ T503] dump_stack_lvl+0x16c/0x1f0 [ 1762.317460][ T503] dump_header+0x101/0x900 [ 1762.317504][ T503] oom_kill_process+0x270/0xa60 [ 1762.317550][ T503] out_of_memory+0x351/0x1700 [ 1762.317597][ T503] ? __pfx_out_of_memory+0x10/0x10 [ 1762.317640][ T503] ? rcu_read_unlock+0x17/0x60 [ 1762.317671][ T503] ? __pfx_lock_release+0x10/0x10 [ 1762.317710][ T503] mem_cgroup_out_of_memory+0x207/0x270 [ 1762.317748][ T503] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1762.317791][ T503] ? do_raw_spin_unlock+0x172/0x230 [ 1762.317835][ T503] try_charge_memcg+0x54c/0xaf0 [ 1762.317888][ T503] ? __pfx_try_charge_memcg+0x10/0x10 [ 1762.317938][ T503] ? __pfx_lock_release+0x10/0x10 [ 1762.317974][ T503] ? lock_acquire+0x2f/0xb0 [ 1762.318006][ T503] ? mem_cgroup_swapin_charge_folio+0x286/0x500 [ 1762.318045][ T503] mem_cgroup_swapin_charge_folio+0x12b/0x500 [ 1762.318084][ T503] __read_swap_cache_async+0x436/0x660 [ 1762.318132][ T503] ? __pfx___read_swap_cache_async+0x10/0x10 [ 1762.318178][ T503] ? swp_swap_info+0x50/0x130 [ 1762.318210][ T503] ? __pfx_swp_swap_info+0x10/0x10 [ 1762.318246][ T503] swap_cluster_readahead+0x3ec/0x740 [ 1762.318289][ T503] ? trace_pelt_se_tp+0x106/0x170 [ 1762.318345][ T503] ? __pfx_swap_cluster_readahead+0x10/0x10 [ 1762.318388][ T503] ? rcu_is_watching+0x12/0xc0 [ 1762.318431][ T503] ? lock_release+0x4e2/0x6f0 [ 1762.318462][ T503] ? filemap_get_entry+0x1a8/0x3c0 [ 1762.318507][ T503] ? trace_lock_acquire+0x14e/0x1f0 [ 1762.318558][ T503] ? get_vma_policy+0x248/0x3c0 [ 1762.318592][ T503] swapin_readahead+0x12c/0xd60 [ 1762.318637][ T503] ? get_swap_device+0x1de/0x5e0 [ 1762.318666][ T503] ? __pfx_swapin_readahead+0x10/0x10 [ 1762.318708][ T503] ? __filemap_get_folio+0x2a5/0xaf0 [ 1762.318757][ T503] ? swap_cache_get_folio+0x1e0/0x460 [ 1762.318799][ T503] ? get_swap_device+0x245/0x5e0 [ 1762.318827][ T503] ? __pfx_swap_cache_get_folio+0x10/0x10 [ 1762.318870][ T503] ? lock_release+0x4e2/0x6f0 [ 1762.318901][ T503] ? block_dirty_folio+0x114/0x1b0 [ 1762.318943][ T503] do_swap_page+0x680/0x58c0 [ 1762.318986][ T503] ? __pfx_lock_release+0x10/0x10 [ 1762.319022][ T503] ? rcu_is_watching+0x12/0xc0 [ 1762.319064][ T503] ? trace_lock_acquire+0x14e/0x1f0 [ 1762.319111][ T503] ? __pfx_do_swap_page+0x10/0x10 [ 1762.319153][ T503] ? lock_acquire+0x2f/0xb0 [ 1762.319184][ T503] ? ___pte_offset_map+0x42/0x540 [ 1762.319223][ T503] ? __pfx_default_wake_function+0x10/0x10 [ 1762.319259][ T503] ? ___pte_offset_map+0x58/0x540 [ 1762.319296][ T503] ? ___pte_offset_map+0x1b9/0x540 [ 1762.319338][ T503] ? hrtimer_try_to_cancel+0x3a/0x2f0 [ 1762.319383][ T503] __handle_mm_fault+0x1055/0x2a40 [ 1762.319436][ T503] ? lock_vma_under_rcu+0x6b9/0x980 [ 1762.319482][ T503] ? __pfx___handle_mm_fault+0x10/0x10 [ 1762.319532][ T503] ? __pfx_down_read_trylock+0x10/0x10 [ 1762.319585][ T503] handle_mm_fault+0x3fa/0xaa0 [ 1762.319638][ T503] do_user_addr_fault+0x60d/0x13f0 [ 1762.319676][ T503] exc_page_fault+0x5c/0xc0 [ 1762.319725][ T503] asm_exc_page_fault+0x26/0x30 [ 1762.319759][ T503] RIP: 0033:0x7f1586954a7c [ 1762.319783][ T503] Code: 7c 10 8a 0e 74 0a 0f b7 74 16 fe 66 89 74 17 fe 88 0f c3 8b 4c 16 fc 8b 36 89 4c 17 fc 89 37 c3 c5 fa 6f 06 c5 fa 6f 4c 16 f0 fa 7f 07 c5 fa 7f 4c 17 f0 c3 66 0f 1f 84 00 00 00 00 00 48 8b [ 1762.319814][ T503] RSP: 002b:00007ffc00c8ec78 EFLAGS: 00010202 [ 1762.319839][ T503] RAX: 0000000020000000 RBX: 0000000000000004 RCX: 800000000000001e [ 1762.319859][ T503] RDX: 000000000000001e RSI: 00007f158620038d RDI: 0000000020000000 [ 1762.319878][ T503] RBP: 00007f1586ba7ba0 R08: 00007f1586600000 R09: 0000000000000001 [ 1762.319897][ T503] R10: 0000000000000001 R11: 0000000000000009 R12: 00000000001ae3cf [ 1762.319917][ T503] R13: 00007f1586ba6080 R14: 0000000000000032 R15: fffffffffffffffe [ 1762.319946][ T503] [ 1762.319957][ T503] memory: usage 307196kB, limit 307200kB, failcnt 14215 [ 1762.815288][ T503] memory+swap: usage 427772kB, limit 9007199254740988kB, failcnt 0 [ 1762.833107][ T503] kmem: usage 4592kB, limit 9007199254740988kB, failcnt 0 [ 1762.845700][ T503] Memory cgroup stats for /syz4: [ 1762.845886][ T503] cache 309080064 [ 1762.873602][ T503] rss 405504 [ 1762.879247][ T503] rss_huge 0 [ 1762.883124][ T503] shmem 309080064 [ 1762.894322][ T503] mapped_file 0 [ 1762.898523][ T503] dirty 0 [ 1762.906745][ T503] writeback 0 [ 1762.910734][ T503] workingset_refault_anon 22925 [ 1762.936205][ T503] workingset_refault_file 247 [ 1762.955259][ T503] swap 123461632 [ 1762.959564][ T503] swapcached 368640 [ 1762.974372][ T503] pgpgin 2576796 [ 1762.978673][ T503] pgpgout 2508813 [ 1762.992131][ T503] pgfault 1029471 [ 1763.002284][ T503] pgmajfault 5022 [ 1763.013614][ T503] inactive_anon 124149760 [ 1763.024092][ T503] active_anon 185536512 [ 1763.039720][ T503] inactive_file 0 [ 1763.045843][ T503] active_file 0 [ 1763.050673][ T503] unevictable 0 [ 1763.055293][ T503] hierarchical_memory_limit 314572800 [ 1763.061891][ T503] hierarchical_memsw_limit 9223372036854771712 [ 1763.090251][ T503] total_cache 309080064 [ 1763.096883][ T503] total_rss 405504 [ 1763.101400][ T503] total_rss_huge 0 [ 1763.123626][ T503] total_shmem 309080064 [ 1763.132322][ T503] total_mapped_file 0 [ 1763.138213][ T503] total_dirty 0 [ 1763.142543][ T503] total_writeback 0 [ 1763.152686][ T503] total_workingset_refault_anon 22925 [ 1763.162837][ T503] total_workingset_refault_file 247 [ 1763.179541][ T503] total_swap 123461632 [ 1763.185220][ T503] total_swapcached 368640 [ 1763.190440][ T503] total_pgpgin 2576796 [ 1763.201335][ T503] total_pgpgout 2508813 [ 1763.214725][ T503] total_pgfault 1029471 [ 1763.230256][ T503] total_pgmajfault 5022 [ 1763.240153][ T503] total_inactive_anon 124149760 [ 1763.250273][ T503] total_active_anon 185536512 [ 1763.260388][ T503] total_inactive_file 0 [ 1763.270513][ T503] total_active_file 0 [ 1763.280636][ T503] total_unevictable 0 [ 1763.290759][ T503] anon_cost 0 [ 1763.295203][ T503] file_cost 0 [ 1763.299417][ T503] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz4,task_memcg=/syz4,task=syz.4.6717,pid=31542,uid=0 [ 1763.328285][ T503] Memory cgroup out of memory: Killed process 31542 (syz.4.6717) total-vm:102960kB, anon-rss:1080kB, file-rss:36320kB, shmem-rss:0kB, UID:0 pgtables:144kB oom_score_adj:1000 [ 1764.182285][ T527] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7093'. [ 1764.195450][ T527] ieee80211 phy73: Selected rate control algorithm 'minstrel_ht' [ 1765.488837][ T31] oom_reaper: reaped process 31542 (syz.4.6717), now anon-rss:0kB, file-rss:33736kB, shmem-rss:0kB [ 1772.989906][ T665] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7133'. [ 1773.024081][ T665] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7133'. [ 1773.224255][ T671] Process accounting resumed [ 1774.331375][ T718] FAULT_INJECTION: forcing a failure. [ 1774.331375][ T718] name failslab, interval 1, probability 0, space 0, times 0 [ 1774.391394][ T718] CPU: 0 UID: 0 PID: 718 Comm: syz.6.7152 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1774.391443][ T718] Tainted: [U]=USER [ 1774.391453][ T718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1774.391471][ T718] Call Trace: [ 1774.391479][ T718] [ 1774.391490][ T718] dump_stack_lvl+0x16c/0x1f0 [ 1774.391547][ T718] should_fail_ex+0x497/0x5b0 [ 1774.391596][ T718] ? fs_reclaim_acquire+0xae/0x150 [ 1774.391639][ T718] should_failslab+0xc2/0x120 [ 1774.391670][ T718] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1774.391719][ T718] ? lock_release+0x4e2/0x6f0 [ 1774.391752][ T718] ? sk_prot_alloc+0x60/0x2a0 [ 1774.391795][ T718] sk_prot_alloc+0x60/0x2a0 [ 1774.391837][ T718] sk_alloc+0x36/0xb90 [ 1774.391866][ T718] inet_create+0x3a1/0x10a0 [ 1774.391913][ T718] ? inet_create+0x90/0x10a0 [ 1774.391960][ T718] __sock_create+0x335/0x8d0 [ 1774.392017][ T718] udp_sock_create4+0xa7/0x450 [ 1774.392053][ T718] ? __pfx_udp_sock_create4+0x10/0x10 [ 1774.392092][ T718] ? lock_acquire+0x2f/0xb0 [ 1774.392123][ T718] ? wg_socket_init+0x15d/0xb40 [ 1774.392169][ T718] wg_socket_init+0x642/0xb40 [ 1774.392213][ T718] ? __pfx_wg_socket_init+0x10/0x10 [ 1774.392256][ T718] ? trace_contention_end+0xee/0x140 [ 1774.392294][ T718] ? __mutex_lock+0x1cc/0xb10 [ 1774.392324][ T718] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 1774.392354][ T718] ? __pfx_wg_receive+0x10/0x10 [ 1774.392400][ T718] ? __pfx_lock_release+0x10/0x10 [ 1774.392435][ T718] ? rcu_is_watching+0x12/0xc0 [ 1774.392479][ T718] ? trace_irq_enable.constprop.0+0xea/0x140 [ 1774.392520][ T718] wg_set_device+0xda6/0x13e0 [ 1774.392572][ T718] ? __pfx_wg_set_device+0x10/0x10 [ 1774.392623][ T718] ? rcu_is_watching+0x12/0xc0 [ 1774.392667][ T718] ? __nla_parse+0x40/0x60 [ 1774.392705][ T718] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1774.392741][ T718] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1774.392780][ T718] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1774.392813][ T718] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1774.392845][ T718] ? genl_get_cmd+0x195/0x580 [ 1774.392898][ T718] ? bpf_lsm_capable+0x9/0x10 [ 1774.392934][ T718] ? security_capable+0x7e/0x260 [ 1774.392967][ T718] ? ns_capable+0xd7/0x110 [ 1774.393009][ T718] genl_rcv_msg+0x565/0x800 [ 1774.393042][ T718] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1774.393071][ T718] ? __pfx_wg_set_device+0x10/0x10 [ 1774.393127][ T718] netlink_rcv_skb+0x165/0x410 [ 1774.393175][ T718] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1774.393207][ T718] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1774.393261][ T718] ? down_read+0xc9/0x330 [ 1774.393294][ T718] ? __pfx_down_read+0x10/0x10 [ 1774.393328][ T718] ? netlink_deliver_tap+0x1ae/0xca0 [ 1774.393375][ T718] genl_rcv+0x28/0x40 [ 1774.393422][ T718] netlink_unicast+0x53c/0x7f0 [ 1774.393470][ T718] ? __pfx_netlink_unicast+0x10/0x10 [ 1774.393517][ T718] ? __phys_addr_symbol+0x30/0x80 [ 1774.393560][ T718] ? __check_object_size+0x488/0x710 [ 1774.393596][ T718] netlink_sendmsg+0x8b8/0xd70 [ 1774.393643][ T718] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1774.393694][ T718] ____sys_sendmsg+0x9ae/0xb40 [ 1774.393736][ T718] ? copy_msghdr_from_user+0x10b/0x160 [ 1774.393770][ T718] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1774.393816][ T718] ? rcu_is_watching+0x12/0xc0 [ 1774.393861][ T718] ? lock_release+0x4e2/0x6f0 [ 1774.393892][ T718] ? get_pid_task+0xfc/0x250 [ 1774.393940][ T718] ___sys_sendmsg+0x135/0x1e0 [ 1774.393972][ T718] ? get_pid_task+0x35/0x250 [ 1774.394027][ T718] ? __pfx____sys_sendmsg+0x10/0x10 [ 1774.394061][ T718] ? lock_release+0x4e2/0x6f0 [ 1774.394098][ T718] ? __pfx_lock_release+0x10/0x10 [ 1774.394131][ T718] ? trace_lock_acquire+0x14e/0x1f0 [ 1774.394184][ T718] ? __fget_files+0x206/0x3a0 [ 1774.394232][ T718] __sys_sendmsg+0x16e/0x220 [ 1774.394267][ T718] ? __pfx___sys_sendmsg+0x10/0x10 [ 1774.394307][ T718] ? rcu_is_watching+0x12/0xc0 [ 1774.394351][ T718] ? rcu_is_watching+0x12/0xc0 [ 1774.394397][ T718] do_syscall_64+0xcd/0x250 [ 1774.394430][ T718] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1774.394466][ T718] RIP: 0033:0x7f661058cd29 [ 1774.394489][ T718] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1774.394519][ T718] RSP: 002b:00007f66114c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1774.394549][ T718] RAX: ffffffffffffffda RBX: 00007f66107a5fa0 RCX: 00007f661058cd29 [ 1774.394570][ T718] RDX: 0000000000000080 RSI: 00000000200028c0 RDI: 0000000000000003 [ 1774.394589][ T718] RBP: 00007f66114c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1774.394608][ T718] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1774.394627][ T718] R13: 0000000000000000 R14: 00007f66107a5fa0 R15: 00007ffc1620a908 [ 1774.394655][ T718] [ 1774.950296][ C0] vkms_vblank_simulate: vblank timer overrun [ 1775.016626][ T718] wireguard: wg0: Could not create IPv4 socket [ 1775.140546][ T725] FAULT_INJECTION: forcing a failure. [ 1775.140546][ T725] name failslab, interval 1, probability 0, space 0, times 0 [ 1775.157938][ T725] CPU: 0 UID: 0 PID: 725 Comm: syz.1.7154 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1775.157985][ T725] Tainted: [U]=USER [ 1775.157996][ T725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1775.158013][ T725] Call Trace: [ 1775.158022][ T725] [ 1775.158031][ T725] dump_stack_lvl+0x16c/0x1f0 [ 1775.158084][ T725] should_fail_ex+0x497/0x5b0 [ 1775.158132][ T725] ? fs_reclaim_acquire+0xae/0x150 [ 1775.158174][ T725] should_failslab+0xc2/0x120 [ 1775.158204][ T725] __kmalloc_node_noprof+0xd1/0x520 [ 1775.158266][ T725] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 1775.158315][ T725] __kvmalloc_node_noprof+0xad/0x1a0 [ 1775.158364][ T725] kvm_dev_ioctl_get_cpuid+0x13a/0x640 [ 1775.158409][ T725] ? __might_fault+0xe3/0x190 [ 1775.158444][ T725] ? __pfx_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 1775.158488][ T725] ? __might_fault+0xe3/0x190 [ 1775.158522][ T725] ? __might_fault+0xe3/0x190 [ 1775.158560][ T725] kvm_arch_dev_ioctl+0x40e/0x730 [ 1775.158603][ T725] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 1775.158646][ T725] ? do_vfs_ioctl+0x513/0x1950 [ 1775.158681][ T725] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1775.158716][ T725] ? preempt_count_add+0x76/0x150 [ 1775.158750][ T725] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1775.158789][ T725] kvm_dev_ioctl+0x781/0x1aa0 [ 1775.158829][ T725] ? __pfx_lock_release+0x10/0x10 [ 1775.158860][ T725] ? trace_lock_acquire+0x14e/0x1f0 [ 1775.158907][ T725] ? __fget_files+0x40/0x3a0 [ 1775.158948][ T725] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1775.158990][ T725] ? __fget_files+0x206/0x3a0 [ 1775.159033][ T725] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 1775.159072][ T725] __x64_sys_ioctl+0x190/0x200 [ 1775.159108][ T725] do_syscall_64+0xcd/0x250 [ 1775.159141][ T725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1775.159176][ T725] RIP: 0033:0x7f158698cd29 [ 1775.159200][ T725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1775.159231][ T725] RSP: 002b:00007f15867f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1775.159269][ T725] RAX: ffffffffffffffda RBX: 00007f1586ba5fa0 RCX: 00007f158698cd29 [ 1775.159291][ T725] RDX: 0000000020000000 RSI: 00000000c008ae05 RDI: 0000000000000003 [ 1775.159311][ T725] RBP: 00007f15867f9090 R08: 0000000000000000 R09: 0000000000000000 [ 1775.159330][ T725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1775.159350][ T725] R13: 0000000000000000 R14: 00007f1586ba5fa0 R15: 00007ffc00c8eb18 [ 1775.159379][ T725] [ 1775.460844][ C0] vkms_vblank_simulate: vblank timer overrun [ 1777.621339][T28433] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1777.631685][T28433] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1777.641788][T28433] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1777.651590][T28433] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1777.660610][T28433] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1777.670121][T28433] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1777.802727][ T776] chnl_net:caif_netlink_parms(): no params data found [ 1777.865075][ T776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1777.873953][ T776] bridge0: port 1(bridge_slave_0) entered disabled state [ 1777.882852][ T776] bridge_slave_0: entered allmulticast mode [ 1777.891109][ T776] bridge_slave_0: entered promiscuous mode [ 1777.901394][ T776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1777.910200][ T776] bridge0: port 2(bridge_slave_1) entered disabled state [ 1777.919661][ T776] bridge_slave_1: entered allmulticast mode [ 1777.928383][ T776] bridge_slave_1: entered promiscuous mode [ 1777.950424][ T776] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1777.963379][ T776] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1777.987838][ T776] team0: Port device team_slave_0 added [ 1777.997435][ T776] team0: Port device team_slave_1 added [ 1778.018277][ T776] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1778.026807][ T776] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1778.058312][ T776] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1778.084179][ T776] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1778.092550][ T776] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1778.123639][ C0] vkms_vblank_simulate: vblank timer overrun [ 1778.146275][ T776] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1778.199627][ T790] program syz.6.7174 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1778.221398][ T776] hsr_slave_0: entered promiscuous mode [ 1778.229778][ T776] hsr_slave_1: entered promiscuous mode [ 1778.257147][ T776] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1778.268225][ T776] Cannot create hsr debugfs directory [ 1778.377388][ T776] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.429978][ T776] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.490859][ T776] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.531129][ T776] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1778.602423][ T776] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1778.620543][ T776] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1778.633009][ T776] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1778.649447][ T776] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1778.680912][ T776] bridge0: port 2(bridge_slave_1) entered blocking state [ 1778.689486][ T776] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1778.698344][ T776] bridge0: port 1(bridge_slave_0) entered blocking state [ 1778.706898][ T776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1778.783020][ T776] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1778.805520][T30144] bridge0: port 1(bridge_slave_0) entered disabled state [ 1778.820186][T30144] bridge0: port 2(bridge_slave_1) entered disabled state [ 1778.845416][ T776] 8021q: adding VLAN 0 to HW filter on device team0 [ 1778.871135][T14691] bridge0: port 1(bridge_slave_0) entered blocking state [ 1778.879803][T14691] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1778.891026][T14691] bridge0: port 2(bridge_slave_1) entered blocking state [ 1778.899813][T14691] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1779.096448][ T776] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1779.143158][ T776] veth0_vlan: entered promiscuous mode [ 1779.155270][ T776] veth1_vlan: entered promiscuous mode [ 1779.201973][ T776] veth0_macvtap: entered promiscuous mode [ 1779.217889][ T776] veth1_macvtap: entered promiscuous mode [ 1779.247242][ T776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1779.259959][ T776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.272565][ T776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1779.286926][ T776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.307245][ T776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1779.322539][ T776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.335489][ T776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1779.348224][ T776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.360592][ T776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1779.373338][ T776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.385615][ T776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1779.398416][ T776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.411173][ T776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1779.424549][ T776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.437020][ T776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1779.450111][ T776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.462135][ T776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1779.475260][ T776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.487318][ T776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1779.499981][ T776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.512809][ T776] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1779.531977][ T776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1779.545192][ T776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.558871][ T776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1779.571597][ T776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.583998][ T776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1779.596609][ T776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.609063][ T776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1779.621750][ T776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.633960][ T776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1779.646844][ T776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.659006][ T776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1779.671858][ T776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.684040][ T776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1779.696622][ T776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.708510][T13996] Bluetooth: hci1: command tx timeout [ 1779.708878][ T776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1779.727840][ T776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.740273][ T776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1779.753405][ T776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.765496][ T776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1779.778205][ T776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1779.791348][ T776] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1779.804208][ T776] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1779.815157][ T776] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1779.826237][ T776] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1779.837670][ T776] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1779.872953][ T776] ieee80211 phy74: Selected rate control algorithm 'minstrel_ht' [ 1779.910241][T30156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1779.912344][ T776] ieee80211 phy75: Selected rate control algorithm 'minstrel_ht' [ 1779.929337][T30156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1779.970018][T28809] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1779.981635][T28809] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1780.043574][ T801] netlink: 1204 bytes leftover after parsing attributes in process `syz.6.7184'. [ 1780.067332][ T801] netlink: 8 bytes leftover after parsing attributes in process `syz.6.7184'. [ 1781.154234][ T833] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7185'. [ 1781.221506][ T838] netlink: 1204 bytes leftover after parsing attributes in process `syz.5.7186'. [ 1781.282607][ T840] FAULT_INJECTION: forcing a failure. [ 1781.282607][ T840] name failslab, interval 1, probability 0, space 0, times 0 [ 1781.311657][ T841] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7186'. [ 1781.333753][ T840] CPU: 0 UID: 0 PID: 840 Comm: syz.6.7187 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1781.333803][ T840] Tainted: [U]=USER [ 1781.333813][ T840] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1781.333831][ T840] Call Trace: [ 1781.333840][ T840] [ 1781.333851][ T840] dump_stack_lvl+0x16c/0x1f0 [ 1781.333907][ T840] should_fail_ex+0x497/0x5b0 [ 1781.333956][ T840] ? fs_reclaim_acquire+0xae/0x150 [ 1781.333995][ T840] should_failslab+0xc2/0x120 [ 1781.334025][ T840] __kmalloc_noprof+0xce/0x4f0 [ 1781.334070][ T840] ? d_absolute_path+0x137/0x1b0 [ 1781.334098][ T840] ? tomoyo_encode2+0x100/0x3e0 [ 1781.334145][ T840] tomoyo_encode2+0x100/0x3e0 [ 1781.334189][ T840] tomoyo_realpath_from_path+0x1a7/0x710 [ 1781.334238][ T840] tomoyo_path_number_perm+0x248/0x5b0 [ 1781.334275][ T840] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1781.334314][ T840] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1781.334355][ T840] ? rcu_is_watching+0x12/0xc0 [ 1781.334410][ T840] ? preempt_count_add+0x76/0x150 [ 1781.334448][ T840] ? __pfx_lock_release+0x10/0x10 [ 1781.334481][ T840] ? trace_lock_acquire+0x14e/0x1f0 [ 1781.334527][ T840] ? __fget_files+0x40/0x3a0 [ 1781.334571][ T840] ? lock_acquire+0x2f/0xb0 [ 1781.334601][ T840] ? __fget_files+0x40/0x3a0 [ 1781.334646][ T840] ? __fget_files+0x206/0x3a0 [ 1781.334690][ T840] security_file_ioctl+0x9b/0x240 [ 1781.334732][ T840] __x64_sys_ioctl+0xb7/0x200 [ 1781.334769][ T840] do_syscall_64+0xcd/0x250 [ 1781.334802][ T840] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1781.334838][ T840] RIP: 0033:0x7f661058cd29 [ 1781.334860][ T840] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1781.334889][ T840] RSP: 002b:00007f66114c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1781.334917][ T840] RAX: ffffffffffffffda RBX: 00007f66107a5fa0 RCX: 00007f661058cd29 [ 1781.334937][ T840] RDX: 0000000020000080 RSI: 00000000c1004110 RDI: 0000000000000003 [ 1781.334957][ T840] RBP: 00007f66114c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1781.334976][ T840] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1781.334994][ T840] R13: 0000000000000000 R14: 00007f66107a5fa0 R15: 00007ffc1620a908 [ 1781.335023][ T840] [ 1781.335041][ T840] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1781.549287][ C0] vkms_vblank_simulate: vblank timer overrun [ 1781.802564][T13996] Bluetooth: hci1: command tx timeout [ 1782.169683][ T858] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7192'. [ 1782.208356][ T858] macsec0: entered allmulticast mode [ 1782.228765][ T858] veth1_macvtap: entered allmulticast mode [ 1783.874375][T13996] Bluetooth: hci1: command