last executing test programs: 23m49.671290104s ago: executing program 0 (id=240): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000f0ffffffffffffc0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) 23m48.819410197s ago: executing program 0 (id=244): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a) mlockall$auto(0x7) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f0000fc000000000000c0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) 23m47.676582552s ago: executing program 0 (id=249): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vimc.0/video4linux/video4/name\x00', 0x0, 0x0) (async) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20040045) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1, 0x0, 0x1, 0x0, 0x4, 0x3}, 0x20000007}, 0x3, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) r0 = socket(0x2, 0x2, 0x1) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_4={0x1f, r0, 0x10000}, 0x10) ppoll$auto(&(0x7f0000000080)={0xffffffffffffffff, 0xf7f, 0x81}, 0x1, 0x0, 0x0, 0x8) (async) pwrite64$auto(0xc8, 0x0, 0x6, 0x7a) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) mlock$auto(0x1000, 0x6) (async) mlockall$auto(0x800000000000005) (async) pselect6$auto(0x8000, &(0x7f0000000080)={[0x800, 0x3, 0xb, 0xb9, 0x7, 0x7, 0x28, 0x4, 0x100, 0x9, 0x3, 0xffffffffffff6ee4, 0x80, 0x47, 0x3, 0x40]}, &(0x7f0000000640)={[0xfffffffffffffffc, 0x8, 0x101, 0x4, 0xb, 0x0, 0x3f8b, 0xc, 0x2, 0x2, 0x7, 0x7f, 0x0, 0x800, 0x7fffffffffffffff, 0x6]}, &(0x7f00000006c0)={[0x5d58, 0x7, 0xa5, 0x7f, 0xffffffffffffff63, 0x6, 0xfffffffffffffffa, 0x2001, 0x4, 0x7, 0x6, 0x8000, 0xc, 0x101, 0x4, 0x9]}, &(0x7f0000000200)={0x6, 0xac}, &(0x7f0000000740)="84564c8c26b8144fd4d3e1ecb7942bbed10faff85baff45164fe66cd970aa99ce6e0b82e3f049231ba73698898fcd2a65389893a8ce8b267d7aa4f5258122e0b18ac67ffde635cac8164af89d15c5b3222a32a0e03b46c0b57abb954eb9a7ba2e851d345c9e7319f0334e91d93a1a639c9a157cbd953f98a055c6326e49c3691aa27e73928cfc94b6ca85e02c62ac8fc9925f5c6481c62e36169492d6741aa7e32fbc03e9391f9b9b275e7e9551b938d5b80bafbdc1dd37bfb2772dbc29cf87b41fa609e535de02906ee62739ad3f141062547") (async) madvise$auto(0x0, 0x200007, 0x19) (async) mbind$auto(0x0, 0x2, 0x2, 0x0, 0x7, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) (async) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8002, 0x0, 0x6) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x20400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) madvise$auto(0xb, 0x0, 0x3) (async) madvise$auto(0x7, 0x4, 0x2) (async) r2 = socket(0xa, 0x5, 0x13c) getsockopt$auto(r2, 0x20000028, 0x6, 0x0, 0x0) msync$auto(0x7, 0xfe, 0x8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x7) (async) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) 23m46.207194978s ago: executing program 0 (id=254): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f009effffffffffffffc0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) 23m45.826856993s ago: executing program 0 (id=256): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="0000b07cd27e"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x2000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x2, 0x80002, 0x73) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x1, 0x84) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x2, 0x80002, 0x73) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) eventfd$auto(0x8c) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x7, 0x0, 0x1) bind$auto(0x3, &(0x7f0000000080), 0x6b) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) mbind$auto(0x10, 0x0, 0x80, &(0x7f0000000040)=0x4, 0x2be4, 0x1000) 23m45.079176734s ago: executing program 0 (id=258): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) (async) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async) r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) write$auto(r0, 0x0, 0x881) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/apparmor/parameters/enabled\x00', 0x22000, 0x0) (async) socket(0xa, 0x801, 0x100) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) unshare$auto(0x200) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) (async) clone$auto(0xfffffffe22000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x800fffffffc) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) 23m44.588367046s ago: executing program 32 (id=258): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) (async) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8000) (async) r0 = openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) write$auto(r0, 0x0, 0x881) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/module/apparmor/parameters/enabled\x00', 0x22000, 0x0) (async) socket(0xa, 0x801, 0x100) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) unshare$auto(0x200) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) (async) clone$auto(0xfffffffe22000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x800fffffffc) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) 18m30.050060385s ago: executing program 3 (id=1966): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3, 0x0) pipe$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) writev$auto(r1, &(0x7f0000000280)={0x0, 0x45}, 0xb) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="13002cbd7000dddbdf250200000008000300", @ANYRES32=r3, @ANYBLOB="080061000100000008006200fcff7f"], 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r4 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x40, 0x0) io_uring_setup$auto(0x1, 0x0) io_uring_setup$auto(0x59, 0x0) socket(0x2, 0x801, 0x106) socket(0x15, 0x5, 0x0) r5 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r5, @ANYRES8=r4, @ANYRES32], 0x18}}, 0x80) 18m29.815324754s ago: executing program 3 (id=1969): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:04.0/class\x00', 0x800, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x5, 0x0) msgctl$auto(0x26, 0x400, 0x0) rseq$auto(0x0, 0xfffffff4, 0x0, 0x7) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000001180)='/proc/mtd\x00', 0x80000, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(r0, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', 0x0, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC2\x00', 0x0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r1 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_NFSD_CMD_LISTENER_SET(r1, &(0x7f0000001700)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x10) write$auto_console_fops_tty_io(r1, &(0x7f0000000040)="0152f1ccbaf0a250747d8adb", 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) ioctl$auto(0x3, 0x89e2, 0x91) setsockopt$auto(0x1, 0x1, 0x46, &(0x7f0000000000)='\x00', 0xbb) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) ioctl$auto_NVRAM_INIT(0xffffffffffffffff, 0x7040, 0x0) socket(0x21, 0x2, 0xa) select$auto(0xb, &(0x7f00000000c0)={[0x40, 0xfffffffffffffffb, 0x0, 0x3, 0xffffffffffff4fc9, 0x9, 0x6, 0x0, 0x3b73, 0x5, 0x7, 0x8, 0x10001, 0x2, 0x6, 0xade]}, &(0x7f00000001c0)={[0xfffffffffffffff9, 0x3, 0x100, 0x51b, 0xb, 0x0, 0xc, 0x2, 0x31, 0x9, 0xff, 0x1, 0xb, 0x4, 0x101, 0x5]}, &(0x7f0000000240)={[0x3, 0x3ff, 0x70f, 0x200, 0x913, 0x9, 0x5, 0x8000000000000001, 0x77, 0x7, 0x7ff, 0x3e95, 0x6, 0x4, 0x6, 0x10]}, &(0x7f0000000140)={0x101, 0x9}) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x5608, r3) 18m29.6931751s ago: executing program 3 (id=1973): mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) openat$auto_tun_fops_tun(0xffffffffffffff9c, 0x0, 0x2002, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4, 0x4, 0x4, 0x7, 0x100000000) write$auto(0xffffffffffffffff, 0x0, 0xc9c8) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8040) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1a) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x10000, 0x1, 0x2, {0x2100000000, 0x10000}, 0x3, 0x6, 0xffffffffffffffdd, 0x1008000, 0x0, 0x80000004, 0x83, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x1800}) r1 = openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) pread64$auto(r1, 0x0, 0x20000000001, 0x7fff) 18m29.384691976s ago: executing program 3 (id=1978): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) prctl$auto(0x3f, 0x7ff, 0x0, 0x5, 0x5) tgkill$auto(0x0, 0x1, 0x1) mkdir$auto(0x0, 0x8) socket(0x22, 0x2, 0x7) io_uring_setup$auto(0x2, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r0, 0x5408, 0x0) 18m29.322031132s ago: executing program 3 (id=1979): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) connect$auto(0xffffffffffffffff, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1, 0x3fff}, 0x57) close_range$auto(0x2, 0xa, 0x0) r0 = socket(0x18, 0xa, 0x1) r1 = socket(0xa, 0x2, 0x88) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5aa, &(0x7f0000000100)={0x0, 0x49}, 0x5, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) sendmmsg$auto(0x3, &(0x7f0000000180)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x40, 0x0) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) r4 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) quotactl_fd$auto(r4, 0x4, 0xffffffffffffffff, 0x0) shmctl$auto_SHM_LOCK(0x10001, 0xb, &(0x7f0000000440)={{0xfffffff7, 0xffffffffffffffff, 0x0, 0x1, 0x7ca2, 0x3, 0x6}, 0x4, 0x1, 0xb7, 0x8, @inferred=0xffffffffffffffff, @inferred, 0x9, 0x0, &(0x7f0000000340)="c00f87773c44b8b6cbb6c50dd42957f448855f3876a33d06df799f0536f433e46520f1c8fa1a9f1546f6f356e75612bdd0353e293c24a990cd9e716aa5f0e9f3", &(0x7f0000000380)="a1937b45e771290c616e3c402dec57ecca600893cf1f4849977d9fae8284674b03acc3f1d5c386d6b14792ee9eab958e39a3e504a8bb2420159cc381ddc6213b96c769f3a07b33e0aaa522b5237af57f4cf89209654b44caf89ab73dfc865e011db686e789993baf8cf436ebd8cb50062131503109c72569d5d2f88599716c595a15b89d93a6398b689fc755dd5e0b5b0d57cfc128270d18ceaf45b3c306ed35d08e3a3f1365033849594b705b926f5fdb7de37d5ee96165"}) sendmsg$auto_IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000500)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000004c0)={&(0x7f0000001900)={0x1680, 0x0, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x145e, 0x3, 0x0, 0x1, [@typed={0x8, 0x132, 0x0, 0x0, @pid}, @generic="8b8bd25fece342c432878ac66463fec7b55c680b601bb7b3aa9a775e34f77decf4c1828704441f1df271bf59112a60ff2324e639ae5ed4b94d6d0e35b882404c8d36804d45bb6bd89bfcd043d1fe471d3ec57e6d54655478aec001113799d408f8468b02bc30e5077718f6916e9c6d4404a40e1809eca74f0161ef843ecc6a4b46e6", @nested={0xea, 0x144, 0x0, 0x1, [@nested={0x4, 0x47}, @nested={0x4, 0xdb}, @typed={0x8, 0xd2, 0x0, 0x0, @u32=0xda27}, @nested={0x4, 0x128}, @typed={0x8, 0x14, 0x0, 0x0, @fd=r4}, @generic="6ca420c5ae223ead8f4be36f25b2c0718b444b98088dce7df68e3e81808a506e59c51d3e74f18bf91c09b351155a8b6c859bd07765e18122c19746bcde429cf675ef057aca852ade921f813313b9e655d80624c9af129345631a22428badb0a820c3286eeef1dad5ae5eb66e0480dd92fb20a5d888cbc6b720fbd70fd4c1d2a5e4fe7e7bff704dc196ee2b449cf44f2fa08138685e3078a116d23700b4ae7072c5a558cab708bf8f039756cce3911f8c5b841ef4669ce15834c1a77140cb71fc3891", @typed={0x8, 0xd7, 0x0, 0x0, @ipv4=@broadcast}]}, @generic="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", @nested={0x11e, 0xe, 0x0, 0x1, [@nested={0x4, 0x64}, @nested={0x4, 0xba}, @generic="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", @typed={0x14, 0xd1, 0x0, 0x0, @ipv6=@loopback}]}, @generic, @nested={0x14a, 0x13, 0x0, 0x1, [@generic="8d9dfa3bd02f355a96eb6109995c0b2f70c0b0cff7f96677fcd201dfe1cb6d2baebd03d5c1e74d408150564ec7d0ee2c22882eb9de2db00a3943eb5771c18fd37fa5312996ed81bb2a70544cb3371ffb3a61596a51c13695f41d3c8579edac899c459929523c675701818842730d0b7c96d1bac5192419", @typed={0x8, 0x123, 0x0, 0x0, @uid=r5}, @generic="cf9ac7b7ab2f2b25c00021efa8cc7722ec5e23e21260d3c47669861eb5afd3fb013bc74be10b27a6257fcb79b12dd8c061986982ee37d4233873c381003c91e12057e4fe4de339f3608fe5067073cea3028dc3d858a4003128226a5d4a862d2167a0e61524c21c8c44a3d7c85a170850c755106d2138b5a9863f11570dd805e7a28ed71b72a1a2f6f44f4af7596c3ecfbb97a2f6d9b3514a2ada101d1f882559d74aba2440c7692005b145da398e53d526d20ce2a86fb7521add3dfe702ec422c1c8b0", @nested={0x4, 0xb3}]}, @nested={0x78, 0xf6, 0x0, 0x1, [@nested={0x4, 0xf0}, @nested={0x4, 0x64}, @typed={0x8, 0x8, 0x0, 0x0, @u32=0x6}, @generic="596ca0b1488ea6a0c345fc15b88d5a2b6ffa7b0ade5ba46aa9c1d39a8193aa05508f53", @nested={0x4, 0x10}, @nested={0x4, 0x4c}, @typed={0x8, 0x21, 0x0, 0x0, @ipv4=@local}, @generic="22cde702cc2e4febfd7454751a4bb134dd2a79ca08900f6fb6f736f693b53fcfb281a0178a", @typed={0x8, 0xa8, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x3, 0x0}}, @nested={0x4, 0x88}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xc2f}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x5e, 0x0, 0x0, @fd=r0}]}, @IPVS_CMD_ATTR_DAEMON={0x1f5, 0x3, 0x0, 0x1, [@typed={0xa0, 0x5, 0x0, 0x0, @binary="1bc4525b65adb4ac8bfa5b05591ad86be9172955e7fa6cb16e32cdba316f5559366898317edac346b74b8c49f90c7303ce934d6617c9c4946a4c7eb811944eef7bee65a5ec787d6d2a48c24172a9cd27180c1da011ce56210065fa631bd23338037604ce2a6a42bbd212695e03c1efc5790e161cf7f732d525b2b75b008cb9b6c18e1accecf85293929ef2aa68059891312bf4bc959eadfb5a74acfd"}, @generic="203b4e5cdc6863d3e6207e55ac42883bd0ed48ebf8957ad1c816f7c28cf9d4ffdec1ab123e61e15ab720605d27a5fbadc99209cb17dffef6cfd04d6565aeaef0b38434266b8cdf7c068016f761d7772d47b20a4d761010ec53568f4bab0c650ebcf4e93fb6356d167ccd15b97d04a20267e0328120564f82efaa50507444aab8d2c1f7ded32003b95da8ca4e8edd7f9040e3eba21b8ab0d7513d8fd4450156a3b91f72fa72344bbd665bf510047cb39eb02d56f14853a81b05199800ccc315d62cae1922c2550e10f04702508fa651e7fb4d880b", @generic="2371be940a082411c16f59f902c743a350d015be173c571446494218505c75ecff3fa3f3f7ab385576270a7422f9d96b54f0b7dcf1e8899084a7bbbde107e2b9f327615c80c9cd24d4a38de009aba6148c78095e52f2abb4c56ef296e0bb7ceef6665ea66eba8fca1d7bb095d6f966cbfc6a244668b017e28c1b2d4f3c"]}]}, 0x1680}, 0x1, 0x0, 0x0, 0x41880}, 0x48000) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x20006, 0x3, 0xe72, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) keyctl$auto(0x8, 0xfffffffffffffffd, 0xffffffffffffffff, 0x5092, 0x2) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x10, r6, 0x4, 0x7ff) wait4$auto(r6, 0x0, 0x80000000, 0x0) rt_sigqueueinfo$auto(r6, 0x5, &(0x7f0000000240)={@_si_pad}) write$auto(0xffffffffffffffff, &(0x7f0000000080)='#-*,+\\}\x00', 0x8) unshare$auto(0x40000080) 18m28.830322053s ago: executing program 3 (id=1982): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8002) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) 18m28.522470355s ago: executing program 33 (id=1982): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8002) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd7\x00', 0x80000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) 17m41.971079418s ago: executing program 4 (id=2331): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, 0x0, 0x40080, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, 0x0, 0xa3d9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002dbd7000f9dbdf250100000005000d00100000000500070010000000080009009c781e2108000a000800000014001f000000000000030000c0feffff0000000014002000ff01faffffff000000000000000000000600020001"], 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x400c004) 17m41.652128413s ago: executing program 4 (id=2333): r0 = landlock_create_ruleset$auto(&(0x7f0000000140)={0x0, 0x9, 0xc8e6}, 0x27, 0x101) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) r2 = socket(0x1d, 0x3, 0x1) getsockname$auto(r2, 0x0, 0x0) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000180)={0x4, 0x1ff, 0x4, 0x5, 0x4800000, 0xffffffff, "b8556e95fd689b52ae05aa60209708fe", 0x6, 0x8, 0x17, 0xa7, 0x1, 0xfc, 0x81}) r3 = openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/cec/cec20/status\x00', 0x80440, 0x0) read$auto_debugfs_devm_entry_ops_file(r3, &(0x7f0000000940)=""/46, 0x2e) fcntl$auto(r1, 0x400, 0x1) read$auto_tracing_stats_fops_trace(r1, &(0x7f0000000000)=""/250, 0xfa) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0xa2400, 0x0) landlock_create_ruleset$auto(&(0x7f0000000140)={0x0, 0x9, 0xc8e6}, 0x27, 0x101) (async) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) (async) socket(0x1d, 0x3, 0x1) (async) getsockname$auto(r2, 0x0, 0x0) (async) ioctl$auto_CEC_TRANSMIT(r0, 0xc0386105, &(0x7f0000000180)={0x4, 0x1ff, 0x4, 0x5, 0x4800000, 0xffffffff, "b8556e95fd689b52ae05aa60209708fe", 0x6, 0x8, 0x17, 0xa7, 0x1, 0xfc, 0x81}) (async) openat$auto_debugfs_devm_entry_ops_file(0xffffffffffffff9c, &(0x7f0000000900)='/sys/kernel/debug/cec/cec20/status\x00', 0x80440, 0x0) (async) read$auto_debugfs_devm_entry_ops_file(r3, &(0x7f0000000940)=""/46, 0x2e) (async) fcntl$auto(r1, 0x400, 0x1) (async) read$auto_tracing_stats_fops_trace(r1, &(0x7f0000000000)=""/250, 0xfa) (async) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0xa2400, 0x0) (async) 17m40.651145012s ago: executing program 4 (id=2338): r0 = open(&(0x7f00009e1000)='./file0\x00', 0x167c0, 0x152) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setpgid$auto(0x7, 0xffffffdffffffff4) r1 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000002040)='/dev/snd/pcmC1D1c\x00', 0x80, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000000), 0xa) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE2(r1, 0x40044145, 0x0) ioctl$auto_OSS_GETVERSION2(r0, 0x80044d76, &(0x7f0000000100)="36f088b87bfe468f324f00fc60a01a18f9d1e34d813d4b558061677ca920738feb61791ce8f7af4d754895925e7ba736b3c9e9c5ba570bd5491ea83dcd05db74774669a4ca194e5136eb04bb2c01e3fee9a0505620603d150052f5e8b19bd1db7ed1bf086360c5b80f619b77c4331dab395b88ada34a84904a7ba805e191b31c1092dec0c3b434c4132787f9c85c70bbdb5bcfd902da8fc52c8496d4f6f57680ec19a285b5a593587c273682d32829b8df1e269f28c074ddc9ac0d5c611ac89add24fbcf2236ba4a8d45d7c2b2f83568c6594739c837e71490d0a38e7adb") openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) mmap$auto(0x3, 0x2060009, 0x7fffffffffffffff, 0x7fffffff, r0, 0x8004) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r2, 0x7a7, 0x0) io_pgetevents$auto(0x7fff, 0xd47, 0x3, 0x0, &(0x7f0000000040)={0x100000000000000, 0x2}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000200)={[0x8, 0xffffffffffffff49, 0x5, 0x1823, 0x800000000004, 0x1, 0x5, 0x19, 0x10, 0x5, 0x2dde, 0x8, 0xfffffffffffffffa, 0xab, 0x0, 0x1]}, &(0x7f0000000040)={0x0, 0x7}) r3 = getsockopt$auto(0x3, 0x200000000001, 0x1c, 0x0, 0x0) futimesat$auto(r3, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0xb, 0x100000001}) pipe$auto(&(0x7f0000000780)=0xffffffffffffffff) splice$auto(r4, 0x0, r0, 0x0, 0x768, 0x9) close_range$auto(0x2, 0x8, 0x0) 17m40.544805329s ago: executing program 4 (id=2339): mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) r0 = socket(0x18, 0x5, 0x1) connect$auto(r0, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) r1 = socket(0x2, 0x5, 0x0) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xa0fc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000480), r3) shmctl$auto(0x3a9, 0x16d, &(0x7f0000000580)={{0x6, 0xee00, 0xffffffffffffffff, 0x100, 0x8000, 0x5, 0x4}, 0x40, 0x4, 0xb, 0x6, @inferred, @raw=0x10, 0xde4, 0x0, &(0x7f00000004c0)="ecea", &(0x7f0000000500)="29d4c45d90eddee334bc10951a649c51a2f426b4505d85262b04da444efd83b0ed5cff471f9485e3ecd0fa9206913dccb1e5b9d5ee13c034ddc269d153fca7e14697a286435808a946458c06cae902afb62e1a2fb76e77f588a48e647be62868fec031"}) sendmsg$auto_IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000001180)={0x14ec, r4, 0x300, 0x70bd25, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7ff}, @IPVS_CMD_ATTR_DAEMON={0xf2, 0x3, 0x0, 0x1, [@typed={0x8, 0xb5, 0x0, 0x0, @uid=r5}, @generic="c2184e10db349177ab61c22ec1433da73ff5ff97266360a76d3e5d5b2e306e60a388444ffdc3593a98d8014a1cee702732f826d32204986afcbf1648a8a483981c17a0655abe7921a12cda0a1169f56f4736ee546b2727e1ed79d9af41f5b927ef42c0d3aa33080b8482f59410ecbe1a4518f425b5442fda68b78ea734fd16647a7be84a91bc8abf0ed23fe6fb3d2813296a1b948fc9951aaa672ffc0bb33cb6f1d6ca03", @generic="cd74f188c91081813ab0db7288642bc28a8891084818a048c3673a15b28e5d151d2b38b8cd8ed75cb3eac8df6c897ef3a224785e06979dc289ce920d312faebd8a90"]}, @IPVS_CMD_ATTR_DAEMON={0x1b7, 0x3, 0x0, 0x1, [@typed={0x4, 0x12a}, @generic, @nested={0xe3, 0x2d, 0x0, 0x1, [@nested={0x4, 0x63}, @typed={0xc, 0xd8, 0x0, 0x0, @u64=0x81}, @generic="bb1087eadb1c6963b3be40cb94eeb2388bd85c29b634195cdc989a5654e787937807647a166c23ce3176d6f958975c74b796323cb16b63e66e3921c2e43f15d8eca214f578ccbef1f7ded18481b3182db0a22eb4c4ac9b9214b0b76349536b5f2886421a8789bc1b38655cd7b0605b3197dd115c8c03881d9c61c523b985f2923278324e3e0b670efc9f17a33474eef89cb38705d629f538bd50d097d780d1a27f8cc2c003d710914d6e01a42c86b73c47b7c52fe84d5d9754f0f82c2d4c91a31ed9af", @typed={0x8, 0xc4, 0x0, 0x0, @fd=r0}, @nested={0x4, 0x96}]}, @generic="ed583b14c8cdd5bfe22511137d2b16279d9a7c519f90931af1f12be1894aa3b3440ea05d3c2be1d341e99549ff698f942161f6697ea8427a4b1ccd674246d31f3fd9a8c1577fc3be53a8b96eb2a727c72e11e5e67f86b12eea0e07d57ac5f37fee12a3db6ed0482545e6831749fd4325e72d61793b2ecf48dbeeb005b2ec4ba335d4ce8b3a84d968e1bd671f3ecfeabf0b22d932d8cbb7952981fd5e72e722c58172d0548ab6314ae066e00b0c277343f7335651bc72c1d73c80737b924798f295443a50b17685dc065b3a"]}, @IPVS_CMD_ATTR_DEST={0x1173, 0x2, 0x0, 0x1, [@generic="0d36b99361b746c60f879dc06c116186026f8588f5c3673b0b4ed6bb940f2a234056be9f21d726f7736feadb9dad09902f3633058230f3bdd0fea271c213b0c0752a7a5c32d500514acc4bb9ee83518545310b19110e9416a33f8fe24176cedd336a6e5a8f90cc7a73874804b3d74ff233239b6f83938d26c905e70827800f52781367738cd11f0650fff5", @generic="eda9e53dcdc6bda0f6a93fb8f92c3fb77bfbd11660cb9a1808a2939f34d95f8f4ae020b906c2bdfb14798961dba37fbc92b0662691d9c0ef75356e84b9e656e2d9534f09d2234ef2", @generic="90ae998d2968e109764c9b7060b953831f01a03f01e92a342241f475ef693115a9470c448e2758eb0715bfd8476684c19c28bb817a3574f16a0d69f3bde8dea320e329c4f42ffee8c7933e0de85599b33d9c14c6fb1d27c257f9f2140fcfc2aafa75c10593e6c6e0ffce0b8653d3734992bfa648d3a5fe2e77cfa7e3e91247080ffb33074b1ba5763d5d3966a2b1b2ef53216256", @generic="98af9502b31313b39b3ea475d3922b139cd47a09d8b7d383812228b2f680bc231b46e82756b1e332837b161cf58cc53f4976d1e8b8afcbd832895cac714d58d838fcf8340d83ad52a2fd2fc8fac186b45fc8fc810ddac87bbccf35fae258645308e5e94f2c69a9e3e716ab801567c8c0d2d6bb010e5dfa73b259832e87a0cc4450d9be72e057e3d19d816227876d63626662f18ad063a06fe302f4ea41185cb3936fe17da096ae86c39186e7c6a353684dbc21a39374bb46508b43a8ab37c583889ff9de1f74c861a5dbb1df0cf9516fe43519d12f94834b55f192675649cd36785785aa12e18d2d807d8a7dc0855fb234e80b305e29b021cea5d0684469d21e15fbc652fdcdddbc01c60eb671809620b0574fb7d9d90a8622861a4222dc225b4ad0dafc3acc75a3822494ebc5a740324e95a21afc56022dfece3504a046110a71558fe3f64cc56e18c16c9e233f2b8b43a65787c5d9fd20d9eb01e2a04ab3b9d8fa377f159a019181a3d85c7bf2abdd666f5975204b6ffae3dd6e9dc90311adfda09c79a10406392bab86c2e6039b9d5ab1a5588ae9fa7770d15ac2b6d24d841c6d24af85e5dc29d0bea574a6d3c9c3d92448a16d16cb1d0a7c77ddca9ff6a37120e0709531ac4fd6fe24d0d21419cef9d53b6a3ed9c74c81a77bf1e1f5238692262a8ec199c598f49cfed7f67ea1b83e8d165ef179664fc9a9380bf7f6f9501d4252feee46075442b2cf955d7367bae6a83ad43a536791fa9ddad5b18fa85877aa4964c6a99cb48198471fd509a2035a18db60500d3fbe3641caddbf6aa56fa91d3d85040e9e0a3dfa023d50bcec8748ce8ff685a8ffb5c23924c2110299c43bd9a90a9bd88d995f7d60d475cc5d508e52041037e91d82b4a955cedd3715c6234e96af27047df275faf964298e425a23cf8954286cdc38c28858f7103edbd49a53e5b3db373b9c759f9a54833c87ad4d18ee318a4e6098f906b988cd0b27d1a8c273750a16f9b234b6fd8c449260c8792d21eece8fa45fa9592cac709e5869a8b7471cc122aa64cde4ce035e455889e884b0faf16108a89ae9863ff0523135281f0bb7f4a0ff29e04f90feae4a5e470d3fe5e572a98d58e0855a7bcd22f7f05adf86594803b40d6cab7de7ce03fe8c8e907b79f84af4f1a614ff9e68a23f1a5bdfc3ed42de3ac03bc0be8a621e1dda57b44e9cafb4306cb00e6246a622da01830e218cc46365007bd1ef9543a823491b8b9082e3a55eb01f79c083b09727a820684f3edcac8c9fa748941b761d69645cc66893062a327cc1abff9aaa3a98b3b0b3b27fa1eedbf4fa2f267b363cca1f7af1daaa8dd858158876813b9f36f65fa8849804cb8bdfe23cd263347a78e98d40023894c07a10dc90a253c78f563f5e6916a6c3f2d4c8d00b2f1c12af0c3cb31a4e10d205bc9a1b3628a685d6acc974f60c3335e0ce8bd866405e2d13b9160b5971c178cdbfbe09a6572d5a9ea5edd067edaf7a171ff8635604562d8fe6f0f1c59549c533105036b4e89c5fdcf28990b2b81f3c12bde2e98da4ebf61c0a5b7ea8713db466a82d046a73cbb5805b6f3a1ca9b33ce2b608721f80a4bfba0eddc0a9bde35ce02cf55f9d56a6a125eb019af364ef572c8059e0486798958c539b82c0fbc99f4b1c6ac2e0712553861b8c13819a4b6ca2a4346f76c3e84f5696c2e0823faa3828a1a49e2e1ef1377ed00006f823fb76821a72b793e84bf607fc8685b2ac94cfede90e948b91a0406c903f0cdbd7b15f983e6c86d789067c55d2b1632df26bcf30cf0d8b5963262d518be0d706ff01eb0940590fbad07d29c25d59178ce53ebd83416784df20c82b393a8abececde6cc8fc772f2c0a4e472edff6e67fd89db7e0abc7fa2bd83b1c7cce84f98a90db10be8dd741e1a83ebfba4347c711462b3119e1a667cd314e4dc484d3f839eb329315566d10d53fa717a00dfa37c79028f26e56f0ee8f87afb71e1b1fe379f30172c609439610b1b3d75a523778f2b6fdee8a1217100f447050137cc6df66184e90b7d86dda5839ffb8772a4f6e4c8cf36fa21d211e57ed90a8e71319745efa4cb6e9b8da11f6f1eb435dfa1191b9288a6df1be1ca9231536cfc8e2fa4a7ee01ea717c7a89b5dc1fad165dd6f49cd2446ab889caba2e31d624b1b7ee866117df720cbd0bc408ba7fde5d691caa5bc8e1aa8ec46256e1863c0c1c60b8bd019b25ea09496323a356425442a322c8cbc00661a646a0a40295136b74c82d5dd77da44cce53d38d8ad1da9660d3089b6ae6b9dfb7c782f8aa46c108c1a76ea8737e489893df29f2ccbd3141f8965f5898f55f2cf7f1137078658155101feeb00a69297da646ded365ed4ea78b57d1a3c4cce9f54a3cb0cbee4aa87a1a682fb42a474aabf0a6830bffa5e03e220b934a15689f394fb3ab8a47194f547ce3e1de138d7c0c19b12a4530662298c49d4ff24102d200ab9a91ec3f7615c0d920e03b0d8082e0d35f75c112f9c9e8f84f2ab165a2b7a0368de63d6a2602733