last executing test programs: 1m21.230241846s ago: executing program 0 (id=117): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) r0 = fsopen$auto(0x0, 0x3) r1 = getsockopt$auto_SO_TXTIME(r0, 0x4, 0x3d, &(0x7f0000000040)='/dev/v4l-touch4\x00', &(0x7f0000000100)=0x280a6e5f) mmap$auto(0x0, 0xc, 0x400000072, 0x8b70, r1, 0x7ffe) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_pid_set_timerslack_ns_operations_base(0xffffffffffffff9c, &(0x7f0000000080), 0xdaea6d7da654cc89, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x9, 0xff7, 0x8000000008012, 0x1000000004, 0x0) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x404, 0x1ff, 0x7, 0x48, 0x1ff, 0x1ffdf, 0x4, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0xfffffffe, 0x800000, 0x7, 0x8, 0x7ff, 0xfffffffd, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0x0, 0xffffffffffffbffd, 0xfffffffffffffffd, 0x1, 0x400000040000000, 0xffffffffffffffff, 0x1, 0x4, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0x10001, 0x0, 0x0, 0x0, 0x11b3, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfbfffffffffffffc, 0x9, 0x100000000a38, 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x4000000000, 0x7, 0x3]}, 0x1fe, 0xd) epoll_ctl$auto(0xffffffffffffffff, 0x1, 0x8000000000000000, 0x0) read$auto_seq_oss_f_ops_seq_oss(0xffffffffffffffff, &(0x7f0000000380)=""/147, 0x93) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r3 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_MODULE_FW_FLASH_ACT(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)=ANY=[@ANYBLOB="14000000", @ANYBLOB="010227"], 0x14}}, 0x400c080) read$auto(0x3, 0x0, 0x80) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/v4l-touch4\x00', 0x40000, 0x0) ioctl$auto(r5, 0xc0045627, r5) ioctl$auto_dma_heap_fops_dma_heap(r3, 0xffffffffffdffe00, &(0x7f0000000140)=';') ioctl$auto(0x3, 0x40046201, 0x38) 1m17.988824858s ago: executing program 0 (id=122): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x1e, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) ioctl$auto(0x3, 0x89e0, 0x91) mmap$auto(0x4, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f00000001c0), r0) setreuid$auto(0x0, 0x0) shmctl$auto_IPC_SET(0x0, 0x1, &(0x7f00000014c0)={{0xe472, 0xffffffffffffffff, 0xee00, 0x9, 0xf362, 0xb, 0x4734}, 0x0, 0x7fff, 0x8, 0x100000000, @raw, @raw=0xffffff00, 0x2, 0x0, &(0x7f00000003c0)="627cf8d7a3e4c2033ccb0fd740fd951030a516cdf5191de87f019342ae253fdcd17e16bd2f6133d225928e9c7d80cdc99007bb93ed1bca06236259b88bd754582fa220462344a5b94c098e7f77f7fcfd27273c8b3e295de35f08f4ea77207a013550b7052696fd9db45dc9bb3bf854637d3cd9ea9361c0082cce5e954021b0da46e7e05cf464e112f83610ace1e323214a9e44f2a4144cbfdee07d32f44674477618423890ed2e3f0e93795fb2c610fab060b45be0f5ea107ef269574c31d057c329d222bb79", &(0x7f00000004c0)="7f32f25074903c32e624057178b8c9af9d2affa30aa1b72cb8ec6641632016ff72ead23955b147bfad679b3b74eb5ed089498f09b98d10ff60d8f99b94ae7c9babc2c2b28177b98968d70be754ae75c5ed903c0549a487686bf6116a2843f9636f6608fa5f179cf0550a4802c465f6033dfb1fa6e403e8efcec94b12fd27133bbfabb72fe1b8048ee8cebe5cf56074ebd97bdc7c93477cb31e42bf35afc50c4c802bac218f830a4b2201752f2872d47f7aa43e317271876059a9be76798941591608b9c83627c2d720888b34b4065b4de5706bae324f624f40554c2845127ff40ffcce10e8cfd683fba7b07e3da9f6df536fa959cba7d5b787f7122d5815537b6890767c69aa48158ee06c15ea27255e3531b2b9b273a034108c7acacdcdde48855095bae74fcaa7c701bb73be40f79036283fdcb8ace6cf436d948f5c6b1d457e1411c3d4849e8ca91d25f0add4a396bb3e749a75975460a4895f40d0d00c89a5b739c224dc1ee3aa7a0ea4044d977caa4241d95fcb14167b1d757faf64a185def79bb598bd239b8d33f05ad0530255e0fdeebe52ec7f660be0a66141b863b0b7e8521d7a2957ad593410b44ecdad8c4d136e5a47ce60dbca39bea4905b44fa110841bbb2403a1767153dab92449064bb70c145a08b80f17a41cfaf795abfa85673f0e2a62f4d8a767ce18b52a3f6dffd03e6453163d10cd3b3add7143a46aa3d1d2ae452200b53f360e1a68f181d7f4ac626b79e1a848ffd6f3c617acb3a1e9546de949dd595ead2547e1fde1a8cbc2902828a005b9741bf09394c61ed800623b088f2a3c8a7972ff7c87584467b9c38e76c5df5a5dc61b67c3fe16abb5823c9ad8ee92ab2ca3b84a9fbd7f89a7fa9b3a45a4463dc08d7cf10bc72c51b4c09667c7c978ba68bc27e1758e96b0e352bcf6d015443a8bd837387cf84094deeae18a2b070350b76e73e16c8fa0fb77d5041f3ee9bc20191c2a46a9e39f848311df3550ecd72e3bfb5e6123b830a875f81f530ae25bf9a2f09e1b2273ad2a57f5010739fa2fea41968c0389ec40fed46992433f0832a22e26ccd35b291505fef760aaa2576c93baef40d48e2d649e9b9c04e7b4f9d56da8064fcb2d75a2fd1713387048f5cde60f1a51788a4f167d5181f8e00f411e4ff24d5401f7dc4315e0f9cb9f7136b59d6de92e8708777f558ccd375cd09549a78802e8e4225218ad8c2e42dae63d6083dba6b422291290990198d557b67415dcbe6dac7ff73c9a4d7e305fa495f41942e83cfd88b847bb2bcab8332a65934437175ce3012a6b5558953b340e031d6d9e13466a099777c59ace4aaec8d3d25078a6b1a719d5699ca1c4022077ab51378e1e53b3db20fa3868fc4db60342f6d9887fa3bd25c92ebe7ac0c3d7991e647e2e235bd3cd10df88dd5fb604dfe32f18f7d0a24496699df7c729efe8276516bad81d03ba0deea015efeeb3d8978056d452916792dcced73328de3cbc88f3701dd91f1e879395d699fbf362da3484a2fe85e526be6e6371d4c277e6f937ee39b40318a9b5122aacf67273d0da0a03d44ce2be3b24595479cb13c020af1a0b25c74a5cc748e6fe8b539a7570cab536502f08cccb8da7f830bf443aeafd333100416f2b6b92f461e52e431930c077dd3609d2b6f42d912d8e66932c2cf33bb98fcfdeb08a4c6f9872bfbd1268b9aac3e267bb643eae2e07ae238b1cfad577b7668d8d2c6f0c46c754f334ac6f4c761bf19ef81b8b44cfa24d4bed2992b57dccbba14244a78522b46fdf91dd7dcab7ae629ef9f66a9440c5616457c841302fd6e68fc0564493b1260a997f9c2dff17112136c3e4474a63f17e2498f1bde939845775004defd8b6950f7fa910fd9fc77b5f69b0d9ad29ba174300e1e0f46a142eb48d402c713a484ab460a92c0a2a384020dbe239d58d004b3fa2e579d48b7c516067f7d1ff0fb276c90856bfc5185403d0836f50ac82665ca1886abdbdf113ab04463e232e4407f70eae10d623db0c844f4043bc7f6d8ac0a4fb1f3cd4c031ae82d377cbd58b26189cd3e3606389d3d0f32757e1996e6eb1a1203beb5533afe8246643621850d74098373523e2428bebcd433bfad8def37361a26174fc03d27a3534873519040d176d7906a55cbd2b1110f2c89f27a8af9e09b864dd017bddc51c00a24060643bc89afc32a2671a0402376f26820d6e792ab2bc5d71cca5aa7848bf452798226b6e39d720e6b7b12c205deff4b40b1591e5438a306ce886ae2be98d9d1cad7a4a99901060a7f5d45d4347bc6df27117a3d6427b9a8904219f4efaf8f8e5f3e36bb0512f81a9427c0bd335b2f96f64cbde89a9e1e6837c5e1bc421b9928dd840284cf69d8bdd97e285b6a99a3b54e18cb789cbc11607df5bc936384258fd61919827c7177ee016ded405fb7581a2e03eefafd3b0a4040f8d84f9a84d841f2a806cfa153b95bcb60a6a00073d331eefc04907ffec62201125839c3d2c7e978dcd30e8a1a4bba23573e1087407eb7b52aa318b7df0a533a89866aae0ffa352eb9741224dc6cacd96ac3fb03cc764e0fe8e6bd9ec16092d77eec17a8fc49b959e4425ce2df758bcbe32c19c1730cad06c67c4b8aa2700b39c357de7d1a024ac393dd9f1b4e557ae37a03510cae383f7b0ee4fbc0df7e8a1e825bb33c31802b286223dbe6fb217b8882b32c085ceed302057e4e9d4fa214f827bf063584600e9382b50ddf952f2d42333c96b3de2934fb792676b4de88e8047bc114a33e9b6bc9f29d76bfa74fd202217abfa121a8c3e7a71ecd7daac81437b8330346de34780b292a5a8b82a60692c5391657d079e30a180ed0e728ff943adc9b57e4645505152e7b757b610c295fb1da9d2dc70e8fe05188dd5d3b0e19072671263ebebc3c10688b2ce6f515118cd7c6969d238d14cb15a58e24289a220014694642670298d31c5cf04112139fb7003da9ecdcbcf647491c797708f6c44c090bcf6d09e75d3e4797f2221b0cc6d70b7469eea9a4f5c54e8cbe3ba29b2592a057541117d23e46becb6daa8309a5fbbec27f2a2f9aa1010ff5ce06acd33e46e32937b7fdae685529bb61eb105d0e8f0beac5e534cfa1c0eda00a46839cfeb6ad15fb2e8cb0f30b9f22bf78bae80746494ff68f691dc27c432f029e7850df141c16696f30af07011e6223df76c55d3bf876665f76752ac5c912c5f8aaebdecc73827b32f1f857670d9cdd39bfe5d913633705f08819a31ee1a718318dc1891f1c453d215356e4a9f9d4044fd42a0f86f467d1dd96d9eb3ffe638967f03655096526611a76657fbcd2e446e2de836683a6b46ab91699f094d8addcef083415b11039007bb3c635d21a57a693c2c3191b8a1a9210ebc19c88e15f4ed12d6f474f5e762278e8ded2ae3961b19aa84f7590559c5a208865e2262d7c692f0b16e123e8d66b7c73e8f485446cd7ad7b389f2272fdebabc4aab52ed27446035b1b97d1e7ea67dfe87e92349d8dbc589bfe7f78b9fe22aa66cc2b02ef9ae29ff7440689a1fd8c2810944625a01e16fec0f4d962c8481ec65d04b20c7f6c0072828abd84fbfeabeac08509ad7bd7f15a27d72e11090936595b25f4d08d8451bbc2a8e954d577da448cf3e395bc5866bf805fc4aa99dce75fca163e8cc7c751af18e961c8b9f8aeb0120fe4156a58ee0c0ef7c81b437b7e3194597098cba2cc6ee273bd421efe99ce0e1caf1f104d283efb3194c78cad66c78a43a7865af8b5e1a1dbca408db15851cd27d105140d4544e73efb1e16f4144605fdaae854c785d935ca4f89f99cdfc2232039fe831dbd7c43abcee16091c24838692f3da1bde3e0a44084a82d426af49221e9fcc6c497611022f3a34550d81183dd44e1c15bc85ef4c0901fd00e10397da512eacd5d4566a99c40c54c2127bbc2b195561b6f24c3d1fe3abc8bffff1c74c65adbc8e05810cf901ac96ec0e4dfba6146f74e851d75f6268edb270438c3094f3093f34dfc0ca4c9ee32a4cc0644614f7026c5bef6df106074e0c0034b180fd1185cefeaa7c7747525593e205725253dd4ae27305098f8ecc33b9dbfad6f2aebc17d35a8dc8c54bb87217924ef21e8b23b90c7287fb6008550b10ccacfb91e6feca15a5f488a0cb162bfa85e8fee2bb867cf689d75367b3c486045770f8aab85ba7ccd9aaa645c9b4df53d6456f55b14b511ab600cc5b1585cde1b600d760e6d3c4a954851a6a3be5b0fc2c05256b62fa9ca5b1496c5d05771511968c8c1ef568c7d4272f670ad6951e6bc2a2e989e5fcc3f66378d517c8bbf289bb79d9ba3b637dac2f21da0fb7020acba76abc3c629f42c500ee4b42c676101b3d6a0cc5e4c96e3840adeb873769f47da49af9f8f3551202ed6edf451ab53903030f416d9a7741145dbbdb7d3e9c23c29dfc9a91cc1dd97c9ef5d295232f92058e90b18aa2fea4f85198b787026fecc45d31809941ebc4e0186649e343e105d9854687b15cb47f7e82ee80015c42fea8df42999d05cfbb368ac0f60736d791cb7560ea1fe10ced12857aa842d43588cdcc3a9a3e31b1d851f9a098cd71add6cf4d73265120a34c55fd49e08f74520e98b812897b9b6f497434a2af3826efee9c01a111f7d8735bed8a1597e04cc7688462daecebe9a3fe045c74c2c3bfcf34b829bed52b9d75d4f5d24b4d0fc4b6c1fb95effd605d3f4d997a6d2c1e080194eee246b3ee5b026bbf1e770f4d61f0aa7528ce724a9a22d573f4c68d27903966f55ea822c44a21f1f7d743c969091709fb158ebb7c86ffe9080699f8eb50ea54e3c28fb3d6f779ca67821002cba6cfc68e13cc9c57af12638d4a28e829efe0125d17e962258c5b2af9cfe9209682271b4299f98caca86f20db6df0df8608aa5f0edd90c386ae8b9ea9e0f7483d599c7b73c0f7c34ded2bef50278efa271f17ff54b8a33d38fa499532efb265e475e3c5790e3f91a174d9bfbeedf8a9e8d47f62db35b3b4606a5574ef68bd436a4e42ea7484f093cd8e5579d5b4ed8d4ba4c2cbbff56b85a5378170c7bef2ca9c789f231afd89148666ee909af6aea652959298780c7d40e43411e8a21e84c767f3c8fdb0e417a216d8f7a81d088ac404b4771230f1a4dd77b362070ca36bd163ccae9529a8483208b10e286570ac5b9214fba0c564ff38f6eff49c0829e0a9affd6bb60c5e8ecc26764a4edb55cd52d931b6eaf3e8208281210d5aa42b35a01f83e46db6e811e2658a9e5e18689f2e3b4bbb2a1e41db671723f9737e97397e1e223c6ced0b68229fa488082dafb39c6b6cfb91fa148282764c821430f8df15fc96fbec5c96493c7f24bf39ada929a5b9c57bbd5abf95e0ee65f458429d7dfa063bd318421dcf40ca30259bffa05ec48a41e00e5fd57f0074ca7b77ff406d2051813d8087fa8f99c7670fd36a6857b03c4a5f5e708e13da4539b3449dd4e73e1aa4942b509a85e8ec437d961d44bdccee57e254ff61f61f8a9a34d52232906b00cc1cfb851bee80b71ba1765371762f8132f166cee87d73cf8e8603faa0bdbc2048e6f746a5625f96362d9e166555fea1a1824aa843126d1728d2095d42550ac4d9ec3c03c26a6b2cb3f6714f7ab86d4058ead9cc6f1ad63c878c96355c2208275245a64f9d0d47ee070cf18a188024def877203f7cbf4f2a097eef8a4db28f333b2389b5c6a0da2188a01f6e59d0f905eca9490446087eb8ca5fb8f986c9b027e0d0ce57444c42995d86cfb6336d0402b09ad1e5d2d155ef45dedf7cf6f89c2e16bd63df57a8bced90b9db9f8e4a843f7980824"}) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001540)={0x118, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACINFO={0xd8, 0x7, 0x0, 0x1, [@typed={0x8, 0xfd, 0x0, 0x0, @uid}, @typed={0x14, 0x39, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xde, 0x0, 0x0, @pid}, @generic="9ab57e05958e330ae7e37f2a62301205fbf747cc4fcb581cb67c7036b428406ed3f3aa0390bf5baa0c3b323877a4ea62c0332b6184160c763f636e305c3da8782372541cf31a92ae82de46af33e8e1c35534f91d67573cb83d41fd1f9d6a7acf0fcc8deecf74c9f340262f91a12d3b01c3200ec8041474bb41bd8120ae4f92d7eee0d0558e7777a1a87d7356fa47ea2ac292fbe9d4367c6694e9becd", @nested={0xc, 0x4d, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @pid}, @generic]}, @typed={0x8, 0xce, 0x0, 0x0, @ipv4=@local}]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5c}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0x118}, 0x1, 0x0, 0x0, 0x20000002}, 0x0) 1m16.470855437s ago: executing program 0 (id=129): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x4, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x4, 0x1, 0x10000000000, 0x7, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000005b8, 0x14ee, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffe, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r2], 0x1ac}}, 0x40000) (fail_nth: 5) 1m14.290700094s ago: executing program 0 (id=139): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) r1 = prctl$auto_PR_GET_NAME(0x10, 0x101, 0xffffffffffffffff, 0x9, 0x4) ioctl$auto_TCFLSH2(r1, 0x540b, &(0x7f0000000180)="a860e05a1d61dbdc4d3934a95cbb19a2f9722554dbe9fe8452a36255217678c8bcc31e0628566c13c008da04128cf9c1c80109a5806c21e49afff1b3e3de83bf0f17ba918a1bf1e9c37cd7e78fe3be43865ffd975e20d0cc518e62f14940a18aa300aa91a5fbecc359554666b1a05e68d7abfc95ae0fc1d4c24292f9e948f0b3c98cb315a63c5d062beb2713737eaa2fbe1efd11f807") sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/pagemap\x00', 0x121000, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind$auto(0x9, 0x84, 0x4, &(0x7f0000000000), 0x80000000, 0x7f) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, r0, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) sendmsg$auto_NLBL_MGMT_C_LISTDEF(0xffffffffffffffff, 0x0, 0x20048800) ioprio_set$auto(0x7, 0x0, 0xfff) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000030, 0x0) r2 = socket(0xa, 0x1, 0x84) getsockopt$auto(r2, 0x84, 0x84, 0x0, 0x0) unshare$auto(0x40000080) ioprio_set$auto(0x1, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 1m10.030268006s ago: executing program 0 (id=155): r0 = semctl$auto_SEM_STAT(0x7, 0x1, 0x12, 0x6) capset$auto(&(0x7f0000000000)={0x3, 0x0}, &(0x7f0000000040)={0x804, 0x800a, 0xa}) socket(0x11, 0x4, 0x2) bind$auto(0x3, &(0x7f0000002000), 0xf) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram6/queue/minimum_io_size\x00', 0x0, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x0, 0x0) fremovexattr$auto(0x3, &(0x7f0000000080)='\\-\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_setup$auto(0x100, 0x0) mlockall$auto(0x7) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0x23, 0x2, 0x0) setresuid$auto(0x2, 0x7, 0x0) ioctl$auto(0x8000000000000001, 0x89ef, 0x9) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) r4 = socket(0x18, 0x2, 0x0) ioperm$auto(0x9eaa, 0x100, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x80047453, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001540)=""/104, 0x68) sendfile$auto(r2, r2, 0x0, 0x7fffe000) prlimit64$auto(r0, 0x101, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000d80), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001440)={&(0x7f0000000100)=ANY=[@ANYBLOB="20a3e100", @ANYRES16=r5, @ANYBLOB="010029bd7000fddbdf250a0000000c000600443f000000000000", @ANYRES8=r1], 0x20}, 0x1, 0x0, 0x0, 0x2000001}, 0x4880) mmap$auto(0x2, 0x2020009, 0xf, 0xeb1, 0xfffffffffffffffa, 0xf) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(0xffffffffffffffff, 0xc0385720, 0x0) 1m9.180234644s ago: executing program 0 (id=160): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x3, 0x100000000000000b, 0xfff, 0x12, 0x401, 0x8000) (async) mmap$auto(0x3, 0x100000000000000b, 0xfff, 0x12, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) get_mempolicy$auto(0xfffffffffffffffe, 0xfffffffffffffffd, 0x2, 0x0, 0x1) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x83, 0x0, 0x0) (async) getsockopt$auto(r1, 0x84, 0x83, 0x0, 0x0) getsockopt$auto(r0, 0x84, 0x1d, 0x0, 0x0) (async) r2 = getsockopt$auto(r0, 0x84, 0x1d, 0x0, 0x0) futex$auto(0xfffffffffffffffc, 0x9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffc, 0x3) (async) futex$auto(0xfffffffffffffffc, 0x9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffc, 0x3) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r2) mmap$auto(0x0, 0x8, 0x6, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0x6, 0x9b72, 0x2, 0x8000) r3 = clone$auto(0x6, 0x5, 0x0, 0x0, 0xffffffffffffffff) ptrace$auto(0x4206, r3, 0x0, 0x200005) prctl$auto(0x1, 0x2, r3, 0x3ff, 0x3) io_uring_setup$auto(0xa, 0x0) r4 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/airtime_flags\x00', 0x9880, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, 0x0, 0x0) readv$auto(r4, &(0x7f00000000c0)={0x0, 0x8}, 0x1) (async) readv$auto(r4, &(0x7f00000000c0)={0x0, 0x8}, 0x1) close_range$auto(0x2, 0xa, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r5, 0x89a0, 0x8) (async) ioctl$auto(r5, 0x89a0, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x5, 0x0) (async) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r6, 0x0, 0x4) (async) read$auto(r6, 0x0, 0x4) timerfd_gettime$auto(r5, &(0x7f0000000080)={{0x10, 0x2}, {0x9, 0x6}}) (async) timerfd_gettime$auto(r5, &(0x7f0000000080)={{0x10, 0x2}, {0x9, 0x6}}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) 54.05580066s ago: executing program 32 (id=160): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) r0 = socket(0xa, 0x5, 0x0) mmap$auto(0x3, 0x100000000000000b, 0xfff, 0x12, 0x401, 0x8000) (async) mmap$auto(0x3, 0x100000000000000b, 0xfff, 0x12, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) get_mempolicy$auto(0xfffffffffffffffe, 0xfffffffffffffffd, 0x2, 0x0, 0x1) r1 = socket(0xa, 0x801, 0x84) getsockopt$auto(r1, 0x84, 0x83, 0x0, 0x0) (async) getsockopt$auto(r1, 0x84, 0x83, 0x0, 0x0) getsockopt$auto(r0, 0x84, 0x1d, 0x0, 0x0) (async) r2 = getsockopt$auto(r0, 0x84, 0x1d, 0x0, 0x0) futex$auto(0xfffffffffffffffc, 0x9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffc, 0x3) (async) futex$auto(0xfffffffffffffffc, 0x9, 0x8, 0xffffffffffffffff, 0xfffffffffffffffc, 0x3) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, r2) mmap$auto(0x0, 0x8, 0x6, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0x6, 0x9b72, 0x2, 0x8000) r3 = clone$auto(0x6, 0x5, 0x0, 0x0, 0xffffffffffffffff) ptrace$auto(0x4206, r3, 0x0, 0x200005) prctl$auto(0x1, 0x2, r3, 0x3ff, 0x3) io_uring_setup$auto(0xa, 0x0) r4 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/airtime_flags\x00', 0x9880, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, 0x0, 0x0) readv$auto(r4, &(0x7f00000000c0)={0x0, 0x8}, 0x1) (async) readv$auto(r4, &(0x7f00000000c0)={0x0, 0x8}, 0x1) close_range$auto(0x2, 0xa, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r5, 0x89a0, 0x8) (async) ioctl$auto(r5, 0x89a0, 0x8) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x5, 0x0) (async) socket(0x2, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r6, 0x0, 0x4) (async) read$auto(r6, 0x0, 0x4) timerfd_gettime$auto(r5, &(0x7f0000000080)={{0x10, 0x2}, {0x9, 0x6}}) (async) timerfd_gettime$auto(r5, &(0x7f0000000080)={{0x10, 0x2}, {0x9, 0x6}}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x8000, 0x0) 11.040569527s ago: executing program 4 (id=352): lseek$auto(0xffffffffffffffff, 0x8001, 0x4) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) prctl$auto(0x6, 0xe, 0x0, 0x68, 0xee43) settimeofday$auto(0x0, &(0x7f0000000100)={0x82, 0x4}) getsockopt$auto(0xffffffffffffffff, 0x10002, 0x2, 0x0, &(0x7f0000000040)=0x2000000) mmap$auto(0x0, 0x2020009, 0x3, 0x13, 0xfffffffffffffffb, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x600000, 0x0) mlock$auto(0x4, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) mlock$auto(0x7c89, 0x47fff) readv$auto(0x3, &(0x7f0000000600)={0x0, 0xc}, 0x1da) 10.431730483s ago: executing program 4 (id=355): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) futex$auto(&(0x7f0000000000)=0xf0fe, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x3000000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) r2 = socket(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa6344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e8", @ANYRES32=r1, @ANYRESDEC=r1], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) io_cancel$auto(0x7, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x0, 0x0) ioperm$auto(0x3, 0x8001, 0x2000000000000149) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind$auto(0x9, 0x84, 0x4, &(0x7f0000000000), 0x80000000, 0x7f) socket(0xa, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) 9.24743468s ago: executing program 1 (id=358): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) r1 = bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0xfff, 0x5, 0x10, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) socket(0x15, 0x5, 0x0) madvise$auto(0x1ffff000, 0x7, 0x100000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0xfffffffffffffffe, 0x5, 0xa, 0x9b75, r1, 0x8000000000008000) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002cbd7000fedbdf250400004f49ce8b460b913c00"], 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sysfs$auto(0x2, 0x4d, 0x0) fsopen$auto(0x0, 0x1) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) clone$auto(0x9001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x82202, 0x0) pselect6$auto(0x72e, 0x0, &(0x7f0000000100)={[0x182, 0x9bbb, 0x0, 0x3, 0x58, 0xb5, 0x8, 0x400, 0x6, 0x4, 0x7ff, 0xa5, 0x2, 0x7dde, 0xed1b, 0x8c5]}, 0x0, 0x0, 0x0) flock$auto(0x6, 0x1) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x8001, 0x2) shmget$auto(0xa, 0x10563, 0x568d1af2) read$auto_proc_pid_maps_operations_internal(r0, &(0x7f00000010c0)=""/4096, 0x1000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) inotify_rm_watch$auto(0xffffffffffffffff, 0x2) 6.959841189s ago: executing program 1 (id=362): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4\x00', 0x260102, 0x0) socket(0x11, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x800, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x188880, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000100)='/dev/usbmon20\x00', 0x40080, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x8) r1 = signalfd$auto(0xffffffff, 0x0, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x408000, 0x40) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)={0x5ec, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_FILS_CACHE_ID={0x33, 