last executing test programs: 13m18.95838447s ago: executing program 2 (id=1941): r0 = openat$auto_ep0_operations_inode(0xffffffffffffff9c, &(0x7f0000000040), 0x121000, 0x0) poll$auto(&(0x7f0000000000)={r0, 0x2, 0x4}, 0x2, 0x5) r1 = socket(0x2, 0x1, 0x106) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, r1, 0x8) r2 = socket(0x1d, 0x3, 0x1) setsockopt$auto(r2, 0x65, 0x3, 0x0, 0x4) recvmmsg$auto(r1, &(0x7f0000000540)={{0x0, 0x8, 0x0, 0x4000, 0x0, 0x8, 0x4}, 0x1}, 0x6769, 0x200, 0x0) 13m18.729956576s ago: executing program 2 (id=1943): pselect6$auto(0x9, &(0x7f0000000000)={[0x8, 0x4, 0x0, 0x6, 0x8001, 0x4000000000002bc8, 0xfff, 0x1, 0xfffffffffffffffe, 0xffffffff, 0x8000000000000001, 0x1ff, 0x211, 0x2, 0x8, 0x1]}, 0x0, 0x0, 0x0, 0x0) socket(0xa, 0x2, 0x73) io_uring_setup$auto(0x6, 0x0) sysfs$auto(0x2, 0x10000000000048, 0x0) r0 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0x4188aec6, r0) 13m18.319060427s ago: executing program 2 (id=1946): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0xa, 0x2, 0x0) (async) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x13, 0x0, 0x8) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/kcore\x00', 0xa0000, 0x0) (async) r4 = getegid() quotactl_fd$auto(r3, 0x4, r4, &(0x7f00000001c0)="4e050a0fb2c788fc9e2f9b011786a59780bdd4ab308e40c2e384f07f") (async) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), 0xffffffffffffffff) semget$auto(0x8, 0x3, 0xfffffffe) semget$auto(0x8, 0x9, 0x2) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="130400002c90c14cafd17b00000008000300", @ANYRES32=r6], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x80) (async) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="900000005a9fd9265ae3fab4f17cc4a16b388a186b25f7e49d54456fba5ad25d358c5ff05079a43c62c327edce", @ANYRES16=r5, @ANYBLOB="00032bbd7000fcdbdf251f0000004600c5008527ef143a923671a8a43cf43bf69ec74d6c79f29a19061471ab66dd503776c839dfe7fd980021613596546536465ada0344b45177de898b865cd74beebee0e49c3b0000050059000f0000001e009400b42be5a5a9bec172ff24e7641edce0a0f867d15e643a1729f60300000800f800ff0f000004000801"], 0x90}, 0x1, 0x0, 0x0, 0x4000}, 0x20001000) (async) close_range$auto(0x2, 0x8, 0x0) (async) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000002d80)='/sys/devices/virtual/net/ifb0/phys_switch_id\x00', 0x60000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f0000002dc0)=""/9, 0x9) (async) memfd_secret$auto(0x0) (async) mmap$auto(0x0, 0x100000010, 0x0, 0x130, r2, 0x1000) io_uring_setup$auto(0xa, 0x0) openat$auto_binder_ctl_fops_binderfs(0xffffffffffffff9c, 0x0, 0x82c00, 0x0) (async) landlock_create_ruleset$auto(0x0, 0x9, 0x0) r8 = socket(0x29, 0x2, 0x0) setsockopt$auto(r8, 0x119, 0x1, 0x0, 0x8) (async) close_range$auto(0x2, 0x8, 0x0) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) mmap$auto(0x0, 0x8, 0xfffffffffffffffa, 0x13, 0x3, 0x0) 13m17.84542525s ago: executing program 2 (id=1948): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto_TIOCSWINSZ2(r1, 0x5414, &(0x7f0000000040)="88b091992c") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) mmap$auto(0x9, 0x4, 0x0, 0x40eb1, r1, 0x300000000200) fsopen$auto(&(0x7f0000000080)='nfsd\x00', 0x6b28) ioctl$auto(r0, 0x80045432, 0xffffffffffffffff) 13m17.315475727s ago: executing program 2 (id=1955): unlink$auto(0x0) (async) r0 = io_uring_setup$auto(0x6, 0x0) setreuid$auto(0x1, 0x3) (async) tkill$auto(0x1, 0x7) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) io_uring_setup$auto(0x1, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) (async) sendmsg$auto_NLBL_MGMT_C_LISTDEF(r1, 0x0, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r1, 0x0, 0x20040000) (async) r2 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r2, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) (async) ioctl$auto(0x3, 0x5760, 0xfffffffffffff4e0) (async) swapon$auto(0x0, 0x3) writev$auto(r0, &(0x7f0000000040)={&(0x7f0000000300)="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", 0x7ff}, 0xa) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) socket(0x2, 0x3, 0xa) (async) socket(0x2, 0x5, 0x0) (async) setsockopt$auto(0x4, 0x84, 0xc, &(0x7f0000000200)='\xf3\xc6uy\x90:\xf2\xb3}\xfb\xa9n\xbf\f\x8a\x16\x1a#\x866}\t\xcb-K\x962\xf4,;\xe4\"=\t#\xe9B\x1dq[\xe6\xf6\xd1\xf9\xdd\xfe\x1e\xc8\xa1\xea\xf9\x93\f\x95\x14\t\t\x01\x13Z0O@\xb6~8\x0ej\xf1\x8dH\x9ddK6\\|\x12\x82L\x84\x9d\x14\xd0\xa9{\xb1\xb4\xc5\xe0\xaf\x15RT\x98\xd9\x10D\xa1Y\x80\x1fe\xc1. \x9d\x84\x8b\x9a\x9a`q\x00\x8c8c:%\x97\x15\x80-\r\x94\xcb\xda\xa2\x1d\\;f\xcds\xa7q]?\'\xf5\x9eA\x841f\x1e\xce\xc0\x1d{tEc\xa3\fp\x1b\xd2\'\xcd1\x8d\x87\xf1\x02\xc4Q\x8e\xab\xf9L\xbf\xa4_\x85\xf1\xb6\xe0\xca\x9e3\x9b\xf7\n\xe7\xdf\x12\xef_ \x9dC\x1f\xb8k\xfbu\x8f\xd9\xaa>\xe3\xda\x1f\'\x00'/219, 0x800e) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) r3 = socket(0x2, 0x801, 0x106) getsockopt$auto(r3, 0x11c, 0x3, 0x0, 0x0) (async) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) 13m15.026191192s ago: executing program 2 (id=1970): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r0, 0x921064a3, 0x1000000000000003) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) unshare$auto(0x200) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x121340, 0x0) socket(0xa, 0x3, 0x3a) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0x4040ae79, 0x0) unshare$auto(0x5) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r4, 0x0) umount2$auto(&(0x7f0000000080)='.\x00', 0x3) setns(r3, 0x20000000) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x1000, &(0x7f0000000640)={0x0, 0xf6, 0x100000}, 0x283) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x7, 0x1977, 0x7, 0x5, 0x7181, 0x8002, 0x40, 0x3, 0x9, 0x5, 0x80003, 0x4, 0x200000000000, 0xb4, 0x9, 0x8, 0x10006, 0x7, 0x0, 0x0, 0xe, 0x22000, 0x200, 0x0, 0xd363, [0x10001, 0xffffffffffffffff, 0x3, 0x2, 0xcb, 0x2000, 0x0, 0xe, 0x70624ce4, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x0, 0x8, 0x4, 0xfffffffffffbfffd, 0x2000000000000004, 0x1, 0x10000000000, 0xfffffffffffffe00, 0x5, 0xfffffffffffffe00, 0x3, 0x0, 0x5, 0x1000, 0x2ffff, 0x0, 0x100, 0x0, 0x6, 0x2, 0x6, 0x40, 0xfffffffffffffffc, 0x1, 0xffff, 0x0, 0x3, 0xcd8a, 0x9, 0x8, 0x7, 0xc567]}, 0x1fe, 0xd) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace\x00', 0x44242, 0x0) socket(0x2, 0x801, 0x106) 13m14.7262483s ago: executing program 32 (id=1970): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card1\x00', 0x129800, 0x0) ioctl$auto(r0, 0x921064a3, 0x1000000000000003) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) unshare$auto(0x200) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, 0x0, 0x1541, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x121340, 0x0) socket(0xa, 0x3, 0x3a) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r1, 0x4040ae79, 0x0) unshare$auto(0x5) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r4, 0x0) umount2$auto(&(0x7f0000000080)='.\x00', 0x3) setns(r3, 0x20000000) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x1000, &(0x7f0000000640)={0x0, 0xf6, 0x100000}, 0x283) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x7, 0x1977, 0x7, 0x5, 0x7181, 0x8002, 0x40, 0x3, 0x9, 0x5, 0x80003, 0x4, 0x200000000000, 0xb4, 0x9, 0x8, 0x10006, 0x7, 0x0, 0x0, 0xe, 0x22000, 0x200, 0x0, 0xd363, [0x10001, 0xffffffffffffffff, 0x3, 0x2, 0xcb, 0x2000, 0x0, 0xe, 0x70624ce4, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x0, 0x8, 0x4, 0xfffffffffffbfffd, 0x2000000000000004, 0x1, 0x10000000000, 0xfffffffffffffe00, 0x5, 0xfffffffffffffe00, 0x3, 0x0, 0x5, 0x1000, 0x2ffff, 0x0, 0x100, 0x0, 0x6, 0x2, 0x6, 0x40, 0xfffffffffffffffc, 0x1, 0xffff, 0x0, 0x3, 0xcd8a, 0x9, 0x8, 0x7, 0xc567]}, 0x1fe, 0xd) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/tracing/trace\x00', 0x44242, 0x0) socket(0x2, 0x801, 0x106) 11m11.355924561s ago: executing program 4 (id=2454): socket(0x1e, 0x3, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x3) stat$auto(0x0, &(0x7f0000000080)={0x3ff, 0x3, 0x9, 0x7ff, 0x0, 0x0, 0x0, 0x9, 0xfff, 0xfffffffffffffff9, 0x9, 0x2, 0x93a8, 0x9, 0xff, 0x63, 0x8}) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x1636c0, 0x154) setreuid$auto(0x9, 0x1) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) close_range$auto(r0, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x6, 0x0) setsockopt$auto(r1, 0x10d, 0x10, 0x0, 0x17) mmap$auto(0x20000000000000, 0x400005, 0x4, 0x9b71, 0x2, 0x8000) socket(0x2, 0x3, 0x100) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x10677d, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000140), 0x400, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000180)=0x1) setreuid$auto(0x15, 0x5) socketpair$auto(0x3, 0x5, 0x8000000000000000, 0x0) fgetxattr$auto(0x1, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0x8000000000000000, 0x15) capget$auto(0x0, 0xfffffffffffffffe) madvise$auto(0x0, 0xffffffffffff0005, 0x17) 11m8.127713435s ago: executing program 4 (id=2465): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r0, &(0x7f0000003900)='\t', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) socket(0xa, 0x5, 0x0) poll$auto(0x0, 0x7, 0x7) io_uring_setup$auto(0x6, 0x0) getsockopt$auto(0xffffffffffffffff, 0xfffffffe, 0x83, 0x0, 0x0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r2, 0x1, 0x70bd25, 0x25dfdbff, {0x4, 0x0, 0x500}}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) 11m6.878643351s ago: executing program 4 (id=2469): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x6, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000180)=""/4096, 0x1000) mmap$auto(0x0, 0x20007, 0xc2, 0x400000000eb1, 0x401, 0x80000008000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400004, 0xdf, 0x9b7e, 0x2, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x6) r3 = socket(0xa, 0x801, 0x106) r4 = pipe2$auto(&(0x7f0000000040)=0x8, 0x4800) r6 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r6, &(0x7f0000000200)={0x0, 0x7}, 0x3) listen$auto(r3, 0x61) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r7 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86) io_uring_register$auto(0x2, 0x6, &(0x7f0000000040), 0x1) r8 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r8, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x8) ioctl$auto_UDMABUF_CREATE_LIST(r4, 0x40087543, &(0x7f0000001180)={0x3c00, 0x5c46, [{r4, 0x0, 0x0, 0x8f91}, {r8, 0x0, 0x0, 0x800}, {r0, 0x0, 0x6, 0x7}, {0xffffffffffffffff, 0x0, 0x9, 0x9}, {r1, 0x0, 0x35ef, 0xd1}, {r5, 0x0, 0x4, 0x3}, {r7, 0x0, 0x9, 0x401}]}) write$auto(r0, &(0x7f0000000000)='\x00', 0x113) write$auto(r3, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x6a61) mmap$auto(0x0, 0x2, 0xdb, 0x9b72, 0x6, 0x100000000) 11m5.705486865s ago: executing program 4 (id=2474): socket(0x2b, 0x1, 0x1) epoll_create$auto(0x4) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x9, 0x1, 0x8, 0x80000000000, 0x9, 0x6, 0x7f, 0x7fffffff, 0x8, 0x401, 0x4, 0x3ae, 0x5, 0xeef9, 0x7f, 0x6]}, &(0x7f0000000100)={[0xa1f, 0x5, 0x555, 0x0, 0x7fffffffffffffff, 0x5, 0xfffffffffffffffc, 0x9, 0x4, 0x8, 0xfff, 0x6, 0x96f9, 0x4, 0x1, 0x5]}, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000040)="1a38") 11m5.264046039s ago: executing program 4 (id=2476): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/fs/ocfs2/loaded_cluster_plugins\x00', 0x400, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x48041, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x200, 0x0) tkill$auto(0x1, 0x7) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x0, 0x48eafc79) ioctl$auto_SNDCTL_DSP_STEREO(r2, 0xc0045003, &(0x7f00000000c0)="1bf7ac76958118e6e50ad3f637a104a5fc26d1b4e28a0a6560cf60e9274fa1adac75893b5cefc78871ee6a82a8d6bca74f9c2daa6056275fcb") poll$auto(&(0x7f0000000000)={r1, 0x435, 0xe}, 0x0, 0x3) write$auto_msr_fops_msr(r3, &(0x7f0000000200)='.', 0x1) mmap$auto(0x0, 0x20009, 0x4, 0xeb2, 0x40000000000a5, 0x8000) r4 = socket(0x2, 0x801, 0x84) getsockopt$auto(r4, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0xffff) read$auto(r0, 0x0, 0x20) 11m3.254854916s ago: executing program 4 (id=2481): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0x1d, 0x80000, 0x6) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF2_SEQ={0x6, 0x7, 0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x40}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x7}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="a40000f20600b90676b63f00", @ANYBLOB="1cd9ca8396739e8a5290a5676c434dbec8f4d3b833aea220199cda789e948465bef1ea8aeb1fa6ae5d4bfbf1e703e77e5253b703a1b967bdc42e042067f297917a359b52cb42e637b735374d2454c4498783879f741bed6a8bbb5c4b19c3f0cdf5f9baf8fdc046e5252794f5f9fdb7a99346820f7a2cb5aad517d01f32ed54a015b61eaae555882b58bb04fc21dbd682e7709d2629e04704212e232bd7e47fe769351383943444fab52eeadae364021090bf6458ade84da6a9e776c85c790b3b7330780bc5d22d276d2059d5e9172a53e8c96a1bb3b752698261ca465c93099a402f25615973d995c0c4d701b64fbcb5", @ANYBLOB="00042dbd"], 0xa4}, 0x1, 0x0, 0x0, 0x4008045}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000af"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8000000, &(0x7f00000002c0)={0x0, 0x2}, 0x1, 0x0, 0x2, 0x7}, 0x4}, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000100), r1) mmap$auto(0x0, 0x100, 0x4000000000df, 0x80000000eb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x408, 0x3, 0x10101, 0x6fb7, 0x8a, 0x4, r2, [0x100, 0x7, 0x7f], {0x2, 0x7, 0x3034, 0xc, 0x8f, 0x5, 0x5, 0xfffffff9, 0x6}, {0x4000, 0x3, 0x0, 0xbffff000, 0x8, 0x20b85, 0x5, 0x837, 0x8}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='_\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, r4, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x80) close_range$auto(r2, 0x8, 0x4) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r5 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/user_power_level\x00', 0x1c1082, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r5, 0x0, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) 11m2.785098267s ago: executing program 33 (id=2481): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0x1d, 0x80000, 0x6) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x6c, 0x0, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF2_SEQ={0x6, 0x7, 0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_NODE_ADDR={0xa}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x40}, @HSR_A_IF1_SEQ={0x6, 0x6, 0x7}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="a40000f20600b90676b63f00", @ANYBLOB="1cd9ca8396739e8a5290a5676c434dbec8f4d3b833aea220199cda789e948465bef1ea8aeb1fa6ae5d4bfbf1e703e77e5253b703a1b967bdc42e042067f297917a359b52cb42e637b735374d2454c4498783879f741bed6a8bbb5c4b19c3f0cdf5f9baf8fdc046e5252794f5f9fdb7a99346820f7a2cb5aad517d01f32ed54a015b61eaae555882b58bb04fc21dbd682e7709d2629e04704212e232bd7e47fe769351383943444fab52eeadae364021090bf6458ade84da6a9e776c85c790b3b7330780bc5d22d276d2059d5e9172a53e8c96a1bb3b752698261ca465c93099a402f25615973d995c0c4d701b64fbcb5", @ANYBLOB="00042dbd"], 0xa4}, 0x1, 0x0, 0x0, 0x4008045}, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1000af"], 0x1ac}, 0x1, 0x0, 0x0, 0x22004840}, 0x4001) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8000000, &(0x7f00000002c0)={0x0, 0x2}, 0x1, 0x0, 0x2, 0x7}, 0x4}, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000100), r1) mmap$auto(0x0, 0x100, 0x4000000000df, 0x80000000eb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x4bf15e08, &(0x7f0000000000)={0x408, 0x3, 0x10101, 0x6fb7, 0x8a, 0x4, r2, [0x100, 0x7, 0x7f], {0x2, 0x7, 0x3034, 0xc, 0x8f, 0x5, 0x5, 0xfffffff9, 0x6}, {0x4000, 0x3, 0x0, 0xbffff000, 0x8, 0x20b85, 0x5, 0x837, 0x8}}) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB='_\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x24, r4, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x80) close_range$auto(r2, 0x8, 0x4) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r5 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/user_power_level\x00', 0x1c1082, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r5, 0x0, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) 10m4.737125787s ago: executing program 0 (id=2618): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) sysfs$auto(0x2, 0x10000000000002a, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0xffffffff) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) sendmsg$auto_NL802154_CMD_SET_PAN_ID(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="010027bd7000fddbdf250a0005000700000000000000080001"], 0x24}, 0x1, 0x0, 0x0, 0x4088}, 0x20000010) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="01007050a7f82fc634b10f00003460fac93497d76d"], 0x1c}, 0x1, 0x0, 0x0, 0x4000005}, 0x2) futex_waitv$auto(&(0x7f0000000000)={0xf, 0x5d94, 0x4002, 0x4}, 0x77, 0xfffffffc, 0x0, 0x62bd) r0 = socket(0x10, 0x2, 0x0) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/projid_map\x00', 0x101002, 0x0) write$auto(0x3, 0x0, 0xfdef) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c003b"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) write$auto(0x3, 0x0, 0xfdef) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) fanotify_init$auto(0x5, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x101800, 0xbf) ppoll$auto(&(0x7f0000000180)={r1, 0x4, 0x8}, 0x6, 0x0, 0x0, 0x8) close_range$auto(r1, 0x8, 0x0) ioctl$auto_IOCTL_VMCI_CTX_GET_CPT_STATE(r1, 0x7b1, 0x0) close_range$auto(0x2, 0x8, 0x0) 10m1.555613239s ago: executing program 0 (id=2626): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x640, 0x0) read$auto_mon_fops_binary_mon_bin(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x4) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netfilter/nfnetlink_queue\x00', 0x101000, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) clone$auto(0x7fff, 0x200, 0x0, 0x0, 0xf) socketpair$auto(0x1e, 0x1, 0x41, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0x4048aecb, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop10/queue/atomic_write_unit_min_bytes\x00', 0x60240, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.3/usb4/4-0:1.0/authorized\x00', 0x10b142, 0x0) sendfile$auto(r3, r4, 0x0, 0x1000200) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x8) 10m0.135996805s ago: executing program 0 (id=2629): r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x105200, 0x0) ioctl$auto_I2C_RDWR(r0, 0x707, &(0x7f0000000080)="700655b1e0882b93ba175a5b1944b642ded52ffb71df35bf63e35ff79748ca7d2b4d41459c3c5f46d6c785295417777e2b1413cb42c02c393638b845679990bcd2874f5ea068cb38cb1f82ed8b8ef9900ea5448ba9a2946141f9ad39b2c2b7045c669e4aa5b8d8ccc0dac3a35ccf94fe3554c431cf470ebc5f6b5b2f50ac2bbe4d797b3e3154c541eec19ad2eb9ae57e9973cd11945721f4c2a31c16fc6906bc7f58b627d1937ad9b49a698bc2d733bacbd917a46a54823baa922f31c08c382de4f1694f1a0f37777264e64a1baf3da569b6a330cd78") openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x40400, 0x48) fchmod$auto(r1, 0x7fff) setreuid$auto(0x4, 0x8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/module/usb_storage/parameters/delay_use\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)=""/40, 0x28) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000001c0), r3) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f00000002c0)={&(0x7f0000000180), 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r4, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x2}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000}, 0x4000) write$auto(0x3, 0x0, 0xfffffdef) 9m59.521806331s ago: executing program 0 (id=2631): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000380), r0) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000000c00)=ANY=[@ANYBLOB="001b9885", @ANYRES16=r1, @ANYBLOB="09032abd7000fedbdf2519000000"], 0x14}, 0x1, 0x0, 0x0, 0x48800}, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) semctl$auto(0x1ff, 0x2, 0x13, 0x1) setsockopt$auto(r2, 0x104000000000010e, 0x8, 0x0, 0x2000400) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000040), r2) futex$auto(0xfffffffffffffffd, 0x7, 0xfffffffffffffffc, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x8) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f0000000100)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x7, 0x0) mmap$auto(0x0, 0x8, 0x80000000000000df, 0x10004000eb1, 0x8, 0x8000008000) preadv2$auto(0x3, 0x0, 0x5, 0xffffffffffffffff, 0x7, 0x2e) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x80000000}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mmap$auto(0x0, 0x400008, 0xdf, 0x9b76, 0x0, 0x8000) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x100000000000027, 0x0) r3 = fsopen$auto(0x0, 0x1) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x22048814) preadv2$auto(r3, &(0x7f0000000480)={&(0x7f0000000800)="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", 0x2766}, 0x2, 0xfffffffffffffbff, 0xfffffffffffff371, 0x4) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0x810) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x0, 0x8, 0xd, 0x3, 0x81, 0xfffffffc, 0x2000000000000002, 0x0, 0x9, 0x1, 0x2, 0x80000001, 0xb0, 0x9, 0x1, 0xffffffff, 0x5, 0x7, 0x0, 0x7, 0x0, 0xffffffee, 0x2a14, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x800000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x71a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe9, 0x0, 0x4, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000]}, 0x9, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4044810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x200) 9m57.342432335s ago: executing program 0 (id=2637): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd6/trace/act_mask\x00', 0x420002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000ac0), 0xffffffffffffffff) syncfs$auto(r1) sendmsg$auto_OVS_FLOW_CMD_SET(r1, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_ACTIONS={0x4}, @OVS_FLOW_ATTR_UFID={0x5, 0x9, 0xb0}]}, 0x24}, 0x1, 0x0, 0x0, 0x14}, 0x4000800) sendfile$auto(r0, r0, 0x0, 0x3) 9m56.896995369s ago: executing program 0 (id=2640): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) mmap$auto(0x0, 0x80000000, 0x3, 0xeb1, 0xfffffffffffffffa, 0x40008000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x201, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x201, 0x0) r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r3 