last executing test programs: 5m58.940239224s ago: executing program 2 (id=63): mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x82, 0x0, &(0x7f0000000300)=0x1000c) execve$auto(&(0x7f0000000040)=':,\x00', &(0x7f00000000c0)=&(0x7f0000000080)='$+[-+\x98%(,\x00', &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(r2, &(0x7f0000003e40)={0x0, 0x0, &(0x7f0000003e00)={&(0x7f0000000840)={0x1c, r3, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x8, 0x4, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x40040050) waitid$auto(0xffffffff, 0xffffffffffffffff, &(0x7f0000000100)={@siginfo_0_0={0x4, 0xfffffffb, 0x5, @_kill={0xffffffffffffffff, 0xee01}}}, 0x5, &(0x7f0000000240)={{0x7, 0xe}, {0x3, 0x8}, 0x401, 0xe61, 0xa604, 0x0, 0x101, 0x34c, 0xfffffffffffffff9, 0x80, 0x1ea, 0x0, 0x2, 0xfff, 0x5, 0x6}) sendmsg$auto_TIPC_NL_MEDIA_SET(r1, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000740)={&(0x7f0000000300)={0x420, r3, 0x800, 0x70bd2d, 0x25dfdbfe, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@nested={0xc, 0x22, 0x0, 0x1, [@typed={0x8, 0x10c, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, @nested={0x10, 0x68, 0x0, 0x1, [@typed={0x8, 0xec, 0x0, 0x0, @pid=r4}, @nested={0x4, 0x5d}]}]}, @TIPC_NLA_NAME_TABLE={0xc, 0x8, 0x0, 0x1, [@typed={0x8, 0xe1, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @TIPC_NLA_MEDIA={0xab, 0x5, 0x0, 0x1, [@generic="f86cbba75b4bae158b2540c0fddad5569b61b1c69c257e0084e2ebbae6e46abef59e665f8f952b35f9c45036df8f7829edda6cb3d80b99479269be4b2bec307d9b845ba8ddfc7dfaa9076383594f27414d865621c565a3cf7c077aa3479449e8c3dd66cde2a76ef633877097501c2605cec82355632bb035adebf6de2a43618a00318b2d292376be9b17d17d72dcf349a90d68979ef820ba6378586fb8b4f1bb3aa75dd05d9272"]}, @TIPC_NLA_NAME_TABLE={0xe8, 0x8, 0x0, 0x1, [@typed={0xe4, 0x14d, 0x0, 0x0, @binary="a15cdfa34a3a4aee30309d8e2392220210b7d433e6614e10ac7a5008459fec65540fcd76860f8f6351a5fe12f6b8c1febf7fe581df70c680b50db176176c3bbaa787649a2f8d89b50303571bdfe89a7ca1497802909a83884f2ae5202ad7767cdeb3c3ab1baf26ef7499c7ffeabebf3d65630a7f9b5e0341706708ee90defd0f07357285ce216000523ce916780befcac776e328a62f37b2a47f19a342ed39d88cf03f3b2bd50aa0a9d61e4a08e34052057a98a08c209be1b7fd6c0f0e2c93b5c792106a142f7d4730dc7cafd5e77abce8733d47550c7ed8d49fcfd638d32d7b"}]}, @TIPC_NLA_NET={0x24c, 0x7, 0x0, 0x1, [@nested={0x23e, 0x114, 0x0, 0x1, [@generic="9f4759d3101e29f79f2730708ed941f6fcdc34ca64c19f952227e3176d280ac39b12a5fbedd7cc615f5a784acddafdb40b3e318569cc77dbc39947fde29808bc122522979638567739704b8c8055e1f6f8cc1b6d0abe082185b4fa13afea0cf4b1db7606a21e94e99dd4d1b425715c20aacd30d093e67b7f3f6502196f1a489f5489887c337176044b207cadb4cd379034eb20bb64d281f8d6681f0d165e671f487eff7eeaa3b0", @nested={0x4, 0x116}, @typed={0x14, 0x10c, 0x0, 0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x38}}, @nested={0x4, 0x63}, @generic="628c7918c9eff98d586b229c8f55ba6e2f0d25a7be68338589195d2f47acd3b6ced7837c33c96d9f32c3b1edad5db3ba8ae1e942240259f187", @generic="de00d065965ab7e025295d1d02abfceeba24cb4558d5cf0d4b524d252613d6861a00efd81df6901c4a4cdaa855e83fee016a6ffb7dfdbf555151", @nested={0x4, 0x92}, @generic="781742e889d5e3011581665656f25234463e9f0ba6a43042260ca0e589885958be6ebb7aaa209c2c1b6ba5ba11e6e6a1582eb7db2e7b46682fc549e0fc9335aca857b5a02d6ddbeaed33910fa671b08df5a8fe8103d60683982462913399bf26c101c626590580514b666de078c077cced3cf0a03fc95a87792ec34a283f71d0dd87384ff8880deddaa34969c2ec9d98105a8eaba80bb20860aa38f78309cf65976a382e9977d38a990c8e5ac8c3b85f9f7740db99d037b541f40c8f5c82e3b023f5d23f07a24aec2d641b5eedc74b3a59db653287799d8f0b450140480c55a05fccfefa", @typed={0x8, 0xa, 0x0, 0x0, @ipv4=@multicast1}, @typed={0x14, 0x6d, 0x0, 0x0, @ipv6=@loopback}]}, @typed={0x8, 0xb3, 0x0, 0x0, @ipv4=@local}]}]}, 0x420}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 5m58.553769674s ago: executing program 2 (id=65): openat$auto_fops_bool_file(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim2/ports/3/bpf_map_accept\x00', 0x2881, 0x0) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@buf=0x0, 0x800c000, 0x40000000, 0x800c000}, 0x4) openat2$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0xf6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x101142, 0x0) ioctl$auto(0x3, 0x80811501, 0xfffffffffffff4e0) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/edac_core/parameters/edac_mc_poll_msec\x00', 0x60301, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/cgroup.clone_children\x00', 0xb02, 0x0) sendfile$auto(r0, r0, 0x0, 0x8) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/006/001\x00', 0xa901, 0x0) ioctl$auto(r1, 0x4004551e, r1) 5m56.706451838s ago: executing program 2 (id=68): socket(0xa, 0x2, 0x3a) r0 = socket(0x11, 0x80000, 0x9) (async) mmap$auto(0x0, 0x40000c, 0xdf, 0x9b72, 0x2, 0x6) (async) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x6, 0x0) (async) getpriority$auto(0x0, 0x9a) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000100), r0) (async) mmap$auto(0x0, 0xe985, 0xdf, 0xeb1, 0x401, 0x1) (async) r1 = socketpair$auto(0x308, 0x1, 0x1, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000200)={0x34, r3, 0x403, 0x70bd26, 0x25dfdbf9, {}, [@HWSIM_ATTR_FRAME={0x4}, @HWSIM_ATTR_ADDR_RECEIVER={0xa, 0x1, "196f88149b0c"}, @HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x5}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x8000) r4 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r4, 0xc0145401, 0x0) (async) socketpair$auto(0x1e, 0x5, 0xfffffff9, 0x0) (async) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000000), 0x62240, 0x0) (async) socket(0x10, 0x2, 0x0) (async) socket(0x2, 0x3, 0x100) (async) socket(0x10, 0x2, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000080)='/dev/bus/usb/018/001\x00', 0x7d90ba35ee275a88, 0x0) (async) io_uring_setup$auto(0x2, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) (async) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) socketpair$auto(0x4, 0x1, 0x20000, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="9bff29bd7000b1dbdf250100000030a9d8fb8290207f0da7245e37b1c705555720a0f9b80259bf313e5843869cbc8c0a33dd9951c8cce45159c9a702640703e652ca9f1942b12bf03ac6e0a25869e3224d0ba0730d173ae48d74bb2fd16f315f19d60f7ce92b043602f80f493cb5afd47bfed34205020b06d8311bd8b5413338b30ceef28ed151ce206dcbc9a99f6b66164723b0573d0b9f3e5185f3e6b0f09a79af70353d73f4160c6b57a17e6e7a73300cfa04"], 0x14}, 0x1, 0x0, 0x0, 0x44011}, 0x40000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) 5m56.485574169s ago: executing program 2 (id=71): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) (async, rerun: 32) sendmsg$auto_NFSD_CMD_LISTENER_SET(0xffffffffffffffff, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14"], 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000) (rerun: 32) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x0, 0x0) mprotect$auto(0x9, 0x2, 0x4) (async) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, 0x0) mprotect$auto(0x5, 0x200, 0x8) (async, rerun: 64) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000040)=0x2) (rerun: 64) close_range$auto(0x2, 0xa, 0x0) 5m55.437838332s ago: executing program 2 (id=76): r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0xa0241, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x100000000008000) (async) write$auto(0x800000000000c8, 0x0, 0x1a) (async) mmap$auto(0x6, 0x9, 0x6, 0x32d4, 0x10000, 0x80000001) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x60742, 0x0) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) (async) set_mempolicy$auto(0x5, 0x0, 0x4) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x3, 0x20009, 0x4000000000df, 0x14, 0x401, 0x8002) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) write$auto(0x3, 0x0, 0x7fffffff) (async) madvise$auto(0x0, 0x3, 0x66) r1 = socket(0x2, 0x1, 0x81) getsockopt$auto(r1, 0x84, 0x1b, 0x0, &(0x7f0000000040)=0x400) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100"], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) (async) sendmsg$auto_NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44004}, 0x1) r3 = socket(0x10, 0x2, 0x6) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000040), 0x7, 0xa505}, 0x800}, 0x5, 0x400a) (async) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x180800, 0x0) read$auto(r4, 0x0, 0x39b8) (async) mmap$auto(0xfeffffff, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) ioctl$auto_IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) select$auto(0x7, &(0x7f00000000c0)={[0x2, 0x1, 0x6, 0x1, 0xa, 0x7, 0x3, 0x6, 0x1980, 0x20a304c4, 0x7, 0x5, 0xb9, 0x800, 0x80000000fff, 0x8001]}, 0x0, 0x0, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) 5m54.64451514s ago: executing program 2 (id=85): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x440, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x500, 0x0) socket(0x10, 0x2, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socketpair$auto(0x1e, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto_severities_coverage_fops_severity(r1, &(0x7f0000000040)="c91825e5dd53ff927bfa0128844d474b6583eb67b009317844a3b810b6c63bc7d523c011033889d0dcd680ee707ac9ee90e9b2198c0e07fd5b8742cf4cc34b89ddf35ef4ee637096fe974899c7c4112003cba463edf193e98033543e3bdb991388f3d8a785a3449fc03d5ee58351fef6e564f79b2526df9730f6324afed1a0fe174a2ca1b3eb9f758ffc13b6a81dc2bdb2ad1dacb0655fd317d8f16f5a3e78f574643187e938bbd9a386b3837a94b8f7b12621648524b0c3a4aa54a410d8c310", 0xc0) sysfs$auto(0x2, 0x9, 0x4) mincore$auto(0x1000, 0x8001, 0x0) r2 = io_uring_setup$auto(0x877, 0x0) io_uring_enter$auto(r2, 0xcd00, 0xcd00, 0x7, 0x0, 0xffffffffffffffff) recvmmsg$auto(0x4, 0x0, 0xffffffff, 0x0, 0x0) socket(0x11, 0x3, 0x9) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x22, 0x0, 0x9) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x5, &(0x7f00000000c0), 0x200002, 0x8}, 0x803}, 0xa, 0x10, 0x0) close_range$auto(0x2, 0x8, 0x0) 5m39.373988901s ago: executing program 32 (id=85): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x440, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, 0x0, 0x500, 0x0) socket(0x10, 0x2, 0x0) openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r1 = socketpair$auto(0x1e, 0x1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) write$auto_severities_coverage_fops_severity(r1, &(0x7f0000000040)="c91825e5dd53ff927bfa0128844d474b6583eb67b009317844a3b810b6c63bc7d523c011033889d0dcd680ee707ac9ee90e9b2198c0e07fd5b8742cf4cc34b89ddf35ef4ee637096fe974899c7c4112003cba463edf193e98033543e3bdb991388f3d8a785a3449fc03d5ee58351fef6e564f79b2526df9730f6324afed1a0fe174a2ca1b3eb9f758ffc13b6a81dc2bdb2ad1dacb0655fd317d8f16f5a3e78f574643187e938bbd9a386b3837a94b8f7b12621648524b0c3a4aa54a410d8c310", 0xc0) sysfs$auto(0x2, 0x9, 0x4) mincore$auto(0x1000, 0x8001, 0x0) r2 = io_uring_setup$auto(0x877, 0x0) io_uring_enter$auto(r2, 0xcd00, 0xcd00, 0x7, 0x0, 0xffffffffffffffff) recvmmsg$auto(0x4, 0x0, 0xffffffff, 0x0, 0x0) socket(0x11, 0x3, 0x9) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x22, 0x0, 0x9) recvmmsg$auto(r0, &(0x7f0000000140)={{0x0, 0x4, 0x0, 0x5, &(0x7f00000000c0), 0x200002, 0x8}, 0x803}, 0xa, 0x10, 0x0) close_range$auto(0x2, 0x8, 0x0) 4m40.453333874s ago: executing program 0 (id=278): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x100000000008000) (async) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r2 = socket(0x29, 0x5, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x6, 0x0) (async) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, r2, 0x0) setsockopt$auto(r1, 0x1, 0x20, 0x0, 0xfffffffd) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r4, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0xfffffffb}]}, 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x4000000) (async) r5 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x188880, 0x0) read$auto(r5, 0x0, 0x39b8) 4m37.258013724s ago: executing program 0 (id=286): mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x2, 0x1) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0xd2d2, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_fd=0x5, 0x7f, 0x9c, 0x7b2, 0x1, @relative_id=0x10001, 0x80}, 0x96) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) bpf$auto(0x1, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x7}, 0xc) 4m36.198861584s ago: executing program 0 (id=287): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/capabilities/abs\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001180)=""/187, 0xbb) (async) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) rmdir$auto(&(0x7f0000000000)='./file0\x00') (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) setrlimit$auto(0x0, &(0x7f0000000100)={0x21d11ab1, 0x400}) (async) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/adsp1\x00', 0x2cb42, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/devices/system/node/node1/hugepages/hugepages-2048kB/nr_hugepages\x00', 0x40082, 0x0) (async) sendfile$auto(0x1, 0x3, 0x0, 0x100000) io_uring_setup$auto(0x6, 0x0) (async) io_uring_register$auto(0x2, 0x9, 0x0, 0x0) io_uring_register$auto(0x2, 0x9, 0x0, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14f602, 0x0) readahead$auto(r3, 0x7ff, 0x9) (async) close_range$auto(r1, 0xffffffffffffffff, 0xfffffffd) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r4 = openat$auto_kmsg_fops_printk(0xffffffffffffff9c, &(0x7f0000000540), 0xa0100, 0x0) lseek$auto(r4, 0x0, 0x2) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x8}, 0x6) read$auto(0x3, 0x0, 0x80) (async) sendmsg$auto_HWSIM_CMD_GET_RADIO(0xffffffffffffffff, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000580)=ANY=[@ANYBLOB='6\x00\x00\x00', @ANYRES16, @ANYBLOB="cf5725bd7000ffdbdf2506000000"], 0x14}, 0x1, 0x0, 0x0, 0x40805}, 0x8000) (async, rerun: 64) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x400, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103}) (async, rerun: 64) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(0xffffffffffffffff, 0x4010e501, &(0x7f00000000c0)={r2, 0x4}) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r5) 4m29.961696457s ago: executing program 0 (id=292): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) open(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', 0x121342, 0x0) clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000000), 0x80001, 0x0) ioctl$auto(r0, 0x3b84, 0xffffffffffffffff) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) pipe$auto(0x0) r1 = socket(0xa, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0x9, 0x0, &(0x7f0000000080)=0x9c8) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/dev\x00', 0x100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000001080)=""/4092, 0xffc) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) capset$auto(0x0, 0x0) mmap$auto(0x0, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) socket(0x10, 0x3, 0x6) socket(0x22, 0x2, 0x2) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x6, 0x8000000000000006, 0x7, 0x0, 0x7ffffc) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0xfcffffff, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 4m23.249966057s ago: executing program 0 (id=298): mmap$auto(0x0, 0x42009, 0xdf, 0x13, 0x7, 0x28000) (async) mmap$auto(0x0, 0x42009, 0xdf, 0x13, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0x10, 0x2, 0x0) memfd_create$auto(0x0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket(0x2a, 0x2, 0x6) (async) socket(0x2a, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x9, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x6, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x9, 0x0) socket(0x27, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) (async) eventfd$auto(0x3) socket(0xa, 0x2, 0x88) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101800, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) (async) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x20800, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f0000001d40), 0x40a40, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000440)='./cgroup.net/net_prio.ifpriomap\x00', 0x10b142, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/asound/card0/pcm0p/oss\x00', 0x441, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x1, 0x0) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) 4m22.681307428s ago: executing program 0 (id=300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) socketpair$auto(0x0, 0x0, 0x9, &(0x7f0000000040)=0x4) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbf9, {}, [@BATADV_ATTR_BLA_OWN={0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40e0) 4m7.558563972s ago: executing program 33 (id=300): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00'}) socketpair$auto(0x0, 0x0, 0x9, &(0x7f0000000040)=0x4) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x20, r1, 0x1, 0x70bd27, 0x25dfdbf9, {}, [@BATADV_ATTR_BLA_OWN={0x4}, @BATADV_ATTR_MULTICAST_FORCEFLOOD_ENABLED={0x5, 0x37, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x40e0) 38.159612803s ago: executing program 5 (id=1055): r0 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000000), 0xc0040, 0x0) r1 = socket(0xa, 0x801, 0x106) setsockopt$auto(r1, 0x6, 0x24, 0x0, 0x9) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003100), r1) symlink$auto(&(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000010c0)='./file0\x00') symlink$auto(&(0x7f0000001100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000002100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="000425bd5000ffdbdf251f0000000800c400ff0700001e009400f3e71170223bbebdc9eb803e7df2f64ceab4ec0d633445601d8c00001000b0003b619533eb8b0b1f7def95c804002d010800100100000000"], 0x58}}, 0x20000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f00000000c0)={0x1, "e6c26c22ab89af11056b0001ac097e0a0728d9300000c500"}) 37.938471663s ago: executing program 5 (id=1057): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = socket(0x2, 0x6, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) r1 = memfd_create$auto(0x0, 0xe) (async) socket(0x2, 0x1, 0x106) (async) r2 = socket(0xa, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'bond0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r4, r3, 0x4, 0x1ff, r2, @relative_id=0x13, 0xe600}, 0xf) (async) bind$auto(r1, &(0x7f0000000040)=@can={0x1d, r4}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) (async) openat$auto_generic(0xffffffffffffff9c, 0x0, 0xa0101, 0x0) (async) mmap$auto(0x800000000000, 0x12f, 0xdf, 0x9b72, 0x7, 0x1) (async) socket(0x2, 0x1, 0x0) shutdown$auto(0x200000003, 0x2) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x1000000004) (async, rerun: 32) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x20000000) (async, rerun: 32) write$auto(0x3, 0x0, 0xfffffdef) (async) bind$auto(0x3, 0x0, 0x6b) connect$auto(0x3, 0x0, 0x55) (async) listen$auto(0x3, 0xfffffffa) (async) tkill$auto(0x1, 0x9) 34.679487014s ago: executing program 5 (id=1063): r0 = openat$auto_udmabuf_fops_udmabuf(0xffffffffffffff9c, &(0x7f0000000000), 0x26d00, 0x0) (async) r1 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000006880), 0x140, 0x0) close_range$auto(0x0, 0xffffffffffffffff, 0x2) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) socket(0x23, 0x2, 0x0) socket(0x22, 0x2, 0x0) (async, rerun: 32) socket(0xa, 0x801, 0x106) (async, rerun: 32) socket(0x2, 0x3, 0xa) (async, rerun: 64) pipe2$auto(0x0, 0x80) (async, rerun: 64) adjtimex$auto(&(0x7f0000002280)={0x1dd, 0x0, 0x8901, 0x8000, 0x40401, 0x5, 0x6, 0x0, 0x401, 0x81, 0x4, {0x3, 0x3b9aca03}, 0xa5, 0x2, 0x7, 0x6, 0x0, 0x5, 0x7fffffffffffffff, 0x4, 0x7ffffffffffffffc, 0x1, 0x12}) (async) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) (async) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) read$auto(r2, 0x0, 0x1f3c) (async) sendmsg$auto_NL80211_CMD_GET_WIPHY(r2, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYBLOB="810b25"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) (async) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x82, 0x0) ioctl$auto_evdev_fops_evdev(r3, 0x40104593, 0x0) (async) r4 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$auto_SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) ioctl$auto_USB_RAW_IOCTL_EP0_STALL(r1, 0xc0383e04, 0x0) (async, rerun: 32) ioctl$auto_UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000080)={0xffffffffffffffff, 0x6, 0x0, 0x2008000}) 34.009774926s ago: executing program 5 (id=1065): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r0, 0x921064a4, 0x1000000000000003) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/smaps\x00', 0x101000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x2, 0x1, 0x0) r2 = socket(0x23, 0x6, 0x0) setresuid$auto(0x2, 0x7, 0x0) setfsuid$auto(0x0) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) write$auto_configfs_file_operations_configfs_internal(r3, &(0x7f0000000140)="8e", 0x1) epoll_create$auto(0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) r4 = open(&(0x7f00000001c0)='./file0\x00', 0x4242, 0x0) fanotify_mark$auto(0x0, 0x1, 0x3a, r4, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x43aa00, 0x154) epoll_ctl$auto(0x5, 0x1, r2, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) memfd_create$auto(0x0, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r5 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f0000000000)=@bpf_attr_4={0x1b, r5, 0x1004, r5}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x8080, 0x0) syz_genetlink_get_family_id$auto_nbd(&(0x7f00000000c0), r1) getsockopt$auto(0x100000006, 0x1, 0x12, 0xfffffffffffffffe, 0x0) r6 = openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) write$auto(r6, 0x0, 0x4d52) 33.722157607s ago: executing program 5 (id=1066): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x141241, 0x0) (async) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x141241, 0x0) setreuid$auto(0x4, 0x8) pwrite64$auto(r0, 0x0, 0x6bc, 0x5) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) (async) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0f0026bd7000fcdbdf9907"], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) syz_clone3(0x0, 0x0) (async) r2 = syz_clone3(0x0, 0x0) prctl$auto(0x39, 0x1, r2, 0x6, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) tkill$auto(0x80000000000001, 0x7) (async) tkill$auto(0x80000000000001, 0x7) madvise$auto(0x0, 0x1000000000053, 0x9) socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) (async) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='V'], 0x1ac}}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) r3 = openat$auto_transaction_log_fops_(0xffffffffffffff9c, &(0x7f00000031c0)='/sys/kernel/debug/binder/failed_transaction_log\x00', 0x100, 0x0) read$auto_transaction_log_fops_(r3, &(0x7f0000003200)=""/13, 0xd) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x7, 0x800, 0x2, 0x10, 0x95, 0x8000) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 31.219384287s ago: executing program 5 (id=1071): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socket(0xa, 0x3, 0xff) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) mmap$auto(0x210, 0x20009, 0xe3, 0x15, 0x40000000000a1, 0x7ffd) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) setsockopt$auto(r1, 0x400, 0x11, &(0x7f0000000000)='nlctrl\x00', 0x26ae) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0xfffffffd) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f0000000980)=""/4098, 0x1002) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket(0xa, 0x2, 0x0) sync_file_range$auto(r4, 0xfffd, 0xfffffffffffffff9, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c810}, 0x20000041) close_range$auto(r3, r2, 0x80) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/81, 0x51) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/trace_marker\x00', 0x410041, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r5 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r5, &(0x7f0000008d40)='!