0xfd, "696c3f716711b4060dc0ab77c44904ebc4f03e65341678d221f41a9e83ae987a7657786bd52faa3ddd22cddef201a5"}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x5}, @NL80211_ATTR_PROBE_RESP={0x56b, 0x91, "f9a089946473ad901090a49d7df9acf2486a3c3d0f3986cf51ad42c8e45ab58614533941daec4dbb472256bf93f7899d12da0d44a750125b4148c1456cfd36580cc84e59cab7b2350eaf7ab90b25b91f9c2fe9bea46082006bb3d808357cebfd06a91d7fb980dc298d8fdd93f2f98e296e2a94b40ab3fd60ca0a8f463be18d7176b25a60c40f6499ee68562ed98c25959c16d17d2852261f0274b409f0ac3870ea0550edc7e46d3854c88223ff957f6250aacb38cc3b69a83c5e83ccfe7a58502152b97cec31fafbe82586ee96730de42aee2e73d4ae3c5040945f4879f0f18f206fb0869162a23e8c9714f2930f9cf4d22c86c6be96c0c6869c8482f533278fbc1c0a0c5bfbf6984ce74095fcb1d3c5185eefe883315a2dd64f8e180e13c939d407726955b717ea9fd3c66f6f821148bb26417b4a82e99c29e0183c839332272723c64c3fc2fd452e1d8816ba5be2e602dc1d72c5ef16332979a400528e0a41c9ec1b8431b0d7aa1867b3ae424b0409b441383bb4d6fb316d378fbbc934d474fe33a7f9f36be3d51ddcdd03d8eafe2f2e06e03130c874a067c88da99418e7d5a9244122406054485110d90bf3678894a5f413e719b0cfddae18eaebb0b887c1898d8e28f51f8a75e25ecaa753cb642a3811e493a88afba3923870953566dcb46c468b5fa54776f3a6cbc21a3231745aab754722bfb45363bda553472727dcdfb6c42cb724224cbe48ea57cc45e8cf9476ccd9a9c79b4a5e5a79fd2664df9f43f481cb2f59eb420f33e40f3990d35dce2598f7b1cf8ace90bcc1c7e10ef230a9c2327eb9e620b193da0703e61b7595d772a8ccd384126a79cd0bac8b09f46bdb878b7182e5727f27c3ce1722fafe8152ac062a2abdb78029585a2f9808f8d1195dee82132701914254c3f722b352d2e74f0b774f4905c7241edf2249010e430bf77c60abe9e2fd8250e18298ce4e37830492e2e582c260bffb29180f88de648f3ec274cc67f5da5c6d8cabdce53fe2f6eb1d4299dbf280557f71a50588e03cdbdd9371a8a20c24e90ce86649215bfb79ca3dc3b4b1cb6778685ad5b2c76aa25e60fb630f072deca82c40c852dda68a2c8a81fcf9f38dca881cccb755479e38f1e63048c5dac1973283e168949a72c4ca3222f59fde963c82a3932c892a82627e3dd51e881371c85a28d0b45bf0abe702d549f83c50a6e6372f5f8af819420452f47db528cf7babb7600da0a83dddb9833a7674f5b4409f567652e72536c437565a1e707fe2d5a11ffc1fca9f1a1a408d409e69cd95119ebb236d007ab6e579f90b1657b711474bf542a7f6dca5e3f545e815ef259aff1527fcf4e2d427d88f01701f1714955a6d7927afd85b5a8ce819d077fd28a263274794fc487411b9b3e02993173504bfc89e315c747df0870f6be1bdc5a17117ad8bb29992fb610930a59d0b5f03140514b8894266c9194ffe475373e27dbfd70b9ac0162b790b656713ba18a9f1197e02ace7e7730a20abc97002cbc3f050d565296bf3769efa77263010be819be75489e24e66ad5ebb9edc0ef384f8de3d67d586ff7b18db83cc8b9dc602011d5e9c652f22862bcfe1e9d67b1ece267cc41ad905315d340588dc21ad0506a6cde0f74fd33a868b77f993925cee52cf400ab0665ee1c400d8914ac303c0be5850ed46a478c326531bef4cbdeba2d8eadcca7cc01801ee32ffd110bf7cd15a98d5971a26d9f51316ddd2a92b3c089a4ad5cc1583c6d35647e1532ba64607528a252a34a67b0b8b1ffcc6e3a003eba1e2603acbe3e77d53a5768c339207e74169ae836f9afd6d34316049998d343780f1e2c675c50fe2a151eea77ede3d0ac83f4a72993379276cf210b8ee5b5331fdb285e499d3821d8cedfcea5d86a603747366fd74bf7112d13d98f9f6f1f16ed47233664eccf23d241874c95dfd3d095794000c290f"}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe3c}, @NL80211_ATTR_FILS_KEK={0x26, 0xf2, "d9dc726e1adabdab6693003e5c4c5de799f2cf774ca653d0faa584641d79f3666610"}]}, 0x5ec}, 0x1, 0x0, 0x0, 0x4}, 0x20044804) socket(0x10, 0x3, 0xa) socket(0x1d, 0x2, 0x6) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0xfff, 0x0) capset$auto(&(0x7f00000002c0)={0x6, 0x0}, &(0x7f0000000300)={0x4, 0x8, 0x10001}) capget$auto(&(0x7f0000000340)={0x7, r3}, &(0x7f0000000380)={0x9, 0x0, 0x1}) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/004/001\x00', 0x22e100, 0x0) pipe$auto(0x0) pipe$auto(0x0) io_uring_setup$auto(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x4004, 0xf, 0x4, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) 6.604817462s ago: executing program 4 (id=363): lseek$auto(0xffffffffffffffff, 0x8001, 0x4) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) prctl$auto(0x6, 0xe, 0x0, 0x68, 0xee43) settimeofday$auto(0x0, &(0x7f0000000100)={0x82, 0x4}) getsockopt$auto(0xffffffffffffffff, 0x10002, 0x2, 0x0, &(0x7f0000000040)=0x2000000) mmap$auto(0x0, 0x2020009, 0x3, 0x13, 0xfffffffffffffffb, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x600000, 0x0) mlock$auto(0x4, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) mlock$auto(0x7c89, 0x47fff) readv$auto(0x3, &(0x7f0000000600)={0x0, 0xc}, 0x1da) 6.571425202s ago: executing program 3 (id=364): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x4f1, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1aa, &(0x7f0000000100)={&(0x7f0000000040), 0x13}, 0x6, 0x0, 0x5, 0x1001}, 0x5}, 0x2, 0x100) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r0 = socket(0xa, 0x2, 0x0) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kmsg\x00', 0x80002, 0x0) read$auto_wakeup_sources_stats_fops_wakeup(r1, &(0x7f0000000040)=""/139, 0x8b) pread64$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x88\xde_\xc4\x00\x00M\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9a{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6zQ\x1f(&\xe5\xe4\xad\xa7F\x03\xf4Q\xc0\xd8?\xe7\xc1\xd8?\x9b\xc6\xd1\x01o+G|\x85\x1a\xda\x854\x89\xc6\xbf\xc8S:\xa0\xed\xf6\'\xfb\xc0U\x9c\xb55P\x0e]\xc7\x9a\x14\xa6\x14\x1eX\x8f9\xb5j\xb8\x14J\xf1\xc2\xbcB\x19\r]\\\x8d\xadM\xcc}\x7f\x01\x18\xa6)Y\xcf`\x929\xc2\xb0y\xdc-f@j\xb2\x99\x91\x16F\xbc0\xd5S\xae\x0f\xa8\xd0\x18v\a\x8c\xd8-\x1dO7\x82\x8b\xac\xc4^\x18\x1amp\xbe\a\x17W\x83\xfcod\xde\r\x11\x00\x00?R \xdc\xa7\x81\xcdu\x10\t\t\xcdQ\r\xa5\xbb\xc3\x00]\x04H3\xeb\xe6\x1b\xb8+_*(e\x8d\x00'/249, 0x7ff, 0x402) futex_waitv$auto(&(0x7f0000000300)={0x7f, 0x100000001, 0x2}, 0x2, 0x2, &(0x7f0000000340)={0x92, 0x5}, 0x1) connect$auto(r0, 0x0, 0x55) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x23, 0x0) 6.521003626s ago: executing program 1 (id=365): unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) write$auto_fuse_dev_operations_fuse_i(0xffffffffffffffff, &(0x7f0000000440)="11000000126584", 0x7) socket(0x1e, 0x1, 0xfffffffc) ioctl$auto_RTC_ALM_READ(0xffffffffffffffff, 0x80247008, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) madvise$auto(0x8e, 0xffffffffffffffff, 0x7fff) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x1, 0x4000000000003, 0x1000000, 0x7ffffffd, 0x6, 0x6d3c, 0x5, 0x2, 0x80000000000000]}, 0x0) mmap$auto(0x0, 0x10001, 0x7, 0x1d, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r2) sendmsg$auto_OVS_DP_CMD_GET(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400ffff", @ANYRES16=r3, @ANYBLOB="131729bd7000fcdbdf250300000008000700f7ffffff"], 0x1c}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) read$auto(r2, &(0x7f0000000040)='tcp_metrics\x00', 0x3) futex$auto(&(0x7f0000000080)=0x3, 0xb, 0x1, 0x0, 0x0, 0xfffffffa) mkdir$auto(&(0x7f0000000040)='./file1\x00', 0x9) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mknodat$auto(r4, &(0x7f00000003c0)='./file0\x00', 0xfff, 0xfffffff8) renameat2$auto(r4, &(0x7f0000000200)='./file0\x00', r4, &(0x7f0000000240)='./file1\x00', 0x1) r5 = openat$dir(0xffffffffffffff9c, 0x0, 0x8000, 0x70) mkdir$auto(&(0x7f0000000000)='./file0/file0\x00', 0x3) renameat2$auto(r5, &(0x7f0000000200)='./file0\x00', r5, &(0x7f0000000240)='./file1\x00', 0x9) openat2$dir(0xffffffffffffff9c, 0xfffffffffffffffd, &(0x7f0000000180)={0x543480, 0x2, 0x11}, 0x18) r6 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/mountinfo\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REPLACE(0xffffffffffffffff, 0xc1105518, 0x0) read$auto_proc_mountinfo_operations_mnt_namespace(r6, &(0x7f0000001100)=""/4096, 0x145) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'pimreg\x00'}) 5.593930065s ago: executing program 3 (id=367): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x1e, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) ioctl$auto(0x3, 0x89e0, 0x91) mmap$auto(0x4, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f00000001c0), r0) setreuid$auto(0x0, 0x0) shmctl$auto_IPC_SET(0x0, 0x1, &(0x7f00000014c0)={{0xe472, 0xffffffffffffffff, 0xee00, 0x9, 0xf362, 0xb, 0x4734}, 0x0, 0x7fff, 0x8, 0x100000000, @raw, @raw=0xffffff00, 0x2, 0x0, &(0x7f00000003c0)="627cf8d7a3e4c2033ccb0fd740fd951030a516cdf5191de87f019342ae253fdcd17e16bd2f6133d225928e9c7d80cdc99007bb93ed1bca06236259b88bd754582fa220462344a5b94c098e7f77f7fcfd27273c8b3e295de35f08f4ea77207a013550b7052696fd9db45dc9bb3bf854637d3cd9ea9361c0082cce5e954021b0da46e7e05cf464e112f83610ace1e323214a9e44f2a4144cbfdee07d32f44674477618423890ed2e3f0e93795fb2c610fab060b45be0f5ea107ef269574c31d057c329d222bb79", &(0x7f00000004c0)="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"}) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001540)={0xc8, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACINFO={0x85, 0x7, 0x0, 0x1, [@typed={0x8, 0xfd, 0x0, 0x0, @uid}, @typed={0x14, 0x39, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xde, 0x0, 0x0, @pid}, @generic="9ab57e05958e330ae7e37f2a62301205fbf747cc4fcb581cb67c7036b428406ed3f3aa0390bf5baa0c3b323877a4ea62c0332b6184160c763f636e305c3da8782372541cf3", @nested={0x4, 0xc3}, @nested={0xc, 0x4d, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @pid}, @generic]}, @typed={0x8, 0xce, 0x0, 0x0, @ipv4=@local}]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5c}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000002}, 0x0) 5.230418686s ago: executing program 2 (id=371): socket(0x10, 0x2, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PUBL_GET(r0, &(0x7f0000002100)={0x0, 0x0, &(0x7f00000020c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000", @ANYRES16=r1, @ANYBLOB="05072abd7000ffdb2481a1d6fcdf25070000"], 0x18}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) poll$auto(&(0x7f0000000080)={r2, 0x9, 0x9816}, 0x7f, 0x3) ioctl$auto(r2, 0xaf01, 0xffffffffffffffff) ioctl$auto_VHOST_SET_MEM_TABLE2(r2, 0x4008af03, &(0x7f0000000040)={0x1, 0x0, [{0x7, 0x1000, 0x4}]}) r3 = socket(0x10, 0x2, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_JOIN_MESH(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x28, r4, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x60}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20000800) mmap$auto(0x0, 0x88b, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x406, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) io_uring_enter$auto(0x3, 0xa84, 0x80000001, 0xa, 0x0, 0x46) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) r5 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r5, 0x5) r6 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) flock$auto(r6, 0x2) close_range$auto(0x2, 0x8000, 0x0) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) io_uring_enter$auto(0x3, 0x5, 0xffffffff, 0x3, 0x0, 0x2) r7 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001f80), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_NAPI_GET2(0xffffffffffffffff, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f0000001fc0)={0x14, r7, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}}, 0x800) 4.773204011s ago: executing program 2 (id=372): r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_I2C_TENBIT(r0, 0x704, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/hid_magicmouse/uevent\x00', 0xc0202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 4.747599842s ago: executing program 1 (id=373): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) openat$auto_clear_warn_once_fops_(0xffffffffffffff9c, &(0x7f0000000240), 0x40, 0x0) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) futex$auto(&(0x7f0000000000)=0xf0fe, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x3000000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x10, 0x2, 0x4) r2 = socket(0x10, 0x3, 0x6) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204002a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa6344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e8", @ANYRES32=r1, @ANYRESDEC=r1], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) io_cancel$auto(0x7, 0x0, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/pagemap\x00', 0x0, 0x0) ioperm$auto(0x3, 0x8001, 0x2000000000000149) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mbind$auto(0x9, 0x84, 0x4, &(0x7f0000000000), 0x80000000, 0x7f) socket(0xa, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) 4.701946811s ago: executing program 4 (id=374): unshare$auto(0x3859) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x806, 0x0) io_uring_setup$auto(0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r2) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) mmap$auto(0x2, 0x4020009, 0xdf, 0xeb1, r1, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) mmap$auto(0x3, 0x402000b, 0x2000006, 0xeb1, 0x401, 0xfff) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x88d4) io_uring_register$auto(r1, 0x0, &(0x7f0000000240), 0x3) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r3 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x1, 0x0) write$auto_configfs_file_operations_configfs_internal(r3, &(0x7f0000000140)="8e", 0x1) openat$auto_vga_arb_device_fops_vgaarb(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) mmap$auto(0xa, 0x40400008, 0xfffffffffffffe00, 0x9b72, 0x2, 0xd5e) r4 = socket(0x1e, 0x6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000000c0), r4) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3, 0x0) ioperm$auto(0x7fb, 0x1, 0x4000007) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) 4.583598756s ago: executing program 3 (id=375): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/hung_task_check_interval_secs\x00', 0x88542, 0x0) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci4\x00', 0x260102, 0x0) socket(0x11, 0x3, 0x6) r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x800, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x188880, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000100)='/dev/usbmon20\x00', 0x40080, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x8) r1 = signalfd$auto(0xffffffff, 0x0, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file1\x00', 0x408000, 0x40) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000009c0)={0x5ec, r2, 0x100, 0x70bd27, 0x25dfdbfe, {}, [@NL80211_ATTR_FILS_CACHE_ID={0x33, 0xfd, "696c3f716711b4060dc0ab77c44904ebc4f03e65341678d221f41a9e83ae987a7657786bd52faa3ddd22cddef201a5"}, @NL80211_ATTR_WPA_VERSIONS={0x8, 0x4b, 0x5}, @NL80211_ATTR_PROBE_RESP={0x56b, 0x91, "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"}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xe3c}, @NL80211_ATTR_FILS_KEK={0x26, 0xf2, "d9dc726e1adabdab6693003e5c4c5de799f2cf774ca653d0faa584641d79f3666610"}]}, 0x5ec}, 0x1, 0x0, 0x0, 0x4}, 0x20044804) socket(0x10, 0x3, 0xa) socket(0x1d, 0x2, 0x6) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0xfff, 0x0) capset$auto(&(0x7f00000002c0)={0x6, 0x0}, &(0x7f0000000300)={0x4, 0x8, 0x10001}) capget$auto(&(0x7f0000000340)={0x7, r3}, &(0x7f0000000380)={0x9, 0x0, 0x1}) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000140)='/dev/bus/usb/004/001\x00', 0x22e100, 0x0) pipe$auto(0x0) pipe$auto(0x0) io_uring_setup$auto(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x4004, 0xf, 0x4, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) 3.898138936s ago: executing program 3 (id=376): renameat2$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x1) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0006, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nullb0/hctx1/busy\x00', 0x2000, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f00000000c0)=""/120, 0x78) r1 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r1, 0x65, 0x1, 0x0, 0x800) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x400053, 0x9) capset$auto(0x0, 0x0) 3.893572962s ago: executing program 2 (id=384): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) 3.634739443s ago: executing program 2 (id=377): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x4f1, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x1aa, &(0x7f0000000100)={&(0x7f0000000040), 0x13}, 0x6, 0x0, 0x5, 0x1001}, 0x5}, 0x2, 0x100) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) r0 = socket(0xa, 0x2, 0x0) r1 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kmsg\x00', 0x80002, 0x0) read$auto_wakeup_sources_stats_fops_wakeup(r1, &(0x7f0000000040)=""/139, 0x8b) pread64$auto(r1, &(0x7f0000000400)='\x00\x00\x00\x88\xde_\xc4\x00\x00M\xa0\x848\xbbz(\xe9\x05<\x82\xfe\xe2\xf6 \x0f8\xfb\xa7\xb4\xa0\x9e\xcb\xec\x9a{W\xed>\xe7l\xcb\x90\\/\x84\x99!*\xe3\x99}x\xd4\xa5D\xfa\xe5\xf9od^\xa6zQ\x1f(&\xe5\xe4\xad\xa7F\x03\xf4Q\xc0\xd8?\xe7\xc1\xd8?\x9b\xc6\xd1\x01o+G|\x85\x1a\xda\x854\x89\xc6\xbf\xc8S:\xa0\xed\xf6\'\xfb\xc0U\x9c\xb55P\x0e]\xc7\x9a\x14\xa6\x14\x1eX\x8f9\xb5j\xb8\x14J\xf1\xc2\xbcB\x19\r]\\\x8d\xadM\xcc}\x7f\x01\x18\xa6)Y\xcf`\x929\xc2\xb0y\xdc-f@j\xb2\x99\x91\x16F\xbc0\xd5S\xae\x0f\xa8\xd0\x18v\a\x8c\xd8-\x1dO7\x82\x8b\xac\xc4^\x18\x1amp\xbe\a\x17W\x83\xfcod\xde\r\x11\x00\x00?R \xdc\xa7\x81\xcdu\x10\t\t\xcdQ\r\xa5\xbb\xc3\x00]\x04H3\xeb\xe6\x1b\xb8+_*(e\x8d\x00'/249, 0x7ff, 0x402) futex_waitv$auto(&(0x7f0000000300)={0x7f, 0x100000001, 0x2}, 0x2, 0x2, &(0x7f0000000340)={0x92, 0x5}, 0x1) connect$auto(r0, &(0x7f0000000040)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x23, 0x0) 2.709205662s ago: executing program 2 (id=378): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010025bd7000fbdbdf25040000000400190004"], 0x1c}, 0x1, 0x0, 0x0, 0x4000094}, 0x4004044) 2.331764105s ago: executing program 4 (id=379): r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/mem\x00', 0x2101, 0x0) truncate$auto(&(0x7f00000000c0)='./cgroup\x00', 0x100000000000001) lseek$auto(r0, 0x8001, 0x4) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3fd, 0x8000) prctl$auto(0x6, 0xe, 0x0, 0x68, 0xee43) settimeofday$auto(0x0, &(0x7f0000000100)={0x82, 0x4}) socket(0xa, 0x801, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0x13, 0xfffffffffffffffb, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, 0x0, 0x600000, 0x0) mlock$auto(0x4, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) mlock$auto(0x7c89, 0x47fff) readv$auto(0x3, &(0x7f0000000600)={0x0, 0xc}, 0x1da) 1.860988353s ago: executing program 1 (id=380): r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) ioctl$auto_I2C_TENBIT(r0, 0x704, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/hid_magicmouse/uevent\x00', 0xc0202, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) 578.283087ms ago: executing program 2 (id=381): socket(0x46, 0x5, 0x2) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioperm$auto(0xfb, 0x5, 0xe) socket(0x2, 0x3, 0x6) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r0 = socket(0x2, 0x3, 0xa) getsockopt$auto(r0, 0x0, 0x33, 0x0, 0x0) r1 = geteuid() setreuid$auto(r1, 0x0) close_range$auto(0x2, 0x8, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), r0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, 0x0, 0x1, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x200007, 0x19) select$auto(0x3, 0x0, &(0x7f0000000100)={[0x8, 0xb, 0x0, 0x9, 0xfffffffffffffffc, 0x83, 0x6, 0x2, 0x9, 0xffff, 0x4000000000000002, 0xd, 0x3, 0xfffffffffffffffe, 0x7, 0x1000000006]}, 0x0, 0x0) syslog$auto(0x2, &(0x7f0000000000)='-#:\x00[\xda\xe2\xc3L\xd30{Q\xecvP\x93\x87\x1e\xdd\x95\x1b\x19qI\vv\xacO*X0V\x93\x85\xff\xb2\xdd\xd8\xd5Kh\xfa\xa3\xc7\x9b}\xec\x1e\xdc\x80\x1fR\xc30\x9a\xae\\\'\x14\x98\x98\xc3iDv\x97\xdfTMt\xe5?\xd0\xcc\xb8\xfa\a\x7f\x7f\x00\x00\x00\x00\x00\x00\x00n_\xb1\x1c\x7f\xb0y\xec\xe2\xcc\x1a/\xfa{d\xe4BN\x9c\xb9\x87.\xfe\xe7&1j\xe6]\xc3\x9anE6\x81\xe4\xec\xfa\xefE\xf7\x17h\xf4pumR\xd55Dd(\x0f(b\x1aD\xf4\x03\xc3\\\xdf\x8f\xa8\x82\xab\x102\xd1\xaf\xcaT\x86\x171\x11Q4\x94\x9d\xf5\x9c\xe3\xaa\xf3\xd26i\xf9\xb2\xd9T\xc9\xfd\xba\x91^\x19\x95\xde\xbc \xa8\x98\xc3\xed\xe9,{\xd4\xa1\xe4p\xcf\b\f\xb4\xbe_\xf2\xbe\xef\v\xf1d\xdd\x0e\xfc\xc3\xeaqt\x94\xe7\xce\xf1\xc5\x94~\xf6Cx\x0e\x98\xc7gE>*\x9c%\xa0\\\x14\t\tv.