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x7, 0x1000000004, 0x9b72, 0x2, 0x100) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) listxattrat$auto(0xffffffffffffffff, 0x0, 0x7ffffffe, &(0x7f0000000380)='\xdf^\xe2o\x87D\x10\xa0\x0e1\xb5B\xd6k]Yh\x99\xf4\xbcy.8\xcd\xf2I\xcc\xf5\xc7\xee\xb8\xea\xb7+\xd8K\xf1\x1aI\xe6(\x9f\xaeS\xf1\x199\x1fk\x01\xf36\xe1 \x1a+\xcd\xfc6\xc7W\xeaw7\x1b\xf4\x01\xebQ\n\x94{\xb5\xa7/\xa3\xa7\x16\x82\x1c\rEqd\xf7~\xba{\x8f7S\x82\xed\x8es\x02W\xdc\x16l\xee\xf1\xd9\x83\xc8', 0xe9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1, 0x3, 0xf, 0x940, 0x1ffde, 0x3, 0x6, 0x8000002, 0x9, 0x5, 0x5, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, [0x0, 0x4000000000000000, 0x10000, 0x243efbdf, 0x0, 0x0, 0x4000000000000, 0x0, 0x4, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6e, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x81) close_range$auto(0x0, 0xffffffffffffffff, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES8=r0, @ANYRES64=r3, @ANYRES64=r3], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24048000}, 0xc0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 9m41.705011638s ago: executing program 34 (id=2640): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181482, 0x0) close_range$auto(0x2, 0xa, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x40802, 0x0) mmap$auto(0x0, 0x80000000, 0x3, 0xeb1, 0xfffffffffffffffa, 0x40008000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x201, 0x0) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fb0\x00', 0x2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ttynull\x00', 0x201, 0x0) r2 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r2, 0x4c81, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0x7fffffff) r3 = openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000180)='/proc/stat\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x7, 0x1000000004, 0x9b72, 0x2, 0x100) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) listxattrat$auto(0xffffffffffffffff, 0x0, 0x7ffffffe, &(0x7f0000000380)='\xdf^\xe2o\x87D\x10\xa0\x0e1\xb5B\xd6k]Yh\x99\xf4\xbcy.8\xcd\xf2I\xcc\xf5\xc7\xee\xb8\xea\xb7+\xd8K\xf1\x1aI\xe6(\x9f\xaeS\xf1\x199\x1fk\x01\xf36\xe1 \x1a+\xcd\xfc6\xc7W\xeaw7\x1b\xf4\x01\xebQ\n\x94{\xb5\xa7/\xa3\xa7\x16\x82\x1c\rEqd\xf7~\xba{\x8f7S\x82\xed\x8es\x02W\xdc\x16l\xee\xf1\xd9\x83\xc8', 0xe9) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1, 0x3, 0xf, 0x940, 0x1ffde, 0x3, 0x6, 0x8000002, 0x9, 0x5, 0x5, 0x4, 0xb0, 0x7, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000009, [0x0, 0x4000000000000000, 0x10000, 0x243efbdf, 0x0, 0x0, 0x4000000000000, 0x0, 0x4, 0xffffffffffffffff, 0x9, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x9, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe6e, 0x0, 0x0, 0xfffffffffffffffe]}, 0x1fe, 0x81) close_range$auto(0x0, 0xffffffffffffffff, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYRES8=r1, @ANYRES8=r0, @ANYRES64=r3, @ANYRES64=r3], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24048000}, 0xc0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) 8m48.645592535s ago: executing program 3 (id=2853): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000001100), r2) sendmsg$auto_CTRL_CMD_GETFAMILY(r2, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000001140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000ffdbdf25030000000600010030"], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x20000044) r4 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x104, r4, 0x10, 0x70bd28, 0x3, {}, [@HWSIM_ATTR_TX_INFO={0x8, 0x7, [{0x7, 0x7}, {0x3, 0x7}]}, @HWSIM_ATTR_PERM_ADDR={0x4}, @HWSIM_ATTR_MLO_SUPPORT={0x4}, @HWSIM_ATTR_PERM_ADDR={0xdf, 0x16, "cd075f5a70cc79686ea1bf921fd778854b3b78862c86ee4480c297b4b3e1c25efe67d3c7f2702cfb094db226591146e266b101606f09bd1bbbfd7052467ea8a25c9294a87425328a00ef0bc7d448bd89e3807ff365c24a7e62afe5c683f2745f822a6e75c00c6f66745af2f0f6384a2d6bea3fe7aba4c9138bce74e556391f559c3fca1262ec07c2e4f9c28a810ad1c43bdda7011830f7cf110ae8689f2d3390fcbe52bf15e1c1c1233f2822ff039b262ec7be0d027d1cf764c3fdc89ec2e4451dca1d6bacea980321eb34c9b874def55805c5b59e8f81298a1b1e"}]}, 0x104}, 0x1, 0x0, 0x0, 0x48800}, 0x8000) r5 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), r2) msgsnd$auto(0x100, &(0x7f00000004c0)={0xfffffffffffffff9, 0x78}, 0x5, 0x100) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_TEMP(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c00a6ff", @ANYRES16=r5, @ANYBLOB="f7ff2a407000fedbdf2503"], 0x1c}}, 0x8084) syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r0) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, 0x0, 0x4004040) 8m48.341460704s ago: executing program 3 (id=2855): socket(0xa, 0x2, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x221c2, 0x0) mlockall$auto(0x0) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) setns(0xffffffffffffffff, 0x0) write$auto_msr_fops_msr(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$auto_nbd(0x0, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) 8m47.9882309s ago: executing program 3 (id=2856): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dri/card0\x00', 0x2940c3, 0x0) ioctl$auto(r0, 0x64ce, 0xffffffffffffd4b4) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) msync$auto(0x1ffff004, 0xb, 0x1000004) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) pselect6$auto(0x4, 0x0, &(0x7f0000000180)={[0x2, 0x9, 0x2da0000, 0xff, 0x1000101, 0x1c00000, 0xa1, 0x4, 0xfffffffffffffffe, 0x8, 0x4, 0x9, 0x1, 0x0, 0xe, 0x80000001]}, 0x0, 0x0, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) socket(0xa, 0x1, 0x84) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(0xffffffffffffffff, 0xc0305710, &(0x7f0000000040)={0x0, 0x73d, 0x4, 0x0, 0xff, "50cfeeca8e00"}) close_range$auto(0x2, 0xffffffffffffffff, 0x0) 8m47.724264355s ago: executing program 3 (id=2857): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sda\x00', 0x8001, 0x0) fallocate$auto(r0, 0x1, 0x0, 0x80000000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x2000, 0x0) ioctl$auto_BLKROTATIONAL(r1, 0x127e, 0x0) fadvise64$auto_POSIX_FADV_WILLNEED(r1, 0x9, 0x200, 0x3) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0xffffffffffffffff, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/kernel/watchdog_cpumask\x00', 0x141241, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/net/teql0/statistics/rx_dropped\x00', 0x80000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'veth1_to_bond\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r3, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x68e09cd9eed0e142}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x12c, 0x0, 0xd73cf875e9bf3ff, 0x70bd2b, 0x25dfdbfb, {}, [@ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x7fffffff}, @ETHTOOL_A_RSS_HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_RSS_HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x40}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'nr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x100}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}]}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x4}, @ETHTOOL_A_RSS_START_CONTEXT={0x8, 0x7, 0x81}, @ETHTOOL_A_RSS_CONTEXT={0x8, 0x2, 0x3}]}, 0x12c}, 0x1, 0x0, 0x0, 0x20040091}, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) gettid() read$auto(0xffffffffffffffff, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdef) 8m46.965330819s ago: executing program 3 (id=2862): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/bond0/queues/tx-9/xps_rxqs\x00', 0x1a1842, 0x0) sendfile$auto(r0, r0, 0x0, 0xe00000000) (fail_nth: 4) 8m46.353372148s ago: executing program 3 (id=2863): r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2a, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x1, r1, @relative_id=0x13, 0xe600}, 0xf) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto(0x3, 0x0, 0x9) ioctl$auto_dvb_frontend_fops_dvb_frontend(r0, 0x9, 0x0) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r4, 0xb2400000, r1) prctl$auto(0x35, 0x0, 0x4000000008, 0x0, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x3c3a00, 0x0) r6 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r6, 0x65, 0x7, 0x0, 0x0) ioctl$auto(r5, 0x4b65, r5) 8m30.935651385s ago: executing program 35 (id=2863): r0 = openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2a, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x4, 0x1, r1, @relative_id=0x13, 0xe600}, 0xf) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto(0x3, 0x0, 0x9) ioctl$auto_dvb_frontend_fops_dvb_frontend(r0, 0x9, 0x0) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) ioctl$auto(r4, 0xb2400000, r1) prctl$auto(0x35, 0x0, 0x4000000008, 0x0, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty48\x00', 0x3c3a00, 0x0) r6 = socket(0x1d, 0x3, 0x1) getsockopt$auto(r6, 0x65, 0x7, 0x0, 0x0) ioctl$auto(r5, 0x4b65, r5) 9.55446741s ago: executing program 7 (id=4752): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="077d08000100480000000053303b24078194e355436a7565a764478b8231bc4c3d3aa3a5b79e646b463bb3c1f266338d54a487838280ea80b0050a4ab676feef4df87eff2f57b3b346dfbb30e31908224471f458f4e2bc88c22c0a30bfbd65f6962783754bc328fefcb2b4c2fd954dd7ca13e10f83477b607204861548226a97a3400a8a72c12526f6b51d662a7145531fbd24402f6009f38a06ef942f63ea65b90531560eb542538211aca812faa7da099c68752a676b28", @ANYRES32=0x9, @ANYBLOB="0800070000010000"], 0x34}, 0x1, 0x0, 0x0, 0x801}, 0x80) close_range$auto(0x2, 0x8, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0x0, 0x0) r2 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/debug/tracing/events/vmalloc/filter\x00', 0x103041, 0x0) write$auto(r2, 0x0, 0x9) capset$auto(0x0, 0x0) open(0x0, 0x4242, 0xe1d2b27bdc14aabc) r3 = open(0x0, 0x4242, 0xe1d2b27bdc14aabc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x1, 0x1ff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000003680)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r6, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRES16=r5, @ANYBLOB="010029bd7000fddbdf250b0000000800508004000600080003", @ANYRES32=r7], 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x890) unshare$auto(0x40000080) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) setfsgid$auto(0x9) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) close_range$auto(0x2, 0x8, 0xfffffffc) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r8 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8953, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r3, 0xfffffffffffffdad, &(0x7f0000000700)="d87c9d6c1f7793d1c70c0e66d564594ef635be9c007a069396a420aeb651b25e7edebd1e5870742b80770186508b34b56770686bbba917aecd020829cabb43d87281368300a6997794068ca7ce1f63a74d4dc6f0b00a388db3a677c3d2374738e504a4b13fdf") sendmsg$auto_NL80211_CMD_UPDATE_CONNECT_PARAMS(r3, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x39c, r5, 0x10, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_FILS_CACHE_ID={0x56, 0xfd, "d99295e8961c540e2c912bd35762ad1232ecc314f88759d83d295d6c6645ff663c7dba08e518d18f2d5f292aded02caae630380f412a8089219d632d62f0242144b8ea41e3b26368c8af4112aed54f06e673"}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x9}, @NL80211_ATTR_SPLIT_WIPHY_DUMP={0x4}, @NL80211_ATTR_BEACON_TAIL={0x323, 0xf, "40698f1fd1f97b5e015bc4a8ed5760f3b1e5b21021b22d2cae4c9e413a8298083a9e2c98436730a54170f83d96b5d4c009d34645b5d36e82f799705a513558ed98cb2b569f27f42341cd5bc5a707c640920b3157a8b5f916f7408c5fbae0fee095ffac4e27a2dcb544b3fbc3a2e4249f7fcc9204ee9ef618b5b36504fc202e4e440238470eda22e207f149492875ca4ccf76a7ab800d52376360560b5d210411f759d6684623c9b5c33a38e835f4b98dc89df114091433d1006d6b1803207f96e7d037a87373318b310f0f2d34b7395b552db990650c16f4d155fb28e0c05355ef194ada5a07dc45025b12c1db3d5118a10e1a90b9deae847500a09cae9592a271ce1903d4df294259fdfd0ab036c46fc2be1776928fcf0105dfcf16c883882ff93a0832a05dc60dcf814c1afb8af9fd3b42d8528fde67e2e12d6234a1aa7da9694824cd9f1193e5eec834c044752cff714f24880ed1d33c94f7fadb192ac1de1d57aa518047a8d8c7f9bf841055fa1d886485ff0cdc387a20e7af7c8c0e3bbb9292fd6be2d67816d205e9dd88a06becef19a0ebba62d6e557d0fd25e80cf1ed3dcc43300c37e56c9fdb1f6b97b4fff1d20465f7b4573204dd0956583cf8569f6d0af30e8a5737e392a4c02083f342e994dba09d9cc77ed961636a694bd581303e130c370f76633af2e7ce47131416780f8a66f6c0c05ab6d89844a8de2f4c7daacce171f267f1e07138149823086ed0ccce3b7f48d34665bf1405e22281c5f2cfebe9f646be3ab6313def1041490ca9cd5d686b23c57e0ac5bac22fcd5ef2c2ad7c558727dfe44d56990f066dd794c47ca04bcf8c0f596181d40de89301b26c68016ff6818a2fd597599fe8327a1d73c4cf67cc04ae745725663af907a85d34bbb4fcc9673c8179eb1824463261cf458fd9d8b23e51596fb0435f3b13e08d03b81a6f4012af8517b2b396a42dae4d83f96f23ece6064eddac2b3ad94c959594f07e528d9a900c77b7d8cdf93c6097d66bff0fe1ac8070ed97f7a8bd41b14286eccc23af77bfa986caabac92de152151a7e5bf8d4562adc79a49f22b6817250dd1e5f2ad198a751ef011807a9d97bc141b9be1eb852638f24edd5017b8a39e"}]}, 0x39c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r9 = openat$auto_ftrace_subsystem_filter_fops_trace_events(0xffffffffffffff9c, &(0x7f0000007380)='/sys/kernel/tracing/events/vmalloc/filter\x00', 0x109041, 0x0) write$auto(r9, &(0x7f0000008d40)='((}-)#@\x00', 0x40) close_range$auto(0x2, 0x8000, 0x0) 8.622611765s ago: executing program 7 (id=4757): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setresuid$auto(0x8, 0x8, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x8040, 0x0) setfsuid$auto(0x0) getpid() r0 = semctl$auto_GETVAL(0xd40e, 0x1, 0xc, 0x9) migrate_pages$auto(r0, 0xa, &(0x7f0000000100)=0x7ff, &(0x7f0000000140)=0x7) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b3b, 0x1) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000200)='/proc/thread-self/pagemap\x00', 0x6289d94d78b73bb3, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x1, 0xfffffffffffffff7, 0xc00, 0x2c, 0x2c, 0x0, 0x2}) mmap$auto(0x0, 0x2020009, 0x3, 0xe31, r1, 0x8000) mmap$auto(0x2, 0x0, 0xdf, 0x9b72, 0x2, 0x7ffe) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0x81000005, 0x6, 0xfffffffffffffffd, 0xffffffffffffffff, 0x80000001) move_pages$auto(0x0, 0xd0, 0x0, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x200007, 0x19) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_to_batadv/accept_ra_rt_info_min_plen\x00', 0x40100, 0x0) socket(0x9, 0x3, 0xff) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/kcm\x00', 0x480, 0x0) read$auto(r4, &(0x7f0000000300)='2\x06J Nwe0\xbd\"\x8f\xe5h_b\xde\x19\xa5\x0e\xfa\xe0\xcb\xb7\xaceW\x1a\x1f\xae\xd8\xfe\x01Y\xd6\xba\xde3\xc7\xf8\x91\xda\xf6_%\xf30\xdc\x97<\xf3A\xa7\xb4\x8dj\xbd\x02\xb1}{e\xf64\xec4\x83,\xecp7j\xf8<\xc8x\xd4\xb0\x1d\b\xb0\x18\x01\x9e\x9et\x8aa\xe1\re\xcf\x8e\x02\xeeW\xf0z\vk#_\xdb\x15f8>;zM\xa95\x16\xe9l\xf5\xaa\xaa\x03\x18p\x0e\xde$\xc3\xa9\xac\xc7\x98\x05<\xef\xcd@z\fx}F\x93\xe1\xbd\xb3s\x80\xc1w\x1eP\xd0\xea\xab\x8f\xc7\a\xe6\xad\ni\n~-u)\x88\x97\xed\xa7\x9b\x0f\xef\x99\x13\xdc<\xd1{\br\xd6[\xd3\xa9-(KH\b\xdfJ\xdek\xef\xc9\xd7\n\x83m\x86\xf2\a\x8d\x19\xe0\\\xf0lg?\x98\xc8\x8e\xbd2?C\xa5\x8a\xe3\xc6\xd7\x00\x14n\xb8<\xab\x96\x8d\xa1\xf4\x87\xe5\a:z\xea\xcc\xa1\x8d\xae8\x12\xa6\xb9\xd99\xaa\xc5\x10\xad\xdd\x89\xdd\xbb\xf5\xd2Q\x92\xcd\xcc\x9f\x1a\xdbR\xeeL:\x87\xb3#\x00\x1bR\xf2\xe2/\xa3\x0e\x90\x98\x8c\xc0\xa4\xda', 0x805644) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x6, &(0x7f00000002c0)={0x0, 0x3}, 0x1, 0x0, 0x200000000000, 0x9}, 0x7}, 0xb06, 0xfc) read$auto(r3, 0x0, 0x1ff) mmap$auto(0x0, 0x202000a, 0x3, 0xeb1, 0xfffffffffffffffa, 0x80000000008000) sysfs$auto(0x2, 0x100000000000035, 0x0) fsopen$auto(0x0, 0x1) 8.377777436s ago: executing program 7 (id=4758): sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x3ff) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000000) unshare$auto(0x40000080) r0 = socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x6, 0x2, &(0x7f0000002100)=0x4, 0x7, 0xffffffff) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x800) readv$auto(0x3, 0x0, 0x1) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) pwritev2$auto(0x40, 0x0, 0x7, 0xffffffff, 0x38b, 0x1) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="cf57c928ffffffffdbdf25060000"], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, 0x0, 0x0) shmctl$auto_IPC_STAT(0x2, 0x2, &(0x7f0000000600)={{0x9, 0x0, 0x0, 0x4, 0x3, 0x4, 0x61}, 0x7, 0xb58, 0x0, 0x836, @raw=0x2, @raw=0x8, 0x81, 0x0, &(0x7f00000004c0)="80c0781e7866911042364fdaaf0386ad799b6a91549cc648ba7d3b00158c272b16577435da63c54f4d77ebdfd4e5f0581e738a1c6615d0f6eb2704524c2f1c8132f02334161c8525a42eaa4855b714da6588c54cf71f84b82a", &(0x7f00000005c0)="7a3b3fdfd5902ca75f50b0e0499017583b77216e11add8d8e79c3e5b41ae70839970c2baa9b04b711e052032"}) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000d40)={0x634, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x2c0, 0x5, 0x0, 0x1, [@typed={0x8, 0xed, 0x0, 0x0, @uid}, @typed={0x8, 0x144, 0x0, 0x0, @u32=0xffffffff}, @typed={0x14, 0x27, 0x0, 0x0, @str='\\-^\\$[#$$,{}+.-\x00'}, @nested={0x1f8, 0xf2, 0x0, 0x1, [@typed={0x8, 0x27, 0x0, 0x0, @pid}, @generic="0b149dfd7f68b8b9634f2029ebc9a5e3accfe60002b5231edf86d67f2dab546892dd2b85e97a6c169021befec9973ae9fc52bd69240c8bfbafcbfe05af4954c0ace7a83f9d0395e543fce1d248ab72cac110c5056ae445113f63c747c6d58d41440f45904140f963b88c7c94758c21646627c122006999528d023bca434bf6a207a0abb17de7c545e9081bfc22959f6e46d30b0fed492b0c28a24e1c843e97cf43970588fe242668ba05f715c27dece9074e5752e935e0f3922676211532b7b300dd145cc4f7a066c44acd97e8e25146d254f74b398e98dadd", @typed={0x8, 0x52, 0x0, 0x0, @uid}, @generic="5c430925e6769faf0cb843d79c1fa96d44e8a1862e097be085f6619881627192051975d3f0b1d44c76e6e86243be5335efc52018037c685d0bc4db635041648449194911dcd05525694686f43086426367ff4b646cf27ab6c3cc51f571dd5c632a6de8f814e2521257f7343bdf4a8e7c00462e11591d95db1ce99a9db4f0789830c8e154dfd59cde129c47c936d5694448d881e8fd377bc19ae3b7b6b523290944fba581be2c0809b2c6e88e2718496739e210a8dfa1af7be18456c1f62b039578dac7b55a812319db2bf80f6e26c35c09c7147f7568ceb3f92874cf92587818fea6082478b27775cfcb0b6f2f1deea6c3c4bf8e4c9c791cb918c31c994618", @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x97}]}, @nested={0x7f, 0x29, 0x0, 0x1, [@nested={0x4, 0x129}, @generic="1d6b7a3563351e9517ea027805f431f31578f8c5efb4155fd2b3447c6d82fc08397082391a680e5a1a869c78b680bfd68f4a6746e282c88751fd9b372389da5766f2f83b2e3fff1aca42c1fdc50a95574e115c558ec3fb41a2fc86e65f5d8e87a021b731aa8b63275bf9f6", @typed={0xc, 0x125, 0x0, 0x0, @u64}]}, @typed={0x14, 0x87, 0x0, 0x0, @ipv6=@loopback}, @typed={0x4, 0xaf}, @typed={0x8, 0x140, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@typed={0x43, 0xd2, 0x0, 0x0, @binary="5dca84931c308da80567f9e026d1cd54b57365194880437d95e407a6d21e2e01417c48a1e022f69d398a020a22d6f10c5c88141b63051a28fe767aae3fe384"}, @typed={0xc, 0x11a, 0x0, 0x0, @u64=0xd7d}, @nested={0x4, 0x2}]}, @TIPC_NLA_BEARER={0x207, 0x1, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x32, 0x0, 0x0, @uid=r5}, @generic="d9e393bc30ed50cc5033c52e058d2e35de138190b41c0b3545c41e8dc4e5e9b3644374f037aff798fa3b5e07d0dd85ff0bc262a26ca5352840a2f2140482f0ee43bcb75c03031967388024c18393651c1163965e87b95cdef60e4a45efd4e0a7fb1a02590c2690a216ec0593ef9a01dd0278df199bc0133f1eada4ea7593a3ab4e7f46744f341c29f6cad27873f9f4eab95db54894b3460cda95c432236a4a06a81f4009b94af72712e7c2e987a1a0fd66ffca91d3dc741d10faad1f50919433f1bbda6cd140ad1d6ed9010f4e5ab81814c43e2408079f1ca0275b9b3c586acc764068254aeb01a9e611d0e4be6cc7", @nested={0xf6, 0x36, 0x0, 0x1, [@generic="09918af9b6e15ec7a3309c5a72b44de2a92ad6023d27626300fad101e33bf45586125e220e6026024798ac3941af63f00c7344d8c04f3c298f6b0fbc68227c27b59947b0b2162bb222b3524deec54099dd693572949dc61ba4539b5e45c8d7bc1a95843e3c166783829b7eba871b0852de1ab6aa733367d5f2df9d60a45d7d21b4a9a96b6baad897896ac82788ffb072db9891fc907edfe3fbf8901b3579c4ddf6ffeb97cf284117caa463b1ac8f4c8a2e4a016e10d64606e9c49cd67a84d0184ebbc9ae736d521b732faa1c5cb79ba6deb5c523b0c2343337230eb162a3baa76404197031aa25714d52406b0db9459e9ed5"]}, @nested={0xc, 0x3e, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0x127}]}]}, @TIPC_NLA_NET={0xc9, 0x7, 0x0, 0x1, [@nested={0x4, 0xee}, @generic="e120751e76a03812f123a9d8d6aad3e5a18814e903a597abf28e48fa3f160b942b6741731e2af825872412b7068481eab7d7b923e68f968aef4e3d626d815ad7d441eb2b95fb9dea2022b2731b2ae91336b88aefcddf27dfa3009f5ed877dbc52a8f95f89f99db2885872e6a766d3a39f60ffd4fc9a1a286df1b81ead33a9740fefba9826dfae99e799251b3e18cd875525ebf90a29d96d01d1fe1160bf14960f5ea2d799071d6ac3e55cb8c76e532340e", @nested={0x10, 0x12f, 0x0, 0x1, [@typed={0x4, 0x80}, @nested={0x4, 0xd9}, @nested={0x4, 0x1f}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@typed={0xc, 0x40, 0x0, 0x0, @u64=0x5}, @nested={0xc, 0x22, 0x0, 0x1, [@nested={0x4, 0x13c}, @nested={0x4, 0xa2}]}, @typed={0x8, 0xfc, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x10, 0xa9, 0x0, 0x0, @str=')$+(}e-{-*-\x00'}]}]}, 0x634}, 0x1, 0x0, 0x0, 0x40000c4}, 0x10) ioctl$auto_PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000000)=0x8) read$auto(r2, 0x0, 0x3) mmap$auto(0x0, 0x7, 0xe2, 0x100eb1, 0x405, 0x8000) sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8086}, 0x4010) unlink$auto(0x0) set_mempolicy_home_node$auto(0x8, 0x8000000000000001, 0x7, 0xe24) 6.814835482s ago: executing program 5 (id=4763): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/debug_flag\x00', 0x501, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mmap$auto(0x0, 0x0, 0x5, 0x100000000eb1, 0xfffffffffffffffa, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x9) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x301b00, 0x0) socket(0x11, 0x80003, 0x300) dup2$auto(0x0, 0x3) write$auto(0x3, 0x0, 0xfdef) 6.607059177s ago: executing program 5 (id=4764): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001ac0), 0xffffffffffffffff) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/geneve1/ignore_routes_with_linkdown\x00', 0x202, 0x0) sendfile$auto(r2, r2, 0x0, 0x7fffe000) sendmsg$auto_BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000080)={0x14, r1, 0x1301, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20008800) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x23c, r3, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_COLOR_CHANGE_ELEMS={0x8, 