tx timeout [ 1785.261697][ T942] FAULT_INJECTION: forcing a failure. [ 1785.261697][ T942] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1785.293730][ T942] CPU: 0 UID: 0 PID: 942 Comm: syz.6.7213 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1785.293779][ T942] Tainted: [U]=USER [ 1785.293789][ T942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1785.293808][ T942] Call Trace: [ 1785.293817][ T942] [ 1785.293827][ T942] dump_stack_lvl+0x16c/0x1f0 [ 1785.293887][ T942] should_fail_ex+0x497/0x5b0 [ 1785.293937][ T942] ? fs_reclaim_acquire+0xae/0x150 [ 1785.293979][ T942] should_fail_alloc_page+0xe7/0x130 [ 1785.294013][ T942] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1785.294060][ T942] __alloc_pages_noprof+0x18e/0x2470 [ 1785.294113][ T942] ? cgroup_rstat_updated+0x2a/0xb20 [ 1785.294158][ T942] ? rcu_is_watching+0x12/0xc0 [ 1785.294201][ T942] ? rcu_is_watching+0x12/0xc0 [ 1785.294243][ T942] ? __mod_memcg_lruvec_state+0x53c/0x750 [ 1785.294284][ T942] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1785.294345][ T942] ? lru_gen_add_folio+0x1a0/0xef0 [ 1785.294395][ T942] ? __pfx_folios_put_refs+0x10/0x10 [ 1785.294439][ T942] ? lru_add+0x141/0xd70 [ 1785.294479][ T942] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1785.294517][ T942] ? policy_nodemask+0xea/0x4e0 [ 1785.294549][ T942] alloc_pages_mpol_noprof+0x2c8/0x620 [ 1785.294588][ T942] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1785.294625][ T942] ? is_bpf_text_address+0x30/0x1a0 [ 1785.294655][ T942] ? bpf_ksym_find+0x124/0x1c0 [ 1785.294695][ T942] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1785.294745][ T942] ? rcu_is_watching+0x12/0xc0 [ 1785.294790][ T942] folio_alloc_mpol_noprof+0x36/0xd0 [ 1785.294829][ T942] shmem_alloc_folio+0x135/0x160 [ 1785.294862][ T942] shmem_alloc_and_add_folio+0x48b/0xc00 [ 1785.294905][ T942] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1785.294946][ T942] ? shmem_allowable_huge_orders+0xd0/0x410 [ 1785.294990][ T942] shmem_get_folio_gfp+0x689/0x1530 [ 1785.295033][ T942] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1785.295076][ T942] ? filemap_map_pages+0xf92/0x16b0 [ 1785.295127][ T942] shmem_fault+0x200/0xae0 [ 1785.295165][ T942] ? __pfx_shmem_fault+0x10/0x10 [ 1785.295205][ T942] ? rcu_is_watching+0x12/0xc0 [ 1785.295248][ T942] ? lock_release+0x4e2/0x6f0 [ 1785.295280][ T942] ? __pfx_filemap_map_pages+0x10/0x10 [ 1785.295327][ T942] ? do_pte_missing+0xdd7/0x3e00 [ 1785.295376][ T942] ? __pfx_lock_release+0x10/0x10 [ 1785.295413][ T942] __do_fault+0x10a/0x490 [ 1785.295450][ T942] do_pte_missing+0xebd/0x3e00 [ 1785.295499][ T942] ? ___pte_offset_map+0x1b9/0x540 [ 1785.295541][ T942] __handle_mm_fault+0x103c/0x2a40 [ 1785.295596][ T942] ? __pfx___handle_mm_fault+0x10/0x10 [ 1785.295658][ T942] ? find_vma+0xc0/0x140 [ 1785.295697][ T942] ? __pfx_find_vma+0x10/0x10 [ 1785.295736][ T942] ? lock_release+0x4e2/0x6f0 [ 1785.295770][ T942] handle_mm_fault+0x3fa/0xaa0 [ 1785.295823][ T942] do_user_addr_fault+0x7a3/0x13f0 [ 1785.295861][ T942] exc_page_fault+0x5c/0xc0 [ 1785.295911][ T942] asm_exc_page_fault+0x26/0x30 [ 1785.295946][ T942] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 1785.295990][ T942] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 1785.296021][ T942] RSP: 0018:ffffc9000b92fca0 EFLAGS: 00050206 [ 1785.296046][ T942] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000005ce0 [ 1785.296066][ T942] RDX: ffffed1009fcad9c RSI: 0000000000001000 RDI: ffff88804fe51000 [ 1785.296087][ T942] RBP: 0000000000006ce0 R08: 0000000000000001 R09: ffffed1009fcad9b [ 1785.296107][ T942] R10: ffff88804fe56cdf R11: 0000000000000000 R12: 0000000000000000 [ 1785.296128][ T942] R13: ffff88804fe50000 R14: ffff88804fe50000 R15: ffff8880881b6380 [ 1785.296158][ T942] _copy_from_user+0x98/0xd0 [ 1785.296192][ T942] __sys_bpf+0x27c0/0x57a0 [ 1785.296229][ T942] ? __pfx___sys_bpf+0x10/0x10 [ 1785.296264][ T942] ? vfs_write+0x306/0x1150 [ 1785.296315][ T942] ? __pfx_vfs_write+0x10/0x10 [ 1785.296357][ T942] ? do_sys_openat2+0xb1/0x1e0 [ 1785.296398][ T942] ? ksys_write+0x1ba/0x250 [ 1785.296440][ T942] ? __pfx_ksys_write+0x10/0x10 [ 1785.296485][ T942] __x64_sys_bpf+0x78/0xc0 [ 1785.296522][ T942] do_syscall_64+0xcd/0x250 [ 1785.296554][ T942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1785.296591][ T942] RIP: 0033:0x7f661058cd29 [ 1785.296613][ T942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1785.296645][ T942] RSP: 002b:00007f66114c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1785.296673][ T942] RAX: ffffffffffffffda RBX: 00007f66107a5fa0 RCX: 00007f661058cd29 [ 1785.296695][ T942] RDX: 000000000000000c RSI: 0000000000000000 RDI: 0000000000000002 [ 1785.296714][ T942] RBP: 00007f66114c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1785.296733][ T942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1785.296752][ T942] R13: 0000000000000000 R14: 00007f66107a5fa0 R15: 00007ffc1620a908 [ 1785.296781][ T942] [ 1785.879326][ C0] vkms_vblank_simulate: vblank timer overrun [ 1785.962075][T13996] Bluetooth: hci1: command tx timeout [ 1787.124338][ T965] FAULT_INJECTION: forcing a failure. [ 1787.124338][ T965] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1787.146207][ T965] CPU: 1 UID: 0 PID: 965 Comm: syz.5.7220 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1787.146258][ T965] Tainted: [U]=USER [ 1787.146268][ T965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1787.146287][ T965] Call Trace: [ 1787.146296][ T965] [ 1787.146307][ T965] dump_stack_lvl+0x16c/0x1f0 [ 1787.146363][ T965] should_fail_ex+0x497/0x5b0 [ 1787.146412][ T965] ? fs_reclaim_acquire+0xae/0x150 [ 1787.146453][ T965] should_fail_alloc_page+0xe7/0x130 [ 1787.146486][ T965] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1787.146530][ T965] ? lock_acquire+0x2f/0xb0 [ 1787.146566][ T965] __alloc_pages_noprof+0x18e/0x2470 [ 1787.146625][ T965] ? rcu_is_watching+0x12/0xc0 [ 1787.146670][ T965] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1787.146724][ T965] ? rcu_is_watching+0x12/0xc0 [ 1787.146768][ T965] ? lock_release+0x4e2/0x6f0 [ 1787.146802][ T965] ? rcu_is_watching+0x12/0xc0 [ 1787.146846][ T965] ? lock_release+0x4e2/0x6f0 [ 1787.146892][ T965] ? is_bpf_text_address+0x8a/0x1a0 [ 1787.146923][ T965] ? __pfx_lock_release+0x10/0x10 [ 1787.146956][ T965] ? trace_lock_acquire+0x14e/0x1f0 [ 1787.147002][ T965] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1787.147042][ T965] ? policy_nodemask+0xea/0x4e0 [ 1787.147075][ T965] alloc_pages_mpol_noprof+0x2c8/0x620 [ 1787.147112][ T965] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1787.147150][ T965] ? is_bpf_text_address+0x30/0x1a0 [ 1787.147179][ T965] ? bpf_ksym_find+0x124/0x1c0 [ 1787.147219][ T965] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1787.147269][ T965] ? is_bpf_text_address+0x94/0x1a0 [ 1787.147302][ T965] pte_alloc_one+0x20/0x390 [ 1787.147340][ T965] do_pte_missing+0x1ae7/0x3e00 [ 1787.147396][ T965] __handle_mm_fault+0x103c/0x2a40 [ 1787.147451][ T965] ? __pfx___handle_mm_fault+0x10/0x10 [ 1787.147500][ T965] ? kasan_save_stack+0x33/0x60 [ 1787.147556][ T965] ? find_vma+0xc0/0x140 [ 1787.147595][ T965] ? __pfx_find_vma+0x10/0x10 [ 1787.147637][ T965] handle_mm_fault+0x3fa/0xaa0 [ 1787.147690][ T965] do_user_addr_fault+0x7a3/0x13f0 [ 1787.147727][ T965] exc_page_fault+0x5c/0xc0 [ 1787.147776][ T965] asm_exc_page_fault+0x26/0x30 [ 1787.147811][ T965] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 1787.147871][ T965] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 1787.147903][ T965] RSP: 0018:ffffc9000c4a7c60 EFLAGS: 00050212 [ 1787.147928][ T965] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000010 [ 1787.147947][ T965] RDX: fffff52001894fbe RSI: 0000000000000000 RDI: ffffc9000c4a7de0 [ 1787.147967][ T965] RBP: 0000000000000010 R08: 0000000000000001 R09: fffff52001894fbd [ 1787.147986][ T965] R10: ffffc9000c4a7def R11: 00000000000a4001 R12: 0000000000000000 [ 1787.148006][ T965] R13: ffffc9000c4a7de0 R14: 000000000000127f R15: dffffc0000000000 [ 1787.148036][ T965] _copy_from_user+0x98/0xd0 [ 1787.148070][ T965] blkdev_common_ioctl+0x1592/0x2220 [ 1787.148103][ T965] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1787.148143][ T965] ? __pfx_blkdev_common_ioctl+0x10/0x10 [ 1787.148176][ T965] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1787.148212][ T965] ? preempt_count_add+0x76/0x150 [ 1787.148252][ T965] ? __pfx_lock_release+0x10/0x10 [ 1787.148287][ T965] ? __fget_files+0x40/0x3a0 [ 1787.148334][ T965] blkdev_ioctl+0x1ca/0x670 [ 1787.148365][ T965] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1787.148396][ T965] ? __fget_files+0x206/0x3a0 [ 1787.148441][ T965] ? __pfx_blkdev_ioctl+0x10/0x10 [ 1787.148474][ T965] __x64_sys_ioctl+0x190/0x200 [ 1787.148512][ T965] do_syscall_64+0xcd/0x250 [ 1787.148544][ T965] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1787.148580][ T965] RIP: 0033:0x7f9e1958cd29 [ 1787.148603][ T965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1787.148631][ T965] RSP: 002b:00007f9e1a399038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1787.148660][ T965] RAX: ffffffffffffffda RBX: 00007f9e197a5fa0 RCX: 00007f9e1958cd29 [ 1787.148680][ T965] RDX: 0000000000000000 RSI: 000000000000127f RDI: 0000000000000003 [ 1787.148699][ T965] RBP: 00007f9e1a399090 R08: 0000000000000000 R09: 0000000000000000 [ 1787.148718][ T965] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1787.148737][ T965] R13: 0000000000000000 R14: 00007f9e197a5fa0 R15: 00007ffc63506488 [ 1787.148765][ T965] [ 1787.831785][ T976] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7223'. [ 1788.413906][ T987] bond0: option packets_per_slave: invalid value ( Xnp) [ 1788.470733][ T987] bond0: option packets_per_slave: allowed values 0 - 65535 [ 1789.949426][ T1035] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7239'. [ 1790.085060][ T1039] netlink: 342 bytes leftover after parsing attributes in process `syz.1.7240'. [ 1790.112819][ T1039] netlink: 342 bytes leftover after parsing attributes in process `syz.1.7240'. [ 1790.134223][ T1039] netlink: 342 bytes leftover after parsing attributes in process `syz.1.7240'. [ 1790.171754][ T1039] netlink: 342 bytes leftover after parsing attributes in process `syz.1.7240'. [ 1790.208439][ T1045] syz.1.7240 (1045) used obsolete PPPIOCDETACH ioctl [ 1790.224381][ T1039] netlink: 342 bytes leftover after parsing attributes in process `syz.1.7240'. [ 1790.657602][ T1058] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 1790.673147][ T29] audit: type=1326 audit(4294967370.849:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=1054 comm="syz.6.7244" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f661058cd29 code=0x0 [ 1790.699052][ C0] vkms_vblank_simulate: vblank timer overrun [ 1790.818930][ T29] audit: type=1800 audit(4294967370.999:99): pid=1053 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7243" name="SYSV000003ff" dev="tmpfs" ino=0 res=0 errno=0 [ 1791.960699][ T1098] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7255'. [ 1792.054798][ T1095] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7256'. [ 1792.596726][ T1115] FAULT_INJECTION: forcing a failure. [ 1792.596726][ T1115] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1792.612810][ T1115] CPU: 1 UID: 0 PID: 1115 Comm: syz.5.7260 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1792.612857][ T1115] Tainted: [U]=USER [ 1792.612867][ T1115] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1792.612887][ T1115] Call Trace: [ 1792.612896][ T1115] [ 1792.612907][ T1115] dump_stack_lvl+0x16c/0x1f0 [ 1792.612964][ T1115] should_fail_ex+0x497/0x5b0 [ 1792.613018][ T1115] _copy_from_user+0x2e/0xd0 [ 1792.613052][ T1115] copy_msghdr_from_user+0x99/0x160 [ 1792.613087][ T1115] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1792.613125][ T1115] ? kfree+0x274/0x4b0 [ 1792.613171][ T1115] ___sys_recvmsg+0xdc/0x1a0 [ 1792.613203][ T1115] ? __pfx____sys_recvmsg+0x10/0x10 [ 1792.613237][ T1115] ? rcu_is_watching+0x12/0xc0 [ 1792.613289][ T1115] ? __pfx___might_resched+0x10/0x10 [ 1792.613323][ T1115] ? __might_fault+0xe3/0x190 [ 1792.613360][ T1115] do_recvmmsg+0x2f8/0x740 [ 1792.613403][ T1115] ? __pfx_do_recvmmsg+0x10/0x10 [ 1792.613434][ T1115] ? vfs_write+0x306/0x1150 [ 1792.613477][ T1115] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 1792.613516][ T1115] ? __fget_files+0x206/0x3a0 [ 1792.613564][ T1115] __x64_sys_recvmmsg+0x239/0x290 [ 1792.613601][ T1115] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1792.613638][ T1115] ? rcu_is_watching+0x12/0xc0 [ 1792.613685][ T1115] ? rcu_is_watching+0x12/0xc0 [ 1792.613730][ T1115] do_syscall_64+0xcd/0x250 [ 1792.613762][ T1115] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1792.613798][ T1115] RIP: 0033:0x7f9e1958cd29 [ 1792.613820][ T1115] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1792.613850][ T1115] RSP: 002b:00007f9e1a399038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1792.613878][ T1115] RAX: ffffffffffffffda RBX: 00007f9e197a5fa0 RCX: 00007f9e1958cd29 [ 1792.613899][ T1115] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1792.613917][ T1115] RBP: 00007f9e1a399090 R08: 0000000000000000 R09: 0000000000000000 [ 1792.613937][ T1115] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 1792.613956][ T1115] R13: 0000000000000000 R14: 00007f9e197a5fa0 R15: 00007ffc63506488 [ 1792.613985][ T1115] [ 1792.808206][ T1118] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7262'. [ 1793.484455][ T1141] netlink: 20 bytes leftover after parsing attributes in process `syz.4.7270'. [ 1794.002599][ T29] audit: type=1804 audit(4294967374.179:100): pid=1157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.7275" name="/newroot/492/file0" dev="tmpfs" ino=2624 res=1 errno=0 [ 1794.039077][ T29] audit: type=1800 audit(4294967374.179:101): pid=1157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.7275" name="file0" dev="tmpfs" ino=2624 res=0 errno=0 [ 1795.125980][ T1185] netlink: 342 bytes leftover after parsing attributes in process `syz.6.7283'. [ 1795.180172][ T1185] IPv6: NLM_F_CREATE should be specified when creating new route [ 1795.227150][ T1184] netlink: 342 bytes leftover after parsing attributes in process `syz.6.7283'. [ 1795.428014][ T1192] Process accounting resumed [ 1795.520613][ T1196] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 1795.533421][ T1197] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 1795.999048][ T1224] netlink: 342 bytes leftover after parsing attributes in process `syz.6.7294'. [ 1796.683320][ T1246] bond0: option packets_per_slave: invalid value ( Xnp) [ 1796.692315][ T1246] bond0: option packets_per_slave: allowed values 0 - 65535 [ 1797.232662][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1797.240386][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1797.471126][ T1271] FAULT_INJECTION: forcing a failure. [ 1797.471126][ T1271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1797.492721][ T1271] CPU: 0 UID: 0 PID: 1271 Comm: syz.1.7309 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1797.492767][ T1271] Tainted: [U]=USER [ 1797.492777][ T1271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1797.492794][ T1271] Call Trace: [ 1797.492803][ T1271] [ 1797.492813][ T1271] dump_stack_lvl+0x16c/0x1f0 [ 1797.492865][ T1271] should_fail_ex+0x497/0x5b0 [ 1797.492916][ T1271] _copy_from_user+0x2e/0xd0 [ 1797.492948][ T1271] move_addr_to_kernel+0x68/0x160 [ 1797.492994][ T1271] __sys_sendto+0x1ba/0x4f0 [ 1797.493023][ T1271] ? __pfx___sys_sendto+0x10/0x10 [ 1797.493052][ T1271] ? rcu_is_watching+0x12/0xc0 [ 1797.493101][ T1271] ? rcu_is_watching+0x12/0xc0 [ 1797.493156][ T1271] __x64_sys_sendto+0xe0/0x1c0 [ 1797.493186][ T1271] ? trace_irq_enable.constprop.0+0xea/0x140 [ 1797.493225][ T1271] do_syscall_64+0xcd/0x250 [ 1797.493258][ T1271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1797.493295][ T1271] RIP: 0033:0x7f77ef38ebbc [ 1797.493327][ T1271] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 1797.493357][ T1271] RSP: 002b:00007f77f0290ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 1797.493388][ T1271] RAX: ffffffffffffffda RBX: 00007f77f0290fc0 RCX: 00007f77ef38ebbc [ 1797.493408][ T1271] RDX: 0000000000000020 RSI: 00007f77f0291010 RDI: 0000000000000006 [ 1797.493428][ T1271] RBP: 0000000000000000 R08: 00007f77f0290f14 R09: 000000000000000c [ 1797.493447][ T1271] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 1797.493466][ T1271] R13: 00007f77f0290f68 R14: 00007f77f0291010 R15: 0000000000000000 [ 1797.493495][ T1271] [ 1797.693069][ C0] vkms_vblank_simulate: vblank timer overrun [ 1797.723194][ T1250] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1797.732752][ T1250] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1797.753943][ T1250] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1797.771993][ T1250] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1797.783027][ T1250] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1797.810160][ T1250] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1797.818529][ T1250] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1797.870539][ T1250] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1797.988709][ T1278] bridge0: port 3(hsr0) entered blocking state [ 1797.996563][ T1278] bridge0: port 3(hsr0) entered disabled state [ 1798.004588][ T1278] hsr0: entered allmulticast mode [ 1798.011001][ T1278] hsr_slave_0: entered allmulticast mode [ 1798.019576][ T1278] hsr_slave_1: entered allmulticast mode [ 1798.031278][ T1278] hsr0: entered promiscuous mode [ 1798.038147][ T1278] bridge0: port 3(hsr0) entered blocking state [ 1798.045701][ T1278] bridge0: port 3(hsr0) entered forwarding state [ 1798.896415][ T1311] zram: Added device: zram5 [ 1799.060147][ T1314] caif:caif_disconnect_client(): nothing to disconnect [ 1799.144384][T13996] Bluetooth: hci0: command 0x0406 tx timeout [ 1799.784319][T13996] Bluetooth: hci4: command 0x0c1a tx timeout [ 1799.784568][T28433] Bluetooth: hci3: command 0x0c1a tx timeout [ 1799.863767][T28433] Bluetooth: hci1: command 0x0c1a tx timeout [ 1800.172650][ T1357] FAULT_INJECTION: forcing a failure. [ 1800.172650][ T1357] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1800.189545][ T1357] CPU: 0 UID: 0 PID: 1357 Comm: syz.6.7333 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1800.189593][ T1357] Tainted: [U]=USER [ 1800.189605][ T1357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1800.189623][ T1357] Call Trace: [ 1800.189633][ T1357] [ 1800.189645][ T1357] dump_stack_lvl+0x16c/0x1f0 [ 1800.189700][ T1357] should_fail_ex+0x497/0x5b0 [ 1800.189748][ T1357] ? fs_reclaim_acquire+0xae/0x150 [ 1800.189792][ T1357] should_fail_alloc_page+0xe7/0x130 [ 1800.189837][ T1357] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1800.189881][ T1357] ? __pfx___up_read+0x10/0x10 [ 1800.189921][ T1357] __alloc_pages_noprof+0x18e/0x2470 [ 1800.189972][ T1357] ? do_user_addr_fault+0x83d/0x13f0 [ 1800.190008][ T1357] ? rcu_is_watching+0x12/0xc0 [ 1800.190052][ T1357] ? trace_irq_enable.constprop.0+0xea/0x140 [ 1800.190089][ T1357] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1800.190145][ T1357] ? rep_movs_alternative+0x4a/0x70 [ 1800.190189][ T1357] ? _copy_from_iter+0x159/0x1400 [ 1800.190223][ T1357] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1800.190259][ T1357] ? policy_nodemask+0xea/0x4e0 [ 1800.190291][ T1357] alloc_pages_mpol_noprof+0x2c8/0x620 [ 1800.190329][ T1357] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1800.190370][ T1357] ? copy_page_from_iter+0x108/0x120 [ 1800.190404][ T1357] pipe_write+0xe38/0x1b30 [ 1800.190451][ T1357] ? get_pid_task+0x21/0x250 [ 1800.190502][ T1357] ? __pfx_pipe_write+0x10/0x10 [ 1800.190549][ T1357] ? apparmor_file_permission+0x251/0x400 [ 1800.190585][ T1357] ? bpf_lsm_file_permission+0x9/0x10 [ 1800.190618][ T1357] ? security_file_permission+0x71/0x210 [ 1800.190666][ T1357] vfs_write+0x5ae/0x1150 [ 1800.190707][ T1357] ? __pfx_pipe_write+0x10/0x10 [ 1800.190755][ T1357] ? __pfx_vfs_write+0x10/0x10 [ 1800.190798][ T1357] ? __fget_files+0x40/0x3a0 [ 1800.190856][ T1357] ksys_write+0x207/0x250 [ 1800.190897][ T1357] ? __pfx_ksys_write+0x10/0x10 [ 1800.190939][ T1357] ? rcu_is_watching+0x12/0xc0 [ 1800.190982][ T1357] ? rcu_is_watching+0x12/0xc0 [ 1800.191027][ T1357] do_syscall_64+0xcd/0x250 [ 1800.191060][ T1357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1800.191097][ T1357] RIP: 0033:0x7f661058cd29 [ 1800.191121][ T1357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1800.191156][ T1357] RSP: 002b:00007f66114c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1800.191186][ T1357] RAX: ffffffffffffffda RBX: 00007f66107a5fa0 RCX: 00007f661058cd29 [ 1800.191208][ T1357] RDX: 000000000000ffd8 RSI: 0000000000000000 RDI: 0000000000000003 [ 1800.191226][ T1357] RBP: 00007f66114c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1800.191245][ T1357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1800.191264][ T1357] R13: 0000000000000000 R14: 00007f66107a5fa0 R15: 00007ffc1620a908 [ 1800.191292][ T1357] [ 1800.328885][ T1350] Process accounting resumed [ 1801.864087][T28433] Bluetooth: hci4: command 0x0c1a tx timeout [ 1801.943842][T28433] Bluetooth: hci1: command 0x0c1a tx timeout [ 1802.260993][ T1404] [U]  [ 1802.264419][ T1404] [U] [ 1802.267726][ T1404] [U] [ 1802.270996][ T1404] [U] [ 1802.324084][ T1404] [U] [ 1802.327397][ T1404] [U] [ 1802.330675][ T1404] [U] [ 1802.333945][ T1404] [U] [ 1802.393833][ T1404] [U] [ 1802.395521][ T1414] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(1.2.0), cmd(14) [ 1802.397182][ T1404] [U] !!aڤ@O P5 [ 1802.463448][ T1404] [U] >#-=e8"Ep^Y_k'&l=[Y:FUf/#(xT@)M5 ; UȔ [ 1802.490518][ T1404] [U]  zz\H7C*VcL [ 1802.503130][ T1404] [U] 2K,]転> [ 1802.512912][ T1404] [U] Z_a-bgpG^CJ7mi=l(L^w/ |DQnf7" ;g1$+OgP,ޤC: [ 1802.539411][ T1404] [U] t|԰UoLFx*?PָBq/62] 45hJץ0 [ 1802.548962][ T1404] [U] O{q;Qfzӕ u`^ir†9j bDy~›0Li= [ 1802.671894][ T1404] [U] ̝4hKϕРՂMdݳ?7(T2G]+Lf [ 1802.729967][ T1404] [U] Q;gQϓ~)vdj?goټsB" h $v\;igHTq!uDr5RimNTHf j [ 1803.619911][ T1428] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(1.2.0), cmd(14) [ 1803.626589][ T1430] sock: sock_set_timeout: `syz.1.7358' (pid 1430) tries to set negative timeout [ 1803.948159][T28433] Bluetooth: hci4: command 0x0c1a tx timeout [ 1804.023795][T28433] Bluetooth: hci1: command 0x0c1a tx timeout [ 1804.245794][ T1448] could not allocate digest TFM handle [ 1806.011173][ T1488] netlink: 8 bytes leftover after parsing attributes in process `syz.4.7368'. [ 1806.575065][ T1500] FAULT_INJECTION: forcing a failure. [ 1806.575065][ T1500] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1806.641678][ T1500] CPU: 0 UID: 0 PID: 1500 Comm: syz.4.7373 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1806.641735][ T1500] Tainted: [U]=USER [ 1806.641747][ T1500] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1806.641767][ T1500] Call Trace: [ 1806.641778][ T1500] [ 1806.641789][ T1500] dump_stack_lvl+0x16c/0x1f0 [ 1806.641851][ T1500] should_fail_ex+0x497/0x5b0 [ 1806.641904][ T1500] ? fs_reclaim_acquire+0xae/0x150 [ 1806.641949][ T1500] should_fail_alloc_page+0xe7/0x130 [ 1806.641985][ T1500] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1806.642040][ T1500] __alloc_pages_noprof+0x18e/0x2470 [ 1806.642098][ T1500] ? kasan_save_stack+0x42/0x60 [ 1806.642146][ T1500] ? kasan_save_stack+0x33/0x60 [ 1806.642193][ T1500] ? kasan_save_track+0x14/0x30 [ 1806.642240][ T1500] ? __kasan_slab_alloc+0x89/0x90 [ 1806.642288][ T1500] ? kmem_cache_alloc_noprof+0x1c8/0x3b0 [ 1806.642341][ T1500] ? __anon_vma_prepare+0xae/0x5e0 [ 1806.642391][ T1500] ? __vmf_anon_prepare+0x11c/0x240 [ 1806.642445][ T1500] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1806.642499][ T1500] ? __get_user_pages+0x8d9/0x3b50 [ 1806.642548][ T1500] ? __mm_populate+0x1d6/0x380 [ 1806.642601][ T1500] ? mtree_range_walk+0x715/0xbe0 [ 1806.642655][ T1500] ? rcu_is_watching+0x12/0xc0 [ 1806.642700][ T1500] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1806.642741][ T1500] ? policy_nodemask+0xea/0x4e0 [ 1806.642774][ T1500] alloc_pages_mpol_noprof+0x2c8/0x620 [ 1806.642815][ T1500] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1806.642854][ T1500] ? page_ext_put+0x48/0xd0 [ 1806.642903][ T1500] ? page_table_check_set.part.0+0x3b8/0x550 [ 1806.642960][ T1500] folio_alloc_mpol_noprof+0x36/0xd0 [ 1806.643000][ T1500] vma_alloc_folio_noprof+0xee/0x1b0 [ 1806.643039][ T1500] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1806.643079][ T1500] ? trace_lock_acquire+0x14e/0x1f0 [ 1806.643128][ T1500] ? rcu_is_watching+0x12/0xc0 [ 1806.643176][ T1500] do_pte_missing+0x2017/0x3e00 [ 1806.643234][ T1500] __handle_mm_fault+0x103c/0x2a40 [ 1806.643291][ T1500] ? __pfx___handle_mm_fault+0x10/0x10 [ 1806.643342][ T1500] ? lock_release+0x4e2/0x6f0 [ 1806.643375][ T1500] ? follow_page_pte+0x3c3/0x1b20 [ 1806.643431][ T1500] ? __pfx_lock_release+0x10/0x10 [ 1806.643467][ T1500] ? __pfx___pte_offset_map_lock+0x10/0x10 [ 1806.643507][ T1500] ? lock_release+0x4e2/0x6f0 [ 1806.643547][ T1500] ? follow_page_pte+0x3f7/0x1b20 [ 1806.643601][ T1500] handle_mm_fault+0x3fa/0xaa0 [ 1806.643655][ T1500] __get_user_pages+0x8d9/0x3b50 [ 1806.643707][ T1500] ? __pfx_mt_find+0x10/0x10 [ 1806.643739][ T1500] ? validate_mm+0x3da/0x530 [ 1806.643788][ T1500] ? __pfx___get_user_pages+0x10/0x10 [ 1806.643836][ T1500] ? __mm_populate+0x21d/0x380 [ 1806.643883][ T1500] ? lock_acquire+0x2f/0xb0 [ 1806.643923][ T1500] populate_vma_page_range+0x27f/0x3a0 [ 1806.643975][ T1500] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1806.644027][ T1500] ? __pfx_find_vma_intersection+0x10/0x10 [ 1806.644070][ T1500] ? vm_mmap_pgoff+0x29b/0x3a0 [ 1806.644122][ T1500] __mm_populate+0x1d6/0x380 [ 1806.644175][ T1500] ? __pfx___mm_populate+0x10/0x10 [ 1806.644229][ T1500] ? up_write+0x1b2/0x520 [ 1806.644271][ T1500] vm_mmap_pgoff+0x2d3/0x3a0 [ 1806.644321][ T1500] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1806.644374][ T1500] ? __x64_sys_futex+0x1e1/0x4c0 [ 1806.644433][ T1500] ? __x64_sys_futex+0x1ea/0x4c0 [ 1806.644487][ T1500] ksys_mmap_pgoff+0x7d/0x5c0 [ 1806.644532][ T1500] ? rcu_is_watching+0x12/0xc0 [ 1806.644579][ T1500] __x64_sys_mmap+0x125/0x190 [ 1806.644617][ T1500] do_syscall_64+0xcd/0x250 [ 1806.644652][ T1500] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1806.644690][ T1500] RIP: 0033:0x7f0fd1b8cd29 [ 1806.644716][ T1500] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1806.644748][ T1500] RSP: 002b:00007f0fd2a88038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1806.644779][ T1500] RAX: ffffffffffffffda RBX: 00007f0fd1da5fa0 RCX: 00007f0fd1b8cd29 [ 1806.644801][ T1500] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 1806.644821][ T1500] RBP: 00007f0fd1c0e2a0 R08: 0000000000000007 R09: 0000000000028000 [ 1806.644841][ T1500] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1806.644860][ T1500] R13: 0000000000000000 R14: 00007f0fd1da5fa0 R15: 00007ffe9ae20818 [ 1806.644890][ T1500] [ 1807.144707][ C0] vkms_vblank_simulate: vblank timer overrun [ 1808.288196][ T1527] netlink: 342 bytes leftover after parsing attributes in process `syz.4.7380'. [ 1809.170125][ T1549] [U] A3siΕ𗈫Nȵ *'dmG`p};  [ 1809.178862][ T1549] [U] [ 1809.182141][ T1549] [U] [ 1809.185413][ T1549] [U] [ 1809.188651][ C0] vkms_vblank_simulate: vblank timer overrun [ 1809.234085][ T1549] [U] [ 1809.237392][ T1549] [U] [ 1809.240665][ T1549] [U] [ 1809.243931][ T1549] [U] [ 1809.275345][ T1549] [U] [ 1809.278655][ T1549] [U] [ 1809.281927][ T1549] [U] [ 1809.285202][ T1549] [U] [ 1809.316924][ T1552] FAULT_INJECTION: forcing a failure. [ 1809.316924][ T1552] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1809.333588][ T1549] [U] [ 1809.336879][ T1549] [U] [ 1809.340149][ T1549] [U] [ 1809.343424][ T1549] [U] [ 1809.373851][ T1552] CPU: 0 UID: 0 PID: 1552 Comm: syz.5.7388 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1809.373904][ T1552] Tainted: [U]=USER [ 1809.373914][ T1552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1809.373932][ T1552] Call Trace: [ 1809.373941][ T1552] [ 1809.373962][ T1552] dump_stack_lvl+0x16c/0x1f0 [ 1809.374017][ T1552] should_fail_ex+0x497/0x5b0 [ 1809.374070][ T1552] _copy_to_user+0x32/0xd0 [ 1809.374103][ T1552] simple_read_from_buffer+0xd0/0x160 [ 1809.374142][ T1552] proc_fail_nth_read+0x198/0x270 [ 1809.374175][ T1552] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1809.374208][ T1552] ? bpf_lsm_file_permission+0x9/0x10 [ 1809.374240][ T1552] ? security_file_permission+0x71/0x210 [ 1809.374283][ T1552] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1809.374317][ T1552] vfs_read+0x1df/0xbe0 [ 1809.374357][ T1552] ? __fget_files+0x1fc/0x3a0 [ 1809.374401][ T1552] ? __pfx___mutex_lock+0x10/0x10 [ 1809.374432][ T1552] ? __pfx_vfs_read+0x10/0x10 [ 1809.374478][ T1552] ? __fget_files+0x206/0x3a0 [ 1809.374526][ T1552] ksys_read+0x12b/0x250 [ 1809.374566][ T1552] ? __pfx_ksys_read+0x10/0x10 [ 1809.374608][ T1552] ? rcu_is_watching+0x12/0xc0 [ 1809.374652][ T1552] ? rcu_is_watching+0x12/0xc0 [ 1809.374697][ T1552] do_syscall_64+0xcd/0x250 [ 1809.374730][ T1552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1809.374767][ T1552] RIP: 0033:0x7f9e1958b73c [ 1809.374790][ T1552] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1809.374821][ T1552] RSP: 002b:00007f9e1a378030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1809.374850][ T1552] RAX: ffffffffffffffda RBX: 00007f9e197a6080 RCX: 00007f9e1958b73c [ 1809.374871][ T1552] RDX: 000000000000000f RSI: 00007f9e1a3780a0 RDI: 0000000000000004 [ 1809.374890][ T1552] RBP: 00007f9e1a378090 R08: 0000000000000000 R09: 0000000000000000 [ 1809.374910][ T1552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1809.374929][ T1552] R13: 0000000000000001 R14: 00007f9e197a6080 R15: 00007ffc63506488 [ 1809.374974][ T1552] [ 1809.629892][ C0] vkms_vblank_simulate: vblank timer overrun [ 1811.044002][ T1573] FAULT_INJECTION: forcing a failure. [ 1811.044002][ T1573] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1811.064150][ T1573] CPU: 1 UID: 0 PID: 1573 Comm: syz.5.7395 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1811.064199][ T1573] Tainted: [U]=USER [ 1811.064210][ T1573] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1811.064229][ T1573] Call Trace: [ 1811.064239][ T1573] [ 1811.064250][ T1573] dump_stack_lvl+0x16c/0x1f0 [ 1811.064305][ T1573] should_fail_ex+0x497/0x5b0 [ 1811.064357][ T1573] strncpy_from_user+0x3b/0x2d0 [ 1811.064404][ T1573] getname_flags.part.0+0x8f/0x550 [ 1811.064439][ T1573] getname+0x8d/0xe0 [ 1811.064477][ T1573] do_sys_openat2+0x104/0x1e0 [ 1811.064510][ T1573] ? __pfx_do_sys_openat2+0x10/0x10 [ 1811.064544][ T1573] ? __fget_files+0x206/0x3a0 [ 1811.064590][ T1573] __x64_sys_openat+0x175/0x210 [ 1811.064624][ T1573] ? __pfx___x64_sys_openat+0x10/0x10 [ 1811.064657][ T1573] ? ksys_write+0x1ba/0x250 [ 1811.064701][ T1573] ? rcu_is_watching+0x12/0xc0 [ 1811.064746][ T1573] ? rcu_is_watching+0x12/0xc0 [ 1811.064792][ T1573] do_syscall_64+0xcd/0x250 [ 1811.064831][ T1573] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1811.064868][ T1573] RIP: 0033:0x7f9e1958cd29 [ 1811.064891][ T1573] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1811.064923][ T1573] RSP: 002b:00007f9e1a399038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1811.064952][ T1573] RAX: ffffffffffffffda RBX: 00007f9e197a5fa0 RCX: 00007f9e1958cd29 [ 1811.064973][ T1573] RDX: 0000000000000382 RSI: 0000000020000000 RDI: ffffffffffffff9c [ 1811.064994][ T1573] RBP: 00007f9e1a399090 R08: 0000000000000000 R09: 0000000000000000 [ 1811.065013][ T1573] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1811.065032][ T1573] R13: 0000000000000000 R14: 00007f9e197a5fa0 R15: 00007ffc63506488 [ 1811.065060][ T1573] [ 1815.082651][ T1660] ima: policy update failed [ 1815.093584][ T29] audit: type=1802 audit(4294967395.269:102): pid=1660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.7421" res=0 errno=0 [ 1815.784041][ T1674] nbd: socks must be embedded in a SOCK_ITEM attr [ 1815.804243][ T1674] block nbd0: shutting down sockets [ 1816.130369][ T1691] netlink: 14 bytes leftover after parsing attributes in process `syz.1.7431'. [ 1821.465630][ T1793] base_sock_release(ffff888086d50600) sk=ffff888025c02000 [ 1822.596891][ T1803] ima: policy update failed [ 1822.614193][ T29] audit: type=1802 audit(4294967402.799:103): pid=1803 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.7459" res=0 errno=0 [ 1823.007607][ T1729] base_sock_release(ffff888086e19200) sk=ffff8880236c2000 [ 1824.708479][ T1852] netlink: 4 bytes leftover after parsing attributes in process `syz.4.7469'. [ 1824.987323][ T1861] FAULT_INJECTION: forcing a failure. [ 1824.987323][ T1861] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1825.003491][ T1861] CPU: 1 UID: 0 PID: 1861 Comm: syz.5.7473 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1825.003536][ T1861] Tainted: [U]=USER [ 1825.003547][ T1861] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1825.003565][ T1861] Call Trace: [ 1825.003574][ T1861] [ 1825.003584][ T1861] dump_stack_lvl+0x16c/0x1f0 [ 1825.003640][ T1861] should_fail_ex+0x497/0x5b0 [ 1825.003693][ T1861] _copy_from_user+0x2e/0xd0 [ 1825.003727][ T1861] kstrtouint_from_user+0xd7/0x1c0 [ 1825.003773][ T1861] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 1825.003820][ T1861] ? __mutex_trylock_common+0xea/0x250 [ 1825.003858][ T1861] proc_fail_nth_write+0x84/0x250 [ 1825.003893][ T1861] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1825.003934][ T1861] ? ksys_write+0x12b/0x250 [ 1825.003974][ T1861] ? lock_acquire+0x2f/0xb0 [ 1825.004007][ T1861] ? ksys_write+0x12b/0x250 [ 1825.004050][ T1861] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1825.004085][ T1861] vfs_write+0x24c/0x1150 [ 1825.004127][ T1861] ? __fget_files+0x1fc/0x3a0 [ 1825.004170][ T1861] ? __pfx___mutex_lock+0x10/0x10 [ 1825.004201][ T1861] ? __pfx_vfs_write+0x10/0x10 [ 1825.004266][ T1861] ? __fget_files+0x206/0x3a0 [ 1825.004313][ T1861] ksys_write+0x12b/0x250 [ 1825.004355][ T1861] ? __pfx_ksys_write+0x10/0x10 [ 1825.004397][ T1861] ? rcu_is_watching+0x12/0xc0 [ 1825.004440][ T1861] ? rcu_is_watching+0x12/0xc0 [ 1825.004486][ T1861] do_syscall_64+0xcd/0x250 [ 1825.004518][ T1861] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1825.004556][ T1861] RIP: 0033:0x7f9e1958b7df [ 1825.004579][ T1861] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 1825.004610][ T1861] RSP: 002b:00007f9e1a399030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 1825.004640][ T1861] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9e1958b7df [ 1825.004661][ T1861] RDX: 0000000000000001 RSI: 00007f9e1a3990a0 RDI: 0000000000000004 [ 1825.004681][ T1861] RBP: 00007f9e1a399090 R08: 0000000000000000 R09: 0000000000000000 [ 1825.004701][ T1861] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 1825.004721][ T1861] R13: 0000000000000000 R14: 00007f9e197a5fa0 R15: 00007ffc63506488 [ 1825.004750][ T1861] [ 1825.671829][ T1868] netlink: 4 bytes leftover after parsing attributes in process `syz.1.7476'. [ 1825.852584][ T1871] Process accounting resumed [ 1825.994691][ T1876] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7479'. [ 1826.028253][ T1876] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1826.051030][ T1876] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1826.108861][ T1876] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1826.127745][ T1876] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1826.275342][ T1887] netlink: 330 bytes leftover after parsing attributes in process `syz.4.7480'. [ 1826.450426][ T1893] FAULT_INJECTION: forcing a failure. [ 1826.450426][ T1893] name failslab, interval 1, probability 0, space 0, times 0 [ 1826.516864][ T1893] CPU: 0 UID: 0 PID: 1893 Comm: syz.1.7483 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1826.516916][ T1893] Tainted: [U]=USER [ 1826.516927][ T1893] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1826.516945][ T1893] Call Trace: [ 1826.516954][ T1893] [ 1826.516965][ T1893] dump_stack_lvl+0x16c/0x1f0 [ 1826.517022][ T1893] should_fail_ex+0x497/0x5b0 [ 1826.517071][ T1893] ? fs_reclaim_acquire+0xae/0x150 [ 1826.517112][ T1893] should_failslab+0xc2/0x120 [ 1826.517140][ T1893] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 1826.517189][ T1893] ? sock_alloc_inode+0x25/0x1c0 [ 1826.517228][ T1893] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1826.517266][ T1893] sock_alloc_inode+0x25/0x1c0 [ 1826.517302][ T1893] alloc_inode+0x5d/0x230 [ 1826.517348][ T1893] sock_alloc+0x40/0x280 [ 1826.517383][ T1893] __sock_create+0xc1/0x8d0 [ 1826.517424][ T1893] ? __pfx_lock_release+0x10/0x10 [ 1826.517459][ T1893] __sys_socket+0x14f/0x260 [ 1826.517513][ T1893] ? __pfx___sys_socket+0x10/0x10 [ 1826.517568][ T1893] ? do_user_addr_fault+0x83d/0x13f0 [ 1826.517602][ T1893] __x64_sys_socket+0x72/0xb0 [ 1826.517646][ T1893] do_syscall_64+0xcd/0x250 [ 1826.517677][ T1893] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1826.517712][ T1893] RIP: 0033:0x7f77ef38ec47 [ 1826.517734][ T1893] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1826.517771][ T1893] RSP: 002b:00007f77f0290fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 1826.517800][ T1893] RAX: ffffffffffffffda RBX: 00007f77ef5a5fa0 RCX: 00007f77ef38ec47 [ 1826.517820][ T1893] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 1826.517837][ T1893] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 1826.517855][ T1893] R10: 0000000020000140 R11: 0000000000000286 R12: 0000000000000001 [ 1826.517873][ T1893] R13: 0000000000000000 R14: 00007f77ef5a5fa0 R15: 00007fffc98abb18 [ 1826.517900][ T1893] [ 1826.517913][ T1893] socket: no more sockets [ 1826.538733][ T1891] Process accounting resumed [ 1829.818739][ T1988] netlink: 4 bytes leftover after parsing attributes in process `syz.6.7514'. [ 1831.230316][ T2013] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 1831.571416][ T2020] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7524'. [ 1832.562608][ T2041] Process accounting resumed [ 1833.454140][ T2070] netlink: 8 bytes leftover after parsing attributes in process `syz.5.7537'. [ 