$}-)#@\x00', 0x40) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x141f02, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) read$auto(0x4, 0x0, 0xfdef) 30.81303792s ago: executing program 34 (id=1071): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socket(0xa, 0x3, 0xff) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) mmap$auto(0x210, 0x20009, 0xe3, 0x15, 0x40000000000a1, 0x7ffd) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_0\x00'}) setsockopt$auto(r1, 0x400, 0x11, &(0x7f0000000000)='nlctrl\x00', 0x26ae) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0xfffffffd) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f0000000980)=""/4098, 0x1002) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x4000000) r4 = socket(0xa, 0x2, 0x0) sync_file_range$auto(r4, 0xfffd, 0xfffffffffffffff9, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c810}, 0x20000041) close_range$auto(r3, r2, 0x80) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/81, 0x51) openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/trace_marker\x00', 0x410041, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) r5 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r5, &(0x7f0000008d40)='!$}-)#@\x00', 0x40) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x141f02, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) read$auto(0x4, 0x0, 0xfdef) 16.573649573s ago: executing program 6 (id=1133): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28001) futex$auto(&(0x7f0000000380), 0xd, 0x8, &(0x7f0000000440)={0x7, 0x8}, 0x0, 0x8) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfffffdef) connect$auto(0x3, 0x0, 0x55) socket(0x10, 0x3, 0x507a) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x402080, 0x0) prctl$auto(0xf, 0x2, 0x7, 0x2, 0x1) 15.649926255s ago: executing program 6 (id=1138): mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) (async, rerun: 32) io_uring_setup$auto(0x6, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = socket(0xa, 0x2, 0x88) (rerun: 32) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) (rerun: 32) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r2, r1, 0x4, 0x1, r0, @relative_id=0x13, 0xe600}, 0xf) (async, rerun: 64) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x3}, 0xc) (rerun: 64) r3 = socket(0x1d, 0x2, 0x7) connect$auto(r3, &(0x7f00000000c0)=@phonet={0x23, 0xa, 0x4, 0xe3}, 0x8) (async, rerun: 32) write$auto_ucma_fops_ucma(0xffffffffffffffff, &(0x7f0000001400)="504cb857eda3", 0x6) (async, rerun: 32) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) (async) getsid$auto(0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macsec0\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000012c0)=ANY=[@ANYBLOB="44010000", @ANYRES16=r5, @ANYBLOB="01002dbd7000fddbdf250a00000008000100", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0b0042006d6163736563000014002d00fc010000000000000000000000000001080001"], 0x144}, 0x1, 0x0, 0x0, 0x4040085}, 0x0) 15.214044487s ago: executing program 6 (id=1141): socket(0x10, 0x2, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x3f, 0x4909b6f8, 0x1ffde, 0x7, 0x3, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x3, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000]}, 0x1fe, 0xd) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) socket(0x2, 0x3, 0x6) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) socket(0xa, 0x5, 0x0) (async, rerun: 32) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) (rerun: 32) read$auto_def_blk_fops_fs(r0, &(0x7f0000000140)=""/194, 0xc2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async, rerun: 64) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX5n\x91p\xe6\x1eRN8\x99C\x05\x06\x00J\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\v\x00\x00\x00\x00\x00\x00\x00X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00'/97, 0x10, 0x3) (async, rerun: 64) fanotify_init$auto(0x6a1, 0x2000000000002) (async) socket(0x26, 0x80805, 0x0) socket(0x28, 0x1, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_supply_map_fops_(0xffffffffffffff9c, &(0x7f00000017c0), 0x400, 0x0) read$auto_supply_map_fops_(r1, &(0x7f0000001800)=""/22, 0x16) (async) socket(0x2a, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000dc0), r3) sendmsg$auto_IPVS_CMD_GET_DEST(r3, &(0x7f0000003a40)={0x0, 0x0, &(0x7f0000003a00)={&(0x7f0000000e80)={0x14, r4, 0xc0dce8a66cb0a7ff, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4040011}, 0x40010) (async) sendmsg$auto_IPVS_CMD_GET_SERVICE(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000280)={&(0x7f00000000c0)={0x18c, r4, 0x8, 0x70bd2d, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x175, 0x3, 0x0, 0x1, [@generic="1091926642ae23ab3a21466c68ffb732fafca7327f1be8a459e1d7c1cb82d2054d38eee88bc2ad5ebb571cb70dab3206de24b938df7570f37e87c71b5bf36bce32364ee559108192c1841e30d5cd2099b49b657617218679d88490a4c458eee498e5a82499e71505c3bdb0fd1ed2a152c0a90cb2", @typed={0x7, 0x65, 0x0, 0x0, @str='%f\x00'}, @generic="8276bd053c9f6bf6f1814dd2a886c474add4861768b9f83902e8979500bccb1f9e7adc5f360ae142a4d7bca3bd05f9d55eddc4d2418ac9aabfb7a8aed5", @typed={0x4, 0x12c}, @nested={0xb3, 0x56, 0x0, 0x1, [@generic="b9692e48dac2fb86f9c36915cbd97d14a218b6dc37f986f1babc19050e5df81cdad24e53aeaea0bc38c2538fa1f2e8c1", @generic="3eb8067331a6d03cc3e0ef236f1f3adc25853015fe78fb30d4d205c7b73b99e21b8444ebea92b188e7cedab006bedb4efaf15893575563ca2d1daabeddd2cc7a35bfed9e7e5c6fc071c860339edf6c49cbb47b0732f8de7f13f6c26916cd2e441f5fcd02a78cfe7e0a552e8929", @generic="334cd238ae96832ca70332b789c3943736da"]}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x4000}, 0x840) (async) ioctl$auto(0x3, 0x800005411, 0x38) 14.874056651s ago: executing program 6 (id=1145): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) socket(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x220a00, 0x0) memfd_secret$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0x40047438, 0x0) (fail_nth: 3) 14.399205703s ago: executing program 6 (id=1147): set_mempolicy$auto(0x3, &(0x7f0000000000)=0x7, 0x56) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/221, 0xdd) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r1, 0x7a7, 0x0) (async) bpf$auto(0x0, &(0x7f0000000000)=@link_update={0x2, @new_map_fd=r0, 0x7, @old_prog_fd=0x8000}, 0x1) (async) get_mempolicy$auto(0x0, 0x0, 0x9, 0x0, 0x1) 14.146047601s ago: executing program 6 (id=1148): openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/stat\x00', 0xc0802, 0x0) r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mbind$auto(0x0, 0x2, 0x2, 0x0, 0x7, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x2841, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(r1, &(0x7f0000000a80)={0x0, 0x10002}, 0x401) close_range$auto(0x2, 0xa, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9d, 0x8, 0x13, 0x0, 0x47, 0x80000000c, 0xf, 0x0, 0x0, 0xb, 0x4, 0x5, 0xff, 0x0, 0x3]}, 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/tty/ttyd5/power/autosuspend_delay_ms\x00', 0x103000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000003800)=""/168, 0xa8) mbind$auto(0x4, 0x88, 0x74, &(0x7f0000000000)=0x20000000000, 0x10, 0x2) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x48000, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x1000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x15, 0x3, 0x6) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) listen$auto(r0, 0x7) unshare$auto(0x40000080) socket(0xa, 0x2, 0xff) 8.545979178s ago: executing program 4 (id=1171): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfd, 0x8000) pidfd_open$auto(0x1, 0x0) iopl$auto(0x3) memfd_create$auto(&(0x7f0000000000)='&$\x00', 0xc) rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x1) bind$auto(0x4, 0xfffffffffffffffe, 0x0) mknod$auto(&(0x7f0000000180)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e', 0x1, 0x4) r0 = socket(0xa, 0x801, 0x106) syslog$auto(0x3, &(0x7f0000000040)='V/\x00', 0x7ff) connect$auto(r0, &(0x7f0000000140), 0x55) msync$auto(0x0, 0x2000000005, 0x6) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) ptrace$auto(0xff, r1, 0x3, 0x3) 4.599918503s ago: executing program 4 (id=1178): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = signalfd4$auto(0xffffffffffffffff, &(0x7f0000000000)={0x8}, 0x6, 0x3) read$auto_proc_coredump_filter_operations_base(r0, &(0x7f0000000080)=""/4, 0x4) socket(0x2, 0xa, 0x1) close_range$auto(0x0, 0xffffffffffffffff, 0x4000000000002) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev7\x00', 0x195582, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x0, 0x1a, 0x0, 0x28) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto_def_blk_fops_fs(r1, 0x5386, &(0x7f0000000000)) socket$nl_generic(0x11, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r2, 0x40345410, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.862053054s ago: executing program 1 (id=1181): openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x145782, 0x0) (async) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x145782, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mlockall$auto(0x7) socket(0xa, 0x2, 0x73) (async) socket(0xa, 0x2, 0x73) fcntl$auto(0x0, 0x407, 0x100000) mlockall$auto(0x7) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x1a, 0x1, 0x0) (async) socket(0x1a, 0x1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x55) (async) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @my=0x1}, 0x55) setsockopt$auto(0x3, 0x1, 0x3c, 0x0, 0x9) pipe2$auto(0x0, 0x80) io_uring_setup$auto(0x1, 0x0) (async) io_uring_setup$auto(0x1, 0x0) ioctl$auto(0x1, 0x5761, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vidtv.0/i2c-0/name\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0xa, 0x0) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, 0x0, 0x82c00, 0x0) (async) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, 0x0, 0x82c00, 0x0) landlock_create_ruleset$auto(0x0, 0x9, 0x0) r1 = socket(0x29, 0x2, 0x0) setsockopt$auto(r1, 0x119, 0x1, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) r2 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r2, &(0x7f0000000040)={0x8, 0x2, "0200000000000000"}, 0x2) (async) open_by_handle_at$auto(r2, &(0x7f0000000040)={0x8, 0x2, "0200000000000000"}, 0x2) read$auto(0x3, 0x0, 0xf34) sendfile$auto(r0, r0, 0x0, 0x2) 3.218083111s ago: executing program 4 (id=1183): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/partitions\x00', 0x0, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000002040)=""/4090, 0xffa) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfe, {}, [@BATADV_ATTR_MCAST_FLAGS_PRIV={0x8, 0x27, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c894}, 0x24008000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB='\rV'], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x200000c4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='^'], 0x1ac}, 0x1, 0x0, 0x0, 0xc000}, 0xc814) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8927, &(0x7f0000000000)={'wg1\x00'}) 3.008268144s ago: executing program 3 (id=1184): mmap$auto(0x0, 0x1, 0xe1, 0xeb1, 0x401, 0x8000) socket(0x21, 0x2, 0x2) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) munlock$auto(0x9, 0x29b9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x200) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r0, 0x0) setreuid$auto(0x3, 0x7) syz_clone(0x98280000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x1, 0xe1, 0xeb1, 0x401, 0x8000) (async) socket(0x21, 0x2, 0x2) (async) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) (async) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) (async) mmap$auto(0x0, 0x40009, 0xa, 0x9b72, 0x2, 0x28000) (async) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) (async) munlock$auto(0x9, 0x29b9) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) unshare$auto(0x200) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') (async) setns(r0, 0x0) (async) setreuid$auto(0x3, 0x7) (async) syz_clone(0x98280000, 0x0, 0x0, 0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) 2.914164154s ago: executing program 4 (id=1185): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x20000000) recvmmsg$auto(0x3, 0x0, 0x4, 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1, 0xb}, 0x800009}, 0x5, 0x20000000) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0x1, 0x0) getsockopt$auto(r2, 0x6, 0x25, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x60, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x47, 0x1, 0x0, 0x1, [@generic="e9bb8169322e4db4b67533434ce7da5fa1acd1bfcddfef65c00c1f18288514029357d6f614a798f12003fef2cb31cabb66d9467c51c7443182898ab631370a9d2ea571"]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000000}, 0x200400d0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'tunl0\x00'}) r6 = socket(0x11, 0xb, 0x0) getpriority$auto(0x1, 0x5) sendmsg$auto_NCSI_CMD_PKG_INFO(r5, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={0x0}, 0x1, 0x0, 0x0, 0x41}, 0x44088) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/conf/veth0/arp_announce\x00', 0x1a5e01, 0x0) r8 = open$dir(&(0x7f00000000c0)='./file0\x00', 0xac002, 0x80) r9 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES16=r9, @ANYRES16=r8], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r6, 0x7ff) 2.606074544s ago: executing program 1 (id=1186): mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ioctl$auto(0x3, 0x227c, 0x3b) 2.441761186s ago: executing program 3 (id=1187): mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3ff, 0x0) (async) mmap$auto(0x0, 0x8, 0x329, 0x10011, 0x2, 0x8000) (async) clone$auto(0x4, 0x400, 0xfffffffffffffffe, 0xfffffffffffffffc, 0xd1) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x9, 0xf, 0x940, 0x20005, 0x3, 0x2000000000000006, 0x2, 0x0, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x3, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x3, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8, 0x0, 0x0, 0x9, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}, 0x201, 0x81) (async) socket(0x2, 0x3, 0x100) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)=ANY=[@ANYBLOB='*', @ANYRES16, @ANYBLOB="010029bd"], 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/43:224/power/autosuspend_delay_ms\x00', 0x5d1180, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000380)="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", 0x1000) (async) tgkill$auto(0x0, 0x7, 0x80) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) (async) syz_open_procfs$namespace(0x0, 0x0) (async) socket(0xa, 0x3, 0x3a) (async) io_uring_setup$auto(0x6, 0x0) (async) connect$auto(0xffffffffffffffff, 0x0, 0x55) (async) ioctl$auto(0x3, 0x80000541b, 0x38) setsockopt$auto(0x400000000000003, 0x29, 0xd2, 0x0, 0x567) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) sysfs$auto(0x2, 0x10000000000048, 0x0) r2 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) (async) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0x8208ae63, r2) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300"], 0x1ac}}, 0x4004) 2.253182787s ago: executing program 1 (id=1188): r0 = open(&(0x7f0000000000)='./file0\x00', 0xa01c2, 0x84) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/cpumask_requested\x00', 0x2400, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/cpumask_requested\x00', 0x2400, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) read$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffa4) sendmsg$auto_NL80211_CMD_JOIN_OCB(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="000000009aa395b0677e1ed2b30cb81bfdcee68b8dcf", @ANYRES16=0x0, @ANYBLOB="a42ef358d19566d3b68fa236f189a8230026bd7000fbdbdf256c0000000000"], 0xb}, 0x1, 0x0, 0x0, 0x24000000}, 0x8804) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) madvise$auto(0x0, 0x2000040080000004, 0xe) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000100), r1) (async) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000100), r1) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8901, &(0x7f0000000080)={'wg0\x00'}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) r2 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) (async) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) process_vm_writev$auto(0x0, 0x0, 0x2, 0x0, 0x8000000000001, 0x0) fallocate$auto(r0, 0x40, 0x80000000000010, 0xdbd60) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x183800, 0x0) (async) r3 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x183800, 0x0) pidfd_open$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) write$auto_proc_clear_refs_operations_internal(r2, &(0x7f0000000240)="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", 0x1000) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto(0x3, 0x400454da, 0x38) socketpair$auto(0x1e, 0x5, 0x0, 0x0) close_range$auto(0x2, r3, 0xfffffffe) socket(0xa, 0x3, 0x3b) (async) socket(0xa, 0x3, 0x3b) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0x200, 0x0) socketpair$auto(0x1e, 0x5, 0x80000, 0x0) 1.59538767s ago: executing program 4 (id=1189): r0 = fcntl$auto(0xff80000000000000, 0x406, 0x1) r1 = openat$auto_debug_help_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x2800, 0x0) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) poll$auto(&(0x7f0000000000)={r2, 0xe7f1, 0x1723}, 0x8, 0x2) open_by_handle_at$auto(r2, &(0x7f0000000340)={0x42, 0x9, "91150da6cdfe98877e689055d350c988461138a7b1e007dec3d00424840535fc839a9bbe5e9f5e435ffc0a8baf548613bd3b8f329a1d89966b008a3a212f5a9fa574"}, 0x80000000) mmap$auto(0x91a, 0x3ff, 0x3, 0x13, 0xffffffffffffffff, 0x8000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/vm/drop_caches\x00', 0x141241, 0x0) pwrite64$auto(r4, &(0x7f0000000000)='./cgroup/memory.pressure\x00', 0x6bc, 0x5) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xd0, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x7ff}, @NL80211_ATTR_S1G_CAPABILITY_MASK={0xa9, 0x129, "35ae29a7f9b3c9a1fd8028ea3533dd86572ce77af0cfbb12401315f400535389d9b9f7454cb692b0d93f88b142e8fe0bdcd4570530ff2510072c27bd7e0d331d47e6b008f3f47cebe8f378aa0880cd1c00c7b31d1c1e8396788b87dc708bdc0ba53a34bf9db3e3462c6947abfb99e8e02b303ef6cfe95fbd37da283e6b0a06471e4b5d91ac11f1dae07861b0017f13cb19972b85a0d3bd0687ac2905b5bb2bea8d84062ba0"}, @NL80211_ATTR_TDLS_ACTION={0x5}]}, 0xd0}, 0x1, 0x0, 0x0, 0x40001}, 0x20044001) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) io_cancel$auto(0x8, &(0x7f0000000040)={0x3a9, 0x3, 0x9, 0x8, 0x8, r3, 0x80000000, 0x400, 0xfffffffffffffffa, 0x0, 0x80, r1}, &(0x7f0000000100)={0x1, 0x4, 0xffffffffffffffff, 0x101}) socket(0x8, 0xc, 0x5) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20082, 0x0) r6 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r7, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r7) ioctl$auto_KVM_CREATE_VM(r6, 0xc080aebe, 0x0) connect$auto(r5, &(0x7f0000000140)=@sco, 0x6fd8548b) 1.230062292s ago: executing program 3 (id=1190): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) fstat$auto(r0, &(0x7f0000000000)={0x100, 0x9, 0x8, 0x9, 0xee00, 0xffffffffffffffff, 0x0, 0x8, 0x1, 0x8, 0x1e000000000000, 0x1, 0x5b4, 0x5, 0xbf, 0x1b9f, 0x80}) r2 = getegid() setregid$auto(r2, r2) fstat$auto(r0, &(0x7f00000000c0)={0x100000001, 0x80, 0x80000001, 0x5, r1, r2, 0x0, 0x7ff, 0x1, 0x7, 0x7, 0x3, 0x31ef, 0x4, 0x7, 0xfff, 0x9}) getcwd$auto(0x0, 0xffffffffffffffff) renameat$auto(0x6, 0x0, 0x5, 0x0) 1.229518833s ago: executing program 1 (id=1191): mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x28641, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) ioctl$auto(0x3, 