0x131, 0x0, 0x1, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1}, @NL80211_ATTR_NAN_FUNC={0xe4, 0xf0, 0x0, 0x1, [@generic="3ae98a09dd114a2762e6db0c26971da28b92774b6801d8dea965eeb8ca70f5c91cb677d0eb289072c9ef5606c9324e38192152abe59ba3eb85588e05db56f17fa31148c7d419e9f9724dd05d8e0f6ef489993ea3c7f9260632ac1f3e3e698924597a924bc9d2116a5dd60e0d14bec42c6330b3aef1a8ecd90e13309bb88a26fbd20f98273c1ec4b4ed5d53f36e9bbb9735343c5211858e30e488cede300e1f8f6fb68aeac3bd058e2e40117a0480599038150f5779926e68f44aecd00834080afe5a5593ba7dbf599590743bbc7d6cd1057d86fda58a4bb2", @typed={0x8, 0xc8, 0x0, 0x0, @u32=0x5}]}, @NL80211_ATTR_VHT_CAPABILITY={0x4c, 0x9d, "8f656aff0719a6e5685e82b3072d06837aa1071af2025c76329dbbce6fc943203b07719f550f6afa6e7cc2ccc7a14f54509a0a34e90fc1102ee87ea4b1f0e3213a58c706ad196076"}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x40}, @NL80211_ATTR_MNTR_FLAGS={0xcc, 0x17, "e4d2824c2a5216b90d1ef49147843d9c0bfd60d387935274ba203c7d3f8bb5d69d90f17114766b0b3fb5c2dae0c9a31452868eaa81fa95250c5a6e449e3cf56acdda4c057ca09880c6da8a0c3b05c553844fa5cd03f896fe2dbfca611ff171ac7d354accb70b115087f8b8deefb571b91d1a810a6049e1e1c550d40f30e10bdcf081cbf38a1559ad04d71f74b01bd6e3ef7cdde2c16233b65e9d2ad27f8696349ec139da77247a7c8b93bce02ab2a00baac160a2f9b125c37f69b1ae45120fed3a0a77961e95436c"}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xd}]}, 0x23c}, 0x1, 0x0, 0x0, 0x8010}, 0xc000) mmap$auto(0x0, 0x2020009, 0x8, 0xeb1, 0xffffffffffffffff, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x10bc02, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r6 = socketpair$auto(0x3, 0x1b6b1d, 0x4, 0x0) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/022/001\x00', 0x62000, 0x0) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x144, r3, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_SAR_SPEC={0x2c, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffffffff}]}]}, @NL80211_SAR_ATTR_SPECS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}]}]}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x101, 0xbe, "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"}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000010}, 0x4010) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r5, 0x560f, r7) 6.32436283s ago: executing program 1 (id=4765): mmap$auto(0x0, 0x80000001, 0x3, 0x3f8, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0xffffffffffffffff, 0x4, 0xffffffc0) mmap$auto(0x0, 0x102, 0xde, 0x38, 0x6, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioctl$auto_TIOCSWINSZ2(0xffffffffffffffff, 0x5414, 0x0) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x60, 0x0, 0x10, 0x70bd26, 0x25dfdbfe, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0x8}, @HSR_A_IF2_SEQ={0x6, 0x7, 0x8000}, @HSR_A_IFINDEX={0x8}, @HSR_A_NODE_ADDR_B={0xa}, @HSR_A_NODE_ADDR={0xa, 0x1, @remote}, @HSR_A_NODE_ADDR_B={0xa, 0x5, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x37}}, @HSR_A_IF2_AGE={0x8, 0x4, 0x10}, @HSR_A_IF1_AGE={0x8, 0x3, 0xfffffffa}]}, 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/traceSMB\x00', 0x62441, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x10d800, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/interrupts\x00', 0x1c9802, 0x0) pread64$auto(r3, 0x0, 0x100000001, 0x2000006) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setreuid$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = open(0x0, 0x64842, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfdef) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000011c0)='/dev/ptyq3\x00', 0x40001, 0x0) write$auto(r4, 0x0, 0x7fffffff) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0xe4202, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) 6.219103612s ago: executing program 5 (id=4766): r0 = openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f0000000f80)='/sys/kernel/debug/dri/vkms/Writeback-1/vrr_range\x00', 0xa8441, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40080) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008081}, 0x10004010) r1 = socket(0x2, 0x80802, 0x0) r2 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r2, 0x0, 0x5, 0x20000002) recvmsg$auto(r0, &(0x7f0000000280)={&(0x7f00000001c0)="360970bff180242f47305efe72a5c26a93891d1bfbde826d3211c5279113454b641d6090979f0f70d5d28bfbf620176134539714dd3748f22e5b526a8ce7fafaae32041968ce44aa844095f196ae56c26c28ccd8b252ab539bdd6fdd3aa1f96b0256a4b02821ea5eb95e0ec1fcc5339aa54e56f69741ecab11745b6c1e651e", 0xff, &(0x7f00000000c0)={&(0x7f0000000000), 0x4}, 0x9, 0x0, 0x4, 0x7}, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="230329bd7000fcdbdf250f0000009acfc799c9174aecddf0fa4b4361862628e9933c5e172b059ce5a14a4ce14e869355235f87503df913c4b31d208d5ef26378176cfdea8cd2e1bd20166c907529a99b2856f18ba13b2cf5515e3ae9db0c614c6affe0ed7b45223923d242de8e20d0014e19af5aefc497fff78eff7e125bb4a58936dc07"], 0x14}, 0x1, 0x0, 0x0, 0x4094}, 0x2000c800) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000002c0)={{r1, &(0x7f0000000640)="13db61780824cc88adce6ae43dc039058ccf2e6d5629c5686af6378ed53dd2c9933b713f67e4fb7381a2a86715baf2bf1ab7dae096ed9b94736a379e2ee5ce61099da74d697d9fb66e79dc61241c370ba96d4e534060815aa46b496d763d0c6d13d59579743923f13909d6a257ced7a0411aa01e3329219f0d2e79a0d7a5cd69a2c9bdea39bd390aa397fb3ad82bacfcb8a326cd40949ae03aa532fc4d3ebbd4bd55b6162d74af716f1d56841c3ed58c59c73c5d98d55bcd57e2c7ead34e3d3c2f54acee61247a8b9fe79eca521ef5", 0x1, &(0x7f0000000380)="858875d851bcaf5c02b6e47c32f920c5d85a677ab59180ace3604f7757a479c583e8d0bdac42ad39c42cbd947736ca643c157f3c273bf3484100d357ce24c0393e818f25238cf79a57fb804f3c51daa8a0a99b486401d87556cddc930e28baeb4f03f38860eeb8c77f10ccabee3f342722aac96c9d889a2f63b1cff1235d1344d2", 0x2, &(0x7f0000000440)="975db97c084698621646507f9882183993729abdf0a7bbd7e1eb3639bf38be5e141967740db8980e93adb2ad313eaa5745155e92ca4f8402d91137a30c7963be85e045d577675afab2602f5bd7e54d990b493b1209c99be3dbe9490b8a1879a91b7d53fb207489f5966bd7f6e773a10b2cacf55d721e2ded3bdad337c4a39d8f508e", &(0x7f0000000000)=0x9}, 0x1856, &(0x7f0000000180)={0x7ff, 0x45, &(0x7f0000000fc0)="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", &(0x7f0000000500)="547ba593142e29a0def46fb1ce12ea626e8a96e13bd616620a9100b2263033f7bfeb91f4d2fa0b8bf007776a0222751c5388022959a1919d8292c311d3f83d3b7b8dd877d539aac9cbfb81d546f159178bf6a7ab5848ce35019f2ad992f4005521b53cb2a8e91a146b32466be3db3667b426c1811400bd370d25226f3074ad998881caf440074ec0ba2df114370fd239a57f755a2cc69ca255f6f4594e24c17dbf0b77e1", 0x5ec, 0x3}}) pwrite64$auto(r5, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x7, 0xa38) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) getpgid(0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(r5, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000980)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="080029bd7000ffdbdf25110000000600b4000e0000000500080040000000ac04322d2315b7ac0869da84af8f14cb53e0f228dc7b7e49a2173342961be01a80038ca72a609b99433c1c4d102504e8f5a182c1b94f6c5d5ac5e68f2870061fd0fd2dac83faa091e3af5f"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40014) 6.0850654s ago: executing program 7 (id=4767): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r0 = bpf$auto(0x0, 0x0, 0x6f4) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vbi18\x00', 0x280, 0x0) (async) ioctl$auto(0x3, 0xc0585605, 0x38) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000140)='/proc/self/fail-nth\x00', 0x20802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) r4 = prctl$auto_PR_SYS_DISPATCH_OFF(0x1000, 0x0, r3, 0x1000, 0x7) (rerun: 64) pipe$auto(&(0x7f0000000040)=r4) write$auto(0x3, 0x0, 0xffd8) (async) mmap$auto(0x0, 0x20007, 0x80000000004000df, 0x10004000eb1, 0x8, 0x8000) (async) r5 = socket(0x11, 0x80003, 0x300) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{0x0, 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0c5833b1dcff", 0x49}, 0x5, 0x0, 0x5, 0xe}, 0x5}, 0x2, 0x100) setsockopt$auto(r5, 0x107, 0x12, 0x0, 0x4) (async) io_uring_enter$auto(r0, 0x5, 0x6, 0x72, &(0x7f0000000240)="6b3d8a18c5008fb18aa1efaedaae1cd5f1f9f17400b84ae902713f12964e1646def671feb96df342c558b018440974da11a5df0613d3d9d343383972fc845440ecfab1aee9f78a724a052ae98de8050103b24aa5f424b656e36f3fe3bb0f1441fc9fa28946eeb635d787229c822bc1b86f95b0bbcf100a2bece91bcd49a97ab87947b06f5c1eee72a9bc965e06cf039fdf38084ab80ddc1c4486406ecbdba73aafe65927936bdf2a1a8ca2b4788dccf187dcbce615b6cb98f7", 0x2) (async) r6 = socket(0x11, 0x3, 0x9) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000000c0), 0x140, 0x0) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) sendmmsg$auto(r6, &(0x7f00000006c0)={{&(0x7f0000000180), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c0300", 0x49}, 0x5, 0x0, 0x5, 0x1}, 0x5}, 0x2, 0x100) (async) semctl$auto(0x1, 0x2, 0x13, 0x1) (async) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x1, 0x4, 0xfffffffffffffffb) setsockopt$auto(0x3, 0x114, 0x6, 0x0, 0xa0) (async) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) unshare$auto(0x40000080) 5.247949646s ago: executing program 5 (id=4778): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2a, 0xdf, 0x9b72, 0x1000, 0x28000) r0 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) timer_create$auto(0x6a49, 0x0, 0x0) ppoll$auto(&(0x7f0000000040)={r0, 0x7ff}, 0x7, 0x0, 0x0, 0x8) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x5}, {0x7, 0x2}}, 0x0) unshare$auto(0x40000080) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xfffffffe, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x4000000070624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x4, 0x1, 0x10000000000, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000005b8, 0xffff, 0x6, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x2, 0x801, 0x106) r2 = getsockopt$auto(r1, 0x6, 0xd, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x40, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) getpid() setsockopt$auto_SO_DOMAIN(r2, 0x8, 0x27, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='r'], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0xfdef) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) 4.688218646s ago: executing program 1 (id=4770): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) r1 = getpid() process_vm_readv$auto(r1, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) ioctl$auto_PAGEMAP_SCAN(r2, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x0, 0x0, 0x50b301a, 0x2c, 0x2c, 0x0, 0x2}) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0p\x00', 0x40000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), 0xffffffffffffffff) getuid() openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0) socket(0x28, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000100), 0x40880, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB, @ANYBLOB="2f212abd7800fddbdf2521000000"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x383, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x6, 0x7, 0xd, 0x0, 0x948b, 0x2, 0x15f4da0a, 0x6, 0x3, 0x2fffffffffffffd, 0x80000001, 0x6, 0x6d3c, 0x5, 0x6]}, 0x0) madvise$auto(0xe, 0x0, 0x8) unshare$auto(0x40000080) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000640), 0xffffffffffffffff) ioctl$auto_PPPIOCGFLAGS(0xffffffffffffffff, 0x8004745a, 0x0) mmap$auto(0x0, 0x802020009, 0x3, 0xeb1, 0xffff7ffffffffffa, 0x8000) 2.729412222s ago: executing program 1 (id=4771): openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/0000:00:02.0/encoder-0/bridges\x00', 0x2, 0x0) openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mmap$auto(0x280, 0x8a5e, 0x7a6df27c, 0xeb1, 0x40000000000a5, 0x1ff) unshare$auto(0x2b8) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) socket(0x10, 0x80002, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x7fe) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0xc8, 0x2, 0x9, 0xffffffffffff8001, 0xbef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) futex$auto(0x0, 0x8d, 0x0, 0x0, 0x0, 0x100) mmap$auto(0x0, 0x3, 0x4000000200df, 0x40eb2, 0x402, 0x300000000000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb0800) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0x20000, 0x0) write$auto_msr_fops_msr(r1, 0x0, 0x0) 2.643171306s ago: executing program 6 (id=4772): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/debug_flag\x00', 0x501, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) mmap$auto(0x0, 0x0, 0x5, 0x100000000eb1, 0xfffffffffffffffa, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd7/queue/max_discard_segments\x00', 0x80000, 0x0) read$auto(r0, 0x0, 0x9) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x301b00, 0x0) socket(0x11, 0x80003, 0x300) dup2$auto(0x0, 0x3) write$auto(0x3, 0x0, 0xfdef) 2.396123756s ago: executing program 7 (id=4774): r0 = openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/0000:00:02.0/encoder-0/bridges\x00', 0x2, 0x0) r1 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile$auto(r0, r1, &(0x7f00000000c0)=0x1, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mmap$auto(0x280, 0x8a5e, 0x7a6df27c, 0xeb1, 0x40000000000a5, 0x1ff) unshare$auto(0x2b8) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) socket(0x10, 0x80002, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x7fe) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0xc8, 0x2, 0x9, 0xffffffffffff8001, 0xbef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) futex$auto(0x0, 0x8d, 0x0, 0x0, 0x0, 0x100) mmap$auto(0x0, 0x3, 0x4000000200df, 0x40eb2, 0x402, 0x300000000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb0800) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) 2.395270012s ago: executing program 6 (id=4775): memfd_secret$auto(0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) ftruncate$auto(0x3, 0x700) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0xa, 0x3, 0x100) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x25, 0x2, 0x84) mmap$auto(0xfffffffffffffffc, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/ip6_tables_targets\x00', 0x8340, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, 0x0, 0x0) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto_PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x101, &(0x7f0000000040)={0x40, 0x9, 0x9}}) socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r1 = socket(0xa, 0x2, 0x0) socket(0x10, 0x2, 0x0) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x6, 0x0) r2 = socket(0xa, 0x2, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=r1, 0x4, @old_prog_fd=r2}, 0xa3) bpf$auto(0x3, &(0x7f0000000040)=@query={@target_ifindex, 0x10004, 0x7, 0x9, 0x7f, @prog_cnt=0x42c, 0x0, 0x80000001, 0xc, 0xb, 0x5}, 0x7) r3 = socket(0xa, 0x1, 0x100) setsockopt$auto_SO_MAX_PACING_RATE(r3, 0x6, 0x2f, &(0x7f0000000300)='\xba\xf13\xa4o\xd3\xd2\xe0v\x95\xe6mAk\x90\xa1\xfd\xb0\xe1\xa6W\x85py\x91Q\xe7\xc9\x05\xce\x17\xe6<0e\x12\xe8/\x16\xf0\xd2\xe5\x06[\vFb\xd6\xc0sTv*\xa6\x97\xb4\xcf\xc8d^\xb1\x7f\xeeH\xd2\xa8\xeb\xad\xdfw\xad\x1e\xcf\x13\xd2\xbbh\xb7\xb1\xa2\x14\xbe=Q\xf3\xd6\x85\x8as\x04\x93\x8c3\n\x9e\xcc\xbdP\x89\xee\xa8\x82\x03\x97\xe6^\x85#\x11T\x8dE\xba\nF\xc2\xe2\x06k\xf0~\xa3\x86h\xc2\xb8\xcfk\x1f', 0x6) r4 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f00000017c0)='/sys/kernel/debug/lru_gen\x00', 0x1, 0x0) writev$auto(r4, &(0x7f0000000100)={&(0x7f0000000000)='ex', 0x60}, 0x8) 2.062941696s ago: executing program 6 (id=4776): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001ac0), 0xffffffffffffffff) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/geneve1/ignore_routes_with_linkdown\x00', 0x202, 0x0) sendfile$auto(r2, r2, 0x0, 0x7fffe000) sendmsg$auto_BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000080)={0x14, r1, 0x1301, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x20008800) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f00000003c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x23c, r3, 0x800, 0x70bd25, 0x25dfdbfc, {}, [@NL80211_ATTR_COLOR_CHANGE_ELEMS={0x8, 0x131, 0x0, 0x1, [@NL80211_ATTR_KEY_DEFAULT={0x4}]}, @NL80211_ATTR_MDID={0x6, 0xb1, 0x7}, @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x1}, @NL80211_ATTR_NAN_FUNC={0xe4, 0xf0, 0x0, 0x1, [@generic="3ae98a09dd114a2762e6db0c26971da28b92774b6801d8dea965eeb8ca70f5c91cb677d0eb289072c9ef5606c9324e38192152abe59ba3eb85588e05db56f17fa31148c7d419e9f9724dd05d8e0f6ef489993ea3c7f9260632ac1f3e3e698924597a924bc9d2116a5dd60e0d14bec42c6330b3aef1a8ecd90e13309bb88a26fbd20f98273c1ec4b4ed5d53f36e9bbb9735343c5211858e30e488cede300e1f8f6fb68aeac3bd058e2e40117a0480599038150f5779926e68f44aecd00834080afe5a5593ba7dbf599590743bbc7d6cd1057d86fda58a4bb2", @typed={0x8, 0xc8, 0x0, 0x0, @u32=0x5}]}, @NL80211_ATTR_VHT_CAPABILITY={0x4c, 0x9d, "8f656aff0719a6e5685e82b3072d06837aa1071af2025c76329dbbce6fc943203b07719f550f6afa6e7cc2ccc7a14f54509a0a34e90fc1102ee87ea4b1f0e3213a58c706ad196076"}, @NL80211_ATTR_DISABLE_VHT={0x4}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x40}, @NL80211_ATTR_MNTR_FLAGS={0xcc, 0x17, "e4d2824c2a5216b90d1ef49147843d9c0bfd60d387935274ba203c7d3f8bb5d69d90f17114766b0b3fb5c2dae0c9a31452868eaa81fa95250c5a6e449e3cf56acdda4c057ca09880c6da8a0c3b05c553844fa5cd03f896fe2dbfca611ff171ac7d354accb70b115087f8b8deefb571b91d1a810a6049e1e1c550d40f30e10bdcf081cbf38a1559ad04d71f74b01bd6e3ef7cdde2c16233b65e9d2ad27f8696349ec139da77247a7c8b93bce02ab2a00baac160a2f9b125c37f69b1ae45120fed3a0a77961e95436c"}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xd}]}, 0x23c}, 0x1, 0x0, 0x0, 0x8010}, 0xc000) mmap$auto(0x0, 0x2020009, 0x8, 0xeb1, 0xffffffffffffffff, 0x0) r4 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/timer_list\x00', 0x10bc02, 0x0) pread64$auto(r4, 0x0, 0x8100000041, 0x413e) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r6 = socketpair$auto(0x3, 0x1b6b1d, 0x4, 0x0) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/022/001\x00', 0x62000, 0x0) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(r6, &(0x7f0000000600)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x144, r3, 0x4, 0x70bd25, 0x25dfdbfe, {}, [@NL80211_ATTR_SAR_SPEC={0x2c, 0x12c, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS={0x18, 0x2, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x10}, @NL80211_SAR_ATTR_SPECS_POWER={0x8, 0x1, 0xffffffff}]}]}, @NL80211_SAR_ATTR_SPECS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_SAR_ATTR_SPECS_RANGE_INDEX={0x8, 0x2, 0x6}]}]}]}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x101, 0xbe, "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"}]}, 0x144}, 0x1, 0x0, 0x0, 0x4000010}, 0x4010) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(r5, 0x560f, r7) 1.955121383s ago: executing program 5 (id=4777): sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x3ff) sendmsg$auto_NBD_CMD_DISCONNECT(0xffffffffffffffff, 0x0, 0x4000000) unshare$auto(0x40000080) r0 = socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x6, 0x2, &(0x7f0000002100)=0x4, 0x7, 0xffffffff) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x800) readv$auto(0x3, 0x0, 0x1) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) pwritev2$auto(0x40, 0x0, 0x7, 0xffffffff, 0x38b, 0x1) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_GET_RADIO(r2, &(0x7f0000001900)={0x0, 0x0, &(0x7f00000018c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="cf57c928ffffffffdbdf25060000"], 0x14}, 0x1, 0x0, 0x0, 0x884}, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, 0x0, 0x0) shmctl$auto_IPC_STAT(0x2, 0x2, &(0x7f0000000600)={{0x9, 0x0, 0x0, 0x4, 0x3, 0x4, 0x61}, 0x7, 0xb58, 0x0, 0x836, @raw=0x2, @raw=0x8, 0x81, 0x0, &(0x7f00000004c0)="80c0781e7866911042364fdaaf0386ad799b6a91549cc648ba7d3b00158c272b16577435da63c54f4d77ebdfd4e5f0581e738a1c6615d0f6eb2704524c2f1c8132f02334161c8525a42eaa4855b714da6588c54cf71f84b82a", &(0x7f00000005c0)="7a3b3fdfd5902ca75f50b0e0499017583b77216e11add8d8e79c3e5b41ae70839970c2baa9b04b711e052032"}) sendmsg$auto_TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000d00)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000d40)={0x634, 0x0, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x2c0, 0x5, 0x0, 0x1, [@typed={0x8, 0xed, 0x0, 0x0, @uid}, @typed={0x8, 0x144, 0x0, 0x0, @u32=0xffffffff}, @typed={0x14, 0x27, 0x0, 0x0, @str='\\-^\\$[#$$,{}+.