1834.031804][ T2082] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7539'. [ 1835.339742][ T2124] mtrr: base(0xd794dd79000) is not aligned on a size(0x94f55815000) boundary [ 1836.193235][ T2143] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1836.255042][ T2143] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1836.295524][ T2143] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1836.331186][ T2143] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1836.662497][ T2153] FAULT_INJECTION: forcing a failure. [ 1836.662497][ T2153] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1836.702169][ T2153] CPU: 0 UID: 0 PID: 2153 Comm: syz.5.7556 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1836.702216][ T2153] Tainted: [U]=USER [ 1836.702227][ T2153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1836.702243][ T2153] Call Trace: [ 1836.702252][ T2153] [ 1836.702263][ T2153] dump_stack_lvl+0x16c/0x1f0 [ 1836.702317][ T2153] should_fail_ex+0x497/0x5b0 [ 1836.702366][ T2153] _copy_to_iter+0x4a5/0x1400 [ 1836.702399][ T2153] ? __pfx__copy_to_iter+0x10/0x10 [ 1836.702429][ T2153] ? __virt_addr_valid+0x1a4/0x590 [ 1836.702471][ T2153] ? __virt_addr_valid+0x5e/0x590 [ 1836.702510][ T2153] ? __phys_addr_symbol+0x30/0x80 [ 1836.702549][ T2153] ? __check_object_size+0x488/0x710 [ 1836.702579][ T2153] seq_read_iter+0xd00/0x12b0 [ 1836.702621][ T2153] seq_read+0x39f/0x4e0 [ 1836.702654][ T2153] ? __pfx_seq_read+0x10/0x10 [ 1836.702687][ T2153] ? __pfx_lock_release+0x10/0x10 [ 1836.702721][ T2153] ? lock_acquire+0x2f/0xb0 [ 1836.702751][ T2153] ? __debugfs_file_get+0x43d/0x5d0 [ 1836.702788][ T2153] ? apparmor_file_permission+0x251/0x400 [ 1836.702825][ T2153] full_proxy_read+0xfd/0x1b0 [ 1836.702864][ T2153] ? __pfx_full_proxy_read+0x10/0x10 [ 1836.702899][ T2153] vfs_read+0x1df/0xbe0 [ 1836.702936][ T2153] ? __fget_files+0x1fc/0x3a0 [ 1836.702976][ T2153] ? __pfx___mutex_lock+0x10/0x10 [ 1836.703005][ T2153] ? __pfx_vfs_read+0x10/0x10 [ 1836.703047][ T2153] ? __fget_files+0x206/0x3a0 [ 1836.703090][ T2153] ksys_read+0x12b/0x250 [ 1836.703128][ T2153] ? __pfx_ksys_read+0x10/0x10 [ 1836.703167][ T2153] ? rcu_is_watching+0x12/0xc0 [ 1836.703208][ T2153] ? rcu_is_watching+0x12/0xc0 [ 1836.703254][ T2153] do_syscall_64+0xcd/0x250 [ 1836.703284][ T2153] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1836.703320][ T2153] RIP: 0033:0x7f9e1958cd29 [ 1836.703343][ T2153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1836.703372][ T2153] RSP: 002b:00007f9e1a399038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1836.703399][ T2153] RAX: ffffffffffffffda RBX: 00007f9e197a5fa0 RCX: 00007f9e1958cd29 [ 1836.703418][ T2153] RDX: 0000000000000004 RSI: 0000000020000080 RDI: 0000000000000003 [ 1836.703436][ T2153] RBP: 00007f9e1a399090 R08: 0000000000000000 R09: 0000000000000000 [ 1836.703453][ T2153] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1836.703470][ T2153] R13: 0000000000000000 R14: 00007f9e197a5fa0 R15: 00007ffc63506488 [ 1836.703496][ T2153] [ 1838.259515][T28433] Bluetooth: hci3: command 0x0c1a tx timeout [ 1838.259528][T13996] Bluetooth: hci0: command 0x0406 tx timeout [ 1838.337906][T28433] Bluetooth: hci1: command 0x0c1a tx timeout [ 1838.338196][T13996] Bluetooth: hci4: command 0x0c1a tx timeout [ 1838.558210][ T2191] FAULT_INJECTION: forcing a failure. [ 1838.558210][ T2191] name failslab, interval 1, probability 0, space 0, times 0 [ 1838.647570][ T2191] CPU: 1 UID: 0 PID: 2191 Comm: syz.5.7566 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1838.647620][ T2191] Tainted: [U]=USER [ 1838.647631][ T2191] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1838.647650][ T2191] Call Trace: [ 1838.647659][ T2191] [ 1838.647670][ T2191] dump_stack_lvl+0x16c/0x1f0 [ 1838.647728][ T2191] should_fail_ex+0x497/0x5b0 [ 1838.647780][ T2191] ? fs_reclaim_acquire+0xae/0x150 [ 1838.647824][ T2191] should_failslab+0xc2/0x120 [ 1838.647856][ T2191] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 1838.647909][ T2191] ? _raw_spin_unlock+0x28/0x50 [ 1838.647955][ T2191] ? alloc_inode+0xbf/0x230 [ 1838.648007][ T2191] alloc_inode+0xbf/0x230 [ 1838.648057][ T2191] new_inode+0x22/0x210 [ 1838.648086][ T2191] simple_fill_super+0x306/0x720 [ 1838.648132][ T2191] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1838.648169][ T2191] nfsd_fill_super+0x90/0x530 [ 1838.648204][ T2191] ? __pfx_set_anon_super_fc+0x10/0x10 [ 1838.648245][ T2191] ? __pfx_nfsd_fill_super+0x10/0x10 [ 1838.648280][ T2191] get_tree_keyed+0x10b/0x1d0 [ 1838.648328][ T2191] vfs_get_tree+0x8b/0x340 [ 1838.648364][ T2191] path_mount+0x6e1/0x1f00 [ 1838.648419][ T2191] ? kmem_cache_free+0x152/0x4c0 [ 1838.648465][ T2191] ? __pfx_path_mount+0x10/0x10 [ 1838.648515][ T2191] ? putname+0x13c/0x180 [ 1838.648545][ T2191] __x64_sys_mount+0x28f/0x310 [ 1838.648593][ T2191] ? __pfx___x64_sys_mount+0x10/0x10 [ 1838.648645][ T2191] ? rcu_is_watching+0x12/0xc0 [ 1838.648689][ T2191] ? rcu_is_watching+0x12/0xc0 [ 1838.648735][ T2191] do_syscall_64+0xcd/0x250 [ 1838.648768][ T2191] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1838.648805][ T2191] RIP: 0033:0x7f9e1958cd29 [ 1838.648829][ T2191] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1838.648860][ T2191] RSP: 002b:00007f9e1a399038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 1838.648891][ T2191] RAX: ffffffffffffffda RBX: 00007f9e197a5fa0 RCX: 00007f9e1958cd29 [ 1838.648913][ T2191] RDX: 0000000020000140 RSI: 00000000200000c0 RDI: 0000000000000000 [ 1838.648932][ T2191] RBP: 00007f9e1960e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1838.648951][ T2191] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 1838.648969][ T2191] R13: 0000000000000000 R14: 00007f9e197a5fa0 R15: 00007ffc63506488 [ 1838.648998][ T2191] [ 1841.040900][ T2220] usb usb35: usbfs: interface 0 claimed by hub while 'syz.6.7575' sets config #100663296 [ 1841.172474][ T2230] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7576'. [ 1841.228356][ T2230] hsr_slave_1 (unregistering): left promiscuous mode [ 1843.788609][ T2266] zswap: compressor not available [ 1843.805799][ T2272] Setting dangerous option i915.request_timeout_ms - tainting kernel [ 1844.583555][ T2298] netlink: 28 bytes leftover after parsing attributes in process `syz.4.7593'. [ 1844.939271][ T2303] [U] [ 1844.942596][ T2303] [U] [ 1844.945876][ T2303] [U] [ 1844.949151][ T2303] [U] [ 1844.953792][ T2303] [U] [ 1844.957084][ T2303] [U] [ 1844.960357][ T2303] [U] [ 1844.963638][ T2303] [U] [ 1844.968479][ T2303] [U] [ 1844.971788][ T2303] [U] [ 1844.975059][ T2303] [U] [ 1844.978335][ T2303] [U] [ 1844.982763][ T2303] [U] [ 1844.986051][ T2303] [U] [ 1844.989323][ T2303] [U] [ 1844.992591][ T2303] [U] [ 1844.996637][ T2303] [U] [ 1844.999947][ T2303] [U] [ 1845.003216][ T2303] [U] [ 1845.006493][ T2303] [U] [ 1845.291883][ T2312] zswap: compressor not available [ 1845.303909][ T2322] Setting dangerous option i915.request_timeout_ms - tainting kernel [ 1846.295295][ T2350] netlink: 330 bytes leftover after parsing attributes in process `syz.1.7607'. [ 1846.443126][ T2354] FAULT_INJECTION: forcing a failure. [ 1846.443126][ T2354] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1846.460915][ T2354] CPU: 0 UID: 0 PID: 2354 Comm: syz.6.7609 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1846.460964][ T2354] Tainted: [U]=USER [ 1846.460981][ T2354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1846.460999][ T2354] Call Trace: [ 1846.461008][ T2354] [ 1846.461019][ T2354] dump_stack_lvl+0x16c/0x1f0 [ 1846.461089][ T2354] should_fail_ex+0x497/0x5b0 [ 1846.461142][ T2354] _copy_from_user+0x2e/0xd0 [ 1846.461174][ T2354] copy_msghdr_from_user+0x99/0x160 [ 1846.461210][ T2354] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1846.461248][ T2354] ? kfree+0x274/0x4b0 [ 1846.461288][ T2354] ? __pfx__kstrtoull+0x10/0x10 [ 1846.461327][ T2354] ? ___sys_sendmsg+0x142/0x1e0 [ 1846.461362][ T2354] ___sys_sendmsg+0xff/0x1e0 [ 1846.461395][ T2354] ? __pfx____sys_sendmsg+0x10/0x10 [ 1846.461429][ T2354] ? __pfx_kstrtouint+0x10/0x10 [ 1846.461475][ T2354] ? rcu_is_watching+0x12/0xc0 [ 1846.461526][ T2354] ? __pfx___might_resched+0x10/0x10 [ 1846.461563][ T2354] ? __might_fault+0xe3/0x190 [ 1846.461600][ T2354] __sys_sendmmsg+0x201/0x420 [ 1846.461635][ T2354] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1846.461680][ T2354] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1846.461720][ T2354] ? fput+0x67/0x440 [ 1846.461750][ T2354] ? ksys_write+0x1ba/0x250 [ 1846.461791][ T2354] ? __pfx_ksys_write+0x10/0x10 [ 1846.461835][ T2354] __x64_sys_sendmmsg+0x9c/0x100 [ 1846.461870][ T2354] do_syscall_64+0xcd/0x250 [ 1846.461903][ T2354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1846.461940][ T2354] RIP: 0033:0x7f661058cd29 [ 1846.461962][ T2354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1846.461999][ T2354] RSP: 002b:00007f66114c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1846.462029][ T2354] RAX: ffffffffffffffda RBX: 00007f66107a5fa0 RCX: 00007f661058cd29 [ 1846.462049][ T2354] RDX: 00000000000009a6 RSI: 0000000020000000 RDI: 0000000000000003 [ 1846.462068][ T2354] RBP: 00007f66114c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1846.462086][ T2354] R10: 000000000000ff00 R11: 0000000000000246 R12: 0000000000000002 [ 1846.462106][ T2354] R13: 0000000000000000 R14: 00007f66107a5fa0 R15: 00007ffc1620a908 [ 1846.462135][ T2354] [ 1846.726455][ C0] vkms_vblank_simulate: vblank timer overrun [ 1848.131647][ T2400] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7624'. [ 1848.152582][ T2400] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1848.171731][ T2400] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1848.191952][ T2400] bond0 (unregistering): Released all slaves [ 1849.933526][ T2453] erspan0: entered allmulticast mode [ 1849.979657][ T29] audit: type=1804 audit(4294967430.161:104): pid=2461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.7637" name="/newroot/227/file0" dev="tmpfs" ino=1223 res=1 errno=0 [ 1850.040300][ T29] audit: type=1800 audit(4294967430.161:105): pid=2461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.7637" name="file0" dev="tmpfs" ino=1223 res=0 errno=0 [ 1850.091208][T30162] erspan0 (unregistering): left allmulticast mode [ 1850.155793][ T2468] [U] [ 1850.159077][ T2468] [U] [ 1850.162312][ T2468] [U] [ 1850.165680][ T2468] [U] [ 1850.169227][ T2468] [U] [ 1850.172514][ T2468] [U] [ 1850.175799][ T2468] [U] [ 1850.179043][ T2468] [U] [ 1850.183698][ T2468] [U] [ 1850.186940][ T2468] [U] [ 1850.190165][ T2468] [U] [ 1850.193403][ T2468] [U] [ 1850.201004][ T2468] [U] [ 1850.204273][ T2468] [U] [ 1850.207527][ T2468] [U] [ 1850.207583][ T2468] [U] [ 1850.208920][ T2468] [U] [ 1850.217390][ T2468] [U] [ 1850.217458][ T2468] [U] [ 1850.217517][ T2468] [U] [ 1850.218600][ T2468] [U] [ 1850.230435][ T2468] [U] [ 1850.230494][ T2468] [U] [ 1850.236947][ T2468] [U] [ 1850.242353][ T2468] [U] [ 1850.245649][ T2468] [U] [ 1850.248926][ T2468] [U] [ 1850.252197][ T2468] [U] [ 1850.285811][ T2468] [U] [ 1850.289125][ T2468] [U] [ 1850.292398][ T2468] [U] [ 1850.295683][ T2468] [U] [ 1850.311876][ T2468] [U] [ 1850.315186][ T2468] [U] [ 1850.318461][ T2468] [U] [ 1850.321716][ T2468] [U] [ 1850.325521][ T2468] [U] [ 1850.328777][ T2468] [U] [ 1850.332030][ T2468] [U] [ 1850.335299][ T2468] [U] [ 1850.339059][ T2468] [U] [ 1850.342342][ T2468] [U] [ 1850.345610][ T2468] [U] [ 1850.348863][ T2468] [U] [ 1850.355135][ T2468] [U] [ 1850.358411][ T2468] [U] [ 1850.361671][ T2468] [U] [ 1850.364946][ T2468] [U] [ 1850.370324][ T2468] [U] [ 1850.373613][ T2468] [U] [ 1850.376888][ T2468] [U] [ 1850.380171][ T2468] [U] [ 1850.396272][ T2468] [U] [ 1850.399595][ T2468] [U] [ 1850.402870][ T2468] [U] [ 1850.406135][ T2468] [U] [ 1850.452827][ T2468] [U] [ 1850.456149][ T2468] [U] [ 1850.459510][ T2468] [U] [ 1850.462779][ T2468] [U] [ 1850.500675][ T2468] [U] [ 1850.504004][ T2468] [U] [ 1850.507291][ T2468] [U] [ 1850.510563][ T2468] [U] [ 1850.540370][ T2468] [U] [ 1850.543694][ T2468] [U] [ 1850.546974][ T2468] [U] [ 1850.550266][ T2468] [U] [ 1850.554491][ T2468] [U] [ 1850.557775][ T2468] [U] [ 1850.561038][ T2468] [U] [ 1850.564310][ T2468] [U] [ 1850.568278][ T2468] [U] [ 1850.571563][ T2468] [U] [ 1850.574848][ T2468] [U] [ 1850.578123][ T2468] [U] [ 1850.583480][ T2468] [U] [ 1850.586761][ T2468] [U] [ 1850.590023][ T2468] [U] [ 1850.593272][ T2468] [U] [ 1850.600959][ T2468] [U] [ 1850.604229][ T2468] [U] [ 1850.607468][ T2468] [U] [ 1850.610704][ T2468] [U] [ 1850.615133][ T2468] [U] [ 1850.618413][ T2468] [U] [ 1850.621683][ T2468] [U] [ 1850.624931][ T2468] [U] [ 1850.630295][ T2468] [U] [ 1850.633580][ T2468] [U] [ 1850.636857][ T2468] [U] [ 1850.640113][ T2468] [U] [ 