0x227c, 0x3b) (fail_nth: 4) 692.07713ms ago: executing program 3 (id=1192): r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000700)='/dev/binderfs/binder0\x00', 0x2280, 0x0) mmap$auto_binder_fops_binder_internal(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1, 0x12, r0, 0x100000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000008c0), 0x440, 0x0) ioctl$auto_RNDADDTOENTCNT2(r1, 0x40045201, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x3, &(0x7f0000000180), 0x83) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r2, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)={0x38, r3, 0x23, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x18, 0x3, 0x0, 0x1, [@nested={0x5, 0x1, 0x0, 0x1, [@generic="03"]}, @typed={0xc, 0x4, 0x0, 0x0, @u64=0xfffffffffffffffe}]}, @MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 552.806936ms ago: executing program 4 (id=1193): mmap$auto(0x0, 0x8000000040009, 0xdf, 0x10011, 0x7, 0xb) sysfs$auto(0x2, 0xf, 0x0) r0 = fsopen$auto(0x0, 0xfffffffc) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x1000, 0xd0, 0x1) close_range$auto(r0, r0, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r3 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r3, 0xf, 0x6) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x10000000000000a, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x1, 0x0) connect$auto(0x3, &(0x7f00000000c0)=@vsock={0x28, 0x0, 0x2710, @host}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0xfffffffffffff000, 0x2) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) 469.990419ms ago: executing program 1 (id=1194): mmap$auto(0x0, 0x400008, 0xdf, 0x64dd, 0x2, 0x8000) close_range$auto(0xffffffffffffffff, 0x8, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x0, 0x0) ioctl$auto(r1, 0x4b45, r0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) openat$auto_ftrace_avail_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/available_events\x00', 0x0, 0x0) socket(0x0, 0x800, 0x2) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x77, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyprintk\x00', 0x40001, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video1\x00', 0x401, 0x0) ioctl$auto(0x3, 0xc0205647, 0x38) write$auto_tty_fops_tty_io(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC0\x00', 0x220a00, 0x0) memfd_secret$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000b00)='/proc/self/smaps\x00', 0x42000, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r4, 0x40047438, 0x0) 340.652797ms ago: executing program 3 (id=1195): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000003c0), r0) sendmsg$auto_TIPC_NL_LINK_GET(r0, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000000500)={0x18, r1, 0x1, 0x70bd26, 0x25dfdbfe, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x880}, 0x4044090) 145.036902ms ago: executing program 3 (id=1196): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r0) (async) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r0) r2 = syz_clone(0x0, 0x0, 0xffffffffffffff19, 0x0, 0x0, 0x0) r3 = accept4$auto(0xffffffffffffffff, 0x0, 0x0, 0x6) ioctl$auto_SNDCTL_DSP_GETODELAY(r3, 0x80045017, 0x0) setsockopt$auto(0xffffffffffffffff, 0x1, 0x12, 0x0, 0xa4) (async) setsockopt$auto(0xffffffffffffffff, 0x1, 0x12, 0x0, 0xa4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x1010001, 0x100000003) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/netdevsim/netdevsim1/trap_flow_action_cookie\x00', 0x501000, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0x19d0, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x19d0, 0xfffffffffffffffa, 0x8000) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x100000000005d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) (async) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x100000000005d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) clone$auto(0x440f, 0x6, 0x0, 0x0, 0x8) io_uring_setup$auto(0x40005, &(0x7f0000000000)={0x6, 0x1, 0x400, 0x7, 0x1005, 0x6, 0x7, [0x4, 0x2e9, 0x5], {0x0, 0x1, 0x8, 0x7, 0x5, 0x100005, 0x1, 0x0, 0x7}, {0x4, 0xfff, 0xffff7fff, 0x2, 0x8, 0x200, 0x3, 0x0, 0x3}}) madvise$auto(0x108000, 0x800034, 0x9) (async) madvise$auto(0x108000, 0x800034, 0x9) times$auto(&(0x7f00000001c0)={0x7fffffff, 0x4, 0x9, 0x4}) (async) times$auto(&(0x7f00000001c0)={0x7fffffff, 0x4, 0x9, 0x4}) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r1, 0xa01, 0x70bd2b, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) (async) sendmsg$auto_TASKSTATS_CMD_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r1, 0xa01, 0x70bd2b, 0x25dfdbfb, {}, [@TASKSTATS_CMD_ATTR_PID={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4001}, 0x20000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) 0s ago: executing program 1 (id=1197): r0 = socket(0x11, 0x3, 0x100009) (async) capset$auto(0x0, &(0x7f0000000000)={0x1, 0xd, 0x8}) sendmmsg$auto(r0, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) (async, rerun: 32) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async, rerun: 32) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x6, 0x0) getsockopt$auto(0x100000006, 0x0, 0x33, 0xfffffffffffffffe, 0x0) (async) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) r2 = socket(0xa, 0x801, 0x106) setsockopt$auto(r2, 0x1, 0x7, 0x0, 0xfb3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x40802, 0x0) (async, rerun: 32) r3 = openat$auto_ptdump_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (rerun: 32) mmap$auto(0x0, 0x20009, 0x6, 0xeb1, r3, 0x8000) (async) r4 = socket(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'gretap0\x00'}) (async) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x100000001, 0x63, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x400, 0x7ffffff9, 0x5, 0xffffffff80000000, 0x9, 0x61, 0x105}) (async) socket(0x10, 0x2, 0x0) (async, rerun: 32) r5 = socket(0x2c, 0x3, 0x0) (rerun: 32) bind$auto(r5, &(0x7f0000000080)=@xdp={0x2c, 0xc, 0x0, 0x1c}, 0x6b) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wg2\x00'}) (async, rerun: 32) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x400, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) (async) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1b1af54f8ddc5ee701002cbd7000fbdbdf250afa008008000b0000000000080001", @ANYRES8=r1], 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a0027"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x0, 0x0) kernel console output (not intermixed with test programs): batadv_slave_1 [ 144.883116][ T6573] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.918224][ T6573] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.950020][ T6573] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 144.958814][ T6573] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.245544][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.487921][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.552215][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.560393][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.635116][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.762708][ T6718] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.786732][ T6718] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.812126][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.540673][ T35] bridge_slave_1: left allmulticast mode [ 147.546879][ T35] bridge_slave_1: left promiscuous mode [ 147.581762][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.691864][ T35] bridge_slave_0: left allmulticast mode [ 147.697599][ T35] bridge_slave_0: left promiscuous mode [ 147.706510][ T6746] netlink: 74 bytes leftover after parsing attributes in process `syz.3.163'. [ 147.732257][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.118216][ T6782] netlink: 342 bytes leftover after parsing attributes in process `syz.1.169'. [ 149.128620][ T6782] netlink: zone id is out of range [ 149.133876][ T6782] netlink: zone id is out of range [ 149.139368][ T6782] netlink: zone id is out of range [ 149.144751][ T6782] netlink: zone id is out of range [ 149.161106][ T6782] netlink: zone id is out of range [ 149.166311][ T6782] netlink: zone id is out of range [ 149.184399][ T6782] netlink: zone id is out of range [ 149.207120][ T6782] netlink: zone id is out of range [ 149.218187][ T6782] netlink: zone id is out of range [ 149.229502][ T6782] netlink: zone id is out of range [ 149.646188][ T6787] sg_write: data in/out 32620/695215102 bytes for SCSI command 0x0-- guessing data in; [ 149.646188][ T6787] program syz.1.170 not setting count and/or reply_len properly [ 150.100912][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.142635][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.164156][ T35] bond0 (unregistering): Released all slaves [ 151.626147][ T35] hsr_slave_0: left promiscuous mode [ 151.705288][ T35] hsr_slave_1: left promiscuous mode [ 151.782596][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.820887][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.852010][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.859502][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.116420][ T35] veth1_macvtap: left promiscuous mode [ 152.173901][ T35] veth0_macvtap: left promiscuous mode [ 152.179605][ T35] veth1_vlan: left promiscuous mode [ 152.230340][ T35] veth0_vlan: left promiscuous mode [ 152.354927][ T6847] Invalid ELF header magic: != ELF [ 155.214553][ T35] team0 (unregistering): Port device team_slave_1 removed [ 155.669697][ T35] team0 (unregistering): Port device team_slave_0 removed [ 160.064670][ T29] audit: type=1800 audit(4294967304.690:5): pid=6920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.191" name="discovery_nqn" dev="configfs" ino=11610 res=0 errno=0 [ 160.400323][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 160.450507][ T6926] netlink: 338 bytes leftover after parsing attributes in process `syz.3.193'. [ 160.538883][ T6930] netlink: 338 bytes leftover after parsing attributes in process `syz.3.193'. [ 161.282521][ T6944] netlink: 130 bytes leftover after parsing attributes in process `syz.4.194'. [ 163.828989][ T6997] netlink: 'syz.1.202': attribute type 10 has an invalid length. [ 163.852690][ T6997] netlink: 330 bytes leftover after parsing attributes in process `syz.1.202'. [ 163.917933][ T6981] lo: entered allmulticast mode [ 164.191862][ T6977] lo: left allmulticast mode [ 164.855486][ T6991] syz.3.201: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 164.872890][ T6991] CPU: 0 UID: 0 PID: 6991 Comm: syz.3.201 Not tainted 6.13.0-syzkaller #0 [ 164.881490][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 164.891616][ T6991] Call Trace: [ 164.894947][ T6991] [ 164.897926][ T6991] dump_stack_lvl+0x16c/0x1f0 [ 164.902764][ T6991] warn_alloc+0x24d/0x3a0 [ 164.907173][ T6991] ? __pfx_warn_alloc+0x10/0x10 [ 164.912084][ T6991] ? __pfx_mark_lock+0x10/0x10 [ 164.916922][ T6991] ? lock_acquire.part.0+0x11b/0x380 [ 164.922259][ T6991] __vmalloc_node_range_noprof+0x10df/0x1530 [ 164.928311][ T6991] ? rcu_is_watching+0x12/0xc0 [ 164.933137][ T6991] ? trace_contention_end+0xee/0x140 [ 164.938467][ T6991] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 164.943806][ T6991] ? dvb_demux_do_ioctl+0x496/0x1340 [ 164.949186][ T6991] ? __pfx___mutex_lock+0x10/0x10 [ 164.954259][ T6991] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 164.960640][ T6991] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 164.966571][ T6991] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 164.971912][ T6991] vmalloc_noprof+0x6b/0x90 [ 164.976459][ T6991] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 164.981795][ T6991] dvb_demux_do_ioctl+0x54d/0x1340 [ 164.986970][ T6991] dvb_usercopy+0x165/0x320 [ 164.991517][ T6991] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 164.997108][ T6991] ? __pfx_dvb_usercopy+0x10/0x10 [ 165.002167][ T6991] ? __pfx_lock_release+0x10/0x10 [ 165.007238][ T6991] ? __fget_files+0x206/0x3a0 [ 165.011957][ T6991] dvb_demux_ioctl+0x29/0x40 [ 165.016589][ T6991] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 165.021916][ T6991] __x64_sys_ioctl+0x190/0x200 [ 165.026716][ T6991] do_syscall_64+0xcd/0x250 [ 165.031270][ T6991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.037211][ T6991] RIP: 0033:0x7f3f33985d29 [ 165.041654][ T6991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.061297][ T6991] RSP: 002b:00007f3f34706038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 165.069746][ T6991] RAX: ffffffffffffffda RBX: 00007f3f33b75fa0 RCX: 00007f3f33985d29 [ 165.077748][ T6991] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 165.085758][ T6991] RBP: 00007f3f33a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 165.093763][ T6991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 165.101768][ T6991] R13: 0000000000000000 R14: 00007f3f33b75fa0 R15: 00007ffc0c173118 [ 165.109792][ T6991] [ 165.221562][ T6991] Mem-Info: [ 165.224811][ T6991] active_anon:14786 inactive_anon:62973 isolated_anon:12 [ 165.224811][ T6991] active_file:10360 inactive_file:46228 isolated_file:0 [ 165.224811][ T6991] unevictable:768 dirty:149 writeback:0 [ 165.224811][ T6991] slab_reclaimable:10296 slab_unreclaimable:95239 [ 165.224811][ T6991] mapped:36321 shmem:74077 pagetables:958 [ 165.224811][ T6991] sec_pagetables:0 bounce:0 [ 165.224811][ T6991] kernel_misc_reclaimable:0 [ 165.224811][ T6991] free:1262635 free_pcp:4315 free_cma:0 [ 165.385514][ T6991] Node 0 active_anon:61008kB inactive_anon:251876kB active_file:41536kB inactive_file:184468kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:145912kB dirty:600kB writeback:0kB shmem:296168kB shmem_thp:2048kB shmem_pmdmapped:2048kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10996kB pagetables:3888kB sec_pagetables:0kB all_unreclaimable? no [ 165.462140][ T6991] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:8kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 165.586634][ T6991] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 165.670656][ T6991] lowmem_reserve[]: 0 2491 2492 0 0 [ 165.676078][ T6991] Node 0 DMA32 free:1135792kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:65072kB inactive_anon:251876kB active_file:45136kB inactive_file:179336kB unevictable:1536kB writepending:600kB present:3129332kB managed:2551312kB mlocked:0kB bounce:0kB free_pcp:1788kB local_pcp:1032kB free_cma:0kB [ 165.730020][ T6991] lowmem_reserve[]: 0 0 0 0 0 [ 165.734871][ T6991] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 165.768141][ T6991] lowmem_reserve[]: 0 0 0 0 0 [ 165.773121][ T6991] Node 1 Normal free:3895952kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:8kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:14584kB local_pcp:3056kB free_cma:0kB [ 165.870547][ T6991] lowmem_reserve[]: 0 0 0 0 0 [ 165.889997][ T6991] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 165.958066][ T6991] Node 0 DMA32: 218*4kB (ME) 1662*8kB (ME) 1419*16kB (ME) 1085*32kB (ME) 566*64kB (UME) 217*128kB (UME) 98*256kB (UME) 49*512kB (UME) 62*1024kB (UME) 21*2048kB (UME) 205*4096kB (UM) = 1131944kB [ 166.040917][ T6991] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 166.096962][ T6991] Node 1 Normal: 207*4kB (UME) 49*8kB (UME) 22*16kB (UME) 203*32kB (UME) 95*64kB (UME) 31*128kB (UME) 14*256kB (UM) 9*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 943*4096kB (M) = 3896004kB [ 166.163053][ T6991] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.208871][ T6991] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 166.272328][ T6991] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.424113][ T6991] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 166.520418][ T6991] 133341 total pagecache pages [ 166.525348][ T6991] 92 pages in swap cache [ 166.529719][ T6991] Free swap = 109844kB [ 166.635601][ T6991] Total swap = 124996kB [ 166.639833][ T6991] 2097051 pages RAM [ 166.754217][ T6991] 0 pages HighMem/MovableOnly [ 166.810248][ T6991] 427373 pages reserved [ 166.834452][ T6991] 0 pages cma reserved [ 168.678253][ T7077] netlink: 130 bytes leftover after parsing attributes in process `syz.1.212'. [ 168.973457][ T29] audit: type=1807 audit(4294967313.600:6): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 169.004990][ T7086] ima: policy update failed [ 169.022020][ T29] audit: type=1802 audit(4294967313.620:7): pid=7086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.1.214" res=0 errno=0 [ 169.047139][ T7081] gspca_gl860.sensor: string doesn't fit in 6 chars. [ 169.088374][ T29] audit: type=1802 audit(4294967313.630:8): pid=7086 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.214" res=0 errno=0 [ 169.254552][ T7087] HfR: entered promiscuous mode [ 169.262414][ T7093] netlink: 12 bytes leftover after parsing attributes in process `syz.3.213'. [ 169.344681][ T7093] HfR: left promiscuous mode [ 173.012552][ T7165] netlink: 'syz.4.229': attribute type 10 has an invalid length. [ 173.051533][ T7165] netlink: 330 bytes leftover after parsing attributes in process `syz.4.229'. [ 177.545551][ T7235] netlink: 338 bytes leftover after parsing attributes in process `syz.4.239'. [ 177.680583][ T7237] netlink: 338 bytes leftover after parsing attributes in process `syz.4.239'. [ 183.150834][ T7322] kexec: Could not allocate control_code_buffer [ 185.015399][ T7372] Invalid ELF header magic: != ELF [ 186.309464][ T7339] syz.0.255 (7339) used greatest stack depth: 21152 bytes left [ 186.421162][ T7395] netlink: 334 bytes leftover after parsing attributes in process `syz.4.258'. [ 186.496601][ T7383] netlink: 28 bytes leftover after parsing attributes in process `syz.3.260'. [ 187.880875][ T7422] netlink: 314 bytes leftover after parsing attributes in process `syz.3.263'. [ 187.921252][ T7422] netlink: 314 bytes leftover after parsing attributes in process `syz.3.263'. [ 190.140902][ T7465] svc: failed to register nfsdv3 RPC service (errno 111). [ 190.173615][ T7465] svc: failed to register nfsaclv3 RPC service (errno 111). [ 190.886885][ T7472] Invalid ELF header magic: != ELF [ 191.625333][ T7475] netlink: 28 bytes leftover after parsing attributes in process `syz.4.272'. [ 194.532263][ T7521] netlink: 28 bytes leftover after parsing attributes in process `syz.1.283'. [ 194.541480][ T7521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.548935][ T7521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.761372][ T7521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.840293][ T7521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.995507][ T7527] FAULT_INJECTION: forcing a failure. [ 194.995507][ T7527] name failslab, interval 1, probability 0, space 0, times 0 [ 195.008727][ T7527] CPU: 1 UID: 0 PID: 7527 Comm: syz.3.284 Not tainted 6.13.0-syzkaller #0 [ 195.017299][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 195.027427][ T7527] Call Trace: [ 195.030761][ T7527] [ 195.033734][ T7527] dump_stack_lvl+0x16c/0x1f0 [ 195.038481][ T7527] should_fail_ex+0x497/0x5b0 [ 195.043259][ T7527] ? fs_reclaim_acquire+0xae/0x150 [ 195.048442][ T7527] should_failslab+0xc2/0x120 [ 195.053228][ T7527] __kmalloc_noprof+0xce/0x4f0 [ 195.058075][ T7527] ? fib_default_rule_add+0x4f/0x420 [ 195.063441][ T7527] fib_default_rule_add+0x4f/0x420 [ 195.068619][ T7527] fib4_rules_init+0x52/0x1c0 [ 195.073356][ T7527] fib_net_init+0x1de/0x3d0 [ 195.077940][ T7527] ? __pfx_fib_net_init+0x10/0x10 [ 195.083158][ T7527] ? do_init_timer+0xc9/0x110 [ 195.087903][ T7527] ? devinet_init_net+0x5b3/0x8f0 [ 195.093003][ T7527] ? __pfx_fib_net_init+0x10/0x10 [ 195.098097][ T7527] ops_init+0x1df/0x5f0 [ 195.102330][ T7527] setup_net+0x21f/0x860 [ 195.106653][ T7527] ? __pfx_setup_net+0x10/0x10 [ 195.111489][ T7527] ? down_read_killable+0xcc/0x380 [ 195.116669][ T7527] ? __pfx_down_read_killable+0x10/0x10 [ 195.122290][ T7527] ? debug_mutex_init+0x37/0x70 [ 195.127209][ T7527] copy_net_ns+0x2b4/0x6c0 [ 195.131683][ T7527] create_new_namespaces+0x3ea/0xad0 [ 195.137033][ T7527] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 195.142729][ T7527] ksys_unshare+0x45d/0xa40 [ 195.147308][ T7527] ? __pfx_ksys_unshare+0x10/0x10 [ 195.152406][ T7527] ? xfd_validate_state+0x5d/0x180 [ 195.157595][ T7527] __x64_sys_unshare+0x31/0x40 [ 195.162438][ T7527] do_syscall_64+0xcd/0x250 [ 195.167014][ T7527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.172972][ T7527] RIP: 0033:0x7f3f33985d29 [ 195.177436][ T7527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.197104][ T7527] RSP: 002b:00007f3f34706038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 195.205585][ T7527] RAX: ffffffffffffffda RBX: 00007f3f33b75fa0 RCX: 00007f3f33985d29 [ 195.213616][ T7527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 195.221648][ T7527] RBP: 00007f3f33a01b08 R08: 0000000000000000 R09: 0000000000000000 [ 195.229675][ T7527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.237798][ T7527] R13: 0000000000000000 R14: 00007f3f33b75fa0 R15: 00007ffc0c173118 [ 195.245854][ T7527] [ 197.160435][ T7548] cgroup: fork rejected by pids controller in /syz4 [ 199.793543][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.799987][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 202.868193][ T7701] Invalid ELF header magic: != ELF [ 203.031326][ T7705] syz.3.291 (7705): /proc/7703/oom_adj is deprecated, please use /proc/7703/oom_score_adj instead. [ 204.090151][ T7702] netlink: 28 bytes leftover after parsing attributes in process `syz.1.288'. [ 205.142650][ T7731] svc: failed to register nfsdv3 RPC service (errno 101). [ 205.162189][ T7731] svc: failed to register nfsaclv3 RPC service (errno 101). [ 206.732778][ T7714] Invalid ELF header magic: != ELF [ 207.800255][ T7778] net_ratelimit: 548 callbacks suppressed [ 207.800285][ T7778] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 210.919573][ T6466] syz.0.120 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 211.068722][ T6466] CPU: 0 UID: 0 PID: 6466 Comm: syz.0.120 Not tainted 6.13.0-syzkaller #0 [ 211.077323][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 211.087435][ T6466] Call Trace: [ 211.090788][ T6466] [ 211.093764][ T6466] dump_stack_lvl+0x16c/0x1f0 [ 211.098516][ T6466] dump_header+0x101/0x900 [ 211.103010][ T6466] oom_kill_process+0x270/0xa60 [ 211.107927][ T6466] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 211.113620][ T6466] out_of_memory+0x351/0x1700 [ 211.118348][ T6466] ? __pfx_out_of_memory+0x10/0x10 [ 211.123496][ T6466] ? rcu_read_unlock+0x17/0x60 [ 211.128303][ T6466] ? find_held_lock+0x2d/0x110 [ 211.133118][ T6466] mem_cgroup_out_of_memory+0x207/0x270 [ 211.138694][ T6466] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 211.144803][ T6466] ? do_raw_spin_unlock+0x172/0x230 [ 211.150048][ T6466] try_charge_memcg+0x54c/0xaf0 [ 211.154951][ T6466] ? __pfx_try_charge_memcg+0x10/0x10 [ 211.160365][ T6466] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 211.165859][ T6466] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 211.171363][ T6466] ? get_mem_cgroup_from_mm+0x131/0x5f0 [ 211.176946][ T6466] __mem_cgroup_charge+0x9b/0x280 [ 211.182020][ T6466] shmem_alloc_and_add_folio+0x507/0xc00 [ 211.187689][ T6466] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 211.193880][ T6466] ? shmem_allowable_huge_orders+0xd0/0x410 [ 211.199820][ T6466] shmem_get_folio_gfp+0x689/0x1530 [ 211.205064][ T6466] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 211.210735][ T6466] ? find_held_lock+0x2d/0x110 [ 211.215546][ T6466] shmem_write_begin+0x161/0x300 [ 211.220524][ T6466] ? __pfx_shmem_write_begin+0x10/0x10 [ 211.226019][ T6466] ? timestamp_truncate+0x21f/0x2e0 [ 211.231257][ T6466] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 211.238161][ T6466] generic_perform_write+0x2ba/0x920 [ 211.243492][ T6466] ? __pfx_generic_perform_write+0x10/0x10 [ 211.249334][ T6466] ? inode_needs_update_time.part.0+0x191/0x270 [ 211.255627][ T6466] shmem_file_write_iter+0x10e/0x140 [ 211.260956][ T6466] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 211.266803][ T6466] __kernel_write_iter+0x318/0xa80 [ 211.271956][ T6466] ? __pfx___kernel_write_iter+0x10/0x10 [ 211.277620][ T6466] ? get_dump_page+0x15b/0x230 [ 211.282434][ T6466] ? __pfx___might_resched+0x10/0x10 [ 211.287752][ T6466] ? copy_mc_enhanced_fast_string+0xa/0x13 [ 211.293592][ T6466] dump_user_range+0x389/0x8c0 [ 211.298413][ T6466] ? __pfx_dump_user_range+0x10/0x10 [ 211.303742][ T6466] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 211.309940][ T6466] ? __pfx_writenote+0x10/0x10 [ 211.314767][ T6466] elf_core_dump+0x2787/0x3880 [ 211.319578][ T6466] ? __pfx_elf_core_dump+0x10/0x10 [ 211.324733][ T6466] ? kasan_save_stack+0x42/0x60 [ 211.329620][ T6466] ? kasan_save_stack+0x33/0x60 [ 211.334509][ T6466] ? kasan_save_track+0x14/0x30 [ 211.339395][ T6466] ? __kasan_kmalloc+0xaa/0xb0 [ 211.344195][ T6466] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 211.349689][ T6466] ? do_coredump+0x1665/0x43e0 [ 211.354493][ T6466] ? get_signal+0x23f3/0x2610 [ 211.359265][ T6466] ? rcu_is_watching+0x12/0xc0 [ 211.364067][ T6466] ? trace_lock_acquire+0x14e/0x1f0 [ 211.369313][ T6466] ? __pfx_sort+0x10/0x10 [ 211.373686][ T6466] ? get_signal+0x23f3/0x2610 [ 211.378405][ T6466] ? do_coredump+0x2dd5/0x43e0 [ 211.383213][ T6466] do_coredump+0x2dd5/0x43e0 [ 211.387857][ T6466] ? __pfx_do_coredump+0x10/0x10 [ 211.392836][ T6466] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 211.398842][ T6466] get_signal+0x23f3/0x2610 [ 211.403395][ T6466] ? __pfx_get_signal+0x10/0x10 [ 211.408278][ T6466] ? __pfx_force_sig_fault+0x10/0x10 [ 211.413610][ T6466] arch_do_signal_or_restart+0x90/0x7e0 [ 211.419201][ T6466] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 211.425417][ T6466] ? trace_irq_disable.constprop.0+0xea/0x140 [ 211.431555][ T6466] irqentry_exit_to_user_mode+0x13f/0x280 [ 211.437316][ T6466] asm_exc_invalid_op+0x1a/0x20 [ 211.442213][ T6466] RIP: 0033:0x14 [ 211.445780][ T6466] Code: Unable to access opcode bytes at 0xffffffffffffffea. [ 211.453160][ T6466] RSP: 002b:0000000000000409 EFLAGS: 00010246 [ 211.459267][ T6466] RAX: 0000000000000000 RBX: 00007fc920b76320 RCX: 00007fc920985d29 [ 211.467265][ T6466] RDX: 00000000200001c0 RSI: 0000000000000401 RDI: 0000000000000007 [ 211.475292][ T6466] RBP: 00007fc920a01b08 R08: 0000000080000000 R09: 0000000000000000 [ 211.483287][ T6466] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000000 [ 211.491284][ T6466] R13: 0000000000000000 R14: 00007fc920b76320 R15: 00007ffe067bda38 [ 211.499301][ T6466] [ 211.502449][ C0] vkms_vblank_simulate: vblank timer overrun [ 211.630584][ T6466] memory: usage 307200kB, limit 307200kB, failcnt 18533 [ 211.674890][ T6466] memory+swap: usage 432144kB, limit 9007199254740988kB, failcnt 0 [ 211.693435][ T6466] kmem: usage 3488kB, limit 9007199254740988kB, failcnt 0 [ 211.728097][ T6466] Memory cgroup stats for /syz0: [ 211.728494][ T6466] cache 310624256 [ 211.760662][ T6466] rss 323584 [ 211.763965][ T6466] rss_huge 0 [ 211.779773][ T6466] shmem 310624256 [ 211.784524][ T6466] mapped_file 30121984 [ 211.788644][ T6466] dirty 0 [ 211.802435][ T6466] writeback 0 [ 211.805787][ T6466] workingset_refault_anon 945 [ 211.814584][ T6466] workingset_refault_file 1542 [ 211.819400][ T6466] swap 127942656 [ 211.842078][ T6466] swapcached 53248 [ 211.845864][ T6466] pgpgin 168793 [ 211.849398][ T6466] pgpgout 92865 [ 211.895166][ T6466] pgfault 45233 [ 211.898738][ T6466] pgmajfault 394 [ 211.912992][ T6466] inactive_anon 29270016 [ 211.917311][ T6466] active_anon 281731072 [ 211.953381][ T6466] inactive_file 0 [ 211.957093][ T6466] active_file 0 [ 211.965943][ T6466] unevictable 0 [ 211.969508][ T6466] hierarchical_memory_limit 314572800 [ 211.978557][ T6466] hierarchical_memsw_limit 9223372036854771712 [ 211.987660][ T6466] total_cache 310624256 [ 212.001130][ T6466] total_rss 323584 [ 212.004933][ T6466] total_rss_huge 0 [ 212.008684][ T6466] total_shmem 310624256 [ 212.018628][ T1107] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.030531][ T6466] total_mapped_file 30121984 [ 212.035184][ T6466] total_dirty 0 [ 212.040427][ T6466] total_writeback 0 [ 212.051212][ T6466] total_workingset_refault_anon 945 [ 212.057010][ T6466] total_workingset_refault_file 1542 [ 212.063179][ T6466] total_swap 127942656 [ 212.070904][ T6466] total_swapcached 53248 [ 212.084154][ T6466] total_pgpgin 168793 [ 212.088200][ T6466] total_pgpgout 92865 [ 212.096784][ T6466] total_pgfault 45233 [ 212.116043][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 212.116349][ T5845] Bluetooth: hci1: command 0x0406 tx timeout [ 212.122806][ T5838] Bluetooth: hci2: command 0x0406 tx timeout [ 212.129541][ T6466] total_pgmajfault 394 [ 212.150911][ T6466] total_inactive_anon 29270016 [ 212.155750][ T6466] total_active_anon 281731072 [ 212.177648][ T6466] total_inactive_file 0 [ 212.183963][ T6466] total_active_file 0 [ 212.188009][ T6466] total_unevictable 0 [ 212.196000][ T1107] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.217133][ T6466] anon_cost 0 [ 212.223543][ T6466] file_cost 0 [ 212.226900][ T6466] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.120,pid=6452,uid=0 [ 212.285818][ T6466] Memory cgroup out of memory: Killed process 6452 (syz.0.120) total-vm:163864kB, anon-rss:804kB, file-rss:28448kB, shmem-rss:19712kB, UID:0 pgtables:232kB oom_score_adj:1000 [ 212.317285][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 212.334127][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 212.343372][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 212.364873][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 212.373404][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 212.383533][ T1107] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.395456][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 212.473839][ T7808] netlink: 28 bytes leftover after parsing attributes in process `syz.1.304'. [ 212.701825][ T1107] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.161390][ T1107] bridge_slave_1: left allmulticast mode [ 213.167124][ T1107] bridge_slave_1: left promiscuous mode [ 213.200888][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.281321][ T1107] bridge_slave_0: left allmulticast mode [ 213.287139][ T1107] bridge_slave_0: left promiscuous mode [ 213.301759][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.316649][ T7815] netlink: 8 bytes leftover after parsing attributes in process `syz.3.305'. [ 214.430943][ T55] Bluetooth: hci3: command tx timeout [ 214.480623][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.496584][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.521739][ T1107] bond0 (unregistering): Released all slaves [ 214.846762][ T7816] lo: entered promiscuous mode [ 214.852112][ T7816] lo: left promiscuous mode [ 214.968688][ T7804] chnl_net:caif_netlink_parms(): no params data found [ 216.407860][ T7804] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.415337][ T7804] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.423610][ T7804] bridge_slave_0: entered allmulticast mode [ 216.441240][ T7804] bridge_slave_0: entered promiscuous mode [ 216.510277][ T55] Bluetooth: hci3: command tx timeout [ 216.546909][ T7804] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.554906][ T7804] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.572431][ T7804] bridge_slave_1: entered allmulticast mode [ 216.579877][ T7804] bridge_slave_1: entered promiscuous mode [ 216.693446][ T1107] hsr_slave_0: left promiscuous mode [ 216.782222][ T1107] hsr_slave_1: left promiscuous mode [ 216.800613][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.808529][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.862045][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.869532][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.964599][ T1107] veth1_macvtap: left promiscuous mode [ 216.982766][ T1107] veth0_macvtap: left promiscuous mode [ 216.989116][ T1107] veth1_vlan: left promiscuous mode [ 216.997319][ T1107] veth0_vlan: left promiscuous mode [ 217.415823][ T6452] syz.0.120 (6452) used greatest stack depth: 18496 bytes left [ 218.012102][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 218.107598][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 218.591950][ T55] Bluetooth: hci3: command tx timeout [ 219.028429][ T7804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.066514][ T7804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.224026][ T7804] team0: Port device team_slave_0 added [ 219.242682][ T7804] team0: Port device team_slave_1 added [ 219.317505][ T7804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.324660][ T7804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.381176][ T7804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.421801][ T7804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 219.428818][ T7804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.506727][ T7804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.596659][ T7804] hsr_slave_0: entered promiscuous mode [ 219.622629][ T7804] hsr_slave_1: entered promiscuous mode [ 219.641020][ T7804] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.648670][ T7804] Cannot create hsr debugfs directory [ 220.300180][ T7874] Invalid ELF header magic: != ELF [ 220.670940][ T55] Bluetooth: hci3: command tx timeout [ 220.711378][ T7804] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.732521][ T7804] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 220.743939][ T7804] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 220.762580][ T7804] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 220.925613][ T7804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.979801][ T7804] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.014168][ T6718] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.021378][ T6718] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.045210][ T6718] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.052427][ T6718] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.746934][ T7804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.197265][ T7915] openvswitch: netlink: Message has 213 unknown bytes. [ 222.786679][ T7804] veth0_vlan: entered promiscuous mode [ 222.857718][ T7804] veth1_vlan: entered promiscuous mode [ 222.956090][ T7804] veth0_macvtap: entered promiscuous mode [ 222.988744][ T7804] veth1_macvtap: entered promiscuous mode [ 223.042769][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.081189][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.119878][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.143504][ T7931] ubi: mtd0 is already attached to ubi0 [ 223.160473][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.191612][ T7804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.217655][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.249975][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.259862][ T7804] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.304795][ T7804] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.329806][ T7804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.502667][ T7804] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.530212][ T7804] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.571738][ T7804] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.610076][ T7804] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.939264][ T1107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.974157][ T1107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.033253][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.079143][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.501932][ T7931] netlink: 146 bytes leftover after parsing attributes in process `syz.1.315'. [ 224.982112][ T7959] netlink: 330 bytes leftover after parsing attributes in process `syz.1.319'. [ 225.328714][ T7963] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 225.359605][ T7963] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 226.457035][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 226.467496][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 226.477213][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 226.527314][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 226.540431][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 226.550362][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 226.726992][ T7987] netlink: 4 bytes leftover after parsing attributes in process `syz.3.326'. [ 228.010670][ T7998] kmem.limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 228.052745][ T7982] chnl_net:caif_netlink_parms(): no params data found [ 228.254623][ T6705] syz.0.152 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 228.340196][ T6705] CPU: 0 UID: 0 PID: 6705 Comm: syz.0.152 Not tainted 6.13.0-syzkaller #0 [ 228.348977][ T6705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 228.359090][ T6705] Call Trace: [ 228.362409][ T6705] [ 228.365400][ T6705] dump_stack_lvl+0x16c/0x1f0 [ 228.370145][ T6705] dump_header+0x101/0x900 [ 228.374624][ T6705] oom_kill_process+0x270/0xa60 [ 228.379526][ T6705] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 228.385202][ T6705] out_of_memory+0x351/0x1700 [ 228.389945][ T6705] ? __pfx_out_of_memory+0x10/0x10 [ 228.395126][ T6705] ? rcu_read_unlock+0x17/0x60 [ 228.399943][ T6705] ? find_held_lock+0x2d/0x110 [ 228.404787][ T6705] mem_cgroup_out_of_memory+0x207/0x270 [ 228.410405][ T6705] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 228.416512][ T6705] ? do_raw_spin_unlock+0x172/0x230 [ 228.421752][ T6705] try_charge_memcg+0x54c/0xaf0 [ 228.426651][ T6705] ? __pfx_try_charge_memcg+0x10/0x10 [ 228.432067][ T6705] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 228.437562][ T6705] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 228.443059][ T6705] ? get_mem_cgroup_from_mm+0x131/0x5f0 [ 228.448643][ T6705] __mem_cgroup_charge+0x9b/0x280 [ 228.453714][ T6705] shmem_alloc_and_add_folio+0x507/0xc00 [ 228.459404][ T6705] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 228.465600][ T6705] ? shmem_allowable_huge_orders+0xd0/0x410 [ 228.471533][ T6705] shmem_get_folio_gfp+0x689/0x1530 [ 228.476771][ T6705] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 228.482440][ T6705] ? find_held_lock+0x2d/0x110 [ 228.487247][ T6705] shmem_write_begin+0x161/0x300 [ 228.492221][ T6705] ? __pfx_shmem_write_begin+0x10/0x10 [ 228.497720][ T6705] ? timestamp_truncate+0x21f/0x2e0 [ 228.502956][ T6705] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 228.509952][ T6705] generic_perform_write+0x2ba/0x920 [ 228.515315][ T6705] ? __pfx_generic_perform_write+0x10/0x10 [ 228.521180][ T6705] ? inode_needs_update_time.part.0+0x191/0x270 [ 228.527502][ T6705] shmem_file_write_iter+0x10e/0x140 [ 228.532865][ T6705] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 228.538717][ T6705] __kernel_write_iter+0x318/0xa80 [ 228.543881][ T6705] ? __pfx___kernel_write_iter+0x10/0x10 [ 228.549566][ T6705] ? get_dump_page+0x15b/0x230 [ 228.554373][ T6705] ? __pfx___might_resched+0x10/0x10 [ 228.559708][ T6705] dump_user_range+0x389/0x8c0 [ 228.564532][ T6705] ? __pfx_dump_user_range+0x10/0x10 [ 228.569884][ T6705] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 228.576079][ T6705] ? __pfx_writenote+0x10/0x10 [ 228.580895][ T6705] elf_core_dump+0x2787/0x3880 [ 228.585711][ T6705] ? __pfx_elf_core_dump+0x10/0x10 [ 228.590855][ T6705] ? kasan_save_stack+0x42/0x60 [ 228.595755][ T6705] ? kasan_save_stack+0x33/0x60 [ 228.600644][ T6705] ? kasan_save_track+0x14/0x30 [ 228.605530][ T6705] ? __kasan_kmalloc+0xaa/0xb0 [ 228.610332][ T6705] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 228.615836][ T6705] ? do_coredump+0x1665/0x43e0 [ 228.620642][ T6705] ? get_signal+0x23f3/0x2610 [ 228.625404][ T6705] ? rcu_is_watching+0x12/0xc0 [ 228.630207][ T6705] ? trace_lock_acquire+0x14e/0x1f0 [ 228.635448][ T6705] ? __pfx_sort+0x10/0x10 [ 228.639815][ T6705] ? get_signal+0x23f3/0x2610 [ 228.644531][ T6705] ? do_coredump+0x2dd5/0x43e0 [ 228.649336][ T6705] do_coredump+0x2dd5/0x43e0 [ 228.653983][ T6705] ? __pfx_do_coredump+0x10/0x10 [ 228.658963][ T6705] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 228.665044][ T6705] get_signal+0x23f3/0x2610 [ 228.669588][ T6705] ? force_sig_fault+0xad/0xf0 [ 228.674386][ T6705] ? __pfx_get_signal+0x10/0x10 [ 228.679279][ T6705] arch_do_signal_or_restart+0x90/0x7e0 [ 228.684881][ T6705] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 228.691073][ T6705] ? __bad_area_nosemaphore+0x334/0x6a0 [ 228.696692][ T6705] ? do_user_addr_fault+0x920/0x13f0 [ 228.702014][ T6705] irqentry_exit_to_user_mode+0x13f/0x280 [ 228.707776][ T6705] asm_exc_page_fault+0x26/0x30 [ 228.712661][ T6705] RIP: 0033:0x7fc920985d31 [ 228.717103][ T6705] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 228.736743][ T6705] RSP: 002b:0000000080000005 EFLAGS: 00010217 [ 228.742840][ T6705] RAX: 0000000000000000 RBX: 00007fc920b75fa0 RCX: 00007fc920985d29 [ 228.750839][ T6705] RDX: 9999999999999999 RSI: 0000000080000005 RDI: 0000000000000009 [ 228.758835][ T6705] RBP: 00007fc920a01b08 R08: 0000000000000002 R09: 0000000000000000 [ 228.766829][ T6705] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 228.774840][ T6705] R13: 0000000000000000 R14: 00007fc920b75fa0 R15: 00007ffe067bda38 [ 228.782889][ T6705] ? 