-\x00'}, @nested={0x1f8, 0xf2, 0x0, 0x1, [@typed={0x8, 0x27, 0x0, 0x0, @pid}, @generic="0b149dfd7f68b8b9634f2029ebc9a5e3accfe60002b5231edf86d67f2dab546892dd2b85e97a6c169021befec9973ae9fc52bd69240c8bfbafcbfe05af4954c0ace7a83f9d0395e543fce1d248ab72cac110c5056ae445113f63c747c6d58d41440f45904140f963b88c7c94758c21646627c122006999528d023bca434bf6a207a0abb17de7c545e9081bfc22959f6e46d30b0fed492b0c28a24e1c843e97cf43970588fe242668ba05f715c27dece9074e5752e935e0f3922676211532b7b300dd145cc4f7a066c44acd97e8e25146d254f74b398e98dadd", @typed={0x8, 0x52, 0x0, 0x0, @uid}, @generic="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", @typed={0x8, 0x31, 0x0, 0x0, @ipv4=@local}, @typed={0x4, 0x97}]}, @nested={0x7f, 0x29, 0x0, 0x1, [@nested={0x4, 0x129}, @generic="1d6b7a3563351e9517ea027805f431f31578f8c5efb4155fd2b3447c6d82fc08397082391a680e5a1a869c78b680bfd68f4a6746e282c88751fd9b372389da5766f2f83b2e3fff1aca42c1fdc50a95574e115c558ec3fb41a2fc86e65f5d8e87a021b731aa8b63275bf9f6", @typed={0xc, 0x125, 0x0, 0x0, @u64}]}, @typed={0x14, 0x87, 0x0, 0x0, @ipv6=@loopback}, @typed={0x4, 0xaf}, @typed={0x8, 0x140, 0x0, 0x0, @ipv4=@private=0xa010102}]}, @TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@typed={0x43, 0xd2, 0x0, 0x0, @binary="5dca84931c308da80567f9e026d1cd54b57365194880437d95e407a6d21e2e01417c48a1e022f69d398a020a22d6f10c5c88141b63051a28fe767aae3fe384"}, @typed={0xc, 0x11a, 0x0, 0x0, @u64=0xd7d}, @nested={0x4, 0x2}]}, @TIPC_NLA_BEARER={0x207, 0x1, 0x0, 0x1, [@typed={0x8, 0x3a, 0x0, 0x0, @fd=r4}, @typed={0x8, 0x32, 0x0, 0x0, @uid=r5}, @generic="d9e393bc30ed50cc5033c52e058d2e35de138190b41c0b3545c41e8dc4e5e9b3644374f037aff798fa3b5e07d0dd85ff0bc262a26ca5352840a2f2140482f0ee43bcb75c03031967388024c18393651c1163965e87b95cdef60e4a45efd4e0a7fb1a02590c2690a216ec0593ef9a01dd0278df199bc0133f1eada4ea7593a3ab4e7f46744f341c29f6cad27873f9f4eab95db54894b3460cda95c432236a4a06a81f4009b94af72712e7c2e987a1a0fd66ffca91d3dc741d10faad1f50919433f1bbda6cd140ad1d6ed9010f4e5ab81814c43e2408079f1ca0275b9b3c586acc764068254aeb01a9e611d0e4be6cc7", @nested={0xf6, 0x36, 0x0, 0x1, [@generic="09918af9b6e15ec7a3309c5a72b44de2a92ad6023d27626300fad101e33bf45586125e220e6026024798ac3941af63f00c7344d8c04f3c298f6b0fbc68227c27b59947b0b2162bb222b3524deec54099dd693572949dc61ba4539b5e45c8d7bc1a95843e3c166783829b7eba871b0852de1ab6aa733367d5f2df9d60a45d7d21b4a9a96b6baad897896ac82788ffb072db9891fc907edfe3fbf8901b3579c4ddf6ffeb97cf284117caa463b1ac8f4c8a2e4a016e10d64606e9c49cd67a84d0184ebbc9ae736d521b732faa1c5cb79ba6deb5c523b0c2343337230eb162a3baa76404197031aa25714d52406b0db9459e9ed5"]}, @nested={0xc, 0x3e, 0x0, 0x1, [@nested={0x4, 0x14}, @nested={0x4, 0x127}]}]}, @TIPC_NLA_NET={0xc9, 0x7, 0x0, 0x1, [@nested={0x4, 0xee}, @generic="e120751e76a03812f123a9d8d6aad3e5a18814e903a597abf28e48fa3f160b942b6741731e2af825872412b7068481eab7d7b923e68f968aef4e3d626d815ad7d441eb2b95fb9dea2022b2731b2ae91336b88aefcddf27dfa3009f5ed877dbc52a8f95f89f99db2885872e6a766d3a39f60ffd4fc9a1a286df1b81ead33a9740fefba9826dfae99e799251b3e18cd875525ebf90a29d96d01d1fe1160bf14960f5ea2d799071d6ac3e55cb8c76e532340e", @nested={0x10, 0x12f, 0x0, 0x1, [@typed={0x4, 0x80}, @nested={0x4, 0xd9}, @nested={0x4, 0x1f}]}]}, @TIPC_NLA_SOCK={0x34, 0x2, 0x0, 0x1, [@typed={0xc, 0x40, 0x0, 0x0, @u64=0x5}, @nested={0xc, 0x22, 0x0, 0x1, [@nested={0x4, 0x13c}, @nested={0x4, 0xa2}]}, @typed={0x8, 0xfc, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x10, 0xa9, 0x0, 0x0, @str=')$+(}e-{-*-\x00'}]}]}, 0x634}, 0x1, 0x0, 0x0, 0x40000c4}, 0x10) ioctl$auto_PPPIOCGFLAGS(r1, 0x8004745a, &(0x7f0000000000)=0x8) read$auto(r2, 0x0, 0x3) mmap$auto(0x0, 0x7, 0xe2, 0x100eb1, 0x405, 0x8000) sendmsg$auto_ETHTOOL_MSG_RSS_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x8086}, 0x4010) unlink$auto(0x0) set_mempolicy_home_node$auto(0x8, 0x8000000000000001, 0x7, 0xe24) 1.615213019s ago: executing program 6 (id=4779): r0 = openat$auto_vrr_range_fops_(0xffffffffffffff9c, &(0x7f0000000f80)='/sys/kernel/debug/dri/vkms/Writeback-1/vrr_range\x00', 0xa8441, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40080) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x4008081}, 0x10004010) r1 = socket(0x2, 0x80802, 0x0) r2 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x12, 0x0, 0x7, 0x0, 0x1f, 0x8001}, 0x800009}, 0x5, 0x20000002) recvmsg$auto(r0, &(0x7f0000000280)={&(0x7f00000001c0)="360970bff180242f47305efe72a5c26a93891d1bfbde826d3211c5279113454b641d6090979f0f70d5d28bfbf620176134539714dd3748f22e5b526a8ce7fafaae32041968ce44aa844095f196ae56c26c28ccd8b252ab539bdd6fdd3aa1f96b0256a4b02821ea5eb95e0ec1fcc5339aa54e56f69741ecab11745b6c1e651e", 0xff, &(0x7f00000000c0)={&(0x7f0000000000), 0x4}, 0x9, 0x0, 0x4, 0x7}, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000008c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="230329bd7000fcdbdf250f0000009acfc799c9174aecddf0fa4b4361862628e9933c5e172b059ce5a14a4ce14e869355235f87503df913c4b31d208d5ef26378176cfdea8cd2e1bd20166c907529a99b2856f18ba13b2cf5515e3ae9db0c614c6affe0ed7b45223923d242de8e20d0014e19af5aefc497fff78eff7e125bb4a58936dc07"], 0x14}, 0x1, 0x0, 0x0, 0x4094}, 0x2000c800) ioctl$auto_XFS_IOC_ATTRMULTI_BY_HANDLE(0xffffffffffffffff, 0x4048587b, &(0x7f00000002c0)={{r1, &(0x7f0000000640)="13db61780824cc88adce6ae43dc039058ccf2e6d5629c5686af6378ed53dd2c9933b713f67e4fb7381a2a86715baf2bf1ab7dae096ed9b94736a379e2ee5ce61099da74d697d9fb66e79dc61241c370ba96d4e534060815aa46b496d763d0c6d13d59579743923f13909d6a257ced7a0411aa01e3329219f0d2e79a0d7a5cd69a2c9bdea39bd390aa397fb3ad82bacfcb8a326cd40949ae03aa532fc4d3ebbd4bd55b6162d74af716f1d56841c3ed58c59c73c5d98d55bcd57e2c7ead34e3d3c2f54acee61247a8b9fe79eca521ef5", 0x1, &(0x7f0000000380)="858875d851bcaf5c02b6e47c32f920c5d85a677ab59180ace3604f7757a479c583e8d0bdac42ad39c42cbd947736ca643c157f3c273bf3484100d357ce24c0393e818f25238cf79a57fb804f3c51daa8a0a99b486401d87556cddc930e28baeb4f03f38860eeb8c77f10ccabee3f342722aac96c9d889a2f63b1cff1235d1344d2", 0x2, &(0x7f0000000440)="975db97c084698621646507f9882183993729abdf0a7bbd7e1eb3639bf38be5e141967740db8980e93adb2ad313eaa5745155e92ca4f8402d91137a30c7963be85e045d577675afab2602f5bd7e54d990b493b1209c99be3dbe9490b8a1879a91b7d53fb207489f5966bd7f6e773a10b2cacf55d721e2ded3bdad337c4a39d8f508e", &(0x7f0000000000)=0x9}, 0x1856, &(0x7f0000000180)={0x7ff, 0x45, &(0x7f0000000fc0)="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", &(0x7f0000000500)="547ba593142e29a0def46fb1ce12ea626e8a96e13bd616620a9100b2263033f7bfeb91f4d2fa0b8bf007776a0222751c5388022959a1919d8292c311d3f83d3b7b8dd877d539aac9cbfb81d546f159178bf6a7ab5848ce35019f2ad992f4005521b53cb2a8e91a146b32466be3db3667b426c1811400bd370d25226f3074ad998881caf440074ec0ba2df114370fd239a57f755a2cc69ca255f6f4594e24c17dbf0b77e1", 0x5ec, 0x3}}) pwrite64$auto(r5, &(0x7f0000000240)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x7, 0xa38) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/tcp_fastopen_blackhole_timeout_sec\x00', 0x0, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x1) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) getpgid(0x0) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x1000, 0x0) sendmsg$auto_NL80211_CMD_GET_STATION(r5, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000980)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16, @ANYBLOB="080029bd7000ffdbdf25110000000600b4000e0000000500080040000000ac04322d2315b7ac0869da84af8f14cb53e0f228dc7b7e49a2173342961be01a80038ca72a609b99433c1c4d102504e8f5a182c1b94f6c5d5ac5e68f2870061fd0fd2dac83faa091e3af5f"], 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x40014) 1.406786063s ago: executing program 1 (id=4780): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/firmware/acpi/hotplug/pci_root/enabled\x00', 0x183941, 0x0) r1 = socket(0x18, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x80487436, 0x0) setreuid$auto(0x0, 0x20000000004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x84) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev6\x00', 0x80000, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x54) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) r2 = socket(0xa, 0x2, 0x3a) setsockopt$auto(r2, 0x29, 0x1b, &(0x7f0000000040)='!\x00', 0x1ff) write$auto(r0, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\xd6\x84\xef\xf5\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xed\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\x05\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd?\x13\xe2\xad\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH', 0x8) 1.263350695s ago: executing program 6 (id=4781): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4, 0xdf, 0x9b72, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x2, 0x10000001, 0x10001, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_LINK_RESET_STATS(0xffffffffffffffff, 0x0, 0x40040050) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x6) r0 = socket(0x10, 0x2, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfffff4a4, 0x0, 0xfffffffffffffffd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x4044010}, 0x20000084) socket(0x25, 0x1, 0x3) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c810}, 0x200448c0) bpf$auto(0xfffff011, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x4, 0x2fab2, 0x468, 0x9, 0x2, 0x4, 0x2, 0x4, 0x6, 0x1fd, 0xb6, 0x4, 0x6, 0x3}, 0xa3) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="1b000000", @ANYBLOB="1a00279e"], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 307.980795ms ago: executing program 1 (id=4782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/scsi/sg/device_strs\x00', 0x80, 0x0) read$auto_proc_iter_file_ops_compat_inode(r1, &(0x7f0000000280)=""/238, 0xee) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_NAPI_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NETDEV_A_NAPI_ID={0x8, 0x2, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80d0}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/ib_srp/parameters/fast_io_fail_tmo\x00', 0x20782, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/veth1_to_batadv/accept_ra_rt_info_min_plen\x00', 0x40100, 0x0) read$auto(r3, 0x0, 0x1ff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) semctl$auto_SETALL(0x0, 0x3, 0x11, 0x8d2) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r4, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x1, 0x6, 0x6, "aab8e85e0a000000529f895cf5e8ec8f46cbb766439daa41e1aa000000000000000000000000f4ffffff00", @raw=0x1}, 0x6, 0x7, 0x10000007, @raw, @reserved="fb99d320be0de941ac3f58d75bd3c4768e7f01a744aae0c84cbe332d618e150342771e3ac6e9a9df07cf9b1c017c611ac455c01804d0d3c89bee7005c58ffd5ab811fd53443e6cf63a902991b44e48364e8de3f3c4dee93bec614b306c6c4f064c38f5352a95473c9523203e261f1f5ed26400", "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4103f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) capget$auto(&(0x7f0000000000)={0x5, 0xffffffffffffffff}, &(0x7f0000000040)={0x6, 0x8, 0x7}) write$auto(0x3, 0x0, 0xfdef) 96.036838ms ago: executing program 1 (id=4783): r0 = openat$auto_bridges_fops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/dri/0000:00:02.0/encoder-0/bridges\x00', 0x2, 0x0) r1 = openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sendfile$auto(r0, r1, &(0x7f00000000c0)=0x1, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8002, 0x0) mmap$auto(0x280, 0x8a5e, 0x7a6df27c, 0xeb1, 0x40000000000a5, 0x1ff) unshare$auto(0x2b8) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) socket(0x10, 0x80002, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x7fe) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) prctl$auto(0xc8, 0x2, 0x9, 0xffffffffffff8001, 0xbef) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x3, 0x4000000200df, 0x40eb2, 0x402, 0x300000000000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb0800) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) 95.797692ms ago: executing program 5 (id=4784): mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r0 = fsopen$auto(0x0, 0x1) fsconfig$auto_SHMEM_HUGE_NEVER(r0, 0x52, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) fcntl$auto_F_OFD_GETLK(r0, 0x24, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x1) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x28, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f000000c340)='/proc/thread-self/pagemap\x00', 0x8000, 0x0) openat$auto_check_wx_fops_(0xffffffffffffff9c, &(0x7f0000000140), 0x20080, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) r1 = io_uring_setup$auto(0x797c, 0x0) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC0\x00', 0x802, 0x0) ioctl$auto(r2, 0xc1205531, r1) socket(0x2, 0x80802, 0x0) r3 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) r4 = getsockopt$auto_SO_GET_FILTER(r3, 0x8000, 0x1a, &(0x7f00000003c0)='nl80211\x00', &(0x7f0000000400)=0x4) ioctl$auto_PAGEMAP_SCAN(r4, 0xc0606610, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) 85.197672ms ago: executing program 6 (id=4785): mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) (async) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r0, 0x0, 0x20) (async) creat$auto(&(0x7f0000000000)='./cgroup\x00', 0x721e) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) mmap$auto(0x0, 0x20006, 0x3, 0xe72, 0x401, 0x8000) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ttyS3\x00', 0x40, 0x0) (async) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/profile\x00', 0x2, 0x0) (async) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptmx\x00', 0x109a42, 0x0) write$auto(r2, &(0x7f0000000080)='#-*,+\\}\x00', 0x8) (async) read$auto_proc_timers_operations_base(0xffffffffffffffff, 0x0, 0x0) (async) unshare$auto(0x40000080) 0s ago: executing program 7 (id=4786): mmap$auto(0x0, 0x20008, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptypf\x00', 0x102, 0x0) io_uring_setup$auto(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0xe81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) socketpair$auto(0x4, 0x4, 0x0, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) prctl$auto_PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x7, 0x4) r2 = io_uring_setup$auto(0x40, 0x0) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), r2) r3 = openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, &(0x7f0000001240), 0x8000, 0x0) ioctl$auto_BTRFS_IOC_SCAN_DEV(r3, 0x50009404, &(0x7f0000001280)={@inferred=0xffffffffffffffff, "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"}) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r6 = getsockopt$auto_SO_GET_FILTER(r5, 0x7ff, 0x1a, &(0x7f0000000000)='\x00', &(0x7f0000000040)=0x1) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'bond0\x00'}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'batadv0\x00'}) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r7, 0x0, 0x5, 0x20000000) socket(0x18, 0x5, 0x2) r8 = syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$auto(0x4206, r8, 0x0, 0x5) kernel console output (not intermixed with test programs): f0 [ 1180.858913][T25022] should_fail_ex+0x50a/0x650 [ 1180.858942][T25022] ? __pfx_mark_lock+0x10/0x10 [ 1180.858976][T25022] should_failslab+0xc2/0x120 [ 1180.859007][T25022] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 1180.859033][T25022] ? __alloc_skb+0x2b3/0x380 [ 1180.859062][T25022] __alloc_skb+0x2b3/0x380 [ 1180.859084][T25022] ? __pfx___alloc_skb+0x10/0x10 [ 1180.859117][T25022] tipc_buf_acquire+0x26/0xe0 [ 1180.859146][T25022] tipc_msg_create+0x39/0x1d0 [ 1180.859181][T25022] __tipc_shutdown+0xba4/0xef0 [ 1180.859218][T25022] ? __pfx___tipc_shutdown+0x10/0x10 [ 1180.859246][T25022] ? tipc_release+0x67/0x1650 [ 1180.859272][T25022] ? __pfx_lock_release+0x10/0x10 [ 1180.859301][T25022] ? __pfx_woken_wake_function+0x10/0x10 [ 1180.859339][T25022] ? mark_held_locks+0x9f/0xe0 [ 1180.859368][T25022] ? tipc_sk_filtering+0x420/0x520 [ 1180.859398][T25022] tipc_release+0xe5/0x1650 [ 1180.859423][T25022] ? down_write+0x14e/0x200 [ 1180.859447][T25022] ? __pfx_down_write+0x10/0x10 [ 1180.859474][T25022] ? __pfx_locks_remove_file+0x10/0x10 [ 1180.859512][T25022] __sock_release+0xb0/0x270 [ 1180.859542][T25022] ? __pfx_sock_close+0x10/0x10 [ 1180.859566][T25022] sock_close+0x1c/0x30 [ 1180.859591][T25022] __fput+0x3ff/0xb70 [ 1180.859623][T25022] ? _raw_spin_unlock_irq+0x23/0x50 [ 1180.859659][T25022] task_work_run+0x14e/0x250 [ 1180.859689][T25022] ? __pfx_task_work_run+0x10/0x10 [ 1180.859717][T25022] ? __pfx___do_sys_close_range+0x10/0x10 [ 1180.859753][T25022] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1180.859791][T25022] do_syscall_64+0xda/0x250 [ 1180.859817][T25022] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1180.859850][T25022] RIP: 0033:0x7f36d598cde9 [ 1180.859879][T25022] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1180.859904][T25022] RSP: 002b:00007f36d6863038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1180.859929][T25022] RAX: 0000000000000000 RBX: 00007f36d5ba5fa0 RCX: 00007f36d598cde9 [ 1180.859945][T25022] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1180.859960][T25022] RBP: 00007f36d5a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1180.859975][T25022] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1180.859990][T25022] R13: 0000000000000000 R14: 00007f36d5ba5fa0 R15: 00007ffdbe2d6a68 [ 1180.860024][T25022] [ 1181.129326][ C1] vkms_vblank_simulate: vblank timer overrun [ 1181.468897][T25024] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25024 comm: syz.5.4408) [ 1182.638530][T25031] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25031 comm: syz.5.4410) [ 1183.280924][T25049] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25049 comm: syz.5.4415) [ 1183.883010][T25054] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25054 comm: syz.5.4416) [ 1184.241757][T25062] FAULT_INJECTION: forcing a failure. [ 1184.241757][T25062] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1184.255177][T25062] CPU: 1 UID: 0 PID: 25062 Comm: syz.5.4418 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1184.255218][T25062] Tainted: [U]=USER [ 1184.255226][T25062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1184.255239][T25062] Call Trace: [ 1184.255246][T25062] [ 1184.255255][T25062] dump_stack_lvl+0x16c/0x1f0 [ 1184.255292][T25062] should_fail_ex+0x50a/0x650 [ 1184.255324][T25062] get_futex_key+0x4a3/0x1000 [ 1184.255360][T25062] ? security_prepare_creds+0x30/0x270 [ 1184.255389][T25062] ? __sys_setreuid+0x101/0xaf0 [ 1184.255422][T25062] ? __pfx_get_futex_key+0x10/0x10 [ 1184.255458][T25062] ? hlock_class+0x4e/0x130 [ 1184.255491][T25062] ? __lock_acquire+0xcc5/0x3c40 [ 1184.255527][T25062] futex_wake+0xe8/0x4e0 [ 1184.255558][T25062] ? __pfx_futex_wake+0x10/0x10 [ 1184.255595][T25062] ? find_held_lock+0x2d/0x110 [ 1184.255645][T25062] do_futex+0x1e5/0x350 [ 1184.255670][T25062] ? __pfx_do_futex+0x10/0x10 [ 1184.255693][T25062] ? trace_lock_acquire+0x14e/0x1f0 [ 1184.255716][T25062] ? __kmalloc_noprof+0x23b/0x4f0 [ 1184.255750][T25062] __x64_sys_futex+0x1e1/0x4c0 [ 1184.255779][T25062] ? __pfx___x64_sys_futex+0x10/0x10 [ 1184.255816][T25062] do_syscall_64+0xcd/0x250 [ 1184.255841][T25062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1184.255872][T25062] RIP: 0033:0x7f0f1318cde9 [ 1184.255890][T25062] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1184.255913][T25062] RSP: 002b:00007f0f140a00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1184.255936][T25062] RAX: ffffffffffffffda RBX: 00007f0f133a5fa8 RCX: 00007f0f1318cde9 [ 1184.255952][T25062] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f0f133a5fac [ 1184.255967][T25062] RBP: 00007f0f133a5fa0 R08: 00007f0f140a1000 R09: 0000000000000000 [ 1184.255982][T25062] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0f133a5fac [ 1184.255997][T25062] R13: 0000000000000000 R14: 00007fff20ff9620 R15: 00007fff20ff9708 [ 1184.256028][T25062] [ 1184.455372][ C1] vkms_vblank_simulate: vblank timer overrun [ 1185.769765][T25070] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25070 comm: syz.5.4418) [ 1186.522982][T25090] FAULT_INJECTION: forcing a failure. [ 1186.522982][T25090] name failslab, interval 1, probability 0, space 0, times 0 [ 1186.560089][T25090] CPU: 0 UID: 0 PID: 25090 Comm: syz.6.4432 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1186.560133][T25090] Tainted: [U]=USER [ 1186.560142][T25090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1186.560157][T25090] Call Trace: [ 1186.560165][T25090] [ 1186.560176][T25090] dump_stack_lvl+0x16c/0x1f0 [ 1186.560221][T25090] should_fail_ex+0x50a/0x650 [ 1186.560250][T25090] ? fs_reclaim_acquire+0xae/0x150 [ 1186.560290][T25090] should_failslab+0xc2/0x120 [ 1186.560321][T25090] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1186.560350][T25090] ? __pfx_map_id_range_down+0x10/0x10 [ 1186.560381][T25090] ? __x64_sys_futex+0x1e1/0x4c0 [ 1186.560405][T25090] ? __x64_sys_futex+0x1ea/0x4c0 [ 1186.560426][T25090] ? prepare_creds+0x2e/0x750 [ 1186.560454][T25090] prepare_creds+0x2e/0x750 [ 1186.560483][T25090] __sys_setreuid+0x101/0xaf0 [ 1186.560520][T25090] do_syscall_64+0xcd/0x250 [ 1186.560546][T25090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1186.560580][T25090] RIP: 0033:0x7efed338cde9 [ 1186.560599][T25090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1186.560626][T25090] RSP: 002b:00007efed428e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 1186.560650][T25090] RAX: ffffffffffffffda RBX: 00007efed35a5fa0 RCX: 00007efed338cde9 [ 1186.560666][T25090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1186.560688][T25090] RBP: 00007efed340e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1186.560705][T25090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1186.560720][T25090] R13: 0000000000000000 R14: 00007efed35a5fa0 R15: 00007ffdad082318 [ 1186.560753][T25090] [ 1186.889291][T25086] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25086 comm: syz.5.4422) [ 1187.913488][T25102] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25102 comm: syz.5.4426) [ 1188.553794][T15889] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 1188.553834][T15889] Bluetooth: hci3: unexpected subevent 0x0c length: 725 > 5 [ 1189.051152][T25119] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25119 comm: syz.5.4430) [ 1189.613082][T25128] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25128 comm: syz.5.4434) [ 1190.958677][T25154] FAULT_INJECTION: forcing a failure. [ 1190.958677][T25154] name failslab, interval 1, probability 0, space 0, times 0 [ 1191.034946][T25154] CPU: 1 UID: 0 PID: 25154 Comm: syz.6.4442 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1191.034990][T25154] Tainted: [U]=USER [ 1191.034998][T25154] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1191.035013][T25154] Call Trace: [ 1191.035020][T25154] [ 1191.035029][T25154] dump_stack_lvl+0x16c/0x1f0 [ 1191.035066][T25154] should_fail_ex+0x50a/0x650 [ 1191.035091][T25154] ? fs_reclaim_acquire+0xae/0x150 [ 1191.035133][T25154] ? subflow_create_ctx+0x87/0x2a0 [ 1191.035166][T25154] should_failslab+0xc2/0x120 [ 1191.035198][T25154] __kmalloc_cache_noprof+0x68/0x420 [ 1191.035223][T25154] ? tcp_set_ulp+0x267/0x7f0 [ 1191.035257][T25154] subflow_create_ctx+0x87/0x2a0 [ 1191.035288][T25154] subflow_ulp_init+0xc3/0x4d0 [ 1191.035318][T25154] tcp_set_ulp+0x326/0x7f0 [ 1191.035344][T25154] mptcp_subflow_create_socket+0x4ae/0x10a0 [ 1191.035366][T25154] ? __pfx_mark_lock+0x10/0x10 [ 1191.035394][T25154] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1191.035416][T25154] ? find_held_lock+0x2d/0x110 [ 1191.035451][T25154] __mptcp_nmpc_sk+0x184/0x7d0 [ 1191.035473][T25154] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1191.035498][T25154] ? __local_bh_enable_ip+0xa4/0x120 [ 1191.035528][T25154] mptcp_listen+0x135/0x4a0 [ 1191.035552][T25154] ? __pfx_mptcp_listen+0x10/0x10 [ 1191.035583][T25154] __sys_listen_socket+0x114/0x160 [ 1191.035612][T25154] __sys_listen+0xa3/0x110 [ 1191.035641][T25154] __x64_sys_listen+0x53/0x80 [ 1191.035669][T25154] do_syscall_64+0xcd/0x250 [ 1191.035690][T25154] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1191.035717][T25154] RIP: 