1850.644355][ T2468] [U] [ 1850.647646][ T2468] [U] [ 1850.650922][ T2468] [U] [ 1850.654195][ T2468] [U] [ 1850.662911][ T2468] [U] [ 1850.666209][ T2468] [U] [ 1850.669480][ T2468] [U] [ 1850.672770][ T2468] [U] [ 1850.691838][ T2468] [U] [ 1850.695161][ T2468] [U] [ 1850.698437][ T2468] [U] [ 1850.701710][ T2468] [U] [ 1850.717164][ T2468] [U] [ 1850.720473][ T2468] [U] [ 1850.723751][ T2468] [U] [ 1850.727025][ T2468] [U] [ 1850.730304][ T2468] [U] [ 1850.751541][ T2468] [U] [ 1850.754837][ T2468] [U] [ 1850.758080][ T2468] [U] [ 1850.761324][ T2468] [U] [ 1850.766389][ T2468] [U] [ 1850.769699][ T2468] [U] [ 1850.772978][ T2468] [U] [ 1850.776268][ T2468] [U] [ 1850.803378][ T2468] [U] [ 1850.806699][ T2468] [U] [ 1850.809978][ T2468] [U] [ 1850.813251][ T2468] [U] [ 1850.818527][ T2468] [U] [ 1850.821817][ T2468] [U] [ 1850.825089][ T2468] [U] [ 1850.828376][ T2468] [U] [ 1850.845723][ T2468] [U] [ 1850.849047][ T2468] [U] [ 1850.852330][ T2468] [U] [ 1850.855615][ T2468] [U] [ 1850.882845][ T2468] [U] [ 1850.886172][ T2468] [U] [ 1850.889451][ T2468] [U] [ 1850.892732][ T2468] [U] [ 1850.974871][ T2468] [U] [ 1850.978189][ T2468] [U] [ 1850.981459][ T2468] [U] [ 1850.984730][ T2468] [U] [ 1851.916346][ T2497] [U] [ 1851.919672][ T2497] [U] [ 1851.922950][ T2497] [U] [ 1851.926218][ T2497] [U] [ 1852.015890][ T2497] [U] [ 1852.019199][ T2497] [U] [ 1852.022457][ T2497] [U] [ 1852.025720][ T2497] [U] [ 1852.030094][ T2497] [U] [ 1852.033382][ T2497] [U] [ 1852.036651][ T2497] [U] [ 1852.039921][ T2497] [U] [ 1852.043547][ T2497] [U] [ 1852.046817][ T2497] [U] [ 1852.050067][ T2497] [U] [ 1852.053315][ T2497] [U] [ 1852.057027][ T2497] [U] [ 1852.060320][ T2497] [U] [ 1852.063596][ T2497] [U] [ 1852.066894][ T2497] [U] [ 1854.974545][ T2578] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7661'. [ 1856.054229][ T2606] netlink: 50 bytes leftover after parsing attributes in process `syz.4.7666'. [ 1856.774351][ T2629] FAULT_INJECTION: forcing a failure. [ 1856.774351][ T2629] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1856.828538][ T2629] CPU: 0 UID: 0 PID: 2629 Comm: syz.6.7674 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1856.828589][ T2629] Tainted: [U]=USER [ 1856.828599][ T2629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1856.828618][ T2629] Call Trace: [ 1856.828628][ T2629] [ 1856.828640][ T2629] dump_stack_lvl+0x16c/0x1f0 [ 1856.828696][ T2629] should_fail_ex+0x497/0x5b0 [ 1856.828747][ T2629] ? fs_reclaim_acquire+0xae/0x150 [ 1856.828789][ T2629] should_fail_alloc_page+0xe7/0x130 [ 1856.828823][ T2629] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1856.828870][ T2629] __alloc_pages_noprof+0x18e/0x2470 [ 1856.828921][ T2629] ? page_ext_put+0x3e/0xd0 [ 1856.828967][ T2629] ? __pfx_lock_release+0x10/0x10 [ 1856.828998][ T2629] ? handle_mm_fault+0x3fa/0xaa0 [ 1856.829046][ T2629] ? do_user_addr_fault+0x7a3/0x13f0 [ 1856.829078][ T2629] ? page_ext_get+0x34/0x310 [ 1856.829125][ T2629] ? lock_acquire+0x2f/0xb0 [ 1856.829167][ T2629] ? rcu_is_watching+0x12/0xc0 [ 1856.829210][ T2629] ? lock_release+0x4e2/0x6f0 [ 1856.829242][ T2629] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 1856.829291][ T2629] ? page_ext_get+0x34/0x310 [ 1856.829336][ T2629] ? rcu_is_watching+0x12/0xc0 [ 1856.829378][ T2629] ? __pfx_lock_release+0x10/0x10 [ 1856.829409][ T2629] ? trace_lock_acquire+0x14e/0x1f0 [ 1856.829454][ T2629] ? is_bpf_text_address+0x30/0x1a0 [ 1856.829484][ T2629] ? lock_acquire+0x2f/0xb0 [ 1856.829514][ T2629] ? is_bpf_text_address+0x30/0x1a0 [ 1856.829541][ T2629] ? bpf_ksym_find+0x124/0x1c0 [ 1856.829578][ T2629] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1856.829616][ T2629] ? policy_nodemask+0xea/0x4e0 [ 1856.829647][ T2629] alloc_pages_mpol_noprof+0x2c8/0x620 [ 1856.829685][ T2629] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 1856.829726][ T2629] ? rcu_is_watching+0x12/0xc0 [ 1856.829770][ T2629] folio_alloc_mpol_noprof+0x36/0xd0 [ 1856.829808][ T2629] shmem_alloc_folio+0x135/0x160 [ 1856.829841][ T2629] shmem_alloc_and_add_folio+0x48b/0xc00 [ 1856.829882][ T2629] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1856.829922][ T2629] ? shmem_allowable_huge_orders+0xd0/0x410 [ 1856.829965][ T2629] shmem_get_folio_gfp+0x689/0x1530 [ 1856.830008][ T2629] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1856.830052][ T2629] shmem_fault+0x200/0xae0 [ 1856.830089][ T2629] ? rcu_is_watching+0x12/0xc0 [ 1856.830140][ T2629] ? __pfx_shmem_fault+0x10/0x10 [ 1856.830177][ T2629] ? __pfx_lock_release+0x10/0x10 [ 1856.830209][ T2629] ? __mod_memcg_lruvec_state+0x53c/0x750 [ 1856.830251][ T2629] ? __mod_node_page_state+0xde/0x1d0 [ 1856.830282][ T2629] ? rcu_is_watching+0x12/0xc0 [ 1856.830325][ T2629] ? trace_irq_enable.constprop.0+0xea/0x140 [ 1856.830364][ T2629] ? __pfx_filemap_map_pages+0x10/0x10 [ 1856.830407][ T2629] __do_fault+0x10a/0x490 [ 1856.830443][ T2629] ? __pfx_filemap_map_pages+0x10/0x10 [ 1856.830485][ T2629] do_pte_missing+0x1a8/0x3e00 [ 1856.830539][ T2629] __handle_mm_fault+0x103c/0x2a40 [ 1856.830595][ T2629] ? __pfx___handle_mm_fault+0x10/0x10 [ 1856.830654][ T2629] ? find_vma+0xc0/0x140 [ 1856.830692][ T2629] ? __pfx_find_vma+0x10/0x10 [ 1856.830734][ T2629] handle_mm_fault+0x3fa/0xaa0 [ 1856.830785][ T2629] do_user_addr_fault+0x7a3/0x13f0 [ 1856.830822][ T2629] exc_page_fault+0x5c/0xc0 [ 1856.830870][ T2629] asm_exc_page_fault+0x26/0x30 [ 1856.830904][ T2629] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 1856.830949][ T2629] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 1856.830980][ T2629] RSP: 0018:ffffc9000d177a00 EFLAGS: 00050246 [ 1856.831006][ T2629] RAX: 34322e312e7a7973 RBX: 0000000000000000 RCX: 0000000000000008 [ 1856.831026][ T2629] RDX: ffffed100c19d402 RSI: ffff888060cea006 RDI: 0000000000000000 [ 1856.831046][ T2629] RBP: ffffc9000d177c10 R08: 0000000000000000 R09: ffffed100c19d401 [ 1856.831066][ T2629] R10: ffff888060cea00d R11: 00000000000a4001 R12: 0000000000000008 [ 1856.831086][ T2629] R13: ffff888060cea006 R14: 0000000000000000 R15: 0000000000000008 [ 1856.831114][ T2629] _copy_to_iter+0x52f/0x1400 [ 1856.831157][ T2629] ? __pfx__copy_to_iter+0x10/0x10 [ 1856.831188][ T2629] ? __virt_addr_valid+0x1a4/0x590 [ 1856.831232][ T2629] ? __virt_addr_valid+0x5e/0x590 [ 1856.831275][ T2629] ? __phys_addr_symbol+0x30/0x80 [ 1856.831315][ T2629] ? __check_object_size+0x488/0x710 [ 1856.831348][ T2629] seq_read_iter+0x725/0x12b0 [ 1856.831385][ T2629] ? __pfx_kstrtouint+0x10/0x10 [ 1856.831429][ T2629] ? __pfx_aa_file_perm+0x10/0x10 [ 1856.831474][ T2629] seq_read+0x39f/0x4e0 [ 1856.831511][ T2629] ? __pfx_seq_read+0x10/0x10 [ 1856.831547][ T2629] ? lock_acquire+0x2f/0xb0 [ 1856.831582][ T2629] ? lock_release+0x4e2/0x6f0 [ 1856.831617][ T2629] ? bpf_lsm_file_permission+0x9/0x10 [ 1856.831649][ T2629] ? security_file_permission+0x71/0x210 [ 1856.831694][ T2629] ? __pfx_seq_read+0x10/0x10 [ 1856.831730][ T2629] vfs_read+0x1df/0xbe0 [ 1856.831771][ T2629] ? __fget_files+0x1fc/0x3a0 [ 1856.831813][ T2629] ? __pfx_lock_release+0x10/0x10 [ 1856.831846][ T2629] ? __pfx_vfs_read+0x10/0x10 [ 1856.831885][ T2629] ? __fget_files+0x40/0x3a0 [ 1856.831928][ T2629] ? lock_acquire+0x2f/0xb0 [ 1856.831959][ T2629] ? __fget_files+0x40/0x3a0 [ 1856.832004][ T2629] ? __fget_files+0x206/0x3a0 [ 1856.832050][ T2629] __x64_sys_pread64+0x1f6/0x250 [ 1856.832095][ T2629] ? __pfx___x64_sys_pread64+0x10/0x10 [ 1856.832145][ T2629] ? rcu_is_watching+0x12/0xc0 [ 1856.832188][ T2629] ? rcu_is_watching+0x12/0xc0 [ 1856.832232][ T2629] do_syscall_64+0xcd/0x250 [ 1856.832264][ T2629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1856.832300][ T2629] RIP: 0033:0x7f661058cd29 [ 1856.832323][ T2629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1856.832353][ T2629] RSP: 002b:00007f66114c1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 1856.832380][ T2629] RAX: ffffffffffffffda RBX: 00007f66107a5fa0 RCX: 00007f661058cd29 [ 1856.832402][ T2629] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000004 [ 1856.832421][ T2629] RBP: 00007f66114c1090 R08: 0000000000000000 R09: 0000000000000000 [ 1856.832440][ T2629] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1856.832459][ T2629] R13: 0000000000000000 R14: 00007f66107a5fa0 R15: 00007ffc1620a908 [ 1856.832488][ T2629] [ 1857.561339][ C0] vkms_vblank_simulate: vblank timer overrun [ 1858.261168][ T2662] FAULT_INJECTION: forcing a failure. [ 1858.261168][ T2662] name failslab, interval 1, probability 0, space 0, times 0 [ 1858.276825][ T2662] CPU: 0 UID: 0 PID: 2662 Comm: syz.6.7681 Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1858.276869][ T2662] Tainted: [U]=USER [ 1858.276880][ T2662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1858.276898][ T2662] Call Trace: [ 1858.276907][ T2662] [ 1858.276928][ T2662] dump_stack_lvl+0x16c/0x1f0 [ 1858.276985][ T2662] should_fail_ex+0x497/0x5b0 [ 1858.277034][ T2662] ? fs_reclaim_acquire+0xae/0x150 [ 1858.277078][ T2662] should_failslab+0xc2/0x120 [ 1858.277108][ T2662] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1858.277160][ T2662] ? security_file_alloc+0x34/0x2b0 [ 1858.277208][ T2662] security_file_alloc+0x34/0x2b0 [ 1858.277252][ T2662] init_file+0x93/0x480 [ 1858.277282][ T2662] alloc_empty_file+0x91/0x1e0 [ 1858.277315][ T2662] path_openat+0xe1/0x2d70 [ 1858.277358][ T2662] ? __x64_sys_openat+0x175/0x210 [ 1858.277390][ T2662] ? do_syscall_64+0xcd/0x250 [ 1858.277421][ T2662] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1858.277465][ T2662] ? __pfx_path_openat+0x10/0x10 [ 1858.277515][ T2662] do_filp_open+0x20c/0x470 [ 1858.277561][ T2662] ? __pfx_do_filp_open+0x10/0x10 [ 1858.277616][ T2662] ? alloc_fd+0x41f/0x760 [ 1858.277661][ T2662] do_sys_openat2+0x17a/0x1e0 [ 1858.277693][ T2662] ? __pfx_do_sys_openat2+0x10/0x10 [ 1858.277726][ T2662] ? __fget_files+0x206/0x3a0 [ 1858.277768][ T2662] __x64_sys_openat+0x175/0x210 [ 1858.277795][ T2662] ? __pfx___x64_sys_openat+0x10/0x10 [ 1858.277822][ T2662] ? ksys_write+0x1ba/0x250 [ 1858.277857][ T2662] ? rcu_is_watching+0x12/0xc0 [ 1858.277894][ T2662] ? rcu_is_watching+0x12/0xc0 [ 1858.277938][ T2662] do_syscall_64+0xcd/0x250 [ 1858.277964][ T2662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1858.277994][ T2662] RIP: 0033:0x7f661058cd29 [ 1858.278014][ T2662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1858.278040][ T2662] RSP: 002b:00007f66114a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1858.278064][ T2662] RAX: ffffffffffffffda RBX: 00007f66107a6080 RCX: 00007f661058cd29 [ 1858.278082][ T2662] RDX: 0000000000028402 RSI: 0000000020000140 RDI: ffffffffffffff9c [ 1858.278099][ T2662] RBP: 00007f66114a0090 R08: 0000000000000000 R09: 0000000000000000 [ 1858.278115][ T2662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1858.278130][ T2662] R13: 0000000000000001 R14: 00007f66107a6080 R15: 00007ffc1620a908 [ 1858.278154][ T2662] [ 1858.564190][ C0] vkms_vblank_simulate: vblank timer overrun [ 1858.655465][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1858.667021][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1858.840510][ T2657] erspan0: entered allmulticast mode [ 1858.932668][T26130] erspan0 (unregistering): left allmulticast mode [ 1860.164355][ T2724] snd_virmidi snd_virmidi.0: control 5:9:1:IA>/[k [ 1861.426233][ T2759] dump_stack_lvl+0x16c/0x1f0 [ 1861.426286][ T2759] should_fail_ex+0x497/0x5b0 [ 1861.426332][ T2759] ? fs_reclaim_acquire+0xae/0x150 [ 1861.426370][ T2759] should_failslab+0xc2/0x120 [ 1861.426399][ T2759] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1861.426452][ T2759] ? __pfx___might_resched+0x10/0x10 [ 1861.426487][ T2759] ? __anon_vma_prepare+0xae/0x5e0 [ 1861.426536][ T2759] __anon_vma_prepare+0xae/0x5e0 [ 1861.426582][ T2759] ? __filemap_get_folio+0x2a5/0xaf0 [ 1861.426628][ T2759] __vmf_anon_prepare+0x11c/0x240 [ 1861.426670][ T2759] hugetlb_fault+0x1f3b/0x2fb0 [ 1861.426715][ T2759] ? __pfx_hugetlb_fault+0x10/0x10 [ 1861.426762][ T2759] ? find_vma+0xc0/0x140 [ 1861.426798][ T2759] ? __pfx_find_vma+0x10/0x10 [ 1861.426837][ T2759] handle_mm_fault+0x930/0xaa0 [ 1861.426886][ T2759] do_user_addr_fault+0x7a3/0x13f0 [ 1861.426919][ T2759] exc_page_fault+0x5c/0xc0 [ 1861.426965][ T2759] asm_exc_page_fault+0x26/0x30 [ 1861.426996][ T2759] RIP: 0010:__put_user_1+0x11/0x20 [ 1861.427024][ T2759] Code: 1f 84 00 00 00 00 00 66 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <88> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 1861.427053][ T2759] RSP: 0018:ffffc9000d0e7d40 EFLAGS: 00050206 [ 1861.427077][ T2759] RAX: 00000000ffffffff RBX: 0000000000000000 RCX: 000000000000000c [ 1861.427095][ T2759] RDX: ffff8880a1175a00 RSI: ffffffff87691f2d RDI: 0000000000000000 [ 1861.427113][ T2759] RBP: 1ffff92001a1cfaf R08: 