0xffffffff81000000 [ 228.787081][ T6705] [ 228.797670][ T6705] memory: usage 307200kB, limit 307200kB, failcnt 21250 [ 228.804894][ T6705] memory+swap: usage 432132kB, limit 9007199254740988kB, failcnt 0 [ 228.810016][ T55] Bluetooth: hci4: command tx timeout [ 228.812954][ T6705] kmem: usage 3312kB, limit 9007199254740988kB, failcnt 0 [ 228.849102][ T6705] Memory cgroup stats for /syz0: [ 228.849321][ T6705] cache 310800384 [ 228.858172][ T6705] rss 315392 [ 228.861511][ T6705] rss_huge 0 [ 228.864753][ T6705] shmem 310800384 [ 228.868904][ T6705] mapped_file 39403520 [ 228.873193][ T6705] dirty 0 [ 228.876208][ T6705] writeback 0 [ 228.880251][ T6705] workingset_refault_anon 956 [ 228.885089][ T6705] workingset_refault_file 3280 [ 228.900401][ T6705] swap 127930368 [ 228.904030][ T6705] swapcached 65536 [ 228.907797][ T6705] pgpgin 192969 [ 228.912226][ T6705] pgpgout 116997 [ 228.915826][ T6705] pgfault 49434 [ 228.922223][ T6705] pgmajfault 405 [ 228.925832][ T6705] inactive_anon 225771520 [ 228.930473][ T6705] active_anon 85147648 [ 228.942092][ T6705] inactive_file 0 [ 229.028001][ T6705] active_file 0 [ 229.040369][ T7982] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.047554][ T7982] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.052793][ T6705] unevictable 0 [ 229.090672][ T7982] bridge_slave_0: entered allmulticast mode [ 229.097869][ T7982] bridge_slave_0: entered promiscuous mode [ 229.145337][ T7982] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.160102][ T7982] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.172544][ T7982] bridge_slave_1: entered allmulticast mode [ 229.190643][ T7982] bridge_slave_1: entered promiscuous mode [ 229.200007][ T6705] hierarchical_memory_limit 314572800 [ 229.258256][ T6705] hierarchical_memsw_limit 9223372036854771712 [ 229.299227][ T6705] total_cache 310800384 [ 229.346769][ T6705] total_rss 315392 [ 229.370657][ T7982] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 229.399107][ T6705] total_rss_huge 0 [ 229.404587][ T7982] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.438730][ T6705] total_shmem 310800384 [ 229.511173][ T6705] total_mapped_file 39403520 [ 229.515853][ T6705] total_dirty 0 [ 229.519360][ T6705] total_writeback 0 [ 229.596201][ T7982] team0: Port device team_slave_0 added [ 229.615390][ T6705] total_workingset_refault_anon 956 [ 229.615414][ T6705] total_workingset_refault_file 3280 [ 229.615431][ T6705] total_swap 127930368 [ 229.615447][ T6705] total_swapcached 65536 [ 229.615462][ T6705] total_pgpgin 192969 [ 229.615477][ T6705] total_pgpgout 116997 [ 229.615492][ T6705] total_pgfault 49434 [ 229.615507][ T6705] total_pgmajfault 405 [ 229.615523][ T6705] total_inactive_anon 225771520 [ 229.615546][ T6705] total_active_anon 85147648 [ 229.615562][ T6705] total_inactive_file 0 [ 229.615576][ T6705] total_active_file 0 [ 229.615591][ T6705] total_unevictable 0 [ 229.615607][ T6705] anon_cost 0 [ 229.615621][ T6705] file_cost 0 [ 229.615636][ T6705] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.120,pid=6460,uid=0 [ 229.615911][ T6705] Memory cgroup out of memory: Killed process 6460 (syz.0.120) total-vm:163864kB, anon-rss:820kB, file-rss:31528kB, shmem-rss:30272kB, UID:0 pgtables:248kB oom_score_adj:1000 [ 229.618967][ T7982] team0: Port device team_slave_1 added [ 230.218089][ T7982] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.229992][ T7982] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.298489][ T7982] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.763223][ T7982] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.781970][ T7982] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.848943][ T55] Bluetooth: hci4: command tx timeout [ 230.905612][ T7982] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.297783][ T7982] hsr_slave_0: entered promiscuous mode [ 231.336341][ T7982] hsr_slave_1: entered promiscuous mode [ 231.356310][ T7982] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.384354][ T7982] Cannot create hsr debugfs directory [ 231.644794][ T31] oom_reaper: reaped process 6460 (syz.0.120), now anon-rss:124kB, file-rss:8kB, shmem-rss:116kB [ 231.968633][ T7982] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 232.060467][ T7982] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 232.448549][ T7982] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 232.811254][ T7982] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 232.909999][ T55] Bluetooth: hci4: command tx timeout [ 233.284960][ T8066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.346'. [ 233.523006][ T7982] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.558231][ T7982] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.612828][ T1107] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.620056][ T1107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.654871][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.662149][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 233.782445][ T7982] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.279184][ T7982] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.807549][ T8088] netlink: ct family unspecified [ 234.997865][ T55] Bluetooth: hci4: command tx timeout [ 235.372057][ T7982] veth0_vlan: entered promiscuous mode [ 235.472883][ T7982] veth1_vlan: entered promiscuous mode [ 235.668266][ T7982] veth0_macvtap: entered promiscuous mode [ 235.758511][ T7982] veth1_macvtap: entered promiscuous mode [ 235.814975][ T7982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.843644][ T7982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.861875][ T7982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.908608][ T7982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.929067][ T7982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.966388][ T7982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.010512][ T7982] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.051356][ T7982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.071132][ T7982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.116166][ T7982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.159296][ T7982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.200391][ T7982] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.231629][ T7982] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.251152][ T7982] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.288320][ T7982] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.330029][ T7982] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.339145][ T7982] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.360426][ T7982] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.915421][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.955187][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 237.106552][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 237.144513][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.077711][ T8127] netlink: 28 bytes leftover after parsing attributes in process `syz.5.321'. [ 239.114161][ T8155] FAULT_INJECTION: forcing a failure. [ 239.114161][ T8155] name failslab, interval 1, probability 0, space 0, times 0 [ 239.172308][ T8155] CPU: 1 UID: 0 PID: 8155 Comm: syz.4.363 Not tainted 6.13.0-syzkaller #0 [ 239.180895][ T8155] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 239.191013][ T8155] Call Trace: [ 239.194338][ T8155] [ 239.197335][ T8155] dump_stack_lvl+0x16c/0x1f0 [ 239.202090][ T8155] should_fail_ex+0x497/0x5b0 [ 239.206841][ T8155] ? fs_reclaim_acquire+0xae/0x150 [ 239.212036][ T8155] should_failslab+0xc2/0x120 [ 239.216795][ T8155] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 239.222249][ T8155] ? get_random_u64+0x57e/0x7d0 [ 239.227164][ T8155] ? prepare_creds+0x2e/0x750 [ 239.231933][ T8155] prepare_creds+0x2e/0x750 [ 239.236517][ T8155] ? __pfx_get_random_u64+0x10/0x10 [ 239.241815][ T8155] copy_creds+0xa7/0xa50 [ 239.246153][ T8155] copy_process+0xeff/0x6f20 [ 239.250821][ T8155] ? __pfx_futex_wake_mark+0x10/0x10 [ 239.256180][ T8155] ? __pfx_copy_process+0x10/0x10 [ 239.261287][ T8155] ? futex_wait+0x121/0x380 [ 239.265858][ T8155] kernel_clone+0xfd/0x960 [ 239.270348][ T8155] ? __pfx_kernel_clone+0x10/0x10 [ 239.275452][ T8155] ? do_futex+0x123/0x350 [ 239.279862][ T8155] ? __pfx_do_futex+0x10/0x10 [ 239.284607][ T8155] ? 0xffffffff81000000 [ 239.288796][ T8155] __do_sys_clone+0xba/0x100 [ 239.293439][ T8155] ? __pfx___do_sys_clone+0x10/0x10 [ 239.298684][ T8155] ? 0xffffffff81000000 [ 239.302882][ T8155] do_syscall_64+0xcd/0x250 [ 239.307458][ T8155] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.313400][ T8155] RIP: 0033:0x7f0743985d29 [ 239.317845][ T8155] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.337499][ T8155] RSP: 002b:00007f07446de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 239.345962][ T8155] RAX: ffffffffffffffda RBX: 00007f0743b75fa0 RCX: 00007f0743985d29 [ 239.353963][ T8155] RDX: 9999999999999999 RSI: 0000000000000009 RDI: 0000000000000021 [ 239.361963][ T8155] RBP: 00007f0743a01b08 R08: 0000000000000006 R09: 0000000000000000 [ 239.369976][ T8155] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.377970][ T8155] R13: 0000000000000000 R14: 00007f0743b75fa0 R15: 00007ffeb1ccb578 [ 239.385975][ T8155] ? 0xffffffff81000000 [ 239.390161][ T8155] [ 239.780056][ T29] audit: type=1800 audit(4294967348.860:9): pid=8161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.364" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0 [ 242.180652][ T8196] vcan0: tx drop: invalid da for name 0x000000000000003f [ 243.711722][ T8223] sg_write: data in/out 2012/28903 bytes for SCSI command 0x0-- guessing data in; [ 243.711722][ T8223] program syz.5.378 not setting count and/or reply_len properly [ 245.688989][ T8252] vcan0: tx drop: invalid da for name 0x000000000000003f [ 246.115277][ T8261] netlink: zone id is out of range [ 246.160358][ T8261] netlink: zone id is out of range [ 246.165553][ T8261] netlink: zone id is out of range [ 246.270266][ T8261] netlink: zone id is out of range [ 246.275790][ T8261] netlink: zone id is out of range [ 246.383764][ T8261] netlink: zone id is out of range [ 246.388952][ T8261] netlink: zone id is out of range [ 246.486373][ T8261] netlink: zone id is out of range [ 246.530086][ T8261] netlink: zone id is out of range [ 246.561501][ T8261] netlink: zone id is out of range [ 249.183281][ T8305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.399'. [ 250.260772][ T8319] erspan0: entered allmulticast mode [ 250.659174][ T8325] FAULT_INJECTION: forcing a failure. [ 250.659174][ T8325] name failslab, interval 1, probability 0, space 0, times 0 [ 250.690079][ T8325] CPU: 1 UID: 0 PID: 8325 Comm: syz.1.406 Not tainted 6.13.0-syzkaller #0 [ 250.698702][ T8325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 250.708820][ T8325] Call Trace: [ 250.712148][ T8325] [ 250.715139][ T8325] dump_stack_lvl+0x16c/0x1f0 [ 250.719901][ T8325] should_fail_ex+0x497/0x5b0 [ 250.724654][ T8325] ? fs_reclaim_acquire+0xae/0x150 [ 250.729849][ T8325] should_failslab+0xc2/0x120 [ 250.734612][ T8325] __kmalloc_noprof+0xce/0x4f0 [ 250.739462][ T8325] ? fib_default_rule_add+0x4f/0x420 [ 250.744839][ T8325] fib_default_rule_add+0x4f/0x420 [ 250.750033][ T8325] fib4_rules_init+0x7c/0x1c0 [ 250.754780][ T8325] fib_net_init+0x1de/0x3d0 [ 250.759365][ T8325] ? __pfx_fib_net_init+0x10/0x10 [ 250.764468][ T8325] ? do_init_timer+0xc9/0x110 [ 250.769262][ T8325] ? devinet_init_net+0x5b3/0x8f0 [ 250.774382][ T8325] ? __pfx_fib_net_init+0x10/0x10 [ 250.779484][ T8325] ops_init+0x1df/0x5f0 [ 250.783824][ T8325] setup_net+0x21f/0x860 [ 250.788147][ T8325] ? __pfx_setup_net+0x10/0x10 [ 250.792994][ T8325] ? down_read_killable+0xcc/0x380 [ 250.798167][ T8325] ? __pfx_down_read_killable+0x10/0x10 [ 250.803772][ T8325] ? debug_mutex_init+0x37/0x70 [ 250.808675][ T8325] copy_net_ns+0x2b4/0x6c0 [ 250.813130][ T8325] create_new_namespaces+0x3ea/0xad0 [ 250.818467][ T8325] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 250.824141][ T8325] ksys_unshare+0x45d/0xa40 [ 250.828691][ T8325] ? __pfx_ksys_unshare+0x10/0x10 [ 250.833755][ T8325] ? xfd_validate_state+0x5d/0x180 [ 250.838908][ T8325] __x64_sys_unshare+0x31/0x40 [ 250.843714][ T8325] do_syscall_64+0xcd/0x250 [ 250.848266][ T8325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.854200][ T8325] RIP: 0033:0x7f9080785d29 [ 250.858639][ T8325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.878277][ T8325] RSP: 002b:00007f90814de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 250.886756][ T8325] RAX: ffffffffffffffda RBX: 00007f9080975fa0 RCX: 00007f9080785d29 [ 250.894760][ T8325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 250.902760][ T8325] RBP: 00007f9080801b08 R08: 0000000000000000 R09: 0000000000000000 [ 250.910756][ T8325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.918754][ T8325] R13: 0000000000000000 R14: 00007f9080975fa0 R15: 00007fff3ba1f428 [ 250.926774][ T8325] [ 251.442470][ T8336] netlink: 334 bytes leftover after parsing attributes in process `syz.1.406'. [ 251.511394][ T8339] netlink: 334 bytes leftover after parsing attributes in process `syz.1.406'. [ 253.382197][ T8346] misc userio: Invalid payload size [ 253.972625][ T8374] netlink: 342 bytes leftover after parsing attributes in process `syz.3.415'. [ 254.477049][ T6705] syz.0.152 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 254.566479][ T6705] CPU: 0 UID: 0 PID: 6705 Comm: syz.0.152 Not tainted 6.13.0-syzkaller #0 [ 254.575106][ T6705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 254.585215][ T6705] Call Trace: [ 254.588565][ T6705] [ 254.591550][ T6705] dump_stack_lvl+0x16c/0x1f0 [ 254.596297][ T6705] dump_header+0x101/0x900 [ 254.600780][ T6705] oom_kill_process+0x270/0xa60 [ 254.605703][ T6705] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 254.611402][ T6705] out_of_memory+0x351/0x1700 [ 254.616154][ T6705] ? __pfx_out_of_memory+0x10/0x10 [ 254.621332][ T6705] ? rcu_read_unlock+0x17/0x60 [ 254.626165][ T6705] ? find_held_lock+0x2d/0x110 [ 254.631001][ T6705] mem_cgroup_out_of_memory+0x207/0x270 [ 254.636695][ T6705] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 254.642845][ T6705] ? do_raw_spin_unlock+0x172/0x230 [ 254.648109][ T6705] try_charge_memcg+0x54c/0xaf0 [ 254.653041][ T6705] ? __pfx_try_charge_memcg+0x10/0x10 [ 254.658510][ T6705] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 254.664037][ T6705] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 254.669559][ T6705] ? get_mem_cgroup_from_mm+0x131/0x5f0 [ 254.675199][ T6705] __mem_cgroup_charge+0x9b/0x280 [ 254.680303][ T6705] shmem_alloc_and_add_folio+0x507/0xc00 [ 254.686009][ T6705] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 254.692245][ T6705] ? shmem_allowable_huge_orders+0xd0/0x410 [ 254.698213][ T6705] shmem_get_folio_gfp+0x689/0x1530 [ 254.703490][ T6705] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 254.709181][ T6705] ? mark_held_locks+0x9f/0xe0 [ 254.714010][ T6705] ? timestamp_truncate+0x21f/0x2e0 [ 254.719295][ T6705] shmem_write_begin+0x161/0x300 [ 254.724317][ T6705] ? __pfx_shmem_write_begin+0x10/0x10 [ 254.729838][ T6705] ? inode_set_ctime_current+0x2a7/0x900 [ 254.735548][ T6705] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 254.742477][ T6705] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 254.748551][ T6705] generic_perform_write+0x2ba/0x920 [ 254.753918][ T6705] ? __pfx_generic_perform_write+0x10/0x10 [ 254.759783][ T6705] ? __mark_inode_dirty+0x2a5/0xe50 [ 254.765062][ T6705] ? generic_update_time+0xcf/0xf0 [ 254.770246][ T6705] ? mnt_put_write_access_file+0x45/0xf0 [ 254.775950][ T6705] shmem_file_write_iter+0x10e/0x140 [ 254.781308][ T6705] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 254.787182][ T6705] __kernel_write_iter+0x318/0xa80 [ 254.792361][ T6705] ? __pfx___kernel_write_iter+0x10/0x10 [ 254.798058][ T6705] ? get_dump_page+0x15b/0x230 [ 254.802901][ T6705] ? __pfx___might_resched+0x10/0x10 [ 254.808251][ T6705] dump_user_range+0x389/0x8c0 [ 254.813117][ T6705] ? __pfx_dump_user_range+0x10/0x10 [ 254.818493][ T6705] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 254.824727][ T6705] ? __pfx_writenote+0x10/0x10 [ 254.829574][ T6705] elf_core_dump+0x2787/0x3880 [ 254.834420][ T6705] ? __pfx_elf_core_dump+0x10/0x10 [ 254.839598][ T6705] ? kasan_save_stack+0x42/0x60 [ 254.844520][ T6705] ? kasan_save_stack+0x33/0x60 [ 254.849446][ T6705] ? kasan_save_track+0x14/0x30 [ 254.854372][ T6705] ? __kasan_kmalloc+0xaa/0xb0 [ 254.859202][ T6705] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 254.864723][ T6705] ? do_coredump+0x1665/0x43e0 [ 254.869566][ T6705] ? get_signal+0x23f3/0x2610 [ 254.874369][ T6705] ? rcu_is_watching+0x12/0xc0 [ 254.879201][ T6705] ? trace_lock_acquire+0x14e/0x1f0 [ 254.884472][ T6705] ? __pfx_sort+0x10/0x10 [ 254.888879][ T6705] ? get_signal+0x23f3/0x2610 [ 254.893621][ T6705] ? do_coredump+0x2dd5/0x43e0 [ 254.898452][ T6705] do_coredump+0x2dd5/0x43e0 [ 254.903141][ T6705] ? __pfx_do_coredump+0x10/0x10 [ 254.908151][ T6705] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 254.914228][ T6705] get_signal+0x23f3/0x2610 [ 254.918806][ T6705] ? force_sig_fault+0xad/0xf0 [ 254.923638][ T6705] ? __pfx_get_signal+0x10/0x10 [ 254.928568][ T6705] arch_do_signal_or_restart+0x90/0x7e0 [ 254.934187][ T6705] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 254.940412][ T6705] ? __bad_area_nosemaphore+0x334/0x6a0 [ 254.946046][ T6705] ? do_user_addr_fault+0x920/0x13f0 [ 254.951393][ T6705] irqentry_exit_to_user_mode+0x13f/0x280 [ 254.957173][ T6705] asm_exc_page_fault+0x26/0x30 [ 254.962087][ T6705] RIP: 0033:0x7fc920985d31 [ 254.966548][ T6705] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 254.986214][ T6705] RSP: 002b:0000000080000005 EFLAGS: 00010217 [ 254.992343][ T6705] RAX: 0000000000000000 RBX: 00007fc920b75fa0 RCX: 00007fc920985d29 [ 255.000364][ T6705] RDX: 9999999999999999 RSI: 0000000080000005 RDI: 0000000000000009 [ 255.008386][ T6705] RBP: 00007fc920a01b08 R08: 0000000000000002 R09: 0000000000000000 [ 255.016420][ T6705] R10: ffffffff81000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.024447][ T6705] R13: 0000000000000000 R14: 00007fc920b75fa0 R15: 00007ffe067bda38 [ 255.032487][ T6705] ? 0xffffffff81000000 [ 255.036717][ T6705] [ 255.195406][ T6705] memory: usage 307200kB, limit 307200kB, failcnt 23148 [ 255.310146][ T6705] memory+swap: usage 432100kB, limit 9007199254740988kB, failcnt 0 [ 255.414139][ T6705] kmem: usage 3084kB, limit 9007199254740988kB, failcnt 0 [ 255.495379][ T6705] Memory cgroup stats for /syz0: [ 255.495609][ T6705] cache 311054336 [ 255.640010][ T6705] rss 262144 [ 255.680091][ T6705] rss_huge 0 [ 255.683448][ T6705] shmem 311054336 [ 255.687207][ T6705] mapped_file 59314176 [ 255.835056][ T6705] dirty 0 [ 255.838079][ T6705] writeback 0 [ 255.919942][ T6705] workingset_refault_anon 980 [ 255.988116][ T6705] workingset_refault_file 3280 [ 256.046115][ T6705] swap 127897600 [ 256.049828][ T6705] swapcached 98304 [ 256.078177][ T6705] pgpgin 218731 [ 256.141439][ T6705] pgpgout 142702 [ 256.160043][ T6705] pgfault 57653 [ 256.163665][ T6705] pgmajfault 405 [ 256.167335][ T6705] inactive_anon 177655808 [ 256.283500][ T6705] active_anon 133496832 [ 256.321993][ T6705] inactive_file 0 [ 256.377411][ T6705] active_file 0 [ 256.426954][ T6705] unevictable 0 [ 256.460011][ T6705] hierarchical_memory_limit 314572800 [ 256.486574][ T6705] hierarchical_memsw_limit 9223372036854771712 [ 256.538134][ T6705] total_cache 311054336 [ 256.575064][ T6705] total_rss 262144 [ 256.600447][ T6705] total_rss_huge 0 [ 256.633667][ T6705] total_shmem 311054336 [ 256.666526][ T6705] total_mapped_file 59314176 [ 256.687199][ T6705] total_dirty 0 [ 256.706907][ T6705] total_writeback 0 [ 256.729987][ T6705] total_workingset_refault_anon 980 [ 256.735398][ T6705] total_workingset_refault_file 3280 [ 256.901260][ T6705] total_swap 127897600 [ 256.945505][ T6705] total_swapcached 98304 [ 256.978805][ T6705] total_pgpgin 218731 [ 257.015290][ T6705] total_pgpgout 142702 [ 257.139112][ T6705] total_pgfault 57653 [ 257.179928][ T6705] total_pgmajfault 405 [ 257.213923][ T6705] total_inactive_anon 177655808 [ 257.259236][ T6705] total_active_anon 133496832 [ 257.294890][ T6705] total_inactive_file 0 [ 257.316202][ T6705] total_active_file 0 [ 257.370224][ T6705] total_unevictable 0 [ 257.386069][ T8432] HfR: entered promiscuous mode [ 257.400708][ T6705] anon_cost 0 [ 257.422711][ T6705] file_cost 0 [ 257.446794][ T6705] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.152,pid=6705,uid=13 [ 257.590041][ T6705] Memory cgroup out of memory: Killed process 6705 (syz.0.152) total-vm:134408kB, anon-rss:948kB, file-rss:36828kB, shmem-rss:27264kB, UID:13 pgtables:220kB oom_score_adj:1000 [ 257.784393][ T8442] Invalid input. Must be >= 4608 [ 258.694265][ T8451] warn_alloc: 1 callbacks suppressed [ 258.694289][ T8451] syz.1.436: vmalloc error: size 4503599627371522, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 258.769358][ T8451] CPU: 0 UID: 0 PID: 8451 Comm: syz.1.436 Not tainted 6.13.0-syzkaller #0 [ 258.777977][ T8451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 258.788179][ T8451] Call Trace: [ 258.791519][ T8451] [ 258.794512][ T8451] dump_stack_lvl+0x16c/0x1f0 [ 258.799271][ T8451] warn_alloc+0x24d/0x3a0 [ 258.803696][ T8451] ? __pfx_warn_alloc+0x10/0x10 [ 258.808721][ T8451] ? __pfx_mark_lock+0x10/0x10 [ 258.813579][ T8451] ? lock_acquire.part.0+0x11b/0x380 [ 258.818949][ T8451] __vmalloc_node_range_noprof+0x10df/0x1530 [ 258.825064][ T8451] ? rcu_is_watching+0x12/0xc0 [ 258.829898][ T8451] ? trace_contention_end+0xee/0x140 [ 258.835256][ T8451] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 258.840617][ T8451] ? dvb_demux_do_ioctl+0x496/0x1340 [ 258.846002][ T8451] ? __pfx___mutex_lock+0x10/0x10 [ 258.851105][ T8451] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 258.857518][ T8451] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 258.863488][ T8451] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 258.867876][ T6466] syz.0.120 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 258.868839][ T8451] vmalloc_noprof+0x6b/0x90 [ 258.883471][ T8451] ? dvb_demux_do_ioctl+0x54d/0x1340 [ 258.888843][ T8451] dvb_demux_do_ioctl+0x54d/0x1340 [ 258.894062][ T8451] dvb_usercopy+0x165/0x320 [ 258.898659][ T8451] ? __pfx_dvb_demux_do_ioctl+0x10/0x10 [ 258.904300][ T8451] ? __pfx_dvb_usercopy+0x10/0x10 [ 258.909404][ T8451] ? __pfx_lock_release+0x10/0x10 [ 258.914688][ T8451] ? __fget_files+0x206/0x3a0 [ 258.919535][ T8451] dvb_demux_ioctl+0x29/0x40 [ 258.924202][ T8451] ? __pfx_dvb_demux_ioctl+0x10/0x10 [ 258.929575][ T8451] __x64_sys_ioctl+0x190/0x200 [ 258.934404][ T8451] do_syscall_64+0xcd/0x250 [ 258.938994][ T8451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.944964][ T8451] RIP: 0033:0x7f9080785d29 [ 258.949438][ T8451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.969120][ T8451] RSP: 002b:00007f90814de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 258.977607][ T8451] RAX: ffffffffffffffda RBX: 00007f9080975fa0 RCX: 00007f9080785d29 [ 258.985638][ T8451] RDX: 0010000000000402 RSI: 0000000000006f2d RDI: 0000000000000003 [ 258.993677][ T8451] RBP: 00007f9080801b08 R08: 