0033:0x7efed338cde9 [ 1191.035734][T25154] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1191.035756][T25154] RSP: 002b:00007efed428e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 1191.035776][T25154] RAX: ffffffffffffffda RBX: 00007efed35a5fa0 RCX: 00007efed338cde9 [ 1191.035791][T25154] RDX: 0000000000000000 RSI: 0000000000000061 RDI: 0000000000000006 [ 1191.035804][T25154] RBP: 00007efed340e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1191.035817][T25154] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1191.035830][T25154] R13: 0000000000000000 R14: 00007efed35a5fa0 R15: 00007ffdad082318 [ 1191.035858][T25154] [ 1191.262498][ C1] vkms_vblank_simulate: vblank timer overrun [ 1191.873050][T25142] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25142 comm: syz.5.4438) [ 1192.199323][T25172] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25172 comm: syz.5.4447) [ 1192.750327][T25174] FAULT_INJECTION: forcing a failure. [ 1192.750327][T25174] name failslab, interval 1, probability 0, space 0, times 0 [ 1192.824234][T25174] CPU: 0 UID: 0 PID: 25174 Comm: syz.7.4448 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1192.824279][T25174] Tainted: [U]=USER [ 1192.824293][T25174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1192.824309][T25174] Call Trace: [ 1192.824316][T25174] [ 1192.824326][T25174] dump_stack_lvl+0x16c/0x1f0 [ 1192.824370][T25174] should_fail_ex+0x50a/0x650 [ 1192.824401][T25174] ? fs_reclaim_acquire+0xae/0x150 [ 1192.824441][T25174] should_failslab+0xc2/0x120 [ 1192.824472][T25174] __kmalloc_noprof+0xce/0x4f0 [ 1192.824502][T25174] ? lsm_blob_alloc+0x68/0x90 [ 1192.824539][T25174] lsm_blob_alloc+0x68/0x90 [ 1192.824572][T25174] security_sk_alloc+0x30/0x270 [ 1192.824610][T25174] sk_prot_alloc+0xfb/0x2a0 [ 1192.824644][T25174] sk_alloc+0x36/0xb90 [ 1192.824669][T25174] inet6_create+0x380/0x1320 [ 1192.824707][T25174] ? inet6_create+0x5d/0x1320 [ 1192.824747][T25174] __sock_create+0x335/0x8d0 [ 1192.824786][T25174] mptcp_subflow_create_socket+0xf6/0x10a0 [ 1192.824811][T25174] ? __pfx_mark_lock+0x10/0x10 [ 1192.824840][T25174] ? lock_acquire.part.0+0x11b/0x380 [ 1192.824871][T25174] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1192.824897][T25174] ? find_held_lock+0x2d/0x110 [ 1192.824939][T25174] __mptcp_nmpc_sk+0x184/0x7d0 [ 1192.824967][T25174] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1192.824997][T25174] ? __local_bh_enable_ip+0xa4/0x120 [ 1192.825034][T25174] mptcp_listen+0x135/0x4a0 [ 1192.825063][T25174] ? __pfx_mptcp_listen+0x10/0x10 [ 1192.825100][T25174] __sys_listen_socket+0x114/0x160 [ 1192.825136][T25174] __sys_listen+0xa3/0x110 [ 1192.825170][T25174] __x64_sys_listen+0x53/0x80 [ 1192.825207][T25174] do_syscall_64+0xcd/0x250 [ 1192.825232][T25174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1192.825263][T25174] RIP: 0033:0x7f36d598cde9 [ 1192.825281][T25174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1192.825316][T25174] RSP: 002b:00007f36d6863038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 1192.825340][T25174] RAX: ffffffffffffffda RBX: 00007f36d5ba5fa0 RCX: 00007f36d598cde9 [ 1192.825357][T25174] RDX: 0000000000000000 RSI: 0000000000000061 RDI: 0000000000000006 [ 1192.825372][T25174] RBP: 00007f36d5a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1192.825387][T25174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1192.825402][T25174] R13: 0000000000000000 R14: 00007f36d5ba5fa0 R15: 00007ffdbe2d6a68 [ 1192.825435][T25174] [ 1193.143086][T25179] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25179 comm: syz.5.4450) [ 1194.070482][T25192] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25192 comm: syz.5.4453) [ 1194.222494][T25197] FAULT_INJECTION: forcing a failure. [ 1194.222494][T25197] name failslab, interval 1, probability 0, space 0, times 0 [ 1194.235648][T25197] CPU: 1 UID: 0 PID: 25197 Comm: syz.6.4454 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1194.235688][T25197] Tainted: [U]=USER [ 1194.235697][T25197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1194.235713][T25197] Call Trace: [ 1194.235721][T25197] [ 1194.235732][T25197] dump_stack_lvl+0x16c/0x1f0 [ 1194.235774][T25197] should_fail_ex+0x50a/0x650 [ 1194.235803][T25197] ? __pfx_mark_lock+0x10/0x10 [ 1194.235836][T25197] should_failslab+0xc2/0x120 [ 1194.235867][T25197] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 1194.235897][T25197] ? __alloc_skb+0x2b3/0x380 [ 1194.235929][T25197] __alloc_skb+0x2b3/0x380 [ 1194.235954][T25197] ? __pfx___alloc_skb+0x10/0x10 [ 1194.235993][T25197] tipc_buf_acquire+0x26/0xe0 [ 1194.236023][T25197] tipc_msg_create+0x39/0x1d0 [ 1194.236058][T25197] __tipc_shutdown+0xba4/0xef0 [ 1194.236095][T25197] ? __pfx___tipc_shutdown+0x10/0x10 [ 1194.236133][T25197] ? tipc_release+0x67/0x1650 [ 1194.236160][T25197] ? __pfx_lock_release+0x10/0x10 [ 1194.236188][T25197] ? __pfx_woken_wake_function+0x10/0x10 [ 1194.236227][T25197] ? mark_held_locks+0x9f/0xe0 [ 1194.236257][T25197] ? tipc_sk_filtering+0x420/0x520 [ 1194.236290][T25197] tipc_release+0xe5/0x1650 [ 1194.236316][T25197] ? down_write+0x14e/0x200 [ 1194.236342][T25197] ? __pfx_down_write+0x10/0x10 [ 1194.236370][T25197] ? __pfx_locks_remove_file+0x10/0x10 [ 1194.236409][T25197] __sock_release+0xb0/0x270 [ 1194.236439][T25197] ? __pfx_sock_close+0x10/0x10 [ 1194.236465][T25197] sock_close+0x1c/0x30 [ 1194.236491][T25197] __fput+0x3ff/0xb70 [ 1194.236524][T25197] ? _raw_spin_unlock_irq+0x23/0x50 [ 1194.236561][T25197] task_work_run+0x14e/0x250 [ 1194.236590][T25197] ? __pfx_task_work_run+0x10/0x10 [ 1194.236620][T25197] ? __pfx___do_sys_close_range+0x10/0x10 [ 1194.236657][T25197] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1194.236696][T25197] do_syscall_64+0xda/0x250 [ 1194.236722][T25197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1194.236756][T25197] RIP: 0033:0x7efed338cde9 [ 1194.236775][T25197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1194.236799][T25197] RSP: 002b:00007efed428e038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1194.236822][T25197] RAX: 0000000000000000 RBX: 00007efed35a5fa0 RCX: 00007efed338cde9 [ 1194.236838][T25197] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000002 [ 1194.236872][T25197] RBP: 00007efed340e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1194.236888][T25197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1194.236904][T25197] R13: 0000000000000000 R14: 00007efed35a5fa0 R15: 00007ffdad082318 [ 1194.236938][T25197] [ 1194.508791][ C1] vkms_vblank_simulate: vblank timer overrun [ 1194.577017][T25199] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25199 comm: syz.5.4456) [ 1194.755499][T25204] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25204 comm: syz.5.4458) [ 1194.958453][T25211] FAULT_INJECTION: forcing a failure. [ 1194.958453][T25211] name failslab, interval 1, probability 0, space 0, times 0 [ 1195.019755][T25211] CPU: 0 UID: 0 PID: 25211 Comm: syz.7.4460 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1195.019806][T25211] Tainted: [U]=USER [ 1195.019814][T25211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1195.019829][T25211] Call Trace: [ 1195.019836][T25211] [ 1195.019846][T25211] dump_stack_lvl+0x16c/0x1f0 [ 1195.019887][T25211] should_fail_ex+0x50a/0x650 [ 1195.019914][T25211] ? fs_reclaim_acquire+0xae/0x150 [ 1195.019952][T25211] should_failslab+0xc2/0x120 [ 1195.019981][T25211] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1195.020007][T25211] ? alloc_empty_file+0x73/0x1e0 [ 1195.020037][T25211] alloc_empty_file+0x73/0x1e0 [ 1195.020064][T25211] alloc_file_pseudo+0x131/0x220 [ 1195.020093][T25211] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1195.020122][T25211] ? tipc_sk_finish_conn+0x580/0x790 [ 1195.020155][T25211] sock_alloc_file+0x50/0x210 [ 1195.020183][T25211] __sys_socketpair+0x34f/0x5a0 [ 1195.020216][T25211] ? __pfx___sys_socketpair+0x10/0x10 [ 1195.020247][T25211] ? xfd_validate_state+0x5d/0x180 [ 1195.020278][T25211] ? rcu_is_watching+0x12/0xc0 [ 1195.020319][T25211] __x64_sys_socketpair+0x96/0x100 [ 1195.020354][T25211] ? lockdep_hardirqs_on+0x7c/0x110 [ 1195.020388][T25211] do_syscall_64+0xcd/0x250 [ 1195.020412][T25211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1195.020446][T25211] RIP: 0033:0x7f36d598cde9 [ 1195.020465][T25211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1195.020490][T25211] RSP: 002b:00007f36d6863038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1195.020512][T25211] RAX: ffffffffffffffda RBX: 00007f36d5ba5fa0 RCX: 00007f36d598cde9 [ 1195.020526][T25211] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 1195.020540][T25211] RBP: 00007f36d5a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1195.020554][T25211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1195.020568][T25211] R13: 0000000000000000 R14: 00007f36d5ba5fa0 R15: 00007ffdbe2d6a68 [ 1195.020598][T25211] [ 1195.662342][T25218] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25218 comm: syz.5.4459) [ 1195.875939][T25220] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25220 comm: syz.5.4462) [ 1197.095133][T25225] Process accounting paused [ 1197.836174][T25253] FAULT_INJECTION: forcing a failure. [ 1197.836174][T25253] name failslab, interval 1, probability 0, space 0, times 0 [ 1197.873314][T25253] CPU: 1 UID: 0 PID: 25253 Comm: syz.5.4470 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1197.873354][T25253] Tainted: [U]=USER [ 1197.873363][T25253] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1197.873378][T25253] Call Trace: [ 1197.873386][T25253] [ 1197.873396][T25253] dump_stack_lvl+0x16c/0x1f0 [ 1197.873438][T25253] should_fail_ex+0x50a/0x650 [ 1197.873468][T25253] ? fs_reclaim_acquire+0xae/0x150 [ 1197.873509][T25253] should_failslab+0xc2/0x120 [ 1197.873540][T25253] __kmalloc_noprof+0xce/0x4f0 [ 1197.873569][T25253] ? lsm_blob_alloc+0x68/0x90 [ 1197.873606][T25253] lsm_blob_alloc+0x68/0x90 [ 1197.873638][T25253] security_prepare_creds+0x30/0x270 [ 1197.873672][T25253] prepare_creds+0x53e/0x750 [ 1197.873702][T25253] __sys_setreuid+0x101/0xaf0 [ 1197.873738][T25253] do_syscall_64+0xcd/0x250 [ 1197.873764][T25253] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1197.873797][T25253] RIP: 0033:0x7f0f1318cde9 [ 1197.873817][T25253] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1197.873841][T25253] RSP: 002b:00007f0f140a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 1197.873871][T25253] RAX: ffffffffffffffda RBX: 00007f0f133a5fa0 RCX: 00007f0f1318cde9 [ 1197.873889][T25253] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1197.873904][T25253] RBP: 00007f0f1320e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1197.873920][T25253] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1197.873936][T25253] R13: 0000000000000000 R14: 00007f0f133a5fa0 R15: 00007fff20ff9708 [ 1197.873969][T25253] [ 1198.040522][ C1] vkms_vblank_simulate: vblank timer overrun [ 1198.500433][T25258] FAULT_INJECTION: forcing a failure. [ 1198.500433][T25258] name failslab, interval 1, probability 0, space 0, times 0 [ 1198.565389][T25258] CPU: 0 UID: 0 PID: 25258 Comm: syz.6.4471 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1198.565431][T25258] Tainted: [U]=USER [ 1198.565440][T25258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1198.565457][T25258] Call Trace: [ 1198.565465][T25258] [ 1198.565475][T25258] dump_stack_lvl+0x16c/0x1f0 [ 1198.565518][T25258] should_fail_ex+0x50a/0x650 [ 1198.565548][T25258] ? fs_reclaim_acquire+0xae/0x150 [ 1198.565587][T25258] should_failslab+0xc2/0x120 [ 1198.565617][T25258] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1198.565644][T25258] ? lockdep_init_map_type+0x16d/0x7d0 [ 1198.565675][T25258] ? security_inode_alloc+0x3b/0x2b0 [ 1198.565705][T25258] security_inode_alloc+0x3b/0x2b0 [ 1198.565730][T25258] inode_init_always_gfp+0xce4/0x1030 [ 1198.565763][T25258] alloc_inode+0x82/0x230 [ 1198.565804][T25258] new_inode+0x22/0x210 [ 1198.565838][T25258] shmem_get_inode+0x194/0xf00 [ 1198.565875][T25258] shmem_mknod+0x1a8/0x450 [ 1198.565909][T25258] ? __pfx_shmem_create+0x10/0x10 [ 1198.565935][T25258] lookup_open.isra.0+0x11d2/0x1580 [ 1198.565980][T25258] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 1198.566020][T25258] ? workingset_refault+0x660/0x1250 [ 1198.566056][T25258] ? lock_acquire+0x2f/0xb0 [ 1198.566082][T25258] ? path_openat+0x15a4/0x2d80 [ 1198.566112][T25258] ? workingset_refault+0x660/0x1250 [ 1198.566146][T25258] ? __pfx_down_write+0x10/0x10 [ 1198.566171][T25258] ? mnt_get_write_access+0x20c/0x300 [ 1198.566212][T25258] path_openat+0x904/0x2d80 [ 1198.566251][T25258] ? __pfx_path_openat+0x10/0x10 [ 1198.566279][T25258] ? __pfx___lock_acquire+0x10/0x10 [ 1198.566305][T25258] ? lock_acquire.part.0+0x11b/0x380 [ 1198.566333][T25258] ? find_held_lock+0x2d/0x110 [ 1198.566373][T25258] do_filp_open+0x20c/0x470 [ 1198.566400][T25258] ? __pfx_do_filp_open+0x10/0x10 [ 1198.566425][T25258] ? find_held_lock+0x2d/0x110 [ 1198.566484][T25258] ? _raw_spin_unlock+0x28/0x50 [ 1198.566515][T25258] ? alloc_fd+0x41f/0x760 [ 1198.566548][T25258] do_sys_openat2+0x17a/0x1e0 [ 1198.566581][T25258] ? __pfx_do_sys_openat2+0x10/0x10 [ 1198.566613][T25258] ? __pfx___might_resched+0x10/0x10 [ 1198.566651][T25258] __x64_sys_open+0x154/0x1e0 [ 1198.566680][T25258] ? __pfx___x64_sys_open+0x10/0x10 [ 1198.566724][T25258] do_syscall_64+0xcd/0x250 [ 1198.566750][T25258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1198.566791][T25258] RIP: 0033:0x7efed338cde9 [ 1198.566811][T25258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1198.566837][T25258] RSP: 002b:00007efed428e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 1198.566860][T25258] RAX: ffffffffffffffda RBX: 00007efed35a5fa0 RCX: 00007efed338cde9 [ 1198.566878][T25258] RDX: 0000000000000000 RSI: 0000000000064842 RDI: 0000000000000000 [ 1198.566893][T25258] RBP: 00007efed340e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1198.566909][T25258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1198.566923][T25258] R13: 0000000000000000 R14: 00007efed35a5fa0 R15: 00007ffdad082318 [ 1198.566956][T25258] [ 1200.425639][T25302] FAULT_INJECTION: forcing a failure. [ 1200.425639][T25302] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1200.477029][T25302] CPU: 0 UID: 0 PID: 25302 Comm: syz.1.4486 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1200.477069][T25302] Tainted: [U]=USER [ 1200.477077][T25302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1200.477091][T25302] Call Trace: [ 1200.477099][T25302] [ 1200.477109][T25302] dump_stack_lvl+0x16c/0x1f0 [ 1200.477152][T25302] should_fail_ex+0x50a/0x650 [ 1200.477187][T25302] get_futex_key+0x4a3/0x1000 [ 1200.477230][T25302] ? __pfx_get_futex_key+0x10/0x10 [ 1200.477280][T25302] futex_wake+0xe8/0x4e0 [ 1200.477306][T25302] ? lockdep_init_map_type+0x16d/0x7d0 [ 1200.477339][T25302] ? __pfx_futex_wake+0x10/0x10 [ 1200.477368][T25302] ? find_held_lock+0x2d/0x110 [ 1200.477407][T25302] ? fd_install+0x223/0x750 [ 1200.477432][T25302] ? __pfx_lock_release+0x10/0x10 [ 1200.477462][T25302] do_futex+0x1e5/0x350 [ 1200.477486][T25302] ? __pfx_do_futex+0x10/0x10 [ 1200.477513][T25302] ? fd_install+0x242/0x750 [ 1200.477541][T25302] __x64_sys_futex+0x1e1/0x4c0 [ 1200.477570][T25302] ? __pfx___x64_sys_futex+0x10/0x10 [ 1200.477596][T25302] ? rcu_is_watching+0x12/0xc0 [ 1200.477641][T25302] do_syscall_64+0xcd/0x250 [ 1200.477667][T25302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1200.477699][T25302] RIP: 0033:0x7f10ead8cde9 [ 1200.477726][T25302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1200.477750][T25302] RSP: 002b:00007f10ebb6b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1200.477772][T25302] RAX: ffffffffffffffda RBX: 00007f10eafa5fa8 RCX: 00007f10ead8cde9 [ 1200.477788][T25302] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f10eafa5fac [ 1200.477803][T25302] RBP: 00007f10eafa5fa0 R08: 00007f10ebb6c000 R09: 0000000000000000 [ 1200.477819][T25302] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10eafa5fac [ 1200.477834][T25302] R13: 0000000000000000 R14: 00007ffec7fc2270 R15: 00007ffec7fc2358 [ 1200.477866][T25302] [ 1203.882308][T25355] FAULT_INJECTION: forcing a failure. [ 1203.882308][T25355] name failslab, interval 1, probability 0, space 0, times 0 [ 1203.901917][T25355] CPU: 1 UID: 0 PID: 25355 Comm: syz.7.4497 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1203.901961][T25355] Tainted: [U]=USER [ 1203.901969][T25355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1203.901985][T25355] Call Trace: [ 1203.901993][T25355] [ 1203.902003][T25355] dump_stack_lvl+0x16c/0x1f0 [ 1203.902048][T25355] should_fail_ex+0x50a/0x650 [ 1203.902077][T25355] ? fs_reclaim_acquire+0xae/0x150 [ 1203.902118][T25355] should_failslab+0xc2/0x120 [ 1203.902149][T25355] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1203.902175][T25355] ? lockdep_init_map_type+0x16d/0x7d0 [ 1203.902205][T25355] ? security_inode_alloc+0x3b/0x2b0 [ 1203.902232][T25355] security_inode_alloc+0x3b/0x2b0 [ 1203.902256][T25355] inode_init_always_gfp+0xce4/0x1030 [ 1203.902287][T25355] alloc_inode+0x82/0x230 [ 1203.902315][T25355] path_from_stashed+0x560/0xec0 [ 1203.902340][T25355] ? do_raw_spin_lock+0x12d/0x2c0 [ 1203.902375][T25355] ? __pfx_path_from_stashed+0x10/0x10 [ 1203.902398][T25355] ? mntns_get+0x21/0x120 [ 1203.902446][T25355] ? do_raw_spin_unlock+0x172/0x230 [ 1203.902485][T25355] ns_get_path+0x5f/0x80 [ 1203.902508][T25355] proc_ns_get_link+0x122/0x260 [ 1203.902544][T25355] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1203.902584][T25355] ? try_to_unlazy+0x2a1/0x660 [ 1203.902622][T25355] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1203.902658][T25355] step_into+0x1aba/0x2220 [ 1203.902699][T25355] ? __pfx_step_into+0x10/0x10 [ 1203.902740][T25355] ? lookup_fast+0x153/0x5f0 [ 1203.902780][T25355] path_openat+0x74c/0x2d80 [ 1203.902818][T25355] ? __pfx_path_openat+0x10/0x10 [ 1203.902844][T25355] ? __pfx___lock_acquire+0x10/0x10 [ 1203.902870][T25355] ? lock_acquire.part.0+0x11b/0x380 [ 1203.902899][T25355] ? find_held_lock+0x2d/0x110 [ 1203.902938][T25355] do_filp_open+0x20c/0x470 [ 1203.902965][T25355] ? __pfx_do_filp_open+0x10/0x10 [ 1203.902990][T25355] ? find_held_lock+0x2d/0x110 [ 1203.903047][T25355] ? alloc_fd+0x41f/0x760 [ 1203.903082][T25355] do_sys_openat2+0x17a/0x1e0 [ 1203.903113][T25355] ? __pfx_do_sys_openat2+0x10/0x10 [ 1203.903156][T25355] __x64_sys_openat+0x175/0x210 [ 1203.903188][T25355] ? __pfx___x64_sys_openat+0x10/0x10 [ 1203.903233][T25355] do_syscall_64+0xcd/0x250 [ 1203.903259][T25355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1203.903292][T25355] RIP: 0033:0x7f36d598b750 [ 1203.903311][T25355] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1203.903334][T25355] RSP: 002b:00007f36d6862f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1203.903355][T25355] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f36d598b750 [ 1203.903370][T25355] RDX: 0000000000000000 RSI: 00007f36d6862fa0 RDI: 00000000ffffff9c [ 1203.903386][T25355] RBP: 00007f36d6862fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1203.903407][T25355] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1203.903423][T25355] R13: 0000000000000000 R14: 00007f36d5ba5fa0 R15: 00007ffdbe2d6a68 [ 1203.903455][T25355] [ 1204.198989][ C1] vkms_vblank_simulate: vblank timer overrun [ 1206.504137][T25390] FAULT_INJECTION: forcing a failure. [ 1206.504137][T25390] name failslab, interval 1, probability 0, space 0, times 0 [ 1206.535382][T25390] CPU: 0 UID: 0 PID: 25390 Comm: syz.6.4504 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1206.535424][T25390] Tainted: [U]=USER [ 1206.535433][T25390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1206.535448][T25390] Call Trace: [ 1206.535456][T25390] [ 1206.535467][T25390] dump_stack_lvl+0x16c/0x1f0 [ 1206.535511][T25390] should_fail_ex+0x50a/0x650 [ 1206.535540][T25390] ? fs_reclaim_acquire+0xae/0x150 [ 1206.535581][T25390] should_failslab+0xc2/0x120 [ 1206.535612][T25390] __kmalloc_noprof+0xce/0x4f0 [ 1206.535640][T25390] ? lsm_blob_alloc+0x68/0x90 [ 1206.535678][T25390] lsm_blob_alloc+0x68/0x90 [ 1206.535711][T25390] security_sk_alloc+0x30/0x270 [ 1206.535749][T25390] sk_prot_alloc+0xfb/0x2a0 [ 1206.535783][T25390] sk_alloc+0x36/0xb90 [ 1206.535807][T25390] inet6_create+0x380/0x1320 [ 1206.535847][T25390] ? inet6_create+0x5d/0x1320 [ 1206.535888][T25390] __sock_create+0x335/0x8d0 [ 1206.535926][T25390] mptcp_subflow_create_socket+0xf6/0x10a0 [ 1206.535970][T25390] ? __pfx_mark_lock+0x10/0x10 [ 1206.536002][T25390] ? lock_acquire.part.0+0x11b/0x380 [ 1206.536034][T25390] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1206.536062][T25390] ? find_held_lock+0x2d/0x110 [ 1206.536106][T25390] __mptcp_nmpc_sk+0x184/0x7d0 [ 1206.536133][T25390] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1206.536162][T25390] ? __local_bh_enable_ip+0xa4/0x120 [ 1206.536196][T25390] mptcp_listen+0x135/0x4a0 [ 1206.536235][T25390] ? __pfx_mptcp_listen+0x10/0x10 [ 1206.536275][T25390] __sys_listen_socket+0x114/0x160 [ 1206.536311][T25390] __sys_listen+0xa3/0x110 [ 1206.536346][T25390] __x64_sys_listen+0x53/0x80 [ 1206.536381][T25390] do_syscall_64+0xcd/0x250 [ 1206.536407][T25390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1206.536439][T25390] RIP: 0033:0x7efed338cde9 [ 1206.536459][T25390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1206.536484][T25390] RSP: 002b:00007efed428e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 1206.536507][T25390] RAX: ffffffffffffffda RBX: 00007efed35a5fa0 RCX: 00007efed338cde9 [ 1206.536524][T25390] RDX: 0000000000000000 RSI: 0000000000000061 RDI: 0000000000000006 [ 1206.536538][T25390] RBP: 00007efed340e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1206.536553][T25390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1206.536568][T25390] R13: 0000000000000000 R14: 00007efed35a5fa0 R15: 00007ffdad082318 [ 1206.536602][T25390] [ 1207.140551][T25401] FAULT_INJECTION: forcing a failure. [ 