0000000000000000 R09: fffffbfff20bfd52 [ 1861.427132][ T2759] R10: ffffffff905fea97 R11: 00000000000a4001 R12: 0000000000000000 [ 1861.427150][ T2759] R13: 0000000000000008 R14: 0000000000000009 R15: 000000000000000c [ 1861.427172][ T2759] ? evdev_do_ioctl+0x113d/0x1ae0 [ 1861.427217][ T2759] evdev_do_ioctl+0x114b/0x1ae0 [ 1861.427260][ T2759] ? __pfx_evdev_do_ioctl+0x10/0x10 [ 1861.427305][ T2759] ? trace_lock_acquire+0x14e/0x1f0 [ 1861.427354][ T2759] ? __pfx_evdev_ioctl+0x10/0x10 [ 1861.427394][ T2759] evdev_ioctl+0x16a/0x1a0 [ 1861.427438][ T2759] ? __pfx_evdev_ioctl+0x10/0x10 [ 1861.427478][ T2759] __x64_sys_ioctl+0x190/0x200 [ 1861.427513][ T2759] do_syscall_64+0xcd/0x250 [ 1861.427542][ T2759] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1861.427574][ T2759] RIP: 0033:0x7f9e1958cd29 [ 1861.427595][ T2759] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1861.427624][ T2759] RSP: 002b:00007f9e1a399038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1861.427651][ T2759] RAX: ffffffffffffffda RBX: 00007f9e197a5fa0 RCX: 00007f9e1958cd29 [ 1861.427671][ T2759] RDX: 0000000020000400 RSI: 0000000080104592 RDI: 0000000000000003 [ 1861.427689][ T2759] RBP: 00007f9e1a399090 R08: 0000000000000000 R09: 0000000000000000 [ 1861.427708][ T2759] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1861.427726][ T2759] R13: 0000000000000000 R14: 00007f9e197a5fa0 R15: 00007ffc63506488 [ 1861.427753][ T2759] [ 1861.477413][ T2749] [U] [ 1861.818636][ T2749] [U] [ 1861.821907][ T2749] [U] [ 1861.825148][ T2749] [U] [ 1861.828480][ C0] vkms_vblank_simulate: vblank timer overrun [ 1862.113157][ T2749] [U] [ 1862.116487][ T2749] [U] [ 1862.119765][ T2749] [U] [ 1862.123034][ T2749] [U] [ 1862.312148][ T2773] openvswitch: netlink: Flow key attr not present in new flow. [ 1863.097454][ T2794] netlink: 28 bytes leftover after parsing attributes in process `syz.6.7710'. [ 1863.395757][T25297] ------------[ cut here ]------------ [ 1863.402573][T25297] ODEBUG: free active (active state 0) object: ffff888067471248 object type: timer_list hint: hci_devcd_timeout+0x0/0x2f0 [ 1863.429406][T25297] WARNING: CPU: 1 PID: 25297 at lib/debugobjects.c:612 debug_print_object+0x1a2/0x2b0 [ 1863.441358][T25297] Modules linked in: [ 1863.446244][T25297] CPU: 1 UID: 0 PID: 25297 Comm: syz-executor Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1863.460975][T25297] Tainted: [U]=USER [ 1863.465958][T25297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1863.478211][T25297] RIP: 0010:debug_print_object+0x1a2/0x2b0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1863.485608][T25297] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd 80 5a d2 8b 41 56 4c 89 e6 48 c7 c7 00 4f d2 8b e8 3f 2e b9 fc 90 <0f> 0b 90 90 58 83 05 86 41 bf 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1863.509740][T25297] RSP: 0018:ffffc900040cf768 EFLAGS: 00010286 [ 1863.517446][T25297] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff815a0be9 [ 1863.527303][T25297] RDX: ffff88802819bc00 RSI: ffffffff815a0bf6 RDI: 0000000000000001 [ 1863.537277][T25297] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1863.547159][T25297] R10: 0000000000000001 R11: 0000000000109520 R12: ffffffff8bd255a0 [ 1863.556932][T25297] R13: ffffffff8b6f8440 R14: ffffffff8a328d90 R15: ffffc900040cf878 [ 1863.566731][T25297] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 1863.577564][T25297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1863.585824][T25297] CR2: 00007f1c0ef424c7 CR3: 00000000815b2000 CR4: 00000000003526f0 [ 1863.595657][T25297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1863.605626][T25297] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1863.615459][T25297] Call Trace: [ 1863.619422][T25297] [ 1863.622968][T25297] ? __warn+0xea/0x3c0 [ 1863.628132][T25297] ? preempt_schedule_notrace+0x62/0xe0 [ 1863.635166][T25297] ? debug_print_object+0x1a2/0x2b0 [ 1863.641474][T25297] ? report_bug+0x3c0/0x580 [ 1863.646976][T25297] ? handle_bug+0x54/0xa0 [ 1863.652211][T25297] ? exc_invalid_op+0x17/0x50 [ 1863.658018][T25297] ? asm_exc_invalid_op+0x1a/0x20 [ 1863.664090][T25297] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1863.670866][T25297] ? __warn_printk+0x199/0x350 [ 1863.676682][T25297] ? __warn_printk+0x1a6/0x350 [ 1863.682450][T25297] ? debug_print_object+0x1a2/0x2b0 [ 1863.689145][T25297] ? debug_print_object+0x1a1/0x2b0 [ 1863.695638][T25297] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1863.702251][T25297] ? trace_irq_enable.constprop.0+0xea/0x140 [ 1863.709740][T25297] debug_check_no_obj_freed+0x4b7/0x600 [ 1863.716665][T25297] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1863.723992][T25297] ? rcu_is_watching+0x12/0xc0 [ 1863.729922][T25297] ? kmem_cache_free+0x152/0x4c0 [ 1863.736124][T25297] ? kfree_skbmem+0x1a4/0x1f0 [ 1863.741886][T25297] kfree+0x2b3/0x4b0 [ 1863.746647][T25297] ? hci_release_dev+0x4d9/0x600 [ 1863.752622][T25297] hci_release_dev+0x4d9/0x600 [ 1863.758438][T25297] ? __pfx_hci_release_dev+0x10/0x10 [ 1863.765563][T25297] ? rcu_is_watching+0x12/0xc0 [ 1863.771344][T25297] ? kfree+0x274/0x4b0 [ 1863.776484][T25297] bt_host_release+0x6a/0xb0 [ 1863.782029][T25297] ? __pfx_bt_host_release+0x10/0x10 [ 1863.788450][T25297] device_release+0xa1/0x240 [ 1863.794292][T25297] kobject_put+0x1e4/0x5a0 [ 1863.799826][T25297] ? __pfx_vhci_release+0x10/0x10 [ 1863.805953][T25297] put_device+0x1f/0x30 [ 1863.811229][T25297] vhci_release+0x81/0xf0 [ 1863.816685][T25297] __fput+0x3f8/0xb60 [ 1863.821503][T25297] task_work_run+0x14e/0x250 [ 1863.827168][T25297] ? __pfx_task_work_run+0x10/0x10 [ 1863.833496][T25297] ? do_raw_spin_unlock+0x172/0x230 [ 1863.840079][T25297] do_exit+0xad8/0x2d70 [ 1863.845647][T25297] ? rcu_is_watching+0x12/0xc0 [ 1863.851423][T25297] ? lock_release+0x4e2/0x6f0 [ 1863.857210][T25297] ? get_signal+0x8f7/0x2610 [ 1863.862899][T25297] ? __pfx_do_exit+0x10/0x10 [ 1863.868686][T25297] ? do_raw_spin_lock+0x12d/0x2c0 [ 1863.874996][T25297] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1863.881513][T25297] do_group_exit+0xd3/0x2a0 [ 1863.887072][T25297] get_signal+0x2576/0x2610 [ 1863.892807][T25297] ? __pfx_get_signal+0x10/0x10 [ 1863.898859][T25297] ? __pfx_vfs_read+0x10/0x10 [ 1863.904527][T25297] arch_do_signal_or_restart+0x90/0x7e0 [ 1863.911495][T25297] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1863.919156][T25297] ? ksys_read+0x1ba/0x250 [ 1863.924514][T25297] ? __pfx_ksys_read+0x10/0x10 [ 1863.931065][T25297] ? rcu_is_watching+0x12/0xc0 [ 1863.937017][T25297] syscall_exit_to_user_mode+0x150/0x2a0 [ 1863.944581][T25297] do_syscall_64+0xda/0x250 [ 1863.950164][T25297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1863.957332][T25297] RIP: 0033:0x7f0fd1b8b73c [ 1863.962673][T25297] Code: Unable to access opcode bytes at 0x7f0fd1b8b712. [ 1863.971324][T25297] RSP: 002b:00007ffe9ae20b80 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1863.981645][T25297] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f0fd1b8b73c [ 1863.991354][T25297] RDX: 0000000000000030 RSI: 00007ffe9ae20c30 RDI: 00000000000000f9 [ 1863.995250][T28433] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1864.001311][T25297] RBP: 00007ffe9ae20bdc R08: 0000000000000000 R09: 0079746972756365 [ 1864.014331][T28433] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1864.019373][T25297] R10: 00007ffe9ae20540 R11: 0000000000000246 R12: 0000000000000032 [ 1864.028258][T28433] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1864.037330][T25297] R13: 00000000001c6e12 R14: 00007ffe9ae20c30 R15: 0000000000000258 [ 1864.046813][T28433] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1864.055433][T25297] [ 1864.055453][T25297] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1864.055483][T25297] CPU: 1 UID: 0 PID: 25297 Comm: syz-executor Tainted: G U 6.13.0-syzkaller-04541-gdf60eac9efe8 #0 [ 1864.055530][T25297] Tainted: [U]=USER [ 1864.055543][T25297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1864.055564][T25297] Call Trace: [ 1864.055576][T25297] [ 1864.055588][T25297] dump_stack_lvl+0x3d/0x1f0 [ 1864.055648][T25297] panic+0x71d/0x800 [ 1864.055698][T25297] ? __pfx_panic+0x10/0x10 [ 1864.055748][T25297] ? show_trace_log_lvl+0x29d/0x3d0 [ 1864.055790][T25297] ? check_panic_on_warn+0x1f/0xb0 [ 1864.055842][T25297] ? debug_print_object+0x1a2/0x2b0 [ 1864.055880][T25297] check_panic_on_warn+0xab/0xb0 [ 1864.055932][T25297] __warn+0xf6/0x3c0 [ 1864.055981][T25297] ? preempt_schedule_notrace+0x62/0xe0 [ 1864.056033][T25297] ? debug_print_object+0x1a2/0x2b0 [ 1864.056071][T25297] report_bug+0x3c0/0x580 [ 1864.056122][T25297] handle_bug+0x54/0xa0 [ 1864.056156][T25297] exc_invalid_op+0x17/0x50 [ 1864.056194][T25297] asm_exc_invalid_op+0x1a/0x20 [ 1864.056231][T25297] RIP: 0010:debug_print_object+0x1a2/0x2b0 [ 1864.056280][T25297] Code: fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 54 48 8b 14 dd 80 5a d2 8b 41 56 4c 89 e6 48 c7 c7 00 4f d2 8b e8 3f 2e b9 fc 90 <0f> 0b 90 90 58 83 05 86 41 bf 0b 01 48 83 c4 18 5b 5d 41 5c 41 5d [ 1864.056314][T25297] RSP: 0018:ffffc900040cf768 EFLAGS: 00010286 [ 1864.056341][T25297] RAX: 0000000000000000 RBX: 0000000000000003 RCX: ffffffff815a0be9 [ 1864.056362][T25297] RDX: ffff88802819bc00 RSI: ffffffff815a0bf6 RDI: 0000000000000001 [ 1864.056385][T25297] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 1864.056405][T25297] R10: 0000000000000001 R11: 0000000000109520 R12: ffffffff8bd255a0 [ 1864.056428][T25297] R13: ffffffff8b6f8440 R14: ffffffff8a328d90 R15: ffffc900040cf878 [ 1864.056453][T25297] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1864.056512][T25297] ? __warn_printk+0x199/0x350 [ 1864.056560][T25297] ? __warn_printk+0x1a6/0x350 [ 1864.056611][T25297] ? debug_print_object+0x1a1/0x2b0 [ 1864.056647][T25297] ? __pfx_hci_devcd_timeout+0x10/0x10 [ 1864.056693][T25297] ? trace_irq_enable.constprop.0+0xea/0x140 [ 1864.056736][T25297] debug_check_no_obj_freed+0x4b7/0x600 [ 1864.056784][T25297] ? __pfx_debug_check_no_obj_freed+0x10/0x10 [ 1864.056827][T25297] ? rcu_is_watching+0x12/0xc0 [ 1864.056877][T25297] ? kmem_cache_free+0x152/0x4c0 [ 1864.056927][T25297] ? kfree_skbmem+0x1a4/0x1f0 [ 1864.056978][T25297] kfree+0x2b3/0x4b0 [ 1864.057022][T25297] ? hci_release_dev+0x4d9/0x600 [ 1864.057078][T25297] hci_release_dev+0x4d9/0x600 [ 1864.057131][T25297] ? __pfx_hci_release_dev+0x10/0x10 [ 1864.057183][T25297] ? rcu_is_watching+0x12/0xc0 [ 1864.057230][T25297] ? kfree+0x274/0x4b0 [ 1864.057278][T25297] bt_host_release+0x6a/0xb0 [ 1864.057316][T25297] ? __pfx_bt_host_release+0x10/0x10 [ 1864.057354][T25297] device_release+0xa1/0x240 [ 1864.057391][T25297] kobject_put+0x1e4/0x5a0 [ 1864.057426][T25297] ? __pfx_vhci_release+0x10/0x10 [ 1864.057474][T25297] put_device+0x1f/0x30 [ 1864.057509][T25297] vhci_release+0x81/0xf0 [ 1864.057550][T25297] __fput+0x3f8/0xb60 [ 1864.057585][T25297] task_work_run+0x14e/0x250 [ 1864.057621][T25297] ? __pfx_task_work_run+0x10/0x10 [ 1864.057656][T25297] ? do_raw_spin_unlock+0x172/0x230 [ 1864.057703][T25297] do_exit+0xad8/0x2d70 [ 1864.057751][T25297] ? rcu_is_watching+0x12/0xc0 [ 1864.057805][T25297] ? lock_release+0x4e2/0x6f0 [ 1864.057846][T25297] ? get_signal+0x8f7/0x2610 [ 1864.057886][T25297] ? __pfx_do_exit+0x10/0x10 [ 1864.057934][T25297] ? do_raw_spin_lock+0x12d/0x2c0 [ 1864.057976][T25297] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1864.058022][T25297] do_group_exit+0xd3/0x2a0 [ 1864.058071][T25297] get_signal+0x2576/0x2610 [ 1864.058119][T25297] ? __pfx_get_signal+0x10/0x10 [ 1864.058158][T25297] ? __pfx_vfs_read+0x10/0x10 [ 1864.058206][T25297] arch_do_signal_or_restart+0x90/0x7e0 [ 1864.058257][T25297] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1864.058312][T25297] ? ksys_read+0x1ba/0x250 [ 1864.058355][T25297] ? __pfx_ksys_read+0x10/0x10 [ 1864.058399][T25297] ? rcu_is_watching+0x12/0xc0 [ 1864.058446][T25297] syscall_exit_to_user_mode+0x150/0x2a0 [ 1864.058488][T25297] do_syscall_64+0xda/0x250 [ 1864.058523][T25297] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1864.058561][T25297] RIP: 0033:0x7f0fd1b8b73c [ 1864.058585][T25297] Code: Unable to access opcode bytes at 0x7f0fd1b8b712. [ 1864.058601][T25297] RSP: 002b:00007ffe9ae20b80 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1864.058632][T25297] RAX: fffffffffffffe00 RBX: 0000000000000003 RCX: 00007f0fd1b8b73c [ 1864.058655][T25297] RDX: 0000000000000030 RSI: 00007ffe9ae20c30 RDI: 00000000000000f9 [ 1864.058676][T25297] RBP: 00007ffe9ae20bdc R08: 0000000000000000 R09: 0079746972756365 [ 1864.058699][T25297] R10: 00007ffe9ae20540 R11: 0000000000000246 R12: 0000000000000032 [ 1864.058721][T25297] R13: 00000000001c6e12 R14: 00007ffe9ae20c30 R15: 0000000000000258 [ 1864.058751][T25297] [ 1864.064043][T25297] Kernel Offset: disabled