\x1c\x1a\xf1\xba\xc0>\xf4Hc\xc3\xfa\x033\x8f\xb9(\n/\xcdo\xc2', 0xcf) close_range$auto(0x2, 0x8, 0x0) openat$auto_evm_key_ops_evm_secfs(0xffffffffffffff9c, &(0x7f00000000c0), 0x40802, 0x0) mmap$auto(0x0, 0xc, 0x4000000000df, 0x44eb2, 0x10006, 0x300000000000) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000180), 0x8000, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) bpf$auto(0x5, &(0x7f0000001080)=@bpf_attr_7={@prog_id=0xc, 0x92f1, 0x4}, 0xa) getpid() 394.228284ms ago: executing program 1 (id=382): r0 = io_uring_setup$auto(0x85, 0x0) ioctl$auto_PPPIOCDISCONN(r0, 0x7439, 0x0) r1 = socket(0xa, 0x800, 0x84) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)={0x14, r2, 0x1, 0x70bd2f, 0x25dfdbfe}, 0x14}, 0x1, 0x68, 0x2000000000000000, 0x4000841}, 0x4000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xfffffffffffffffd, 0x40000008000) r4 = socket(0xa, 0x801, 0x84) getsockopt$auto(r4, 0x84, 0x6d, 0x0, &(0x7f00000002c0)=0x5fffffff) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000180), 0x80000, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_READ(r5, 0xc0085504, &(0x7f00000001c0)={0x9, 0x1, 0x6}) r6 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000140), r3) sendmsg$auto_GTP_CMD_GETPDP(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)={0x50, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_NET_NS_FD={0x8, 0x7, r0}, @GTPA_I_TEI={0x8, 0x8, 0x4}, @GTPA_O_TEI={0x8, 0x9, 0xfffffffe}, @GTPA_MS_ADDR6={0x14, 0xc, @local}, @GTPA_VERSION={0x8, 0x2, 0x200}, @GTPA_FAMILY={0x5, 0xd, 0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000801}, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) mmap$auto(0x0, 0x8, 0x6, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0xa, 0x0) close_range$auto(0x2, 0xa, 0x0) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r2, 0x8, 0x70bd27, 0x25dfdbfb, {}, [@NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x101}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x804) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x9, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x8998d5f, 0x100, 0x200083, 0x101, 0x6, 0xa6}, {0x100, 0x1, 0x52, 0x5, 0x7fff, 0x3d, 0x3, 0x8, 0x100000000}}) r7 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r7, 0x0, 0x59, 0x7) 376.441187ms ago: executing program 4 (id=383): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x1e, 0x1, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='R'], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) ioctl$auto(0x3, 0x89e0, 0x91) mmap$auto(0x4, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f00000001c0), r0) setreuid$auto(0x0, 0x0) shmctl$auto_IPC_SET(0x0, 0x1, &(0x7f00000014c0)={{0xe472, 0xffffffffffffffff, 0xee00, 0x9, 0xf362, 0xb, 0x4734}, 0x0, 0x7fff, 0x8, 0x100000000, @raw, @raw=0xffffff00, 0x2, 0x0, &(0x7f00000003c0)="627cf8d7a3e4c2033ccb0fd740fd951030a516cdf5191de87f019342ae253fdcd17e16bd2f6133d225928e9c7d80cdc99007bb93ed1bca06236259b88bd754582fa220462344a5b94c098e7f77f7fcfd27273c8b3e295de35f08f4ea77207a013550b7052696fd9db45dc9bb3bf854637d3cd9ea9361c0082cce5e954021b0da46e7e05cf464e112f83610ace1e323214a9e44f2a4144cbfdee07d32f44674477618423890ed2e3f0e93795fb2c610fab060b45be0f5ea107ef269574c31d057c329d222bb79", &(0x7f00000004c0)="7f32f25074903c32e624057178b8c9af9d2affa30aa1b72cb8ec6641632016ff72ead23955b147bfad679b3b74eb5ed089498f09b98d10ff60d8f99b94ae7c9babc2c2b28177b98968d70be754ae75c5ed903c0549a487686bf6116a2843f9636f6608fa5f179cf0550a4802c465f6033dfb1fa6e403e8efcec94b12fd27133bbfabb72fe1b8048ee8cebe5cf56074ebd97bdc7c93477cb31e42bf35afc50c4c802bac218f830a4b2201752f2872d47f7aa43e317271876059a9be76798941591608b9c83627c2d720888b34b4065b4de5706bae324f624f40554c2845127ff40ffcce10e8cfd683fba7b07e3da9f6df536fa959cba7d5b787f7122d5815537b6890767c69aa48158ee06c15ea27255e3531b2b9b273a034108c7acacdcdde48855095bae74fcaa7c701bb73be40f79036283fdcb8ace6cf436d948f5c6b1d457e1411c3d4849e8ca91d25f0add4a396bb3e749a75975460a4895f40d0d00c89a5b739c224dc1ee3aa7a0ea4044d977caa4241d95fcb14167b1d757faf64a185def79bb598bd239b8d33f05ad0530255e0fdeebe52ec7f660be0a66141b863b0b7e8521d7a2957ad593410b44ecdad8c4d136e5a47ce60dbca39bea4905b44fa110841bbb2403a1767153dab92449064bb70c145a08b80f17a41cfaf795abfa85673f0e2a62f4d8a767ce18b52a3f6dffd03e6453163d10cd3b3add7143a46aa3d1d2ae452200b53f360e1a68f181d7f4ac626b79e1a848ffd6f3c617acb3a1e9546de949dd595ead2547e1fde1a8cbc2902828a005b9741bf09394c61ed800623b088f2a3c8a7972ff7c87584467b9c38e76c5df5a5dc61b67c3fe16abb5823c9ad8ee92ab2ca3b84a9fbd7f89a7fa9b3a45a4463dc08d7cf10bc72c51b4c09667c7c978ba68bc27e1758e96b0e352bcf6d015443a8bd837387cf84094deeae18a2b070350b76e73e16c8fa0fb77d5041f3ee9bc20191c2a46a9e39f848311df3550ecd72e3bfb5e6123b830a875f81f530ae25bf9a2f09e1b2273ad2a57f5010739fa2fea41968c0389ec40fed46992433f0832a22e26ccd35b291505fef760aaa2576c93baef40d48e2d649e9b9c04e7b4f9d56da8064fcb2d75a2fd1713387048f5cde60f1a51788a4f167d5181f8e00f411e4ff24d5401f7dc4315e0f9cb9f7136b59d6de92e8708777f558ccd375cd09549a78802e8e4225218ad8c2e42dae63d6083dba6b422291290990198d557b67415dcbe6dac7ff73c9a4d7e305fa495f41942e83cfd88b847bb2bcab8332a65934437175ce3012a6b5558953b340e031d6d9e13466a099777c59ace4aaec8d3d25078a6b1a719d5699ca1c4022077ab51378e1e53b3db20fa3868fc4db60342f6d9887fa3bd25c92ebe7ac0c3d7991e647e2e235bd3cd10df88dd5fb604dfe32f18f7d0a24496699df7c729efe8276516bad81d03ba0deea015efeeb3d8978056d452916792dcced73328de3cbc88f3701dd91f1e879395d699fbf362da3484a2fe85e526be6e6371d4c277e6f937ee39b40318a9b5122aacf67273d0da0a03d44ce2be3b24595479cb13c020af1a0b25c74a5cc748e6fe8b539a7570cab536502f08cccb8da7f830bf443aeafd333100416f2b6b92f461e52e431930c077dd3609d2b6f42d912d8e66932c2cf33bb98fcfdeb08a4c6f9872bfbd1268b9aac3e267bb643eae2e07ae238b1cfad577b7668d8d2c6f0c46c754f334ac6f4c761bf19ef81b8b44cfa24d4bed2992b57dccbba14244a78522b46fdf91dd7dcab7ae629ef9f66a9440c5616457c841302fd6e68fc0564493b1260a997f9c2dff17112136c3e4474a63f17e2498f1bde939845775004defd8b6950f7fa910fd9fc77b5f69b0d9ad29ba174300e1e0f46a142eb48d402c713a484ab460a92c0a2a384020dbe239d58d004b3fa2e579d48b7c516067f7d1ff0fb276c90856bfc5185403d0836f50ac82665ca1886abdbdf113ab04463e232e4407f70eae10d623db0c844f4043bc7f6d8ac0a4fb1f3cd4c031ae82d377cbd58b26189cd3e3606389d3d0f32757e1996e6eb1a1203beb5533afe8246643621850d74098373523e2428bebcd433bfad8def37361a26174fc03d27a3534873519040d176d7906a55cbd2b1110f2c89f27a8af9e09b864dd017bddc51c00a24060643bc89afc32a2671a0402376f26820d6e792ab2bc5d71cca5aa7848bf452798226b6e39d720e6b7b12c205deff4b40b1591e5438a306ce886ae2be98d9d1cad7a4a99901060a7f5d45d4347bc6df27117a3d6427b9a8904219f4efaf8f8e5f3e36bb0512f81a9427c0bd335b2f96f64cbde89a9e1e6837c5e1bc421b9928dd840284cf69d8bdd97e285b6a99a3b54e18cb789cbc11607df5bc936384258fd61919827c7177ee016ded405fb7581a2e03eefafd3b0a4040f8d84f9a84d841f2a806cfa153b95bcb60a6a00073d331eefc04907ffec62201125839c3d2c7e978dcd30e8a1a4bba23573e1087407eb7b52aa318b7df0a533a89866aae0ffa352eb9741224dc6cacd96ac3fb03cc764e0fe8e6bd9ec16092d77eec17a8fc49b959e4425ce2df758bcbe32c19c1730cad06c67c4b8aa2700b39c357de7d1a024ac393dd9f1b4e557ae37a03510cae383f7b0ee4fbc0df7e8a1e825bb33c31802b286223dbe6fb217b8882b32c085ceed302057e4e9d4fa214f827bf063584600e9382b50ddf952f2d42333c96b3de2934fb792676b4de88e8047bc114a33e9b6bc9f29d76bfa74fd202217abfa121a8c3e7a71ecd7daac81437b8330346de34780b292a5a8b82a60692c5391657d079e30a180ed0e728ff943adc9b57e4645505152e7b757b610c295fb1da9d2dc70e8fe05188dd5d3b0e19072671263ebebc3c10688b2ce6f515118cd7c6969d238d14cb15a58e24289a220014694642670298d31c5cf04112139fb7003da9ecdcbcf647491c797708f6c44c090bcf6d09e75d3e4797f2221b0cc6d70b7469eea9a4f5c54e8cbe3ba29b2592a057541117d23e46becb6daa8309a5fbbec27f2a2f9aa1010ff5ce06acd33e46e32937b7fdae685529bb61eb105d0e8f0beac5e534cfa1c0eda00a46839cfeb6ad15fb2e8cb0f30b9f22bf78bae80746494ff68f691dc27c432f029e7850df141c16696f30af07011e6223df76c55d3bf876665f76752ac5c912c5f8aaebdecc73827b32f1f857670d9cdd39bfe5d913633705f08819a31ee1a718318dc1891f1c453d215356e4a9f9d4044fd42a0f86f467d1dd96d9eb3ffe638967f03655096526611a76657fbcd2e446e2de836683a6b46ab91699f094d8addcef083415b11039007bb3c635d21a57a693c2c3191b8a1a9210ebc19c88e15f4ed12d6f474f5e762278e8ded2ae3961b19aa84f7590559c5a208865e2262d7c692f0b16e123e8d66b7c73e8f485446cd7ad7b389f2272fdebabc4aab52ed27446035b1b97d1e7ea67dfe87e92349d8dbc589bfe7f78b9fe22aa66cc2b02ef9ae29ff7440689a1fd8c2810944625a01e16fec0f4d962c8481ec65d04b20c7f6c0072828abd84fbfeabeac08509ad7bd7f15a27d72e11090936595b25f4d08d8451bbc2a8e954d577da448cf3e395bc5866bf805fc4aa99dce75fca163e8cc7c751af18e961c8b9f8aeb0120fe4156a58ee0c0ef7c81b437b7e3194597098cba2cc6ee273bd421efe99ce0e1caf1f104d283efb3194c78cad66c78a43a7865af8b5e1a1dbca408db15851cd27d105140d4544e73efb1e16f4144605fdaae854c785d935ca4f89f99cdfc2232039fe831dbd7c43abcee16091c24838692f3da1bde3e0a44084a82d426af49221e9fcc6c497611022f3a34550d81183dd44e1c15bc85ef4c0901fd00e10397da512eacd5d4566a99c40c54c2127bbc2b195561b6f24c3d1fe3abc8bffff1c74c65adbc8e05810cf901ac96ec0e4dfba6146f74e851d75f6268edb270438c3094f3093f34dfc0ca4c9ee32a4cc0644614f7026c5bef6df106074e0c0034b180fd1185cefeaa7c7747525593e205725253dd4ae27305098f8ecc33b9dbfad6f2aebc17d35a8dc8c54bb87217924ef21e8b23b90c7287fb6008550b10ccacfb91e6feca15a5f488a0cb162bfa85e8fee2bb867cf689d75367b3c486045770f8aab85ba7ccd9aaa645c9b4df53d6456f55b14b511ab600cc5b1585cde1b600d760e6d3c4a954851a6a3be5b0fc2c05256b62fa9ca5b1496c5d05771511968c8c1ef568c7d4272f670ad6951e6bc2a2e989e5fcc3f66378d517c8bbf289bb79d9ba3b637dac2f21da0fb7020acba76abc3c629f42c500ee4b42c676101b3d6a0cc5e4c96e3840adeb873769f47da49af9f8f3551202ed6edf451ab53903030f416d9a7741145dbbdb7d3e9c23c29dfc9a91cc1dd97c9ef5d295232f92058e90b18aa2fea4f85198b787026fecc45d31809941ebc4e0186649e343e105d9854687b15cb47f7e82ee80015c42fea8df42999d05cfbb368ac0f60736d791cb7560ea1fe10ced12857aa842d43588cdcc3a9a3e31b1d851f9a098cd71add6cf4d73265120a34c55fd49e08f74520e98b812897b9b6f497434a2af3826efee9c01a111f7d8735bed8a1597e04cc7688462daecebe9a3fe045c74c2c3bfcf34b829bed52b9d75d4f5d24b4d0fc4b6c1fb95effd605d3f4d997a6d2c1e080194eee246b3ee5b026bbf1e770f4d61f0aa7528ce724a9a22d573f4c68d27903966f55ea822c44a21f1f7d743c969091709fb158ebb7c86ffe9080699f8eb50ea54e3c28fb3d6f779ca67821002cba6cfc68e13cc9c57af12638d4a28e829efe0125d17e962258c5b2af9cfe9209682271b4299f98caca86f20db6df0df8608aa5f0edd90c386ae8b9ea9e0f7483d599c7b73c0f7c34ded2bef50278efa271f17ff54b8a33d38fa499532efb265e475e3c5790e3f91a174d9bfbeedf8a9e8d47f62db35b3b4606a5574ef68bd436a4e42ea7484f093cd8e5579d5b4ed8d4ba4c2cbbff56b85a5378170c7bef2ca9c789f231afd89148666ee909af6aea652959298780c7d40e43411e8a21e84c767f3c8fdb0e417a216d8f7a81d088ac404b4771230f1a4dd77b362070ca36bd163ccae9529a8483208b10e286570ac5b9214fba0c564ff38f6eff49c0829e0a9affd6bb60c5e8ecc26764a4edb55cd52d931b6eaf3e8208281210d5aa42b35a01f83e46db6e811e2658a9e5e18689f2e3b4bbb2a1e41db671723f9737e97397e1e223c6ced0b68229fa488082dafb39c6b6cfb91fa148282764c821430f8df15fc96fbec5c96493c7f24bf39ada929a5b9c57bbd5abf95e0ee65f458429d7dfa063bd318421dcf40ca30259bffa05ec48a41e00e5fd57f0074ca7b77ff406d2051813d8087fa8f99c7670fd36a6857b03c4a5f5e708e13da4539b3449dd4e73e1aa4942b509a85e8ec437d961d44bdccee57e254ff61f61f8a9a34d52232906b00cc1cfb851bee80b71ba1765371762f8132f166cee87d73cf8e8603faa0bdbc2048e6f746a5625f96362d9e166555fea1a1824aa843126d1728d2095d42550ac4d9ec3c03c26a6b2cb3f6714f7ab86d4058ead9cc6f1ad63c878c96355c2208275245a64f9d0d47ee070cf18a188024def877203f7cbf4f2a097eef8a4db28f333b2389b5c6a0da2188a01f6e59d0f905eca9490446087eb8ca5fb8f986c9b027e0d0ce57444c42995d86cfb6336d0402b09ad1e5d2d155ef45dedf7cf6f89c2e16bd63df57a8bced90b9db9f8e4a843f7980824"}) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r0, &(0x7f0000001a80)={0x0, 0x0, &(0x7f0000001a40)={&(0x7f0000001540)={0xc8, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@SEG6_ATTR_HMACINFO={0x85, 0x7, 0x0, 0x1, [@typed={0x8, 0xfd, 0x0, 0x0, @uid}, @typed={0x14, 0x39, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0xde, 0x0, 0x0, @pid}, @generic="9ab57e05958e330ae7e37f2a62301205fbf747cc4fcb581cb67c7036b428406ed3f3aa0390bf5baa0c3b323877a4ea62c0332b6184160c763f636e305c3da8782372541cf3", @nested={0x4, 0xc3}, @nested={0xc, 0x4d, 0x0, 0x1, [@typed={0x8, 0x121, 0x0, 0x0, @pid}, @generic]}, @typed={0x8, 0xce, 0x0, 0x0, @ipv4=@local}]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x9}, @SEG6_ATTR_HMACKEYID={0x8}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x5c}, @SEG6_ATTR_DST={0x14, 0x1, @empty}]}, 0xc8}, 0x1, 0x0, 0x0, 0x20000002}, 0x0) 338.723019ms ago: executing program 3 (id=385): r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r1, &(0x7f0000003bc0)={0x0, 0x0, &(0x7f0000003b80)={&(0x7f0000000080)=ANY=[@ANYBLOB="928f00ad5700", @ANYRES16=r0, @ANYBLOB="05002670f2fb000066da85d29258f044b502e9479e3785ef2cae365da0a4e82d8f68bfbc0835e4ffdb354510afc265cb547906d9165067537778ec2ca2f088ef61f038267fdafa2bbafa1bc7a722d2ce61e7"], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0xc044) pwrite64$auto(r1, &(0x7f0000000240)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99?\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\xf2\xff\x9e\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcd^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00F\xd7\x02\xd2\xe7?\xaaw\x89\xea\xb1\x1d\xea\xa8\xb1\xaf\xdc\xdeS\xe4\x88\x16\x8eu8\x7f\xa7\xe5\xbb\xf8\v \x90E\xd8\nw,S\xf5\x00\xd8\xda\x16\xb6C\xe6\xc0j\xae\x19\x1eU\f\x18\x14 \x05\xd9:\'\xf5\r\xd8C\xc7,\xe1\xa9wzVf\xa4\xfc\xff\xb87\xa5.\x14\x81mgI\xb2\xbc\x91o\x1c\xfd/\x88\xa0\x02n\x98C\xd3\xfcY\xf4\x98\xb3-\xec\x87\x1f\xe5\xdcn[\x19\xac\'\xc86s{ \x0f', 0x80, 0x0) 0s ago: executing program 3 (id=386): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) kernel console output (not intermixed with test programs): evsim1 netdevsim0: renamed from eth0 [ 102.817944][ T5835] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 102.844137][ T5835] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 102.866075][ T5835] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 102.903196][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.942869][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.956262][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.975544][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 103.056660][ T5834] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.072775][ T5834] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.089765][ T5834] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.115031][ T5834] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.180191][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.238352][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.263583][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.271234][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.307887][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.315149][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.337482][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.386086][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.416243][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.423378][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.458467][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.466222][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.489269][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.599879][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.619172][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.637420][ T3457] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.644724][ T3457] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.708535][ T3457] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.716095][ T3457] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.748186][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.853806][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.861157][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.878184][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.885361][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.007942][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.041786][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.194533][ T5835] veth0_vlan: entered promiscuous mode [ 104.234169][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.252937][ T5833] veth0_vlan: entered promiscuous mode [ 104.279250][ T5835] veth1_vlan: entered promiscuous mode [ 104.293770][ T5833] veth1_vlan: entered promiscuous mode [ 104.300947][ T5851] Bluetooth: hci0: command tx timeout [ 104.369122][ T5835] veth0_macvtap: entered promiscuous mode [ 104.375483][ T5851] Bluetooth: hci2: command tx timeout [ 104.381059][ T5851] Bluetooth: hci1: command tx timeout [ 104.386806][ T5845] Bluetooth: hci3: command tx timeout [ 104.388297][ T5835] veth1_macvtap: entered promiscuous mode [ 104.433724][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.456308][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.470921][ T5840] veth0_vlan: entered promiscuous mode [ 104.483121][ T5833] veth0_macvtap: entered promiscuous mode [ 104.493679][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.508714][ T5840] veth1_vlan: entered promiscuous mode [ 104.517770][ T5833] veth1_macvtap: entered promiscuous mode [ 104.550901][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.562968][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.576872][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.586239][ T5835] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.595884][ T5835] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.604920][ T5835] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.613861][ T5835] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.667842][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.678981][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.693515][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.717718][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.727171][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.736749][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.746327][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.760601][ T5840] veth0_macvtap: entered promiscuous mode [ 104.773992][ T5834] veth0_vlan: entered promiscuous mode [ 104.807250][ T5840] veth1_macvtap: entered promiscuous mode [ 104.859068][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.872051][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.882848][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.893777][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.906570][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.923982][ T5834] veth1_vlan: entered promiscuous mode [ 104.948059][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.959526][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.971230][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.982151][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.995221][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.023378][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.033084][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.042357][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.052006][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.142452][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.153549][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.217204][ T1159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.227820][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.235244][ T1159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.240996][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.260380][ T5834] veth0_macvtap: entered promiscuous mode [ 105.324142][ T5834] veth1_macvtap: entered promiscuous mode [ 105.345978][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.363590][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.432868][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.461089][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.473112][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.484406][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.495997][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.511683][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.530356][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.545452][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.553320][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.571296][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 105.610505][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.638291][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.662245][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.674775][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.689769][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.700833][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.719496][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.766609][ T5834] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.777284][ T5834] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.814802][ T5834] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.844765][ T5834] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.889906][ T3457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.909876][ T3457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.116836][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.125161][ T5904] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 106.159092][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.161129][ T5904] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2'. [ 106.215682][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.239540][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.286921][ T5910] Zero length message leads to an empty skb [ 106.375823][ T5851] Bluetooth: hci0: command tx timeout [ 106.454858][ T5851] Bluetooth: hci1: command tx timeout [ 106.456344][ T54] Bluetooth: hci3: command tx timeout [ 106.460347][ T5851] Bluetooth: hci2: command tx timeout [ 106.951410][ T5923] netlink: 'syz.1.5': attribute type 1 has an invalid length. [ 107.053099][ T5919] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1'. [ 107.652549][ T5937] TCP: TCP_TX_DELAY enabled [ 108.457959][ T5851] Bluetooth: hci0: command tx timeout [ 108.535690][ T5851] Bluetooth: hci2: command tx timeout [ 108.541851][ T5851] Bluetooth: hci3: command tx timeout [ 108.547716][ T5845] Bluetooth: hci1: command tx timeout [ 109.676646][ T5954] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 109.712817][ T5954] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 109.770543][ T5954] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 109.793732][ T5954] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 109.816745][ T5954] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.832770][ T5954] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 109.857464][ T5954] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 109.863843][ T5954] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.879239][ T5954] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 109.932419][ T5954] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 109.939950][ T5954] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 109.960312][ T5954] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 110.659049][ T5979] FAULT_INJECTION: forcing a failure. [ 110.659049][ T5979] name failslab, interval 1, probability 0, space 0, times 1 [ 110.812312][ T5979] CPU: 1 UID: 0 PID: 5979 Comm: syz.0.17 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 110.812362][ T5979] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 110.812385][ T5979] Call Trace: [ 110.812422][ T5979] [ 110.812439][ T5979] dump_stack_lvl+0x16c/0x1f0 [ 110.812502][ T5979] should_fail_ex+0x50a/0x650 [ 110.812558][ T5979] ? fs_reclaim_acquire+0xae/0x150 [ 110.812602][ T5979] ? ipv4_inetpeer_init+0x3f/0xb0 [ 110.812648][ T5979] should_failslab+0xc2/0x120 [ 110.812680][ T5979] __kmalloc_cache_noprof+0x68/0x410 [ 110.812733][ T5979] ? __pfx_ipv4_inetpeer_init+0x10/0x10 [ 110.812780][ T5979] ipv4_inetpeer_init+0x3f/0xb0 [ 110.812824][ T5979] ops_init+0x1df/0x5f0 [ 110.812879][ T5979] setup_net+0x21f/0x860 [ 110.812932][ T5979] ? __pfx_setup_net+0x10/0x10 [ 110.812982][ T5979] ? down_read_killable+0xcc/0x380 [ 110.813030][ T5979] ? __pfx_down_read_killable+0x10/0x10 [ 110.813076][ T5979] ? __raw_spin_lock_init+0x3a/0x110 [ 110.813133][ T5979] ? debug_mutex_init+0x37/0x70 [ 110.813173][ T5979] copy_net_ns+0x2a6/0x5f0 [ 110.813208][ T5979] create_new_namespaces+0x3ea/0xad0 [ 110.813272][ T5979] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 110.813330][ T5979] ksys_unshare+0x45d/0xa40 [ 110.813365][ T5979] ? __pfx_ksys_unshare+0x10/0x10 [ 110.813397][ T5979] ? xfd_validate_state+0x5d/0x180 [ 110.813457][ T5979] __x64_sys_unshare+0x31/0x40 [ 110.813498][ T5979] do_syscall_64+0xcd/0x250 [ 110.813543][ T5979] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 110.813589][ T5979] RIP: 0033:0x7f2ed938d169 [ 110.813612][ T5979] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.813642][ T5979] RSP: 002b:00007f2ed6df4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 110.813696][ T5979] RAX: ffffffffffffffda RBX: 00007f2ed95a6240 RCX: 00007f2ed938d169 [ 110.813715][ T5979] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 110.813731][ T5979] RBP: 00007f2ed940e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 110.813748][ T5979] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 110.813765][ T5979] R13: 0000000000000000 R14: 00007f2ed95a6240 R15: 00007ffd97d06248 [ 110.813803][ T5979] [ 111.225570][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.576949][ T5985] Process accounting resumed [ 111.815479][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 111.895243][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 111.940344][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.21'. [ 111.974763][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 112.042384][ T5992] netlink: 354 bytes leftover after parsing attributes in process `syz.3.21'. [ 112.086331][ T5994] mmap: syz.1.22 (5994) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 112.272881][ T5994] FAULT_INJECTION: forcing a failure. [ 112.272881][ T5994] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 112.337151][ T5994] CPU: 1 UID: 0 PID: 5994 Comm: syz.1.22 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 112.337199][ T5994] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 112.337219][ T5994] Call Trace: [ 112.337245][ T5994] [ 112.337265][ T5994] dump_stack_lvl+0x16c/0x1f0 [ 112.337321][ T5994] should_fail_ex+0x50a/0x650 [ 112.337378][ T5994] ? __pfx___might_resched+0x10/0x10 [ 112.337436][ T5994] should_fail_alloc_page+0xe7/0x130 [ 112.337471][ T5994] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 112.337523][ T5994] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 112.337581][ T5994] ? __pfx_mark_lock+0x10/0x10 [ 112.337627][ T5994] ? hlock_class+0x4e/0x130 [ 112.337660][ T5994] ? mark_lock+0xb5/0xc60 [ 112.337703][ T5994] ? hlock_class+0x4e/0x130 [ 112.337736][ T5994] ? mark_lock+0xb5/0xc60 [ 112.337778][ T5994] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 112.337835][ T5994] ? mark_lock+0xb5/0xc60 [ 112.337897][ T5994] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 112.337952][ T5994] ? policy_nodemask+0xea/0x4e0 [ 112.338009][ T5994] alloc_pages_mpol+0x1fc/0x540 [ 112.338053][ T5994] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 112.338087][ T5994] ? find_held_lock+0x2d/0x110 [ 112.338132][ T5994] folio_alloc_mpol_noprof+0x36/0x2f0 [ 112.338173][ T5994] shmem_alloc_folio+0x135/0x160 [ 112.338227][ T5994] shmem_alloc_and_add_folio+0x48e/0xc10 [ 112.338281][ T5994] ? shmem_huge_global_enabled+0x72/0x6b0 [ 112.338317][ T5994] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 112.338360][ T5994] ? shmem_allowable_huge_orders+0xd0/0x410 [ 112.338408][ T5994] shmem_get_folio_gfp+0x689/0x1530 [ 112.338451][ T5994] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 112.338492][ T5994] ? filemap_map_pages+0xf92/0x16b0 [ 112.338536][ T5994] shmem_fault+0x200/0xae0 [ 112.338574][ T5994] ? __pfx_shmem_fault+0x10/0x10 [ 112.338617][ T5994] ? do_pte_missing+0xde9/0x3e10 [ 112.338665][ T5994] ? __pfx_lock_release+0x10/0x10 [ 112.338726][ T5994] __do_fault+0x10a/0x490 [ 112.338767][ T5994] do_pte_missing+0xecf/0x3e10 [ 112.338827][ T5994] __handle_mm_fault+0x1166/0x2c60 [ 112.338884][ T5994] ? __pfx___handle_mm_fault+0x10/0x10 [ 112.338930][ T5994] ? follow_page_pte+0x3ac/0x1490 [ 112.338974][ T5994] ? __pfx_lock_release+0x10/0x10 [ 112.339045][ T5994] handle_mm_fault+0x3fa/0xaa0 [ 112.339110][ T5994] __get_user_pages+0x773/0x36f0 [ 112.339169][ T5994] ? __pfx_mt_find+0x10/0x10 [ 112.339216][ T5994] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 112.339275][ T5994] ? __pfx___get_user_pages+0x10/0x10 [ 112.339331][ T5994] ? __mm_populate+0x21d/0x380 [ 112.339390][ T5994] populate_vma_page_range+0x27f/0x3a0 [ 112.339443][ T5994] ? __pfx_populate_vma_page_range+0x10/0x10 [ 112.339492][ T5994] ? __pfx_find_vma_intersection+0x10/0x10 [ 112.339536][ T5994] ? __do_sys_mlockall+0x331/0x5c0 [ 112.339574][ T5994] __mm_populate+0x1d6/0x380 [ 112.339626][ T5994] ? __pfx___mm_populate+0x10/0x10 [ 112.339680][ T5994] ? up_write+0x1b2/0x520 [ 112.339736][ T5994] __do_sys_mlockall+0x520/0x5c0 [ 112.339771][ T5994] do_syscall_64+0xcd/0x250 [ 112.339817][ T5994] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.339864][ T5994] RIP: 0033:0x7fb95358d169 [ 112.339891][ T5994] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 112.339921][ T5994] RSP: 002b:00007fb9533f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 112.339961][ T5994] RAX: ffffffffffffffda RBX: 00007fb9537a5fa0 RCX: 00007fb95358d169 [ 112.339982][ T5994] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 112.340000][ T5994] RBP: 00007fb95360e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 112.340019][ T5994] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 112.340037][ T5994] R13: 0000000000000000 R14: 00007fb9537a5fa0 R15: 00007fff8a5dcd58 [ 112.340076][ T5994] [ 113.010164][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 113.258897][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 113.280449][ T5996] cougar: G6 mapped to F18 [ 113.360867][ T6000] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 113.695996][ T6013] Invalid ELF header magic: != ELF [ 113.894895][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 113.905520][ T6007] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 113.911945][ T6007] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 113.946419][ T6007] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 113.971098][ T6007] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 114.000388][ T5998] kexec: Could not allocate control_code_buffer [ 114.582919][ T6030] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 115.414809][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 115.737139][ T6037] netlink: 4 bytes leftover after parsing attributes in process `syz.0.31'. [ 115.985554][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.991701][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 115.997967][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 116.849075][ T6041] kexec: Could not allocate control_code_buffer [ 116.971502][ T6055] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 117.304138][ T6059] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 117.315698][ T6059] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.322579][ T6059] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 117.344107][ T6059] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 117.513585][ T6061] netlink: 28 bytes leftover after parsing attributes in process `syz.3.38'. [ 118.125269][ T6067] netlink: 4 bytes leftover after parsing attributes in process `syz.0.39'. [ 119.075055][ T6086] Invalid ELF header magic: != ELF [ 119.128809][ T6091] netlink: 354 bytes leftover after parsing attributes in process `syz.3.45'. [ 119.337511][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.345450][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 119.345895][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 119.414875][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 120.727146][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.1.51'. [ 121.725750][ T6123] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 121.732274][ T6123] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 121.739478][ T6123] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 121.747433][ T6123] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 122.180698][ T6140] FAULT_INJECTION: forcing a failure. [ 122.180698][ T6140] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 122.194654][ T6140] CPU: 0 UID: 0 PID: 6140 Comm: syz.0.60 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 122.194692][ T6140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.194711][ T6140] Call Trace: [ 122.194720][ T6140] [ 122.194732][ T6140] dump_stack_lvl+0x16c/0x1f0 [ 122.194782][ T6140] should_fail_ex+0x50a/0x650 [ 122.194836][ T6140] ? __pfx___might_resched+0x10/0x10 [ 122.194894][ T6140] should_fail_alloc_page+0xe7/0x130 [ 122.194930][ T6140] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 122.194976][ T6140] ? hlock_class+0x4e/0x130 [ 122.195017][ T6140] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 122.195075][ T6140] ? __pfx_mark_lock+0x10/0x10 [ 122.195120][ T6140] ? hlock_class+0x4e/0x130 [ 122.195153][ T6140] ? mark_lock+0xb5/0xc60 [ 122.195206][ T6140] ? hlock_class+0x4e/0x130 [ 122.195240][ T6140] ? mark_lock+0xb5/0xc60 [ 122.195284][ T6140] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 122.195339][ T6140] ? __pfx_mark_lock+0x10/0x10 [ 122.195379][ T6140] ? mark_lock+0xb5/0xc60 [ 122.195442][ T6140] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 122.195496][ T6140] ? policy_nodemask+0xea/0x4e0 [ 122.195558][ T6140] alloc_pages_mpol+0x1fc/0x540 [ 122.195591][ T6140] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 122.195623][ T6140] ? find_held_lock+0x2d/0x110 [ 122.195665][ T6140] folio_alloc_mpol_noprof+0x36/0x2f0 [ 122.195705][ T6140] shmem_alloc_folio+0x135/0x160 [ 122.195761][ T6140] shmem_alloc_and_add_folio+0x48e/0xc10 [ 122.195804][ T6140] ? shmem_huge_global_enabled+0x72/0x6b0 [ 122.195839][ T6140] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 122.195881][ T6140] ? shmem_allowable_huge_orders+0xd0/0x410 [ 122.195929][ T6140] shmem_get_folio_gfp+0x689/0x1530 [ 122.195976][ T6140] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 122.196031][ T6140] ? filemap_map_pages+0xf92/0x16b0 [ 122.196079][ T6140] shmem_fault+0x200/0xae0 [ 122.196120][ T6140] ? __pfx_shmem_fault+0x10/0x10 [ 122.196167][ T6140] ? do_pte_missing+0xde9/0x3e10 [ 122.196223][ T6140] ? __pfx_lock_release+0x10/0x10 [ 122.196321][ T6140] __do_fault+0x10a/0x490 [ 122.196360][ T6140] do_pte_missing+0xecf/0x3e10 [ 122.196422][ T6140] __handle_mm_fault+0x1166/0x2c60 [ 122.196482][ T6140] ? __pfx___handle_mm_fault+0x10/0x10 [ 122.196529][ T6140] ? follow_page_pte+0x3ac/0x1490 [ 122.196576][ T6140] ? __pfx_lock_release+0x10/0x10 [ 122.196650][ T6140] handle_mm_fault+0x3fa/0xaa0 [ 122.196705][ T6140] __get_user_pages+0x773/0x36f0 [ 122.196760][ T6140] ? __pfx_mt_find+0x10/0x10 [ 122.196804][ T6140] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 122.196852][ T6140] ? __pfx___get_user_pages+0x10/0x10 [ 122.196903][ T6140] ? __mm_populate+0x21d/0x380 [ 122.196960][ T6140] populate_vma_page_range+0x27f/0x3a0 [ 122.197011][ T6140] ? __pfx_populate_vma_page_range+0x10/0x10 [ 122.197060][ T6140] ? __pfx_find_vma_intersection+0x10/0x10 [ 122.197104][ T6140] ? __do_sys_mlockall+0x331/0x5c0 [ 122.197141][ T6140] __mm_populate+0x1d6/0x380 [ 122.197192][ T6140] ? __pfx___mm_populate+0x10/0x10 [ 122.197255][ T6140] ? up_write+0x1b2/0x520 [ 122.197311][ T6140] __do_sys_mlockall+0x520/0x5c0 [ 122.197345][ T6140] do_syscall_64+0xcd/0x250 [ 122.197391][ T6140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.197436][ T6140] RIP: 0033:0x7f2ed938d169 [ 122.197462][ T6140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.197493][ T6140] RSP: 002b:00007f2eda15c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000097 [ 122.197525][ T6140] RAX: ffffffffffffffda RBX: 00007f2ed95a5fa0 RCX: 00007f2ed938d169 [ 122.197547][ T6140] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 122.197564][ T6140] RBP: 00007f2ed940e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 122.197581][ T6140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 122.197599][ T6140] R13: 0000000000000000 R14: 00007f2ed95a5fa0 R15: 00007ffd97d06248 [ 122.197638][ T6140] [ 123.754888][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 123.756030][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 123.824812][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 123.824906][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 123.908405][ T6180] cougar: G6 mapped to F18 [ 124.128514][ T6183] netlink: 4 bytes leftover after parsing attributes in process `syz.2.72'. [ 124.143841][ T6183] netlink: 354 bytes leftover after parsing attributes in process `syz.2.72'. [ 126.206779][ T6220] FAULT_INJECTION: forcing a failure. [ 126.206779][ T6220] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 126.269953][ T6220] CPU: 0 UID: 0 PID: 6220 Comm: syz.3.79 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 126.269996][ T6220] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.270026][ T6220] Call Trace: [ 126.270035][ T6220] [ 126.270046][ T6220] dump_stack_lvl+0x16c/0x1f0 [ 126.270094][ T6220] should_fail_ex+0x50a/0x650 [ 126.270157][ T6220] _copy_from_user+0x2e/0xd0 [ 126.270192][ T6220] copy_msghdr_from_user+0x99/0x160 [ 126.270241][ T6220] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 126.270306][ T6220] ___sys_sendmsg+0xff/0x1e0 [ 126.270352][ T6220] ? __pfx____sys_sendmsg+0x10/0x10 [ 126.270565][ T6220] ? __pfx_lock_release+0x10/0x10 [ 126.270608][ T6220] ? trace_lock_acquire+0x14e/0x1f0 [ 126.270657][ T6220] ? __fget_files+0x206/0x3a0 [ 126.270712][ T6220] __sys_sendmsg+0x16e/0x220 [ 126.270760][ T6220] ? __pfx___sys_sendmsg+0x10/0x10 [ 126.270831][ T6220] do_syscall_64+0xcd/0x250 [ 126.270874][ T6220] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.270981][ T6220] RIP: 0033:0x7f1af898d169 [ 126.271008][ T6220] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.271035][ T6220] RSP: 002b:00007f1af980f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.271078][ T6220] RAX: ffffffffffffffda RBX: 00007f1af8ba6160 RCX: 00007f1af898d169 [ 126.271097][ T6220] RDX: 0000000000040000 RSI: 0000400000000240 RDI: 0000000000000006 [ 126.271116][ T6220] RBP: 00007f1af980f090 R08: 0000000000000000 R09: 0000000000000000 [ 126.271133][ T6220] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.271149][ T6220] R13: 0000000000000000 R14: 00007f1af8ba6160 R15: 00007ffd31f41f28 [ 126.271184][ T6220] [ 127.057052][ T6235] syz.1.84: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 127.100938][ T6235] CPU: 1 UID: 0 PID: 6235 Comm: syz.1.84 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 127.101006][ T6235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.101026][ T6235] Call Trace: [ 127.101037][ T6235] [ 127.101051][ T6235] dump_stack_lvl+0x16c/0x1f0 [ 127.101104][ T6235] warn_alloc+0x24d/0x3a0 [ 127.101158][ T6235] ? __pfx_warn_alloc+0x10/0x10 [ 127.101218][ T6235] ? lock_acquire.part.0+0x11b/0x380 [ 127.101283][ T6235] __vmalloc_node_range_noprof+0x10dc/0x1530 [ 127.101333][ T6235] ? rcu_is_watching+0x12/0xc0 [ 127.101368][ T6235] ? trace_contention_end+0xee/0x140 [ 127.101418][ T6235] ? __mutex_lock+0x1cc/0xb10 [ 127.101459][ T6235] ? tomoyo_path_number_perm+0x46d/0x590 [ 127.101498][ T6235] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 127.101540][ T6235] ? dvb_dvr_do_ioctl+0x7e/0x290 [ 127.101584][ T6235] ? __pfx___mutex_lock+0x10/0x10 [ 127.101626][ T6235] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 127.101671][ T6235] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 127.101715][ T6235] ? do_vfs_ioctl+0x513/0x1990 [ 127.101755][ T6235] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 127.101809][ T6235] vmalloc_noprof+0x6b/0x90 [ 127.101853][ T6235] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 127.101893][ T6235] dvb_dvr_do_ioctl+0x15d/0x290 [ 127.101940][ T6235] dvb_usercopy+0x165/0x320 [ 127.101983][ T6235] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 127.102027][ T6235] ? __pfx_dvb_usercopy+0x10/0x10 [ 127.102064][ T6235] ? __pfx_lock_release+0x10/0x10 [ 127.102125][ T6235] ? __fget_files+0x206/0x3a0 [ 127.102180][ T6235] dvb_dvr_ioctl+0x29/0x40 [ 127.102216][ T6235] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 127.102255][ T6235] __x64_sys_ioctl+0x190/0x200 [ 127.102297][ T6235] do_syscall_64+0xcd/0x250 [ 127.102342][ T6235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.102387][ T6235] RIP: 0033:0x7fb95358d169 [ 127.102414][ T6235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.102446][ T6235] RSP: 002b:00007fb9533f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 127.102478][ T6235] RAX: ffffffffffffffda RBX: 00007fb9537a5fa0 RCX: 00007fb95358d169 [ 127.102498][ T6235] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 127.102516][ T6235] RBP: 00007fb95360e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 127.102535][ T6235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.102552][ T6235] R13: 0000000000000000 R14: 00007fb9537a5fa0 R15: 00007fff8a5dcd58 [ 127.102591][ T6235] [ 127.102654][ T6235] Mem-Info: [ 127.479858][ T6235] active_anon:9285 inactive_anon:0 isolated_anon:0 [ 127.479858][ T6235] active_file:4291 inactive_file:43250 isolated_file:0 [ 127.479858][ T6235] unevictable:768 dirty:316 writeback:0 [ 127.479858][ T6235] slab_reclaimable:9706 slab_unreclaimable:93715 [ 127.479858][ T6235] mapped:24400 shmem:4806 pagetables:825 [ 127.479858][ T6235] sec_pagetables:0 bounce:0 [ 127.479858][ T6235] kernel_misc_reclaimable:0 [ 127.479858][ T6235] free:1343657 free_pcp:3159 free_cma:0 [ 127.526023][ C1] vkms_vblank_simulate: vblank timer overrun [ 127.567898][ T6235] Node 0 active_anon:37440kB inactive_anon:0kB active_file:17164kB inactive_file:172992kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97800kB dirty:1260kB writeback:0kB shmem:17988kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10712kB pagetables:3300kB sec_pagetables:0kB all_unreclaimable? no [ 127.619982][ T6235] Node 1 active_anon:2400kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 127.677785][ T6235] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 127.709392][ T6235] lowmem_reserve[]: 0 2487 2487 0 0 [ 127.719319][ T6235] Node 0 DMA32 free:1451684kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:38912kB inactive_anon:0kB active_file:17876kB inactive_file:173912kB unevictable:1536kB writepending:1276kB present:3129332kB managed:2547536kB mlocked:0kB bounce:0kB free_pcp:4036kB local_pcp:764kB free_cma:0kB [ 127.793772][ T6235] lowmem_reserve[]: 0 0 0 0 0 [ 127.830898][ T6235] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 127.892448][ T6235] lowmem_reserve[]: 0 0 0 0 0 [ 127.903808][ T6235] Node 1 Normal free:3902196kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:7044kB local_pcp:6432kB free_cma:0kB [ 127.940979][ T6235] lowmem_reserve[]: 0 0 0 0 0 [ 127.948221][ T6235] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 127.969604][ T6235] Node 0 DMA32: 2*4kB (UM) 551*8kB (UE) 493*16kB (UME) 34*32kB (UME) 5*64kB (ME) 2*128kB (ME) 18*256kB (UE) 9*512kB (UE) 9*1024kB (U) 10*2048kB (UM) 341*4096kB (M) = 1449616kB [ 128.012836][ T6235] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 128.033806][ T6235] Node 1 Normal: 130*4kB (UME) 4*8kB (ME) 10*16kB (UE) 167*32kB (UE) 98*64kB (UE) 38*128kB (UME) 14*256kB (UME) 11*512kB (UME) 5*1024kB (UM) 4*2048kB (UE) 943*4096kB (M) = 3902248kB [ 128.092719][ T6235] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 128.123276][ T6235] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 128.144818][ T6235] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 128.170953][ T6235] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 128.191601][ T6235] 55191 total pagecache pages [ 128.199921][ T6235] 26 pages in swap cache [ 128.211307][ T6235] Free swap = 124704kB [ 128.219115][ T6235] Total swap = 124996kB [ 128.229686][ T6235] 2097051 pages RAM [ 128.242024][ T6235] 0 pages HighMem/MovableOnly [ 128.269170][ T6235] 428509 pages reserved [ 128.280447][ T6235] 0 pages cma reserved [ 129.767472][ T6262] process 'syz.1.92' launched '/dev/fd/0' with NULL argv: empty string added [ 129.805763][ T6275] Invalid ELF header magic: != ELF [ 130.924933][ T6289] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.931114][ T6289] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 130.988331][ T6289] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 131.020533][ T6289] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.445030][ T6300] netlink: 338 bytes leftover after parsing attributes in process `syz.0.97'. [ 131.476304][ T6303] netlink: 338 bytes leftover after parsing attributes in process `syz.0.97'. [ 131.555636][ T6300] FAULT_INJECTION: forcing a failure. [ 131.555636][ T6300] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 131.599586][ T6300] CPU: 0 UID: 0 PID: 6300 Comm: syz.0.97 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 131.599630][ T6300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 