1207.140551][T25401] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1207.185439][T25401] CPU: 0 UID: 0 PID: 25401 Comm: syz.5.4508 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1207.185479][T25401] Tainted: [U]=USER [ 1207.185486][T25401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1207.185500][T25401] Call Trace: [ 1207.185506][T25401] [ 1207.185519][T25401] dump_stack_lvl+0x16c/0x1f0 [ 1207.185559][T25401] should_fail_ex+0x50a/0x650 [ 1207.185585][T25401] ? __pfx_stack_trace_save+0x10/0x10 [ 1207.185624][T25401] get_futex_key+0x4a3/0x1000 [ 1207.185660][T25401] ? __pfx_get_futex_key+0x10/0x10 [ 1207.185692][T25401] ? kasan_save_track+0x14/0x30 [ 1207.185715][T25401] ? hlock_class+0x4e/0x130 [ 1207.185744][T25401] ? mark_lock+0xb5/0xc60 [ 1207.185764][T25401] ? __sys_socketpair+0x34f/0x5a0 [ 1207.185791][T25401] ? __x64_sys_socketpair+0x96/0x100 [ 1207.185818][T25401] ? do_syscall_64+0xcd/0x250 [ 1207.185836][T25401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.185869][T25401] futex_wait_setup+0x78/0x290 [ 1207.185901][T25401] __futex_wait+0x267/0x3c0 [ 1207.185927][T25401] ? __pfx___futex_wait+0x10/0x10 [ 1207.185956][T25401] ? __pfx_futex_wake_mark+0x10/0x10 [ 1207.185991][T25401] futex_wait+0xe9/0x380 [ 1207.186015][T25401] ? __pfx_futex_wait+0x10/0x10 [ 1207.186046][T25401] ? fd_install+0x223/0x750 [ 1207.186067][T25401] ? __pfx_lock_release+0x10/0x10 [ 1207.186093][T25401] do_futex+0x22b/0x350 [ 1207.186113][T25401] ? __pfx_do_futex+0x10/0x10 [ 1207.186135][T25401] ? fd_install+0x242/0x750 [ 1207.186157][T25401] __x64_sys_futex+0x1e1/0x4c0 [ 1207.186189][T25401] ? __pfx___x64_sys_futex+0x10/0x10 [ 1207.186212][T25401] ? rcu_is_watching+0x12/0xc0 [ 1207.186251][T25401] do_syscall_64+0xcd/0x250 [ 1207.186273][T25401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1207.186301][T25401] RIP: 0033:0x7f0f1318cde9 [ 1207.186317][T25401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1207.186337][T25401] RSP: 002b:00007f0f140a00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1207.186357][T25401] RAX: ffffffffffffffda RBX: 00007f0f133a5fa8 RCX: 00007f0f1318cde9 [ 1207.186370][T25401] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0f133a5fa8 [ 1207.186383][T25401] RBP: 00007f0f133a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1207.186395][T25401] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0f133a5fac [ 1207.186409][T25401] R13: 0000000000000000 R14: 00007fff20ff9620 R15: 00007fff20ff9708 [ 1207.186434][T25401] [ 1207.615509][T15889] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 1207.615549][T15889] Bluetooth: hci4: unexpected subevent 0x0c length: 725 > 5 [ 1209.126020][T25429] FAULT_INJECTION: forcing a failure. [ 1209.126020][T25429] name failslab, interval 1, probability 0, space 0, times 0 [ 1209.147446][T25429] CPU: 0 UID: 0 PID: 25429 Comm: syz.5.4514 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1209.147487][T25429] Tainted: [U]=USER [ 1209.147496][T25429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1209.147511][T25429] Call Trace: [ 1209.147519][T25429] [ 1209.147529][T25429] dump_stack_lvl+0x16c/0x1f0 [ 1209.147572][T25429] should_fail_ex+0x50a/0x650 [ 1209.147601][T25429] ? fs_reclaim_acquire+0xae/0x150 [ 1209.147642][T25429] should_failslab+0xc2/0x120 [ 1209.147673][T25429] __kmalloc_noprof+0xce/0x4f0 [ 1209.147701][T25429] ? lsm_blob_alloc+0x68/0x90 [ 1209.147739][T25429] lsm_blob_alloc+0x68/0x90 [ 1209.147771][T25429] security_sk_alloc+0x30/0x270 [ 1209.147810][T25429] sk_prot_alloc+0xfb/0x2a0 [ 1209.147844][T25429] sk_alloc+0x36/0xb90 [ 1209.147868][T25429] inet6_create+0x380/0x1320 [ 1209.147906][T25429] ? inet6_create+0x5d/0x1320 [ 1209.147947][T25429] __sock_create+0x335/0x8d0 [ 1209.147986][T25429] mptcp_subflow_create_socket+0xf6/0x10a0 [ 1209.148019][T25429] ? __pfx_mark_lock+0x10/0x10 [ 1209.148050][T25429] ? lock_acquire.part.0+0x11b/0x380 [ 1209.148083][T25429] ? __pfx_mptcp_subflow_create_socket+0x10/0x10 [ 1209.148111][T25429] ? find_held_lock+0x2d/0x110 [ 1209.148158][T25429] __mptcp_nmpc_sk+0x184/0x7d0 [ 1209.148187][T25429] ? __pfx___mptcp_nmpc_sk+0x10/0x10 [ 1209.148218][T25429] ? __local_bh_enable_ip+0xa4/0x120 [ 1209.148255][T25429] mptcp_listen+0x135/0x4a0 [ 1209.148285][T25429] ? __pfx_mptcp_listen+0x10/0x10 [ 1209.148323][T25429] __sys_listen_socket+0x114/0x160 [ 1209.148359][T25429] __sys_listen+0xa3/0x110 [ 1209.148394][T25429] __x64_sys_listen+0x53/0x80 [ 1209.148428][T25429] do_syscall_64+0xcd/0x250 [ 1209.148453][T25429] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1209.148482][T25429] RIP: 0033:0x7f0f1318cde9 [ 1209.148502][T25429] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1209.148526][T25429] RSP: 002b:00007f0f140a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000032 [ 1209.148550][T25429] RAX: ffffffffffffffda RBX: 00007f0f133a5fa0 RCX: 00007f0f1318cde9 [ 1209.148564][T25429] RDX: 0000000000000000 RSI: 0000000000000061 RDI: 0000000000000005 [ 1209.148579][T25429] RBP: 00007f0f1320e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1209.148593][T25429] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1209.148608][T25429] R13: 0000000000000000 R14: 00007f0f133a5fa0 R15: 00007fff20ff9708 [ 1209.148641][T25429] [ 1212.422361][T25459] FAULT_INJECTION: forcing a failure. [ 1212.422361][T25459] name failslab, interval 1, probability 0, space 0, times 0 [ 1212.422399][T25459] CPU: 1 UID: 0 PID: 25459 Comm: syz.5.4521 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1212.422436][T25459] Tainted: [U]=USER [ 1212.422444][T25459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1212.422459][T25459] Call Trace: [ 1212.422467][T25459] [ 1212.422477][T25459] dump_stack_lvl+0x16c/0x1f0 [ 1212.422517][T25459] should_fail_ex+0x50a/0x650 [ 1212.422547][T25459] ? fs_reclaim_acquire+0xae/0x150 [ 1212.422589][T25459] should_failslab+0xc2/0x120 [ 1212.422621][T25459] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1212.422647][T25459] ? lockdep_init_map_type+0x16d/0x7d0 [ 1212.422677][T25459] ? security_inode_alloc+0x3b/0x2b0 [ 1212.422704][T25459] security_inode_alloc+0x3b/0x2b0 [ 1212.422728][T25459] inode_init_always_gfp+0xce4/0x1030 [ 1212.422757][T25459] alloc_inode+0x82/0x230 [ 1212.422796][T25459] path_from_stashed+0x560/0xec0 [ 1212.422821][T25459] ? do_raw_spin_lock+0x12d/0x2c0 [ 1212.422859][T25459] ? __pfx_path_from_stashed+0x10/0x10 [ 1212.422883][T25459] ? mntns_get+0x21/0x120 [ 1212.422918][T25459] ? do_raw_spin_unlock+0x172/0x230 [ 1212.422956][T25459] ns_get_path+0x5f/0x80 [ 1212.422980][T25459] proc_ns_get_link+0x122/0x260 [ 1212.423016][T25459] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1212.423056][T25459] ? try_to_unlazy+0x2a1/0x660 [ 1212.423096][T25459] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1212.423135][T25459] step_into+0x1aba/0x2220 [ 1212.423177][T25459] ? __pfx_step_into+0x10/0x10 [ 1212.423219][T25459] ? lookup_fast+0x153/0x5f0 [ 1212.423259][T25459] path_openat+0x74c/0x2d80 [ 1212.423296][T25459] ? __pfx_path_openat+0x10/0x10 [ 1212.423321][T25459] ? __pfx___lock_acquire+0x10/0x10 [ 1212.423347][T25459] ? lock_acquire.part.0+0x11b/0x380 [ 1212.423375][T25459] ? find_held_lock+0x2d/0x110 [ 1212.423415][T25459] do_filp_open+0x20c/0x470 [ 1212.423442][T25459] ? __pfx_do_filp_open+0x10/0x10 [ 1212.423466][T25459] ? find_held_lock+0x2d/0x110 [ 1212.423520][T25459] ? alloc_fd+0x41f/0x760 [ 1212.423555][T25459] do_sys_openat2+0x17a/0x1e0 [ 1212.423586][T25459] ? __pfx_do_sys_openat2+0x10/0x10 [ 1212.423630][T25459] __x64_sys_openat+0x175/0x210 [ 1212.423664][T25459] ? __pfx___x64_sys_openat+0x10/0x10 [ 1212.423709][T25459] do_syscall_64+0xcd/0x250 [ 1212.423736][T25459] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1212.423765][T25459] RIP: 0033:0x7f0f1318b750 [ 1212.423793][T25459] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1212.423818][T25459] RSP: 002b:00007f0f1409ff10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1212.423841][T25459] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f0f1318b750 [ 1212.423857][T25459] RDX: 0000000000000000 RSI: 00007f0f1409ffa0 RDI: 00000000ffffff9c [ 1212.423872][T25459] RBP: 00007f0f1409ffa0 R08: 0000000000000000 R09: 0000000000000000 [ 1212.423885][T25459] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1212.423900][T25459] R13: 0000000000000000 R14: 00007f0f133a5fa0 R15: 00007fff20ff9708 [ 1212.423930][T25459] [ 1214.291617][T25491] FAULT_INJECTION: forcing a failure. [ 1214.291617][T25491] name failslab, interval 1, probability 0, space 0, times 0 [ 1214.356409][T25491] CPU: 0 UID: 0 PID: 25491 Comm: syz.7.4531 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1214.356451][T25491] Tainted: [U]=USER [ 1214.356459][T25491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1214.356475][T25491] Call Trace: [ 1214.356483][T25491] [ 1214.356492][T25491] dump_stack_lvl+0x16c/0x1f0 [ 1214.356536][T25491] should_fail_ex+0x50a/0x650 [ 1214.356565][T25491] ? fs_reclaim_acquire+0xae/0x150 [ 1214.356606][T25491] should_failslab+0xc2/0x120 [ 1214.356636][T25491] __kmalloc_noprof+0xce/0x4f0 [ 1214.356664][T25491] ? lsm_blob_alloc+0x68/0x90 [ 1214.356701][T25491] lsm_blob_alloc+0x68/0x90 [ 1214.356733][T25491] security_prepare_creds+0x30/0x270 [ 1214.356766][T25491] prepare_creds+0x53e/0x750 [ 1214.356795][T25491] __sys_setreuid+0x101/0xaf0 [ 1214.356831][T25491] do_syscall_64+0xcd/0x250 [ 1214.356857][T25491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1214.356890][T25491] RIP: 0033:0x7f36d598cde9 [ 1214.356909][T25491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1214.356933][T25491] RSP: 002b:00007f36d6863038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 1214.356955][T25491] RAX: ffffffffffffffda RBX: 00007f36d5ba5fa0 RCX: 00007f36d598cde9 [ 1214.356972][T25491] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1214.356986][T25491] RBP: 00007f36d5a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1214.357001][T25491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1214.357016][T25491] R13: 0000000000000000 R14: 00007f36d5ba5fa0 R15: 00007ffdbe2d6a68 [ 1214.357048][T25491] [ 1216.174305][T25514] FAULT_INJECTION: forcing a failure. [ 1216.174305][T25514] name failslab, interval 1, probability 0, space 0, times 0 [ 1216.194982][T25514] CPU: 0 UID: 0 PID: 25514 Comm: syz.7.4535 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1216.195024][T25514] Tainted: [U]=USER [ 1216.195033][T25514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1216.195048][T25514] Call Trace: [ 1216.195057][T25514] [ 1216.195067][T25514] dump_stack_lvl+0x16c/0x1f0 [ 1216.195111][T25514] should_fail_ex+0x50a/0x650 [ 1216.195140][T25514] ? fs_reclaim_acquire+0xae/0x150 [ 1216.195181][T25514] should_failslab+0xc2/0x120 [ 1216.195215][T25514] __kmalloc_noprof+0xce/0x4f0 [ 1216.195258][T25514] ? rcu_is_watching+0x12/0xc0 [ 1216.195291][T25514] ? tomoyo_encode2+0x100/0x3e0 [ 1216.195324][T25514] tomoyo_encode2+0x100/0x3e0 [ 1216.195358][T25514] tomoyo_realpath_from_path+0x1a7/0x710 [ 1216.195397][T25514] tomoyo_check_open_permission+0x2ad/0x3c0 [ 1216.195423][T25514] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1216.195483][T25514] ? __pfx_hook_file_open+0x10/0x10 [ 1216.195515][T25514] ? lock_acquire+0x2f/0xb0 [ 1216.195546][T25514] tomoyo_file_open+0x6b/0x90 [ 1216.195580][T25514] security_file_open+0x84/0x1e0 [ 1216.195607][T25514] do_dentry_open+0x57c/0x1c40 [ 1216.195631][T25514] ? inode_permission+0xdd/0x5f0 [ 1216.195664][T25514] vfs_open+0x82/0x3f0 [ 1216.195690][T25514] ? may_open+0x1f2/0x400 [ 1216.195718][T25514] path_openat+0x1e88/0x2d80 [ 1216.195755][T25514] ? __pfx_path_openat+0x10/0x10 [ 1216.195777][T25514] ? __pfx___lock_acquire+0x10/0x10 [ 1216.195803][T25514] ? lock_acquire.part.0+0x11b/0x380 [ 1216.195830][T25514] ? find_held_lock+0x2d/0x110 [ 1216.195865][T25514] do_filp_open+0x20c/0x470 [ 1216.195890][T25514] ? __pfx_do_filp_open+0x10/0x10 [ 1216.195910][T25514] ? find_held_lock+0x2d/0x110 [ 1216.195964][T25514] ? alloc_fd+0x41f/0x760 [ 1216.195996][T25514] do_sys_openat2+0x17a/0x1e0 [ 1216.196024][T25514] ? __pfx_do_sys_openat2+0x10/0x10 [ 1216.196066][T25514] __x64_sys_openat+0x175/0x210 [ 1216.196095][T25514] ? __pfx___x64_sys_openat+0x10/0x10 [ 1216.196135][T25514] do_syscall_64+0xcd/0x250 [ 1216.196161][T25514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1216.196194][T25514] RIP: 0033:0x7f36d598b750 [ 1216.196212][T25514] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1216.196234][T25514] RSP: 002b:00007f36d6862f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1216.196257][T25514] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f36d598b750 [ 1216.196272][T25514] RDX: 0000000000000000 RSI: 00007f36d6862fa0 RDI: 00000000ffffff9c [ 1216.196287][T25514] RBP: 00007f36d6862fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1216.196300][T25514] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1216.196313][T25514] R13: 0000000000000000 R14: 00007f36d5ba5fa0 R15: 00007ffdbe2d6a68 [ 1216.196343][T25514] [ 1216.728904][T25514] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1218.595875][T25534] netlink: 1204 bytes leftover after parsing attributes in process `syz.6.4548'. [ 1218.642520][T25534] netlink: 8 bytes leftover after parsing attributes in process `syz.6.4548'. [ 1219.769625][T25553] FAULT_INJECTION: forcing a failure. [ 1219.769625][T25553] name failslab, interval 1, probability 0, space 0, times 0 [ 1219.809885][T25553] CPU: 1 UID: 0 PID: 25553 Comm: syz.6.4543 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1219.809926][T25553] Tainted: [U]=USER [ 1219.809935][T25553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1219.809950][T25553] Call Trace: [ 1219.809958][T25553] [ 1219.809968][T25553] dump_stack_lvl+0x16c/0x1f0 [ 1219.810017][T25553] should_fail_ex+0x50a/0x650 [ 1219.810047][T25553] ? fs_reclaim_acquire+0xae/0x150 [ 1219.810088][T25553] should_failslab+0xc2/0x120 [ 1219.810118][T25553] __kmalloc_noprof+0xce/0x4f0 [ 1219.810146][T25553] ? lsm_blob_alloc+0x68/0x90 [ 1219.810183][T25553] lsm_blob_alloc+0x68/0x90 [ 1219.810215][T25553] security_prepare_creds+0x30/0x270 [ 1219.810248][T25553] prepare_creds+0x53e/0x750 [ 1219.810276][T25553] __sys_setreuid+0x101/0xaf0 [ 1219.810311][T25553] do_syscall_64+0xcd/0x250 [ 1219.810336][T25553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1219.810368][T25553] RIP: 0033:0x7efed338cde9 [ 1219.810387][T25553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1219.810410][T25553] RSP: 002b:00007efed428e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 1219.810432][T25553] RAX: ffffffffffffffda RBX: 00007efed35a5fa0 RCX: 00007efed338cde9 [ 1219.810448][T25553] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1219.810462][T25553] RBP: 00007efed340e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1219.810477][T25553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1219.810491][T25553] R13: 0000000000000000 R14: 00007efed35a5fa0 R15: 00007ffdad082318 [ 1219.810522][T25553] [ 1219.980756][ C1] vkms_vblank_simulate: vblank timer overrun [ 1220.979300][T25566] FAULT_INJECTION: forcing a failure. [ 1220.979300][T25566] name failslab, interval 1, probability 0, space 0, times 0 [ 1221.035288][T25566] CPU: 0 UID: 0 PID: 25566 Comm: syz.1.4547 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1221.035335][T25566] Tainted: [U]=USER [ 1221.035344][T25566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1221.035359][T25566] Call Trace: [ 1221.035367][T25566] [ 1221.035377][T25566] dump_stack_lvl+0x16c/0x1f0 [ 1221.035421][T25566] should_fail_ex+0x50a/0x650 [ 1221.035449][T25566] ? fs_reclaim_acquire+0xae/0x150 [ 1221.035491][T25566] should_failslab+0xc2/0x120 [ 1221.035521][T25566] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 1221.035551][T25566] ? __d_alloc+0x35/0x8c0 [ 1221.035584][T25566] __d_alloc+0x35/0x8c0 [ 1221.035615][T25566] path_from_stashed+0x7a2/0xec0 [ 1221.035646][T25566] ? __pfx_path_from_stashed+0x10/0x10 [ 1221.035670][T25566] ? mntns_get+0x21/0x120 [ 1221.035704][T25566] ? do_raw_spin_unlock+0x172/0x230 [ 1221.035743][T25566] ns_get_path+0x5f/0x80 [ 1221.035766][T25566] proc_ns_get_link+0x122/0x260 [ 1221.035803][T25566] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1221.035840][T25566] ? try_to_unlazy+0x2a1/0x660 [ 1221.035876][T25566] ? __pfx_proc_ns_get_link+0x10/0x10 [ 1221.035911][T25566] step_into+0x1aba/0x2220 [ 1221.035951][T25566] ? __pfx_step_into+0x10/0x10 [ 1221.035991][T25566] ? lookup_fast+0x153/0x5f0 [ 1221.036031][T25566] path_openat+0x74c/0x2d80 [ 1221.036068][T25566] ? __pfx_path_openat+0x10/0x10 [ 1221.036094][T25566] ? __pfx___lock_acquire+0x10/0x10 [ 1221.036120][T25566] ? lock_acquire.part.0+0x11b/0x380 [ 1221.036148][T25566] ? find_held_lock+0x2d/0x110 [ 1221.036193][T25566] do_filp_open+0x20c/0x470 [ 1221.036221][T25566] ? __pfx_do_filp_open+0x10/0x10 [ 1221.036246][T25566] ? find_held_lock+0x2d/0x110 [ 1221.036303][T25566] ? alloc_fd+0x41f/0x760 [ 1221.036337][T25566] do_sys_openat2+0x17a/0x1e0 [ 1221.036368][T25566] ? __pfx_do_sys_openat2+0x10/0x10 [ 1221.036411][T25566] __x64_sys_openat+0x175/0x210 [ 1221.036443][T25566] ? __pfx___x64_sys_openat+0x10/0x10 [ 1221.036487][T25566] do_syscall_64+0xcd/0x250 [ 1221.036512][T25566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1221.036544][T25566] RIP: 0033:0x7f10ead8b750 [ 1221.036563][T25566] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1221.036589][T25566] RSP: 002b:00007f10ebb6af10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1221.036612][T25566] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f10ead8b750 [ 1221.036628][T25566] RDX: 0000000000000000 RSI: 00007f10ebb6afa0 RDI: 00000000ffffff9c [ 1221.036643][T25566] RBP: 00007f10ebb6afa0 R08: 0000000000000000 R09: 0000000000000000 [ 1221.036658][T25566] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1221.036673][T25566] R13: 0000000000000000 R14: 00007f10eafa5fa0 R15: 00007ffec7fc2358 [ 1221.036704][T25566] [ 1227.590815][T25645] Process accounting resumed [ 1227.616629][T25645] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25645 comm: syz.5.4567) [ 1227.889292][T25652] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25652 comm: syz.5.4569) [ 1229.471805][T25657] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25657 comm: syz.5.4574) [ 1230.498869][T25678] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25678 comm: syz.5.4577) [ 1230.763084][T25674] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25674 comm: syz.5.4577) [ 1231.895405][T25691] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25691 comm: syz.5.4581) [ 1233.193301][T25714] FAULT_INJECTION: forcing a failure. [ 1233.193301][T25714] name failslab, interval 1, probability 0, space 0, times 0 [ 1233.277492][T25709] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25709 comm: syz.5.4584) [ 1233.295249][T25714] CPU: 0 UID: 0 PID: 25714 Comm: syz.6.4586 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1233.295288][T25714] Tainted: [U]=USER [ 1233.295296][T25714] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1233.295308][T25714] Call Trace: [ 1233.295315][T25714] [ 1233.295324][T25714] dump_stack_lvl+0x16c/0x1f0 [ 1233.295366][T25714] should_fail_ex+0x50a/0x650 [ 1233.295394][T25714] ? fs_reclaim_acquire+0xae/0x150 [ 1233.295429][T25714] should_failslab+0xc2/0x120 [ 1233.295454][T25714] __kmalloc_noprof+0xce/0x4f0 [ 1233.295477][T25714] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1233.295505][T25714] ? tomoyo_realpath_from_path+0xbf/0x710 [ 1233.295534][T25714] ? rcu_is_watching+0x12/0xc0 [ 1233.295569][T25714] tomoyo_realpath_from_path+0xbf/0x710 [ 1233.295606][T25714] tomoyo_check_open_permission+0x2ad/0x3c0 [ 1233.295631][T25714] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1233.295687][T25714] ? __pfx_hook_file_open+0x10/0x10 [ 1233.295714][T25714] ? lock_acquire+0x2f/0xb0 [ 1233.295744][T25714] tomoyo_file_open+0x6b/0x90 [ 1233.295777][T25714] security_file_open+0x84/0x1e0 [ 1233.295806][T25714] do_dentry_open+0x57c/0x1c40 [ 1233.295835][T25714] ? inode_permission+0xdd/0x5f0 [ 1233.295870][T25714] vfs_open+0x82/0x3f0 [ 1233.295898][T25714] ? may_open+0x1f2/0x400 [ 1233.295932][T25714] path_openat+0x1e88/0x2d80 [ 1233.295971][T25714] ? __pfx_path_openat+0x10/0x10 [ 1233.295996][T25714] ? __pfx___lock_acquire+0x10/0x10 [ 1233.296033][T25714] ? lock_acquire.part.0+0x11b/0x380 [ 1233.296063][T25714] ? find_held_lock+0x2d/0x110 [ 1233.296104][T25714] do_filp_open+0x20c/0x470 [ 1233.296131][T25714] ? __pfx_do_filp_open+0x10/0x10 [ 1233.296155][T25714] ? find_held_lock+0x2d/0x110 [ 1233.296212][T25714] ? alloc_fd+0x41f/0x760 [ 1233.296246][T25714] do_sys_openat2+0x17a/0x1e0 [ 1233.296275][T25714] ? __pfx_do_sys_openat2+0x10/0x10 [ 1233.296319][T25714] __x64_sys_openat+0x175/0x210 [ 1233.296350][T25714] ? __pfx___x64_sys_openat+0x10/0x10 [ 1233.296395][T25714] do_syscall_64+0xcd/0x250 [ 1233.296421][T25714] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1233.296454][T25714] RIP: 0033:0x7efed338b750 [ 1233.296474][T25714] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 1233.296497][T25714] RSP: 002b:00007efed428df10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 1233.296520][T25714] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007efed338b750 [ 1233.296536][T25714] RDX: 0000000000000000 RSI: 00007efed428dfa0 RDI: 00000000ffffff9c [ 1233.296552][T25714] RBP: 00007efed428dfa0 R08: 0000000000000000 R09: 0000000000000000 [ 1233.296567][T25714] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 1233.296581][T25714] R13: 0000000000000000 R14: 00007efed35a5fa0 R15: 00007ffdad082318 [ 1233.296612][T25714] [ 1233.296622][T25714] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1234.175471][T25726] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25726 comm: syz.5.4589) [ 1235.718861][T25734] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25734 comm: syz.5.4592) [ 1236.127571][T25769] FAULT_INJECTION: forcing a failure. [ 1236.127571][T25769] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1236.212382][T25769] CPU: 