0000000000000000 R09: 0000000000000000 [ 259.001714][ T8451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.009846][ T8451] R13: 0000000000000000 R14: 00007f9080975fa0 R15: 00007fff3ba1f428 [ 259.017895][ T8451] [ 259.081906][ T8451] Mem-Info: [ 259.085491][ T8451] active_anon:104165 inactive_anon:35710 isolated_anon:0 [ 259.085491][ T8451] active_file:16472 inactive_file:41090 isolated_file:0 [ 259.085491][ T8451] unevictable:768 dirty:454 writeback:25 [ 259.085491][ T8451] slab_reclaimable:10857 slab_unreclaimable:99760 [ 259.085491][ T8451] mapped:48237 shmem:130851 pagetables:1233 [ 259.085491][ T8451] sec_pagetables:0 bounce:0 [ 259.085491][ T8451] kernel_misc_reclaimable:0 [ 259.085491][ T8451] free:1176686 free_pcp:5741 free_cma:0 [ 259.230428][ T8451] Node 0 active_anon:418756kB inactive_anon:142840kB active_file:65888kB inactive_file:164288kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:197068kB dirty:1768kB writeback:68kB shmem:522404kB shmem_thp:2048kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11788kB pagetables:4912kB sec_pagetables:0kB all_unreclaimable? no [ 259.270416][ T6466] CPU: 1 UID: 0 PID: 6466 Comm: syz.0.120 Not tainted 6.13.0-syzkaller #0 [ 259.279004][ T6466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 259.289125][ T6466] Call Trace: [ 259.292449][ T6466] [ 259.295421][ T6466] dump_stack_lvl+0x16c/0x1f0 [ 259.300167][ T6466] dump_header+0x101/0x900 [ 259.304657][ T6466] oom_kill_process+0x270/0xa60 [ 259.309591][ T6466] out_of_memory+0x351/0x1700 [ 259.314515][ T6466] ? __pfx_out_of_memory+0x10/0x10 [ 259.319685][ T6466] ? rcu_read_unlock+0x17/0x60 [ 259.324521][ T6466] ? find_held_lock+0x2d/0x110 [ 259.329357][ T6466] mem_cgroup_out_of_memory+0x207/0x270 [ 259.334957][ T6466] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 259.341096][ T6466] ? do_raw_spin_unlock+0x172/0x230 [ 259.346371][ T6466] try_charge_memcg+0x54c/0xaf0 [ 259.349938][ T8451] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 259.351270][ T6466] ? __pfx_try_charge_memcg+0x10/0x10 [ 259.351321][ T6466] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 259.392413][ T6466] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 259.397941][ T6466] ? get_mem_cgroup_from_mm+0x131/0x5f0 [ 259.403650][ T6466] __mem_cgroup_charge+0x9b/0x280 [ 259.408760][ T6466] shmem_alloc_and_add_folio+0x507/0xc00 [ 259.414467][ T6466] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 259.420808][ T6466] ? shmem_allowable_huge_orders+0xd0/0x410 [ 259.426780][ T6466] shmem_get_folio_gfp+0x689/0x1530 [ 259.432046][ T6466] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 259.437743][ T6466] ? find_held_lock+0x2d/0x110 [ 259.442582][ T6466] shmem_fault+0x200/0xae0 [ 259.447058][ T6466] ? __pfx_shmem_fault+0x10/0x10 [ 259.452050][ T6466] ? mark_held_locks+0x9f/0xe0 [ 259.456898][ T6466] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 259.462763][ T6466] ? lockdep_hardirqs_on+0x7c/0x110 [ 259.468030][ T6466] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 259.473912][ T6466] ? rcu_preempt_deferred_qs_irqrestore+0x505/0xb80 [ 259.480602][ T6466] __do_fault+0x10a/0x490 [ 259.484987][ T6466] do_pte_missing+0xebd/0x3e00 [ 259.489829][ T6466] __handle_mm_fault+0x103c/0x2a40 [ 259.489949][ T8451] Node 0 [ 259.494990][ T6466] ? find_held_lock+0x2d/0x110 [ 259.495041][ T6466] ? __pfx___handle_mm_fault+0x10/0x10 [ 259.498093][ T8451] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.502793][ T6466] ? follow_page_pte+0x3c3/0x1b20 [ 259.502839][ T6466] ? __pfx_lock_release+0x10/0x10 [ 259.502898][ T6466] ? follow_page_pte+0x3f7/0x1b20 [ 259.502951][ T6466] handle_mm_fault+0x3fa/0xaa0 [ 259.503007][ T6466] __get_user_pages+0x8d9/0x3b50 [ 259.503069][ T6466] ? __pfx___get_user_pages+0x10/0x10 [ 259.503112][ T6466] ? down_read_killable+0xcc/0x380 [ 259.503160][ T6466] ? __pfx_down_read_killable+0x10/0x10 [ 259.503211][ T6466] ? shmem_file_write_iter+0xcf/0x140 [ 259.503259][ T6466] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 259.503304][ T6466] ? __kernel_write_iter+0x59f/0xa80 [ 259.503353][ T6466] get_dump_page+0xff/0x230 [ 259.596723][ T8451] lowmem_reserve[]: [ 259.597200][ T6466] ? __pfx_get_dump_page+0x10/0x10 [ 259.597263][ T6466] ? __pfx___might_resched+0x10/0x10 [ 259.611585][ T6466] ? copy_mc_enhanced_fast_string+0xa/0x13 [ 259.617469][ T6466] dump_user_range+0x135/0x8c0 [ 259.622342][ T6466] ? __pfx_dump_user_range+0x10/0x10 [ 259.627718][ T6466] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 259.633948][ T6466] ? __pfx_writenote+0x10/0x10 [ 259.638789][ T6466] elf_core_dump+0x2787/0x3880 [ 259.639937][ T8451] 0 [ 259.643604][ T6466] ? __pfx_elf_core_dump+0x10/0x10 [ 259.643647][ T6466] ? kasan_save_stack+0x42/0x60 [ 259.646224][ T8451] 2491 [ 259.651272][ T6466] ? kasan_save_stack+0x33/0x60 [ 259.651320][ T6466] ? kasan_save_track+0x14/0x30 [ 259.651358][ T6466] ? __kasan_kmalloc+0xaa/0xb0 [ 259.651411][ T6466] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 259.651449][ T6466] ? do_coredump+0x1665/0x43e0 [ 259.651492][ T6466] ? get_signal+0x23f3/0x2610 [ 259.651584][ T6466] ? rcu_is_watching+0x12/0xc0 [ 259.651621][ T6466] ? trace_lock_acquire+0x14e/0x1f0 [ 259.651688][ T6466] ? __pfx_sort+0x10/0x10 [ 259.703212][ T6466] ? get_signal+0x23f3/0x2610 [ 259.707979][ T6466] ? do_coredump+0x2dd5/0x43e0 [ 259.712819][ T6466] do_coredump+0x2dd5/0x43e0 [ 259.717503][ T6466] ? __pfx_do_coredump+0x10/0x10 [ 259.722507][ T6466] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 259.728559][ T6466] get_signal+0x23f3/0x2610 [ 259.733150][ T6466] ? __pfx_get_signal+0x10/0x10 [ 259.738077][ T6466] ? __pfx_force_sig_fault+0x10/0x10 [ 259.739938][ T8451] 2492 [ 259.743421][ T6466] arch_do_signal_or_restart+0x90/0x7e0 [ 259.743481][ T6466] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 259.746320][ T8451] 0 [ 259.751815][ T6466] ? trace_irq_disable.constprop.0+0xea/0x140 [ 259.751873][ T6466] irqentry_exit_to_user_mode+0x13f/0x280 [ 259.751919][ T6466] asm_exc_invalid_op+0x1a/0x20 [ 259.751965][ T6466] RIP: 0033:0x14 [ 259.751988][ T6466] Code: Unable to access opcode bytes at 0xffffffffffffffea. [ 259.752002][ T6466] RSP: 002b:0000000000000409 EFLAGS: 00010246 [ 259.752031][ T6466] RAX: 0000000000000000 RBX: 00007fc920b76320 RCX: 00007fc920985d29 [ 259.752053][ T6466] RDX: 00000000200001c0 RSI: 0000000000000401 RDI: 0000000000000007 [ 259.752074][ T6466] RBP: 00007fc920a01b08 R08: 0000000080000000 R09: 0000000000000000 [ 259.752096][ T6466] R10: 0000000020000200 R11: 0000000000000246 R12: 0000000000000000 [ 259.752124][ T6466] R13: 0000000000000000 R14: 00007fc920b76320 R15: 00007ffe067bda38 [ 259.752168][ T6466] [ 259.990167][ T8451] 0 [ 259.992778][ T8451] Node 0 DMA32 free:791508kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:406836kB inactive_anon:139708kB active_file:65888kB inactive_file:163456kB unevictable:1536kB writepending:1848kB present:3129332kB managed:2551312kB mlocked:0kB bounce:0kB free_pcp:24516kB local_pcp:23568kB free_cma:0kB [ 260.110031][ T8451] lowmem_reserve[]: 0 0 0 0 0 [ 260.114895][ T8451] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 260.185358][ T8451] lowmem_reserve[]: 0 0 0 0 0 [ 260.196405][ T8451] Node 1 Normal free:3901236kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:9504kB local_pcp:0kB free_cma:0kB [ 260.240039][ T6466] memory: usage 295512kB, limit 307200kB, failcnt 23615 [ 260.247076][ T6466] memory+swap: usage 419128kB, limit 9007199254740988kB, failcnt 0 [ 260.293908][ T8451] lowmem_reserve[]: 0 0 0 0 0 [ 260.298755][ T8451] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 260.383267][ T8451] Node 0 DMA32: 2532*4kB (UME) 618*8kB (UME) 397*16kB (UME) 224*32kB (UM) 189*64kB (UM) 39*128kB (UM) 7*256kB (UME) 7*512kB (UME) 7*1024kB (UME) 21*2048kB (UME) 178*4096kB (UM) = 830320kB [ 260.456221][ T8451] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 260.502542][ T8451] Node 1 Normal: 204*4kB (UME) 50*8kB (UME) 37*16kB (UME) 213*32kB (UME) 94*64kB (UME) 28*128kB (UME) 15*256kB (UM) 9*512kB (UM) 4*1024kB (UM) 4*2048kB (UM) 943*4096kB (M) = 3901488kB [ 260.539649][ T6466] kmem: usage 1924kB, limit 9007199254740988kB, failcnt 0 [ 260.550057][ T8451] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.559682][ T8451] Node 0 hugepages_total=3 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 260.590110][ T8451] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.599758][ T8451] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 260.620159][ T6466] Memory cgroup stats for /syz0: [ 260.620593][ T6466] cache 293761024 [ 260.631565][ T8478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.440'. [ 260.650017][ T8451] 180785 total pagecache pages [ 260.654948][ T8451] 40 pages in swap cache [ 260.659245][ T8451] Free swap = 3840kB [ 260.710003][ T8451] Total swap = 124996kB [ 260.714598][ T8451] 2097051 pages RAM [ 260.718501][ T8451] 0 pages HighMem/MovableOnly [ 260.736381][ T8451] 427373 pages reserved [ 260.761259][ T8451] 0 pages cma reserved [ 260.782350][ T6466] rss 0 [ 260.785255][ T6466] rss_huge 0 [ 260.788555][ T6466] shmem 293761024 [ 260.932518][ T6466] mapped_file 28647424 [ 260.989161][ T6466] dirty 0 [ 261.112750][ T6466] writeback 0 [ 261.233056][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.239634][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.666819][ T6466] workingset_refault_anon 997 [ 261.763318][ T6466] workingset_refault_file 3280 [ 261.768169][ T6466] swap 124624896 [ 261.772280][ T6466] swapcached 163840 [ 261.776142][ T6466] pgpgin 220366 [ 261.779643][ T6466] pgpgout 148586 [ 261.783819][ T6466] pgfault 58091 [ 261.787333][ T6466] pgmajfault 406 [ 261.796663][ T6466] inactive_anon 134942720 [ 261.801510][ T6466] active_anon 159068160 [ 261.806245][ T6466] inactive_file 0 [ 261.810493][ T6466] active_file 0 [ 261.813997][ T6466] unevictable 0 [ 261.819483][ T6466] hierarchical_memory_limit 314572800 [ 261.826085][ T6466] hierarchical_memsw_limit 9223372036854771712 [ 261.858864][ T6466] total_cache 293761024 [ 261.979566][ T8500] Process accounting resumed [ 262.009363][ T6466] total_rss 0 [ 262.029198][ T6466] total_rss_huge 0 [ 262.155767][ T6466] total_shmem 293761024 [ 262.186169][ T6466] total_mapped_file 28647424 [ 262.239952][ T6466] total_dirty 0 [ 262.248718][ T8503] netlink: 28 bytes leftover after parsing attributes in process `syz.4.444'. [ 262.319158][ T6466] total_writeback 0 [ 262.353906][ T8508] netlink: 24 bytes leftover after parsing attributes in process `syz.1.445'. [ 262.365621][ T6466] total_workingset_refault_anon 997 [ 262.396533][ T6466] total_workingset_refault_file 3280 [ 262.510684][ T6466] total_swap 124624896 [ 262.553212][ T6466] total_swapcached 163840 [ 262.690312][ T6466] total_pgpgin 220366 [ 262.730000][ T6466] total_pgpgout 148586 [ 262.830079][ T6466] total_pgfault 58091 [ 262.834143][ T6466] total_pgmajfault 406 [ 262.838256][ T6466] total_inactive_anon 134942720 [ 263.000373][ T6466] total_active_anon 159068160 [ 263.125334][ T6466] total_inactive_file 0 [ 263.129569][ T6466] total_active_file 0 [ 263.230234][ T6466] total_unevictable 0 [ 263.279959][ T6466] anon_cost 0 [ 263.283448][ T6466] file_cost 0 [ 263.458431][ T6466] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.120,pid=6466,uid=0 [ 263.656852][ T6466] Memory cgroup out of memory: Killed process 6466 (syz.0.120) total-vm:163864kB, anon-rss:820kB, file-rss:23212kB, shmem-rss:27928kB, UID:0 pgtables:252kB oom_score_adj:1000 [ 264.339998][ T8503] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.440360][ T8503] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.535888][ T8503] bond0 (unregistering): Released all slaves [ 264.803975][ T8528] HfR: entered promiscuous mode [ 265.097964][ T8542] Invalid ELF header magic: != ELF [ 268.018047][ T6455] syz.0.120 (6455) used greatest stack depth: 18240 bytes left [ 268.047871][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.422714][ T6705] syz.0.152 (6705) used greatest stack depth: 16960 bytes left [ 268.707499][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.576918][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.036008][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.827507][ T35] bridge_slave_1: left allmulticast mode [ 270.844755][ T35] bridge_slave_1: left promiscuous mode [ 270.894852][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.076243][ T8630] netlink: 28 bytes leftover after parsing attributes in process `syz.5.466'. [ 271.091842][ T35] bridge_slave_0: left allmulticast mode [ 271.097566][ T35] bridge_slave_0: left promiscuous mode [ 271.134838][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.874123][ T35] erspan0 (unregistering): left allmulticast mode [ 272.970551][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.003270][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.039600][ T35] bond0 (unregistering): Released all slaves [ 274.549666][ T8719] capability: warning: `syz.5.484' uses 32-bit capabilities (legacy support in use) [ 274.955537][ T35] hsr_slave_0: left promiscuous mode [ 275.014874][ T35] hsr_slave_1: left promiscuous mode [ 275.050519][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.078375][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.131224][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.138708][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.238376][ T35] veth1_macvtap: left promiscuous mode [ 275.275045][ T35] veth0_macvtap: left promiscuous mode [ 275.282827][ T35] veth1_vlan: left promiscuous mode [ 275.288588][ T35] veth0_vlan: left promiscuous mode [ 277.639229][ T35] team0 (unregistering): Port device team_slave_1 removed [ 277.917196][ T35] team0 (unregistering): Port device team_slave_0 removed [ 280.925710][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.493'. [ 281.506157][ T8832] netlink: 330 bytes leftover after parsing attributes in process `syz.1.503'. [ 281.515861][ T8832] mac80211_hwsim hwsim16 : renamed from wlan0 [ 282.200926][ T8843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.505'. [ 282.917584][ T8858] netlink: 28 bytes leftover after parsing attributes in process `syz.5.508'. [ 282.961155][ T8858] geneve1: entered allmulticast mode [ 286.551705][ T8964] netlink: 334 bytes leftover after parsing attributes in process `syz.1.523'. [ 287.533242][ T8981] [U]  [ 287.536417][ T8981] [U] [ 287.539191][ T8981] [U] [ 287.541948][ T8981] [U] [ 287.575202][ T8981] [U] [ 287.578016][ T8981] [U] [ 287.580780][ T8981] [U] [ 287.583635][ T8981] [U] [ 287.606986][ T8981] [U] [ 287.609779][ T8981] [U] [ 287.612539][ T8981] [U] [ 287.615314][ T8981] [U] [ 287.671474][ T8981] [U] [ 287.674279][ T8981] [U] [ 287.677048][ T8981] [U] [ 287.679813][ T8981] [U] [ 287.721232][ T8995] netlink: 12 bytes leftover after parsing attributes in process `syz.4.526'. [ 287.724734][ T8981] [U] [ 287.739939][ T8995] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 287.776453][ T8981] [U] .#M}A&Iϳ).ze&fT.M w k&ndPB^:( ׹8zTT*h.I8J%fh(&أD5Z+~mOĚ@F1\пMn0` I>TcO^r20&il&>vk8Tkt!d~z [ 287.844981][ T8981] [U] ӝߍrCy˙G!ǼWoCϪ{}E.=7 VLtf5l;o!c(C:XXS.d'J+aӕO腹6_\-TȦ">&%'ӆd6MSZ^ZsMI [ 288.274146][ T8981] [U] lCrwݟ- [ 288.303535][ T8981] [U] c[P5ЫA\^ [ 288.344925][ T8981] [U] [ 288.347778][ T8981] [U] f%RӟJ_fͼռ?լ5U?g [ 288.416128][ T8981] [U] #Vd}*`OO "S"U`iX/868燧['ڦ談x\B{A [ 288.425332][ T8981] [U] 5)~Pl [ 288.470108][ T8981] [U] ?J릏 Wh [ 288.475651][ T8981] [U] E q.߂{wG [ 289.904808][ T9043] [U] Ʀ#/cvBT&'Q! r [ 289.909613][ T9043] [U] [ 289.912409][ T9043] [U] [ 289.915173][ T9043] [U] [ 289.959427][ T9043] [U] [ 289.962225][ T9043] [U] [ 289.964986][ T9043] [U] [ 289.967745][ T9043] [U] [ 290.004675][ T9043] [U] [ 290.007513][ T9043] [U] [ 290.010301][ T9043] [U] [ 290.013062][ T9043] [U] [ 290.059944][ T9048] [U] [ 290.923310][ T9073] netlink: 342 bytes leftover after parsing attributes in process `syz.1.538'. [ 293.172772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 295.310442][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 296.366869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 296.410242][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 296.418743][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 296.443121][ T9110] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 296.470038][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 296.604038][ T9110] Bluetooth: hci0: Opcode 0x0406 failed: -110 [ 296.620115][ T9145] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.548'. [ 296.850136][ T9145] netlink: 8 bytes leftover after parsing attributes in process `syz.1.548'. [ 297.207014][ T9110] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 297.214477][ T9110] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 297.440593][ T9110] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 297.477298][ T9110] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 297.536468][ T9110] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 297.576384][ T9110] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 297.589088][ T9110] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 297.713641][ T9110] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 297.720181][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 297.831234][ T9115] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 298.391535][ T9170] bridge0: port 3(bond0) entered blocking state [ 298.460096][ T9170] bridge0: port 3(bond0) entered disabled state [ 298.466604][ T9170] bond0: entered allmulticast mode [ 298.510087][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 298.530156][ T9170] bond_slave_0: entered allmulticast mode [ 298.535980][ T9170] bond_slave_1: entered allmulticast mode [ 298.621807][ T9170] bond0: entered promiscuous mode [ 298.653936][ T9170] bond_slave_0: entered promiscuous mode [ 298.659828][ T9170] bond_slave_1: entered promiscuous mode [ 298.706430][ T9170] bridge0: port 3(bond0) entered blocking state [ 298.712866][ T9170] bridge0: port 3(bond0) entered forwarding state [ 298.746366][ T29] audit: type=1800 audit(4294967311.550:10): pid=9172 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.551" name="lu_gp_id" dev="configfs" ino=21750 res=0 errno=0 [ 299.150115][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 299.469349][ T9169] net_ratelimit: 2 callbacks suppressed [ 299.469374][ T9169] netlink: zone id is out of range [ 299.470150][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 299.479986][ T9169] netlink: zone id is out of range [ 299.610304][ T9169] netlink: zone id is out of range [ 299.615506][ T9169] netlink: zone id is out of range [ 299.639546][ T55] Bluetooth: hci4: command 0x0c1a tx timeout [ 299.698482][ T9169] netlink: zone id is out of range [ 299.807196][ T9169] netlink: zone id is out of range [ 299.863198][ T9169] netlink: zone id is out of range [ 299.868394][ T9169] netlink: zone id is out of range [ 299.932495][ T9169] netlink: zone id is out of range [ 299.937692][ T9169] netlink: zone id is out of range [ 301.240065][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 301.550895][ T55] Bluetooth: hci3: command 0x0c1a tx timeout [ 301.719148][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 302.315602][ T9162] kexec: Could not allocate control_code_buffer [ 303.633041][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 303.716202][ T9251] netlink: 28 bytes leftover after parsing attributes in process `syz.5.561'. [ 303.716254][ T9251] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.716288][ T9251] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.789460][ T9251] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.789500][ T9251] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.793214][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout [ 305.120376][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 309.151682][ T9322] crash hp: kexec_trylock() failed, kdump image may be inaccurate syzkaller syzkaller login: [ 310.701484][ T9387] program syz.5.575 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 310.759261][ T29] audit: type=1806 audit(4294967323.580:11): xattr=3E928329 res=-22 [ 312.049259][ T9324] kexec: Could not allocate control_code_buffer [ 315.303784][ T9440] netlink: 4 bytes leftover after parsing attributes in process `syz.1.583'. [ 317.159970][ T5843] Bluetooth: hci0: command 0x0406 tx timeout [ 317.204593][ T9435] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 318.286534][ T9435] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 318.312084][ T9435] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 318.381293][ T9435] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 319.310331][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 320.350069][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 320.430360][ T5843] Bluetooth: hci4: command 0x0c1a tx timeout syzkaller syzkaller login: [ 322.673424][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.680052][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 324.128479][ T29] audit: type=1326 audit(4294967336.950:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9578 comm="syz.4.611" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0743985d29 code=0x0 [ 324.974736][ T9590] mmap: syz.3.614 (9590): VmData 37470208 exceed data ulimit 3. Update limits or use boot option ignore_rlimit_data. [ 331.910671][ T9736] can: request_module (can-proto-0) failed. [ 332.091841][ T9741] can: request_module (can-proto-0) failed. [ 332.979370][ T9767] netlink: 28 bytes leftover after parsing attributes in process `syz.1.658'. [ 333.034799][ T9767] veth1_macvtap: left promiscuous mode [ 333.406341][ T9779] netlink: 168 bytes leftover after parsing attributes in process `syz.4.661'. [ 334.661866][ T9803] syz_tun: tun_chr_ioctl cmd 1074025688 [ 336.652018][ T9843] netlink: 28 bytes leftover after parsing attributes in process `syz.3.676'. [ 336.752053][ T9843] bridge0: port 3(bond0) entered disabled state [ 337.972453][ T9843] bond0 (unregistering): left allmulticast mode [ 337.978794][ T9843] bond_slave_0: left allmulticast mode [ 338.012481][ T9843] bond_slave_1: left allmulticast mode [ 338.018045][ T9843] bond0 (unregistering): left promiscuous mode [ 338.131152][ T9843] bond_slave_0: left promiscuous mode [ 338.136905][ T9843] bond_slave_1: left promiscuous mode [ 338.170297][ T9843] bridge0: port 3(bond0) entered disabled state [ 338.356046][ T9843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 338.500474][ T9843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 338.607031][ T9843] bond0 (unregistering): Released all slaves [ 341.462991][ T9889] netlink: 1204 bytes leftover after parsing attributes in process `syz.1.688'. [ 342.820720][ T9905] vivid-003: ================= START STATUS ================= [ 342.828822][ T9905] vivid-003: Radio HW Seek Mode: Bounded [ 342.985952][ T9905] vivid-003: Radio Programmable HW Seek: false [ 343.034441][ T9905] vivid-003: RDS Rx I/O Mode: Block I/O [ 343.063730][ T9905] vivid-003: Generate RBDS Instead of RDS: false [ 343.137783][ T9905] vivid-003: RDS Reception: true [ 343.232938][ T9905] vivid-003: RDS Program Type: 0 inactive [ 343.238813][ T9905] vivid-003: RDS PS Name: inactive [ 343.279062][ T9905] vivid-003: RDS Radio Text: inactive [ 343.288146][ T9905] vivid-003: RDS Traffic Announcement: false inactive [ 343.308068][ T9905] vivid-003: RDS Traffic Program: false inactive [ 343.363186][ T9905] vivid-003: RDS Music: false inactive [ 343.386733][ T9905] vivid-003: ================== END STATUS ================== [ 343.618301][ T9942] FAULT_INJECTION: forcing a failure. [ 343.618301][ T9942] name failslab, interval 1, probability 0, space 0, times 0 [ 343.701648][ T9942] CPU: 0 UID: 0 PID: 9942 Comm: syz.5.695 Not tainted 6.13.0-syzkaller #0 [ 343.710274][ T9942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 343.720400][ T9942] Call Trace: [ 343.723719][ T9942] [ 343.726688][ T9942] dump_stack_lvl+0x16c/0x1f0 [ 343.731435][ T9942] should_fail_ex+0x497/0x5b0 [ 343.736173][ T9942] ? fs_reclaim_acquire+0xae/0x150 [ 343.741343][ T9942] should_failslab+0xc2/0x120 [ 343.746095][ T9942] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 343.751982][ T9942] ? __alloc_skb+0x2b3/0x380 [ 343.756654][ T9942] __alloc_skb+0x2b3/0x380 [ 343.761138][ T9942] ? __pfx___alloc_skb+0x10/0x10 [ 343.766149][ T9942] ? lock_acquire+0x2f/0xb0 [ 343.770722][ T9942] netlink_alloc_large_skb+0x69/0x130 [ 343.776163][ T9942] netlink_sendmsg+0x689/0xd70 [ 343.781006][ T9942] ? __pfx_netlink_sendmsg+0x10/0x10 [ 343.786375][ T9942] ____sys_sendmsg+0x9ae/0xb40 [ 343.791207][ T9942] ? copy_msghdr_from_user+0x10b/0x160 [ 343.796735][ T9942] ? __pfx_____sys_sendmsg+0x10/0x10 [ 343.802095][ T9942] ? get_pid_task+0xfc/0x250 [ 343.806756][ T9942] ___sys_sendmsg+0x135/0x1e0 [ 343.811508][ T9942] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.816806][ T9942] ? __pfx_vfs_write+0x10/0x10 [ 343.821636][ T9942] ? do_sys_openat2+0xb1/0x1e0 [ 343.826476][ T9942] __sys_sendmsg+0x16e/0x220 [ 343.831138][ T9942] ? __pfx___sys_sendmsg+0x10/0x10 [ 343.836340][ T9942] do_syscall_64+0xcd/0x250 [ 343.840914][ T9942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.846884][ T9942] RIP: 0033:0x7eff74f85d29 [ 343.851358][ T9942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.871027][ T9942] RSP: 002b:00007eff75dc5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.879520][ T9942] RAX: ffffffffffffffda RBX: 00007eff75175fa0 RCX: 00007eff74f85d29 [ 343.887638][ T9942] RDX: 0000000010000080 RSI: 0000000020002900 RDI: 0000000000000000 [ 343.895681][ T9942] RBP: 00007eff75dc5090 R08: 0000000000000000 R09: 0000000000000000 [ 343.903707][ T9942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.911735][ T9942] R13: 0000000000000000 R14: 00007eff75175fa0 R15: 00007ffd6e049678 [ 343.919796][ T9942] [ 351.020617][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz.3.723'. [ 352.738629][T10124] Process accounting resumed [ 353.166394][T10131] netlink: 'syz.4.731': attribute type 4 has an invalid length. [ 353.197154][T10131] netlink: 330 bytes leftover after parsing attributes in process `syz.4.731'. [ 354.606742][T10156] Invalid ELF header magic: != ELF [ 354.749982][T10141] netlink: 20 bytes leftover after parsing attributes in process `syz.5.733'. [ 355.267243][T10161] Invalid ELF header magic: != ELF [ 355.361552][T10161] misc userio: Invalid payload size [ 356.770035][T10176] bridge0: port 3(team0) entered blocking state [ 356.780679][T10176] bridge0: port 3(team0) entered disabled state [ 356.788561][T10176] team0: entered allmulticast mode [ 356.793980][T10176] team_slave_0: entered allmulticast mode [ 356.802470][T10176] team_slave_1: entered allmulticast mode [ 356.810269][T10176] team0: entered promiscuous mode [ 356.815483][T10176] team_slave_0: entered promiscuous mode [ 356.824124][T10176] team_slave_1: entered promiscuous mode [ 356.830574][T10176] bridge0: port 3(team0) entered blocking state [ 356.836998][T10176] bridge0: port 3(team0) entered forwarding state [ 357.704994][T10156] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 357.821082][T10210] [U] [ 357.823978][T10210] [U] [ 357.826737][T10210] [U] [ 357.829492][T10210] [U] [ 357.836099][T10210] [U] [ 357.838898][T10210] [U] [ 357.841658][T10210] [U] [ 357.844424][T10210] [U] [ 357.856883][T10210] [U] [ 357.859682][T10210] [U] [ 357.862445][T10210] [U] [ 357.865205][T10210] [U] [ 357.870624][T10210] [U] [ 357.873405][T10210] [U] [ 357.876154][T10210] [U] [ 357.878907][T10210] [U] [ 357.926098][T10210] [U] [ 357.929001][T10210] [U] [ 357.931780][T10210] [U] [ 357.934543][T10210] [U] [ 357.955184][T10210] [U] [ 357.958087][T10210] [U] [ 357.960858][T10210] [U] [ 357.963617][T10210] [U] [ 357.988332][T10210] [U] [ 357.991143][T10210] [U] [ 357.993896][T10210] [U] [ 357.996629][T10210] [U] [ 358.018013][T10210] [U] [ 358.020825][T10210] [U] [ 358.023607][T10210] [U] [ 358.026380][T10210] [U] [ 358.054917][T10210] [U] [ 358.057726][T10210] [U] [ 358.060508][T10210] [U] [ 358.063270][T10210] [U] [ 358.087340][T10210] [U] [ 358.090143][T10210] [U] [ 358.092913][T10210] [U] [ 358.095680][T10210] [U] [ 358.132960][T10210] [U] [ 358.135805][T10210] [U] [ 358.138569][T10210] [U] [ 358.141330][T10210] [U] [ 358.161476][T10210] [U] [ 358.164279][T10210] [U] [ 358.167048][T10210] [U] [ 358.169847][T10210] [U] [ 358.204476][T10210] [U] [ 358.207306][T10210] [U] [ 358.210045][T10210] [U] [ 358.212803][T10210] [U] [ 358.256666][T10210] [U] [ 358.259451][T10210] [U] [ 358.262180][T10210] [U] [ 358.264905][T10210] [U] [ 358.359573][T10210] [U] [ 358.362393][T10210] [U] [ 358.365164][T10210] [U] [ 358.367929][T10210] [U] [ 358.431336][T10210] [U] [ 358.434152][T10210] [U] [ 358.436915][T10210] [U] [ 358.439674][T10210] [U] [ 358.527525][T10210] [U] [ 358.527595][T10210] [U] [ 358.527657][T10210] [U] [ 358.527720][T10210] [U] [ 358.528012][T10210] [U] [ 358.528074][T10210] [U] [ 358.528135][T10210] [U] [ 358.528195][T10210] [U] [ 358.528565][T10210] [U] [ 358.528626][T10210] [U] [ 358.528689][T10210] [U] [ 358.528758][T10210] [U] [ 358.529039][T10210] [U] [ 358.529101][T10210] [U] [ 358.529163][T10210] [U] [ 358.529224][T10210] [U] [ 358.529592][T10210] [U] [ 358.529654][T10210] [U] [ 358.529717][T10210] [U] [ 358.529784][T10210] [U] [ 358.530125][T10210] [U] [ 358.530185][T10210] [U] [ 358.530257][T10210] [U] [ 358.530317][T10210] [U] [ 358.530680][T10210] [U] [ 358.530748][T10210] [U] [ 358.530807][T10210] [U] [ 358.530867][T10210] [U] [ 358.531173][T10210] [U] [ 358.531233][T10210] [U] [ 358.531292][T10210] [U] [ 358.531352][T10210] [U] [ 358.531860][T10210] [U] [ 358.531923][T10210] [U] [ 358.531985][T10210] [U] [ 358.532047][T10210] [U] [ 358.532327][T10210] [U] [ 358.532389][T10210] [U] [ 358.532452][T10210] [U] [ 358.532514][T10210] [U] [ 358.532893][T10210] [U] [ 358.532954][T10210] [U] [ 358.533015][T10210] [U] [ 358.533076][T10210] [U] [ 358.533357][T10210] [U] [ 358.533418][T10210] [U] [ 358.533480][T10210] [U] [ 358.533542][T10210] [U] [ 358.533930][T10210] [U] [ 358.533992][T10210] [U] [ 358.534053][T10210] [U] [ 358.534115][T10210] [U] [ 358.534395][T10210] [U] [ 358.534457][T10210] [U] [ 358.534520][T10210] [U] [ 358.534582][T10210] [U] [ 358.534685][T10210] [U] [ 359.289499][T10223] tty tty15: ldisc open failed (-12), clearing slot 14 [ 359.577991][T10239] netlink: 28 bytes leftover after parsing attributes in process `syz.4.754'. [ 359.591584][T10240] sg_write: data in/out 2059/169 bytes for SCSI command 0x57-- guessing data in; [ 359.591584][T10240] program syz.3.753 not setting count and/or reply_len properly [ 360.756772][T10258] net_ratelimit: 13 callbacks suppressed [ 360.756799][T10258] netlink: zone id is out of range [ 361.463215][T10274] netlink: 4 bytes leftover after parsing attributes in process `syz.4.762'. [ 361.872522][T10288] lo: entered allmulticast mode [ 361.938225][T10290] lo: left allmulticast mode [ 364.410647][T10335] netlink: 334 bytes leftover after parsing attributes in process `syz.3.775'. [ 364.424139][T10337] netlink: 330 bytes leftover after parsing attributes in process `syz.4.776'. [ 364.466301][T10337] : renamed from hsr0 (while UP) [ 365.979051][ T29] audit: type=1807 audit(4294967378.800:13): UNKNOWN=0"]$|1j0B|dӉO+/xWӦ^gq%ḦrO res=0 [ 365.990630][T10363] ima: policy update failed [ 366.009915][ T29] audit: type=1802 audit(4294967378.800:14): pid=10363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.4.781" res=0 errno=0 [ 366.056760][ T29] audit: type=1802 audit(4294967378.820:15): pid=10363 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.781" res=0 errno=0 [ 366.570817][T10366] netlink: zone id is out of range [ 370.109743][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz.4.788'. [ 372.030389][T10430] netlink: 4 bytes leftover after parsing attributes in process `syz.3.796'. [ 374.564517][T10482] netlink: 'syz.5.807': attribute type 1 has an invalid length. [ 374.714454][T10478] Invalid ELF header magic: != ELF [ 374.857616][T10487] Invalid ELF header magic: != ELF [ 375.664958][T10491] netlink: 4 bytes leftover after parsing attributes in process `syz.4.809'. [ 377.066802][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.818'. [ 377.118239][T10528] netlink: 4 bytes leftover after parsing attributes in process `syz.5.818'. [ 378.587854][T10536] netlink: 'syz.1.820': attribute type 1 has an invalid length. [ 378.684798][T10536] Invalid ELF header magic: != ELF [ 379.056519][T10560] syz_tun: tun_chr_ioctl cmd 1074025675 [ 379.070149][T10560] syz_tun: persist enabled [ 380.873759][T10570] netlink: 4 bytes leftover after parsing attributes in process `syz.1.825'. [ 382.189427][T10617] ima: policy update failed [ 382.199543][ T29] audit: type=1802 audit(4294967395.020:16): pid=10617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.839" res=0 errno=0 [ 383.125170][T10628] Process accounting paused [ 384.113392][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.119775][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.568060][T10666] svc: failed to register nfsdv3 RPC service (errno 101). [ 384.588884][T10666] svc: failed to register nfsaclv3 RPC service (errno 101). [ 384.644329][T10670] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 387.781717][T10722] svc: failed to register nfsdv3 RPC service (errno 111). [ 387.814320][T10724] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 387.840077][T10722] svc: failed to register nfsaclv3 RPC service (errno 111). [ 389.457312][T10754] netlink: 28 bytes leftover after parsing attributes in process `syz.1.870'. [ 389.856246][T10760] can: request_module (can-proto-5) failed. [ 390.122911][T10770] netlink: 8 bytes leftover after parsing attributes in process `syz.1.874'. [ 390.330409][T10767] could not allocate digest TFM handle binfmt_misc [ 391.630852][T10792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.878'. [ 397.489902][T10880] < [ 397.820274][T10886] tipc: Started in network mode [ 397.828145][T10886] tipc: Node identity ffffffff, cluster identity 4711 [ 397.840182][T10886] tipc: Node number set to 4294967295 [ 398.472603][T10901] netlink: 8 bytes leftover after parsing attributes in process `syz.3.904'. [ 399.355803][T10912] netlink: 'syz.3.906': attribute type 1 has an invalid length. [ 399.398232][T10912] netlink: 'syz.3.906': attribute type 1 has an invalid length. [ 399.574028][T10916] nvme_fabrics: missing parameter 'transport=%s' [ 399.587466][T10916] nvme_fabrics: missing parameter 'nqn=%s' [ 403.551216][T10938] binder_alloc: binder_alloc_mmap_handler: 10937 20ff9000-20ffd000 already mapped failed -16 [ 403.589305][T10938] binder_alloc: binder_alloc_mmap_handler: 10937 20ff9000-20ffd000 already mapped failed -16 [ 403.629510][T10938] binder_alloc: binder_alloc_mmap_handler: 10937 20ff9000-20ffd000 already mapped failed -16 [ 403.693780][T10938] binder_alloc: binder_alloc_mmap_handler: 10937 20ff9000-20ffd000 already mapped failed -16 [ 403.852798][T10944] netlink: 8 bytes leftover after parsing attributes in process `syz.5.915'. [ 405.901233][T10994] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 406.044214][T10994] kafs: addr_prefs: Invalid Command [ 406.382487][T11000] netlink: 330 bytes leftover after parsing attributes in process `syz.5.929'. [ 406.765472][T11005] Invalid ELF header magic: != ELF [ 408.690117][T11024] tipc: Started in network mode [ 408.709629][T11024] tipc: Node identity ffffffff, cluster identity 4711 [ 408.742802][T11024] tipc: Node number set to 4294967295 [ 413.128572][T11116] tipc: Started in network mode [ 413.390683][T11116] tipc: Node identity ffffffff, cluster identity 4711 [ 413.609905][T11116] tipc: Node number set to 4294967295 [ 414.087666][T11117] Process accounting resumed [ 414.254210][T11129] netlink: 28 bytes leftover after parsing attributes in process `syz.5.960'. [ 414.438925][T11129] ipvlan0: entered promiscuous mode [ 414.453530][T11129] ipvlan0: entered allmulticast mode [ 414.470707][T11129] veth0_vlan: entered allmulticast mode [ 414.683498][T11142] netlink: 4 bytes leftover after parsing attributes in process `syz.5.961'. [ 415.792821][T11165] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 417.482476][T11191] could not allocate digest TFM handle [ 420.111212][T11213] tty tty49: ldisc open failed (-12), clearing slot 48 [ 420.663382][T11223] ======================================================= [ 420.663382][T11223] WARNING: The mand mount option has been deprecated and [ 420.663382][T11223] and is ignored by this kernel. Remove the mand [ 420.663382][T11223] option from the mount to silence this warning. [ 420.663382][T11223] ======================================================= [ 422.153673][T11250] netlink: 4 bytes leftover after parsing attributes in process `syz.4.988'. [ 422.185936][T11250] random: crng reseeded on system resumption [ 425.873097][T11299] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 426.159658][T11316] HSR: entered promiscuous mode [ 426.228761][T11316] delete_channel: no stack [ 428.994605][T11372] Invalid ELF header magic: != ELF [ 429.135138][T11377] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1017'. [ 434.849749][T11522] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1053'. [ 435.631962][T11542] netlink: 'syz.1.1059': attribute type 27 has an invalid length. [ 435.670110][T11542] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1059'. [ 439.222485][T11573] Line length is too long: Should be less than 4094 [ 442.842311][ T5833] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 442.852876][ T5833] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 442.862503][ T5833] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 442.871345][ T5833] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 442.882127][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 442.918216][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 443.324260][T11611] chnl_net:caif_netlink_parms(): no params data found [ 443.854813][T11611] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.884478][T11611] bridge0: port 1(bridge_slave_0) entered disabled state [ 443.929290][T11611] bridge_slave_0: entered allmulticast mode [ 443.959949][T11611] bridge_slave_0: entered promiscuous mode [ 444.020854][T11611] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.028158][T11611] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.060515][T11629] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 444.080936][T11629] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 444.096712][T11611] bridge_slave_1: entered allmulticast mode [ 444.115318][T11629] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 444.129618][T11611] bridge_slave_1: entered promiscuous mode [ 444.151475][T11629] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 444.190552][T11629] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 444.218320][T11629] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 444.273065][T11611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.305183][T11611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.486393][T11611] team0: Port device team_slave_0 added [ 444.498715][T11611] team0: Port device team_slave_1 added [ 444.591635][T11611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 444.604103][T11611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.635744][T11611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 444.657187][T11611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 444.664763][T11611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 444.693103][T11611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 444.825784][T11611] hsr_slave_0: entered promiscuous mode [ 444.843216][T11611] hsr_slave_1: entered promiscuous mode [ 444.856681][T11611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 444.873579][T11611] Cannot create hsr debugfs directory [ 445.195500][T11611] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 445.213524][T11611] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 445.245620][T11611] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 445.259434][T11611] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 445.504127][T11611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.552954][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.563749][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.571394][T11611] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.605471][ T8621] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.612704][ T8621] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.656472][ T8595] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.663904][ T8595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 446.113555][ T5833] Bluetooth: hci3: command 0x0c1a tx timeout [ 446.119878][ T5833] Bluetooth: hci2: command 0x0406 tx timeout [ 446.125945][ T5833] Bluetooth: hci0: command 0x0406 tx timeout [ 446.168796][T11611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.190796][ T5833] Bluetooth: hci1: command 0x041b tx timeout [ 446.551562][T11669] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1088'. [ 446.580792][T11669] mac80211_hwsim hwsim20 : renamed from wlan0 [ 446.813228][T11611] veth0_vlan: entered promiscuous mode [ 446.848236][T11611] veth1_vlan: entered promiscuous mode [ 446.918791][T11611] veth0_macvtap: entered promiscuous mode [ 446.948118][T11611] veth1_macvtap: entered promiscuous mode [ 446.987431][T11611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.029866][T11611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.049866][T11611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.061065][T11611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.091205][T11611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.125855][T11611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.147898][T11611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.178719][T11611] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 447.209842][T11611] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.230879][T11611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.262212][T11611] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.281654][T11611] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.300261][T11611] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.324829][T11611] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.571264][ T8595] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.609590][ T8595] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.916115][ T8621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.932910][ T8621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.272432][ T5833] Bluetooth: hci1: command 0x041b tx timeout [ 448.750305][T11716] sd 0:0:1:0: device reset [ 449.707457][T11731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1102'. [ 450.350552][ T5833] Bluetooth: hci1: command 0x041b tx timeout [ 451.670027][T11770] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1112'. [ 452.430556][ T5833] Bluetooth: hci1: command 0x041b tx timeout [ 452.741057][T11793] netlink: 346 bytes leftover after