332eaea75371eb10c5cbe3a31f219257b4879ce09a0c1179aad61aaf327acb75d2d6a22a37ec4572da9361ae9cad2321419e73e6fad30f4d8f358f8ae35f782c0d3e32fa4a27266fae5b3277b8c9c8fc0477a908bcae8737d9e605ee6eef807e8ecb4e0a26ae8a5e9f72092b37bc3ebca1e00853559bc061cd447aed2ec855c7b32211e2665db2cbbbe6306301c4af3430f8d55ae9445a78763c58090e99e157373a76a4cd27ef4dd27b0cee57235a31f4ee4a1c98cfb5b490a0c00de1489bc876f4a17e9c992d18eb585b8de428aca545c865d58161da2f289c0133eaa61937a769b86927119ff6040d4f3f85ab38b65fd9870677c5e6a81f4d175b65affca20c4bc2113ea8cc31ebc6b8cc009228ae5d729ceb2456d19d2df6da4b90bfca897ace0bebead6c2fb3274f811911dce197fe4785b52c25a3730e73c84b3c36cec143bd8e2c7098a270527c0dd5cee20ee097c78001e80d2af0c59fe25851b04d47afcedba76b3cf5308963691965cd5671049710a8841577694b4e0119ef87df4b83db02215a43c64f80f7ea051441c8009dfaecde2dc782735c63669b4388bfbb706d65d352e114fb5bf050526a7fffe97c0e125105b135bb60205b15a67af64a8ef7581f11258e3b73fdd9bd10568153e6c8e30c49f589c2a226fe1e5f979ae9430c91c78293c4e8d05c26008c51edeb4c1960537b67633b110bc33da0d5cdf394b1c2b8b1284e1005ffd11b969821d5b30fd28ab223db76c946b2a5105e9f6dc7b63d5c2e5186cbfc259e0adba3c145e69f21c190ae18ca45148ef82fd1b502783a5505370cf803e8d086c215242e1debf52331e411ce2f5790e734d7411641ca813db720991a87afffd1d472772c96c07dd77c6883d7a392335691c61c2a84db273a8e6cdb4220a06637cceb229cf933c24bb0524f1cbaa778a61ffd96029be4cc9e8f5194c2672683def237d349063600f82fbcc65eb25cbad63e4b7268ec9e5cb17c39aa9a2ddcf2d4d7d89245154b142db1dc1741638221cfc6436dd1b47404ef49e875b14826a8561b6852daaa7798bb250d2a1b27ae51ed0f9fa2c56092b66632d26f448bece0f1357244f41cd8357a4fb30d72591c06dee5a4531f9120caf89c1c84b291fc8224f430dab3fcf4250f5379d143108c1063486c6f1e38e16d3193db900e589e380de9abba37b39be8a1d264a18eecd45e86e0c2df44f3da0d080dbda72f8b9be351f0576127ee6b98338224396cf9f553b8dcd01b0fd9767f3b85e89836fff2144c686da8b329cb60dc66b4104e519469b27302bae4e0b7c1efbb48f4c06f36b54d74020b76996264ce879c7c84870708dc30a3851af8d411a8636cb1f7e715c5d33c0ba1e36c83ae053591b114e67bde0cc45eb8dec9f14d3588f5a267c15b6d26e3070b6d6faf61e31d106ae80eab8c4399a3270e4b17dd6c0e0621257617fea4578f9f8c426ea5086be4072ba5ac48f598b0698f821431558c754148e556f5c4ef3c26a6055a03d74292a64654b7faa0838ccbc4f60985ec92e63db9146cb210f09a595a6a5242c1acfa3fcb20646175aebe79aecb645da053fab3b294eca6791c79e4b5f803ad97bb31991ef9d14d89614ef7ceeea5a8f562d3ab05691f935e94809260f6789841cc3300627b13810c7b3923aa2b6320661473ac1337211a2cc79830d7d0d5daf3d3cd172417ff1eea24b6184d401a9f1bee21b6033387d9dd4ea7cf1bdb76ac8e11e64354891a6c5699583525bf94bd3d7111d4d1b44db2aaf7e7fbb1118c3cfd88d7115c0f3a018c237a0aa7523c4ef034b1d3d20f918a7e7b6dec2e444c0f0c28d464d48130ee3cefcaf78c2a9e202142167e350898811fce2af67fda9741e231a3b6a5cb0625bb075c0ddb1b0a4a4cbfb744ef6cfd0e1508d667753c8ec4aaf9bc0265676659c2b09360b9ed21b874931c3fcbb8005597e8f2b2968601dfad53606c0ccf9acb8c1e709975d6c3fc4ab33fe32b1b7bf641b93c01f3c313b4fb6e3317bb917983dccb039eca4263a92c1c5c425901b4216ab83670d6461405f3cbb60199e895a7fbeea7dc24b2dddee8b07bfda3bffb500e4186dd07b8d94e223f288db0f88740b6ad69b7a9925ab13277a91d42479e67d4c4410c5ef1207124f1816025651eff26acb1cbdb69d37bf8467c978193c587768f2ff0a309b60ad68db1355ad9176ebb220087e40356f47378d9cb4cea47042a4890ad640fd9a355b3f32a65b1e6a4457e8708c07027ccc9d8d40b7800382d09c313ca7d8b7ced675d29a0529af840a7b930e4b28c19fad2b11be2787c650ab152501fa228922923589b47e47801f6ee47518135aab8566b2295a95162c45fbac845169ed0d99a3edc5a8637e2161b7acd8500f7fc480046e2aced2b2744897476255e081c842555265b2862bd632acf2832e43c3ba3b458ed7e6896868e0fc474d25dd527607499194a9af6740c84b25d3855ccac61cfb1f5eb2df6d08be6d43640caad212a9b7e65780c9956c8aae20ee7ec38c2128785979e9497467f4ac6bedd899bb043c64fc55da0af80b1afac2ca87c31bea9d1f9f744b469e2b3f4bd63f21c625bafe4065abc2e5567569e9d837eb66df8cd16156788c5dfb263909b2c79391a4cad2454a1ea301bb301c55183cdba1cb9da6d221930fcafe42577bb14a55e28fe9c2522a716ef63a96ba2f97b49dc4a4049b46c3ad7d14f7df920c4193dd15bccec9a870fd93a755888806617d62031a91a2659f52049f334f12b245034fa3d86c1f3fa03e411549281063a08d6df4b2ad4f8b9726627e16313fa12c1dbc86b3d1b5108b95a8a3730511b2d340d48339823aa28d9fd75b5716b4e3eef5f2b18e0615d3de50da6bf6f5468b1d8d50a0c10ca57b8dba7d10e4d773262187fbe324cc805523c99387d2dee7a386d9b013c798e2c77cbc2005faad1c0f03209af350b0ccb112285f5adf02269a2261a9baebd0ce25caf77ff75f3ce2b62df90dca78d6af20897c7ad2afdb18a3d4df854a2edc8a56bd1386bc4e03a7754807471c4d2c3b0fad34e8bd6c752e09abc9c8a627ff30f9efc7262d9abad96ea8a29aeec24e49f685f643c8236213e9f4b21fd418399b5735b1a523aae8691447ae253acad968284839572e4eb7598e55534e787568193a416e55d8eba9c32588b277908dd53f85155b94b9fe259024264431073239387739d63acecfc900ce3724bac180d32628682603558cb8de51bc3f0572860e0a83fea", @nested={0x8, 0x118, 0x0, 0x1, [@nested={0x4, 0xe2}]}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xf}, @IPVS_CMD_ATTR_SERVICE={0xa8, 0x1, 0x0, 0x1, [@nested={0xa3, 0x105, 0x0, 0x1, [@typed={0xc, 0x6b, 0x0, 0x0, @u64=0x1ff}, @generic="c539d7f79fe3f1c7bcd9598b47d4bc11553d9eb1394accc89fb914f089a72c5ff4aa4878481ad79305e6b4176bc871e7ec768fe7a4fdfda52f6da4bda73e88b86d89bb0f438cd8ffe51263f96a5b2bc8c930494b19684196a7b93bfa06f02444efe6c7bd6b18853b4aeea8ee565d8c35053c73d7141134fe0c861a", @typed={0x14, 0xaf, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @nested={0x4, 0xdf}]}]}]}, 0x14ec}, 0x1, 0x0, 0x0, 0x8001}, 0x1) sendmsg$auto_OVS_DP_CMD_DEL(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) waitid$auto_P_PID(0x1, 0xffffffffffffffff, &(0x7f00000000c0)={@siginfo_0_0={0x2, 0xcd5f, 0x1, @_kill={0x0, 0xffffffffffffffff}}}, 0x7, &(0x7f0000000140)={{0x5, 0x23}, {0x7, 0x8001}, 0x1, 0x3, 0x3, 0x1, 0x0, 0x7ff, 0x6, 0x1, 0x6, 0x7, 0x691, 0xa9, 0x0, 0x7}) adjtimex$auto(&(0x7f00000002c0)={0x2, 0x0, 0xcb, 0xcd, 0x3, 0x8000, 0x3, 0x0, 0x80, 0x4000, 0xfffffffffffffe01, {0x6, 0x10001}, 0x4, 0x2, 0x7, 0x7, 0x0, 0x64873d63, 0x7, 0x8, 0xffff, 0xa, 0x3ff}) sendmsg$auto_OVS_DP_CMD_SET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x34, r2, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x9}, @OVS_DP_ATTR_NAME={0x6, 0x1, '*\x00'}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x9}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, r6}]}, 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x800) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mremap$auto(0x4, 0x4, 0x4, 0x7, 0x100000000) write$auto(0xffffffffffffffff, 0x0, 0xc9c8) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8040) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, 0x0, 0x1a) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001140)='/sys/module/ib_iser/parameters/max_sectors\x00', 0x20a42, 0x0) sendfile$auto(r7, r7, 0x0, 0x4f64a1d2) adjtimex$auto(0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0x10eb1, 0xfffffffffffffffd, 0x8000) socket(0x1e, 0x1, 0x0) socket(0x28, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) 17m40.203483259s ago: executing program 4 (id=2341): open(&(0x7f0000000140)='./file0\x00', 0x220c0, 0x20) chmod$auto(&(0x7f00000000c0)='./file0\x00', 0xf4ba) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptya3\x00', 0x82e343, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/stats/shmem_fallback\x00', 0x101700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)=""/4096, 0x1000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x802, 0x1) socket(0x25, 0x6, 0x0) r1 = openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, &(0x7f0000000180), 0x82, 0x0) ioctl$auto_BINDER_CTL_ADD(r1, 0xc1086201, &(0x7f0000001080)={"f2b0e77c15814ccbd31cbfc1be00641bdbc5590fa669dd00000100000000004bbe432f9f1498df37b37b5682b4a45de81ed08d2421f6d4dd6277f0cbf348d3b6d6d237ddee104e8bdd3134c07c645c9e1058f625c2250683796a35edbe0dc9a99f436e05c010101fda81b336aa520d52594a7366f205857c7c4f08af2874e4835f0088b46db869b0de065b53d4470ba071c622eb6d174c6b8afcfed6e66c011ee02367a79b51bfc45a9d624b0533400f784075094246f86a42fc2183ebab9eaf7f0101d2b1555b3d2c1213c9cec2d78dd57a1d628d93f379a7b9e65d4ec3a7ab8b7ccd5db4670f000061c8316fbe84aa6f2900", 0x3, 0xf}) mmap$auto(0x0, 0x20009, 0x20004000000000db, 0xeb1, 0x401, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r2, 0x0, 0x20) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x0, 0x5, 0x0) pipe$auto(0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0x8208ae63, r3) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000001040)='/proc/thread-self/fail-nth\x00', 0x133e02, 0x0) bpf$auto(0xfffff001, &(0x7f0000000000)=@bpf_attr_3={0xa332, 0x2, 0x7, 0x3, 0xfffffbff, 0x2, 0x1, 0x4, 0x7, "0108a5172d53c2dc73bf58e1423b2178", 0x0, 0x9, 0xffffffffffffffff, 0x81, 0x8, 0x81, 0xb03, 0x0, 0x3ff, 0x7, @attach_prog_fd, 0xb5f3, 0x630, 0x57d, 0x9, 0x8}, 0xa3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) 17m39.11254097s ago: executing program 4 (id=2346): mmap$auto(0x1000000006, 0x20009, 0xdf, 0xeb5, 0x401, 0x8000) syz_clone(0x800800, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x1000, 0x5, 0x0, 0x8, 0x2) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00', 0x129302, 0x0) write$auto(r1, 0x0, 0x800f) sendmmsg$auto(0x3, 0x0, 0x9aa, 0x7000002) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) mmap$auto(0x6, 0x100, 0x4000001000df, 0x18, r0, 0x4008000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/nbd13/queue/max_segment_size\x00', 0x400000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x80000000020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x6}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc1}, 0x2, 0x0, 0x4, 0x1}, 0x5}, 0x7, 0x8) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram2/integrity/read_verify\x00', 0x7095c2, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x10, r2, 0x5) dup2$auto(r2, r0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r5, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) 17m38.799992894s ago: executing program 34 (id=2346): mmap$auto(0x1000000006, 0x20009, 0xdf, 0xeb5, 0x401, 0x8000) syz_clone(0x800800, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$auto(0x1000, 0x5, 0x0, 0x8, 0x2) r0 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/hugepages-512kB/enabled\x00', 0x129302, 0x0) write$auto(r1, 0x0, 0x800f) sendmmsg$auto(0x3, 0x0, 0x9aa, 0x7000002) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) mmap$auto(0x6, 0x100, 0x4000001000df, 0x18, r0, 0x4008000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/block/nbd13/queue/max_segment_size\x00', 0x400000, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x80000000020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x24, 0x0, 0x300, 0x70bd2c, 0x25dfdbfe, {}, [@BATADV_ATTR_HOP_PENALTY={0x0, 0x35, 0x6}, @BATADV_ATTR_TT_CRC32={0x8, 0x13, 0x10001}]}, 0x24}, 0x1, 0x0, 0x0, 0x4c894}, 0x4008800) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='!\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x44}, 0x40090) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc1}, 0x2, 0x0, 0x4, 0x1}, 0x5}, 0x7, 0x8) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram2/integrity/read_verify\x00', 0x7095c2, 0x0) mmap$auto(0x0, 0x400009, 0xdf, 0x10, r2, 0x5) dup2$auto(r2, r0) mremap$auto(0x4000, 0xb8, 0x13fd4, 0x3, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) write$auto(r5, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) 11m53.456300603s ago: executing program 6 (id=4457): r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/loop2/poll_stat\x00', 0x101000, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) userfaultfd$auto(0x816) mlockall$auto(0x7) mprotect$auto(0x0, 0x8000000000000001, 0x6) r1 = clone3$auto(0x0, 0x40) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0xffc, 0x100000004, 0x100000002, 0x0, 0x7ff, 0x5) setuid$auto(0xe) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_map_fd=r3}, 0xa3) socket(0xa, 0x3, 0xff) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={0x2c, r5, 0x13, 0x70bd2c, 0x25dfdbdd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r7}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x7ffffffc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) r8 = prctl$auto_PR_SET_MDWE(0x41, 0x2, r1, 0x2, 0x9) bpf$auto(0x3, &(0x7f00000001c0)=@bpf_attr_5={@target_ifindex=r7, r3, 0x8, 0x5, r8, @relative_fd=r4, 0xb4}, 0x8) pread64$auto(r0, 0x0, 0x1000f429, 0x100) 11m52.707276962s ago: executing program 6 (id=4469): open(0x0, 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) fcntl$auto(0x3, 0x400, 0x2) ioperm$auto(0x90d5, 0xc, 0x2) 11m52.515806511s ago: executing program 6 (id=4472): mmap$auto(0x0, 0x8, 0xffb, 0x8000000008011, 0x3, 0x0) 11m52.403274215s ago: executing program 6 (id=4464): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = open(&(0x7f0000000040)='./cgroup.cpu/cgroup.procs\x00', 0x101840, 0x33903f3ada88772b) read$auto(r0, 0x0, 0x1) write$auto(0x3, 0x0, 0xffd8) 11m52.278372769s ago: executing program 6 (id=4466): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/pcm0p/sub1/status\x00', 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_iter_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace_options\x00', 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(r1, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x108) write$auto(0x3, 0x0, 0xfffffdef) r2 = openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, 0x0, 0x80001, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x2, 0x5ae, 0x5, 0x7, 0x6, 0x10000, 0x1, 0xa, 0x8, 0x6, 0x9, 0x5, 0x4, 0x1ff, 0x2, 0x8, 0x10000, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x10000]}, 0x6, 0x1000000) bpf$auto(0x12, &(0x7f0000000040)=@link_detach, 0x26) ioctl$auto_NVRAM_SETCKS(r2, 0x7041, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) geteuid() socket(0x28, 0x1, 0x0) r3 = getsockopt$auto_SO_SNDBUF(r0, 0x5c5, 0x7, &(0x7f0000000040)='/proc/thread-self/net/can/rcvlist_eff\x00', &(0x7f0000000080)=0x8) ioctl$auto_RTC_AIE_OFF(r3, 0x7002, 0x0) pread64$auto(r0, 0x0, 0x594c, 0x9fffffffd) 11m51.686240569s ago: executing program 6 (id=4477): r0 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x600, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x880) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xdc) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x3, 0x9) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) ioctl$auto(r1, 0x5502, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f00000000c0)=""/215, 0xd7) socket(0x28, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyw1\x00', 0x20000, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20940, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x8, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0xffffffff80000000, 0xffffffffffffffff, 0x300000000000000, 0x80000003, 0x8, 0x0, 0x5, 0x10001]}, 0x0) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mmap$auto(0x0, 0x80000000c, 0x4000000000df, 0x44eb2, r1, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) write$auto_proc_loginuid_operations_base(r0, 0x0, 0x0) 11m36.290167747s ago: executing program 35 (id=4477): r0 = openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x600, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x880) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0xdc) close_range$auto(0x2, 0x8, 0x0) socket(0x23, 0x3, 0x9) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000001c0), 0x600, 0x0) ioctl$auto(r1, 0x5502, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x106) read$auto_v4l2_fops_v4l2_dev(0xffffffffffffffff, &(0x7f00000000c0)=""/215, 0xd7) socket(0x28, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ptyw1\x00', 0x20000, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20940, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x8, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0xffffffff80000000, 0xffffffffffffffff, 0x300000000000000, 0x80000003, 0x8, 0x0, 0x5, 0x10001]}, 0x0) close_range$auto(0x2, 0x8, 0x0) shmget$auto(0x400, 0x10563, 0x568c12f2) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) shmdt$auto(&(0x7f0000000000)=':-h!/-^@(\']@%]/\x00') clone$auto(0x1002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) mmap$auto(0x0, 0x80000000c, 0x4000000000df, 0x44eb2, r1, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x20040894) write$auto_proc_loginuid_operations_base(r0, 0x0, 0x0) 8m44.304565672s ago: executing program 7 (id=5412): prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x6, 0x7) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r0, 0xc0045405, &(0x7f0000000180)) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_SET_DEVICE(r1, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="210026bd7000fadbdf25010000000800088004004080"], 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x80) ioctl$auto_SNDCTL_TMR_CONTINUE(r0, 0x5404, &(0x7f0000000100)="0537af53ed9030cd811d944ea9fa540bcc2e935093eb0a8bf7a36a7a49241f82525a20d768f76bd71f261e20c4f095dac74a15a83e4bc7292aa6b0f487f3c7136462e3e943aadf737f432b53eda491d572d3358a8aa6596c8581a929526e22cb0505fbb9780a2a47af540f7909743b") write$auto(0x3, 0x0, 0xfffffdef) mbind$auto(0x100, 0x2091ce, 0x0, 0x0, 0x6, 0x2) prctl$auto_PR_SET_MM_START_STACK(0x46, 0x5, 0x0, 0xcd8, 0x100) close_range$auto(0x2, 0xa, 0x0) unshare$auto(0x40000080) prctl$auto(0x23, 0x3, 0x2009, 0x0, 0x0) socket(0xa, 0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x10, 0x401, 0x300000000000) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x82, 0x0) clock_adjtime$auto(0x6a, &(0x7f00000002c0)={0xc, 0x0, 0x1fffc0, 0x7, 0x0, 0xffff, 0x51, 0x0, 0x7, 0x9, 0x1, {0xf3e, 0x6}, 0x2, 0x5, 0x100000001, 0x4, 0x0, 0x9d98, 0x4, 0x0, 0x0, 0x8}) r2 = socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_setup$auto(0x6, 0x0) write$auto(0xca, &(0x7f0000000140)='\x04>\x01\x01\b\x1a\x1e`0x0}) epoll_create$auto(0x3e) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x100) socketpair$auto(0x8, 0x7, 0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NFC_CMD_GET_SE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xa}]}, 0x1c}}, 0x24000000) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) ioctl$auto(r4, 0x400454ca, 0x38) ioctl$auto_TCFLSH2(r3, 0x8926, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3b3da7541f6379a90e400200000008000300", @ANYRES32=r2, @ANYBLOB="0a000900aaaaaaaaaa11000008000b00ffffffff"], 0x30}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) 8m25.893731077s ago: executing program 36 (id=5426): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) epoll_create$auto(0x3e) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0x100) socketpair$auto(0x8, 0x7, 0x1, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sendmsg$auto_NFC_CMD_GET_SE(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfd, {}, [@NFC_ATTR_LLC_PARAM_RW={0x5, 0x10, 0xa}]}, 0x1c}}, 0x24000000) r4 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) r5 = setfsuid$auto(0xee00) r6 = setfsuid$auto(0xee01) setresuid$auto(r5, r6, r5) ioctl$auto(r4, 0x400454ca, 0x38) ioctl$auto_TCFLSH2(r3, 0x8926, 0x0) sendmsg$auto_BATADV_CMD_TP_METER(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3b3da7541f6379a90e400200000008000300", @ANYRES32=r2, @ANYBLOB="0a000900aaaaaaaaaa11000008000b00ffffffff"], 0x30}, 0x1, 0x100000001000000, 0x0, 0x2019}, 0x8080) 27.483391866s ago: executing program 2 (id=7632): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1, 0x7, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) 26.714951894s ago: executing program 2 (id=7636): openat$auto_transaction_log_fops_(0xffffffffffffff9c, 0x0, 0x2800, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000000000600010000000a0005000000000000000000b3fc010000000000000000000a000100000000000000000006000600050000000800", @ANYRES32=0x0, @ANYBLOB="0800040003"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="f20000", @ANYBLOB='.'], 0x1ac}, 0x1, 0x0, 0x0, 0x24040840}, 0x94) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000280), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket(0x29, 0x5, 0x0) 24.19896106s ago: executing program 2 (id=7645): syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0xe8) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/x86/tlb_single_page_flush_ceiling\x00', 0x1, 0x0) write$auto_fops_init_pkru_pkeys(r1, 0x0, 0x2d) r2 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) socket(0xa, 0x2, 0x0) r3 = socket(0xa, 0x3, 0xff) connect$auto(r3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) madvise$auto(0x0, 0xffffffffffff0004, 0x19) r4 = getpgid$auto(0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x11, 0x0, 0x0) sendmsg$auto_IPVS_CMD_SET_CONFIG(r2, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000001900)={0x14bc, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x1496, 0x3, 0x0, 0x1, [@generic="0ae556ea96b6aac20a2df353bb08ecd46a7f933d1b2db8ce9af498e5ff3a90bfe88cc0b1e2e58b0f02ef589c88720e1e867e4da84e9bd27e4e7c2e138ed9b259006d0495ac1d03abe76afce408df49a9a4d2c79e8416718b6ea62d96bfe4d485b5898da01e69d213069313429fe114911f46d2480f", @nested={0x1111, 0x43, 0x0, 0x1, [@typed={0x8, 0x119, 0x0, 0x0, @pid}, @nested={0x4, 0x5e}, @generic="1b6180a9a251a5f7309b5b6b8af06ed32ba9a6c9b4845494259b2eee6bf6aceccc80f3c1ac1e002fbb719b8a15e2fe551c7c038ef05802e35f6c3566675751865ee538b9e57ac3c3ac0668a4b3929be439d1ef4cdd24c7415036f9d02f18333fe5fccf1ccb5a61d1e047fa29c9119ab9bbea68f91fc936910e843c7c568c765383c07ce45c309fbf64924e2567db900905537a8003e022f7a044", @typed={0x12, 0x14b, 0x0, 0x0, @str='/dev/snapshot\x00'}, @generic="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", @generic="627d93aa42f40ad39e72806204876c62645d32e22db38cf26b22937449b0acd596f82d21bbab5d200dbe014bca9443d8ef194821a06d9151f0027a098a56ce0fe0fb799d8437668b53f1752dcb19744e1fc8cd"]}, @nested={0x5e, 0x57, 0x0, 0x1, [@typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@mcast2}, @typed={0x14, 0xa3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0x53}, @generic="0baa9962d832bfc7a1598f73f290676159d5d963f0ef3f3694e8c4769e09a76a5681c9ac27bac98715719137d62e"]}, @generic="5b4616330f58eec7166fdb5686acea5e1073d07a6eb7b91e3eb3ad97fb23c2aa1e37e9c9253c0115d7c961fed3edb90a3043132ec20bdf79be7ae10344c3f520acf5783d0eb3c0e11c56c454f6919da28e35da492fd3bd376918d0d1db7541fe3db6ce2b222834198cbee80a7b8b144af6a3fea938b06a01046b00b17c01cfd123", @generic="0a8c25de9c6f31e39a6bcfad2f409551b2465a4c1003d3a46dc8740e9d4e1794644249f256fb7ba7b4475e04825ebcdadeb3d0824157cddbcb471d53880652048b58569b6e4c33ce64cb48ab36673752d6980118e2b398045597a158fb9fcc22e5ba4cdb205e8980f4ca5620bc9270655998e15fd4623e70d35bb1c3c2d4386f44f98217d65dc1b99d0995bb4e2f", @generic="1eecf67e42a1d61f4e23ea7292fa8f0b334f8861a5905219476eac17430e2a6298df7834dd39fea33d5140246b3c8cede37cc5d84006fce1b686f9aa64fbd490f5bdb6e8810fecef991664c54e804cd59dc1e3ce75bb3e4f7e12a5b3c9a7022868b3de8ec536b30525e4728d360702f8d5b0e5ddfdaefc630b8e9dcec51b6492186a79401903db258e75a34ca1c0f85639b3bdb06d35b5d220556679c0e28bdd", @generic="894e299d6260a47e11406008a472f6a9725b9fef7c39d86f448a815b8fe227", @nested={0x2c, 0x12, 0x0, 0x1, [@generic="dc641df00c5037ab80751ccffa98cf32a2937c8ff7aa7c751f859c9c5dba646cfa7737c23e800600"]}, @typed={0x8, 0xae, 0x0, 0x0, @pid=r4}, @generic="81b8b1fc1c32599be89ba74119c806ea27f3aa5e9c5679a312270e7e81db4890806dea78fbeef252fe7f1b53f45998db15af37e140c0980a2d7fbcd426c4d79699daf726d795c9ee038fbb00977b0cb662122831dd9d93cd3f297d8ba7f0c40aa0be2f15b6a064c90ed84f6e5fbe01f3bf592c3a924602291753fa87cf056ef96dc23104d826ebf0cb14701dd5813e112b131f931c47eb04b4122e7add7159a42977ab9a220fea"]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x14bc}}, 0x4c0a4) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) setgroups$auto(0xe32, 0x0) 18.544878329s ago: executing program 2 (id=7669): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000080), 0x40400, 0x0) r1 = gettid() kill$auto(r1, 0x7) prctl$auto_PR_SCHED_CORE_SHARE_TO(0x2, 0x2, r1, 0xf39, 0x7) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_net_shaper(&(0x7f0000000000), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000500)={'netdevsim0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NET_SHAPER_CMD_CAP_GET(r6, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, r4, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NET_SHAPER_A_CAPS_IFINDEX={0x8, 0x1, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044080}, 0x20000000) sendmsg$auto_TIPC_NL_KEY_FLUSH(r0, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="fd557453", @ANYRES16=r2, @ANYBLOB="010028bd7000ffdbdf2518000000"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x0) 14.836060784s ago: executing program 2 (id=7679): readv$auto(0x3, &(0x7f00000001c0)={0x0, 0xf7}, 0x7) 11.962689149s ago: executing program 2 (id=7696): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/if_inet6\x00', 0x40100, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000080)=""/104, 0x68) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x1, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000010c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)={0x14, r2, 0x301, 0x4070bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x30000881}, 0xc040810) recvmsg$auto(r1, 0x0, 0x4) ioctl$auto(0x3, 0x80045500, 0x38) openat$auto_iommufd_fops_main(0xffffffffffffff9c, &(0x7f0000000400), 0x80001, 0x0) ioctl$auto(r0, 0x3b8a, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0x40103d0b, 0x0) 4.199226575s ago: executing program 1 (id=7737): r0 = socket(0x2, 0x2, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYRES8, @ANYRES8], 0x18}}, 0x200080c0) r2 