1 UID: 0 PID: 25769 Comm: syz.5.4596 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1236.212426][T25769] Tainted: [U]=USER [ 1236.212435][T25769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1236.212450][T25769] Call Trace: [ 1236.212458][T25769] [ 1236.212468][T25769] dump_stack_lvl+0x16c/0x1f0 [ 1236.212511][T25769] should_fail_ex+0x50a/0x650 [ 1236.212538][T25769] ? __pfx___might_resched+0x10/0x10 [ 1236.212575][T25769] should_fail_alloc_page+0xe7/0x130 [ 1236.212607][T25769] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1236.212652][T25769] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 1236.212684][T25769] ? hlock_class+0x4e/0x130 [ 1236.212718][T25769] ? mark_lock+0xb5/0xc60 [ 1236.212757][T25769] ? __pfx_mark_lock+0x10/0x10 [ 1236.212789][T25769] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1236.212823][T25769] ? hlock_class+0x4e/0x130 [ 1236.212858][T25769] ? mark_lock+0xb5/0xc60 [ 1236.212887][T25769] ? hlock_class+0x4e/0x130 [ 1236.212931][T25769] ? hlock_class+0x4e/0x130 [ 1236.212966][T25769] ? __lock_acquire+0xcc5/0x3c40 [ 1236.212995][T25769] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1236.213029][T25769] ? policy_nodemask+0xea/0x4e0 [ 1236.213063][T25769] alloc_pages_mpol+0x1fc/0x540 [ 1236.213094][T25769] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1236.213125][T25769] ? __lock_acquire+0x15a9/0x3c40 [ 1236.213159][T25769] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1236.213196][T25769] vma_alloc_folio_noprof+0xee/0x1b0 [ 1236.213229][T25769] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1236.213263][T25769] ? find_held_lock+0x2d/0x110 [ 1236.213305][T25769] do_pte_missing+0x202f/0x3e10 [ 1236.213346][T25769] __handle_mm_fault+0x1166/0x2c60 [ 1236.213384][T25769] ? __pfx___handle_mm_fault+0x10/0x10 [ 1236.213409][T25769] ? follow_page_pte+0x3ac/0x1490 [ 1236.213434][T25769] ? __pfx_lock_release+0x10/0x10 [ 1236.213489][T25769] handle_mm_fault+0x3fa/0xaa0 [ 1236.213523][T25769] __get_user_pages+0x773/0x36f0 [ 1236.213558][T25769] ? __pfx_mt_find+0x10/0x10 [ 1236.213593][T25769] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1236.213623][T25769] ? __pfx___get_user_pages+0x10/0x10 [ 1236.213652][T25769] ? __mm_populate+0x21d/0x380 [ 1236.213687][T25769] populate_vma_page_range+0x27f/0x3a0 [ 1236.213717][T25769] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1236.213766][T25769] ? __pfx_find_vma_intersection+0x10/0x10 [ 1236.213807][T25769] ? vm_mmap_pgoff+0x29b/0x3a0 [ 1236.213840][T25769] __mm_populate+0x1d6/0x380 [ 1236.213871][T25769] ? __pfx___mm_populate+0x10/0x10 [ 1236.213902][T25769] ? up_write+0x1b2/0x520 [ 1236.213936][T25769] vm_mmap_pgoff+0x2d3/0x3a0 [ 1236.213966][T25769] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1236.213997][T25769] ? __x64_sys_futex+0x1e1/0x4c0 [ 1236.214019][T25769] ? __x64_sys_futex+0x1ea/0x4c0 [ 1236.214049][T25769] ksys_mmap_pgoff+0x7d/0x5c0 [ 1236.214085][T25769] ? rcu_is_watching+0x12/0xc0 [ 1236.214124][T25769] __x64_sys_mmap+0x125/0x190 [ 1236.214160][T25769] do_syscall_64+0xcd/0x250 [ 1236.214187][T25769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1236.214219][T25769] RIP: 0033:0x7f0f1318cde9 [ 1236.214240][T25769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1236.214263][T25769] RSP: 002b:00007f0f140a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1236.214286][T25769] RAX: ffffffffffffffda RBX: 00007f0f133a5fa0 RCX: 00007f0f1318cde9 [ 1236.214303][T25769] RDX: 00000000000000df RSI: 0000000000840009 RDI: 0000000000000000 [ 1236.214319][T25769] RBP: 00007f0f1320e2a0 R08: 0000000000000007 R09: 0000000000028000 [ 1236.214335][T25769] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1236.214350][T25769] R13: 0000000000000000 R14: 00007f0f133a5fa0 R15: 00007fff20ff9708 [ 1236.214384][T25769] [ 1236.579920][ C1] vkms_vblank_simulate: vblank timer overrun [ 1239.191919][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.198454][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.364462][T25769] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25769 comm: syz.5.4596) [ 1240.454953][T25802] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25802 comm: syz.5.4605) [ 1241.033457][T25813] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25813 comm: syz.5.4607) [ 1241.782948][T25833] netlink: 338 bytes leftover after parsing attributes in process `syz.1.4612'. [ 1241.933391][T25834] FAULT_INJECTION: forcing a failure. [ 1241.933391][T25834] name failslab, interval 1, probability 0, space 0, times 0 [ 1241.933445][T25834] CPU: 0 UID: 0 PID: 25834 Comm: syz.7.4611 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1241.933477][T25834] Tainted: [U]=USER [ 1241.933485][T25834] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1241.933499][T25834] Call Trace: [ 1241.933506][T25834] [ 1241.933515][T25834] dump_stack_lvl+0x16c/0x1f0 [ 1241.933553][T25834] should_fail_ex+0x50a/0x650 [ 1241.933581][T25834] ? fs_reclaim_acquire+0xae/0x150 [ 1241.933618][T25834] should_failslab+0xc2/0x120 [ 1241.933646][T25834] __kmalloc_noprof+0xce/0x4f0 [ 1241.933672][T25834] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1241.933699][T25834] ? tomoyo_realpath_from_path+0xbf/0x710 [ 1241.933733][T25834] tomoyo_realpath_from_path+0xbf/0x710 [ 1241.933764][T25834] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1241.933796][T25834] tomoyo_path_number_perm+0x248/0x5b0 [ 1241.933818][T25834] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1241.933846][T25834] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1241.933902][T25834] ? __pfx_lock_release+0x10/0x10 [ 1241.933927][T25834] ? trace_lock_acquire+0x14e/0x1f0 [ 1241.933953][T25834] ? lock_acquire+0x2f/0xb0 [ 1241.933977][T25834] ? __fget_files+0x40/0x3a0 [ 1241.934006][T25834] ? __fget_files+0x206/0x3a0 [ 1241.934035][T25834] security_file_ioctl+0x9b/0x240 [ 1241.934062][T25834] __x64_sys_ioctl+0xb7/0x200 [ 1241.934096][T25834] do_syscall_64+0xcd/0x250 [ 1241.934121][T25834] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1241.934152][T25834] RIP: 0033:0x7f36d598cde9 [ 1241.934170][T25834] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1241.934191][T25834] RSP: 002b:00007f36d6842038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1241.934213][T25834] RAX: ffffffffffffffda RBX: 00007f36d5ba6080 RCX: 00007f36d598cde9 [ 1241.934228][T25834] RDX: 0000400000000040 RSI: 0000000000005412 RDI: 0000000000000003 [ 1241.934242][T25834] RBP: 00007f36d6842090 R08: 0000000000000000 R09: 0000000000000000 [ 1241.934256][T25834] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1241.934270][T25834] R13: 0000000000000000 R14: 00007f36d5ba6080 R15: 00007ffdbe2d6a68 [ 1241.934301][T25834] [ 1241.934311][T25834] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1242.563861][T25824] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25824 comm: syz.5.4610) [ 1243.751769][T25841] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25841 comm: syz.5.4615) [ 1245.528837][T25856] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25856 comm: syz.5.4618) [ 1248.780052][T25872] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25872 comm: syz.5.4623) [ 1249.488651][T25904] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25904 comm: syz.5.4633) [ 1249.787502][T25909] tipc: Started in network mode [ 1249.792456][T25909] tipc: Node identity ee00, cluster identity 4711 [ 1249.856279][T25909] tipc: Node number set to 60928 [ 1250.089293][T25914] FAULT_INJECTION: forcing a failure. [ 1250.089293][T25914] name failslab, interval 1, probability 0, space 0, times 0 [ 1250.165280][T25914] CPU: 0 UID: 0 PID: 25914 Comm: syz.7.4636 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1250.165321][T25914] Tainted: [U]=USER [ 1250.165330][T25914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1250.165345][T25914] Call Trace: [ 1250.165353][T25914] [ 1250.165362][T25914] dump_stack_lvl+0x16c/0x1f0 [ 1250.165404][T25914] should_fail_ex+0x50a/0x650 [ 1250.165433][T25914] ? fs_reclaim_acquire+0xae/0x150 [ 1250.165476][T25914] should_failslab+0xc2/0x120 [ 1250.165507][T25914] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1250.165538][T25914] ? __kernfs_new_node+0xd3/0x890 [ 1250.165582][T25914] __kernfs_new_node+0xd3/0x890 [ 1250.165623][T25914] ? __pfx___kernfs_new_node+0x10/0x10 [ 1250.165668][T25914] ? kernfs_add_one+0x3d1/0x520 [ 1250.165694][T25914] ? __pfx_lock_release+0x10/0x10 [ 1250.165722][T25914] ? lock_acquire+0x2f/0xb0 [ 1250.165748][T25914] ? kernfs_add_one+0x39d/0x520 [ 1250.165782][T25914] kernfs_new_node+0x186/0x240 [ 1250.165808][T25914] ? up_write+0x1b2/0x520 [ 1250.165841][T25914] __kernfs_create_file+0x53/0x350 [ 1250.165876][T25914] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 1250.165920][T25914] internal_create_group+0x56c/0xf10 [ 1250.165966][T25914] ? __pfx_internal_create_group+0x10/0x10 [ 1250.166008][T25914] ? kernfs_create_link+0x1bd/0x240 [ 1250.166054][T25914] internal_create_groups+0x9d/0x150 [ 1250.166097][T25914] device_add+0xf33/0x1a70 [ 1250.166136][T25914] ? __pfx_device_add+0x10/0x10 [ 1250.166172][T25914] ? __init_waitqueue_head+0xca/0x150 [ 1250.166218][T25914] netdev_register_kobject+0x183/0x3a0 [ 1250.166250][T25914] register_netdevice+0x147b/0x1e50 [ 1250.166286][T25914] ? __pfx_register_netdevice+0x10/0x10 [ 1250.166318][T25914] ? alloc_netdev_mqs+0x1038/0x13e0 [ 1250.166352][T25914] internal_dev_create+0x2d3/0x520 [ 1250.166380][T25914] ovs_vport_add+0x144/0x4e0 [ 1250.166417][T25914] new_vport+0x16/0x1d0 [ 1250.166446][T25914] ovs_dp_cmd_new+0x6b0/0xe50 [ 1250.166488][T25914] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1250.166528][T25914] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1250.166568][T25914] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1250.166615][T25914] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1250.166656][T25914] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1250.166694][T25914] ? trace_cap_capable+0x1a2/0x210 [ 1250.166741][T25914] ? bpf_lsm_capable+0x9/0x10 [ 1250.166772][T25914] ? security_capable+0x7e/0x260 [ 1250.166809][T25914] ? ns_capable+0xd7/0x110 [ 1250.166843][T25914] genl_rcv_msg+0x565/0x800 [ 1250.166871][T25914] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1250.166897][T25914] ? __pfx_ovs_dp_cmd_new+0x10/0x10 [ 1250.166944][T25914] netlink_rcv_skb+0x165/0x410 [ 1250.166980][T25914] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1250.167007][T25914] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1250.167061][T25914] ? down_read+0xc9/0x330 [ 1250.167088][T25914] ? __pfx_down_read+0x10/0x10 [ 1250.167114][T25914] ? netlink_deliver_tap+0x1ae/0xca0 [ 1250.167153][T25914] genl_rcv+0x28/0x40 [ 1250.167185][T25914] netlink_unicast+0x53c/0x7f0 [ 1250.167223][T25914] ? __pfx_netlink_unicast+0x10/0x10 [ 1250.167258][T25914] ? __phys_addr_symbol+0x30/0x80 [ 1250.167294][T25914] ? __check_object_size+0x488/0x710 [ 1250.167330][T25914] netlink_sendmsg+0x8b8/0xd70 [ 1250.167371][T25914] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1250.167420][T25914] ____sys_sendmsg+0x9ae/0xb40 [ 1250.167453][T25914] ? copy_msghdr_from_user+0x10b/0x160 [ 1250.167480][T25914] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1250.167530][T25914] ___sys_sendmsg+0x135/0x1e0 [ 1250.167560][T25914] ? __pfx____sys_sendmsg+0x10/0x10 [ 1250.167602][T25914] ? __pfx_lock_release+0x10/0x10 [ 1250.167629][T25914] ? trace_lock_acquire+0x14e/0x1f0 [ 1250.167665][T25914] ? __fget_files+0x206/0x3a0 [ 1250.167701][T25914] __sys_sendmsg+0x16e/0x220 [ 1250.167728][T25914] ? __pfx___sys_sendmsg+0x10/0x10 [ 1250.167753][T25914] ? __x64_sys_futex+0x1e1/0x4c0 [ 1250.167801][T25914] do_syscall_64+0xcd/0x250 [ 1250.167827][T25914] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1250.167860][T25914] RIP: 0033:0x7f36d598cde9 [ 1250.167881][T25914] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1250.167905][T25914] RSP: 002b:00007f36d6863038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1250.167931][T25914] RAX: ffffffffffffffda RBX: 00007f36d5ba5fa0 RCX: 00007f36d598cde9 [ 1250.167948][T25914] RDX: 0000000002000000 RSI: 0000400000000080 RDI: 0000000000000007 [ 1250.167964][T25914] RBP: 00007f36d5a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1250.167981][T25914] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1250.167996][T25914] R13: 0000000000000000 R14: 00007f36d5ba5fa0 R15: 00007ffdbe2d6a68 [ 1250.168037][T25914] [ 1251.528499][T25909] ptrace attach of "./syz-executor exec"[16832] was attempted by "./syz-executor exec"[25909] [ 1251.680207][T25915] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25915 comm: syz.5.4635) [ 1252.066373][T25935] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000000006 [ 1252.440205][T25930] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25930 comm: syz.5.4641) [ 1253.486001][T25940] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25940 comm: syz.5.4643) [ 1255.070316][T25962] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25962 comm: syz.5.4649) [ 1255.158229][T25966] FAULT_INJECTION: forcing a failure. [ 1255.158229][T25966] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.225311][T25966] CPU: 1 UID: 0 PID: 25966 Comm: syz.1.4658 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1255.225351][T25966] Tainted: [U]=USER [ 1255.225361][T25966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1255.225375][T25966] Call Trace: [ 1255.225382][T25966] [ 1255.225392][T25966] dump_stack_lvl+0x16c/0x1f0 [ 1255.225438][T25966] should_fail_ex+0x50a/0x650 [ 1255.225467][T25966] ? fs_reclaim_acquire+0xae/0x150 [ 1255.225507][T25966] ? apply_subsystem_event_filter+0x3cc/0x1410 [ 1255.225534][T25966] should_failslab+0xc2/0x120 [ 1255.225565][T25966] __kmalloc_cache_noprof+0x68/0x420 [ 1255.225607][T25966] apply_subsystem_event_filter+0x3cc/0x1410 [ 1255.225645][T25966] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1255.225671][T25966] ? __might_fault+0xe3/0x190 [ 1255.225705][T25966] ? __might_fault+0xe3/0x190 [ 1255.225740][T25966] ? _copy_from_user+0x59/0xd0 [ 1255.225778][T25966] subsystem_filter_write+0x95/0x120 [ 1255.225807][T25966] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1255.225832][T25966] vfs_write+0x24c/0x1150 [ 1255.225859][T25966] ? __fget_files+0x1fc/0x3a0 [ 1255.225885][T25966] ? __pfx___mutex_lock+0x10/0x10 [ 1255.225921][T25966] ? __pfx_vfs_write+0x10/0x10 [ 1255.225956][T25966] ? __fget_files+0x206/0x3a0 [ 1255.225993][T25966] ksys_write+0x12b/0x250 [ 1255.226017][T25966] ? __pfx_ksys_write+0x10/0x10 [ 1255.226053][T25966] do_syscall_64+0xcd/0x250 [ 1255.226080][T25966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.226113][T25966] RIP: 0033:0x7f10ead8cde9 [ 1255.226132][T25966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1255.226156][T25966] RSP: 002b:00007f10ebb6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1255.226180][T25966] RAX: ffffffffffffffda RBX: 00007f10eafa5fa0 RCX: 00007f10ead8cde9 [ 1255.226197][T25966] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1255.226211][T25966] RBP: 00007f10eae0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1255.226226][T25966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1255.226241][T25966] R13: 0000000000000000 R14: 00007f10eafa5fa0 R15: 00007ffec7fc2358 [ 1255.226277][T25966] [ 1255.444800][ C1] vkms_vblank_simulate: vblank timer overrun [ 1255.749034][T25969] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25969 comm: syz.5.4651) [ 1256.237519][T25978] Invalid ELF header magic: != ELF [ 1256.857408][T25973] kernel write not supported for file vkms/crtc-0/crc/data (pid: 25973 comm: syz.5.4653) [ 1257.774039][T25995] Process accounting paused [ 1258.582659][T26024] netlink: 'syz.6.4663': attribute type 11 has an invalid length. [ 1258.812894][T26028] FAULT_INJECTION: forcing a failure. [ 1258.812894][T26028] name failslab, interval 1, probability 0, space 0, times 0 [ 1258.848833][T26028] CPU: 1 UID: 0 PID: 26028 Comm: syz.7.4664 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1258.848873][T26028] Tainted: [U]=USER [ 1258.848882][T26028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1258.848897][T26028] Call Trace: [ 1258.848905][T26028] [ 1258.848916][T26028] dump_stack_lvl+0x16c/0x1f0 [ 1258.848959][T26028] should_fail_ex+0x50a/0x650 [ 1258.848987][T26028] ? fs_reclaim_acquire+0xae/0x150 [ 1258.849027][T26028] should_failslab+0xc2/0x120 [ 1258.849058][T26028] __kmalloc_noprof+0xce/0x4f0 [ 1258.849092][T26028] ? __pfx_trace_seq_printf+0x10/0x10 [ 1258.849128][T26028] ? tracing_log_err+0xc4/0x6b0 [ 1258.849162][T26028] tracing_log_err+0xc4/0x6b0 [ 1258.849199][T26028] append_filter_err+0x370/0x5b0 [ 1258.849253][T26028] apply_subsystem_event_filter+0x670/0x1410 [ 1258.849292][T26028] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1258.849319][T26028] ? __might_fault+0xe3/0x190 [ 1258.849354][T26028] ? __might_fault+0xe3/0x190 [ 1258.849392][T26028] ? _copy_from_user+0x59/0xd0 [ 1258.849430][T26028] subsystem_filter_write+0x95/0x120 [ 1258.849457][T26028] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1258.849481][T26028] vfs_write+0x24c/0x1150 [ 1258.849515][T26028] ? __fget_files+0x1fc/0x3a0 [ 1258.849542][T26028] ? __pfx___mutex_lock+0x10/0x10 [ 1258.849581][T26028] ? __pfx_vfs_write+0x10/0x10 [ 1258.849616][T26028] ? __fget_files+0x206/0x3a0 [ 1258.849652][T26028] ksys_write+0x12b/0x250 [ 1258.849677][T26028] ? __pfx_ksys_write+0x10/0x10 [ 1258.849713][T26028] do_syscall_64+0xcd/0x250 [ 1258.849740][T26028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1258.849772][T26028] RIP: 0033:0x7f36d598cde9 [ 1258.849792][T26028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1258.849815][T26028] RSP: 002b:00007f36d6863038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1258.849837][T26028] RAX: ffffffffffffffda RBX: 00007f36d5ba5fa0 RCX: 00007f36d598cde9 [ 1258.849854][T26028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1258.849868][T26028] RBP: 00007f36d5a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1258.849883][T26028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1258.849896][T26028] R13: 0000000000000000 R14: 00007f36d5ba5fa0 R15: 00007ffdbe2d6a68 [ 1258.849932][T26028] [ 1259.082429][ C1] vkms_vblank_simulate: vblank timer overrun [ 1260.904936][T26072] FAULT_INJECTION: forcing a failure. [ 1260.904936][T26072] name failslab, interval 1, probability 0, space 0, times 0 [ 1260.956724][T26072] CPU: 1 UID: 0 PID: 26072 Comm: syz.1.4670 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1260.956765][T26072] Tainted: [U]=USER [ 1260.956774][T26072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1260.956788][T26072] Call Trace: [ 1260.956796][T26072] [ 1260.956806][T26072] dump_stack_lvl+0x16c/0x1f0 [ 1260.956848][T26072] should_fail_ex+0x50a/0x650 [ 1260.956878][T26072] ? fs_reclaim_acquire+0xae/0x150 [ 1260.956918][T26072] should_failslab+0xc2/0x120 [ 1260.956948][T26072] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1260.956976][T26072] ? rcu_is_watching+0x12/0xc0 [ 1260.957010][T26072] ? security_file_alloc+0x34/0x2b0 [ 1260.957043][T26072] security_file_alloc+0x34/0x2b0 [ 1260.957071][T26072] init_file+0x93/0x4c0 [ 1260.957103][T26072] alloc_empty_file+0x91/0x1e0 [ 1260.957136][T26072] alloc_file_pseudo+0x131/0x220 [ 1260.957177][T26072] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 1260.957212][T26072] ? tipc_sk_finish_conn+0x580/0x790 [ 1260.957245][T26072] sock_alloc_file+0x50/0x210 [ 1260.957276][T26072] __sys_socketpair+0x34f/0x5a0 [ 1260.957312][T26072] ? __pfx___sys_socketpair+0x10/0x10 [ 1260.957347][T26072] ? xfd_validate_state+0x5d/0x180 [ 1260.957378][T26072] ? rcu_is_watching+0x12/0xc0 [ 1260.957419][T26072] __x64_sys_socketpair+0x96/0x100 [ 1260.957452][T26072] ? lockdep_hardirqs_on+0x7c/0x110 [ 1260.957488][T26072] do_syscall_64+0xcd/0x250 [ 1260.957514][T26072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1260.957545][T26072] RIP: 0033:0x7f10ead8cde9 [ 1260.957565][T26072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1260.957588][T26072] RSP: 002b:00007f10ebb6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1260.957611][T26072] RAX: ffffffffffffffda RBX: 00007f10eafa5fa0 RCX: 00007f10ead8cde9 [ 1260.957628][T26072] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 1260.957645][T26072] RBP: 00007f10eae0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1260.957660][T26072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1260.957675][T26072] R13: 0000000000000000 R14: 00007f10eafa5fa0 R15: 00007ffec7fc2358 [ 1260.957707][T26072] [ 1261.181947][ C1] vkms_vblank_simulate: vblank timer overrun [ 1264.116365][T26101] FAULT_INJECTION: forcing a failure. [ 1264.116365][T26101] name failslab, interval 1, probability 0, space 0, times 0 [ 1264.153076][T26101] CPU: 1 UID: 0 PID: 26101 Comm: syz.1.4686 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1264.153118][T26101] Tainted: [U]=USER [ 1264.153127][T26101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1264.153142][T26101] Call Trace: [ 1264.153150][T26101] [ 1264.153161][T26101] dump_stack_lvl+0x16c/0x1f0 [ 1264.153206][T26101] should_fail_ex+0x50a/0x650 [ 1264.153235][T26101] ? fs_reclaim_acquire+0xae/0x150 [ 1264.153276][T26101] should_failslab+0xc2/0x120 [ 1264.153307][T26101] __kmalloc_noprof+0xce/0x4f0 [ 1264.153336][T26101] ? lsm_blob_alloc+0x68/0x90 [ 1264.153373][T26101] lsm_blob_alloc+0x68/0x90 [ 1264.153405][T26101] security_prepare_creds+0x30/0x270 [ 1264.153438][T26101] prepare_creds+0x53e/0x750 [ 1264.153467][T26101] __sys_setreuid+0x101/0xaf0 [ 1264.153504][T26101] do_syscall_64+0xcd/0x250 [ 1264.153530][T26101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1264.153571][T26101] RIP: 0033:0x7f10ead8cde9 [ 1264.153591][T26101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1264.153615][T26101] RSP: 002b:00007f10ebb6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 1264.153638][T26101] RAX: ffffffffffffffda RBX: 00007f10eafa5fa0 RCX: 00007f10ead8cde9 [ 