parsing attributes in process `syz.6.1116'. [ 453.026437][T11796] svc: failed to register nfsdv3 RPC service (errno 111). [ 453.058395][T11796] svc: failed to register nfsaclv3 RPC service (errno 111). [ 453.227574][T11801] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1118'. [ 453.253793][T11801] mac80211_hwsim hwsim28 : renamed from wlan0 (while UP) [ 454.277614][T11821] FAULT_INJECTION: forcing a failure. [ 454.277614][T11821] name failslab, interval 1, probability 0, space 0, times 0 [ 454.298956][T11821] CPU: 0 UID: 0 PID: 11821 Comm: syz.1.1122 Not tainted 6.13.0-syzkaller #0 [ 454.307720][T11821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 454.317851][T11821] Call Trace: [ 454.321181][T11821] [ 454.324172][T11821] dump_stack_lvl+0x16c/0x1f0 [ 454.328932][T11821] should_fail_ex+0x497/0x5b0 [ 454.333668][T11821] ? fs_reclaim_acquire+0xae/0x150 [ 454.338838][T11821] should_failslab+0xc2/0x120 [ 454.343592][T11821] __kmalloc_noprof+0xce/0x4f0 [ 454.348437][T11821] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 454.354112][T11821] ? tomoyo_realpath_from_path+0xbf/0x710 [ 454.359903][T11821] tomoyo_realpath_from_path+0xbf/0x710 [ 454.365557][T11821] ? tomoyo_path_number_perm+0x235/0x5b0 [ 454.371264][T11821] tomoyo_path_number_perm+0x248/0x5b0 [ 454.376794][T11821] ? tomoyo_path_number_perm+0x235/0x5b0 [ 454.382513][T11821] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 454.388591][T11821] ? __pfx_lock_release+0x10/0x10 [ 454.393665][T11821] ? trace_lock_acquire+0x14e/0x1f0 [ 454.398923][T11821] ? lock_acquire+0x2f/0xb0 [ 454.403466][T11821] ? __fget_files+0x40/0x3a0 [ 454.408113][T11821] ? __fget_files+0x206/0x3a0 [ 454.412865][T11821] security_file_ioctl+0x9b/0x240 [ 454.417964][T11821] __x64_sys_ioctl+0xb7/0x200 [ 454.422699][T11821] do_syscall_64+0xcd/0x250 [ 454.427267][T11821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.433223][T11821] RIP: 0033:0x7f9080785d29 [ 454.437681][T11821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.457336][T11821] RSP: 002b:00007f90814de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 454.465805][T11821] RAX: ffffffffffffffda RBX: 00007f9080975fa0 RCX: 00007f9080785d29 [ 454.473842][T11821] RDX: 0000000000000000 RSI: 0000000040047438 RDI: 0000000000000011 [ 454.481874][T11821] RBP: 00007f90814de090 R08: 0000000000000000 R09: 0000000000000000 [ 454.489894][T11821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 454.497910][T11821] R13: 0000000000000000 R14: 00007f9080975fa0 R15: 00007fff3ba1f428 [ 454.505955][T11821] [ 454.541555][ T5833] Bluetooth: hci1: command 0x041b tx timeout [ 454.856372][T11821] ERROR: Out of memory at tomoyo_realpath_from_path. [ 455.548938][T11836] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1125'. [ 455.566903][T11836] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1125'. [ 455.992696][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1126'. [ 456.590070][ T5833] Bluetooth: hci1: command 0x041b tx timeout [ 456.748052][T11860] FAULT_INJECTION: forcing a failure. [ 456.748052][T11860] name failslab, interval 1, probability 0, space 0, times 0 [ 456.823530][T11860] CPU: 1 UID: 0 PID: 11860 Comm: syz.4.1132 Not tainted 6.13.0-syzkaller #0 [ 456.832320][T11860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 456.842432][T11860] Call Trace: [ 456.845764][T11860] [ 456.848749][T11860] dump_stack_lvl+0x16c/0x1f0 [ 456.853508][T11860] should_fail_ex+0x497/0x5b0 [ 456.858260][T11860] ? fs_reclaim_acquire+0xae/0x150 [ 456.863447][T11860] should_failslab+0xc2/0x120 [ 456.868219][T11860] __kmalloc_noprof+0xce/0x4f0 [ 456.873050][T11860] ? d_absolute_path+0x137/0x1b0 [ 456.878071][T11860] ? tomoyo_encode2+0x100/0x3e0 [ 456.883005][T11860] tomoyo_encode2+0x100/0x3e0 [ 456.887744][T11860] tomoyo_realpath_from_path+0x1a7/0x710 [ 456.893451][T11860] tomoyo_path_number_perm+0x248/0x5b0 [ 456.898994][T11860] ? tomoyo_path_number_perm+0x235/0x5b0 [ 456.904726][T11860] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 456.910834][T11860] ? __pfx_lock_release+0x10/0x10 [ 456.915930][T11860] ? trace_lock_acquire+0x14e/0x1f0 [ 456.921224][T11860] ? lock_acquire+0x2f/0xb0 [ 456.925788][T11860] ? __fget_files+0x40/0x3a0 [ 456.930554][T11860] ? __fget_files+0x206/0x3a0 [ 456.935314][T11860] security_file_ioctl+0x9b/0x240 [ 456.940416][T11860] __x64_sys_ioctl+0xb7/0x200 [ 456.945143][T11860] do_syscall_64+0xcd/0x250 [ 456.949721][T11860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.955671][T11860] RIP: 0033:0x7f0743985d29 [ 456.960209][T11860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.979857][T11860] RSP: 002b:00007f07446de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 456.988397][T11860] RAX: ffffffffffffffda RBX: 00007f0743b75fa0 RCX: 00007f0743985d29 [ 456.996398][T11860] RDX: 0000000000000000 RSI: 0000000040047438 RDI: 0000000000000011 [ 457.004399][T11860] RBP: 00007f07446de090 R08: 0000000000000000 R09: 0000000000000000 [ 457.012400][T11860] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.020402][T11860] R13: 0000000000000000 R14: 00007f0743b75fa0 R15: 00007ffeb1ccb578 [ 457.028421][T11860] [ 457.031472][ C1] vkms_vblank_simulate: vblank timer overrun [ 457.054505][T11860] ERROR: Out of memory at tomoyo_realpath_from_path. [ 457.077464][T11867] delete_channel: no stack [ 457.770850][T11881] netlink: 'syz.6.1138': attribute type 1 has an invalid length. [ 457.972545][T11890] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1139'. [ 458.359333][ T29] audit: type=1326 audit(4294967313.500:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11907 comm="syz.4.1143" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f0743985d29 code=0x0 [ 458.381050][ C1] vkms_vblank_simulate: vblank timer overrun [ 458.423831][T11904] FAULT_INJECTION: forcing a failure. [ 458.423831][T11904] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 458.449956][T11904] CPU: 0 UID: 0 PID: 11904 Comm: syz.6.1145 Not tainted 6.13.0-syzkaller #0 [ 458.458746][T11904] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 458.468873][T11904] Call Trace: [ 458.472201][T11904] [ 458.475183][T11904] dump_stack_lvl+0x16c/0x1f0 [ 458.480546][T11904] should_fail_ex+0x497/0x5b0 [ 458.485300][T11904] _copy_to_user+0x32/0xd0 [ 458.489798][T11904] simple_read_from_buffer+0xd0/0x160 [ 458.495234][T11904] proc_fail_nth_read+0x198/0x270 [ 458.500389][T11904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 458.506024][T11904] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 458.511742][T11904] vfs_read+0x1df/0xbe0 [ 458.515973][T11904] ? __fget_files+0x1fc/0x3a0 [ 458.520728][T11904] ? __pfx___mutex_lock+0x10/0x10 [ 458.525835][T11904] ? __pfx_vfs_read+0x10/0x10 [ 458.530587][T11904] ? __fget_files+0x206/0x3a0 [ 458.535373][T11904] ksys_read+0x12b/0x250 [ 458.539693][T11904] ? __pfx_ksys_read+0x10/0x10 [ 458.544533][T11904] do_syscall_64+0xcd/0x250 [ 458.549124][T11904] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.555096][T11904] RIP: 0033:0x7fc507f8473c [ 458.559572][T11904] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 458.579249][T11904] RSP: 002b:00007fc508e25030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 458.587740][T11904] RAX: ffffffffffffffda RBX: 00007fc508175fa0 RCX: 00007fc507f8473c [ 458.595775][T11904] RDX: 000000000000000f RSI: 00007fc508e250a0 RDI: 0000000000000012 [ 458.603815][T11904] RBP: 00007fc508e25090 R08: 0000000000000000 R09: 0000000000000000 [ 458.611845][T11904] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 458.619865][T11904] R13: 0000000000000000 R14: 00007fc508175fa0 R15: 00007ffca383ded8 [ 458.627912][T11904] [ 460.061230][T11954] random: crng reseeded on system resumption [ 462.471120][T11993] : Can't lookup blockdev [ 464.753826][T12030] FAULT_INJECTION: forcing a failure. [ 464.753826][T12030] name failslab, interval 1, probability 0, space 0, times 0 [ 464.852718][T12030] CPU: 0 UID: 0 PID: 12030 Comm: syz.3.1170 Not tainted 6.13.0-syzkaller #0 [ 464.861494][T12030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 464.871632][T12030] Call Trace: [ 464.874970][T12030] [ 464.877960][T12030] dump_stack_lvl+0x16c/0x1f0 [ 464.882724][T12030] should_fail_ex+0x497/0x5b0 [ 464.887473][T12030] ? fs_reclaim_acquire+0xae/0x150 [ 464.892655][T12030] should_failslab+0xc2/0x120 [ 464.897409][T12030] __kmalloc_noprof+0xce/0x4f0 [ 464.902303][T12030] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 464.908018][T12030] ? tomoyo_realpath_from_path+0xbf/0x710 [ 464.913833][T12030] tomoyo_realpath_from_path+0xbf/0x710 [ 464.919448][T12030] ? tomoyo_path_number_perm+0x235/0x5b0 [ 464.925163][T12030] tomoyo_path_number_perm+0x248/0x5b0 [ 464.930706][T12030] ? tomoyo_path_number_perm+0x235/0x5b0 [ 464.936443][T12030] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 464.942538][T12030] ? __pfx_lock_release+0x10/0x10 [ 464.947638][T12030] ? trace_lock_acquire+0x14e/0x1f0 [ 464.952910][T12030] ? lock_acquire+0x2f/0xb0 [ 464.957467][T12030] ? __fget_files+0x40/0x3a0 [ 464.962148][T12030] ? __fget_files+0x206/0x3a0 [ 464.966905][T12030] security_file_ioctl+0x9b/0x240 [ 464.971994][T12030] __x64_sys_ioctl+0xb7/0x200 [ 464.976731][T12030] do_syscall_64+0xcd/0x250 [ 464.981410][T12030] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.987371][T12030] RIP: 0033:0x7f3f33985d29 [ 464.991832][T12030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.011590][T12030] RSP: 002b:00007f3f34706038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 465.020074][T12030] RAX: ffffffffffffffda RBX: 00007f3f33b75fa0 RCX: 00007f3f33985d29 [ 465.028109][T12030] RDX: 000000000000003b RSI: 000000000000227c RDI: 0000000000000003 [ 465.036226][T12030] RBP: 00007f3f34706090 R08: 0000000000000000 R09: 0000000000000000 [ 465.044296][T12030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.052325][T12030] R13: 0000000000000000 R14: 00007f3f33b75fa0 R15: 00007ffc0c173118 [ 465.060371][T12030] [ 465.144526][T12030] ERROR: Out of memory at tomoyo_realpath_from_path. [ 467.461336][T12055] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 470.716568][T12090] netlink: zone id is out of range [ 470.721942][T12090] netlink: zone id is out of range [ 470.727089][T12090] netlink: zone id is out of range [ 470.737193][T12090] netlink: zone id is out of range [ 470.742587][T12090] netlink: zone id is out of range [ 470.747821][T12090] netlink: get zone limit has 8 unknown bytes [ 471.696926][T12110] syz.4.1189 (12110): drop_caches: 0 [ 472.037344][T12114] FAULT_INJECTION: forcing a failure. [ 472.037344][T12114] name failslab, interval 1, probability 0, space 0, times 0 [ 472.080401][T12114] CPU: 0 UID: 0 PID: 12114 Comm: syz.1.1191 Not tainted 6.13.0-syzkaller #0 [ 472.089168][T12114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 472.099253][T12114] Call Trace: [ 472.102558][T12114] [ 472.105504][T12114] dump_stack_lvl+0x16c/0x1f0 [ 472.110215][T12114] should_fail_ex+0x497/0x5b0 [ 472.114922][T12114] ? fs_reclaim_acquire+0xae/0x150 [ 472.120072][T12114] should_failslab+0xc2/0x120 [ 472.124790][T12114] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 472.130199][T12114] ? __pfx___might_resched+0x10/0x10 [ 472.135528][T12114] ? __anon_vma_prepare+0x344/0x5e0 [ 472.140800][T12114] __anon_vma_prepare+0x344/0x5e0 [ 472.145868][T12114] __vmf_anon_prepare+0x11c/0x240 [ 472.150929][T12114] do_wp_page+0xf7e/0x4670 [ 472.155388][T12114] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 472.161071][T12114] ? __pfx_do_wp_page+0x10/0x10 [ 472.165950][T12114] ? rcu_is_watching+0x12/0xc0 [ 472.170744][T12114] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 472.176140][T12114] ? lock_acquire+0x2f/0xb0 [ 472.180671][T12114] ? __handle_mm_fault+0xdfa/0x2a40 [ 472.185908][T12114] __handle_mm_fault+0x1ade/0x2a40 [ 472.191086][T12114] ? __pfx___handle_mm_fault+0x10/0x10 [ 472.196587][T12114] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 472.202268][T12114] ? find_vma+0xc0/0x140 [ 472.206539][T12114] ? __pfx_find_vma+0x10/0x10 [ 472.211243][T12114] handle_mm_fault+0x3fa/0xaa0 [ 472.216054][T12114] do_user_addr_fault+0x7a3/0x13f0 [ 472.221199][T12114] exc_page_fault+0x5c/0xc0 [ 472.225730][T12114] asm_exc_page_fault+0x26/0x30 [ 472.230618][T12114] RIP: 0010:__put_user_4+0x11/0x20 [ 472.235764][T12114] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 472.255419][T12114] RSP: 0018:ffffc900001f7d68 EFLAGS: 00050202 [ 472.261510][T12114] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 000000000000003b [ 472.269499][T12114] RDX: 1ffff1100f56903c RSI: ffffffff85f8422e RDI: ffff88807ab481e0 [ 472.277495][T12114] RBP: 000000000000227c R08: 0000000000000000 R09: fffffbfff203a53a [ 472.285487][T12114] R10: ffffffff901d29d7 R11: 0000000000000000 R12: ffff88802ff3ea80 [ 472.293481][T12114] R13: ffff88807ab48160 R14: ffff888144bf9800 R15: ffff88807ab48178 [ 472.301486][T12114] ? sg_ioctl+0x13fe/0x26b0 [ 472.306038][T12114] sg_ioctl+0x1434/0x26b0 [ 472.310418][T12114] ? __pfx_sg_ioctl+0x10/0x10 [ 472.315131][T12114] ? __pfx_lock_release+0x10/0x10 [ 472.320196][T12114] ? trace_lock_acquire+0x14e/0x1f0 [ 472.325453][T12114] ? __fget_files+0x206/0x3a0 [ 472.330164][T12114] ? __pfx_sg_ioctl+0x10/0x10 [ 472.334880][T12114] __x64_sys_ioctl+0x190/0x200 [ 472.339674][T12114] do_syscall_64+0xcd/0x250 [ 472.344237][T12114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.350170][T12114] RIP: 0033:0x7f9080785d29 [ 472.354604][T12114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.374241][T12114] RSP: 002b:00007f90814de038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 472.382687][T12114] RAX: ffffffffffffffda RBX: 00007f9080975fa0 RCX: 00007f9080785d29 [ 472.390684][T12114] RDX: 000000000000003b RSI: 000000000000227c RDI: 0000000000000003 [ 472.398697][T12114] RBP: 00007f90814de090 R08: 0000000000000000 R09: 0000000000000000 [ 472.406710][T12114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 472.414717][T12114] R13: 0000000000000000 R14: 00007f9080975fa0 R15: 00007fff3ba1f428 [ 472.422738][T12114] [ 473.485255][T11932] ------------[ cut here ]------------ [ 473.491298][T11932] WARNING: CPU: 1 PID: 11932 at mm/page_alloc.c:4729 __alloc_pages_noprof+0xeff/0x25b0 [ 473.501320][T11932] Modules linked in: [ 473.505291][T11932] CPU: 1 UID: 0 PID: 11932 Comm: syz.6.1148 Not tainted 6.13.0-syzkaller #0 [ 473.514205][T11932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 473.524766][T11932] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 473.531518][T11932] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 de b2 fe ff e9 69 f9 ff ff c6 05 f4 ad 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 df 9f 0c 00 8b 14 24 e9 [ 473.551527][T11932] RSP: 0018:ffffc900032c7918 EFLAGS: 00010246 [ 473.557686][T11932] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 473.565827][T11932] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040d40 [ 473.573932][T11932] RBP: 0000000000000000 R08: 0000000000000006 R09: 00000000003fffff [ 473.582054][T11932] R10: 00000000003fffff R11: 0000000000000004 R12: 000000000000000b [ 473.590157][T11932] R13: 0000000000040d40 R14: 1ffff92000658f37 R15: 00000000003fffff [ 473.598193][T11932] FS: 00007fc508e256c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 473.607413][T11932] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 473.614344][T11932] CR2: 00007f64f558d04f CR3: 0000000052ff4000 CR4: 00000000003526f0 [ 473.622798][T11932] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 473.631260][T11932] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 473.639318][T11932] Call Trace: [ 473.642872][T11932] [ 473.645854][T11932] ? __warn+0xea/0x3c0 [ 473.650047][T11932] ? __alloc_pages_noprof+0xeff/0x25b0 [ 473.655595][T11932] ? report_bug+0x3c0/0x580 [ 473.660248][T11932] ? handle_bug+0x54/0xa0 [ 473.664665][T11932] ? exc_invalid_op+0x17/0x50 [ 473.669432][T11932] ? asm_exc_invalid_op+0x1a/0x20 [ 473.674660][T11932] ? __alloc_pages_noprof+0xeff/0x25b0 [ 473.680427][T11932] ? finish_task_switch.isra.0+0x217/0xcc0 [ 473.686324][T11932] ? hlock_class+0x4e/0x130 [ 473.690990][T11932] ? __lock_acquire+0x15a9/0x3c40 [ 473.696088][T11932] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 473.702070][T11932] ? find_held_lock+0x2d/0x110 [ 473.707061][T11932] ___kmalloc_large_node+0x84/0x1b0 [ 473.713715][T11932] __kmalloc_large_node_noprof+0x1c/0x70 [ 473.719446][T11932] __kmalloc_noprof.cold+0xc/0x63 [ 473.725436][T11932] ? __might_fault+0xe3/0x190 [ 473.730698][T11932] ? tomoyo_write_control+0x267/0x13d0 [ 473.736263][T11932] tomoyo_write_control+0x267/0x13d0 [ 473.741789][T11932] ? rcu_is_watching+0x12/0xc0 [ 473.746675][T11932] ? __pfx_tomoyo_write_control+0x10/0x10 [ 473.752564][T11932] ? ksys_write+0x12b/0x250 [ 473.757241][T11932] ? __pfx_tomoyo_write+0x10/0x10 [ 473.762522][T11932] vfs_write+0x24c/0x1150 [ 473.766949][T11932] ? __fget_files+0x1fc/0x3a0 [ 473.771774][T11932] ? __pfx___mutex_lock+0x10/0x10 [ 473.776885][T11932] ? __pfx_vfs_write+0x10/0x10 [ 473.781823][T11932] ? __fget_files+0x206/0x3a0 [ 473.786610][T11932] ksys_write+0x12b/0x250 [ 473.791086][T11932] ? __pfx_ksys_write+0x10/0x10 [ 473.796029][T11932] do_syscall_64+0xcd/0x250 [ 473.800661][T11932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.806640][T11932] RIP: 0033:0x7fc507f85d29 [ 473.811308][T11932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.831622][T11932] RSP: 002b:00007fc508e25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 473.840651][T11932] RAX: ffffffffffffffda RBX: 00007fc508175fa0 RCX: 00007fc507f85d29 [ 473.848706][T11932] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000003 [ 473.856829][T11932] RBP: 00007fc508001b08 R08: 0000000000000000 R09: 0000000000000000 [ 473.865016][T11932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.873190][T11932] R13: 0000000000000000 R14: 00007fc508175fa0 R15: 00007ffca383ded8 [ 473.881313][T11932] [ 473.884405][T11932] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 473.891758][T11932] CPU: 1 UID: 0 PID: 11932 Comm: syz.6.1148 Not tainted 6.13.0-syzkaller #0 [ 473.900494][T11932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 473.910619][T11932] Call Trace: [ 473.913936][T11932] [ 473.916923][T11932] dump_stack_lvl+0x3d/0x1f0 [ 473.921600][T11932] panic+0x71d/0x800 [ 473.925566][T11932] ? __pfx_panic+0x10/0x10 [ 473.930059][T11932] ? show_trace_log_lvl+0x29d/0x3d0 [ 473.935366][T11932] ? __alloc_pages_noprof+0xeff/0x25b0 [ 473.940903][T11932] check_panic_on_warn+0xab/0xb0 [ 473.945922][T11932] __warn+0xf6/0x3c0 [ 473.949909][T11932] ? __alloc_pages_noprof+0xeff/0x25b0 [ 473.955443][T11932] report_bug+0x3c0/0x580 [ 473.959849][T11932] handle_bug+0x54/0xa0 [ 473.964063][T11932] exc_invalid_op+0x17/0x50 [ 473.968629][T11932] asm_exc_invalid_op+0x1a/0x20 [ 473.973526][T11932] RIP: 0010:__alloc_pages_noprof+0xeff/0x25b0 [ 473.979638][T11932] Code: 24 2c 00 00 00 00 89 cd 0f 84 8b f9 ff ff 8b 34 24 48 89 da 8b 7c 24 08 e8 de b2 fe ff e9 69 f9 ff ff c6 05 f4 ad 16 0e 01 90 <0f> 0b 90 31 db e9 9f f3 ff ff 89 14 24 e8 df 9f 0c 00 8b 14 24 e9 [ 473.999280][T11932] RSP: 0018:ffffc900032c7918 EFLAGS: 00010246 [ 474.005472][T11932] RAX: 0000000000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 474.013474][T11932] RDX: 0000000000000000 RSI: 000000000000000b RDI: 0000000000040d40 [ 474.021475][T11932] RBP: 0000000000000000 R08: 0000000000000006 R09: 00000000003fffff [ 474.029474][T11932] R10: 00000000003fffff R11: 0000000000000004 R12: 000000000000000b [ 474.037472][T11932] R13: 0000000000040d40 R14: 1ffff92000658f37 R15: 00000000003fffff [ 474.045505][T11932] ? finish_task_switch.isra.0+0x217/0xcc0 [ 474.051359][T11932] ? hlock_class+0x4e/0x130 [ 474.055912][T11932] ? __lock_acquire+0x15a9/0x3c40 [ 474.060966][T11932] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 474.066753][T11932] ? find_held_lock+0x2d/0x110 [ 474.071561][T11932] ___kmalloc_large_node+0x84/0x1b0 [ 474.076796][T11932] __kmalloc_large_node_noprof+0x1c/0x70 [ 474.082462][T11932] __kmalloc_noprof.cold+0xc/0x63 [ 474.087535][T11932] ? __might_fault+0xe3/0x190 [ 474.092240][T11932] ? tomoyo_write_control+0x267/0x13d0 [ 474.097749][T11932] tomoyo_write_control+0x267/0x13d0 [ 474.103085][T11932] ? rcu_is_watching+0x12/0xc0 [ 474.107897][T11932] ? __pfx_tomoyo_write_control+0x10/0x10 [ 474.113650][T11932] ? ksys_write+0x12b/0x250 [ 474.118190][T11932] ? __pfx_tomoyo_write+0x10/0x10 [ 474.123243][T11932] vfs_write+0x24c/0x1150 [ 474.127605][T11932] ? __fget_files+0x1fc/0x3a0 [ 474.132314][T11932] ? __pfx___mutex_lock+0x10/0x10 [ 474.137376][T11932] ? __pfx_vfs_write+0x10/0x10 [ 474.142183][T11932] ? __fget_files+0x206/0x3a0 [ 474.146901][T11932] ksys_write+0x12b/0x250 [ 474.151271][T11932] ? __pfx_ksys_write+0x10/0x10 [ 474.156166][T11932] do_syscall_64+0xcd/0x250 [ 474.160711][T11932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.166645][T11932] RIP: 0033:0x7fc507f85d29 [ 474.171078][T11932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.190711][T11932] RSP: 002b:00007fc508e25038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 474.199157][T11932] RAX: ffffffffffffffda RBX: 00007fc508175fa0 RCX: 00007fc507f85d29 [ 474.207153][T11932] RDX: 000000007fffffff RSI: 0000000000000000 RDI: 0000000000000003 [ 474.215145][T11932] RBP: 00007fc508001b08 R08: 0000000000000000 R09: 0000000000000000 [ 474.223140][T11932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.231132][T11932] R13: 0000000000000000 R14: 00007fc508175fa0 R15: 00007ffca383ded8 [ 474.239145][T11932] [ 474.242519][T11932] Kernel Offset: disabled [ 474.246904][T11932] Rebooting in 86400 seconds..