131.599648][ T6300] Call Trace: [ 131.599657][ T6300] [ 131.599669][ T6300] dump_stack_lvl+0x16c/0x1f0 [ 131.599713][ T6300] should_fail_ex+0x50a/0x650 [ 131.599768][ T6300] _copy_from_iter+0x2a1/0x1560 [ 131.599801][ T6300] ? trace_lock_acquire+0x14e/0x1f0 [ 131.599837][ T6300] ? __alloc_skb+0x1fe/0x380 [ 131.599880][ T6300] ? __pfx__copy_from_iter+0x10/0x10 [ 131.599907][ T6300] ? __virt_addr_valid+0x1a4/0x590 [ 131.599944][ T6300] ? __virt_addr_valid+0x5e/0x590 [ 131.599974][ T6300] ? __phys_addr_symbol+0x30/0x80 [ 131.600004][ T6300] ? __check_object_size+0x488/0x710 [ 131.600039][ T6300] netlink_sendmsg+0x813/0xd70 [ 131.600087][ T6300] ? __pfx_netlink_sendmsg+0x10/0x10 [ 131.600142][ T6300] ____sys_sendmsg+0xaaf/0xc90 [ 131.600176][ T6300] ? copy_msghdr_from_user+0x10b/0x160 [ 131.600220][ T6300] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.600268][ T6300] ___sys_sendmsg+0x135/0x1e0 [ 131.600315][ T6300] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.600375][ T6300] ? __pfx_lock_release+0x10/0x10 [ 131.600426][ T6300] ? trace_lock_acquire+0x14e/0x1f0 [ 131.600475][ T6300] ? __fget_files+0x206/0x3a0 [ 131.600530][ T6300] __sys_sendmsg+0x16e/0x220 [ 131.600576][ T6300] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.600645][ T6300] do_syscall_64+0xcd/0x250 [ 131.600732][ T6300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.600778][ T6300] RIP: 0033:0x7f2ed938d169 [ 131.600804][ T6300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.600833][ T6300] RSP: 002b:00007f2eda15c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.600862][ T6300] RAX: ffffffffffffffda RBX: 00007f2ed95a5fa0 RCX: 00007f2ed938d169 [ 131.600881][ T6300] RDX: 0000000000040000 RSI: 0000400000000240 RDI: 0000000000000004 [ 131.600906][ T6300] RBP: 00007f2eda15c090 R08: 0000000000000000 R09: 0000000000000000 [ 131.600925][ T6300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.600941][ T6300] R13: 0000000000000000 R14: 00007f2ed95a5fa0 R15: 00007ffd97d06248 [ 131.600978][ T6300] [ 132.171726][ T6273] lo: entered allmulticast mode [ 132.447329][ T6272] lo: left allmulticast mode [ 132.807970][ T6325] FAULT_INJECTION: forcing a failure. [ 132.807970][ T6325] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 132.904839][ T6325] CPU: 0 UID: 0 PID: 6325 Comm: syz.1.103 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 132.904887][ T6325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 132.904908][ T6325] Call Trace: [ 132.904918][ T6325] [ 132.904931][ T6325] dump_stack_lvl+0x16c/0x1f0 [ 132.904983][ T6325] should_fail_ex+0x50a/0x650 [ 132.905045][ T6325] _copy_from_user+0x2e/0xd0 [ 132.905082][ T6325] snd_rawmidi_kernel_write1+0x4f9/0x880 [ 132.905138][ T6325] snd_rawmidi_write+0x267/0xbe0 [ 132.905190][ T6325] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 132.905247][ T6325] ? __pfx_default_wake_function+0x10/0x10 [ 132.905300][ T6325] ? bpf_lsm_file_permission+0x9/0x10 [ 132.905351][ T6325] ? security_file_permission+0x71/0x210 [ 132.905397][ T6325] ? rw_verify_area+0xcf/0x680 [ 132.905439][ T6325] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 132.905479][ T6325] vfs_write+0x24c/0x1150 [ 132.905526][ T6325] ? __fget_files+0x1fc/0x3a0 [ 132.905572][ T6325] ? __pfx_lock_release+0x10/0x10 [ 132.905634][ T6325] ? __pfx_vfs_write+0x10/0x10 [ 132.905676][ T6325] ? do_futex+0x123/0x350 [ 132.905718][ T6325] ? lock_acquire+0x2f/0xb0 [ 132.905762][ T6325] ? __fget_files+0x40/0x3a0 [ 132.905811][ T6325] ? __fget_files+0x206/0x3a0 [ 132.905873][ T6325] ksys_write+0x207/0x250 [ 132.905918][ T6325] ? __pfx_ksys_write+0x10/0x10 [ 132.905973][ T6325] do_syscall_64+0xcd/0x250 [ 132.906019][ T6325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 132.906067][ T6325] RIP: 0033:0x7fb95358d169 [ 132.906093][ T6325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 132.906125][ T6325] RSP: 002b:00007fb9533f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 132.906156][ T6325] RAX: ffffffffffffffda RBX: 00007fb9537a5fa0 RCX: 00007fb95358d169 [ 132.906177][ T6325] RDX: 0000000001eb0800 RSI: 0000400000000100 RDI: 0000000000000006 [ 132.906197][ T6325] RBP: 00007fb95360e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 132.906235][ T6325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 132.906255][ T6325] R13: 0000000000000000 R14: 00007fb9537a5fa0 R15: 00007fff8a5dcd58 [ 132.906294][ T6325] [ 132.974957][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.104731][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 133.134702][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 133.139768][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 133.614337][ T6339] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 133.645715][ T6339] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 133.662661][ T6339] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 133.690351][ T6339] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 135.284207][ T6375] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78000 [ 135.301597][ T6375] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 135.323512][ T6375] memcg:ffff88802f9b2601 [ 135.337307][ T6375] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 135.404325][ T6375] page_type: f5(slab) [ 135.433755][ T6375] raw: 00fff00000000040 ffff88801c2938c0 0000000000000000 0000000000000001 [ 135.466138][ T6375] raw: 0000000000000000 0000000000150015 00000000f5000000 ffff88802f9b2601 [ 135.544620][ T6375] head: 00fff00000000040 ffff88801c2938c0 0000000000000000 0000000000000001 [ 135.578914][ T6375] head: 0000000000000000 0000000000150015 00000000f5000000 ffff88802f9b2601 [ 135.612951][ T6376] could not allocate digest TFM handle binfmt_misc [ 135.628704][ T6375] head: 00fff00000000001 ffffea0001e00001 ffffffffffffffff 0000000000000000 [ 135.655095][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 135.660056][ T6375] head: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 135.661232][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.708757][ T6375] page dumped because: unmovable page [ 135.735391][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 135.741553][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 135.751336][ T6375] page_owner tracks the page as allocated [ 135.791832][ T6375] page last allocated via order 1, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_RECLAIMABLE), pid 5834, tgid 5834 (syz-executor), ts 101989446279, free_ts 38695820658 [ 135.934792][ T6375] post_alloc_hook+0x181/0x1b0 [ 135.939710][ T6375] get_page_from_freelist+0xfce/0x2f80 [ 135.963435][ T6375] __alloc_frozen_pages_noprof+0x221/0x2470 [ 136.003706][ T6375] alloc_pages_mpol+0x1fc/0x540 [ 136.019940][ T6375] new_slab+0x23d/0x330 [ 136.024363][ T6375] ___slab_alloc+0xc5d/0x1720 [ 136.064681][ T6375] __slab_alloc.constprop.0+0x56/0xb0 [ 136.070228][ T6375] kmem_cache_alloc_lru_noprof+0xff/0x3d0 [ 136.104720][ T6375] __d_alloc+0x31/0xaa0 [ 136.109015][ T6375] d_alloc_pseudo+0x1c/0xc0 [ 136.133886][ T6375] alloc_file_pseudo+0xd0/0x230 [ 136.215001][ T6375] sock_alloc_file+0x50/0x210 [ 136.219993][ T6375] __sys_socket+0x1c2/0x260 [ 136.257825][ T6375] __x64_sys_socket+0x72/0xb0 [ 136.262633][ T6375] do_syscall_64+0xcd/0x250 [ 136.298282][ T6375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.348209][ T6375] page last free pid 1 tgid 1 stack trace: [ 136.354135][ T6375] free_frozen_pages+0x6db/0xfb0 [ 136.419873][ T6375] free_contig_range+0x133/0x3f0 [ 136.454720][ T6375] destroy_args+0x66f/0x830 [ 136.459357][ T6375] debug_vm_pgtable+0x130f/0x2d60 [ 136.520992][ T6375] do_one_initcall+0x128/0x700 [ 136.574827][ T6375] kernel_init_freeable+0x5c7/0x900 [ 136.580218][ T6375] kernel_init+0x1c/0x2b0 [ 136.641123][ T6375] ret_from_fork+0x45/0x80 [ 136.684775][ T6375] ret_from_fork_asm+0x1a/0x30 [ 136.982155][ T6395] netlink: 28 bytes leftover after parsing attributes in process `syz.0.117'. [ 137.061187][ T6395] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 137.498384][ T6403] syz.3.121: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 137.539554][ T6403] CPU: 1 UID: 0 PID: 6403 Comm: syz.3.121 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 137.539598][ T6403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 137.539616][ T6403] Call Trace: [ 137.539625][ T6403] [ 137.539637][ T6403] dump_stack_lvl+0x16c/0x1f0 [ 137.539684][ T6403] warn_alloc+0x24d/0x3a0 [ 137.539737][ T6403] ? __pfx_warn_alloc+0x10/0x10 [ 137.539792][ T6403] ? lock_acquire.part.0+0x11b/0x380 [ 137.539854][ T6403] __vmalloc_node_range_noprof+0x10dc/0x1530 [ 137.539913][ T6403] ? rcu_is_watching+0x12/0xc0 [ 137.539946][ T6403] ? trace_contention_end+0xee/0x140 [ 137.539994][ T6403] ? __mutex_lock+0x1cc/0xb10 [ 137.540031][ T6403] ? tomoyo_path_number_perm+0x46d/0x590 [ 137.540069][ T6403] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 137.540109][ T6403] ? dvb_dvr_do_ioctl+0x7e/0x290 [ 137.540151][ T6403] ? __pfx___mutex_lock+0x10/0x10 [ 137.540190][ T6403] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 137.540232][ T6403] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 137.540272][ T6403] ? do_vfs_ioctl+0x513/0x1990 [ 137.540309][ T6403] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 137.540348][ T6403] vmalloc_noprof+0x6b/0x90 [ 137.540388][ T6403] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 137.540426][ T6403] dvb_dvr_do_ioctl+0x15d/0x290 [ 137.540471][ T6403] dvb_usercopy+0x165/0x320 [ 137.540506][ T6403] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 137.540548][ T6403] ? __pfx_dvb_usercopy+0x10/0x10 [ 137.540582][ T6403] ? __pfx_lock_release+0x10/0x10 [ 137.540640][ T6403] ? __fget_files+0x206/0x3a0 [ 137.540691][ T6403] dvb_dvr_ioctl+0x29/0x40 [ 137.540725][ T6403] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 137.540762][ T6403] __x64_sys_ioctl+0x190/0x200 [ 137.540802][ T6403] do_syscall_64+0xcd/0x250 [ 137.540845][ T6403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.540900][ T6403] RIP: 0033:0x7f1af898d169 [ 137.540924][ T6403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.541000][ T6403] RSP: 002b:00007f1af9851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 137.541029][ T6403] RAX: ffffffffffffffda RBX: 00007f1af8ba5fa0 RCX: 00007f1af898d169 [ 137.541050][ T6403] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 137.541068][ T6403] RBP: 00007f1af8a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 137.541086][ T6403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.541104][ T6403] R13: 0000000000000000 R14: 00007f1af8ba5fa0 R15: 00007ffd31f41f28 [ 137.541149][ T6403] [ 137.541161][ T6403] Mem-Info: [ 137.858431][ T6403] active_anon:49656 inactive_anon:0 isolated_anon:0 [ 137.858431][ T6403] active_file:7817 inactive_file:46543 isolated_file:0 [ 137.858431][ T6403] unevictable:768 dirty:3396 writeback:0 [ 137.858431][ T6403] slab_reclaimable:9950 slab_unreclaimable:93825 [ 137.858431][ T6403] mapped:42427 shmem:46024 pagetables:967 [ 137.858431][ T6403] sec_pagetables:0 bounce:0 [ 137.858431][ T6403] kernel_misc_reclaimable:0 [ 137.858431][ T6403] free:1296226 free_pcp:552 free_cma:0 [ 137.984751][ T6403] Node 0 active_anon:202124kB inactive_anon:0kB active_file:31268kB inactive_file:186764kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:170308kB dirty:14280kB writeback:0kB shmem:184760kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10856kB pagetables:3868kB sec_pagetables:0kB all_unreclaimable? no [ 138.074899][ T6403] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 138.108563][ T6403] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 138.140484][ T6403] lowmem_reserve[]: 0 2487 2487 0 0 [ 138.146383][ T6403] Node 0 DMA32 free:1249392kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:205216kB inactive_anon:0kB active_file:31268kB inactive_file:186780kB unevictable:1536kB writepending:13080kB present:3129332kB managed:2547536kB mlocked:0kB bounce:0kB free_pcp:6164kB local_pcp:160kB free_cma:0kB [ 138.190307][ T6403] lowmem_reserve[]: 0 0 0 0 0 [ 138.195313][ T6403] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 138.246983][ T6403] lowmem_reserve[]: 0 0 0 0 0 [ 138.319425][ T6403] Node 1 Normal free:3909004kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:420kB local_pcp:0kB free_cma:0kB [ 138.447387][ T6403] lowmem_reserve[]: 0 0 0 0 0 [ 138.452409][ T6403] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 138.483772][ T6403] Node 0 DMA32: 4*4kB (UME) 5*8kB (UME) 3*16kB (UME) 32*32kB (UME) 9*64kB (UE) 16*128kB (UME) 13*256kB (UE) 4*512kB (UM) 5*1024kB (U) 8*2048kB (UM) 297*4096kB (ME) = 1247144kB [ 138.514814][ T6403] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 138.557155][ T6403] Node 1 Normal: 191*4kB (UME) 52*8kB (UME) 49*16kB (UME) 183*32kB (UME) 102*64kB (UME) 41*128kB (UME) 15*256kB (UME) 13*512kB (UME) 6*1024kB (UM) 5*2048kB (UME) 943*4096kB (M) = 3909004kB [ 138.647129][ T6403] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.715689][ T6403] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 138.744689][ T6403] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 138.768807][ T6403] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 138.787304][ T6403] 104951 total pagecache pages [ 138.796485][ T6403] 47 pages in swap cache [ 138.801673][ T6403] Free swap = 124500kB [ 138.844652][ T6403] Total swap = 124996kB [ 138.855155][ T6403] 2097051 pages RAM [ 138.859040][ T6403] 0 pages HighMem/MovableOnly [ 138.884680][ T6403] 428509 pages reserved [ 138.888922][ T6403] 0 pages cma reserved [ 140.327812][ T6433] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 140.375205][ T6433] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 140.384933][ T6433] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 140.425285][ T6433] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 140.562579][ T6441] netlink: 338 bytes leftover after parsing attributes in process `syz.0.129'. [ 140.754425][ T6441] FAULT_INJECTION: forcing a failure. [ 140.754425][ T6441] name failslab, interval 1, probability 0, space 0, times 0 [ 140.870220][ T6441] CPU: 0 UID: 0 PID: 6441 Comm: syz.0.129 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 140.870263][ T6441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 140.870281][ T6441] Call Trace: [ 140.870290][ T6441] [ 140.870303][ T6441] dump_stack_lvl+0x16c/0x1f0 [ 140.870349][ T6441] should_fail_ex+0x50a/0x650 [ 140.870405][ T6441] should_failslab+0xc2/0x120 [ 140.870436][ T6441] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 140.870487][ T6441] ? skb_clone+0x190/0x3f0 [ 140.870550][ T6441] skb_clone+0x190/0x3f0 [ 140.870598][ T6441] netlink_deliver_tap+0xabd/0xd30 [ 140.870660][ T6441] netlink_unicast+0x5e1/0x7f0 [ 140.870707][ T6441] ? __pfx_netlink_unicast+0x10/0x10 [ 140.870751][ T6441] ? __phys_addr_symbol+0x30/0x80 [ 140.870784][ T6441] ? __check_object_size+0x488/0x710 [ 140.870820][ T6441] netlink_sendmsg+0x8b8/0xd70 [ 140.870869][ T6441] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.870928][ T6441] ____sys_sendmsg+0xaaf/0xc90 [ 140.870964][ T6441] ? copy_msghdr_from_user+0x10b/0x160 [ 140.871010][ T6441] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.871063][ T6441] ___sys_sendmsg+0x135/0x1e0 [ 140.871111][ T6441] ? __pfx____sys_sendmsg+0x10/0x10 [ 140.871174][ T6441] ? __pfx_lock_release+0x10/0x10 [ 140.871218][ T6441] ? trace_lock_acquire+0x14e/0x1f0 [ 140.871269][ T6441] ? __fget_files+0x206/0x3a0 [ 140.871325][ T6441] __sys_sendmsg+0x16e/0x220 [ 140.871373][ T6441] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.871446][ T6441] do_syscall_64+0xcd/0x250 [ 140.871490][ T6441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.871542][ T6441] RIP: 0033:0x7f2ed938d169 [ 140.871567][ T6441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.871596][ T6441] RSP: 002b:00007f2eda15c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.871625][ T6441] RAX: ffffffffffffffda RBX: 00007f2ed95a5fa0 RCX: 00007f2ed938d169 [ 140.871645][ T6441] RDX: 0000000000040000 RSI: 0000400000000240 RDI: 0000000000000004 [ 140.871663][ T6441] RBP: 00007f2eda15c090 R08: 0000000000000000 R09: 0000000000000000 [ 140.871680][ T6441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.871703][ T6441] R13: 0000000000000000 R14: 00007f2ed95a5fa0 R15: 00007ffd97d06248 [ 140.871741][ T6441] [ 141.102191][ C0] vkms_vblank_simulate: vblank timer overrun [ 141.160809][ T6444] netlink: 338 bytes leftover after parsing attributes in process `syz.0.129'. [ 141.200920][ T6452] FAULT_INJECTION: forcing a failure. [ 141.200920][ T6452] name failslab, interval 1, probability 0, space 0, times 0 [ 141.244988][ T6452] CPU: 1 UID: 0 PID: 6452 Comm: syz.1.132 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 141.245033][ T6452] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.245051][ T6452] Call Trace: [ 141.245060][ T6452] [ 141.245072][ T6452] dump_stack_lvl+0x16c/0x1f0 [ 141.245120][ T6452] should_fail_ex+0x50a/0x650 [ 141.245170][ T6452] ? fs_reclaim_acquire+0xae/0x150 [ 141.245214][ T6452] should_failslab+0xc2/0x120 [ 141.245244][ T6452] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 141.245295][ T6452] ? __alloc_skb+0x2b1/0x380 [ 141.245344][ T6452] __alloc_skb+0x2b1/0x380 [ 141.245388][ T6452] ? __pfx___alloc_skb+0x10/0x10 [ 141.245434][ T6452] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 141.245485][ T6452] netlink_alloc_large_skb+0x69/0x130 [ 141.245531][ T6452] netlink_sendmsg+0x689/0xd70 [ 141.245589][ T6452] ? __pfx_netlink_sendmsg+0x10/0x10 [ 141.245630][ T6452] ? stack_trace_save+0x95/0xd0 [ 141.245676][ T6452] ? stack_depot_save_flags+0x28/0x9c0 [ 141.245736][ T6452] sock_sendmsg+0x3d3/0x490 [ 141.245770][ T6452] ? __kasan_slab_free+0x51/0x70 [ 141.245821][ T6452] ? __pfx_sock_sendmsg+0x10/0x10 [ 141.245853][ T6452] ? splice_direct_to_actor+0x2a4/0xa40 [ 141.245970][ T6452] splice_to_socket+0xaac/0x1040 [ 141.246032][ T6452] ? __pfx_splice_to_socket+0x10/0x10 [ 141.246075][ T6452] ? kasan_quarantine_put+0x10a/0x240 [ 141.246172][ T6452] ? __pfx_splice_to_socket+0x10/0x10 [ 141.246220][ T6452] direct_splice_actor+0x18f/0x6c0 [ 141.246268][ T6452] splice_direct_to_actor+0x346/0xa40 [ 141.246312][ T6452] ? __pfx_direct_splice_actor+0x10/0x10 [ 141.246362][ T6452] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 141.246409][ T6452] ? __fget_files+0x1fc/0x3a0 [ 141.246460][ T6452] do_splice_direct+0x178/0x250 [ 141.246502][ T6452] ? __pfx_do_splice_direct+0x10/0x10 [ 141.246545][ T6452] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 141.246595][ T6452] ? bpf_lsm_file_permission+0x9/0x10 [ 141.246647][ T6452] ? security_file_permission+0x71/0x210 [ 141.246691][ T6452] ? rw_verify_area+0xcf/0x680 [ 141.246733][ T6452] do_sendfile+0xafb/0xe40 [ 141.246781][ T6452] ? __pfx_do_sendfile+0x10/0x10 [ 141.246824][ T6452] ? __fget_files+0x206/0x3a0 [ 141.246879][ T6452] __x64_sys_sendfile64+0x1da/0x220 [ 141.246908][ T6452] ? ksys_write+0x1ba/0x250 [ 141.246951][ T6452] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 141.246992][ T6452] do_syscall_64+0xcd/0x250 [ 141.247038][ T6452] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.247082][ T6452] RIP: 0033:0x7fb95358d169 [ 141.247107][ T6452] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.247135][ T6452] RSP: 002b:00007fb9533f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 141.247165][ T6452] RAX: ffffffffffffffda RBX: 00007fb9537a5fa0 RCX: 00007fb95358d169 [ 141.247183][ T6452] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 141.247200][ T6452] RBP: 00007fb9533f9090 R08: 0000000000000000 R09: 0000000000000000 [ 141.247216][ T6452] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 141.247233][ T6452] R13: 0000000000000000 R14: 00007fb9537a5fa0 R15: 00007fff8a5dcd58 [ 141.247269][ T6452] [ 141.597854][ T6452] Process accounting paused [ 141.746228][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 141.752947][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 142.376166][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 142.464782][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 142.471040][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.477269][ T5849] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.071715][ T6496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.144'. [ 143.093005][ T6496] bridge_slave_1: left allmulticast mode [ 143.106954][ T6496] bridge_slave_1: left promiscuous mode [ 143.120112][ T6496] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.350113][ T6496] bridge_slave_0: left allmulticast mode [ 143.401527][ T6496] bridge_slave_0: left promiscuous mode [ 143.472475][ T6496] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.056282][ T6575] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 147.074455][ T6575] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 147.100977][ T6575] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 147.126474][ T6575] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 147.591570][ T6586] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 149.094844][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 149.100973][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 149.175196][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 149.181473][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 150.544245][ T29] audit: type=1326 audit(6035542619.487:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6624 comm="syz.3.169" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1af898d169 code=0x0 [ 150.801975][ T6643] netlink: 36 bytes leftover after parsing attributes in process `syz.1.172'. [ 151.183145][ T6648] Invalid ELF header magic: != ELF [ 152.846461][ T6671] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 153.121878][ T6663] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 153.131232][ T6663] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 153.139082][ T6663] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 153.172580][ T6663] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.233196][ T6669] netlink: 28 bytes leftover after parsing attributes in process `syz.2.180'. [ 153.607198][ T6681] netlink: 338 bytes leftover after parsing attributes in process `syz.3.183'. [ 153.665236][ T6681] netlink: 338 bytes leftover after parsing attributes in process `syz.3.183'. [ 153.745982][ T6681] netlink: 338 bytes leftover after parsing attributes in process `syz.3.183'. [ 154.458552][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 155.175955][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 155.175966][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.254726][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 155.890694][ T6708] warn_alloc: 1 callbacks suppressed [ 155.890719][ T6708] syz.2.189: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 155.913493][ T6708] CPU: 1 UID: 0 PID: 6708 Comm: syz.2.189 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 155.913541][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 155.913562][ T6708] Call Trace: [ 155.913572][ T6708] [ 155.913586][ T6708] dump_stack_lvl+0x16c/0x1f0 [ 155.913642][ T6708] warn_alloc+0x24d/0x3a0 [ 155.913698][ T6708] ? __pfx_warn_alloc+0x10/0x10 [ 155.913758][ T6708] ? lock_acquire.part.0+0x11b/0x380 [ 155.913822][ T6708] __vmalloc_node_range_noprof+0x10dc/0x1530 [ 155.913872][ T6708] ? rcu_is_watching+0x12/0xc0 [ 155.913907][ T6708] ? trace_contention_end+0xee/0x140 [ 155.913958][ T6708] ? __mutex_lock+0x1cc/0xb10 [ 155.914012][ T6708] ? tomoyo_path_number_perm+0x46d/0x590 [ 155.914055][ T6708] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 155.914101][ T6708] ? dvb_dvr_do_ioctl+0x7e/0x290 [ 155.914143][ T6708] ? __pfx___mutex_lock+0x10/0x10 [ 155.914187][ T6708] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 155.914238][ T6708] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 155.914283][ T6708] ? do_vfs_ioctl+0x513/0x1990 [ 155.914324][ T6708] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 155.914375][ T6708] vmalloc_noprof+0x6b/0x90 [ 155.914421][ T6708] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 155.914465][ T6708] dvb_dvr_do_ioctl+0x15d/0x290 [ 155.914514][ T6708] dvb_usercopy+0x165/0x320 [ 155.914560][ T6708] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 155.914606][ T6708] ? __pfx_dvb_usercopy+0x10/0x10 [ 155.914641][ T6708] ? __pfx_lock_release+0x10/0x10 [ 155.914698][ T6708] ? __fget_files+0x206/0x3a0 [ 155.914748][ T6708] dvb_dvr_ioctl+0x29/0x40 [ 155.914783][ T6708] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 155.914820][ T6708] __x64_sys_ioctl+0x190/0x200 [ 155.914858][ T6708] do_syscall_64+0xcd/0x250 [ 155.914905][ T6708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 155.914952][ T6708] RIP: 0033:0x7f563698d169 [ 155.914979][ T6708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 155.915011][ T6708] RSP: 002b:00007f5637897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 155.915042][ T6708] RAX: ffffffffffffffda RBX: 00007f5636ba5fa0 RCX: 00007f563698d169 [ 155.915063][ T6708] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 155.915081][ T6708] RBP: 00007f5636a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 155.915099][ T6708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 155.915116][ T6708] R13: 0000000000000000 R14: 00007f5636ba5fa0 R15: 00007fff72c2a888 [ 155.915154][ T6708] [ 156.255069][ T6708] Mem-Info: [ 156.322121][ T6708] active_anon:28859 inactive_anon:0 isolated_anon:0 [ 156.322121][ T6708] active_file:7867 inactive_file:43586 isolated_file:0 [ 156.322121][ T6708] unevictable:1969 dirty:210 writeback:0 [ 156.322121][ T6708] slab_reclaimable:9819 slab_unreclaimable:93388 [ 156.322121][ T6708] mapped:29704 shmem:24268 pagetables:870 [ 156.322121][ T6708] sec_pagetables:0 bounce:0 [ 156.322121][ T6708] kernel_misc_reclaimable:0 [ 156.322121][ T6708] free:1317880 free_pcp:3257 free_cma:0 [ 156.504623][ T6708] Node 0 active_anon:116636kB inactive_anon:0kB active_file:31468kB inactive_file:174336kB unevictable:6840kB isolated(anon):0kB isolated(file):0kB mapped:119916kB dirty:836kB writeback:0kB shmem:97036kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10664kB pagetables:3380kB sec_pagetables:0kB all_unreclaimable? no [ 156.586909][ T6708] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 156.721875][ T6708] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 156.795012][ T6708] lowmem_reserve[]: 0 2487 2487 0 0 [ 156.800499][ T6708] Node 0 DMA32 free:1346972kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:122376kB inactive_anon:0kB active_file:31468kB inactive_file:174260kB unevictable:8064kB writepending:724kB present:3129332kB managed:2547536kB mlocked:6528kB bounce:0kB free_pcp:3708kB local_pcp:1092kB free_cma:0kB [ 156.887450][ T6708] lowmem_reserve[]: 0 0 0 0 0 [ 156.892434][ T6708] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 156.994915][ T6708] lowmem_reserve[]: 0 0 0 0 0 [ 156.999794][ T6708] Node 1 Normal free:3899580kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:9788kB local_pcp:3784kB free_cma:0kB [ 157.214840][ T6708] lowmem_reserve[]: 0 0 0 0 0 [ 157.219736][ T6708] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 157.294662][ T6708] Node 0 DMA32: 260*4kB (UE) 217*8kB (UME) 214*16kB (UME) 81*32kB (UME) 163*64kB (UME) 41*128kB (UME) 144*256kB (UME) 77*512kB (UM) 35*1024kB (UM) 16*2048kB (UM) 287*4096kB (ME) = 1344920kB [ 157.426424][ T6708] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 157.488020][ T6708] Node 1 Normal: 191*4kB (UME) 19*8kB (UE) 47*16kB (UME) 181*32kB (UE) 100*64kB (UE) 40*128kB (UME) 13*256kB (UE) 11*512kB (UME) 5*1024kB (UM) 4*2048kB (UE) 942*4096kB (M) = 3899684kB [ 157.555819][ T6708] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 157.580311][ T6708] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 157.628802][ T6708] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 157.676070][ T6708] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 157.724266][ T6708] 78795 total pagecache pages [ 157.735723][ T6708] 81 pages in swap cache [ 157.740046][ T6708] Free swap = 124300kB [ 157.745969][ T6727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.194'. [ 157.782344][ T6708] Total swap = 124996kB [ 157.787303][ T6708] 2097051 pages RAM [ 157.791281][ T6708] 0 pages HighMem/MovableOnly [ 157.824764][ T6708] 428509 pages reserved [ 157.829118][ T6708] 0 pages cma reserved [ 158.545942][ T6737] netlink: 338 bytes leftover after parsing attributes in process `syz.3.198'. [ 159.866537][ T6759] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(9) [ 162.216378][ T6784] Invalid ELF header magic: != ELF [ 163.377705][ T6790] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 163.384020][ T6790] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 163.410689][ T6790] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 163.455273][ T6790] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 163.505293][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.515819][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.525443][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.542243][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.554975][ T5851] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 163.562767][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 164.934661][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 164.957821][ T6794] chnl_net:caif_netlink_parms(): no params data found [ 165.417417][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 165.418825][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 165.443192][ T6824] FAULT_INJECTION: forcing a failure. [ 165.443192][ T6824] name failslab, interval 1, probability 0, space 0, times 0 [ 165.484903][ T6824] CPU: 0 UID: 0 PID: 6824 Comm: syz.3.220 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 165.484949][ T6824] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.484967][ T6824] Call Trace: [ 165.484976][ T6824] [ 165.484988][ T6824] dump_stack_lvl+0x16c/0x1f0 [ 165.485041][ T6824] should_fail_ex+0x50a/0x650 [ 165.485093][ T6824] ? fs_reclaim_acquire+0xae/0x150 [ 165.485162][ T6824] ? copy_splice_read+0x1a8/0xb80 [ 165.485203][ T6824] should_failslab+0xc2/0x120 [ 165.485234][ T6824] __kmalloc_noprof+0xcb/0x510 [ 165.485290][ T6824] copy_splice_read+0x1a8/0xb80 [ 165.485340][ T6824] ? __pfx_copy_splice_read+0x10/0x10 [ 165.485412][ T6824] ? __pfx_copy_splice_read+0x10/0x10 [ 165.485453][ T6824] do_splice_read+0x282/0x370 [ 165.485497][ T6824] splice_direct_to_actor+0x2a4/0xa40 [ 165.485560][ T6824] ? __pfx_direct_splice_actor+0x10/0x10 [ 165.485612][ T6824] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 165.485657][ T6824] ? __fget_files+0x1fc/0x3a0 [ 165.485708][ T6824] do_splice_direct+0x178/0x250 [ 165.485752][ T6824] ? __pfx_do_splice_direct+0x10/0x10 [ 165.485795][ T6824] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 165.485838][ T6824] ? bpf_lsm_file_permission+0x9/0x10 [ 165.485887][ T6824] ? security_file_permission+0x71/0x210 [ 165.485932][ T6824] ? rw_verify_area+0xcf/0x680 [ 165.485975][ T6824] do_sendfile+0xafb/0xe40 [ 165.486023][ T6824] ? __pfx_do_sendfile+0x10/0x10 [ 165.486065][ T6824] ? __fget_files+0x206/0x3a0 [ 165.486120][ T6824] __x64_sys_sendfile64+0x1da/0x220 [ 165.486148][ T6824] ? ksys_write+0x1ba/0x250 [ 165.486190][ T6824] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 165.486232][ T6824] do_syscall_64+0xcd/0x250 [ 165.486280][ T6824] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.486325][ T6824] RIP: 0033:0x7f1af898d169 [ 165.486351][ T6824] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.486380][ T6824] RSP: 002b:00007f1af9851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 165.486418][ T6824] RAX: ffffffffffffffda RBX: 00007f1af8ba5fa0 RCX: 00007f1af898d169 [ 165.486438][ T6824] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 165.486454][ T6824] RBP: 00007f1af9851090 R08: 0000000000000000 R09: 0000000000000000 [ 165.486472][ T6824] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 165.486489][ T6824] R13: 0000000000000000 R14: 00007f1af8ba5fa0 R15: 00007ffd31f41f28 [ 165.486526][ T6824] [ 165.504858][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 165.662615][ T54] Bluetooth: hci4: command tx timeout [ 165.768635][ T6794] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.778921][ T6794] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.786460][ T6794] bridge_slave_0: entered allmulticast mode [ 165.794942][ T6794] bridge_slave_0: entered promiscuous mode [ 165.803904][ T6794] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.811401][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.827975][ T6794] bridge_slave_1: entered allmulticast mode [ 165.836150][ T6794] bridge_slave_1: entered promiscuous mode [ 166.061864][ T6794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.117937][ T6794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.315718][ T6832] FAULT_INJECTION: forcing a failure. [ 166.315718][ T6832] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 166.382293][ T6832] CPU: 1 UID: 0 PID: 6832 Comm: syz.1.223 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 166.382351][ T6832] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 166.382372][ T6832] Call Trace: [ 166.382384][ T6832] [ 166.382397][ T6832] dump_stack_lvl+0x16c/0x1f0 [ 166.382455][ T6832] should_fail_ex+0x50a/0x650 [ 166.382517][ T6832] _copy_from_user+0x2e/0xd0 [ 166.382554][ T6832] snd_rawmidi_kernel_write1+0x4f9/0x880 [ 166.382628][ T6832] snd_rawmidi_write+0x267/0xbe0 [ 166.382681][ T6832] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 166.382726][ T6832] ? __pfx_default_wake_function+0x10/0x10 [ 166.382781][ T6832] ? bpf_lsm_file_permission+0x9/0x10 [ 166.382836][ T6832] ? security_file_permission+0x71/0x210 [ 166.382885][ T6832] ? rw_verify_area+0xcf/0x680 [ 166.382926][ T6832] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 166.382963][ T6832] vfs_write+0x24c/0x1150 [ 166.383089][ T6832] ? __fget_files+0x1fc/0x3a0 [ 166.383140][ T6832] ? __pfx_lock_release+0x10/0x10 [ 166.383191][ T6832] ? __pfx_vfs_write+0x10/0x10 [ 166.383231][ T6832] ? do_futex+0x123/0x350 [ 166.383277][ T6832] ? lock_acquire+0x2f/0xb0 [ 166.383322][ T6832] ? __fget_files+0x40/0x3a0 [ 166.383385][ T6832] ? __fget_files+0x206/0x3a0 [ 166.383444][ T6832] ksys_write+0x207/0x250 [ 166.383487][ T6832] ? __pfx_ksys_write+0x10/0x10 [ 166.383543][ T6832] do_syscall_64+0xcd/0x250 [ 166.383590][ T6832] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.383635][ T6832] RIP: 0033:0x7fb95358d169 [ 166.383660][ T6832] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.383693][ T6832] RSP: 002b:00007fb9533f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 166.383725][ T6832] RAX: ffffffffffffffda RBX: 00007fb9537a5fa0 RCX: 00007fb95358d169 [ 166.383747][ T6832] RDX: 0000000001eb0800 RSI: 0000400000000100 RDI: 0000000000000006 [ 166.383767][ T6832] RBP: 00007fb95360e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 166.383786][ T6832] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.383803][ T6832] R13: 0000000000000000 R14: 00007fb9537a5fa0 R15: 00007fff8a5dcd58 [ 166.383840][ T6832] [ 166.387051][ T6835] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(9) [ 166.732091][ T6794] team0: Port device team_slave_0 added [ 166.773886][ T6794] team0: Port device team_slave_1 added [ 167.134388][ T6794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.160360][ T6794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.244788][ T6794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.270384][ T6841] netlink: 346 bytes leftover after parsing attributes in process `syz.1.225'. [ 167.304019][ T6794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.331582][ T6794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.393285][ T6794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.726527][ T6794] hsr_slave_0: entered promiscuous mode [ 167.746880][ T6794] hsr_slave_1: entered promiscuous mode [ 167.781333][ T6794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.797487][ T6794] Cannot create hsr debugfs directory [ 167.814696][ T54] Bluetooth: hci4: command tx timeout [ 168.208795][ T6854] netlink: 4 bytes leftover after parsing attributes in process `syz.3.230'. [ 169.085742][ T6868] netlink: 28 bytes leftover after parsing attributes in process `syz.2.231'. [ 169.137860][ T6794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 169.235938][ T6794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 169.309672][ T6794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 169.346992][ T6794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 169.391695][ T6873] netlink: 354 bytes leftover after parsing attributes in process `syz.1.234'. [ 169.650147][ T6794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.703121][ T6794] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.747871][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.755365][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.815603][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.823214][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.895675][ T54] Bluetooth: hci4: command tx timeout [ 169.951079][ T6794] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 169.969897][ T6794] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.085816][ T6881] lo: entered allmulticast mode [ 170.155039][ T6881] lo: left allmulticast mode [ 170.511312][ T6893] netlink: 28 bytes leftover after parsing attributes in process `syz.2.236'. [ 170.580902][ T6794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.440941][ T6794] veth0_vlan: entered promiscuous mode [ 171.505598][ T6794] veth1_vlan: entered promiscuous mode [ 171.623890][ T6794] veth0_macvtap: entered promiscuous mode [ 171.675264][ T6794] veth1_macvtap: entered promiscuous mode [ 171.751338][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.771510][ T6914] raw_sendmsg: syz.3.241 forgot to set AF_INET. Fix it! [ 171.798295][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.824637][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.864830][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.894614][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.931456][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.953332][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.975198][ T54] Bluetooth: hci4: command tx timeout [ 172.021682][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.082302][ T6794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.136009][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.173357][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.190640][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.201797][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.215466][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.246334][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.281865][ T6794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.316531][ T6794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.346494][ T6794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.408497][ T6794] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.443309][ T6794] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.460811][ T6794] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.494859][ T6794] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.134424][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.170002][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.750068][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.777219][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.030762][ T6931] netlink: 342 bytes leftover after parsing attributes in process `syz.3.244'. [ 174.490682][ T6875] Process accounting resumed [ 175.407423][ T6953] ovs_: entered promiscuous mode [ 175.594411][ T6943] device-mapper: ioctl: Unable to rename non-existent device, to „ [ 177.638010][ T6991] FAULT_INJECTION: forcing a failure. [ 177.638010][ T6991] name failslab, interval 1, probability 0, space 0, times 0 [ 177.638091][ T6991] CPU: 1 UID: 0 PID: 6991 Comm: syz.2.253 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 177.638129][ T6991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 177.638147][ T6991] Call Trace: [ 177.638157][ T6991] [ 177.638177][ T6991] dump_stack_lvl+0x16c/0x1f0 [ 177.638232][ T6991] should_fail_ex+0x50a/0x650 [ 177.638288][ T6991] ? fs_reclaim_acquire+0xae/0x150 [ 177.638337][ T6991] should_failslab+0xc2/0x120 [ 177.638370][ T6991] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 177.638432][ T6991] ? proc_create_reg+0xe3/0x180 [ 177.638463][ T6991] ? fib_notifier_ops_register+0x32/0x270 [ 177.638514][ T6991] ? __pfx_ipmr_net_init+0x10/0x10 [ 177.638624][ T6991] kmemdup_noprof+0x29/0x60 [ 177.638669][ T6991] fib_notifier_ops_register+0x32/0x270 [ 177.638719][ T6991] ? __pfx_ipmr_net_init+0x10/0x10 [ 177.638757][ T6991] ipmr_net_init+0x57/0x4e0 [ 177.638795][ T6991] ? __pfx_ipmr_net_init+0x10/0x10 [ 177.638833][ T6991] ops_init+0x1df/0x5f0 [ 177.638888][ T6991] setup_net+0x21f/0x860 [ 177.638940][ T6991] ? __pfx_setup_net+0x10/0x10 [ 177.638989][ T6991] ? down_read_killable+0xcc/0x380 [ 177.639038][ T6991] ? __pfx_down_read_killable+0x10/0x10 [ 177.639083][ T6991] ? __raw_spin_lock_init+0x3a/0x110 [ 177.639142][ T6991] ? debug_mutex_init+0x37/0x70 [ 177.639189][ T6991] copy_net_ns+0x2a6/0x5f0 [ 177.639227][ T6991] create_new_namespaces+0x3ea/0xad0 [ 177.639298][ T6991] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 177.639357][ T6991] ksys_unshare+0x45d/0xa40 [ 177.639392][ T6991] ? __pfx_ksys_unshare+0x10/0x10 [ 177.639424][ T6991] ? xfd_validate_state+0x5d/0x180 [ 177.639486][ T6991] __x64_sys_unshare+0x31/0x40 [ 177.639519][ T6991] do_syscall_64+0xcd/0x250 [ 177.639562][ T6991] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.639606][ T6991] RIP: 0033:0x7f563698d169 [ 177.639632][ T6991] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.639663][ T6991] RSP: 002b:00007f5637855038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 177.639695][ T6991] RAX: ffffffffffffffda RBX: 00007f5636ba6160 RCX: 00007f563698d169 [ 177.639725][ T6991] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 177.639745][ T6991] RBP: 00007f5636a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 177.639765][ T6991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.639785][ T6991] R13: 0000000000000000 R14: 00007f5636ba6160 R15: 00007fff72c2a888 [ 177.639826][ T6991] [ 178.542495][ T7000] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 178.564769][ T7000] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 178.942063][ T7000] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 178.973138][ T7000] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 179.026749][ T7000] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 179.098367][ T7000] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 179.130223][ T7000] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 179.996812][ T7021] netlink: 28 bytes leftover after parsing attributes in process `syz.4.259'. [ 180.318180][ T7034] vivid-003: ================= START STATUS ================= [ 180.361914][ T7034] vivid-003: Radio HW Seek Mode: Bounded [ 180.383547][ T7034] vivid-003: Radio Programmable HW Seek: false [ 180.404749][ T7034] vivid-003: RDS Rx I/O Mode: Block I/O [ 180.448326][ T7034] vivid-003: Generate RBDS Instead of RDS: false [ 180.494735][ T7034] vivid-003: RDS Reception: true [ 180.526950][ T7034] vivid-003: RDS Program Type: 0 inactive [ 180.532965][ T7034] vivid-003: RDS PS Name: inactive [ 180.623825][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 180.623821][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 180.637827][ T7034] vivid-003: RDS Radio Text: inactive [ 180.643400][ T7034] vivid-003: RDS Traffic Announcement: false inactive [ 180.650364][ T7034] vivid-003: RDS Traffic Program: false inactive [ 180.657029][ T7034] vivid-003: RDS Music: false inactive [ 180.662636][ T7034] vivid-003: ================== END STATUS ================== [ 181.014725][ T5851] Bluetooth: hci4: command 0x0c1a tx timeout [ 181.014981][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 181.020874][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 181.985911][ T7052] syz.1.265: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 182.014706][ T7052] CPU: 0 UID: 0 PID: 7052 Comm: syz.1.265 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 182.014754][ T7052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.014784][ T7052] Call Trace: [ 182.014794][ T7052] [ 182.014806][ T7052] dump_stack_lvl+0x16c/0x1f0 [ 182.014860][ T7052] warn_alloc+0x24d/0x3a0 [ 182.014915][ T7052] ? __pfx_warn_alloc+0x10/0x10 [ 182.014985][ T7052] ? lock_acquire.part.0+0x11b/0x380 [ 182.015053][ T7052] __vmalloc_node_range_noprof+0x10dc/0x1530 [ 182.015109][ T7052] ? rcu_is_watching+0x12/0xc0 [ 182.015148][ T7052] ? trace_contention_end+0xee/0x140 [ 182.015200][ T7052] ? __mutex_lock+0x1cc/0xb10 [ 182.015241][ T7052] ? tomoyo_path_number_perm+0x46d/0x590 [ 182.015283][ T7052] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 182.015389][ T7052] ? dvb_dvr_do_ioctl+0x7e/0x290 [ 182.015443][ T7052] ? __pfx___mutex_lock+0x10/0x10 [ 182.015487][ T7052] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 182.015534][ T7052] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 182.015578][ T7052] ? do_vfs_ioctl+0x513/0x1990 [ 182.015620][ T7052] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 182.015662][ T7052] vmalloc_noprof+0x6b/0x90 [ 182.015703][ T7052] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 182.015744][ T7052] dvb_dvr_do_ioctl+0x15d/0x290 [ 182.015802][ T7052] dvb_usercopy+0x165/0x320 [ 182.015842][ T7052] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 182.015886][ T7052] ? __pfx_dvb_usercopy+0x10/0x10 [ 182.015922][ T7052] ? __pfx_lock_release+0x10/0x10 [ 182.015984][ T7052] ? __fget_files+0x206/0x3a0 [ 182.016039][ T7052] dvb_dvr_ioctl+0x29/0x40 [ 182.016075][ T7052] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 182.016113][ T7052] __x64_sys_ioctl+0x190/0x200 [ 182.016155][ T7052] do_syscall_64+0xcd/0x250 [ 182.016203][ T7052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.016250][ T7052] RIP: 0033:0x7fb95358d169 [ 182.016278][ T7052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.016309][ T7052] RSP: 002b:00007fb9533f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 182.016341][ T7052] RAX: ffffffffffffffda RBX: 00007fb9537a5fa0 RCX: 00007fb95358d169 [ 182.016361][ T7052] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 182.016379][ T7052] RBP: 00007fb95360e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 182.016397][ T7052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.016414][ T7052] R13: 0000000000000000 R14: 00007fb9537a5fa0 R15: 00007fff8a5dcd58 [ 182.016450][ T7052] [ 182.289556][ T7052] Mem-Info: [ 182.292755][ T7052] active_anon:41296 inactive_anon:0 isolated_anon:0 [ 182.292755][ T7052] active_file:9968 inactive_file:41199 isolated_file:0 [ 182.292755][ T7052] unevictable:768 dirty:427 writeback:0 [ 182.292755][ T7052] slab_reclaimable:10155 slab_unreclaimable:96744 [ 182.292755][ T7052] mapped:54169 shmem:34010 pagetables:895 [ 182.292755][ T7052] sec_pagetables:0 bounce:0 [ 182.292755][ T7052] kernel_misc_reclaimable:0 [ 182.292755][ T7052] free:1292053 free_pcp:2643 free_cma:0 [ 182.339998][ T7052] Node 0 active_anon:165184kB inactive_anon:0kB active_file:39872kB inactive_file:164788kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:216676kB dirty:1704kB writeback:0kB shmem:134504kB shmem_thp:63488kB shmem_pmdmapped:63488kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11112kB pagetables:3580kB sec_pagetables:0kB all_unreclaimable? no [ 182.374309][ T7052] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 182.405158][ T7052] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 182.434209][ T7052] lowmem_reserve[]: 0 2487 2487 0 0 [ 182.439978][ T7052] Node 0 DMA32 free:1253880kB boost:0kB min:34392kB low:42988kB high:51584kB reserved_highatomic:0KB active_anon:162576kB inactive_anon:0kB active_file:39872kB inactive_file:164704kB unevictable:1536kB writepending:1704kB present:3129332kB managed:2547536kB mlocked:0kB bounce:0kB free_pcp:1824kB local_pcp:1760kB free_cma:0kB [ 182.496332][ T7052] lowmem_reserve[]: 0 0 0 0 0 [ 182.501213][ T7052] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 182.529013][ T7052] lowmem_reserve[]: 0 0 0 0 0 [ 182.533918][ T7052] Node 1 Normal free:3900948kB boost:0kB min:55504kB low:69380kB high:83256kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:8548kB local_pcp:8548kB free_cma:0kB [ 182.564168][ T7052] lowmem_reserve[]: 0 0 0 0 0 [ 182.569193][ T7052] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 182.583022][ T7052] Node 0 DMA32: 120*4kB (UME) 285*8kB (UME) 715*16kB (UME) 831*32kB (UME) 665*64kB (UME) 314*128kB (UME) 124*256kB (UM) 41*512kB (UM) 7*1024kB (M) 1*2048kB (M) 260*4096kB (M) = 1250456kB [ 182.655038][ T7052] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 182.675462][ T7050] netlink: 252 bytes leftover after parsing attributes in process `syz.4.264'. [ 182.692705][ T7050] netlink: 252 bytes leftover after parsing attributes in process `syz.4.264'. [ 182.707631][ T7052] Node 1 Normal: 129*4kB (UME) 50*8kB (UME) 48*16kB (UME) 178*32kB (UME) 97*64kB (UME) 40*128kB (UME) 15*256kB (UME) 9*512kB (UE) 5*1024kB (U) 5*2048kB (UME) 942*4096kB (M) = 3900948kB [ 182.766962][ T7052] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.807491][ T7052] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 182.863557][ T7052] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 182.880319][ T7052] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 182.921177][ T7052] 71592 total pagecache pages [ 182.941894][ T7052] 2 pages in swap cache [ 182.978942][ T7052] Free swap = 124772kB [ 182.983206][ T7052] Total swap = 124996kB [ 183.006893][ T7052] 2097051 pages RAM [ 183.011023][ T7052] 0 pages HighMem/MovableOnly [ 183.029801][ T7052] 428509 pages reserved [ 183.035996][ T7052] 0 pages cma reserved [ 183.094727][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 184.168564][ T7069] netlink: 252 bytes leftover after parsing attributes in process `syz.2.269'. [ 184.220057][ T7069] netlink: 252 bytes leftover after parsing attributes in process `syz.2.269'. [ 184.711849][ T7086] FAULT_INJECTION: forcing a failure. [ 184.711849][ T7086] name failslab, interval 1, probability 0, space 0, times 0 [ 184.795157][ T7086] CPU: 1 UID: 0 PID: 7086 Comm: syz.2.276 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 184.795215][ T7086] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 184.795235][ T7086] Call Trace: [ 184.795246][ T7086] [ 184.795260][ T7086] dump_stack_lvl+0x16c/0x1f0 [ 184.795319][ T7086] should_fail_ex+0x50a/0x650 [ 184.795378][ T7086] ? fs_reclaim_acquire+0xae/0x150 [ 184.795423][ T7086] ? cache_create_net+0xa0/0x220 [ 184.795477][ T7086] should_failslab+0xc2/0x120 [ 184.795510][ T7086] __kmalloc_noprof+0xcb/0x510 [ 184.795584][ T7086] cache_create_net+0xa0/0x220 [ 184.795641][ T7086] gss_svc_init_net+0x122/0x660 [ 184.795698][ T7086] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 184.795740][ T7086] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 184.795794][ T7086] ops_init+0x1df/0x5f0 [ 184.795857][ T7086] setup_net+0x21f/0x860 [ 184.795911][ T7086] ? __pfx_setup_net+0x10/0x10 [ 184.795954][ T7086] ? down_read_killable+0xcc/0x380 [ 184.795997][ T7086] ? __pfx_down_read_killable+0x10/0x10 [ 184.796040][ T7086] ? __raw_spin_lock_init+0x3a/0x110 [ 184.796096][ T7086] ? debug_mutex_init+0x37/0x70 [ 184.796136][ T7086] copy_net_ns+0x2a6/0x5f0 [ 184.796171][ T7086] create_new_namespaces+0x3ea/0xad0 [ 184.796232][ T7086] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 184.796289][ T7086] ksys_unshare+0x45d/0xa40 [ 184.796324][ T7086] ? __pfx_ksys_unshare+0x10/0x10 [ 184.796353][ T7086] ? xfd_validate_state+0x5d/0x180 [ 184.796402][ T7086] ? syscall_user_dispatch+0x7a/0x130 [ 184.796465][ T7086] __x64_sys_unshare+0x31/0x40 [ 184.796498][ T7086] do_syscall_64+0xcd/0x250 [ 184.796542][ T7086] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.796589][ T7086] RIP: 0033:0x7f563698d169 [ 184.796626][ T7086] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.796660][ T7086] RSP: 002b:00007f5637897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 184.796700][ T7086] RAX: ffffffffffffffda RBX: 00007f5636ba5fa0 RCX: 00007f563698d169 [ 184.796722][ T7086] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 184.796742][ T7086] RBP: 00007f5636a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 184.796761][ T7086] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.796779][ T7086] R13: 0000000000000000 R14: 00007f5636ba5fa0 R15: 00007fff72c2a888 [ 184.796818][ T7086] [ 185.020685][ T7084] FAULT_INJECTION: forcing a failure. [ 185.020685][ T7084] name failslab, interval 1, probability 0, space 0, times 0 [ 185.185375][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 185.240490][ T7084] CPU: 0 UID: 0 PID: 7084 Comm: syz.4.274 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 185.240544][ T7084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 185.240565][ T7084] Call Trace: [ 185.240575][ T7084] [ 185.240590][ T7084] dump_stack_lvl+0x16c/0x1f0 [ 185.240647][ T7084] should_fail_ex+0x50a/0x650 [ 185.240706][ T7084] ? fs_reclaim_acquire+0xae/0x150 [ 185.240752][ T7084] should_failslab+0xc2/0x120 [ 185.240787][ T7084] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 185.240840][ T7084] ? getname_flags.part.0+0x4c/0x550 [ 185.240884][ T7084] getname_flags.part.0+0x4c/0x550 [ 185.240925][ T7084] getname+0x8d/0xe0 [ 185.240969][ T7084] do_sys_openat2+0x104/0x1e0 [ 185.241004][ T7084] ? __pfx_do_sys_openat2+0x10/0x10 [ 185.241056][ T7084] __x64_sys_openat+0x175/0x210 [ 185.241093][ T7084] ? __pfx___x64_sys_openat+0x10/0x10 [ 185.241145][ T7084] do_syscall_64+0xcd/0x250 [ 185.241193][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.241241][ T7084] RIP: 0033:0x7f7a4158d169 [ 185.241269][ T7084] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.241301][ T7084] RSP: 002b:00007f7a4240e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 185.241334][ T7084] RAX: ffffffffffffffda RBX: 00007f7a417a5fa0 RCX: 00007f7a4158d169 [ 185.241357][ T7084] RDX: 0000000000101181 RSI: 00004000000003c0 RDI: ffffffffffffff9c [ 185.241386][ T7084] RBP: 00007f7a4160e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 185.241410][ T7084] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.241431][ T7084] R13: 0000000000000000 R14: 00007f7a417a5fa0 R15: 00007ffeabb58468 [ 185.241472][ T7084] [ 186.284891][ T7103] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 186.291277][ T7103] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 186.332844][ T7103] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 186.371404][ T7103] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 186.378186][ T7103] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 188.115774][ T7135] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 188.142533][ T7135] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 188.207199][ T7135] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 188.254228][ T7135] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 188.316103][ T7135] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 189.823161][ T7169] netlink: 338 bytes leftover after parsing attributes in process `syz.3.297'. [ 189.833835][ T7169] netlink: 338 bytes leftover after parsing attributes in process `syz.3.297'. [ 189.866061][ T7169] netlink: 250 bytes leftover after parsing attributes in process `syz.3.297'. [ 189.888467][ T7169] FAULT_INJECTION: forcing a failure. [ 189.888467][ T7169] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 189.928096][ T7169] CPU: 0 UID: 0 PID: 7169 Comm: syz.3.297 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 189.928139][ T7169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 189.928156][ T7169] Call Trace: [ 189.928165][ T7169] [ 189.928176][ T7169] dump_stack_lvl+0x16c/0x1f0 [ 189.928225][ T7169] should_fail_ex+0x50a/0x650 [ 189.928282][ T7169] _copy_to_user+0x32/0xd0 [ 189.928319][ T7169] simple_read_from_buffer+0xd0/0x160 [ 189.928362][ T7169] proc_fail_nth_read+0x198/0x270 [ 189.928408][ T7169] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.928448][ T7169] ? rw_verify_area+0xcf/0x680 [ 189.928486][ T7169] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 189.928523][ T7169] vfs_read+0x1df/0xbf0 [ 189.928564][ T7169] ? __fget_files+0x1fc/0x3a0 [ 189.928608][ T7169] ? __pfx___mutex_lock+0x10/0x10 [ 189.928649][ T7169] ? __pfx_vfs_read+0x10/0x10 [ 189.928699][ T7169] ? __fget_files+0x206/0x3a0 [ 189.928755][ T7169] ksys_read+0x12b/0x250 [ 189.928796][ T7169] ? __pfx_ksys_read+0x10/0x10 [ 189.928855][ T7169] do_syscall_64+0xcd/0x250 [ 189.928900][ T7169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.928944][ T7169] RIP: 0033:0x7f1af898bb7c [ 189.928967][ T7169] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 189.928995][ T7169] RSP: 002b:00007f1af9851030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 189.929023][ T7169] RAX: ffffffffffffffda RBX: 00007f1af8ba5fa0 RCX: 00007f1af898bb7c [ 189.929102][ T7169] RDX: 000000000000000f RSI: 00007f1af98510a0 RDI: 0000000000000005 [ 189.929120][ T7169] RBP: 00007f1af9851090 R08: 0000000000000000 R09: 0000000000000000 [ 189.929138][ T7169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 189.929155][ T7169] R13: 0000000000000000 R14: 00007f1af8ba5fa0 R15: 00007ffd31f41f28 [ 189.929194][ T7169] [ 190.134721][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 190.214692][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 190.220980][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 190.294637][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 190.384967][ T5851] Bluetooth: hci4: command 0x0c1a tx timeout [ 192.761488][ T7214] FAULT_INJECTION: forcing a failure. [ 192.761488][ T7214] name failslab, interval 1, probability 0, space 0, times 0 [ 192.874591][ T7214] CPU: 1 UID: 0 PID: 7214 Comm: syz.3.309 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 192.874636][ T7214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 192.874654][ T7214] Call Trace: [ 192.874663][ T7214] [ 192.874676][ T7214] dump_stack_lvl+0x16c/0x1f0 [ 192.874731][ T7214] should_fail_ex+0x50a/0x650 [ 192.874799][ T7214] ? fs_reclaim_acquire+0xae/0x150 [ 192.874849][ T7214] should_failslab+0xc2/0x120 [ 192.874896][ T7214] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 192.874953][ T7214] ? __kernfs_new_node+0xd3/0x890 [ 192.875008][ T7214] __kernfs_new_node+0xd3/0x890 [ 192.875061][ T7214] ? __pfx___kernfs_new_node+0x10/0x10 [ 192.875107][ T7214] ? __pfx_lock_release+0x10/0x10 [ 192.875157][ T7214] ? kernfs_add_one+0x39d/0x520 [ 192.875222][ T7214] ? up_write+0x1b2/0x520 [ 192.875281][ T7214] kernfs_new_node+0x186/0x240 [ 192.875342][ T7214] __kernfs_create_file+0x53/0x350 [ 192.875384][ T7214] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 192.875438][ T7214] sysfs_merge_group+0x1b1/0x340 [ 192.875488][ T7214] ? __pfx_sysfs_merge_group+0x10/0x10 [ 192.875542][ T7214] ? __pfx_dev_add_physical_location+0x10/0x10 [ 192.875589][ T7214] ? bus_to_subsys+0x12d/0x160 [ 192.875648][ T7214] dpm_sysfs_add+0x237/0x280 [ 192.875693][ T7214] device_add+0x9a8/0x1a70 [ 192.875745][ T7214] ? __pfx_device_add+0x10/0x10 [ 192.875795][ T7214] ? __init_waitqueue_head+0xca/0x150 [ 192.875844][ T7214] rfkill_register+0x1ad/0xb40 [ 192.875907][ T7214] nfc_register_device+0x11f/0x3c0 [ 192.875955][ T7214] nci_register_device+0x7f4/0xb80 [ 192.876013][ T7214] ? __pfx_nci_register_device+0x10/0x10 [ 192.876087][ T7214] virtual_ncidev_open+0x141/0x220 [ 192.876139][ T7214] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 192.876189][ T7214] misc_open+0x35a/0x420 [ 192.876224][ T7214] ? __pfx_misc_open+0x10/0x10 [ 192.876257][ T7214] chrdev_open+0x237/0x6a0 [ 192.876307][ T7214] ? __pfx_apparmor_file_open+0x10/0x10 [ 192.876352][ T7214] ? __pfx_chrdev_open+0x10/0x10 [ 192.876409][ T7214] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 192.876464][ T7214] do_dentry_open+0x735/0x1c40 [ 192.876514][ T7214] ? __pfx_chrdev_open+0x10/0x10 [ 192.876568][ T7214] ? inode_permission+0xdd/0x5f0 [ 192.876606][ T7214] vfs_open+0x82/0x3f0 [ 192.876636][ T7214] ? may_open+0x1f2/0x400 [ 192.876677][ T7214] path_openat+0x1e88/0x2d80 [ 192.876744][ T7214] ? __pfx_path_openat+0x10/0x10 [ 192.876792][ T7214] ? __pfx___lock_acquire+0x10/0x10 [ 192.876838][ T7214] ? lock_acquire.part.0+0x11b/0x380 [ 192.876893][ T7214] ? find_held_lock+0x2d/0x110 [ 192.876936][ T7214] do_filp_open+0x20c/0x470 [ 192.876987][ T7214] ? __pfx_do_filp_open+0x10/0x10 [ 192.877035][ T7214] ? find_held_lock+0x2d/0x110 [ 192.877102][ T7214] ? alloc_fd+0x41f/0x760 [ 192.877163][ T7214] do_sys_openat2+0x17a/0x1e0 [ 192.877207][ T7214] ? __pfx_do_sys_openat2+0x10/0x10 [ 192.877262][ T7214] __x64_sys_openat+0x175/0x210 [ 192.877300][ T7214] ? __pfx___x64_sys_openat+0x10/0x10 [ 192.877356][ T7214] do_syscall_64+0xcd/0x250 [ 192.877406][ T7214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.877456][ T7214] RIP: 0033:0x7f1af898d169 [ 192.877483][ T7214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.877515][ T7214] RSP: 002b:00007f1af9851038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 192.877547][ T7214] RAX: ffffffffffffffda RBX: 00007f1af8ba5fa0 RCX: 00007f1af898d169 [ 192.877579][ T7214] RDX: 0000000000000002 RSI: 0000400000000080 RDI: ffffffffffffff9c [ 192.877600][ T7214] RBP: 00007f1af8a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 192.877621][ T7214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 192.877640][ T7214] R13: 0000000000000000 R14: 00007f1af8ba5fa0 R15: 00007ffd31f41f28 [ 192.877730][ T7214] [ 193.925438][ T7229] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 193.974905][ T7229] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 193.981137][ T7229] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 194.034861][ T7229] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 194.041043][ T7229] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 195.134967][ T7246] netlink: 28 bytes leftover after parsing attributes in process `syz.4.321'. [ 195.519841][ T7251] warn_alloc: 1 callbacks suppressed [ 195.519864][ T7251] syz.4.314: vmalloc error: size 18446744073709551615, exceeds total pages, mode:0xcc0(GFP_KERNEL), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 195.625005][ T7251] CPU: 0 UID: 0 PID: 7251 Comm: syz.4.314 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 195.625054][ T7251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.625074][ T7251] Call Trace: [ 195.625085][ T7251] [ 195.625098][ T7251] dump_stack_lvl+0x16c/0x1f0 [ 195.625149][ T7251] warn_alloc+0x24d/0x3a0 [ 195.625205][ T7251] ? __pfx_warn_alloc+0x10/0x10 [ 195.625265][ T7251] ? lock_acquire.part.0+0x11b/0x380 [ 195.625330][ T7251] __vmalloc_node_range_noprof+0x10dc/0x1530 [ 195.625382][ T7251] ? rcu_is_watching+0x12/0xc0 [ 195.625418][ T7251] ? trace_contention_end+0xee/0x140 [ 195.625468][ T7251] ? __mutex_lock+0x1cc/0xb10 [ 195.625508][ T7251] ? tomoyo_path_number_perm+0x46d/0x590 [ 195.625549][ T7251] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 195.625604][ T7251] ? dvb_dvr_do_ioctl+0x7e/0x290 [ 195.625646][ T7251] ? __pfx___mutex_lock+0x10/0x10 [ 195.625686][ T7251] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 195.625733][ T7251] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 195.625776][ T7251] ? do_vfs_ioctl+0x513/0x1990 [ 195.625817][ T7251] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 195.625860][ T7251] vmalloc_noprof+0x6b/0x90 [ 195.625902][ T7251] ? dvb_dvr_do_ioctl+0x15d/0x290 [ 195.625943][ T7251] dvb_dvr_do_ioctl+0x15d/0x290 [ 195.625991][ T7251] dvb_usercopy+0x165/0x320 [ 195.626043][ T7251] ? __pfx_dvb_dvr_do_ioctl+0x10/0x10 [ 195.626089][ T7251] ? __pfx_dvb_usercopy+0x10/0x10 [ 195.626127][ T7251] ? __pfx_lock_release+0x10/0x10 [ 195.626187][ T7251] ? __fget_files+0x206/0x3a0 [ 195.626242][ T7251] dvb_dvr_ioctl+0x29/0x40 [ 195.626280][ T7251] ? __pfx_dvb_dvr_ioctl+0x10/0x10 [ 195.626319][ T7251] __x64_sys_ioctl+0x190/0x200 [ 195.626362][ T7251] do_syscall_64+0xcd/0x250 [ 195.626406][ T7251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.626453][ T7251] RIP: 0033:0x7f7a4158d169 [ 195.626479][ T7251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.626510][ T7251] RSP: 002b:00007f7a4240e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.626542][ T7251] RAX: ffffffffffffffda RBX: 00007f7a417a5fa0 RCX: 00007f7a4158d169 [ 195.626563][ T7251] RDX: ffffffffffffffff RSI: 0000000000006f2d RDI: 0000000000000003 [ 195.626590][ T7251] RBP: 00007f7a4160e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 195.626608][ T7251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.626625][ T7251] R13: 0000000000000000 R14: 00007f7a417a5fa0 R15: 00007ffeabb58468 [ 195.626665][ T7251] [ 195.626676][ T7251] Mem-Info: [ 195.902183][ T7251] active_anon:40543 