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NCSI_CMD_SEND_CMD(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r2, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x91}, 0x41) newfstatat$auto(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)={0xfffffffffffffff8, 0x6, 0x1, 0x613, 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x2, 0x8000000000000000, 0x4, 0xef8d, 0xfffffffffffffffb, 0xfffffffffffffff8, 0x4, 0x9, 0x9}, 0x7f) msgctl$auto_MSG_STAT_ANY(0x773, 0xd, &(0x7f0000000340)={{0x6, 0x0, 0xee00, 0x8f46, 0x1, 0x6, 0x10}, &(0x7f0000000280)=0xb6, &(0x7f0000000300), 0x8, 0x9, 0x2, 0x0, 0x2, 0x2, 0x5, 0x67, @raw=0x1, @inferred=0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'dummy0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_UDP_GET_REMOTEIP(r6, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000002580)={0x24, r7, 0x9ec6579d452c1f15, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x25, 0x0, 0x0, @uid}]}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc000}, 0x20000080) sendmsg$auto_NCSI_CMD_CLEAR_INTERFACE(r0, &(0x7f0000001080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001040)={&(0x7f0000000400)={0xc38, r2, 0x200, 0x70bd27, 0x25dfdbff, {}, [@NCSI_ATTR_PACKAGE_LIST={0x1c9, 0x2, 0x0, 0x1, [@typed={0xc, 0x43, 0x0, 0x0, @u64=0x10001}, @typed={0x8, 0xdb, 0x0, 0x0, @u32=0xffff}, @typed={0xc, 0xd6, 0x0, 0x0, @u64=0x1000}, @typed={0x8, 0x8e, 0x0, 0x0, @u32=0x8001}, @nested={0x103, 0xaa, 0x0, 0x1, [@typed={0x4, 0xbc}, @nested={0x4, 0xe}, @typed={0x8, 0xdd, 0x0, 0x0, @uid=r3}, @generic="65807136fcf094f1f9d64a9b3911c73d77f2635c60a24ec449248f4b955cf9511aac7a8218083c7590b6102e1c1ce44063d3a8b85e0b856c255f3fc751ecfb61283af5bfaa090ce300ebbd8c454e807a25bef8a5b0d86ab8f1f67148f0f636fd232c88db9d5033632ecfab17578d108ce5ee95a74afc95e09b57310de21fa0e28a08689214d000bc47f5c25e6577f7ea8f50546734f12b2966ae2f35cad208bf3e118a71ad955d9b3abbfd6873508ec876c9a28092559c9439522a92fb2c4c932fb8c1cec8d6268d2c0666", @nested={0x4, 0x74}, @typed={0xc, 0x9a, 0x0, 0x0, @u64=0xec6}, @typed={0x14, 0xe9, 0x0, 0x0, @ipv6=@mcast2}]}, @typed={0x6, 0xf, 0x0, 0x0, @str=':\x00'}, @generic="ab4f661677ac7b90fc42457042c37c978877e49fd78f8dc5b58736d097e9099971c275c56295d352c65b0be44d529e6df1888dfe9fbad1ad38cb8ce2e1cc668ae40add7921bd20d98673a34075b95ca952f1686e1b4884eddbd65965d4206b358f81fc04ef5e5bda9534de6088c9027b3dc0329de976384e0c59cc1600187eed3b", @typed={0x8, 0xd0, 0x0, 0x0, @fd=r1}, @typed={0x8, 0x36, 0x0, 0x0, @uid=r4}]}, @NCSI_ATTR_CHANNEL_ID={0x8}, @NCSI_ATTR_DATA={0x413, 0x5, "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"}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r5}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_DATA={0x620, 0x5, "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"}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_PACKAGE_ID={0x8, 0x3, 0x5}, @NCSI_ATTR_MULTI_FLAG={0x4}]}, 0xc38}, 0x1, 0x0, 0x0, 0x8054}, 0xc80) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r8 = socket(0x10, 0x2, 0xc) r9 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x14, r9, 0x10, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0xc00}}, 0x14}}, 0x10004010) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) lsm_list_modules$auto(0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x1000088) recvmmsg$auto(0x3, 0x0, 0x8, 0x0, 0x0) r10 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/nbd6\x00', 0x8001, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) ioctl$auto_PAGEMAP_SCAN(r10, 0xc0606610, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmmsg$auto(r10, 0x0, 0x9a6, 0x0) 3.227920262s ago: executing program 1 (id=7742): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) 3.144434653s ago: executing program 1 (id=7744): sendmsg$auto_GTP_CMD_ECHOREQ(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="01002abd7000fbdbdf250300000008000100feffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000d4) sched_setaffinity$auto(0x1, 0x1, &(0x7f0000000000)=0x1200000000008a) socket(0x10, 0x2, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0xfffffffd) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x8800) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf250400000014001a80ffff04800c000180"], 0x28}, 0x1, 0x0, 0x0, 0x894}, 0x4) futex_waitv$auto(&(0x7f0000000040)={0xf, 0x105d93, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62b9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b", @ANYRES8], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r1 = fanotify_init$auto(0x401, 0x1) close_range$auto(r1, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) bind$auto(0x3, &(0x7f0000000080)=@tipc=@name={0x1e, 0x2, 0x3, {{0x42, 0x3}, 0x3}}, 0x6a) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x1002, 0x100000000000ffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) pwrite64$auto(r2, &(0x7f0000000080)='\vX\xb5\"\xa5p\xe6\x1eRN8\x90\x86\xd9e\x1cJ\x99\x00\x11:\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xd7\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xc0\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6c\xc6\xb2Jg\x01JZ\xbb\xff\xff\xff\xff0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1e;8\xed\xf6L\x05\xe8X\xaf\xe2\xe3\xd3\xc5:\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]\xff\xff\v\xff\xff\xff\xff\xff\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1', 0x7, 0x0) r3 = socket(0x2, 0x1, 0x84) setsockopt$auto(r3, 0x84, 0x17, 0x0, 0x27) write$auto(r0, 0x0, 0x100082) 2.880824915s ago: executing program 5 (id=7746): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x6, 0x7500000000000000) write$auto(r0, &(0x7f0000000000)='\'\x00', 0x4) mmap$auto(0x0, 0x3, 0xfffffffffffffffe, 0x12, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x180b01, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2000, 0x0) socket(0x2c, 0x5, 0x0) ioctl$auto_SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f0000000180)) ioctl$auto_SNDCTL_TMR_TEMPO(r1, 0xc0045405, &(0x7f00000001c0)="1ab7") r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_SET_DEVICE(r2, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x841}, 0x80) write$auto(0x3, 0x0, 0xfffffdef) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r3 = semctl$auto_SEM_INFO(0x3, 0xfffffff9, 0x13, 0x8) prctl$auto_PR_SET_MM_START_STACK(0x46, 0x5, r3, 0xcd8, 0x100) madvise$auto(0x0, 0x20499e, 0x9) openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/dri/0000:00:02.0/encoder-0/bridges\x00', 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x40046205, 0x9) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) close_range$auto(0x2, 0x8, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x8002, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/ip_local_port_range\x00', 0x20202, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 2.556673949s ago: executing program 1 (id=7748): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getrandom$auto(0x0, 0x6000000, 0x3) close_range$auto(0x2, 0xffffffffffffffff, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000980)='/dev/snd/controlC0\x00', 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/machinecheck/machinecheck0/monarch_timeout\x00', 0x2, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)="33aa0d7191af", 0x6) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x1, 0x0, 0x800) r2 = gettid() kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) kill$auto(r2, 0x7) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) bind$auto(0x3, &(0x7f0000000040)=@can, 0x6a) 2.234825124s ago: executing program 1 (id=7749): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = getpgrp(0xffffffffffffffff) socket(0x1e, 0x1, 0x0) setsockopt$auto(0x3, 0x6, 0x100000000, 0xfffffffffffffffc, 0xa) prctl$auto_PR_PPC_GET_DEXCR(0x48, 0x6, r0, 0x3, 0x9ed) pwrite64$auto(0xc8, 0x0, 0x6, 0x7a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlock$auto(0x1000, 0x6) pselect6$auto(0x8000, &(0x7f0000000080)={[0x800, 0x7f1, 0xb, 0xb9, 0x7, 0x7, 0x28, 0x2, 0x100, 0x4, 0x7, 0xffffffffffff6ee4, 0x80, 0x47, 0x3, 0x40]}, &(0x7f0000000100)={[0xfffffffffffffffc, 0xffff, 0x101, 0x4, 0xb, 0x0, 0x3f8b, 0xc, 0x2, 0x2, 0x7, 0x20000000007f, 0x0, 0x0, 0x7fffffffffffffff, 0x6]}, &(0x7f0000000180)={[0x5d58, 0x7, 0xa5, 0x7f, 0xffffffffffffff63, 0x6, 0xfffffffffffffffd, 0x2001, 0x4, 0x7, 0x3, 0x8000, 0xa, 0x101, 0x4, 0x9]}, &(0x7f0000000200)={0x6, 0xac}, &(0x7f0000000240)="84564c8c26b8144fd4d3e1ecb7942bbed10faff85baff45164fe66cd970aa99ce6e0b82e3f049231ba73698898fcd2a65389893a8ce8b267d7aa4f5258122e0b18ac67ffde635cac8164af89d15c5b3222a32a0e03b46c0b57abb954eb9a7ba2e851d345c9e7319f0334e91d93a1a639c9a157cbd953f98a055c6326e49c3691aa27e73928cfc94b6ca85e02c62ac8fc9925f5c6481c62e36169492d6741aa7e32fbc03e9391f9b9b275e7e9551b938d5b80bafbdc1dd37bfb2772dbc29cf87b41fa609e535de02906ee62739ad3f141062547") madvise$auto(0x0, 0x200007, 0x19) ioperm$auto(0x7, 0x6, 0x1) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 1.63508407s ago: executing program 5 (id=7752): mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) (fail_nth: 6) 1.523967091s ago: executing program 5 (id=7753): r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x59, 0x7) ioctl$auto_SG_GET_LOW_DMA(0xffffffffffffffff, 0x227a, &(0x7f0000000040)) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000040)="5f74ab2fc43781e047140a5cbc3ac5229b90633d9cddda9efb1f2c3d5d1e63f3fb5acf079b9336319d009cb514679a42eaca52b81c166d19625d173c26ece6542f2fb29712f4fb9072fc432b4cf3e6f5a7f3c9f91ee88ba5fa11d48fd3658e8f44f8423b4cd02bbec912ed34f9f4b19b03d4c62b24ede44c0c76c34edf7bde061903c2ee4c64110ac668239fa53ba42933ae74c3d173663248ff0945dd2e405e0d378b5a8e4643a7bc3b35a7248431450ca8901467ea6dc5d86de1e90f869f6a04ac10043676f3b2c7f1339b2d7468133fb8447d17846b6b78079ecc31d7d0f74caa4a3db1ac4d312bfdb34bd331f1f771a2396108561a52153d63a7b2a3a077a7e4c1a22bcb23e1f3e511fee310baa67904d2aad4d6671e8b77c7720e37e84e0efecb60a35f188cbe8b8b2fb3967b78aa482aabb103f23083baa9b2ae653731d5993db4054233dea4af25795e12eb4d6b046bdeea6adce8626e0def15dd32b0ec16a85d93e1dea980794033f4b46973062c64c0209f9d3efc6ea7704c8e8dfea8cdfbe2cb1e367bf634a1952190e0660994f79f0c622d47ee8f93ce1c2852db907ae68a29bcc960b26e0e634173287fd012c4bb3063c41d35c92e896b44080bc5a98e90907cd1d01cc0708019cc1c93c71f29bfe841c873ad2aa0565dfaeb86c8b8e58ea2075de2a562ba1b5dc4ca452df21f25453b7c7f9a3e31547f4e803cefbac3b94715f2ab1f9fc66570244472f2f29deb9bdf6dc5b18d54e3c2264f9598f2ea749d170a66d351acf003c3f37fe74a09a8a964ce2818e4b4efd1eb0e3bca5dfd2a053eeb5735b96d282d2e03866bd6581b5e5e541c74f0b92b932b234ac117342f156b4b23fc6dcbc92ada00ce404f54443b6e7fdac9acb79e5258a865ced633ff5356d13a3e9923bcd8e6d177c9fb8618f9393798d90d70c78207e40f95bb2b0a9308f29f4331bbdfc1021dface5a740473b462c47286fee1c9d0036c78134e108b5b218d3022fd277e1cdf0cdf8cd4b37d74c8dd47e00e50fcf8d336978a0e7624f94b8fdcd1c9459201231f343c7cb602083aa5e1aea8974a9e22d77cb94cae6c89e239bacfe656d9b0948de480ce2ba3b4dbcb180089d5eb0f8f481e02f7d4628e9134b6e52881572a398e4edd6f01f90983826d721dddc7d4ba3f293288ba54f696fa25cc2f8721c3e380dd04bf05801f90019498601fcbcea6aa6a2d7983e6823f480185ef9c3b4ed19c4f94c108067c89d69bc4e0da0112280ecd0caff8a454fb3e6655dc6a35cdd053aef882e403458754f5e84bd2210f18a61106af8c5a2c18dc48ff87cfda6d545014009a167570f0550e5121d0bdf4b20a1177b708e5515ee33db3baf29633440999ddd36eb0299a1efcd8934ab60c1a88d9db6fa0d2b3f0bf12e87630e0dc5eddca8f291ad85141391e6f9fe56ee4ddb39a1ac7a573cb69ec14f012ea0b721df3ea40747d1130a61802e859519ae1bc5a3673105fa87485f88b8981a3a208a3576848c2df152a023f5e573c867b43b10247336b110956eb28e5288d7aa19219e8324857cdf6d17530385720afd5a1ffd23aa1bd061b73caafa05afdd1441040989d081814635347f1d55669b1c38be4698e3a085e2010e35d2747b4e39ef4920f58d6b4585d737c13221a44ad5543099bb0ab228722ef9cbc0d621178012495837d6a220eeaaf498ccc01", 0xfe04) 1.521899057s ago: executing program 1 (id=7754): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = socket(0xa, 0x2, 0x0) setsockopt$auto(r0, 0x29, 0x30, 0x0, 0x56b) r1 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ILA_CMD_DEL(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r1, 0x1, 0x70bd21, 0x25dfdbfb, {}, [@ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0xd}, @ILA_ATTR_LOCATOR_MATCH={0xc}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x5}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x5}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x3}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1ff}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/zram0/initstate\x00', 0x101000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x14, 0x944, 0x1ffe0, 0x3, 0x6, 0x2, 0x9, 0x5, 0xfff, 0x7, 0x8001, 0x5, 0x5, 0x3, 0x40, 0x7, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6, [0x0, 0x2, 0x0, 0x400000000, 0x0, 0x0, 0x0, 0x0, 0x1000000000000, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x0, 0xfffffffffffffffd, 0x8, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x4, 0x0, 0xffffffff, 0x0, 0x10]}, 0x1fe, 0x81) close_range$auto(0x2, 0x8, 0x0) r3 = socket(0x11, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x1, @multicast}, 0x6a) getpeername$auto(r3, 0x0, 0x0) ioctl$auto_TIOCMSET2(0xffffffffffffffff, 0x5418, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_DEBUG_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x2c, r6, 0x1, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_DEBUG_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) execveat$auto(0x6, &(0x7f0000000000)='[[]$)%*++{#\x00', 0x0, 0x0, 0x1000) r7 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000040), 0x2881, 0x0) write$auto_ecryptfs_miscdev_fops_miscdev(r7, &(0x7f0000000080)="390d00a741ee", 0x6) getpid() 1.175006786s ago: executing program 5 (id=7755): mmap$auto(0x8, 0xf88, 0xdf, 0x20009b72, 0xffffffffffffffff, 0x100000001) r0 = openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/attr/sockcreate\x00', 0x6400, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000004c0)={'veth0_vlan\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_MACSEC_CMD_DEL_RXSC(r3, &(0x7f0000007500)={0x0, 0x0, &(0x7f00000074c0)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01"], 0x2c}, 0x1, 0x0, 0x0, 0xc0c1}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000700), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010027bd7000fddbdf255100000008000300", @ANYRES32=r6], 0x1c}, 0x1, 0x0, 0x0, 0x4080}, 0x20000000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TIPC_NL_NET_GET(r7, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x20000000) bpf$auto(0x9, &(0x7f0000000000)=@bpf_attr_11={0xffff, 0x1, 0x9, 0x6, 0x3ff, 0xa7, 0xb, r0}, 0x9) r8 = socket(0x1f, 0x5, 0x0) mmap$auto(0x1, 0x85, 0x40e5, 0xebd, 0x405, 0x7ffd) r9 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/ubifs/chk_general\x00', 0x10800, 0x0) read$auto_dfs_global_fops_debug(r9, &(0x7f00000001c0)=""/187, 0xbb) getcwd$auto(0x0, 0xffffffffffffffff) r10 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/v4l-subdev7\x00', 0x102f03, 0x0) poll$auto(&(0x7f0000000480)={r10, 0xffff, 0x29}, 0x6, 0x8) bind$auto(r8, &(0x7f0000000280)=@sco={0x1f, @none}, 0x6a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) iopl$auto(0x3) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xb, 0x80000, 0x8b) socket(0xa, 0x2, 0x0) 1.038332852s ago: executing program 8 (id=7756): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) r1 = mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x56a, 0xb275, 0x0) r2 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x2202, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_WRITE(r2, 0x40085503, &(0x7f0000000600)={0xd, 0x0, 0x3}) preadv$auto(r2, &(0x7f0000000100)={0x0, 0x20000dd}, 0x1, 0x2, 0x5) mmap$auto(0x0, 0x2020009, 0xfffffffffffffffd, 0xeb1, 0xffff7ffffffffffa, 0x8) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty2\x00', 0x20500, 0x0) ioctl$auto_TIOCSWINSZ2(r3, 0x5414, 0x0) sendmsg$auto_TIPC_NL_KEY_FLUSH(r1, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f00000000c0)={0x14, r0, 0x1, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x0) 922.040968ms ago: executing program 8 (id=7757): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) epoll_create$auto(0x3e) write$auto(r0, &(0x7f0000000000)='/dev/nullb0\x00', 0xb2) close_range$auto(0x2, r0, 0x0) 834.936663ms ago: executing program 8 (id=7758): ioctl$auto_VHOST_SET_VRING_CALL(0xffffffffffffffff, 0x4008af21, &(0x7f0000000040)={0x9, 0xffffffffffffffff}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xebd, r0, 0x8000) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x803}, 0x4, 0x8) (async) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) (async) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x2, 0x0) (async) io_uring_setup$auto(0x59, 0x0) 683.32569ms ago: executing program 8 (id=7759): ioctl$auto(0xffffffffffffffff, 0x80045439, 0xffffffffffffffff) r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, 0x0, 0x1fe, 0x81) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) readv$auto(r0, 0x0, 0x3) r1 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r1, 0x400, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000140)=""/12, 0xc) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(0x2, 0x8, 0x0) (fail_nth: 1) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f0000001f40)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 461.209927ms ago: executing program 5 (id=7760): request_key$auto_KEY_SPEC_REQUESTOR_KEYRING(0x0, 0x0, 0x0, 0xfffffffffffffff8) mmap$auto(0x0, 0x420009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/zram0/mem_used_max\x00', 0xa081, 0x0) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) r1 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) setrlimit$auto(0xb, 0x0) mincore$auto(0xff7, 0x8001, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/radio28\x00', 0x101100, 0x0) mmap$auto(0x0, 0x9, 0x9cad, 0x8012, 0x3, 0x8000) read$auto(r1, &(0x7f0000000000)='+-\x00', 0x5) r2 = gettid() ioctl$auto_EVIOCGEFFECTS(r1, 0x80044584, &(0x7f00000000c0)=0x8) rt_tgsigqueueinfo$auto(0x0, r2, 0x21, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x40000, 0x0) readv$auto(r3, 0x0, 0x4) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, 0x0, 0x8000, 0x0) mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) 367.530185ms ago: executing program 5 (id=7761): openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mmap$auto(0x9, 0x20008, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4038ae7a, r0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) 39.374143ms ago: executing program 8 (id=7762): r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYRESOCT=r0, @ANYBLOB='h\x005'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, &(0x7f0000000000), 0x620081, 0x0) write$auto_ctl_device_fops_user(r1, &(0x7f0000000340)="a504ff4c280e43904055ceb3bc98cf2af453126b06d1f8b678ad4700b35e33bf24e0c6269dd4fcfeafaacd781a02e63a0f9cf51e53d742c6cd3e1a4531a69c151e3714d2418d3a55d79a114e8309e48778a229eef16577bd021ce7b48a29a4e1c32f5f0c3393287d", 0x68) 0s ago: executing program 8 (id=7763): r0 = socket(0x10, 0x2, 0xc) r1 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000002c0), 0xffffffffffffffff) mmap$auto(0x0, 0x2000c, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x7) (async) close_range$auto(r0, r0, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x5, 0x2, 0x7, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x72, 0x0, &(0x7f0000000100)=0x22a) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) (async) r3 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r3, 0x0, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}}, 0x40000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/cpu/smt/control\x00', 0x2ab42, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) (async) write$auto(0x3, 0x0, 0x100082) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='q\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="4cb245184f86db27df250a000a"], 0xf8}}, 0x10004010) socket(0x2, 0x3, 0x2) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mlockall$auto(0x7) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) (async) mmap$auto(0x0, 0x1, 0x1, 0x44eb2, 0x3, 0x300000000000) setsockopt$auto(0x3, 0x0, 0xce, 0xfffffffffffffffc, 0x3) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) (async) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/vmallocinfo\x00', 0x100182, 0x0) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) (async) openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/oom_score_adj\x00', 0x80000, 0x0) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) (async) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x1}, 0x7) ioperm$auto(0x7fb, 0x1, 0x4000007) open_tree$auto(0xffffffffffffffff, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x40047452, 0x0) close_range$auto(0x2, 0x8, 0x0) kernel console output (not intermixed with test programs): ] dump_stack_lvl+0x16c/0x1f0 [ 1444.328632][ T980] should_fail_ex+0x50a/0x650 [ 1444.328655][ T980] _copy_from_user+0x2e/0xd0 [ 1444.328678][ T980] map_update_elem+0x744/0x8f0 [ 1444.328708][ T980] ? __pfx_map_update_elem+0x10/0x10 [ 1444.328734][ T980] ? __might_fault+0xe3/0x190 [ 1444.328769][ T980] __sys_bpf+0x14bb/0x49c0 [ 1444.328799][ T980] ? lock_acquire+0x2f/0xb0 [ 1444.328826][ T980] ? ksys_write+0x12b/0x250 [ 1444.328854][ T980] ? __pfx___sys_bpf+0x10/0x10 [ 1444.328884][ T980] ? vfs_write+0x306/0x1150 [ 1444.328913][ T980] ? __pfx_vfs_write+0x10/0x10 [ 1444.328940][ T980] ? do_sys_openat2+0xb1/0x1e0 [ 1444.328966][ T980] ? ksys_write+0x1ba/0x250 [ 1444.328993][ T980] ? __pfx_ksys_write+0x10/0x10 [ 1444.329022][ T980] __x64_sys_bpf+0x78/0xc0 [ 1444.329057][ T980] do_syscall_64+0xcd/0x250 [ 1444.329100][ T980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.329131][ T980] RIP: 0033:0x7f7881b8d169 [ 1444.329147][ T980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1444.329168][ T980] RSP: 002b:00007f7882904038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1444.329189][ T980] RAX: ffffffffffffffda RBX: 00007f7881da5fa0 RCX: 00007f7881b8d169 [ 1444.329204][ T980] RDX: 000000000000000c RSI: 00002000000001c0 RDI: 0000000000000002 [ 1444.329218][ T980] RBP: 00007f7882904090 R08: 0000000000000000 R09: 0000000000000000 [ 1444.329231][ T980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1444.329244][ T980] R13: 0000000000000000 R14: 00007f7881da5fa0 R15: 00007ffed5bbb6c8 [ 1444.329264][ T980] [ 1444.688576][ T987] netlink: 36 bytes leftover after parsing attributes in process `syz.1.7150'. [ 1444.877366][ T998] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7154'. [ 1445.286788][ T1005] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7156'. [ 1445.919258][ T5147] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 1446.077616][ T31] audit: type=1800 audit(4294973094.113:420): pid=1001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.7155" name="dbroot" dev="configfs" ino=148853 res=0 errno=0 [ 1446.099886][ C0] vkms_vblank_simulate: vblank timer overrun [ 1447.127603][ T1067] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7166'. [ 1447.996869][T28050] Process accounting resumed [ 1448.274221][ T1097] netlink: 16 bytes leftover after parsing attributes in process `syz.1.7179'. [ 1448.349958][ T1097] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7179'. [ 1448.432653][ T1098] HfR: entered promiscuous mode [ 1448.753431][ T1069] vivid-003: ================= START STATUS ================= [ 1448.868344][ T1069] vivid-003: Radio HW Seek Mode: Bounded [ 1448.972176][ T1069] vivid-003: Radio Programmable HW Seek: false [ 1449.045154][ T1069] vivid-003: RDS Rx I/O Mode: Block I/O [ 1449.051329][ T1069] vivid-003: Generate RBDS Instead of RDS: false [ 1449.197438][ T1069] vivid-003: RDS Reception: true [ 1449.348522][ T1069] vivid-003: RDS Program Type: 0 inactive [ 1449.434749][ T1069] vivid-003: RDS PS Name: inactive [ 1449.551023][ T1069] vivid-003: RDS Radio Text: inactive [ 1449.594762][ T1069] vivid-003: RDS Traffic Announcement: false inactive [ 1449.681491][ T1069] vivid-003: RDS Traffic Program: false inactive [ 1449.794277][ T1069] vivid-003: RDS Music: false inactive [ 1449.833807][ T1069] vivid-003: ================== END STATUS ================== [ 1452.349056][ T1174] netlink: 206 bytes leftover after parsing attributes in process `syz.1.7204'. [ 1454.641474][ T1228] zswap: compressor not available [ 1454.759937][ T1242] Invalid ELF header len 1 [ 1454.943982][ T1183] vivid-003: ================= START STATUS ================= [ 1454.976000][ T1183] vivid-003: Radio HW Seek Mode: Bounded [ 1454.982252][ T1183] vivid-003: Radio Programmable HW Seek: false [ 1455.026109][ T1183] vivid-003: RDS Rx I/O Mode: Block I/O [ 1455.059122][ T1183] vivid-003: Generate RBDS Instead of RDS: false [ 1455.095472][ T1183] vivid-003: RDS Reception: true [ 1455.164349][ T1183] vivid-003: RDS Program Type: 0 inactive [ 1455.238693][ T1183] vivid-003: RDS PS Name: inactive [ 1455.295111][ T1183] vivid-003: RDS Radio Text: inactive [ 1455.346983][ T1183] vivid-003: RDS Traffic Announcement: false inactive [ 1455.364667][ T1251] syz_tun: tun_chr_ioctl cmd 1074025678 [ 1455.395133][ T1251] syz_tun: group set to 23693 [ 1455.433833][ T1183] vivid-003: RDS Traffic Program: false inactive [ 1455.492192][ T1183] vivid-003: RDS Music: false inactive [ 1455.525551][ T1183] vivid-003: ================== END STATUS ================== [ 1455.902713][ T1258] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7221'. [ 1455.984728][ T5147] Bluetooth: hci4: command 0x0406 tx timeout [ 1457.020317][ T1293] FAULT_INJECTION: forcing a failure. [ 1457.020317][ T1293] name failslab, interval 1, probability 0, space 0, times 0 [ 1457.204673][ T1293] CPU: 0 UID: 0 PID: 1293 Comm: syz.5.7227 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1457.204707][ T1293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1457.204722][ T1293] Call Trace: [ 1457.204729][ T1293] [ 1457.204738][ T1293] dump_stack_lvl+0x16c/0x1f0 [ 1457.204782][ T1293] should_fail_ex+0x50a/0x650 [ 1457.204806][ T1293] ? fs_reclaim_acquire+0xae/0x150 [ 1457.204837][ T1293] should_failslab+0xc2/0x120 [ 1457.204859][ T1293] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1457.204896][ T1293] ? dup_fd+0x4d/0xb90 [ 1457.204931][ T1293] dup_fd+0x4d/0xb90 [ 1457.204966][ T1293] ? apparmor_task_alloc+0x2c2/0x3b0 [ 1457.204991][ T1293] copy_process+0x25d3/0x8c50 [ 1457.205015][ T1293] ? _kstrtoull+0x146/0x200 [ 1457.205047][ T1293] ? __pfx__kstrtoull+0x10/0x10 [ 1457.205079][ T1293] ? lock_release+0x4e2/0x6f0 [ 1457.205117][ T1293] ? __pfx_copy_process+0x10/0x10 [ 1457.205139][ T1293] ? rcu_is_watching+0x12/0xc0 [ 1457.205164][ T1293] ? lock_release+0x4e2/0x6f0 [ 1457.205196][ T1293] ? get_pid_task+0xfc/0x250 [ 1457.205222][ T1293] ? __pfx_lock_release+0x10/0x10 [ 1457.205255][ T1293] ? trace_lock_acquire+0x14e/0x1f0 [ 1457.205282][ T1293] ? get_pid_task+0x35/0x250 [ 1457.205310][ T1293] ? rcu_is_watching+0x12/0xc0 [ 1457.205334][ T1293] ? lock_release+0x4e2/0x6f0 [ 1457.205365][ T1293] ? ksys_write+0x12b/0x250 [ 1457.205399][ T1293] kernel_clone+0xfd/0x960 [ 1457.205424][ T1293] ? lock_release+0x4e2/0x6f0 [ 1457.205455][ T1293] ? __pfx_kernel_clone+0x10/0x10 [ 1457.205482][ T1293] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 1457.205519][ T1293] __do_sys_clone+0xcf/0x120 [ 1457.205541][ T1293] ? __pfx___do_sys_clone+0x10/0x10 [ 1457.205568][ T1293] ? ksys_write+0x1ba/0x250 [ 1457.205599][ T1293] ? __pfx_ksys_write+0x10/0x10 [ 1457.205631][ T1293] ? rcu_is_watching+0x12/0xc0 [ 1457.205655][ T1293] ? rcu_is_watching+0x12/0xc0 [ 1457.205680][ T1293] do_syscall_64+0xcd/0x250 [ 1457.205716][ T1293] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1457.205750][ T1293] RIP: 0033:0x7fb35ab8d169 [ 1457.205771][ T1293] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1457.205794][ T1293] RSP: 002b:00007fb35ba05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1457.205816][ T1293] RAX: ffffffffffffffda RBX: 00007fb35ada5fa0 RCX: 00007fb35ab8d169 [ 1457.205832][ T1293] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000000006cb0a3c8 [ 1457.205847][ T1293] RBP: 00007fb35ba05090 R08: 0000000000000008 R09: 0000000000000000 [ 1457.205862][ T1293] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1457.205877][ T1293] R13: 0000000000000000 R14: 00007fb35ada5fa0 R15: 00007ffd45e95c38 [ 1457.205898][ T1293] [ 1458.069417][ T1301] netlink: 206 bytes leftover after parsing attributes in process `syz.5.7230'. [ 1458.462610][ T1308] syz_tun: tun_chr_ioctl cmd 1074025673 [ 1459.368894][ T1337] netlink: 206 bytes leftover after parsing attributes in process `syz.2.7241'. [ 1459.391132][ T1320] base_sock_release(ffff8880748e9e00) sk=ffff888028f2f000 [ 1459.866103][ T1349] syz_tun: tun_chr_ioctl cmd 1074025673 [ 1460.229382][ T1356] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7247'. [ 1460.573264][T23502] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 1460.654813][ T31] audit: type=1800 audit(4294973116.675:421): pid=1350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.7244" name="dbroot" dev="configfs" ino=150237 res=0 errno=0 [ 1461.285292][ T1375] FAULT_INJECTION: forcing a failure. [ 1461.285292][ T1375] name failslab, interval 1, probability 0, space 0, times 0 [ 1461.389559][ T1375] CPU: 0 UID: 0 PID: 1375 Comm: syz.5.7253 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1461.389589][ T1375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1461.389603][ T1375] Call Trace: [ 1461.389610][ T1375] [ 1461.389618][ T1375] dump_stack_lvl+0x16c/0x1f0 [ 1461.389656][ T1375] should_fail_ex+0x50a/0x650 [ 1461.389678][ T1375] ? fs_reclaim_acquire+0xae/0x150 [ 1461.389707][ T1375] ? tomoyo_realpath_from_path+0xb9/0x720 [ 1461.389741][ T1375] should_failslab+0xc2/0x120 [ 1461.389762][ T1375] __kmalloc_noprof+0xcb/0x510 [ 1461.389799][ T1375] tomoyo_realpath_from_path+0xb9/0x720 [ 1461.389832][ T1375] ? tomoyo_path_number_perm+0x235/0x590 [ 1461.389860][ T1375] ? tomoyo_path_number_perm+0x235/0x590 [ 1461.389889][ T1375] tomoyo_path_number_perm+0x248/0x590 [ 1461.389916][ T1375] ? tomoyo_path_number_perm+0x235/0x590 [ 1461.389944][ T1375] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1461.389972][ T1375] ? rcu_is_watching+0x12/0xc0 [ 1461.389999][ T1375] ? preempt_count_add+0x76/0x150 [ 1461.390034][ T1375] ? __pfx_lock_release+0x10/0x10 [ 1461.390065][ T1375] ? trace_lock_acquire+0x14e/0x1f0 [ 1461.390091][ T1375] ? __fget_files+0x40/0x3a0 [ 1461.390124][ T1375] ? lock_acquire+0x2f/0xb0 [ 1461.390173][ T1375] ? __fget_files+0x40/0x3a0 [ 1461.390208][ T1375] ? __fget_files+0x206/0x3a0 [ 1461.390243][ T1375] security_file_ioctl+0x9b/0x240 [ 1461.390294][ T1375] __x64_sys_ioctl+0xb7/0x200 [ 1461.390323][ T1375] do_syscall_64+0xcd/0x250 [ 1461.390360][ T1375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.390394][ T1375] RIP: 0033:0x7fb35ab8d169 [ 1461.390412][ T1375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1461.390435][ T1375] RSP: 002b:00007fb35ba05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1461.390458][ T1375] RAX: ffffffffffffffda RBX: 00007fb35ada5fa0 RCX: 00007fb35ab8d169 [ 1461.390474][ T1375] RDX: 0000000000000000 RSI: 0000000040103d0b RDI: 0000000000000004 [ 1461.390489][ T1375] RBP: 00007fb35ba05090 R08: 0000000000000000 R09: 0000000000000000 [ 1461.390503][ T1375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1461.390529][ T1375] R13: 0000000000000000 R14: 00007fb35ada5fa0 R15: 00007ffd45e95c38 [ 1461.390550][ T1375] [ 1461.390558][ T1375] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1461.688117][ T1377] netlink: 206 bytes leftover after parsing attributes in process `syz.8.7254'. [ 1462.488141][ T1384] FAULT_INJECTION: forcing a failure. [ 1462.488141][ T1384] name failslab, interval 1, probability 0, space 0, times 0 [ 1462.584234][ T1384] CPU: 0 UID: 0 PID: 1384 Comm: syz.1.7257 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1462.584266][ T1384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1462.584280][ T1384] Call Trace: [ 1462.584287][ T1384] [ 1462.584295][ T1384] dump_stack_lvl+0x16c/0x1f0 [ 1462.584352][ T1384] should_fail_ex+0x50a/0x650 [ 1462.584374][ T1384] ? fs_reclaim_acquire+0xae/0x150 [ 1462.584404][ T1384] ? btrfs_scan_one_device+0x21b/0xb40 [ 1462.584434][ T1384] should_failslab+0xc2/0x120 [ 1462.584456][ T1384] __kmalloc_cache_noprof+0x68/0x410 [ 1462.584492][ T1384] btrfs_scan_one_device+0x21b/0xb40 [ 1462.584522][ T1384] ? __might_fault+0xe3/0x190 [ 1462.584558][ T1384] ? __pfx_btrfs_scan_one_device+0x10/0x10 [ 1462.584587][ T1384] ? __might_fault+0xe3/0x190 [ 1462.584614][ T1384] btrfs_control_ioctl+0x1f6/0x3c0 [ 1462.584635][ T1384] ? __pfx_btrfs_control_ioctl+0x10/0x10 [ 1462.584656][ T1384] ? __fget_files+0x206/0x3a0 [ 1462.584687][ T1384] ? __pfx_btrfs_control_ioctl+0x10/0x10 [ 1462.584709][ T1384] __x64_sys_ioctl+0x190/0x200 [ 1462.584735][ T1384] do_syscall_64+0xcd/0x250 [ 1462.584767][ T1384] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.584799][ T1384] RIP: 0033:0x7f1b7c98d169 [ 1462.584814][ T1384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1462.584835][ T1384] RSP: 002b:00007f1b7d873038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1462.584855][ T1384] RAX: ffffffffffffffda RBX: 00007f1b7cba5fa0 RCX: 00007f1b7c98d169 [ 1462.584870][ T1384] RDX: 0000200000000040 RSI: 0000000090009427 RDI: 0000000000000003 [ 1462.584884][ T1384] RBP: 00007f1b7d873090 R08: 0000000000000000 R09: 0000000000000000 [ 1462.584897][ T1384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1462.584910][ T1384] R13: 0000000000000000 R14: 00007f1b7cba5fa0 R15: 00007ffca8c0f248 [ 1462.584930][ T1384] [ 1464.376097][ T1404] dlm: process syz.1.7262 (1404) version mismatch user (1291781285.-1874653656.-1278323392) kernel (6.0.2) [ 1465.365297][ T1410] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7264'. [ 1466.911743][ T1449] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7275'. [ 1467.582379][ T1458] syz_tun: tun_chr_ioctl cmd 1074025680 [ 1468.221756][ T1480] dlm: process syz.1.7279 (1480) version mismatch user (1291781285.-1874653656.-1278323392) kernel (6.0.2) [ 1469.059656][ T1497] FAULT_INJECTION: forcing a failure. [ 1469.059656][ T1497] name failslab, interval 1, probability 0, space 0, times 0 [ 1469.183331][ T1497] CPU: 0 UID: 0 PID: 1497 Comm: syz.2.7284 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1469.183365][ T1497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1469.183379][ T1497] Call Trace: [ 1469.183386][ T1497] [ 1469.183395][ T1497] dump_stack_lvl+0x16c/0x1f0 [ 1469.183434][ T1497] should_fail_ex+0x50a/0x650 [ 1469.183456][ T1497] ? fs_reclaim_acquire+0xae/0x150 [ 1469.183492][ T1497] should_failslab+0xc2/0x120 [ 1469.183514][ T1497] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1469.183549][ T1497] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1469.183572][ T1497] ? can_rx_register+0x585/0x700 [ 1469.183599][ T1497] can_rx_register+0x585/0x700 [ 1469.183624][ T1497] ? __pfx_raw_rcv+0x10/0x10 [ 1469.183653][ T1497] ? __pfx_can_rx_register+0x10/0x10 [ 1469.183682][ T1497] ? raw_bind+0xa7/0xe20 [ 1469.183710][ T1497] ? rcu_is_watching+0x12/0xc0 [ 1469.183736][ T1497] raw_enable_filters+0xde/0x210 [ 1469.183768][ T1497] raw_enable_allfilters+0x8d/0x2a0 [ 1469.183801][ T1497] raw_bind+0x489/0xe20 [ 1469.183832][ T1497] __sys_bind+0x213/0x260 [ 1469.183865][ T1497] ? __pfx___sys_bind+0x10/0x10 [ 1469.183895][ T1497] ? __fget_files+0x206/0x3a0 [ 1469.183934][ T1497] ? __pfx_ksys_write+0x10/0x10 [ 1469.183967][ T1497] ? rcu_is_watching+0x12/0xc0 [ 1469.183993][ T1497] __x64_sys_bind+0x72/0xb0 [ 1469.184024][ T1497] do_syscall_64+0xcd/0x250 [ 1469.184061][ T1497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1469.184095][ T1497] RIP: 0033:0x7fb00778d169 [ 1469.184113][ T1497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1469.184136][ T1497] RSP: 002b:00007fb008661038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 1469.184158][ T1497] RAX: ffffffffffffffda RBX: 00007fb0079a6080 RCX: 00007fb00778d169 [ 1469.184174][ T1497] RDX: 000000000000006a RSI: 0000200000000040 RDI: 0000000000000003 [ 1469.184189][ T1497] RBP: 00007fb008661090 R08: 0000000000000000 R09: 0000000000000000 [ 1469.184204][ T1497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1469.184219][ T1497] R13: 0000000000000000 R14: 00007fb0079a6080 R15: 00007fffe96a74c8 [ 1469.184240][ T1497] [ 1470.979792][ T1494] syz_tun: tun_chr_ioctl cmd 1074025678 [ 1470.987843][ T1494] syz_tun: group set to 23693 [ 1471.238323][ T1508] syz_tun: tun_chr_ioctl cmd 1074025673 [ 1471.544722][ T1502] syz_tun: tun_chr_ioctl cmd 1074025678 [ 1471.573048][ T1502] syz_tun: group set to 23693 [ 1471.982049][ T1529] netlink: 206 bytes leftover after parsing attributes in process `syz.2.7296'. [ 1473.822404][ T1555] syz_tun: tun_chr_ioctl cmd 1074025678 [ 1473.874342][ T1555] syz_tun: group set to 23693 [ 1474.083016][ T1576] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7311'. [ 1475.047713][ T1606] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7315'. [ 1475.375684][ T1612] syz_tun: tun_chr_ioctl cmd 1074025678 [ 1475.381824][ T1612] syz_tun: group set to 23693 [ 1476.288282][ T1614] syz_tun: tun_chr_ioctl cmd 1074025678 [ 1476.334138][ T1614] syz_tun: group set to 23693 [ 1476.568123][ T1623] syz_tun: tun_chr_ioctl cmd 1074025678 [ 1476.612065][ T1623] syz_tun: group set to 23693 [ 1477.392965][ T1660] syz_tun: tun_chr_ioctl cmd 1074025673 [ 1477.986860][ T1666] FAULT_INJECTION: forcing a failure. [ 1477.986860][ T1666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1478.074047][ T1666] CPU: 0 UID: 0 PID: 1666 Comm: syz.8.7334 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1478.074077][ T1666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1478.074091][ T1666] Call Trace: [ 1478.074097][ T1666] [ 1478.074105][ T1666] dump_stack_lvl+0x16c/0x1f0 [ 1478.074140][ T1666] should_fail_ex+0x50a/0x650 [ 1478.074163][ T1666] _copy_from_user+0x2e/0xd0 [ 1478.074187][ T1666] map_update_elem+0x58b/0x8f0 [ 1478.074217][ T1666] ? __pfx_map_update_elem+0x10/0x10 [ 1478.074243][ T1666] ? __might_fault+0xe3/0x190 [ 1478.074268][ T1666] __sys_bpf+0x14bb/0x49c0 [ 1478.074300][ T1666] ? lock_acquire+0x2f/0xb0 [ 1478.074329][ T1666] ? ksys_write+0x12b/0x250 [ 1478.074360][ T1666] ? __pfx___sys_bpf+0x10/0x10 [ 1478.074391][ T1666] ? vfs_write+0x306/0x1150 [ 1478.074422][ T1666] ? __pfx_vfs_write+0x10/0x10 [ 1478.074451][ T1666] ? do_sys_openat2+0xb1/0x1e0 [ 1478.074479][ T1666] ? ksys_write+0x1ba/0x250 [ 1478.074532][ T1666] ? __pfx_ksys_write+0x10/0x10 [ 1478.074584][ T1666] __x64_sys_bpf+0x78/0xc0 [ 1478.074622][ T1666] do_syscall_64+0xcd/0x250 [ 1478.074657][ T1666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1478.074690][ T1666] RIP: 0033:0x7f7881b8d169 [ 1478.074706][ T1666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1478.074728][ T1666] RSP: 002b:00007f7882904038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1478.074750][ T1666] RAX: ffffffffffffffda RBX: 00007f7881da5fa0 RCX: 00007f7881b8d169 [ 1478.074765][ T1666] RDX: 000000000000000c RSI: 00002000000001c0 RDI: 0000000000000002 [ 1478.074780][ T1666] RBP: 00007f7882904090 R08: 0000000000000000 R09: 0000000000000000 [ 1478.074794][ T1666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1478.074808][ T1666] R13: 0000000000000000 R14: 00007f7881da5fa0 R15: 00007ffed5bbb6c8 [ 1478.074828][ T1666] [ 1480.008518][ T1690] netlink: 326 bytes leftover after parsing attributes in process `syz.2.7342'. [ 1480.857266][ T1703] FAULT_INJECTION: forcing a failure. [ 1480.857266][ T1703] name failslab, interval 1, probability 0, space 0, times 0 [ 1481.024357][ T1703] CPU: 0 UID: 0 PID: 1703 Comm: syz.1.7347 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1481.024390][ T1703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1481.024404][ T1703] Call Trace: [ 1481.024412][ T1703] [ 1481.024420][ T1703] dump_stack_lvl+0x16c/0x1f0 [ 1481.024460][ T1703] should_fail_ex+0x50a/0x650 [ 1481.024483][ T1703] ? fs_reclaim_acquire+0xae/0x150 [ 1481.024513][ T1703] ? lsm_blob_alloc+0x68/0x90 [ 1481.024550][ T1703] should_failslab+0xc2/0x120 [ 1481.024572][ T1703] __kmalloc_noprof+0xcb/0x510 [ 1481.024610][ T1703] lsm_blob_alloc+0x68/0x90 [ 1481.024647][ T1703] security_prepare_creds+0x30/0x270 [ 1481.024682][ T1703] prepare_creds+0x540/0x750 [ 1481.024713][ T1703] __sys_setfsgid+0xe3/0x380 [ 1481.024735][ T1703] do_syscall_64+0xcd/0x250 [ 1481.024770][ T1703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1481.024802][ T1703] RIP: 0033:0x7f1b7c98d169 [ 1481.024819][ T1703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1481.024843][ T1703] RSP: 002b:00007f1b7d873038 EFLAGS: 00000246 ORIG_RAX: 000000000000007b [ 1481.024865][ T1703] RAX: ffffffffffffffda RBX: 00007f1b7cba5fa0 RCX: 00007f1b7c98d169 [ 1481.024881][ T1703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1481.024895][ T1703] RBP: 00007f1b7ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1481.024910][ T1703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1481.024924][ T1703] R13: 0000000000000000 R14: 00007f1b7cba5fa0 R15: 00007ffca8c0f248 [ 1481.024944][ T1703] [ 1481.394138][ T1718] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7353'. [ 1482.084583][ T1734] FAULT_INJECTION: forcing a failure. [ 1482.084583][ T1734] name failslab, interval 1, probability 0, space 0, times 0 [ 1482.184419][ T1734] CPU: 0 UID: 0 PID: 1734 Comm: syz.2.7360 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1482.184452][ T1734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1482.184467][ T1734] Call Trace: [ 1482.184473][ T1734] [ 1482.184482][ T1734] dump_stack_lvl+0x16c/0x1f0 [ 1482.184520][ T1734] should_fail_ex+0x50a/0x650 [ 1482.184540][ T1734] ? fs_reclaim_acquire+0xae/0x150 [ 1482.184568][ T1734] should_failslab+0xc2/0x120 [ 1482.184588][ T1734] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1482.184621][ T1734] ? getname_kernel+0x52/0x370 [ 1482.184643][ T1734] getname_kernel+0x52/0x370 [ 1482.184663][ T1734] kern_path+0x1d/0x50 [ 1482.184692][ T1734] btrfs_scan_one_device+0x23c/0xb40 [ 1482.184720][ T1734] ? __might_fault+0xe3/0x190 [ 1482.184742][ T1734] ? __pfx_btrfs_scan_one_device+0x10/0x10 [ 1482.184769][ T1734] ? __might_fault+0xe3/0x190 [ 1482.184794][ T1734] btrfs_control_ioctl+0x1f6/0x3c0 [ 1482.184815][ T1734] ? __pfx_btrfs_control_ioctl+0x10/0x10 [ 1482.184836][ T1734] ? __fget_files+0x206/0x3a0 [ 1482.184868][ T1734] ? __pfx_btrfs_control_ioctl+0x10/0x10 [ 1482.184890][ T1734] __x64_sys_ioctl+0x190/0x200 [ 1482.184916][ T1734] do_syscall_64+0xcd/0x250 [ 1482.184949][ T1734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1482.184980][ T1734] RIP: 0033:0x7fb00778d169 [ 1482.184996][ T1734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1482.185019][ T1734] RSP: 002b:00007fb008682038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1482.185040][ T1734] RAX: ffffffffffffffda RBX: 00007fb0079a5fa0 RCX: 00007fb00778d169 [ 1482.185056][ T1734] RDX: 0000200000000040 RSI: 0000000090009427 RDI: 0000000000000003 [ 1482.185071][ T1734] RBP: 00007fb008682090 R08: 0000000000000000 R09: 0000000000000000 [ 1482.185085][ T1734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1482.185099][ T1734] R13: 0000000000000000 R14: 00007fb0079a5fa0 R15: 00007fffe96a74c8 [ 1482.185120][ T1734] [ 1482.983988][ T1740] syz_tun: tun_chr_ioctl cmd 1074025673 [ 1483.348919][ T1729] syz_tun: tun_chr_ioctl cmd 1074025678 [ 1483.407551][ T1729] syz_tun: group set to 23693 [ 1483.721947][ T1743] ERROR: Out of memory at tomoyo_memory_ok. [ 1483.770906][ T1743] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /usr/sbin/sshd /usr/sbin/sshd /bin/sh /root/syz-executor /root/syz-executor /newroot/181/file0' not defined. [ 1484.992151][ T1778] zswap: compressor not available [ 1485.462899][ T1796] zswap: compressor not available [ 1486.285137][T23502] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 1486.658789][ T1816] syz_tun: tun_chr_ioctl cmd 1074025673 [ 1486.800902][ T31] audit: type=1800 audit(4294973150.827:422): pid=1774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7371" name="dbroot" dev="configfs" ino=152622 res=0 errno=0 [ 1488.555609][ T1854] syz_tun: tun_chr_ioctl cmd 1074025673 [ 1489.139654][ T1868] syz.8.7398: vmalloc error: size 8192, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1489.283316][ T1868] CPU: 0 UID: 0 PID: 1868 Comm: syz.8.7398 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1489.283349][ T1868] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1489.283363][ T1868] Call Trace: [ 1489.283370][ T1868] [ 1489.283379][ T1868] dump_stack_lvl+0x16c/0x1f0 [ 1489.283424][ T1868] warn_alloc+0x24d/0x3a0 [ 1489.283461][ T1868] ? __pfx_warn_alloc+0x10/0x10 [ 1489.283498][ T1868] ? alloc_pages_mpol+0x25b/0x540 [ 1489.283521][ T1868] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1489.283546][ T1868] ? __pfx_alloc_pages_bulk_mempolicy_noprof+0x10/0x10 [ 1489.283576][ T1868] ? rcu_is_watching+0x12/0xc0 [ 1489.283601][ T1868] ? trace_kmalloc+0x2d/0xd0 [ 1489.283633][ T1868] __vmalloc_node_range_noprof+0x12bd/0x1530 [ 1489.283676][ T1868] ? kernel_clone+0xfd/0x960 [ 1489.283700][ T1868] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1489.283734][ T1868] ? rcu_is_watching+0x12/0xc0 [ 1489.283758][ T1868] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 1489.283785][ T1868] ? kmem_cache_alloc_node_noprof+0x272/0x3c0 [ 1489.283822][ T1868] ? copy_process+0x4be/0x8c50 [ 1489.283843][ T1868] ? kernel_clone+0xfd/0x960 [ 1489.283865][ T1868] copy_process+0x2ef2/0x8c50 [ 1489.283886][ T1868] ? kernel_clone+0xfd/0x960 [ 1489.283908][ T1868] ? _kstrtoull+0x146/0x200 [ 1489.283940][ T1868] ? __pfx__kstrtoull+0x10/0x10 [ 1489.283971][ T1868] ? lock_release+0x4e2/0x6f0 [ 1489.284004][ T1868] ? __pfx_lock_release+0x10/0x10 [ 1489.284036][ T1868] ? trace_lock_acquire+0x14e/0x1f0 [ 1489.284067][ T1868] ? __pfx_copy_process+0x10/0x10 [ 1489.284088][ T1868] ? rcu_is_watching+0x12/0xc0 [ 1489.284112][ T1868] ? lock_release+0x4e2/0x6f0 [ 1489.284143][ T1868] ? get_pid_task+0xfc/0x250 [ 1489.284170][ T1868] ? __pfx_lock_release+0x10/0x10 [ 1489.284202][ T1868] ? trace_lock_acquire+0x14e/0x1f0 [ 1489.284228][ T1868] ? get_pid_task+0x35/0x250 [ 1489.284256][ T1868] ? rcu_is_watching+0x12/0xc0 [ 1489.284280][ T1868] ? lock_release+0x4e2/0x6f0 [ 1489.284311][ T1868] ? ksys_write+0x12b/0x250 [ 1489.284345][ T1868] kernel_clone+0xfd/0x960 [ 1489.284365][ T1868] ? lock_release+0x4e2/0x6f0 [ 1489.284398][ T1868] ? __pfx_kernel_clone+0x10/0x10 [ 1489.284428][ T1868] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 1489.284465][ T1868] __do_sys_clone+0xcf/0x120 [ 1489.284487][ T1868] ? __pfx___do_sys_clone+0x10/0x10 [ 1489.284515][ T1868] ? ksys_write+0x1ba/0x250 [ 1489.284546][ T1868] ? __pfx_ksys_write+0x10/0x10 [ 1489.284578][ T1868] ? rcu_is_watching+0x12/0xc0 [ 1489.284602][ T1868] ? rcu_is_watching+0x12/0xc0 [ 1489.284627][ T1868] do_syscall_64+0xcd/0x250 [ 1489.284663][ T1868] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1489.284697][ T1868] RIP: 0033:0x7f7881b8d169 [ 1489.284714][ T1868] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1489.284737][ T1868] RSP: 002b:00007f7882904038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1489.284771][ T1868] RAX: ffffffffffffffda RBX: 00007f7881da5fa0 RCX: 00007f7881b8d169 [ 1489.284787][ T1868] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000000006cb0a3c8 [ 1489.284801][ T1868] RBP: 00007f7882904090 R08: 0000000000000008 R09: 0000000000000000 [ 1489.284816][ T1868] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1489.284830][ T1868] R13: 0000000000000000 R14: 00007f7881da5fa0 R15: 00007ffed5bbb6c8 [ 1489.284850][ T1868] [ 1490.444801][ T1874] FAULT_INJECTION: forcing a failure. [ 1490.444801][ T1874] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1490.504069][ T1874] CPU: 0 UID: 0 PID: 1874 Comm: syz.5.7401 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1490.504100][ T1874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1490.504114][ T1874] Call Trace: [ 1490.504120][ T1874] [ 1490.504128][ T1874] dump_stack_lvl+0x16c/0x1f0 [ 1490.504164][ T1874] should_fail_ex+0x50a/0x650 [ 1490.504187][ T1874] get_futex_key+0x1c3/0x1000 [ 1490.504213][ T1874] ? __pfx_get_futex_key+0x10/0x10 [ 1490.504237][ T1874] ? __mutex_trylock_common+0xea/0x250 [ 1490.504286][ T1874] ? __pfx___mutex_trylock_common+0x10/0x10 [ 1490.504319][ T1874] futex_wake+0xe8/0x4e0 [ 1490.504349][ T1874] ? __pfx_futex_wake+0x10/0x10 [ 1490.504378][ T1874] ? __might_fault+0x13b/0x190 [ 1490.504401][ T1874] ? rcu_is_watching+0x12/0xc0 [ 1490.504424][ T1874] ? lock_release+0x4e2/0x6f0 [ 1490.504454][ T1874] do_futex+0x1e5/0x350 [ 1490.504497][ T1874] ? __pfx_do_futex+0x10/0x10 [ 1490.504524][ T1874] ? __might_fault+0xe3/0x190 [ 1490.504573][ T1874] ? __might_fault+0xe3/0x190 [ 1490.504597][ T1874] mm_release+0x24e/0x300 [ 1490.504631][ T1874] do_exit+0x886/0x2db0 [ 1490.504667][ T1874] ? rcu_is_watching+0x12/0xc0 [ 1490.504690][ T1874] ? lock_release+0x4e2/0x6f0 [ 1490.504721][ T1874] ? get_signal+0x8f7/0x26c0 [ 1490.504756][ T1874] ? __pfx_do_exit+0x10/0x10 [ 1490.504779][ T1874] ? do_raw_spin_lock+0x12d/0x2c0 [ 1490.504800][ T1874] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1490.504823][ T1874] do_group_exit+0xd3/0x2a0 [ 1490.504848][ T1874] get_signal+0x24ed/0x26c0 [ 1490.504883][ T1874] ? rcu_is_watching+0x12/0xc0 [ 1490.504908][ T1874] ? __pfx_get_signal+0x10/0x10 [ 1490.504944][ T1874] ? __pfx_do_futex+0x10/0x10 [ 1490.504970][ T1874] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1490.505007][ T1874] arch_do_signal_or_restart+0x90/0x7e0 [ 1490.505034][ T1874] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1490.505065][ T1874] ? __pfx_do_writev+0x10/0x10 [ 1490.505095][ T1874] ? rcu_is_watching+0x12/0xc0 [ 1490.505119][ T1874] syscall_exit_to_user_mode+0x150/0x2a0 [ 1490.505154][ T1874] do_syscall_64+0xda/0x250 [ 1490.505188][ T1874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1490.505221][ T1874] RIP: 0033:0x7fb35ab8d169 [ 1490.505238][ T1874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1490.505267][ T1874] RSP: 002b:00007fb35ba050e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1490.505289][ T1874] RAX: fffffffffffffe00 RBX: 00007fb35ada5fa8 RCX: 00007fb35ab8d169 [ 1490.505305][ T1874] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb35ada5fa8 [ 1490.505320][ T1874] RBP: 00007fb35ada5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1490.505334][ T1874] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb35ada5fac [ 1490.505348][ T1874] R13: 0000000000000000 R14: 00007ffd45e95b50 R15: 00007ffd45e95c38 [ 1490.505369][ T1874] [ 1491.814965][ T1900] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7409'. [ 1492.228470][ T1903] openvswitch: netlink: IP tunnel dst address not specified [ 1492.515222][ T1868] Mem-Info: [ 1492.518794][ T1868] active_anon:77796 inactive_anon:1080 isolated_anon:0 [ 1492.518794][ T1868] active_file:9888 inactive_file:49807 isolated_file:0 [ 1492.518794][ T1868] unevictable:767 dirty:710 writeback:0 [ 1492.518794][ T1868] slab_reclaimable:11994 slab_unreclaimable:103149 [ 1492.518794][ T1868] mapped:40277 shmem:46440 pagetables:1804 [ 1492.518794][ T1868] sec_pagetables:0 bounce:0 [ 1492.518794][ T1868] kernel_misc_reclaimable:0 [ 1492.518794][ T1868] free:1141038 free_pcp:3230 free_cma:0 [ 1492.659643][ T1917] caif:caif_disconnect_client(): nothing to disconnect [ 1492.975383][ T1868] Node 0 active_anon:304576kB inactive_anon:4320kB active_file:39552kB inactive_file:199220kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:155544kB dirty:1952kB writeback:52kB shmem:177620kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12656kB pagetables:7528kB sec_pagetables:0kB all_unreclaimable? no [ 1493.315707][ T1868] Node 1 active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1532kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1493.751595][ T1868] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1493.965827][ T1943] FAULT_INJECTION: forcing a failure. [ 1493.965827][ T1943] name failslab, interval 1, probability 0, space 0, times 0 [ 1494.331651][ T1943] CPU: 0 UID: 0 PID: 1943 Comm: syz.5.7421 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1494.331682][ T1943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1494.331695][ T1943] Call Trace: [ 1494.331701][ T1943] [ 1494.331709][ T1943] dump_stack_lvl+0x16c/0x1f0 [ 1494.331744][ T1943] should_fail_ex+0x50a/0x650 [ 1494.331765][ T1943] ? fs_reclaim_acquire+0xae/0x150 [ 1494.331793][ T1943] should_failslab+0xc2/0x120 [ 1494.331813][ T1943] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 1494.331846][ T1943] ? btrfs_scan_one_device+0x161/0xb40 [ 1494.331873][ T1943] ? btrfs_control_ioctl+0x1f6/0x3c0 [ 1494.331899][ T1943] ? __d_alloc+0x31/0xaa0 [ 1494.331919][ T1943] __d_alloc+0x31/0xaa0 [ 1494.331938][ T1943] d_alloc+0x4a/0x1e0 [ 1494.331956][ T1943] d_alloc_parallel+0xe7/0x12b0 [ 1494.331982][ T1943] ? rcu_is_watching+0x12/0xc0 [ 1494.332004][ T1943] ? lock_release+0x4e2/0x6f0 [ 1494.332030][ T1943] ? is_bpf_text_address+0x8a/0x1a0 [ 1494.332057][ T1943] ? __pfx_d_alloc_parallel+0x10/0x10 [ 1494.332081][ T1943] ? trace_lock_acquire+0x14e/0x1f0 [ 1494.332122][ T1943] ? lockdep_init_map_type+0x16d/0x7d0 [ 1494.332155][ T1943] ? is_bpf_text_address+0x30/0x1a0 [ 1494.332185][ T1943] ? lockdep_init_map_type+0x16d/0x7d0 [ 1494.332222][ T1943] __lookup_slow+0x194/0x470 [ 1494.332247][ T1943] ? __pfx___lookup_slow+0x10/0x10 [ 1494.332275][ T1943] ? walk_component+0x342/0x5b0 [ 1494.332308][ T1943] ? lookup_fast+0x153/0x5f0 [ 1494.332338][ T1943] walk_component+0x350/0x5b0 [ 1494.332369][ T1943] link_path_walk.part.0.constprop.0+0x669/0xd40 [ 1494.332405][ T1943] path_lookupat+0x93/0x770 [ 1494.332437][ T1943] filename_lookup+0x221/0x5f0 [ 1494.332470][ T1943] ? __pfx_filename_lookup+0x10/0x10 [ 1494.332512][ T1943] ? getname_kernel+0x52/0x370 [ 1494.332533][ T1943] ? __asan_memcpy+0x3c/0x60 [ 1494.332565][ T1943] kern_path+0x35/0x50 [ 1494.332595][ T1943] btrfs_scan_one_device+0x23c/0xb40 [ 1494.332625][ T1943] ? __might_fault+0xe3/0x190 [ 1494.332647][ T1943] ? __pfx_btrfs_scan_one_device+0x10/0x10 [ 1494.332676][ T1943] ? __might_fault+0xe3/0x190 [ 1494.332706][ T1943] btrfs_control_ioctl+0x1f6/0x3c0 [ 1494.332730][ T1943] ? __pfx_btrfs_control_ioctl+0x10/0x10 [ 1494.332752][ T1943] ? __fget_files+0x206/0x3a0 [ 1494.332805][ T1943] ? __pfx_btrfs_control_ioctl+0x10/0x10 [ 1494.332830][ T1943] __x64_sys_ioctl+0x190/0x200 [ 1494.332859][ T1943] do_syscall_64+0xcd/0x250 [ 1494.332900][ T1943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1494.332934][ T1943] RIP: 0033:0x7fb35ab8d169 [ 1494.332951][ T1943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1494.332974][ T1943] RSP: 002b:00007fb35ba05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1494.332996][ T1943] RAX: ffffffffffffffda RBX: 00007fb35ada5fa0 RCX: 00007fb35ab8d169 [ 1494.333012][ T1943] RDX: 0000200000000040 RSI: 0000000090009427 RDI: 0000000000000003 [ 1494.333028][ T1943] RBP: 00007fb35ba05090 R08: 0000000000000000 R09: 0000000000000000 [ 1494.333043][ T1943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1494.333057][ T1943] R13: 0000000000000000 R14: 00007fb35ada5fa0 R15: 00007ffd45e95c38 [ 1494.333079][ T1943] [ 1494.841869][ T1868] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 1494.848481][ T1868] Node 0 DMA32 free:728732kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:195560kB inactive_anon:4320kB active_file:39568kB inactive_file:197688kB unevictable:4084kB writepending:2120kB present:3129332kB managed:2547520kB mlocked:2548kB bounce:0kB free_pcp:36652kB local_pcp:36652kB free_cma:0kB [ 1494.883307][ T1868] lowmem_reserve[]: 0 0 0 0 0 [ 1494.888519][ T1868] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:12kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:12kB free_cma:0kB [ 1494.918302][ T1868] lowmem_reserve[]: 0 0 0 0 0 [ 1494.923490][ T1868] Node 1 Normal free:3902108kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:4kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1532kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:8964kB local_pcp:8964kB free_cma:0kB [ 1494.955953][ T1868] lowmem_reserve[]: 0 0 0 0 0 [ 1494.961127][ T1868] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1494.975053][ T1868] Node 0 DMA32: 5983*4kB (UME) 2732*8kB (UME) 1439*16kB (UME) 1021*32kB (UME) 393*64kB (UME) 736*128kB (UME) 366*256kB (UME) 163*512kB (UME) 73*1024kB (M) 27*2048kB (UME) 49*4096kB (UME) = 728748kB [ 1494.996517][ T1868] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1495.009159][ T1868] Node 1 Normal: 203*4kB (UME) 60*8kB (UME) 71*16kB (UME) 211*32kB (UME) 103*64kB (UME) 36*128kB (UME) 19*256kB (UME) 10*512kB (UME) 3*1024kB (UM) 9*2048kB (UME) 940*4096kB (UM) = 3902108kB [ 1495.034080][ T1945] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7422'. [ 1495.073697][ T1868] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1495.123705][ T1868] Node 0 hugepages_total=3 hugepages_free=3 hugepages_surp=0 hugepages_size=2048kB [ 1495.156929][ T1868] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1495.203740][ T1868] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1495.273736][ T1868] 76111 total pagecache pages [ 1495.278935][ T1868] 7 pages in swap cache [ 1495.283491][ T1868] Free swap = 111884kB [ 1495.314057][ T1949] netlink: 342 bytes leftover after parsing attributes in process `syz.1.7423'. [ 1495.325425][ T1868] Total swap = 124996kB [ 1495.330028][ T1868] 2097051 pages RAM [ 1495.373321][ T1868] 0 pages HighMem/MovableOnly [ 1495.402948][ T1868] 428513 pages reserved [ 1495.417705][ T1868] 0 pages cma reserved [ 1495.670225][ T1956] syz_tun: tun_chr_ioctl cmd 1074025673 [ 1495.844991][ T1954] netlink: zone id is out of range [ 1495.850646][ T1954] netlink: zone id is out of range [ 1496.017634][ T1954] netlink: zone id is out of range [ 1496.023292][ T1954] netlink: zone id is out of range [ 1496.195071][ T1954] netlink: zone id is out of range [ 1496.228766][ T1954] netlink: zone id is out of range [ 1496.359715][ T1954] netlink: zone id is out of range [ 1496.450004][ T1954] netlink: zone id is out of range [ 1496.518802][ T1954] netlink: zone id is out of range [ 1498.362926][T23502] Bluetooth: hci5: unexpected subevent 0x01 length: 4 < 18 [ 1498.978351][ T31] audit: type=1800 audit(4294973171.004:423): pid=1992 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.7435" name="dbroot" dev="configfs" ino=153606 res=0 errno=0 [ 1499.015547][ T1989] FAULT_INJECTION: forcing a failure. [ 1499.015547][ T1989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1499.276804][ T1989] CPU: 0 UID: 0 PID: 1989 Comm: syz.1.7432 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1499.276835][ T1989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1499.276849][ T1989] Call Trace: [ 1499.276855][ T1989] [ 1499.276863][ T1989] dump_stack_lvl+0x16c/0x1f0 [ 1499.276900][ T1989] should_fail_ex+0x50a/0x650 [ 1499.276923][ T1989] strncpy_from_user+0x3b/0x2d0 [ 1499.276957][ T1989] __do_sys_memfd_create+0x1b1/0x8b0 [ 1499.276985][ T1989] do_syscall_64+0xcd/0x250 [ 1499.277019][ T1989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1499.277052][ T1989] RIP: 0033:0x7f1b7c98d169 [ 1499.277067][ T1989] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1499.277090][ T1989] RSP: 002b:00007f1b7d873038 EFLAGS: 00000246 ORIG_RAX: 000000000000013f [ 1499.277110][ T1989] RAX: ffffffffffffffda RBX: 00007f1b7cba5fa0 RCX: 00007f1b7c98d169 [ 1499.277125][ T1989] RDX: 0000000000000000 RSI: 000000000000000e RDI: 0000000000000000 [ 1499.277139][ T1989] RBP: 00007f1b7ca0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1499.277153][ T1989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1499.277166][ T1989] R13: 0000000000000000 R14: 00007f1b7cba5fa0 R15: 00007ffca8c0f248 [ 1499.277186][ T1989] [ 1500.230983][T23502] Bluetooth: hci4: unexpected subevent 0x01 length: 4 < 18 [ 1500.341223][ T31] audit: type=1800 audit(4294973180.373:424): pid=2006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7438" name="dbroot" dev="configfs" ino=153648 res=0 errno=0 [ 1501.585830][ T2048] FAULT_INJECTION: forcing a failure. [ 1501.585830][ T2048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1501.772694][ T2048] CPU: 0 UID: 0 PID: 2048 Comm: syz.5.7448 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1501.772730][ T2048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1501.772744][ T2048] Call Trace: [ 1501.772751][ T2048] [ 1501.772759][ T2048] dump_stack_lvl+0x16c/0x1f0 [ 1501.772819][ T2048] should_fail_ex+0x50a/0x650 [ 1501.772843][ T2048] _copy_from_user+0x2e/0xd0 [ 1501.772867][ T2048] copy_msghdr_from_user+0x99/0x160 [ 1501.772903][ T2048] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1501.772940][ T2048] ? _kstrtoull+0x146/0x200 [ 1501.772970][ T2048] ? __pfx__kstrtoull+0x10/0x10 [ 1501.772999][ T2048] ? lock_release+0x4e2/0x6f0 [ 1501.773032][ T2048] ___sys_sendmsg+0xff/0x1e0 [ 1501.773066][ T2048] ? __pfx____sys_sendmsg+0x10/0x10 [ 1501.773101][ T2048] ? __pfx_kstrtouint+0x10/0x10 [ 1501.773142][ T2048] ? trace_lock_acquire+0x14e/0x1f0 [ 1501.773178][ T2048] __sys_sendmmsg+0x201/0x420 [ 1501.773200][ T2048] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1501.773226][ T2048] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1501.773268][ T2048] ? fput+0x67/0x440 [ 1501.773290][ T2048] ? ksys_write+0x1ba/0x250 [ 1501.773322][ T2048] ? __pfx_ksys_write+0x10/0x10 [ 1501.773356][ T2048] __x64_sys_sendmmsg+0x9c/0x100 [ 1501.773379][ T2048] do_syscall_64+0xcd/0x250 [ 1501.773415][ T2048] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1501.773449][ T2048] RIP: 0033:0x7fb35ab8d169 [ 1501.773466][ T2048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1501.773489][ T2048] RSP: 002b:00007fb35ba05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1501.773512][ T2048] RAX: ffffffffffffffda RBX: 00007fb35ada5fa0 RCX: 00007fb35ab8d169 [ 1501.773532][ T2048] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1501.773547][ T2048] RBP: 00007fb35ba05090 R08: 0000000000000000 R09: 0000000000000000 [ 1501.773562][ T2048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1501.773576][ T2048] R13: 0000000000000000 R14: 00007fb35ada5fa0 R15: 00007ffd45e95c38 [ 1501.773597][ T2048] [ 1504.345310][ T2074] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7456'. [ 1504.365016][ T2067] syz_tun: tun_chr_ioctl cmd 1074025678 [ 1504.431172][ T2067] syz_tun: group set to 3 [ 1504.464853][ T2078] FAULT_INJECTION: forcing a failure. [ 1504.464853][ T2078] name failslab, interval 1, probability 0, space 0, times 0 [ 1504.664817][ T2078] CPU: 0 UID: 0 PID: 2078 Comm: syz.5.7456 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1504.664849][ T2078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1504.664863][ T2078] Call Trace: [ 1504.664870][ T2078] [ 1504.664878][ T2078] dump_stack_lvl+0x16c/0x1f0 [ 1504.664915][ T2078] should_fail_ex+0x50a/0x650 [ 1504.664936][ T2078] ? fs_reclaim_acquire+0xae/0x150 [ 1504.664964][ T2078] should_failslab+0xc2/0x120 [ 1504.664985][ T2078] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1504.665020][ T2078] ? lock_release+0x4e2/0x6f0 [ 1504.665050][ T2078] ? __kernfs_new_node+0xd3/0x890 [ 1504.665082][ T2078] __kernfs_new_node+0xd3/0x890 [ 1504.665113][ T2078] ? __pfx___kernfs_new_node+0x10/0x10 [ 1504.665144][ T2078] ? lock_release+0x4e2/0x6f0 [ 1504.665174][ T2078] ? rcu_is_watching+0x12/0xc0 [ 1504.665196][ T2078] ? lock_release+0x4e2/0x6f0 [ 1504.665225][ T2078] ? kernfs_add_one+0x3d1/0x520 [ 1504.665258][ T2078] ? __pfx_lock_release+0x10/0x10 [ 1504.665288][ T2078] ? lock_acquire+0x2f/0xb0 [ 1504.665317][ T2078] ? kernfs_add_one+0x39d/0x520 [ 1504.665353][ T2078] kernfs_new_node+0x186/0x240 [ 1504.665386][ T2078] ? up_write+0x1b2/0x520 [ 1504.665420][ T2078] __kernfs_create_file+0x53/0x350 [ 1504.665445][ T2078] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1504.665475][ T2078] internal_create_group+0x56c/0xf10 [ 1504.665509][ T2078] ? __pfx_internal_create_group+0x10/0x10 [ 1504.665541][ T2078] ? kernfs_create_link+0x1bd/0x240 [ 1504.665566][ T2078] internal_create_groups+0x9d/0x150 [ 1504.665598][ T2078] device_add+0x733/0x1a70 [ 1504.665631][ T2078] ? __pfx_device_add+0x10/0x10 [ 1504.665662][ T2078] ? __pfx___mutex_lock+0x10/0x10 [ 1504.665695][ T2078] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1504.665732][ T2078] input_register_device+0x7e8/0x1130 [ 1504.665758][ T2078] ? __pfx_uinput_ioctl+0x10/0x10 [ 1504.665814][ T2078] uinput_ioctl_handler.isra.0+0x130c/0x1d70 [ 1504.665851][ T2078] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 1504.665887][ T2078] ? __pfx_lock_release+0x10/0x10 [ 1504.665917][ T2078] ? trace_lock_acquire+0x14e/0x1f0 [ 1504.665942][ T2078] ? __might_fault+0xe3/0x190 [ 1504.665963][ T2078] ? __fget_files+0x40/0x3a0 [ 1504.665997][ T2078] ? __fget_files+0x206/0x3a0 [ 1504.666030][ T2078] ? __pfx_uinput_ioctl+0x10/0x10 [ 1504.666062][ T2078] __x64_sys_ioctl+0x190/0x200 [ 1504.666089][ T2078] do_syscall_64+0xcd/0x250 [ 1504.666123][ T2078] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1504.666154][ T2078] RIP: 0033:0x7fb35ab8d169 [ 1504.666171][ T2078] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1504.666193][ T2078] RSP: 002b:00007fb35b9e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1504.666214][ T2078] RAX: ffffffffffffffda RBX: 00007fb35ada6080 RCX: 00007fb35ab8d169 [ 1504.666229][ T2078] RDX: 0000000000000000 RSI: 0000000000005501 RDI: 0000000000000008 [ 1504.666242][ T2078] RBP: 00007fb35ac0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1504.666255][ T2078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1504.666268][ T2078] R13: 0000000000000000 R14: 00007fb35ada6080 R15: 00007ffd45e95c38 [ 1504.666288][ T2078] [ 1505.011828][ C0] vkms_vblank_simulate: vblank timer overrun [ 1506.990426][ T2100] netlink: 20 bytes leftover after parsing attributes in process `syz.2.7463'. [ 1509.495133][ T2143] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7476'. [ 1510.157427][ T5147] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1510.167450][ T5147] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1510.179180][ T5147] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1510.188514][ T5147] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1510.199143][ T5147] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1510.207572][ T5147] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1510.784039][ T2132] random: crng reseeded on system resumption [ 1510.968626][ T2132] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1511.136038][ T5147] Bluetooth: hci4: unexpected subevent 0x01 length: 4 < 18 [ 1511.253755][ T2132] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1511.262714][ T2132] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1511.340222][ T2148] chnl_net:caif_netlink_parms(): no params data found [ 1511.741974][ T31] audit: type=1800 audit(4294973199.772:425): pid=2155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.7480" name="dbroot" dev="configfs" ino=154442 res=0 errno=0 [ 1512.063312][T21323] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.306165][ T5147] Bluetooth: hci2: command tx timeout [ 1512.342090][T21323] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.526194][T21323] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.661290][T21323] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1512.730806][ T2132] PM: hibernation: Basic memory bitmaps created [ 1512.996679][ T2148] bridge0: port 1(bridge_slave_0) entered blocking state [ 1513.045600][ T2148] bridge0: port 1(bridge_slave_0) entered disabled state [ 1513.053482][ T2148] bridge_slave_0: entered allmulticast mode [ 1513.128225][ T2148] bridge_slave_0: entered promiscuous mode [ 1513.175201][ T2148] bridge0: port 2(bridge_slave_1) entered blocking state [ 1513.182990][ T2148] bridge0: port 2(bridge_slave_1) entered disabled state [ 1513.275720][ T2148] bridge_slave_1: entered allmulticast mode [ 1513.316018][ T2148] bridge_slave_1: entered promiscuous mode [ 1513.444214][ T2148] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1513.536354][ T2148] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1513.647242][T21323] team0: left allmulticast mode [ 1513.670804][T21323] team_slave_0: left allmulticast mode [ 1513.713754][T21323] team_slave_1: left allmulticast mode [ 1513.720194][T21323] team0: left promiscuous mode [ 1513.740726][T21323] team_slave_0: left promiscuous mode [ 1513.761488][T21323] team_slave_1: left promiscuous mode [ 1513.806153][T21323] bridge0: port 3(team0) entered disabled state [ 1513.907261][T21323] bridge_slave_1: left allmulticast mode [ 1513.913488][T21323] bridge_slave_1: left promiscuous mode [ 1513.973869][T21323] bridge0: port 2(bridge_slave_1) entered disabled state [ 1514.066790][T21323] bridge_slave_0: left allmulticast mode [ 1514.073016][T21323] bridge_slave_0: left promiscuous mode [ 1514.122942][T21323] bridge0: port 1(bridge_slave_0) entered disabled state [ 1514.383855][ T5147] Bluetooth: hci2: command tx timeout [ 1514.575950][T21323] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1514.605473][T21323] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1514.668635][T21323] bond0 (unregistering): Released all slaves [ 1514.701561][ T2148] team0: Port device team_slave_0 added [ 1514.748356][ T2148] team0: Port device team_slave_1 added [ 1514.954427][ T2148] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1514.962085][ T2148] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1515.162512][ T2148] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1515.226026][ T2148] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1515.255301][ T2148] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1515.392574][ T2148] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1515.456838][T21323] hsr_slave_0: left promiscuous mode [ 1515.489110][T21323] hsr_slave_1: left promiscuous mode [ 1515.520721][T21323] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1515.565668][T21323] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1515.608259][T21323] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1515.642888][T21323] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1515.691976][T21323] veth1_macvtap: left promiscuous mode [ 1515.721486][T21323] veth0_macvtap: left promiscuous mode [ 1515.752072][T21323] veth1_vlan: left promiscuous mode [ 1515.781471][T21323] veth0_vlan: left promiscuous mode [ 1516.090125][T21323] team0 (unregistering): Port device team_slave_1 removed [ 1516.136552][T21323] team0 (unregistering): Port device team_slave_0 removed [ 1516.464445][ T5147] Bluetooth: hci2: command tx timeout [ 1516.485413][ T2148] hsr_slave_0: entered promiscuous mode [ 1516.512313][ T2148] hsr_slave_1: entered promiscuous mode [ 1516.535568][ T2148] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1516.573784][ T2148] Cannot create hsr debugfs directory [ 1517.078232][T21309] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.333250][T21309] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.421651][ T2166] PM: hibernation: Basic memory bitmaps freed [ 1517.644633][T21309] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.770137][ T2241] syz_tun: tun_chr_ioctl cmd 1074025678 [ 1517.822490][ T2241] syz_tun: group set to 23693 [ 1517.856427][ T2247] FAULT_INJECTION: forcing a failure. [ 1517.856427][ T2247] name failslab, interval 1, probability 0, space 0, times 0 [ 1517.897670][T21309] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1517.959358][ T2247] CPU: 0 UID: 0 PID: 2247 Comm: syz.5.7497 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1517.959386][ T2247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1517.959399][ T2247] Call Trace: [ 1517.959405][ T2247] [ 1517.959413][ T2247] dump_stack_lvl+0x16c/0x1f0 [ 1517.959448][ T2247] should_fail_ex+0x50a/0x650 [ 1517.959468][ T2247] ? fs_reclaim_acquire+0xae/0x150 [ 1517.959494][ T2247] should_failslab+0xc2/0x120 [ 1517.959513][ T2247] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 1517.959552][ T2247] ? __alloc_skb+0x2b1/0x380 [ 1517.959586][ T2247] __alloc_skb+0x2b1/0x380 [ 1517.959616][ T2247] ? __pfx___alloc_skb+0x10/0x10 [ 1517.959649][ T2247] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 1517.959684][ T2247] netlink_alloc_large_skb+0x69/0x130 [ 1517.959718][ T2247] netlink_sendmsg+0x689/0xd70 [ 1517.959751][ T2247] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1517.959788][ T2247] ____sys_sendmsg+0xaaf/0xc90 [ 1517.959813][ T2247] ? copy_msghdr_from_user+0x10b/0x160 [ 1517.959847][ T2247] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1517.959877][ T2247] ? _kstrtoull+0x146/0x200 [ 1517.959906][ T2247] ? __pfx__kstrtoull+0x10/0x10 [ 1517.959934][ T2247] ? lock_release+0x4e2/0x6f0 [ 1517.959965][ T2247] ___sys_sendmsg+0x135/0x1e0 [ 1517.959999][ T2247] ? __pfx____sys_sendmsg+0x10/0x10 [ 1517.960032][ T2247] ? __pfx_kstrtouint+0x10/0x10 [ 1517.960066][ T2247] ? trace_lock_acquire+0x14e/0x1f0 [ 1517.960118][ T2247] __sys_sendmmsg+0x201/0x420 [ 1517.960140][ T2247] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1517.960165][ T2247] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1517.960206][ T2247] ? fput+0x67/0x440 [ 1517.960227][ T2247] ? ksys_write+0x1ba/0x250 [ 1517.960257][ T2247] ? __pfx_ksys_write+0x10/0x10 [ 1517.960291][ T2247] __x64_sys_sendmmsg+0x9c/0x100 [ 1517.960312][ T2247] do_syscall_64+0xcd/0x250 [ 1517.960348][ T2247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1517.960381][ T2247] RIP: 0033:0x7fb35ab8d169 [ 1517.960402][ T2247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1517.960425][ T2247] RSP: 002b:00007fb35ba05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1517.960446][ T2247] RAX: ffffffffffffffda RBX: 00007fb35ada5fa0 RCX: 00007fb35ab8d169 [ 1517.960462][ T2247] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1517.960476][ T2247] RBP: 00007fb35ba05090 R08: 0000000000000000 R09: 0000000000000000 [ 1517.960491][ T2247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1517.960504][ T2247] R13: 0000000000000000 R14: 00007fb35ada5fa0 R15: 00007ffd45e95c38 [ 1517.960524][ T2247] [ 1518.398796][ T2148] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1518.628025][ T2148] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1518.636605][ T5147] Bluetooth: hci2: command tx timeout [ 1518.738697][ T2148] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1518.916454][ T2148] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1519.182974][ T2148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1519.239446][ T2148] 8021q: adding VLAN 0 to HW filter on device team0 [ 1519.291163][T21309] bridge_slave_1: left allmulticast mode [ 1519.297907][T21309] bridge_slave_1: left promiscuous mode [ 1519.337629][T21309] bridge0: port 2(bridge_slave_1) entered disabled state [ 1519.412755][T21309] bridge_slave_0: left allmulticast mode [ 1519.457117][T21309] bridge_slave_0: left promiscuous mode [ 1519.463416][T21309] bridge0: port 1(bridge_slave_0) entered disabled state [ 1519.706804][ T2289] FAULT_INJECTION: forcing a failure. [ 1519.706804][ T2289] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1519.877103][ T2289] CPU: 0 UID: 0 PID: 2289 Comm: syz.8.7507 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1519.877129][ T2289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1519.877142][ T2289] Call Trace: [ 1519.877148][ T2289] [ 1519.877155][ T2289] dump_stack_lvl+0x16c/0x1f0 [ 1519.877189][ T2289] should_fail_ex+0x50a/0x650 [ 1519.877208][ T2289] _copy_from_user+0x2e/0xd0 [ 1519.877229][ T2289] copy_msghdr_from_user+0x99/0x160 [ 1519.877268][ T2289] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1519.877302][ T2289] ? kfree+0x260/0x4d0 [ 1519.877330][ T2289] ___sys_recvmsg+0xdc/0x1a0 [ 1519.877361][ T2289] ? __pfx____sys_recvmsg+0x10/0x10 [ 1519.877394][ T2289] ? rcu_is_watching+0x12/0xc0 [ 1519.877419][ T2289] ? __pfx___might_resched+0x10/0x10 [ 1519.877450][ T2289] ? __might_fault+0xe3/0x190 [ 1519.877472][ T2289] do_recvmmsg+0x2f8/0x740 [ 1519.877504][ T2289] ? __pfx_do_recvmmsg+0x10/0x10 [ 1519.877535][ T2289] ? vfs_write+0x306/0x1150 [ 1519.877564][ T2289] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 1519.877598][ T2289] ? __fget_files+0x206/0x3a0 [ 1519.877629][ T2289] __x64_sys_recvmmsg+0x239/0x290 [ 1519.877650][ T2289] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1519.877670][ T2289] ? rcu_is_watching+0x12/0xc0 [ 1519.877690][ T2289] ? rcu_is_watching+0x12/0xc0 [ 1519.877711][ T2289] do_syscall_64+0xcd/0x250 [ 1519.877742][ T2289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1519.877770][ T2289] RIP: 0033:0x7f7881b8d169 [ 1519.877785][ T2289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1519.877805][ T2289] RSP: 002b:00007f7882904038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1519.877824][ T2289] RAX: ffffffffffffffda RBX: 00007f7881da5fa0 RCX: 00007f7881b8d169 [ 1519.877838][ T2289] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 1519.877851][ T2289] RBP: 00007f7882904090 R08: 0000000000000000 R09: 0000000000000000 [ 1519.877863][ T2289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1519.877875][ T2289] R13: 0000000000000000 R14: 00007f7881da5fa0 R15: 00007ffed5bbb6c8 [ 1519.877893][ T2289] [ 1520.576287][ T2306] FAULT_INJECTION: forcing a failure. [ 1520.576287][ T2306] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1520.624808][ T2306] CPU: 0 UID: 0 PID: 2306 Comm: syz.8.7511 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1520.624834][ T2306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1520.624847][ T2306] Call Trace: [ 1520.624853][ T2306] [ 1520.624860][ T2306] dump_stack_lvl+0x16c/0x1f0 [ 1520.624893][ T2306] should_fail_ex+0x50a/0x650 [ 1520.624912][ T2306] ? __pfx___might_resched+0x10/0x10 [ 1520.624944][ T2306] should_fail_alloc_page+0xe7/0x130 [ 1520.624964][ T2306] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1520.624990][ T2306] ? rcu_is_watching+0x12/0xc0 [ 1520.625012][ T2306] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 1520.625043][ T2306] ? rcu_is_watching+0x12/0xc0 [ 1520.625063][ T2306] ? __mod_memcg_lruvec_state+0x53c/0x750 [ 1520.625088][ T2306] ? __mod_zone_page_state+0xcc/0x1a0 [ 1520.625107][ T2306] ? xas_create+0x1dc/0x1460 [ 1520.625124][ T2306] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1520.625153][ T2306] ? rcu_is_watching+0x12/0xc0 [ 1520.625179][ T2306] ? rcu_is_watching+0x12/0xc0 [ 1520.625199][ T2306] ? lock_release+0x4e2/0x6f0 [ 1520.625226][ T2306] ? lock_release+0x4e2/0x6f0 [ 1520.625252][ T2306] ? __filemap_add_folio+0x998/0xf10 [ 1520.625280][ T2306] ? __mod_node_page_state+0xde/0x1d0 [ 1520.625312][ T2306] ? rcu_is_watching+0x12/0xc0 [ 1520.625332][ T2306] ? xas_nomem+0x189/0x2c0 [ 1520.625360][ T2306] ? trace_irq_enable.constprop.0+0xea/0x140 [ 1520.625391][ T2306] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1520.625423][ T2306] ? policy_nodemask+0xea/0x4e0 [ 1520.625441][ T2306] alloc_pages_mpol+0x1fc/0x540 [ 1520.625458][ T2306] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1520.625480][ T2306] ? xas_start+0x153/0x790 [ 1520.625509][ T2306] ? xas_load+0x49/0x5b0 [ 1520.625537][ T2306] ? filemap_get_entry+0xd0/0x3c0 [ 1520.625564][ T2306] folio_alloc_noprof+0x20/0x2d0 [ 1520.625586][ T2306] filemap_alloc_folio_noprof+0x39b/0x470 [ 1520.625607][ T2306] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 1520.625627][ T2306] ? rcu_is_watching+0x12/0xc0 [ 1520.625649][ T2306] __filemap_get_folio+0x5e9/0xc10 [ 1520.625678][ T2306] ioctx_alloc+0x763/0x2010 [ 1520.625705][ T2306] ? __might_fault+0x13b/0x190 [ 1520.625727][ T2306] ? __pfx_ioctx_alloc+0x10/0x10 [ 1520.625751][ T2306] ? lock_acquire+0x2f/0xb0 [ 1520.625779][ T2306] ? __might_fault+0xe3/0x190 [ 1520.625799][ T2306] __x64_sys_io_setup+0xc9/0x210 [ 1520.625826][ T2306] do_syscall_64+0xcd/0x250 [ 1520.625855][ T2306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1520.625882][ T2306] RIP: 0033:0x7f7881b8d169 [ 1520.625895][ T2306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1520.625914][ T2306] RSP: 002b:00007f7882904038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1520.625932][ T2306] RAX: ffffffffffffffda RBX: 00007f7881da5fa0 RCX: 00007f7881b8d169 [ 1520.625945][ T2306] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ffff [ 1520.625957][ T2306] RBP: 00007f7881c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1520.625969][ T2306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1520.625981][ T2306] R13: 0000000000000000 R14: 00007f7881da5fa0 R15: 00007ffed5bbb6c8 [ 1520.625998][ T2306] [ 1521.649725][T21309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1521.688339][T21309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1521.731720][T21309] bond0 (unregistering): Released all slaves [ 1521.804501][T21313] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.812279][T21313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1521.837532][T21313] bridge0: port 2(bridge_slave_1) entered blocking state [ 1521.845360][T21313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1521.930724][ T2148] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1522.046926][ T2148] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1522.499509][T21309] hsr_slave_0: left promiscuous mode [ 1522.593872][T21309] hsr_slave_1: left promiscuous mode [ 1522.617830][T21309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1522.659697][T21309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1522.752021][T21309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1522.794127][T21309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1522.837322][T21309] veth1_macvtap: left promiscuous mode [ 1522.890099][T21309] veth0_macvtap: left promiscuous mode [ 1522.926094][T21309] veth1_vlan: left promiscuous mode [ 1522.931876][T21309] veth0_vlan: left promiscuous mode [ 1523.407698][T21309] team0 (unregistering): Port device team_slave_1 removed [ 1523.470893][T21309] team0 (unregistering): Port device team_slave_0 removed [ 1523.660468][ T2148] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1523.926921][ T2148] veth0_vlan: entered promiscuous mode [ 1524.041547][ T2148] veth1_vlan: entered promiscuous mode [ 1524.186261][ T2148] veth0_macvtap: entered promiscuous mode [ 1524.211721][ T2148] veth1_macvtap: entered promiscuous mode [ 1524.290909][ T2148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1524.368938][ T2148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.406877][ T2148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1524.453841][ T2148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.497236][ T2148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1524.548546][ T2148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.594547][ T2148] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1524.755075][ T2148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1524.788609][ T2148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.824775][ T2148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1524.861175][ T2148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.898866][ T2148] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1524.936230][ T2148] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1524.974404][ T2148] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1525.063570][ T2148] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.117141][ T2148] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.156410][ T2148] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.178106][ T2408] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1525.200164][ T2148] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1525.214292][ T2408] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1525.241477][ T2408] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1525.286926][ T2408] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 1525.330536][ T2408] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1525.378995][ T2408] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1525.447479][ T2408] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1525.648120][ T2148] ieee80211 phy80: Selected rate control algorithm 'minstrel_ht' [ 1525.782234][T21323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.816515][ T2148] ieee80211 phy81: Selected rate control algorithm 'minstrel_ht' [ 1525.855501][T21323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1525.938822][T25747] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1525.999203][T25747] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1526.784617][ T5147] Bluetooth: hci1: command 0x0c1a tx timeout [ 1527.064071][ T2483] netlink: 12 bytes leftover after parsing attributes in process `syz.5.7530'. [ 1527.263726][ T5147] Bluetooth: hci4: command 0x0406 tx timeout [ 1527.270840][ T2023] Bluetooth: hci3: command 0x0c1a tx timeout [ 1527.343745][ T2023] Bluetooth: hci2: command 0x0c1a tx timeout [ 1527.538066][ T2514] syz_tun: tun_chr_ioctl cmd 1074025681 [ 1527.688307][ T2496] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1527.724877][ T2496] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1527.784587][ T2496] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1527.830240][ T2496] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1528.351114][ T2538] netlink: 12 bytes leftover after parsing attributes in process `syz.8.7536'. [ 1528.989370][ T2553] svc: failed to register nfsdv3 RPC service (errno 111). [ 1529.085255][ T2553] svc: failed to register nfsaclv3 RPC service (errno 111). [ 1529.184986][ T2023] Bluetooth: hci1: command 0x0c1a tx timeout [ 1529.605631][ T2583] netlink: 4 bytes leftover after parsing attributes in process `syz.5.7545'. [ 1529.744142][ T2023] Bluetooth: hci3: command 0x0c1a tx timeout [ 1529.832262][ T2023] Bluetooth: hci4: command 0x0406 tx timeout [ 1529.903868][ T2023] Bluetooth: hci2: command 0x0c1a tx timeout [ 1530.578344][ T2023] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 1530.775436][ T31] audit: type=1800 audit(4294973226.810:426): pid=2624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.7555" name="dbroot" dev="configfs" ino=156800 res=0 errno=0 [ 1531.140235][ T2023] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 1531.570468][ T2610] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1531.714734][ T31] audit: type=1800 audit(4294973235.743:427): pid=2618 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.7548" name="dbroot" dev="configfs" ino=156844 res=0 errno=0 [ 1531.858044][ T2610] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1531.915677][ T2610] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1531.971020][ T2610] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1532.249599][ T2656] blktrace: Concurrent blktraces are not allowed on sg0 [ 1532.383923][ T2023] Bluetooth: hci1: command 0x0c1a tx timeout [ 1532.503297][ T2664] dlm: process syz.1.7557 (2664) version mismatch user (1291781285.-1874653656.-1278323392) kernel (6.0.2) [ 1532.604929][ T2671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.7552'. [ 1533.413143][ T31] audit: type=1400 audit(4294973237.443:428): apparmor="DENIED" operation="setprocattr" info="invalid" error=-22 profile="unconfined" pid=2702 comm="syz.1.7560" [ 1533.617279][ T2708] syz_tun: tun_chr_ioctl cmd 1074025678 [ 1533.640112][ T2708] syz_tun: group set to 23693 [ 1533.903870][ T2023] Bluetooth: hci3: command 0x0c1a tx timeout [ 1533.988362][ T2023] Bluetooth: hci2: command 0x0c1a tx timeout [ 1533.996833][ T5147] Bluetooth: hci4: command 0x0406 tx timeout [ 1534.243404][ T2724] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7564'. [ 1535.900248][ T2752] netlink: 12 bytes leftover after parsing attributes in process `syz.1.7568'. [ 1537.176314][ T2844] [U] [ 1537.179312][ T2844] [U] [ 1537.182287][ T2844] [U] [ 1537.185240][ T2844] [U] [ 1537.315871][ T2844] [U] [ 1537.318865][ T2844] [U] [ 1537.321818][ T2844] [U] [ 1537.324778][ T2844] [U] [ 1537.352283][ T2860] ERROR: Out of memory at tomoyo_memory_ok. [ 1537.365126][ T2844] [U] [ 1537.368105][ T2844] [U] [ 1537.371056][ T2844] [U] [ 1537.374015][ T2844] [U] [ 1537.408097][ T2852] ERROR: Out of memory at tomoyo_memory_ok. [ 1537.425128][ T2844] [U] [ 1537.428115][ T2844] [U] [ 1537.431068][ T2844] [U] [ 1537.434036][ T2844] [U] [ 1537.513003][ T2844] [U] [ 1537.516000][ T2844] [U] [ 1537.518950][ T2844] [U] [ 1537.521901][ T2844] [U] [ 1537.606099][ T2844] [U] [ 1537.609100][ T2844] [U] [ 1537.612051][ T2844] [U] [ 1537.615003][ T2844] [U] [ 1537.676466][ T2844] [U] [ 1537.679479][ T2844] [U] [ 1537.682452][ T2844] [U] [ 1537.685413][ T2844] [U] [ 1537.760584][ T2844] [U] [ 1537.763631][ T2844] [U] [ 1537.766609][ T2844] [U] [ 1537.769588][ T2844] [U] [ 1537.851118][ T2844] [U] [ 1537.854119][ T2844] [U] [ 1537.857086][ T2844] [U] [ 1537.860041][ T2844] [U] [ 1537.924138][ T2844] [U] [ 1539.002209][ T2908] sock: sock_timestamping_bind_phc: sock not bind to device [ 1539.281197][ T2919] CIFS mount error: No usable UNC path provided in device string! [ 1539.281197][ T2919] [ 1539.415627][ T2919] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 1540.904075][ T2954] FAULT_INJECTION: forcing a failure. [ 1540.904075][ T2954] name failslab, interval 1, probability 0, space 0, times 0 [ 1540.957426][ T2954] CPU: 0 UID: 0 PID: 2954 Comm: syz.2.7602 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1540.957460][ T2954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1540.957473][ T2954] Call Trace: [ 1540.957480][ T2954] [ 1540.957487][ T2954] dump_stack_lvl+0x16c/0x1f0 [ 1540.957523][ T2954] should_fail_ex+0x50a/0x650 [ 1540.957543][ T2954] ? fs_reclaim_acquire+0xae/0x150 [ 1540.957571][ T2954] ? tomoyo_init_log+0x195/0x2170 [ 1540.957600][ T2954] should_failslab+0xc2/0x120 [ 1540.957621][ T2954] __kmalloc_cache_noprof+0x68/0x410 [ 1540.957653][ T2954] tomoyo_init_log+0x195/0x2170 [ 1540.957683][ T2954] ? __pfx_format_decode+0x10/0x10 [ 1540.957709][ T2954] ? kasan_save_stack+0x42/0x60 [ 1540.957740][ T2954] ? number+0x986/0xc50 [ 1540.957763][ T2954] ? __pfx_tomoyo_init_log+0x10/0x10 [ 1540.957795][ T2954] tomoyo_write_log2+0x2f0/0xbf0 [ 1540.957827][ T2954] tomoyo_supervisor+0x15f/0x1380 [ 1540.957863][ T2954] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1540.957900][ T2954] ? __pfx_vsnprintf+0x10/0x10 [ 1540.957930][ T2954] ? rcu_is_watching+0x12/0xc0 [ 1540.957956][ T2954] ? tomoyo_encode2+0x329/0x3e0 [ 1540.957988][ T2954] ? tomoyo_check_path_number_acl+0xa6/0x2f0 [ 1540.958017][ T2954] tomoyo_path_number_perm+0x447/0x590 [ 1540.958044][ T2954] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1540.958071][ T2954] ? rcu_is_watching+0x12/0xc0 [ 1540.958095][ T2954] ? preempt_count_add+0x76/0x150 [ 1540.958132][ T2954] ? __pfx_lock_release+0x10/0x10 [ 1540.958161][ T2954] ? trace_lock_acquire+0x14e/0x1f0 [ 1540.958186][ T2954] ? __fget_files+0x40/0x3a0 [ 1540.958219][ T2954] ? __fget_files+0x206/0x3a0 [ 1540.958250][ T2954] security_file_ioctl+0x9b/0x240 [ 1540.958278][ T2954] __x64_sys_ioctl+0xb7/0x200 [ 1540.958304][ T2954] do_syscall_64+0xcd/0x250 [ 1540.958347][ T2954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1540.958375][ T2954] RIP: 0033:0x7f598eb8d169 [ 1540.958389][ T2954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1540.958409][ T2954] RSP: 002b:00007f598f92c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1540.958428][ T2954] RAX: ffffffffffffffda RBX: 00007f598eda5fa0 RCX: 00007f598eb8d169 [ 1540.958442][ T2954] RDX: 0000000000000038 RSI: 00000000c008ae67 RDI: 0000000000000003 [ 1540.958455][ T2954] RBP: 00007f598f92c090 R08: 0000000000000000 R09: 0000000000000000 [ 1540.958467][ T2954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1540.958479][ T2954] R13: 0000000000000000 R14: 00007f598eda5fa0 R15: 00007ffc9cb7c6a8 [ 1540.958515][ T2954] [ 1541.240392][ C0] vkms_vblank_simulate: vblank timer overrun [ 1542.029507][ T2966] ieee80211 phy82: Selected rate control algorithm 'minstrel_ht' [ 1542.338109][ T2967] netlink: 20 bytes leftover after parsing attributes in process `syz.1.7603'. [ 1542.909136][ T2982] FAULT_INJECTION: forcing a failure. [ 1542.909136][ T2982] name failslab, interval 1, probability 0, space 0, times 0 [ 1542.971666][ T2982] CPU: 0 UID: 0 PID: 2982 Comm: syz.5.7605 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1542.971716][ T2982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1542.971730][ T2982] Call Trace: [ 1542.971737][ T2982] [ 1542.971745][ T2982] dump_stack_lvl+0x16c/0x1f0 [ 1542.971784][ T2982] should_fail_ex+0x50a/0x650 [ 1542.971818][ T2982] ? fs_reclaim_acquire+0xae/0x150 [ 1542.971858][ T2982] ? tomoyo_init_log+0x195/0x2170 [ 1542.971889][ T2982] should_failslab+0xc2/0x120 [ 1542.971911][ T2982] __kmalloc_cache_noprof+0x68/0x410 [ 1542.971945][ T2982] tomoyo_init_log+0x195/0x2170 [ 1542.971977][ T2982] ? __pfx_format_decode+0x10/0x10 [ 1542.972005][ T2982] ? kasan_save_stack+0x42/0x60 [ 1542.972037][ T2982] ? number+0x986/0xc50 [ 1542.972061][ T2982] ? __pfx_tomoyo_init_log+0x10/0x10 [ 1542.972107][ T2982] tomoyo_write_log2+0x2f0/0xbf0 [ 1542.972139][ T2982] tomoyo_supervisor+0x15f/0x1380 [ 1542.972175][ T2982] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1542.972208][ T2982] ? __pfx_vsnprintf+0x10/0x10 [ 1542.972238][ T2982] ? rcu_is_watching+0x12/0xc0 [ 1542.972263][ T2982] ? tomoyo_encode2+0x329/0x3e0 [ 1542.972295][ T2982] ? tomoyo_check_path_number_acl+0xa6/0x2f0 [ 1542.972324][ T2982] tomoyo_path_number_perm+0x447/0x590 [ 1542.972351][ T2982] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1542.972378][ T2982] ? rcu_is_watching+0x12/0xc0 [ 1542.972401][ T2982] ? preempt_count_add+0x76/0x150 [ 1542.972434][ T2982] ? __pfx_lock_release+0x10/0x10 [ 1542.972463][ T2982] ? trace_lock_acquire+0x14e/0x1f0 [ 1542.972488][ T2982] ? __fget_files+0x40/0x3a0 [ 1542.972521][ T2982] ? __fget_files+0x206/0x3a0 [ 1542.972553][ T2982] security_file_ioctl+0x9b/0x240 [ 1542.972581][ T2982] __x64_sys_ioctl+0xb7/0x200 [ 1542.972607][ T2982] do_syscall_64+0xcd/0x250 [ 1542.972640][ T2982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1542.972674][ T2982] RIP: 0033:0x7fb35ab8d169 [ 1542.972690][ T2982] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1542.972727][ T2982] RSP: 002b:00007fb35ba05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1542.972769][ T2982] RAX: ffffffffffffffda RBX: 00007fb35ada5fa0 RCX: 00007fb35ab8d169 [ 1542.972785][ T2982] RDX: 0000000000000038 RSI: 000000080000541b RDI: 0000000000000003 [ 1542.972817][ T2982] RBP: 00007fb35ba05090 R08: 0000000000000000 R09: 0000000000000000 [ 1542.972832][ T2982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1542.972851][ T2982] R13: 0000000000000000 R14: 00007fb35ada5fa0 R15: 00007ffd45e95c38 [ 1542.972873][ T2982] [ 1543.250303][ C0] vkms_vblank_simulate: vblank timer overrun [ 1543.659832][ T2986] [U] [ 1543.662973][ T2986] [U] [ 1543.665964][ T2986] [U] [ 1543.668947][ T2986] [U] [ 1543.725049][ T2986] [U] [ 1543.728053][ T2986] [U] [ 1543.731015][ T2986] [U] [ 1543.733998][ T2986] [U] [ 1543.800199][ T2986] [U] [ 1543.803222][ T2986] [U] [ 1543.806192][ T2986] [U] [ 1543.809172][ T2986] [U] [ 1543.894620][ T2986] [U] [ 1543.897652][ T2986] [U] [ 1543.900650][ T2986] [U] [ 1543.903617][ T2986] [U] [ 1543.955289][ T2986] [U] [ 1543.958306][ T2986] [U] [ 1543.961263][ T2986] [U] [ 1543.964220][ T2986] [U] [ 1544.013955][ T2986] [U] [ 1544.016962][ T2986] [U] [ 1544.019945][ T2986] [U] [ 1544.022913][ T2986] [U] [ 1544.052349][ T2986] [U] [ 1544.055355][ T2986] [U] [ 1544.058335][ T2986] [U] [ 1544.061302][ T2986] [U] [ 1544.130710][ T2986] [U] [ 1544.212275][ T3004] FAULT_INJECTION: forcing a failure. [ 1544.212275][ T3004] name failslab, interval 1, probability 0, space 0, times 0 [ 1544.282964][ T3004] CPU: 0 UID: 0 PID: 3004 Comm: syz.5.7613 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1544.283000][ T3004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1544.283015][ T3004] Call Trace: [ 1544.283022][ T3004] [ 1544.283031][ T3004] dump_stack_lvl+0x16c/0x1f0 [ 1544.283072][ T3004] should_fail_ex+0x50a/0x650 [ 1544.283096][ T3004] ? fs_reclaim_acquire+0xae/0x150 [ 1544.283131][ T3004] should_failslab+0xc2/0x120 [ 1544.283153][ T3004] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 1544.283195][ T3004] ? sysctl_core_net_init+0x42/0x270 [ 1544.283230][ T3004] kmemdup_noprof+0x29/0x60 [ 1544.283259][ T3004] sysctl_core_net_init+0x42/0x270 [ 1544.283292][ T3004] ? __pfx_sysctl_core_net_init+0x10/0x10 [ 1544.283325][ T3004] ops_init+0x1df/0x5f0 [ 1544.283350][ T3004] setup_net+0x21f/0x860 [ 1544.283374][ T3004] ? __pfx_setup_net+0x10/0x10 [ 1544.283397][ T3004] ? down_read_killable+0xcc/0x380 [ 1544.283419][ T3004] ? __pfx_down_read_killable+0x10/0x10 [ 1544.283441][ T3004] ? __raw_spin_lock_init+0x3a/0x110 [ 1544.283465][ T3004] ? debug_mutex_init+0x37/0x70 [ 1544.283492][ T3004] copy_net_ns+0x2a6/0x5f0 [ 1544.283520][ T3004] create_new_namespaces+0x3ea/0xad0 [ 1544.283562][ T3004] copy_namespaces+0x468/0x560 [ 1544.283601][ T3004] copy_process+0x29fc/0x8c50 [ 1544.283623][ T3004] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1544.283656][ T3004] ? trace_pid_list_is_set+0x100/0x150 [ 1544.283688][ T3004] ? lock_release+0x4e2/0x6f0 [ 1544.283727][ T3004] ? try_to_wake_up+0x920/0x1490 [ 1544.283766][ T3004] ? __pfx_copy_process+0x10/0x10 [ 1544.283789][ T3004] ? try_to_wake_up+0x953/0x1490 [ 1544.283823][ T3004] ? __pfx_try_to_wake_up+0x10/0x10 [ 1544.283856][ T3004] ? __pfx_lock_release+0x10/0x10 [ 1544.283890][ T3004] ? plist_check_head+0xa3/0x150 [ 1544.283920][ T3004] ? wake_up_q+0xb0/0x160 [ 1544.283952][ T3004] ? do_raw_spin_unlock+0x172/0x230 [ 1544.283977][ T3004] kernel_clone+0xfd/0x960 [ 1544.283999][ T3004] ? __pfx_futex_wake+0x10/0x10 [ 1544.284032][ T3004] ? __pfx_kernel_clone+0x10/0x10 [ 1544.284054][ T3004] ? __pfx_vfs_writev+0x10/0x10 [ 1544.284092][ T3004] __do_sys_clone+0xcf/0x120 [ 1544.284126][ T3004] ? __pfx___do_sys_clone+0x10/0x10 [ 1544.284154][ T3004] ? rcu_is_watching+0x12/0xc0 [ 1544.284178][ T3004] ? rcu_is_watching+0x12/0xc0 [ 1544.284202][ T3004] ? rcu_is_watching+0x12/0xc0 [ 1544.284227][ T3004] do_syscall_64+0xcd/0x250 [ 1544.284263][ T3004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1544.284297][ T3004] RIP: 0033:0x7fb35ab8d169 [ 1544.284315][ T3004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1544.284357][ T3004] RSP: 002b:00007fb35ba05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1544.284385][ T3004] RAX: ffffffffffffffda RBX: 00007fb35ada5fa0 RCX: 00007fb35ab8d169 [ 1544.284401][ T3004] RDX: 0000000000000000 RSI: 000000000000000d RDI: 000000006cb0a3c8 [ 1544.284416][ T3004] RBP: 00007fb35ac0e2a0 R08: 0000000000000008 R09: 0000000000000000 [ 1544.284431][ T3004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1544.284447][ T3004] R13: 0000000000000000 R14: 00007fb35ada5fa0 R15: 00007ffd45e95c38 [ 1544.284468][ T3004] [ 1544.624638][ C0] vkms_vblank_simulate: vblank timer overrun [ 1545.241271][ T5147] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 1545.255282][ T31] audit: type=1800 audit(4294973257.155:429): pid=3006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.7614" name="dbroot" dev="configfs" ino=158466 res=0 errno=0 [ 1545.585053][ T3037] FAULT_INJECTION: forcing a failure. [ 1545.585053][ T3037] name failslab, interval 1, probability 0, space 0, times 0 [ 1545.643757][ T3037] CPU: 0 UID: 0 PID: 3037 Comm: syz.2.7620 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1545.643792][ T3037] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1545.643807][ T3037] Call Trace: [ 1545.643814][ T3037] [ 1545.643823][ T3037] dump_stack_lvl+0x16c/0x1f0 [ 1545.643866][ T3037] should_fail_ex+0x50a/0x650 [ 1545.643889][ T3037] ? fs_reclaim_acquire+0xae/0x150 [ 1545.643920][ T3037] ? tomoyo_write_log2+0x336/0xbf0 [ 1545.643962][ T3037] should_failslab+0xc2/0x120 [ 1545.643982][ T3037] __kmalloc_cache_noprof+0x68/0x410 [ 1545.644026][ T3037] tomoyo_write_log2+0x336/0xbf0 [ 1545.644056][ T3037] tomoyo_supervisor+0x15f/0x1380 [ 1545.644090][ T3037] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1545.644121][ T3037] ? __pfx_vsnprintf+0x10/0x10 [ 1545.644150][ T3037] ? rcu_is_watching+0x12/0xc0 [ 1545.644174][ T3037] ? tomoyo_encode2+0x329/0x3e0 [ 1545.644203][ T3037] ? tomoyo_check_path_number_acl+0xa6/0x2f0 [ 1545.644231][ T3037] tomoyo_path_number_perm+0x447/0x590 [ 1545.644256][ T3037] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1545.644281][ T3037] ? rcu_is_watching+0x12/0xc0 [ 1545.644304][ T3037] ? preempt_count_add+0x76/0x150 [ 1545.644335][ T3037] ? __pfx_lock_release+0x10/0x10 [ 1545.644362][ T3037] ? trace_lock_acquire+0x14e/0x1f0 [ 1545.644385][ T3037] ? __fget_files+0x40/0x3a0 [ 1545.644416][ T3037] ? __fget_files+0x206/0x3a0 [ 1545.644445][ T3037] security_file_ioctl+0x9b/0x240 [ 1545.644471][ T3037] __x64_sys_ioctl+0xb7/0x200 [ 1545.644496][ T3037] do_syscall_64+0xcd/0x250 [ 1545.644527][ T3037] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1545.644561][ T3037] RIP: 0033:0x7f598eb8d169 [ 1545.644575][ T3037] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1545.644595][ T3037] RSP: 002b:00007f598f92c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1545.644614][ T3037] RAX: ffffffffffffffda RBX: 00007f598eda5fa0 RCX: 00007f598eb8d169 [ 1545.644628][ T3037] RDX: 0000000000005c8d RSI: 00000000400454ce RDI: 00000000000000c8 [ 1545.644641][ T3037] RBP: 00007f598f92c090 R08: 0000000000000000 R09: 0000000000000000 [ 1545.644653][ T3037] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1545.644666][ T3037] R13: 0000000000000001 R14: 00007f598eda5fa0 R15: 00007ffc9cb7c6a8 [ 1545.644684][ T3037] [ 1545.903947][ C0] vkms_vblank_simulate: vblank timer overrun [ 1546.705254][ T3063] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7627'. [ 1546.974849][ T3080] FAULT_INJECTION: forcing a failure. [ 1546.974849][ T3080] name failslab, interval 1, probability 0, space 0, times 0 [ 1547.067188][ T3080] CPU: 0 UID: 0 PID: 3080 Comm: syz.1.7629 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1547.067219][ T3080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1547.067231][ T3080] Call Trace: [ 1547.067237][ T3080] [ 1547.067244][ T3080] dump_stack_lvl+0x16c/0x1f0 [ 1547.067278][ T3080] should_fail_ex+0x50a/0x650 [ 1547.067297][ T3080] ? fs_reclaim_acquire+0xae/0x150 [ 1547.067323][ T3080] ? tomoyo_realpath_from_path+0xb9/0x720 [ 1547.067352][ T3080] should_failslab+0xc2/0x120 [ 1547.067372][ T3080] __kmalloc_noprof+0xcb/0x510 [ 1547.067404][ T3080] tomoyo_realpath_from_path+0xb9/0x720 [ 1547.067454][ T3080] ? tomoyo_path_number_perm+0x235/0x590 [ 1547.067479][ T3080] ? tomoyo_path_number_perm+0x235/0x590 [ 1547.067504][ T3080] tomoyo_path_number_perm+0x248/0x590 [ 1547.067527][ T3080] ? tomoyo_path_number_perm+0x235/0x590 [ 1547.067552][ T3080] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1547.067577][ T3080] ? rcu_is_watching+0x12/0xc0 [ 1547.067601][ T3080] ? preempt_count_add+0x76/0x150 [ 1547.067631][ T3080] ? __pfx_lock_release+0x10/0x10 [ 1547.067658][ T3080] ? trace_lock_acquire+0x14e/0x1f0 [ 1547.067681][ T3080] ? __fget_files+0x40/0x3a0 [ 1547.067709][ T3080] ? lock_acquire+0x2f/0xb0 [ 1547.067736][ T3080] ? __fget_files+0x40/0x3a0 [ 1547.067765][ T3080] ? __fget_files+0x206/0x3a0 [ 1547.067796][ T3080] security_file_ioctl+0x9b/0x240 [ 1547.067821][ T3080] __x64_sys_ioctl+0xb7/0x200 [ 1547.067847][ T3080] do_syscall_64+0xcd/0x250 [ 1547.067877][ T3080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1547.067906][ T3080] RIP: 0033:0x7f1b7c98d169 [ 1547.067921][ T3080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1547.067940][ T3080] RSP: 002b:00007f1b7d873038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1547.067960][ T3080] RAX: ffffffffffffffda RBX: 00007f1b7cba5fa0 RCX: 00007f1b7c98d169 [ 1547.067974][ T3080] RDX: 0000000000000008 RSI: 0000000000005403 RDI: 0000000000000008 [ 1547.067986][ T3080] RBP: 00007f1b7d873090 R08: 0000000000000000 R09: 0000000000000000 [ 1547.067999][ T3080] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1547.068012][ T3080] R13: 0000000000000000 R14: 00007f1b7cba5fa0 R15: 00007ffca8c0f248 [ 1547.068030][ T3080] [ 1547.068058][ T3080] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1547.349982][ T3053] cgroup: fork rejected by pids controller in /syz2 [ 1547.914078][ T3110] [U]  [ 1547.917175][ T3110] [U] [ 1547.920130][ T3110] [U] [ 1547.923108][ T3110] [U] [ 1547.953028][ T3110] [U] [ 1547.956047][ T3110] [U] [ 1547.959003][ T3110] [U] [ 1547.961959][ T3110] [U] [ 1548.038760][ T3110] [U] [ 1548.041795][ T3110] [U] [ 1548.044756][ T3110] [U] [ 1548.047729][ T3110] [U] [ 1548.120759][ T3110] [U] [ 1548.123762][ T3110] [U] [ 1548.126733][ T3110] [U] [ 1548.129704][ T3110] [U] [ 1548.197394][ T3110] [U] [ 1548.200441][ T3110] [U] [ 1548.203413][ T3110] [U] [ 1548.206492][ T3110] [U] [ 1548.259855][ T3110] [U] [ 1548.262875][ T3110] [U] [ 1548.265838][ T3110] [U] [ 1548.268792][ T3110] [U] [ 1548.299879][ T3119] FAULT_INJECTION: forcing a failure. [ 1548.299879][ T3119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1548.344160][ T3110] [U] [ 1548.347159][ T3110] [U] [ 1548.350115][ T3110] [U] [ 1548.353077][ T3110] [U] [ 1548.415054][ T3110] [U] [ 1548.418054][ T3110] [U] [ 1548.421007][ T3110] [U] [ 1548.424039][ T3110] [U] [ 1548.495923][ T3119] CPU: 0 UID: 0 PID: 3119 Comm: syz.1.7634 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1548.495953][ T3119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1548.495967][ T3119] Call Trace: [ 1548.495974][ T3119] [ 1548.495981][ T3119] dump_stack_lvl+0x16c/0x1f0 [ 1548.496015][ T3119] should_fail_ex+0x50a/0x650 [ 1548.496036][ T3119] _copy_from_user+0x2e/0xd0 [ 1548.496059][ T3119] copy_msghdr_from_user+0x99/0x160 [ 1548.496092][ T3119] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1548.496126][ T3119] ? kfree+0x260/0x4d0 [ 1548.496155][ T3119] ___sys_recvmsg+0xdc/0x1a0 [ 1548.496185][ T3119] ? __pfx____sys_recvmsg+0x10/0x10 [ 1548.496218][ T3119] ? rcu_is_watching+0x12/0xc0 [ 1548.496243][ T3119] ? __pfx___might_resched+0x10/0x10 [ 1548.496300][ T3119] ? __might_fault+0xe3/0x190 [ 1548.496324][ T3119] do_recvmmsg+0x2f8/0x740 [ 1548.496362][ T3119] ? __pfx_do_recvmmsg+0x10/0x10 [ 1548.496399][ T3119] ? vfs_write+0x306/0x1150 [ 1548.496452][ T3119] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 1548.496492][ T3119] ? __fget_files+0x206/0x3a0 [ 1548.496529][ T3119] __x64_sys_recvmmsg+0x239/0x290 [ 1548.496553][ T3119] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1548.496577][ T3119] ? rcu_is_watching+0x12/0xc0 [ 1548.496601][ T3119] ? rcu_is_watching+0x12/0xc0 [ 1548.496627][ T3119] do_syscall_64+0xcd/0x250 [ 1548.496663][ T3119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1548.496697][ T3119] RIP: 0033:0x7f1b7c98d169 [ 1548.496714][ T3119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1548.496738][ T3119] RSP: 002b:00007f1b7d873038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1548.496760][ T3119] RAX: ffffffffffffffda RBX: 00007f1b7cba5fa0 RCX: 00007f1b7c98d169 [ 1548.496789][ T3119] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 1548.496803][ T3119] RBP: 00007f1b7d873090 R08: 0000000000000000 R09: 0000000000000000 [ 1548.496817][ T3119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1548.496831][ T3119] R13: 0000000000000000 R14: 00007f1b7cba5fa0 R15: 00007ffca8c0f248 [ 1548.496852][ T3119] [ 1548.734281][ C0] vkms_vblank_simulate: vblank timer overrun [ 1549.617625][ T3110] [U] [ 1549.620638][ T3110] [U] [ 1549.623600][ T3110] [U] [ 1549.626558][ T3110] [U] [ 1549.671982][ T3110] [U] [ 1551.863390][ T3218] team0: left allmulticast mode [ 1551.894076][ T3218] team_slave_0: left allmulticast mode [ 1551.940269][ T3218] team_slave_1: left allmulticast mode [ 1551.965980][ T3218] team0: left promiscuous mode [ 1551.997230][ T3218] team_slave_0: left promiscuous mode [ 1552.028276][ T3218] team_slave_1: left promiscuous mode [ 1552.071197][ T3218] bridge0: port 3(team0) entered disabled state [ 1552.813222][ T3249] ptrace attach of "./syz-executor exec"[31623] was attempted by "./syz-executor exec"[3249] [ 1553.563163][ T3267] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1553.648324][ T3267] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1553.743579][ T3281] FAULT_INJECTION: forcing a failure. [ 1553.743579][ T3281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1553.885569][ T3281] CPU: 0 UID: 0 PID: 3281 Comm: syz.5.7658 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1553.885601][ T3281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1553.885616][ T3281] Call Trace: [ 1553.885622][ T3281] [ 1553.885631][ T3281] dump_stack_lvl+0x16c/0x1f0 [ 1553.885669][ T3281] should_fail_ex+0x50a/0x650 [ 1553.885694][ T3281] _copy_from_user+0x2e/0xd0 [ 1553.885721][ T3281] copy_msghdr_from_user+0x99/0x160 [ 1553.885768][ T3281] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1553.885808][ T3281] ? trace_lock_acquire+0x14e/0x1f0 [ 1553.885840][ T3281] ___sys_recvmsg+0xdc/0x1a0 [ 1553.885877][ T3281] ? __pfx____sys_recvmsg+0x10/0x10 [ 1553.885915][ T3281] ? __pfx_lock_release+0x10/0x10 [ 1553.885946][ T3281] ? trace_lock_acquire+0x14e/0x1f0 [ 1553.885981][ T3281] do_recvmmsg+0x2f8/0x740 [ 1553.886020][ T3281] ? __pfx_do_recvmmsg+0x10/0x10 [ 1553.886055][ T3281] ? vfs_write+0x306/0x1150 [ 1553.886089][ T3281] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 1553.886129][ T3281] ? __fget_files+0x206/0x3a0 [ 1553.886166][ T3281] __x64_sys_recvmmsg+0x239/0x290 [ 1553.886190][ T3281] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1553.886214][ T3281] ? rcu_is_watching+0x12/0xc0 [ 1553.886239][ T3281] ? rcu_is_watching+0x12/0xc0 [ 1553.886264][ T3281] do_syscall_64+0xcd/0x250 [ 1553.886301][ T3281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1553.886335][ T3281] RIP: 0033:0x7fb35ab8d169 [ 1553.886352][ T3281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1553.886375][ T3281] RSP: 002b:00007fb35b9e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1553.886397][ T3281] RAX: ffffffffffffffda RBX: 00007fb35ada6080 RCX: 00007fb35ab8d169 [ 1553.886414][ T3281] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 1553.886428][ T3281] RBP: 00007fb35b9e4090 R08: 0000000000000000 R09: 0000000000000000 [ 1553.886443][ T3281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1553.886458][ T3281] R13: 0000000000000000 R14: 00007fb35ada6080 R15: 00007ffd45e95c38 [ 1553.886479][ T3281] [ 1554.120727][ C0] vkms_vblank_simulate: vblank timer overrun [ 1554.719978][ T3294] random: crng reseeded on system resumption [ 1554.744882][ T3294] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1554.779976][ T3294] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1554.818265][ T3294] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1555.437594][ T3294] PM: hibernation: Basic memory bitmaps created [ 1555.808512][ T3292] PM: hibernation: Basic memory bitmaps freed [ 1556.385506][ T3341] FAULT_INJECTION: forcing a failure. [ 1556.385506][ T3341] name failslab, interval 1, probability 0, space 0, times 0 [ 1556.526093][ T3341] CPU: 0 UID: 0 PID: 3341 Comm: syz.1.7666 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1556.526123][ T3341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1556.526137][ T3341] Call Trace: [ 1556.526143][ T3341] [ 1556.526151][ T3341] dump_stack_lvl+0x16c/0x1f0 [ 1556.526186][ T3341] should_fail_ex+0x50a/0x650 [ 1556.526207][ T3341] ? fs_reclaim_acquire+0xae/0x150 [ 1556.526235][ T3341] ? tomoyo_init_log+0x13c7/0x2170 [ 1556.526264][ T3341] should_failslab+0xc2/0x120 [ 1556.526284][ T3341] __kmalloc_noprof+0xcb/0x510 [ 1556.526315][ T3341] ? __pfx_from_kuid+0x10/0x10 [ 1556.526352][ T3341] tomoyo_init_log+0x13c7/0x2170 [ 1556.526384][ T3341] ? kasan_save_stack+0x42/0x60 [ 1556.526417][ T3341] ? __pfx_tomoyo_init_log+0x10/0x10 [ 1556.526455][ T3341] tomoyo_write_log2+0x2f0/0xbf0 [ 1556.526486][ T3341] tomoyo_supervisor+0x15f/0x1380 [ 1556.526522][ T3341] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1556.526555][ T3341] ? __pfx_vsnprintf+0x10/0x10 [ 1556.526585][ T3341] ? rcu_is_watching+0x12/0xc0 [ 1556.526611][ T3341] ? tomoyo_encode2+0x329/0x3e0 [ 1556.526652][ T3341] ? tomoyo_check_path_number_acl+0xa6/0x2f0 [ 1556.526680][ T3341] tomoyo_path_number_perm+0x447/0x590 [ 1556.526705][ T3341] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1556.526729][ T3341] ? rcu_is_watching+0x12/0xc0 [ 1556.526752][ T3341] ? preempt_count_add+0x76/0x150 [ 1556.526782][ T3341] ? __pfx_lock_release+0x10/0x10 [ 1556.526810][ T3341] ? trace_lock_acquire+0x14e/0x1f0 [ 1556.526832][ T3341] ? __fget_files+0x40/0x3a0 [ 1556.526864][ T3341] ? __fget_files+0x206/0x3a0 [ 1556.526893][ T3341] security_file_ioctl+0x9b/0x240 [ 1556.526920][ T3341] __x64_sys_ioctl+0xb7/0x200 [ 1556.526944][ T3341] do_syscall_64+0xcd/0x250 [ 1556.526975][ T3341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1556.527004][ T3341] RIP: 0033:0x7f1b7c98d169 [ 1556.527018][ T3341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1556.527038][ T3341] RSP: 002b:00007f1b7d852038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1556.527057][ T3341] RAX: ffffffffffffffda RBX: 00007f1b7cba6080 RCX: 00007f1b7c98d169 [ 1556.527070][ T3341] RDX: 0000000000000038 RSI: 00000000c008ae67 RDI: 0000000000000003 [ 1556.527082][ T3341] RBP: 00007f1b7d852090 R08: 0000000000000000 R09: 0000000000000000 [ 1556.527095][ T3341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1556.527107][ T3341] R13: 0000000000000001 R14: 00007f1b7cba6080 R15: 00007ffca8c0f248 [ 1556.527125][ T3341] [ 1556.806481][ C0] vkms_vblank_simulate: vblank timer overrun [ 1558.816291][ T3368] FAULT_INJECTION: forcing a failure. [ 1558.816291][ T3368] name failslab, interval 1, probability 0, space 0, times 0 [ 1558.884619][ T3368] CPU: 0 UID: 0 PID: 3368 Comm: syz.5.7677 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1558.884649][ T3368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1558.884661][ T3368] Call Trace: [ 1558.884668][ T3368] [ 1558.884675][ T3368] dump_stack_lvl+0x16c/0x1f0 [ 1558.884708][ T3368] should_fail_ex+0x50a/0x650 [ 1558.884728][ T3368] ? fs_reclaim_acquire+0xae/0x150 [ 1558.884754][ T3368] ? tomoyo_write_log2+0x336/0xbf0 [ 1558.884781][ T3368] should_failslab+0xc2/0x120 [ 1558.884800][ T3368] __kmalloc_cache_noprof+0x68/0x410 [ 1558.884831][ T3368] tomoyo_write_log2+0x336/0xbf0 [ 1558.884860][ T3368] tomoyo_supervisor+0x15f/0x1380 [ 1558.884894][ T3368] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1558.884926][ T3368] ? __pfx_vsnprintf+0x10/0x10 [ 1558.884954][ T3368] ? rcu_is_watching+0x12/0xc0 [ 1558.884978][ T3368] ? tomoyo_encode2+0x329/0x3e0 [ 1558.885008][ T3368] ? tomoyo_check_path_number_acl+0xa6/0x2f0 [ 1558.885035][ T3368] tomoyo_path_number_perm+0x447/0x590 [ 1558.885060][ T3368] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1558.885085][ T3368] ? rcu_is_watching+0x12/0xc0 [ 1558.885108][ T3368] ? preempt_count_add+0x76/0x150 [ 1558.885138][ T3368] ? __pfx_lock_release+0x10/0x10 [ 1558.885166][ T3368] ? trace_lock_acquire+0x14e/0x1f0 [ 1558.885189][ T3368] ? __fget_files+0x40/0x3a0 [ 1558.885225][ T3368] ? __fget_files+0x206/0x3a0 [ 1558.885255][ T3368] security_file_ioctl+0x9b/0x240 [ 1558.885281][ T3368] __x64_sys_ioctl+0xb7/0x200 [ 1558.885306][ T3368] do_syscall_64+0xcd/0x250 [ 1558.885335][ T3368] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1558.885362][ T3368] RIP: 0033:0x7fb35ab8d169 [ 1558.885376][ T3368] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1558.885395][ T3368] RSP: 002b:00007fb35ba05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1558.885413][ T3368] RAX: ffffffffffffffda RBX: 00007fb35ada5fa0 RCX: 00007fb35ab8d169 [ 1558.885426][ T3368] RDX: 0000000000000038 RSI: 000000080000541b RDI: 0000000000000003 [ 1558.885437][ T3368] RBP: 00007fb35ba05090 R08: 0000000000000000 R09: 0000000000000000 [ 1558.885449][ T3368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1558.885461][ T3368] R13: 0000000000000000 R14: 00007fb35ada5fa0 R15: 00007ffd45e95c38 [ 1558.885478][ T3368] [ 1561.770944][ T3419] team0: left allmulticast mode [ 1561.792108][ T3419] team_slave_0: left allmulticast mode [ 1561.815371][ T3419] team_slave_1: left allmulticast mode [ 1561.835734][ T3419] team0: left promiscuous mode [ 1561.872317][ T3419] team_slave_0: left promiscuous mode [ 1561.898306][ T3419] team_slave_1: left promiscuous mode [ 1561.923163][ T3419] bridge0: port 3(team0) entered disabled state [ 1562.402622][ T3433] syz_tun: tun_chr_ioctl cmd 1074025678 [ 1562.445288][ T3433] syz_tun: group set to 23693 [ 1562.450675][ T3433] FAULT_INJECTION: forcing a failure. [ 1562.450675][ T3433] name failslab, interval 1, probability 0, space 0, times 0 [ 1562.523732][ T3433] CPU: 0 UID: 0 PID: 3433 Comm: syz.1.7694 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1562.523764][ T3433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1562.523779][ T3433] Call Trace: [ 1562.523786][ T3433] [ 1562.523794][ T3433] dump_stack_lvl+0x16c/0x1f0 [ 1562.523833][ T3433] should_fail_ex+0x50a/0x650 [ 1562.523863][ T3433] ? fs_reclaim_acquire+0xae/0x150 [ 1562.523894][ T3433] should_failslab+0xc2/0x120 [ 1562.523916][ T3433] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 1562.523954][ T3433] ? __alloc_skb+0x2b1/0x380 [ 1562.524003][ T3433] __alloc_skb+0x2b1/0x380 [ 1562.524036][ T3433] ? __pfx___alloc_skb+0x10/0x10 [ 1562.524083][ T3433] ? if_nlmsg_size+0x45d/0xa80 [ 1562.524116][ T3433] rtmsg_ifinfo_build_skb+0x81/0x280 [ 1562.524140][ T3433] rtmsg_ifinfo+0x9f/0x1a0 [ 1562.524172][ T3433] netdev_state_change+0x12f/0x150 [ 1562.524194][ T3433] ? __pfx_netdev_state_change+0x10/0x10 [ 1562.524216][ T3433] ? __pfx_from_kgid+0x10/0x10 [ 1562.524235][ T3433] __tun_chr_ioctl+0x2866/0x4760 [ 1562.524274][ T3433] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 1562.524300][ T3433] ? __fget_files+0x206/0x3a0 [ 1562.524333][ T3433] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 1562.524364][ T3433] __x64_sys_ioctl+0x190/0x200 [ 1562.524389][ T3433] do_syscall_64+0xcd/0x250 [ 1562.524420][ T3433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1562.524449][ T3433] RIP: 0033:0x7f1b7c98d169 [ 1562.524464][ T3433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1562.524485][ T3433] RSP: 002b:00007f1b7d873038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1562.524504][ T3433] RAX: ffffffffffffffda RBX: 00007f1b7cba5fa0 RCX: 00007f1b7c98d169 [ 1562.524535][ T3433] RDX: 0000000000005c8d RSI: 00000000400454ce RDI: 00000000000000c8 [ 1562.524549][ T3433] RBP: 00007f1b7d873090 R08: 0000000000000000 R09: 0000000000000000 [ 1562.524562][ T3433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1562.524576][ T3433] R13: 0000000000000001 R14: 00007f1b7cba5fa0 R15: 00007ffca8c0f248 [ 1562.524595][ T3433] [ 1563.858194][ T3439] mkiss: ax0: crc mode is auto. [ 1564.182155][ T3449] FAULT_INJECTION: forcing a failure. [ 1564.182155][ T3449] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1564.329734][ T3449] CPU: 0 UID: 0 PID: 3449 Comm: syz.5.7700 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1564.329760][ T3449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1564.329772][ T3449] Call Trace: [ 1564.329778][ T3449] [ 1564.329786][ T3449] dump_stack_lvl+0x16c/0x1f0 [ 1564.329819][ T3449] should_fail_ex+0x50a/0x650 [ 1564.329838][ T3449] ? __pfx___might_resched+0x10/0x10 [ 1564.329871][ T3449] should_fail_alloc_page+0xe7/0x130 [ 1564.329891][ T3449] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1564.329918][ T3449] ? __kernel_text_address+0xd/0x40 [ 1564.329948][ T3449] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 1564.329984][ T3449] ? stack_trace_save+0x95/0xd0 [ 1564.330005][ T3449] ? __pfx_stack_trace_save+0x10/0x10 [ 1564.330027][ T3449] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1564.330059][ T3449] ? kasan_save_stack+0x42/0x60 [ 1564.330087][ T3449] ? rcu_is_watching+0x12/0xc0 [ 1564.330107][ T3449] ? lock_release+0x4e2/0x6f0 [ 1564.330132][ T3449] ? is_bpf_text_address+0x8a/0x1a0 [ 1564.330158][ T3449] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1564.330188][ T3449] ? policy_nodemask+0xea/0x4e0 [ 1564.330206][ T3449] alloc_pages_mpol+0x1fc/0x540 [ 1564.330224][ T3449] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1564.330241][ T3449] ? kernel_text_address+0x8d/0x100 [ 1564.330269][ T3449] alloc_pages_noprof+0x131/0x390 [ 1564.330286][ T3449] __pmd_alloc+0x3f/0x870 [ 1564.330312][ T3449] __handle_mm_fault+0x94a/0x2a40 [ 1564.330343][ T3449] ? __pfx___handle_mm_fault+0x10/0x10 [ 1564.330376][ T3449] ? find_vma+0xc0/0x140 [ 1564.330397][ T3449] ? __pfx_find_vma+0x10/0x10 [ 1564.330421][ T3449] handle_mm_fault+0x3fa/0xaa0 [ 1564.330450][ T3449] do_user_addr_fault+0x7a3/0x13f0 [ 1564.330478][ T3449] exc_page_fault+0x5c/0xc0 [ 1564.330514][ T3449] asm_exc_page_fault+0x26/0x30 [ 1564.330571][ T3449] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 1564.330597][ T3449] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 1564.330618][ T3449] RSP: 0018:ffffc900045677e0 EFLAGS: 00050206 [ 1564.330639][ T3449] RAX: 0000000000000001 RBX: 00000000000000c4 RCX: 00000000000000c4 [ 1564.330653][ T3449] RDX: ffffed100691a769 RSI: 0000000000000000 RDI: ffff8880348d3a80 [ 1564.330667][ T3449] RBP: 0000000000000000 R08: 0000000000000001 R09: ffffed100691a768 [ 1564.330680][ T3449] R10: ffff8880348d3b43 R11: 0000000000000000 R12: ffffc90004567d60 [ 1564.330695][ T3449] R13: 00000000000000c4 R14: ffff8880348d3a80 R15: 00007ffffffff000 [ 1564.330714][ T3449] _copy_from_iter+0x385/0x1560 [ 1564.330738][ T3449] ? trace_lock_acquire+0x14e/0x1f0 [ 1564.330763][ T3449] ? __alloc_skb+0x1fe/0x380 [ 1564.330798][ T3449] ? __virt_addr_valid+0x1a4/0x590 [ 1564.330820][ T3449] ? __pfx__copy_from_iter+0x10/0x10 [ 1564.330842][ T3449] ? __virt_addr_valid+0x1a4/0x590 [ 1564.330865][ T3449] ? __virt_addr_valid+0x5e/0x590 [ 1564.330886][ T3449] ? __phys_addr_symbol+0x30/0x80 [ 1564.330907][ T3449] ? __check_object_size+0x488/0x710 [ 1564.330929][ T3449] netlink_sendmsg+0x813/0xd70 [ 1564.330964][ T3449] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1564.331000][ T3449] ____sys_sendmsg+0xaaf/0xc90 [ 1564.331026][ T3449] ? copy_msghdr_from_user+0x10b/0x160 [ 1564.331061][ T3449] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1564.331088][ T3449] ? _kstrtoull+0x146/0x200 [ 1564.331116][ T3449] ? __pfx__kstrtoull+0x10/0x10 [ 1564.331145][ T3449] ? lock_release+0x4e2/0x6f0 [ 1564.331175][ T3449] ___sys_sendmsg+0x135/0x1e0 [ 1564.331209][ T3449] ? __pfx____sys_sendmsg+0x10/0x10 [ 1564.331243][ T3449] ? __pfx_kstrtouint+0x10/0x10 [ 1564.331276][ T3449] ? trace_lock_acquire+0x14e/0x1f0 [ 1564.331308][ T3449] __sys_sendmmsg+0x201/0x420 [ 1564.331328][ T3449] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1564.331351][ T3449] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1564.331388][ T3449] ? fput+0x67/0x440 [ 1564.331408][ T3449] ? ksys_write+0x1ba/0x250 [ 1564.331437][ T3449] ? __pfx_ksys_write+0x10/0x10 [ 1564.331468][ T3449] __x64_sys_sendmmsg+0x9c/0x100 [ 1564.331488][ T3449] do_syscall_64+0xcd/0x250 [ 1564.331520][ T3449] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1564.331549][ T3449] RIP: 0033:0x7fb35ab8d169 [ 1564.331565][ T3449] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1564.331586][ T3449] RSP: 002b:00007fb35ba05038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1564.331605][ T3449] RAX: ffffffffffffffda RBX: 00007fb35ada5fa0 RCX: 00007fb35ab8d169 [ 1564.331620][ T3449] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 1564.331637][ T3449] RBP: 00007fb35ba05090 R08: 0000000000000000 R09: 0000000000000000 [ 1564.331650][ T3449] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1564.331663][ T3449] R13: 0000000000000000 R14: 00007fb35ada5fa0 R15: 00007ffd45e95c38 [ 1564.331694][ T3449] [ 1565.270256][ T3466] mkiss: ax0: crc mode is auto. [ 1565.373093][ T3462] FAULT_INJECTION: forcing a failure. [ 1565.373093][ T3462] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1565.387715][ T3462] CPU: 0 UID: 0 PID: 3462 Comm: syz.1.7703 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1565.387741][ T3462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1565.387753][ T3462] Call Trace: [ 1565.387759][ T3462] [ 1565.387766][ T3462] dump_stack_lvl+0x16c/0x1f0 [ 1565.387799][ T3462] should_fail_ex+0x50a/0x650 [ 1565.387824][ T3462] _copy_from_user+0x2e/0xd0 [ 1565.387846][ T3462] copy_msghdr_from_user+0x99/0x160 [ 1565.387879][ T3462] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1565.387913][ T3462] ? kfree+0x260/0x4d0 [ 1565.387941][ T3462] ___sys_recvmsg+0xdc/0x1a0 [ 1565.387972][ T3462] ? __pfx____sys_recvmsg+0x10/0x10 [ 1565.388005][ T3462] ? rcu_is_watching+0x12/0xc0 [ 1565.388030][ T3462] ? __pfx___might_resched+0x10/0x10 [ 1565.388061][ T3462] ? __might_fault+0xe3/0x190 [ 1565.388082][ T3462] do_recvmmsg+0x2f8/0x740 [ 1565.388115][ T3462] ? __pfx_do_recvmmsg+0x10/0x10 [ 1565.388145][ T3462] ? vfs_write+0x306/0x1150 [ 1565.388174][ T3462] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 1565.388208][ T3462] ? __fget_files+0x206/0x3a0 [ 1565.388239][ T3462] __x64_sys_recvmmsg+0x239/0x290 [ 1565.388260][ T3462] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1565.388280][ T3462] ? rcu_is_watching+0x12/0xc0 [ 1565.388300][ T3462] ? rcu_is_watching+0x12/0xc0 [ 1565.388322][ T3462] do_syscall_64+0xcd/0x250 [ 1565.388352][ T3462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1565.388381][ T3462] RIP: 0033:0x7f1b7c98d169 [ 1565.388396][ T3462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1565.388416][ T3462] RSP: 002b:00007f1b7d873038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1565.388435][ T3462] RAX: ffffffffffffffda RBX: 00007f1b7cba5fa0 RCX: 00007f1b7c98d169 [ 1565.388448][ T3462] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000003 [ 1565.388461][ T3462] RBP: 00007f1b7d873090 R08: 0000000000000000 R09: 0000000000000000 [ 1565.388473][ T3462] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1565.388486][ T3462] R13: 0000000000000000 R14: 00007f1b7cba5fa0 R15: 00007ffca8c0f248 [ 1565.388504][ T3462] [ 1566.116247][ T3486] syz_tun: tun_chr_ioctl cmd 1074025678 [ 1566.122399][ T3486] syz_tun: group set to 23693 [ 1566.376934][ T3488] netlink: 28 bytes leftover after parsing attributes in process `syz.8.7712'. [ 1566.408249][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1566.445168][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1566.475055][ T3491] ecryptfs_parse_packet_length: Error parsing packet length [ 1566.483089][ T3491] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 1566.534932][ T3488] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1566.543098][ T3488] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1567.887429][ T3078] syz.2.7626 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 1567.963959][ T3078] CPU: 0 UID: 0 PID: 3078 Comm: syz.2.7626 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1567.963990][ T3078] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1567.964017][ T3078] Call Trace: [ 1567.964023][ T3078] [ 1567.964031][ T3078] dump_stack_lvl+0x16c/0x1f0 [ 1567.964076][ T3078] dump_header+0x101/0x930 [ 1567.964104][ T3078] oom_kill_process+0x270/0xa60 [ 1567.964128][ T3078] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 1567.964154][ T3078] out_of_memory+0x351/0x1700 [ 1567.964181][ T3078] ? __pfx_out_of_memory+0x10/0x10 [ 1567.964205][ T3078] ? rcu_read_unlock+0x17/0x60 [ 1567.964223][ T3078] ? __pfx_lock_release+0x10/0x10 [ 1567.964253][ T3078] mem_cgroup_out_of_memory+0x207/0x270 [ 1567.964282][ T3078] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 1567.964308][ T3078] ? do_raw_spin_unlock+0x172/0x230 [ 1567.964329][ T3078] try_charge_memcg+0x54c/0xaf0 [ 1567.964362][ T3078] ? __pfx_try_charge_memcg+0x10/0x10 [ 1567.964393][ T3078] ? trace_lock_acquire+0x14e/0x1f0 [ 1567.964416][ T3078] ? get_mem_cgroup_from_mm+0x7f/0x5f0 [ 1567.964442][ T3078] ? lock_acquire+0x2f/0xb0 [ 1567.964469][ T3078] ? get_mem_cgroup_from_mm+0x7f/0x5f0 [ 1567.964497][ T3078] charge_memcg+0x8a/0x310 [ 1567.964527][ T3078] __mem_cgroup_charge+0x2b/0x1e0 [ 1567.964547][ T3078] shmem_alloc_and_add_folio+0x50a/0xc10 [ 1567.964571][ T3078] ? shmem_huge_global_enabled+0x72/0x6b0 [ 1567.964593][ T3078] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1567.964616][ T3078] ? shmem_allowable_huge_orders+0xd0/0x410 [ 1567.964642][ T3078] shmem_get_folio_gfp+0x689/0x1530 [ 1567.964667][ T3078] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1567.964710][ T3078] ? rcu_is_watching+0x12/0xc0 [ 1567.964733][ T3078] shmem_write_begin+0x161/0x300 [ 1567.964759][ T3078] ? __pfx_shmem_write_begin+0x10/0x10 [ 1567.964794][ T3078] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 1567.964827][ T3078] ? __pfx_timestamp_truncate+0x10/0x10 [ 1567.964861][ T3078] generic_perform_write+0x3e9/0x940 [ 1567.964885][ T3078] ? __pfx_generic_perform_write+0x10/0x10 [ 1567.964908][ T3078] ? inode_needs_update_time.part.0+0x191/0x270 [ 1567.964944][ T3078] shmem_file_write_iter+0x10e/0x140 [ 1567.964972][ T3078] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 1567.965000][ T3078] __kernel_write_iter+0x318/0xa90 [ 1567.965029][ T3078] ? __pfx___kernel_write_iter+0x10/0x10 [ 1567.965056][ T3078] ? get_dump_page+0x15b/0x230 [ 1567.965088][ T3078] ? __pfx___might_resched+0x10/0x10 [ 1567.965119][ T3078] ? copy_mc_enhanced_fast_string+0xa/0x13 [ 1567.965145][ T3078] dump_user_range+0x388/0x910 [ 1567.965171][ T3078] ? __pfx_dump_user_range+0x10/0x10 [ 1567.965195][ T3078] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 1567.965228][ T3078] ? __pfx_writenote+0x10/0x10 [ 1567.965256][ T3078] elf_core_dump+0x287c/0x3a50 [ 1567.965293][ T3078] ? __pfx_elf_core_dump+0x10/0x10 [ 1567.965319][ T3078] ? rcu_is_watching+0x12/0xc0 [ 1567.965339][ T3078] ? lock_release+0x4e2/0x6f0 [ 1567.965365][ T3078] ? try_to_wake_up+0x949/0x1490 [ 1567.965393][ T3078] ? __pfx_event_filter_pid_sched_wakeup_probe_post+0x10/0x10 [ 1567.965426][ T3078] ? 0xffffffffff600000 [ 1567.965440][ T3078] ? trace_irq_enable.constprop.0+0xea/0x140 [ 1567.965474][ T3078] ? rwsem_wake.isra.0+0xbe/0x120 [ 1567.965513][ T3078] ? rcu_is_watching+0x12/0xc0 [ 1567.965533][ T3078] ? trace_lock_acquire+0x14e/0x1f0 [ 1567.965556][ T3078] ? get_signal+0x230b/0x26c0 [ 1567.965586][ T3078] ? lock_acquire+0x2f/0xb0 [ 1567.965615][ T3078] ? do_coredump+0x3166/0x4410 [ 1567.965637][ T3078] do_coredump+0x3166/0x4410 [ 1567.965663][ T3078] ? __pfx_do_coredump+0x10/0x10 [ 1567.965687][ T3078] ? stack_trace_save+0x95/0xd0 [ 1567.965708][ T3078] ? __pfx_stack_trace_save+0x10/0x10 [ 1567.965746][ T3078] ? stack_depot_save_flags+0x28/0x9c0 [ 1567.965767][ T3078] ? rcu_is_watching+0x12/0xc0 [ 1567.965802][ T3078] ? lock_release+0x4e2/0x6f0 [ 1567.965831][ T3078] ? kmem_cache_free+0x2e2/0x4d0 [ 1567.965859][ T3078] ? __sigqueue_free+0xba/0x2a0 [ 1567.965880][ T3078] ? get_signal+0xcbc/0x26c0 [ 1567.965909][ T3078] ? arch_do_signal_or_restart+0x90/0x7e0 [ 1567.965932][ T3078] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 1567.965975][ T3078] ? rcu_is_watching+0x12/0xc0 [ 1567.965995][ T3078] ? proc_coredump_connector+0x2d2/0x4f0 [ 1567.966029][ T3078] ? __pfx_proc_coredump_connector+0x10/0x10 [ 1567.966065][ T3078] ? rcu_is_watching+0x12/0xc0 [ 1567.966086][ T3078] get_signal+0x230b/0x26c0 [ 1567.966121][ T3078] ? __pfx_get_signal+0x10/0x10 [ 1567.966151][ T3078] ? rcu_is_watching+0x12/0xc0 [ 1567.966172][ T3078] ? trace_irq_disable.constprop.0+0xea/0x140 [ 1567.966204][ T3078] arch_do_signal_or_restart+0x90/0x7e0 [ 1567.966227][ T3078] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1567.966252][ T3078] ? do_user_addr_fault+0xa4b/0x13f0 [ 1567.966284][ T3078] ? rcu_is_watching+0x12/0xc0 [ 1567.966306][ T3078] irqentry_exit_to_user_mode+0x13f/0x280 [ 1567.966336][ T3078] asm_exc_page_fault+0x26/0x30 [ 1567.966364][ T3078] RIP: 0033:0x0 [ 1567.966376][ T3078] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 1567.966385][ T3078] RSP: 002b:000000000000000a EFLAGS: 00010217 [ 1567.966401][ T3078] RAX: 0000000000000000 RBX: 00007f598eda5fa0 RCX: 00007f598eb8d169 [ 1567.966414][ T3078] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 1567.966426][ T3078] RBP: 00007f598ec0e2a0 R08: 0000000000000002 R09: 0000000000000000 [ 1567.966438][ T3078] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1567.966450][ T3078] R13: 0000000000000000 R14: 00007f598eda5fa0 R15: 00007ffc9cb7c6a8 [ 1567.966468][ T3078] [ 1567.969653][ T3078] memory: usage 307200kB, limit 307200kB, failcnt 21873 [ 1568.614238][ T3526] netlink: 330 bytes leftover after parsing attributes in process `syz.5.7723'. [ 1569.267025][ T3539] net_ratelimit: 20 callbacks suppressed [ 1569.267043][ T3539] openvswitch: netlink: IP tunnel dst address not specified [ 1569.817970][ T3552] netlink: 334 bytes leftover after parsing attributes in process `syz.8.7729'. [ 1569.905889][ T3554] ima: policy update failed [ 1569.952998][ T31] audit: type=1802 audit(4294973281.985:430): pid=3554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.7730" res=0 errno=0 [ 1570.789027][ T3574] netlink: 20 bytes leftover after parsing attributes in process `syz.5.7735'. [ 1571.070829][ T3078] memory+swap: usage 419208kB, limit 9007199254740988kB, failcnt 0 [ 1571.135983][ T3078] kmem: usage 4268kB, limit 9007199254740988kB, failcnt 0 [ 1571.172882][ T3078] Memory cgroup stats for /syz2: [ 1571.173042][ T3078] cache 310112256 [ 1571.220209][ T3078] rss 86016 [ 1571.237335][ T3078] rss_huge 0 [ 1571.248941][ T3078] shmem 310112256 [ 1571.273884][ T3078] mapped_file 20316160 [ 1571.285632][ T3078] dirty 0 [ 1571.303317][ T3078] writeback 0 [ 1571.320659][ T3078] workingset_refault_anon 18341 [ 1571.346790][ T3078] workingset_refault_file 98 [ 1571.384627][ T3078] swap 114696192 [ 1571.394085][ T3078] swapcached 0 [ 1571.411351][ T3078] pgpgin 2489126 [ 1571.429501][ T3078] pgpgout 2425658 [ 1571.448873][ T3589] FAULT_INJECTION: forcing a failure. [ 1571.448873][ T3589] name failslab, interval 1, probability 0, space 0, times 0 [ 1571.467398][ T3078] pgfault 1670469 [ 1571.475205][ T3583] netlink: 28 bytes leftover after parsing attributes in process `syz.5.7739'. [ 1571.485913][ T3078] pgmajfault 2270 [ 1571.490408][ T3078] inactive_anon 138543104 [ 1571.495488][ T3589] CPU: 0 UID: 0 PID: 3589 Comm: syz.8.7741 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1571.495513][ T3589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1571.495526][ T3589] Call Trace: [ 1571.495532][ T3589] [ 1571.495539][ T3589] dump_stack_lvl+0x16c/0x1f0 [ 1571.495572][ T3589] should_fail_ex+0x50a/0x650 [ 1571.495590][ T3589] ? fs_reclaim_acquire+0xae/0x150 [ 1571.495615][ T3589] ? tomoyo_write_log2+0x336/0xbf0 [ 1571.495641][ T3589] should_failslab+0xc2/0x120 [ 1571.495659][ T3589] __kmalloc_cache_noprof+0x68/0x410 [ 1571.495687][ T3589] tomoyo_write_log2+0x336/0xbf0 [ 1571.495715][ T3589] tomoyo_supervisor+0x15f/0x1380 [ 1571.495746][ T3589] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1571.495775][ T3589] ? __pfx_vsnprintf+0x10/0x10 [ 1571.495801][ T3589] ? rcu_is_watching+0x12/0xc0 [ 1571.495824][ T3589] ? tomoyo_encode2+0x329/0x3e0 [ 1571.495851][ T3589] ? tomoyo_check_path_number_acl+0xa6/0x2f0 [ 1571.495878][ T3589] tomoyo_path_number_perm+0x447/0x590 [ 1571.495901][ T3589] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1571.495931][ T3589] ? rcu_is_watching+0x12/0xc0 [ 1571.495954][ T3589] ? preempt_count_add+0x76/0x150 [ 1571.495985][ T3589] ? __pfx_lock_release+0x10/0x10 [ 1571.496012][ T3589] ? trace_lock_acquire+0x14e/0x1f0 [ 1571.496035][ T3589] ? __fget_files+0x40/0x3a0 [ 1571.496084][ T3589] ? __fget_files+0x206/0x3a0 [ 1571.496115][ T3589] security_file_ioctl+0x9b/0x240 [ 1571.496160][ T3589] __x64_sys_ioctl+0xb7/0x200 [ 1571.496189][ T3589] do_syscall_64+0xcd/0x250 [ 1571.496224][ T3589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1571.496256][ T3589] RIP: 0033:0x7f7881b8d169 [ 1571.496285][ T3589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1571.496306][ T3589] RSP: 002b:00007f7882904038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1571.496327][ T3589] RAX: ffffffffffffffda RBX: 00007f7881da5fa0 RCX: 00007f7881b8d169 [ 1571.496341][ T3589] RDX: 0000000000000038 RSI: 00000000c008ae67 RDI: 0000000000000003 [ 1571.496354][ T3589] RBP: 00007f7882904090 R08: 0000000000000000 R09: 0000000000000000 [ 1571.496368][ T3589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1571.496381][ T3589] R13: 0000000000000000 R14: 00007f7881da5fa0 R15: 00007ffed5bbb6c8 [ 1571.496400][ T3589] [ 1571.496452][ T3078] active_anon 171655168 [ 1571.758684][ T3583] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1571.770132][ T3583] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1571.788108][ T3583] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1571.806678][ T3583] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1571.824529][ T3584] ecryptfs_parse_packet_length: Error parsing packet length [ 1571.832557][ T3584] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 1572.033220][ T3078] inactive_file 0 [ 1572.061408][ T3078] active_file 0 [ 1572.074950][ T3078] unevictable 0 [ 1572.078790][ T3078] hierarchical_memory_limit 314572800 [ 1572.086971][ T3596] netlink: 20 bytes leftover after parsing attributes in process `syz.8.7743'. [ 1572.106911][ T3078] hierarchical_memsw_limit 9223372036854771712 [ 1572.123736][ T3078] total_cache 310112256 [ 1572.138631][ T3078] total_rss 86016 [ 1572.154323][ T3078] total_rss_huge 0 [ 1572.169009][ T3078] total_shmem 310112256 [ 1572.182544][ T3078] total_mapped_file 20316160 [ 1572.223438][ T3597] netlink: 330 bytes leftover after parsing attributes in process `syz.1.7744'. [ 1572.248446][ T3078] total_dirty 0 [ 1572.252257][ T3078] total_writeback 0 [ 1572.267162][ T3078] total_workingset_refault_anon 18341 [ 1572.297724][ T3603] syz_tun: tun_chr_ioctl cmd 1074025678 [ 1572.304223][ T3078] total_workingset_refault_file 98 [ 1572.318490][ T3603] syz_tun: group set to 23693 [ 1572.327421][ T3078] total_swap 114696192 [ 1572.344730][ T3078] total_swapcached 0 [ 1572.363264][ T3078] total_pgpgin 2489126 [ 1572.381427][ T3607] random: crng reseeded on system resumption [ 1572.389012][ T3078] total_pgpgout 2425658 [ 1572.407818][ T3078] total_pgfault 1670469 [ 1572.412399][ T3078] total_pgmajfault 2270 [ 1572.452134][ T3078] total_inactive_anon 138543104 [ 1572.496132][ T3078] total_active_anon 171655168 [ 1572.501321][ T3078] total_inactive_file 0 [ 1572.528695][ T3607] PM: hibernation: Marking nosave pages: [mem 0x00000000-0x00000fff] [ 1572.552250][ T3078] total_active_file 0 [ 1572.567315][ T3078] total_unevictable 0 [ 1572.571704][ T3078] anon_cost 0 [ 1572.600709][ T3078] file_cost 0 [ 1572.605268][ T3607] PM: hibernation: Marking nosave pages: [mem 0x0009f000-0x000fffff] [ 1572.626613][ T3078] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz2,task_memcg=/syz2,task=syz.2.7626,pid=3099,uid=0 [ 1572.704778][ T3078] Memory cgroup out of memory: Killed process 3099 (syz.2.7626) total-vm:131688kB, anon-rss:1048kB, file-rss:21672kB, shmem-rss:19716kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 1572.775477][ T3607] PM: hibernation: Marking nosave pages: [mem 0xbfffd000-0xffffffff] [ 1572.787696][ T3612] kexec: Could not allocate control_code_buffer [ 1573.329865][ T3607] PM: hibernation: Basic memory bitmaps created [ 1573.389210][ T3607] PM: hibernation: Basic memory bitmaps freed [ 1573.883907][ T3640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.7754'. [ 1573.930437][ T3640] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1573.958137][ T3635] ecryptfs_parse_packet_length: Error parsing packet length [ 1573.975472][ T3640] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1573.996937][ T3635] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 1574.316154][ T3640] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1574.334484][ T3640] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1575.159993][ T3663] ================================================================== [ 1575.168909][ T3663] BUG: KASAN: slab-use-after-free in force_devcd_write+0x317/0x330 [ 1575.177603][ T3663] Read of size 8 at addr ffff88807c6c3800 by task syz.8.7763/3663 [ 1575.186177][ T3663] [ 1575.188731][ T3663] CPU: 0 UID: 0 PID: 3663 Comm: syz.8.7763 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1575.188758][ T3663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1575.188773][ T3663] Call Trace: [ 1575.188781][ T3663] [ 1575.188790][ T3663] dump_stack_lvl+0x116/0x1f0 [ 1575.188826][ T3663] print_report+0xc3/0x670 [ 1575.188847][ T3663] ? __virt_addr_valid+0x5e/0x590 [ 1575.188868][ T3663] ? __phys_addr+0xc6/0x150 [ 1575.188890][ T3663] kasan_report+0xd9/0x110 [ 1575.188909][ T3663] ? force_devcd_write+0x317/0x330 [ 1575.188940][ T3663] ? force_devcd_write+0x317/0x330 [ 1575.188972][ T3663] force_devcd_write+0x317/0x330 [ 1575.189002][ T3663] ? __pfx_force_devcd_write+0x10/0x10 [ 1575.189033][ T3663] ? __debugfs_file_get+0x1ff/0x850 [ 1575.189062][ T3663] ? __pfx___debugfs_file_get+0x10/0x10 [ 1575.189090][ T3663] ? rcu_is_watching+0x12/0xc0 [ 1575.189113][ T3663] ? trace_lock_acquire+0x14e/0x1f0 [ 1575.189140][ T3663] full_proxy_write+0x13c/0x200 [ 1575.189169][ T3663] ? __pfx_full_proxy_write+0x10/0x10 [ 1575.189197][ T3663] vfs_write+0x24c/0x1150 [ 1575.189227][ T3663] ? __fget_files+0x1fc/0x3a0 [ 1575.189259][ T3663] ? __pfx___mutex_lock+0x10/0x10 [ 1575.189291][ T3663] ? __pfx_vfs_write+0x10/0x10 [ 1575.189323][ T3663] ? __fget_files+0x206/0x3a0 [ 1575.189356][ T3663] ksys_write+0x12b/0x250 [ 1575.189394][ T3663] ? __pfx_ksys_write+0x10/0x10 [ 1575.189448][ T3663] ? rcu_is_watching+0x12/0xc0 [ 1575.189473][ T3663] ? rcu_is_watching+0x12/0xc0 [ 1575.189499][ T3663] do_syscall_64+0xcd/0x250 [ 1575.189540][ T3663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.189575][ T3663] RIP: 0033:0x7f7881b8d169 [ 1575.189593][ T3663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1575.189617][ T3663] RSP: 002b:00007f7882904038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1575.189640][ T3663] RAX: ffffffffffffffda RBX: 00007f7881da5fa0 RCX: 00007f7881b8d169 [ 1575.189657][ T3663] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000006 [ 1575.189672][ T3663] RBP: 00007f7881c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1575.189687][ T3663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1575.189702][ T3663] R13: 0000000000000000 R14: 00007f7881da5fa0 R15: 00007ffed5bbb6c8 [ 1575.189724][ T3663] [ 1575.189732][ T3663] [ 1575.443961][ T3663] Allocated by task 3392: [ 1575.448716][ T3663] kasan_save_stack+0x33/0x60 [ 1575.453872][ T3663] kasan_save_track+0x14/0x30 [ 1575.459029][ T3663] __kasan_kmalloc+0xaa/0xb0 [ 1575.464108][ T3663] afs_alloc_call+0x51/0x640 [ 1575.469177][ T3663] afs_charge_preallocation+0xff/0x330 [ 1575.475170][ T3663] afs_open_socket+0x2b3/0x380 [ 1575.480415][ T3663] afs_net_init+0x95d/0xc60 [ 1575.485373][ T3663] ops_init+0x1df/0x5f0 [ 1575.489941][ T3663] setup_net+0x21f/0x860 [ 1575.494600][ T3663] copy_net_ns+0x2a6/0x5f0 [ 1575.499463][ T3663] create_new_namespaces+0x3ea/0xad0 [ 1575.505278][ T3663] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1575.511488][ T3663] ksys_unshare+0x45d/0xa40 [ 1575.516437][ T3663] __x64_sys_unshare+0x31/0x40 [ 1575.521666][ T3663] do_syscall_64+0xcd/0x250 [ 1575.526636][ T3663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1575.533118][ T3663] [ 1575.535666][ T3663] Freed by task 21309: [ 1575.540119][ T3663] kasan_save_stack+0x33/0x60 [ 1575.545260][ T3663] kasan_save_track+0x14/0x30 [ 1575.550431][ T3663] kasan_save_free_info+0x3b/0x60 [ 1575.555990][ T3663] __kasan_slab_free+0x51/0x70 [ 1575.561238][ T3663] kfree+0x2c4/0x4d0 [ 1575.565521][ T3663] afs_free_call+0x303/0x440 [ 1575.570576][ T3663] afs_put_call+0x188/0x1e0 [ 1575.575531][ T3663] rxrpc_discard_prealloc+0x67b/0x930 [ 1575.581435][ T3663] rxrpc_listen+0x117/0x330 [ 1575.586387][ T3663] afs_close_socket+0x97/0x340 [ 1575.591614][ T3663] afs_net_exit+0x93/0x130 [ 1575.596464][ T3663] ops_exit_list+0xb0/0x180 [ 1575.601412][ T3663] cleanup_net+0x5c6/0xb30 [ 1575.606274][ T3663] process_one_work+0x9c5/0x1ba0 [ 1575.611699][ T3663] worker_thread+0x6c8/0xf00 [ 1575.616744][ T3663] kthread+0x3af/0x750 [ 1575.621212][ T3663] ret_from_fork+0x45/0x80 [ 1575.626062][ T3663] ret_from_fork_asm+0x1a/0x30 [ 1575.631293][ T3663] [ 1575.633840][ T3663] The buggy address belongs to the object at ffff88807c6c3800 [ 1575.633840][ T3663] which belongs to the cache kmalloc-1k of size 1024 [ 1575.649287][ T3663] The buggy address is located 0 bytes inside of [ 1575.649287][ T3663] freed 1024-byte region [ffff88807c6c3800, ffff88807c6c3c00) [ 1575.664376][ T3663] [ 1575.666916][ T3663] The buggy address belongs to the physical page: [ 1575.673978][ T3663] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88807c6c5800 pfn:0x7c6c0 [ 1575.685058][ T3663] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1575.694411][ T3663] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 1575.703771][ T3663] page_type: f5(slab) [ 1575.708159][ T3663] raw: 00fff00000000240 ffff88801b041dc0 ffffea00015db010 ffffea00017ac410 [ 1575.717594][ T3663] raw: ffff88807c6c5800 000000000010000a 00000000f5000000 0000000000000000 [ 1575.727053][ T3663] head: 00fff00000000240 ffff88801b041dc0 ffffea00015db010 ffffea00017ac410 [ 1575.736580][ T3663] head: ffff88807c6c5800 000000000010000a 00000000f5000000 0000000000000000 [ 1575.746221][ T3663] head: 00fff00000000003 ffffea0001f1b001 ffffffffffffffff 0000000000000000 [ 1575.755751][ T3663] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 1575.765274][ T3663] page dumped because: kasan: bad access detected [ 1575.772313][ T3663] page_owner tracks the page as allocated [ 1575.778582][ T3663] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 100, tgid 100 (kworker/0:1H), ts 113095418486, free_ts 113056502852 [ 1575.799777][ T3663] post_alloc_hook+0x181/0x1b0 [ 1575.805034][ T3663] get_page_from_freelist+0xfce/0x2f80 [ 1575.811047][ T3663] __alloc_frozen_pages_noprof+0x221/0x2470 [ 1575.817527][ T3663] alloc_pages_mpol+0x1fc/0x540 [ 1575.822873][ T3663] new_slab+0x23d/0x330 [ 1575.827449][ T3663] ___slab_alloc+0xc5d/0x1720 [ 1575.832588][ T3663] __slab_alloc.constprop.0+0x56/0xb0 [ 1575.838494][ T3663] __kmalloc_noprof+0x2ec/0x510 [ 1575.843832][ T3663] ieee802_11_parse_elems_full+0x1d0/0x3240 [ 1575.850316][ T3663] ieee80211_inform_bss+0xfd/0x1100 [ 1575.856029][ T3663] cfg80211_inform_single_bss_data+0x8f9/0x1df0 [ 1575.862898][ T3663] cfg80211_inform_bss_data+0x205/0x3ba0 [ 1575.869100][ T3663] cfg80211_inform_bss_frame_data+0x272/0x7a0 [ 1575.875782][ T3663] ieee80211_bss_info_update+0x311/0xab0 [ 1575.881969][ T3663] ieee80211_scan_rx+0x474/0xac0 [ 1575.887388][ T3663] ieee80211_rx_list+0x1bd7/0x2970 [ 1575.893022][ T3663] page last free pid 6256 tgid 6246 stack trace: [ 1575.899977][ T3663] free_frozen_pages+0x6db/0xfb0 [ 1575.905414][ T3663] qlist_free_all+0x4e/0x120 [ 1575.910466][ T3663] kasan_quarantine_reduce+0x195/0x1e0 [ 1575.916489][ T3663] __kasan_slab_alloc+0x69/0x90 [ 1575.921845][ T3663] __kmalloc_cache_noprof+0x243/0x410 [ 1575.927757][ T3663] kobject_uevent_env+0x265/0x1870 [ 1575.933409][ T3663] __kobject_del+0x168/0x1f0 [ 1575.938491][ T3663] kobject_put+0x327/0x5a0 [ 1575.943353][ T3663] net_rx_queue_update_kobjects+0x478/0x5f0 [ 1575.949851][ T3663] netdev_unregister_kobject+0x150/0x270 [ 1575.956057][ T3663] unregister_netdevice_many_notify+0x13aa/0x1f30 [ 1575.963108][ T3663] setup_net+0x4ae/0x860 [ 1575.967796][ T3663] copy_net_ns+0x2a6/0x5f0 [ 1575.972647][ T3663] create_new_namespaces+0x3ea/0xad0 [ 1575.978468][ T3663] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1575.984662][ T3663] ksys_unshare+0x45d/0xa40 [ 1575.989612][ T3663] [ 1575.992157][ T3663] Memory state around the buggy address: [ 1575.998335][ T3663] ffff88807c6c3700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1576.007190][ T3663] ffff88807c6c3780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1576.016047][ T3663] >ffff88807c6c3800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1576.024911][ T3663] ^ [ 1576.029415][ T3663] ffff88807c6c3880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1576.038294][ T3663] ffff88807c6c3900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1576.047140][ T3663] ================================================================== [ 1576.056090][ C0] vkms_vblank_simulate: vblank timer overrun [ 1576.375846][ T33] oom_reaper: reaped process 3099 (syz.2.7626), now anon-rss:32kB, file-rss:20488kB, shmem-rss:19844kB [ 1577.108197][ T3666] netlink: 93 bytes leftover after parsing attributes in process `syz.8.7763'. [ 1577.136605][ T3663] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1577.144541][ T3663] CPU: 0 UID: 0 PID: 3663 Comm: syz.8.7763 Not tainted 6.14.0-rc7-syzkaller-00137-g5fc319360819 #0 [ 1577.156286][ T3663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 1577.167354][ T3663] Call Trace: [ 1577.170952][ T3663] [ 1577.174166][ T3663] dump_stack_lvl+0x3d/0x1f0 [ 1577.179218][ T3663] panic+0x71d/0x800 [ 1577.183509][ T3663] ? __pfx_panic+0x10/0x10 [ 1577.188373][ T3663] ? rcu_is_watching+0x12/0xc0 [ 1577.193612][ T3663] ? preempt_schedule_thunk+0x1a/0x30 [ 1577.199545][ T3663] ? preempt_schedule_common+0x44/0xc0 [ 1577.205553][ T3663] ? check_panic_on_warn+0x1f/0xb0 [ 1577.211175][ T3663] check_panic_on_warn+0xab/0xb0 [ 1577.216607][ T3663] end_report+0x117/0x180 [ 1577.221366][ T3663] kasan_report+0xe9/0x110 [ 1577.226217][ T3663] ? force_devcd_write+0x317/0x330 [ 1577.231855][ T3663] ? force_devcd_write+0x317/0x330 [ 1577.237500][ T3663] force_devcd_write+0x317/0x330 [ 1577.242935][ T3663] ? __pfx_force_devcd_write+0x10/0x10 [ 1577.248945][ T3663] ? __debugfs_file_get+0x1ff/0x850 [ 1577.254663][ T3663] ? __pfx___debugfs_file_get+0x10/0x10 [ 1577.260764][ T3663] ? rcu_is_watching+0x12/0xc0 [ 1577.266004][ T3663] ? trace_lock_acquire+0x14e/0x1f0 [ 1577.271729][ T3663] full_proxy_write+0x13c/0x200 [ 1577.277085][ T3663] ? __pfx_full_proxy_write+0x10/0x10 [ 1577.283007][ T3663] vfs_write+0x24c/0x1150 [ 1577.287780][ T3663] ? __fget_files+0x1fc/0x3a0 [ 1577.292932][ T3663] ? __pfx___mutex_lock+0x10/0x10 [ 1577.298465][ T3663] ? __pfx_vfs_write+0x10/0x10 [ 1577.303707][ T3663] ? __fget_files+0x206/0x3a0 [ 1577.308863][ T3663] ksys_write+0x12b/0x250 [ 1577.313624][ T3663] ? __pfx_ksys_write+0x10/0x10 [ 1577.318966][ T3663] ? rcu_is_watching+0x12/0xc0 [ 1577.324233][ T3663] ? rcu_is_watching+0x12/0xc0 [ 1577.329496][ T3663] do_syscall_64+0xcd/0x250 [ 1577.334474][ T3663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1577.340959][ T3663] RIP: 0033:0x7f7881b8d169 [ 1577.345808][ T3663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1577.367365][ T3663] RSP: 002b:00007f7882904038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1577.376623][ T3663] RAX: ffffffffffffffda RBX: 00007f7881da5fa0 RCX: 00007f7881b8d169 [ 1577.385378][ T3663] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000006 [ 1577.394136][ T3663] RBP: 00007f7881c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1577.402911][ T3663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1577.411674][ T3663] R13: 0000000000000000 R14: 00007f7881da5fa0 R15: 00007ffed5bbb6c8 [ 1577.420437][ T3663] [ 1577.423810][ T3663] Kernel Offset: disabled [ 1577.428556][ T3663] Rebooting in 86400 seconds..