inactive_anon:0 isolated_anon:0 [ 195.902183][ T7251] active_file:14351 inactive_file:41229 isolated_file:0 [ 195.902183][ T7251] unevictable:768 dirty:446 writeback:250 [ 195.902183][ T7251] slab_reclaimable:10277 slab_unreclaimable:97191 [ 195.902183][ T7251] mapped:47015 shmem:35305 pagetables:906 [ 195.902183][ T7251] sec_pagetables:0 bounce:0 [ 195.902183][ T7251] kernel_misc_reclaimable:0 [ 195.902183][ T7251] free:1284178 free_pcp:5717 free_cma:0 [ 195.991076][ T5851] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.037572][ T7251] Node 0 active_anon:166072kB inactive_anon:0kB active_file:57404kB inactive_file:164908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:176732kB dirty:1580kB writeback:100kB shmem:139684kB shmem_thp:26624kB shmem_pmdmapped:24576kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10916kB pagetables:3624kB sec_pagetables:0kB all_unreclaimable? no [ 196.071347][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.078900][ T5851] Bluetooth: hci4: command 0x0c1a tx timeout [ 196.078931][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 196.085065][ T5851] Bluetooth: hci2: command 0x0c1a tx timeout [ 196.085116][ T5851] Bluetooth: hci1: command 0x0c1a tx timeout [ 196.085209][ T7251] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 196.133614][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.158551][ T7251] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 196.191620][ T7251] lowmem_reserve[]: 0 2487 2487 0 0 [ 196.197314][ T7251] Node 0 DMA32 free:1197480kB boost:0kB min:34392kB low:42988kB high:51584kB reserved_highatomic:0KB active_anon:180516kB inactive_anon:0kB active_file:57404kB inactive_file:164824kB unevictable:1536kB writepending:1580kB present:3129332kB managed:2547536kB mlocked:0kB bounce:0kB free_pcp:16540kB local_pcp:14352kB free_cma:0kB [ 196.228225][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.340919][ T7251] lowmem_reserve[]: 0 0 0 0 0 [ 196.395396][ T7251] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:84kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 196.422124][ C0] vkms_vblank_simulate: vblank timer overrun [ 196.475179][ T7251] lowmem_reserve[]: 0 0 0 0 0 [ 196.480035][ T7251] Node 1 Normal free:3890552kB boost:0kB min:55504kB low:69380kB high:83256kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18948kB local_pcp:9924kB free_cma:0kB [ 196.612976][ T7251] lowmem_reserve[]: 0 0 0 0 0 [ 196.642828][ T7251] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 196.745544][ T7251] Node 0 DMA32: 269*4kB (UME) 232*8kB (UME) 343*16kB (UM) 25*32kB (UME) 204*64kB (UME) 321*128kB (UME) 133*256kB (UM) 45*512kB (UME) 11*1024kB (UME) 3*2048kB (ME) 258*4096kB (M) = 1194628kB [ 196.804625][ T7251] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 196.854808][ T7251] Node 1 Normal: 64*4kB (UME) 5*8kB (UME) 23*16kB (UME) 179*32kB (UME) 96*64kB (UME) 39*128kB (UME) 15*256kB (UME) 9*512kB (UE) 6*1024kB (UM) 4*2048kB (UE) 940*4096kB (M) = 3890552kB [ 196.904846][ T7251] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 196.921813][ T7251] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 196.944294][ T7251] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 196.987160][ T7251] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 197.048137][ T7251] 88412 total pagecache pages [ 197.053535][ T7251] 29 pages in swap cache [ 197.090772][ T7251] Free swap = 115820kB [ 197.104865][ T7251] Total swap = 124996kB [ 197.119853][ T7251] 2097051 pages RAM [ 197.123772][ T7251] 0 pages HighMem/MovableOnly [ 197.154663][ T7251] 428509 pages reserved [ 197.161320][ T7251] 0 pages cma reserved [ 197.165865][ T7261] FAULT_INJECTION: forcing a failure. [ 197.165865][ T7261] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 197.214735][ T7261] CPU: 0 UID: 0 PID: 7261 Comm: syz.3.318 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 197.214780][ T7261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 197.214799][ T7261] Call Trace: [ 197.214808][ T7261] [ 197.214820][ T7261] dump_stack_lvl+0x16c/0x1f0 [ 197.214866][ T7261] should_fail_ex+0x50a/0x650 [ 197.214922][ T7261] _copy_to_user+0x32/0xd0 [ 197.214958][ T7261] simple_read_from_buffer+0xd0/0x160 [ 197.215001][ T7261] proc_fail_nth_read+0x198/0x270 [ 197.215039][ T7261] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.215078][ T7261] ? rw_verify_area+0xcf/0x680 [ 197.215115][ T7261] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 197.215153][ T7261] vfs_read+0x1df/0xbf0 [ 197.215195][ T7261] ? __fget_files+0x1fc/0x3a0 [ 197.215240][ T7261] ? __pfx___mutex_lock+0x10/0x10 [ 197.215282][ T7261] ? __pfx_vfs_read+0x10/0x10 [ 197.215335][ T7261] ? __fget_files+0x206/0x3a0 [ 197.215393][ T7261] ksys_read+0x12b/0x250 [ 197.215443][ T7261] ? __pfx_ksys_read+0x10/0x10 [ 197.215497][ T7261] do_syscall_64+0xcd/0x250 [ 197.215541][ T7261] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.215586][ T7261] RIP: 0033:0x7f1af898bb7c [ 197.215610][ T7261] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 197.215639][ T7261] RSP: 002b:00007f1af9851030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 197.215668][ T7261] RAX: ffffffffffffffda RBX: 00007f1af8ba5fa0 RCX: 00007f1af898bb7c [ 197.215688][ T7261] RDX: 000000000000000f RSI: 00007f1af98510a0 RDI: 0000000000000004 [ 197.215705][ T7261] RBP: 00007f1af9851090 R08: 0000000000000000 R09: 0000000000000000 [ 197.215723][ T7261] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000002 [ 197.215742][ T7261] R13: 0000000000000000 R14: 00007f1af8ba5fa0 R15: 00007ffd31f41f28 [ 197.215787][ T7261] [ 197.410908][ C0] vkms_vblank_simulate: vblank timer overrun [ 198.402393][ T7275] netlink: 252 bytes leftover after parsing attributes in process `syz.1.324'. [ 198.415345][ T7275] netlink: 252 bytes leftover after parsing attributes in process `syz.1.324'. [ 202.770527][ T7341] netlink: 338 bytes leftover after parsing attributes in process `syz.2.339'. [ 203.181034][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.188727][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.573358][ T7367] Process accounting paused [ 204.713653][ T7378] Invalid ELF header magic: != ELF [ 205.698012][ T7393] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 205.709485][ T7393] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 205.734149][ T7393] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 205.744350][ T7393] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 205.750934][ T7393] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 206.308918][ T7403] netlink: 452 bytes leftover after parsing attributes in process `syz.4.355'. [ 206.390741][ T7403] netlink: 452 bytes leftover after parsing attributes in process `syz.4.355'. [ 206.926416][ T7406] netlink: 252 bytes leftover after parsing attributes in process `syz.3.356'. [ 206.968605][ T7406] netlink: 252 bytes leftover after parsing attributes in process `syz.3.356'. [ 207.736057][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 207.814840][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 207.821832][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 207.828099][ T5851] Bluetooth: hci3: command 0x0c1a tx timeout [ 208.062506][ T7422] netlink: 4 bytes leftover after parsing attributes in process `syz.2.357'. [ 208.062598][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.1.358'. [ 208.508285][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.749149][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.903125][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.163274][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.508839][ T11] bridge_slave_1: left allmulticast mode [ 209.533395][ T11] bridge_slave_1: left promiscuous mode [ 209.554771][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.631281][ T11] bridge_slave_0: left allmulticast mode [ 209.650853][ T11] bridge_slave_0: left promiscuous mode [ 209.671374][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.560605][ T7456] cougar: G6 mapped to space [ 211.262536][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 211.282293][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 211.294395][ T11] bond0 (unregistering): Released all slaves [ 211.316338][ T7472] netlink: 'syz.2.371': attribute type 11 has an invalid length. [ 211.435819][ T7450] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 211.461915][ T7450] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 211.504455][ T7450] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 211.522206][ T7450] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 211.838996][ T7480] netlink: 452 bytes leftover after parsing attributes in process `syz.1.373'. [ 211.911217][ T7480] netlink: 452 bytes leftover after parsing attributes in process `syz.1.373'. [ 212.126218][ T7477] FAULT_INJECTION: forcing a failure. [ 212.126218][ T7477] name failslab, interval 1, probability 0, space 0, times 0 [ 212.164652][ T7477] CPU: 0 UID: 0 PID: 7477 Comm: syz.2.372 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 212.164711][ T7477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 212.164732][ T7477] Call Trace: [ 212.164743][ T7477] [ 212.164756][ T7477] dump_stack_lvl+0x16c/0x1f0 [ 212.164814][ T7477] should_fail_ex+0x50a/0x650 [ 212.164872][ T7477] ? fs_reclaim_acquire+0xae/0x150 [ 212.164920][ T7477] should_failslab+0xc2/0x120 [ 212.164960][ T7477] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 212.165012][ T7477] ? __kernfs_new_node+0xd3/0x890 [ 212.165068][ T7477] __kernfs_new_node+0xd3/0x890 [ 212.165122][ T7477] ? __pfx___kernfs_new_node+0x10/0x10 [ 212.165167][ T7477] ? __pfx_lock_release+0x10/0x10 [ 212.165212][ T7477] ? kernfs_add_one+0x39d/0x520 [ 212.165278][ T7477] ? up_write+0x1b2/0x520 [ 212.165334][ T7477] kernfs_new_node+0x186/0x240 [ 212.165400][ T7477] __kernfs_create_file+0x53/0x350 [ 212.165443][ T7477] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 212.165501][ T7477] sysfs_merge_group+0x1b1/0x340 [ 212.165553][ T7477] ? __pfx_sysfs_merge_group+0x10/0x10 [ 212.165610][ T7477] ? __pfx_dev_add_physical_location+0x10/0x10 [ 212.165654][ T7477] ? bus_to_subsys+0x12d/0x160 [ 212.165711][ T7477] dpm_sysfs_add+0x237/0x280 [ 212.165756][ T7477] device_add+0x9a8/0x1a70 [ 212.165808][ T7477] ? __pfx_device_add+0x10/0x10 [ 212.165857][ T7477] ? __init_waitqueue_head+0xca/0x150 [ 212.165905][ T7477] rfkill_register+0x1ad/0xb40 [ 212.165959][ T7477] nfc_register_device+0x11f/0x3c0 [ 212.166004][ T7477] nci_register_device+0x7f4/0xb80 [ 212.166060][ T7477] ? __pfx_nci_register_device+0x10/0x10 [ 212.166129][ T7477] virtual_ncidev_open+0x141/0x220 [ 212.166181][ T7477] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 212.166230][ T7477] misc_open+0x35a/0x420 [ 212.166263][ T7477] ? __pfx_misc_open+0x10/0x10 [ 212.166295][ T7477] chrdev_open+0x237/0x6a0 [ 212.166345][ T7477] ? __pfx_apparmor_file_open+0x10/0x10 [ 212.166398][ T7477] ? __pfx_chrdev_open+0x10/0x10 [ 212.166456][ T7477] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 212.166514][ T7477] do_dentry_open+0x735/0x1c40 [ 212.166566][ T7477] ? __pfx_chrdev_open+0x10/0x10 [ 212.166619][ T7477] ? inode_permission+0xdd/0x5f0 [ 212.166660][ T7477] vfs_open+0x82/0x3f0 [ 212.166707][ T7477] ? may_open+0x1f2/0x400 [ 212.166750][ T7477] path_openat+0x1e88/0x2d80 [ 212.166814][ T7477] ? __pfx_path_openat+0x10/0x10 [ 212.166863][ T7477] ? __pfx___lock_acquire+0x10/0x10 [ 212.166907][ T7477] ? lock_acquire.part.0+0x11b/0x380 [ 212.166953][ T7477] ? find_held_lock+0x2d/0x110 [ 212.166994][ T7477] do_filp_open+0x20c/0x470 [ 212.167043][ T7477] ? __pfx_do_filp_open+0x10/0x10 [ 212.167090][ T7477] ? find_held_lock+0x2d/0x110 [ 212.167156][ T7477] ? alloc_fd+0x41f/0x760 [ 212.167217][ T7477] do_sys_openat2+0x17a/0x1e0 [ 212.167252][ T7477] ? __pfx_do_sys_openat2+0x10/0x10 [ 212.167314][ T7477] __x64_sys_openat+0x175/0x210 [ 212.167354][ T7477] ? __pfx___x64_sys_openat+0x10/0x10 [ 212.167415][ T7477] do_syscall_64+0xcd/0x250 [ 212.167468][ T7477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.167520][ T7477] RIP: 0033:0x7f563698d169 [ 212.167549][ T7477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.167581][ T7477] RSP: 002b:00007f5637897038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 212.167615][ T7477] RAX: ffffffffffffffda RBX: 00007f5636ba5fa0 RCX: 00007f563698d169 [ 212.167638][ T7477] RDX: 0000000000000002 RSI: 0000400000000080 RDI: ffffffffffffff9c [ 212.167659][ T7477] RBP: 00007f5636a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 212.167680][ T7477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 212.167700][ T7477] R13: 0000000000000000 R14: 00007f5636ba5fa0 R15: 00007fff72c2a888 [ 212.167743][ T7477] [ 212.429980][ T11] hsr_slave_0: left promiscuous mode [ 212.467547][ T11] hsr_slave_1: left promiscuous mode [ 212.468416][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.468512][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.480055][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.480099][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.597494][ T11] veth1_macvtap: left promiscuous mode [ 212.597773][ T11] veth0_macvtap: left promiscuous mode [ 212.599020][ T11] veth1_vlan: left promiscuous mode [ 212.599370][ T11] veth0_vlan: left promiscuous mode [ 213.495117][ T5849] Bluetooth: hci2: command 0x0c1a tx timeout [ 213.495193][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 213.574937][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 213.575011][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 213.947141][ T7484] tty tty12: ldisc open failed (-12), clearing slot 11 [ 214.665643][ T11] team0 (unregistering): Port device team_slave_1 removed [ 214.808376][ T11] team0 (unregistering): Port device team_slave_0 removed [ 215.665151][ T7520] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 215.692248][ T7520] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 215.764098][ T7520] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 215.775097][ T7520] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 215.791872][ T7523] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 216.579870][ T11] ref_tracker: net notrefcnt@ffff8880613e01e0 has 1/2 users at [ 216.579870][ T11] sk_alloc+0xa93/0xb90 [ 216.579870][ T11] inet6_create+0x380/0x1320 [ 216.579870][ T11] __sock_create+0x335/0x8d0 [ 216.579870][ T11] udp_sock_create6+0xc8/0x6a0 [ 216.579870][ T11] sctp_udp_sock_start+0x280/0x4b0 [ 216.579870][ T11] proc_sctp_do_udp_port+0x380/0x450 [ 216.579870][ T11] proc_sys_call_handler+0x3c6/0x5a0 [ 216.579870][ T11] iter_file_splice_write+0x90f/0x10b0 [ 216.579870][ T11] direct_splice_actor+0x18f/0x6c0 [ 216.579870][ T11] splice_direct_to_actor+0x346/0xa40 [ 216.579870][ T11] do_splice_direct+0x178/0x250 [ 216.579870][ T11] do_sendfile+0xafb/0xe40 [ 216.579870][ T11] __x64_sys_sendfile64+0x1da/0x220 [ 216.579870][ T11] do_syscall_64+0xcd/0x250 [ 216.579870][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.579870][ T11] [ 216.680481][ T11] ref_tracker: net notrefcnt@ffff8880613e01e0 has 1/2 users at [ 216.680481][ T11] sk_alloc+0xa93/0xb90 [ 216.680481][ T11] inet_create+0x3a1/0x10a0 [ 216.680481][ T11] __sock_create+0x335/0x8d0 [ 216.680481][ T11] udp_sock_create4+0xa7/0x450 [ 216.680481][ T11] sctp_udp_sock_start+0x10b/0x4b0 [ 216.680481][ T11] proc_sctp_do_udp_port+0x380/0x450 [ 216.680481][ T11] proc_sys_call_handler+0x3c6/0x5a0 [ 216.680481][ T11] iter_file_splice_write+0x90f/0x10b0 [ 216.680481][ T11] direct_splice_actor+0x18f/0x6c0 [ 216.680481][ T11] splice_direct_to_actor+0x346/0xa40 [ 216.680481][ T11] do_splice_direct+0x178/0x250 [ 216.680481][ T11] do_sendfile+0xafb/0xe40 [ 216.680481][ T11] __x64_sys_sendfile64+0x1da/0x220 [ 216.680481][ T11] do_syscall_64+0xcd/0x250 [ 216.680481][ T11] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.680481][ T11] [ 216.785321][ T11] ------------[ cut here ]------------ [ 216.791664][ T11] WARNING: CPU: 1 PID: 11 at lib/ref_tracker.c:179 ref_tracker_dir_exit+0x3e3/0x680 [ 216.802548][ T11] Modules linked in: [ 216.806820][ T11] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 216.817702][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 216.828125][ T11] Workqueue: netns cleanup_net [ 216.833836][ T11] RIP: 0010:ref_tracker_dir_exit+0x3e3/0x680 [ 216.841489][ T11] Code: 11 02 00 00 4d 39 f5 49 8b 06 4d 89 f7 0f 85 0e ff ff ff 48 8b 2c 24 e8 ab 0f c8 fc 48 8b 74 24 18 48 89 ef e8 ae e5 65 06 90 <0f> 0b 90 e8 95 0f c8 fc 48 8d 5d 44 be 04 00 00 00 48 89 df e8 04 [ 216.862366][ T11] RSP: 0018:ffffc90000107ab0 EFLAGS: 00010246 [ 216.868963][ T11] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 216.878031][ T11] RDX: 0000000000000001 RSI: ffffffff8b6ced20 RDI: 0000000000000001 [ 216.886391][ T11] RBP: ffff8880613e01e0 R08: 0000000000000001 R09: fffffbfff2dd7dba [ 216.895099][ T11] R10: ffffffff96ebedd7 R11: 0000000000002ba2 R12: ffff8880613e0230 [ 216.903440][ T11] R13: ffff8880613e0230 R14: ffff8880613e0230 R15: ffff8880613e0230 [ 216.912238][ T11] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 216.921656][ T11] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 216.928545][ T11] CR2: 000055bbf0510950 CR3: 000000000df80000 CR4: 00000000003526f0 [ 216.937457][ T11] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 216.946979][ T11] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 216.955496][ T11] Call Trace: [ 216.959665][ T11] [ 216.963169][ T11] ? __warn+0xea/0x3c0 [ 216.967797][ T11] ? ref_tracker_dir_exit+0x3e3/0x680 [ 216.974075][ T11] ? report_bug+0x3c0/0x580 [ 216.979472][ T11] ? handle_bug+0x54/0xa0 [ 216.984216][ T11] ? exc_invalid_op+0x17/0x50 [ 216.990162][ T11] ? asm_exc_invalid_op+0x1a/0x20 [ 216.995664][ T11] ? ref_tracker_dir_exit+0x3e3/0x680 [ 217.002418][ T11] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 217.008646][ T11] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 217.014793][ T11] ? net_passive_dec+0x7d/0xd0 [ 217.019767][ T11] net_passive_dec+0x89/0xd0 [ 217.024461][ T11] cleanup_net+0x8ac/0xb30 [ 217.029978][ T11] ? __pfx_cleanup_net+0x10/0x10 [ 217.036519][ T11] ? lock_acquire+0x2f/0xb0 [ 217.041803][ T11] ? process_one_work+0x921/0x1ba0 [ 217.048865][ T11] process_one_work+0x9c5/0x1ba0 [ 217.055026][ T11] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 217.063042][ T11] ? __pfx_process_one_work+0x10/0x10 [ 217.068924][ T11] ? assign_work+0x1a0/0x250 [ 217.073929][ T11] worker_thread+0x6c8/0xf00 [ 217.078727][ T11] ? __pfx_worker_thread+0x10/0x10 [ 217.084137][ T11] kthread+0x3af/0x750 [ 217.088500][ T11] ? __pfx_kthread+0x10/0x10 [ 217.093252][ T11] ? lock_acquire+0x2f/0xb0 [ 217.097894][ T11] ? __pfx_kthread+0x10/0x10 [ 217.102575][ T11] ret_from_fork+0x45/0x80 [ 217.107204][ T11] ? __pfx_kthread+0x10/0x10 [ 217.112025][ T11] ret_from_fork_asm+0x1a/0x30 [ 217.117047][ T11] [ 217.120126][ T11] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 217.127726][ T11] CPU: 1 UID: 0 PID: 11 Comm: kworker/u8:0 Not tainted 6.14.0-rc4-syzkaller-00052-gac9c34d1e45a #0 [ 217.139256][ T11] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 217.149566][ T11] Workqueue: netns cleanup_net [ 217.155063][ T11] Call Trace: [ 217.158398][ T11] [ 217.161393][ T11] dump_stack_lvl+0x3d/0x1f0 [ 217.166063][ T11] panic+0x71d/0x800 [ 217.170021][ T11] ? __pfx_panic+0x10/0x10 [ 217.174749][ T11] ? show_trace_log_lvl+0x29d/0x3d0 [ 217.180108][ T11] ? check_panic_on_warn+0x1f/0xb0 [ 217.185269][ T11] ? ref_tracker_dir_exit+0x3e3/0x680 [ 217.190799][ T11] check_panic_on_warn+0xab/0xb0 [ 217.195811][ T11] __warn+0xf6/0x3c0 [ 217.199966][ T11] ? ref_tracker_dir_exit+0x3e3/0x680 [ 217.205540][ T11] report_bug+0x3c0/0x580 [ 217.209987][ T11] handle_bug+0x54/0xa0 [ 217.214236][ T11] exc_invalid_op+0x17/0x50 [ 217.218833][ T11] asm_exc_invalid_op+0x1a/0x20 [ 217.223855][ T11] RIP: 0010:ref_tracker_dir_exit+0x3e3/0x680 [ 217.229898][ T11] Code: 11 02 00 00 4d 39 f5 49 8b 06 4d 89 f7 0f 85 0e ff ff ff 48 8b 2c 24 e8 ab 0f c8 fc 48 8b 74 24 18 48 89 ef e8 ae e5 65 06 90 <0f> 0b 90 e8 95 0f c8 fc 48 8d 5d 44 be 04 00 00 00 48 89 df e8 04 [ 217.249753][ T11] RSP: 0018:ffffc90000107ab0 EFLAGS: 00010246 [ 217.256063][ T11] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 217.264059][ T11] RDX: 0000000000000001 RSI: ffffffff8b6ced20 RDI: 0000000000000001 [ 217.272227][ T11] RBP: ffff8880613e01e0 R08: 0000000000000001 R09: fffffbfff2dd7dba [ 217.280418][ T11] R10: ffffffff96ebedd7 R11: 0000000000002ba2 R12: ffff8880613e0230 [ 217.288501][ T11] R13: ffff8880613e0230 R14: ffff8880613e0230 R15: ffff8880613e0230 [ 217.296700][ T11] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 217.302485][ T11] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 217.308774][ T11] ? net_passive_dec+0x7d/0xd0 [ 217.313579][ T11] net_passive_dec+0x89/0xd0 [ 217.318216][ T11] cleanup_net+0x8ac/0xb30 [ 217.322660][ T11] ? __pfx_cleanup_net+0x10/0x10 [ 217.328061][ T11] ? lock_acquire+0x2f/0xb0 [ 217.332644][ T11] ? process_one_work+0x921/0x1ba0 [ 217.337975][ T11] process_one_work+0x9c5/0x1ba0 [ 217.342985][ T11] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 217.349413][ T11] ? __pfx_process_one_work+0x10/0x10 [ 217.355222][ T11] ? assign_work+0x1a0/0x250 [ 217.359968][ T11] worker_thread+0x6c8/0xf00 [ 217.364625][ T11] ? __pfx_worker_thread+0x10/0x10 [ 217.369914][ T11] kthread+0x3af/0x750 [ 217.374121][ T11] ? __pfx_kthread+0x10/0x10 [ 217.378759][ T11] ? lock_acquire+0x2f/0xb0 [ 217.383319][ T11] ? __pfx_kthread+0x10/0x10 [ 217.388140][ T11] ret_from_fork+0x45/0x80 [ 217.393254][ T11] ? __pfx_kthread+0x10/0x10 [ 217.397989][ T11] ret_from_fork_asm+0x1a/0x30 [ 217.402914][ T11] [ 217.406360][ T11] Kernel Offset: disabled [ 217.410912][ T11] Rebooting in 86400 seconds..