1264.153656][T26101] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1264.153671][T26101] RBP: 00007f10eae0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1264.153686][T26101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1264.153700][T26101] R13: 0000000000000000 R14: 00007f10eafa5fa0 R15: 00007ffec7fc2358 [ 1264.153732][T26101] [ 1264.320414][ C1] vkms_vblank_simulate: vblank timer overrun [ 1265.136246][T26103] Invalid ELF header magic: != ELF [ 1265.439655][T26119] FAULT_INJECTION: forcing a failure. [ 1265.439655][T26119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1265.515467][T26119] CPU: 1 UID: 0 PID: 26119 Comm: syz.1.4680 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1265.515505][T26119] Tainted: [U]=USER [ 1265.515514][T26119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1265.515527][T26119] Call Trace: [ 1265.515534][T26119] [ 1265.515544][T26119] dump_stack_lvl+0x16c/0x1f0 [ 1265.515581][T26119] should_fail_ex+0x50a/0x650 [ 1265.515613][T26119] _copy_from_user+0x2e/0xd0 [ 1265.515645][T26119] copy_msghdr_from_user+0x99/0x160 [ 1265.515669][T26119] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1265.515708][T26119] ___sys_sendmsg+0xff/0x1e0 [ 1265.515732][T26119] ? __pfx____sys_sendmsg+0x10/0x10 [ 1265.515767][T26119] ? __pfx_lock_release+0x10/0x10 [ 1265.515793][T26119] ? trace_lock_acquire+0x14e/0x1f0 [ 1265.515831][T26119] ? __fget_files+0x206/0x3a0 [ 1265.515862][T26119] __sys_sendmsg+0x16e/0x220 [ 1265.515887][T26119] ? __pfx___sys_sendmsg+0x10/0x10 [ 1265.515930][T26119] do_syscall_64+0xcd/0x250 [ 1265.515954][T26119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1265.515983][T26119] RIP: 0033:0x7f10ead8cde9 [ 1265.516001][T26119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1265.516023][T26119] RSP: 002b:00007f10ebb6b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1265.516045][T26119] RAX: ffffffffffffffda RBX: 00007f10eafa5fa0 RCX: 00007f10ead8cde9 [ 1265.516061][T26119] RDX: 00000000140000e4 RSI: 00004000000005c0 RDI: 0000000000000003 [ 1265.516075][T26119] RBP: 00007f10ebb6b090 R08: 0000000000000000 R09: 0000000000000000 [ 1265.516089][T26119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1265.516103][T26119] R13: 0000000000000000 R14: 00007f10eafa5fa0 R15: 00007ffec7fc2358 [ 1265.516132][T26119] [ 1265.702365][ C1] vkms_vblank_simulate: vblank timer overrun [ 1266.104930][T26128] FAULT_INJECTION: forcing a failure. [ 1266.104930][T26128] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1266.126125][T26128] CPU: 0 UID: 0 PID: 26128 Comm: syz.1.4684 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1266.126162][T26128] Tainted: [U]=USER [ 1266.126170][T26128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1266.126185][T26128] Call Trace: [ 1266.126193][T26128] [ 1266.126203][T26128] dump_stack_lvl+0x16c/0x1f0 [ 1266.126245][T26128] should_fail_ex+0x50a/0x650 [ 1266.126273][T26128] ? __pfx___might_resched+0x10/0x10 [ 1266.126307][T26128] should_fail_alloc_page+0xe7/0x130 [ 1266.126340][T26128] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1266.126384][T26128] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 1266.126416][T26128] ? kasan_save_stack+0x33/0x60 [ 1266.126438][T26128] ? kasan_save_track+0x14/0x30 [ 1266.126461][T26128] ? __kasan_kmalloc+0xaa/0xb0 [ 1266.126483][T26128] ? __kmalloc_node_track_caller_noprof+0x21d/0x520 [ 1266.126511][T26128] ? kstrdup+0x42/0xb0 [ 1266.126552][T26128] ? apply_subsystem_event_filter+0x3ec/0x1410 [ 1266.126578][T26128] ? subsystem_filter_write+0x95/0x120 [ 1266.126603][T26128] ? vfs_write+0x24c/0x1150 [ 1266.126624][T26128] ? ksys_write+0x12b/0x250 [ 1266.126644][T26128] ? do_syscall_64+0xcd/0x250 [ 1266.126665][T26128] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.126702][T26128] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1266.126767][T26128] __alloc_pages_noprof+0xb/0x1b0 [ 1266.126793][T26128] ___kmalloc_large_node+0x84/0x1b0 [ 1266.126831][T26128] __kmalloc_large_noprof+0x1c/0x70 [ 1266.126866][T26128] append_filter_err+0x90/0x5b0 [ 1266.126909][T26128] apply_subsystem_event_filter+0x670/0x1410 [ 1266.126945][T26128] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1266.126969][T26128] ? __might_fault+0xe3/0x190 [ 1266.127001][T26128] ? __might_fault+0xe3/0x190 [ 1266.127038][T26128] ? _copy_from_user+0x59/0xd0 [ 1266.127074][T26128] subsystem_filter_write+0x95/0x120 [ 1266.127100][T26128] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1266.127120][T26128] vfs_write+0x24c/0x1150 [ 1266.127145][T26128] ? __fget_files+0x1fc/0x3a0 [ 1266.127170][T26128] ? __pfx___mutex_lock+0x10/0x10 [ 1266.127208][T26128] ? __pfx_vfs_write+0x10/0x10 [ 1266.127242][T26128] ? __fget_files+0x206/0x3a0 [ 1266.127277][T26128] ksys_write+0x12b/0x250 [ 1266.127301][T26128] ? __pfx_ksys_write+0x10/0x10 [ 1266.127334][T26128] do_syscall_64+0xcd/0x250 [ 1266.127360][T26128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1266.127391][T26128] RIP: 0033:0x7f10ead8cde9 [ 1266.127410][T26128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1266.127433][T26128] RSP: 002b:00007f10ebb6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1266.127455][T26128] RAX: ffffffffffffffda RBX: 00007f10eafa5fa0 RCX: 00007f10ead8cde9 [ 1266.127473][T26128] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1266.127488][T26128] RBP: 00007f10eae0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1266.127503][T26128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1266.127518][T26128] R13: 0000000000000000 R14: 00007f10eafa5fa0 R15: 00007ffec7fc2358 [ 1266.127561][T26128] [ 1266.228518][T26130] netlink: 8 bytes leftover after parsing attributes in process `syz.5.4683'. [ 1268.475095][T26159] FAULT_INJECTION: forcing a failure. [ 1268.475095][T26159] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1268.520805][T26162] Invalid ELF header magic: != ELF [ 1268.568287][T26159] CPU: 1 UID: 0 PID: 26159 Comm: syz.1.4694 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1268.568328][T26159] Tainted: [U]=USER [ 1268.568336][T26159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1268.568351][T26159] Call Trace: [ 1268.568358][T26159] [ 1268.568379][T26159] dump_stack_lvl+0x16c/0x1f0 [ 1268.568422][T26159] should_fail_ex+0x50a/0x650 [ 1268.568457][T26159] get_futex_key+0x4a3/0x1000 [ 1268.568499][T26159] ? __pfx_get_futex_key+0x10/0x10 [ 1268.568547][T26159] futex_wake+0xe8/0x4e0 [ 1268.568573][T26159] ? lockdep_init_map_type+0x16d/0x7d0 [ 1268.568606][T26159] ? __pfx_futex_wake+0x10/0x10 [ 1268.568635][T26159] ? find_held_lock+0x2d/0x110 [ 1268.568673][T26159] ? fd_install+0x223/0x750 [ 1268.568697][T26159] ? __pfx_lock_release+0x10/0x10 [ 1268.568729][T26159] do_futex+0x1e5/0x350 [ 1268.568754][T26159] ? __pfx_do_futex+0x10/0x10 [ 1268.568781][T26159] ? fd_install+0x242/0x750 [ 1268.568809][T26159] __x64_sys_futex+0x1e1/0x4c0 [ 1268.568839][T26159] ? __pfx___x64_sys_futex+0x10/0x10 [ 1268.568864][T26159] ? rcu_is_watching+0x12/0xc0 [ 1268.568908][T26159] do_syscall_64+0xcd/0x250 [ 1268.568934][T26159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1268.568966][T26159] RIP: 0033:0x7f10ead8cde9 [ 1268.568985][T26159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1268.569008][T26159] RSP: 002b:00007f10ebb6b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1268.569031][T26159] RAX: ffffffffffffffda RBX: 00007f10eafa5fa8 RCX: 00007f10ead8cde9 [ 1268.569048][T26159] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f10eafa5fac [ 1268.569063][T26159] RBP: 00007f10eafa5fa0 R08: 00007f10ebb6c000 R09: 0000000000000000 [ 1268.569078][T26159] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f10eafa5fac [ 1268.569092][T26159] R13: 0000000000000000 R14: 00007ffec7fc2270 R15: 00007ffec7fc2358 [ 1268.569124][T26159] [ 1268.769363][ C1] vkms_vblank_simulate: vblank timer overrun [ 1269.686249][T26173] netlink: 326 bytes leftover after parsing attributes in process `syz.6.4704'. [ 1269.789874][T26174] FAULT_INJECTION: forcing a failure. [ 1269.789874][T26174] name failslab, interval 1, probability 0, space 0, times 0 [ 1270.055607][T26174] CPU: 0 UID: 0 PID: 26174 Comm: syz.5.4695 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1270.055651][T26174] Tainted: [U]=USER [ 1270.055660][T26174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1270.055674][T26174] Call Trace: [ 1270.055682][T26174] [ 1270.055692][T26174] dump_stack_lvl+0x16c/0x1f0 [ 1270.055737][T26174] should_fail_ex+0x50a/0x650 [ 1270.055766][T26174] ? fs_reclaim_acquire+0xae/0x150 [ 1270.055806][T26174] ? apply_subsystem_event_filter+0x3cc/0x1410 [ 1270.055832][T26174] should_failslab+0xc2/0x120 [ 1270.055863][T26174] __kmalloc_cache_noprof+0x68/0x420 [ 1270.055898][T26174] apply_subsystem_event_filter+0x3cc/0x1410 [ 1270.055934][T26174] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1270.055959][T26174] ? __might_fault+0xe3/0x190 [ 1270.055991][T26174] ? __might_fault+0xe3/0x190 [ 1270.056028][T26174] ? _copy_from_user+0x59/0xd0 [ 1270.056066][T26174] subsystem_filter_write+0x95/0x120 [ 1270.056094][T26174] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1270.056119][T26174] vfs_write+0x24c/0x1150 [ 1270.056146][T26174] ? __fget_files+0x1fc/0x3a0 [ 1270.056173][T26174] ? __pfx___mutex_lock+0x10/0x10 [ 1270.056210][T26174] ? __pfx_vfs_write+0x10/0x10 [ 1270.056245][T26174] ? __fget_files+0x206/0x3a0 [ 1270.056280][T26174] ksys_write+0x12b/0x250 [ 1270.056305][T26174] ? __pfx_ksys_write+0x10/0x10 [ 1270.056341][T26174] do_syscall_64+0xcd/0x250 [ 1270.056367][T26174] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.056398][T26174] RIP: 0033:0x7f0f1318cde9 [ 1270.056418][T26174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1270.056443][T26174] RSP: 002b:00007f0f140a0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1270.056466][T26174] RAX: ffffffffffffffda RBX: 00007f0f133a5fa0 RCX: 00007f0f1318cde9 [ 1270.056483][T26174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1270.056497][T26174] RBP: 00007f0f1320e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1270.056512][T26174] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1270.056534][T26174] R13: 0000000000000000 R14: 00007f0f133a5fa0 R15: 00007fff20ff9708 [ 1270.056569][T26174] [ 1270.668116][T26189] FAULT_INJECTION: forcing a failure. [ 1270.668116][T26189] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1270.715990][T26189] CPU: 0 UID: 0 PID: 26189 Comm: syz.6.4700 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1270.716030][T26189] Tainted: [U]=USER [ 1270.716038][T26189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1270.716054][T26189] Call Trace: [ 1270.716061][T26189] [ 1270.716071][T26189] dump_stack_lvl+0x16c/0x1f0 [ 1270.716112][T26189] should_fail_ex+0x50a/0x650 [ 1270.716141][T26189] ? __pfx_stack_trace_save+0x10/0x10 [ 1270.716185][T26189] get_futex_key+0x4a3/0x1000 [ 1270.716225][T26189] ? __pfx_get_futex_key+0x10/0x10 [ 1270.716269][T26189] ? kasan_save_track+0x14/0x30 [ 1270.716299][T26189] ? hlock_class+0x4e/0x130 [ 1270.716334][T26189] ? mark_lock+0xb5/0xc60 [ 1270.716359][T26189] ? __sys_socketpair+0x34f/0x5a0 [ 1270.716389][T26189] ? __x64_sys_socketpair+0x96/0x100 [ 1270.716422][T26189] ? do_syscall_64+0xcd/0x250 [ 1270.716443][T26189] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.716481][T26189] futex_wait_setup+0x78/0x290 [ 1270.716518][T26189] __futex_wait+0x267/0x3c0 [ 1270.716549][T26189] ? __pfx___futex_wait+0x10/0x10 [ 1270.716584][T26189] ? __pfx_futex_wake_mark+0x10/0x10 [ 1270.716627][T26189] futex_wait+0xe9/0x380 [ 1270.716656][T26189] ? __pfx_futex_wait+0x10/0x10 [ 1270.716695][T26189] ? fd_install+0x223/0x750 [ 1270.716719][T26189] ? __pfx_lock_release+0x10/0x10 [ 1270.716750][T26189] do_futex+0x22b/0x350 [ 1270.716775][T26189] ? __pfx_do_futex+0x10/0x10 [ 1270.716802][T26189] ? fd_install+0x242/0x750 [ 1270.716830][T26189] __x64_sys_futex+0x1e1/0x4c0 [ 1270.716860][T26189] ? __pfx___x64_sys_futex+0x10/0x10 [ 1270.716886][T26189] ? rcu_is_watching+0x12/0xc0 [ 1270.716930][T26189] do_syscall_64+0xcd/0x250 [ 1270.716955][T26189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1270.716987][T26189] RIP: 0033:0x7efed338cde9 [ 1270.717006][T26189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1270.717030][T26189] RSP: 002b:00007efed428e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1270.717053][T26189] RAX: ffffffffffffffda RBX: 00007efed35a5fa8 RCX: 00007efed338cde9 [ 1270.717069][T26189] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efed35a5fa8 [ 1270.717085][T26189] RBP: 00007efed35a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1270.717101][T26189] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efed35a5fac [ 1270.717116][T26189] R13: 0000000000000000 R14: 00007ffdad082230 R15: 00007ffdad082318 [ 1270.717148][T26189] [ 1271.892302][T26205] FAULT_INJECTION: forcing a failure. [ 1271.892302][T26205] name failslab, interval 1, probability 0, space 0, times 0 [ 1271.911796][T26205] CPU: 1 UID: 0 PID: 26205 Comm: syz.1.4703 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1271.911839][T26205] Tainted: [U]=USER [ 1271.911848][T26205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1271.911863][T26205] Call Trace: [ 1271.911871][T26205] [ 1271.911881][T26205] dump_stack_lvl+0x16c/0x1f0 [ 1271.911924][T26205] should_fail_ex+0x50a/0x650 [ 1271.911954][T26205] ? fs_reclaim_acquire+0xae/0x150 [ 1271.911995][T26205] should_failslab+0xc2/0x120 [ 1271.912025][T26205] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1271.912053][T26205] ? __pfx_map_id_range_down+0x10/0x10 [ 1271.912083][T26205] ? __x64_sys_futex+0x1e1/0x4c0 [ 1271.912107][T26205] ? __x64_sys_futex+0x1ea/0x4c0 [ 1271.912130][T26205] ? prepare_creds+0x2e/0x750 [ 1271.912157][T26205] prepare_creds+0x2e/0x750 [ 1271.912184][T26205] __sys_setreuid+0x101/0xaf0 [ 1271.912218][T26205] do_syscall_64+0xcd/0x250 [ 1271.912241][T26205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1271.912272][T26205] RIP: 0033:0x7f10ead8cde9 [ 1271.912290][T26205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1271.912309][T26205] RSP: 002b:00007f10ebb6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 1271.912328][T26205] RAX: ffffffffffffffda RBX: 00007f10eafa5fa0 RCX: 00007f10ead8cde9 [ 1271.912343][T26205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1271.912357][T26205] RBP: 00007f10eae0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1271.912369][T26205] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1271.912394][T26205] R13: 0000000000000000 R14: 00007f10eafa5fa0 R15: 00007ffec7fc2358 [ 1271.912423][T26205] [ 1272.086498][ C1] vkms_vblank_simulate: vblank timer overrun [ 1272.658487][T26221] FAULT_INJECTION: forcing a failure. [ 1272.658487][T26221] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1272.703851][T26221] CPU: 0 UID: 0 PID: 26221 Comm: syz.5.4706 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1272.703890][T26221] Tainted: [U]=USER [ 1272.703897][T26221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1272.703912][T26221] Call Trace: [ 1272.703919][T26221] [ 1272.703928][T26221] dump_stack_lvl+0x16c/0x1f0 [ 1272.703967][T26221] should_fail_ex+0x50a/0x650 [ 1272.703995][T26221] ? __pfx_stack_trace_save+0x10/0x10 [ 1272.704035][T26221] get_futex_key+0x4a3/0x1000 [ 1272.704087][T26221] ? __pfx_get_futex_key+0x10/0x10 [ 1272.704118][T26221] ? kasan_save_track+0x14/0x30 [ 1272.704146][T26221] ? hlock_class+0x4e/0x130 [ 1272.704178][T26221] ? mark_lock+0xb5/0xc60 [ 1272.704200][T26221] ? __sys_socketpair+0x34f/0x5a0 [ 1272.704230][T26221] ? __x64_sys_socketpair+0x96/0x100 [ 1272.704262][T26221] ? do_syscall_64+0xcd/0x250 [ 1272.704289][T26221] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.704326][T26221] futex_wait_setup+0x78/0x290 [ 1272.704361][T26221] __futex_wait+0x267/0x3c0 [ 1272.704390][T26221] ? __pfx___futex_wait+0x10/0x10 [ 1272.704422][T26221] ? __pfx_futex_wake_mark+0x10/0x10 [ 1272.704461][T26221] futex_wait+0xe9/0x380 [ 1272.704488][T26221] ? __pfx_futex_wait+0x10/0x10 [ 1272.704526][T26221] ? fd_install+0x223/0x750 [ 1272.704550][T26221] ? __pfx_lock_release+0x10/0x10 [ 1272.704577][T26221] do_futex+0x22b/0x350 [ 1272.704600][T26221] ? __pfx_do_futex+0x10/0x10 [ 1272.704625][T26221] ? fd_install+0x242/0x750 [ 1272.704652][T26221] __x64_sys_futex+0x1e1/0x4c0 [ 1272.704680][T26221] ? __pfx___x64_sys_futex+0x10/0x10 [ 1272.704705][T26221] ? rcu_is_watching+0x12/0xc0 [ 1272.704747][T26221] do_syscall_64+0xcd/0x250 [ 1272.704771][T26221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1272.704800][T26221] RIP: 0033:0x7f0f1318cde9 [ 1272.704818][T26221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1272.704841][T26221] RSP: 002b:00007f0f140a00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1272.704863][T26221] RAX: ffffffffffffffda RBX: 00007f0f133a5fa8 RCX: 00007f0f1318cde9 [ 1272.704878][T26221] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f0f133a5fa8 [ 1272.704893][T26221] RBP: 00007f0f133a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1272.704906][T26221] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f0f133a5fac [ 1272.704919][T26221] R13: 0000000000000000 R14: 00007fff20ff9620 R15: 00007fff20ff9708 [ 1272.704948][T26221] [ 1276.083916][T26287] FAULT_INJECTION: forcing a failure. [ 1276.083916][T26287] name failslab, interval 1, probability 0, space 0, times 0 [ 1276.156982][T26287] CPU: 1 UID: 0 PID: 26287 Comm: syz.1.4718 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1276.157027][T26287] Tainted: [U]=USER [ 1276.157036][T26287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1276.157052][T26287] Call Trace: [ 1276.157059][T26287] [ 1276.157069][T26287] dump_stack_lvl+0x16c/0x1f0 [ 1276.157109][T26287] should_fail_ex+0x50a/0x650 [ 1276.157138][T26287] ? fs_reclaim_acquire+0xae/0x150 [ 1276.157179][T26287] should_failslab+0xc2/0x120 [ 1276.157211][T26287] __kmalloc_noprof+0xce/0x4f0 [ 1276.157240][T26287] ? lsm_blob_alloc+0x68/0x90 [ 1276.157275][T26287] lsm_blob_alloc+0x68/0x90 [ 1276.157306][T26287] security_prepare_creds+0x30/0x270 [ 1276.157336][T26287] prepare_creds+0x53e/0x750 [ 1276.157362][T26287] __sys_setreuid+0x101/0xaf0 [ 1276.157395][T26287] do_syscall_64+0xcd/0x250 [ 1276.157419][T26287] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1276.157451][T26287] RIP: 0033:0x7f10ead8cde9 [ 1276.157469][T26287] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1276.157493][T26287] RSP: 002b:00007f10ebb6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000071 [ 1276.157515][T26287] RAX: ffffffffffffffda RBX: 00007f10eafa5fa0 RCX: 00007f10ead8cde9 [ 1276.157531][T26287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 1276.157545][T26287] RBP: 00007f10eae0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1276.157559][T26287] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1276.157572][T26287] R13: 0000000000000000 R14: 00007f10eafa5fa0 R15: 00007ffec7fc2358 [ 1276.157600][T26287] [ 1276.330580][ C1] vkms_vblank_simulate: vblank timer overrun [ 1278.330481][T26310] FAULT_INJECTION: forcing a failure. [ 1278.330481][T26310] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1278.343756][T26310] CPU: 0 UID: 0 PID: 26310 Comm: syz.5.4724 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1278.343790][T26310] Tainted: [U]=USER [ 1278.343798][T26310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1278.343812][T26310] Call Trace: [ 1278.343819][T26310] [ 1278.343829][T26310] dump_stack_lvl+0x16c/0x1f0 [ 1278.343867][T26310] should_fail_ex+0x50a/0x650 [ 1278.343894][T26310] ? page_copy_sane+0xcd/0x2d0 [ 1278.343925][T26310] copy_page_from_iter_atomic+0x399/0x1810 [ 1278.343966][T26310] ? mark_buffer_dirty+0x397/0x420 [ 1278.344002][T26310] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 1278.344034][T26310] ? fault_in_readable+0x1a7/0x200 [ 1278.344057][T26310] ? __pfx_fault_in_readable+0x10/0x10 [ 1278.344080][T26310] ? I_BDEV+0xd/0x20 [ 1278.344107][T26310] ? inode_to_bdi+0x9e/0x160 [ 1278.344136][T26310] iomap_file_buffered_write+0x633/0xc70 [ 1278.344180][T26310] ? __pfx_iomap_file_buffered_write+0x10/0x10 [ 1278.344210][T26310] ? find_held_lock+0x2d/0x110 [ 1278.344242][T26310] ? __pfx_inode_set_ctime_current+0x10/0x10 [ 1278.344295][T26310] ? preempt_count_add+0x76/0x150 [ 1278.344320][T26310] ? mnt_put_write_access_file+0xc1/0xf0 [ 1278.344347][T26310] blkdev_write_iter+0x574/0xdd0 [ 1278.344375][T26310] vfs_write+0x5ae/0x1150 [ 1278.344398][T26310] ? __pfx_blkdev_write_iter+0x10/0x10 [ 1278.344425][T26310] ? __pfx_vfs_write+0x10/0x10 [ 1278.344450][T26310] ? __fget_files+0x40/0x3a0 [ 1278.344490][T26310] ksys_write+0x12b/0x250 [ 1278.344512][T26310] ? __pfx_ksys_write+0x10/0x10 [ 1278.344544][T26310] do_syscall_64+0xcd/0x250 [ 1278.344568][T26310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1278.344599][T26310] RIP: 0033:0x7f0f1318cde9 [ 1278.344618][T26310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1278.344639][T26310] RSP: 002b:00007f0f1407f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1278.344661][T26310] RAX: ffffffffffffffda RBX: 00007f0f133a6080 RCX: 00007f0f1318cde9 [ 1278.344676][T26310] RDX: 000000000000fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 1278.344690][T26310] RBP: 00007f0f1407f090 R08: 0000000000000000 R09: 0000000000000000 [ 1278.344704][T26310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1278.344718][T26310] R13: 0000000000000000 R14: 00007f0f133a6080 R15: 00007fff20ff9708 [ 1278.344753][T26310] [ 1279.478008][T26318] netlink: 'syz.7.4723': attribute type 3 has an invalid length. [ 1279.656568][T26326] FAULT_INJECTION: forcing a failure. [ 1279.656568][T26326] name failslab, interval 1, probability 0, space 0, times 0 [ 1279.699500][T26326] CPU: 1 UID: 0 PID: 26326 Comm: syz.6.4728 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1279.699542][T26326] Tainted: [U]=USER [ 1279.699551][T26326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1279.699566][T26326] Call Trace: [ 1279.699574][T26326] [ 1279.699584][T26326] dump_stack_lvl+0x16c/0x1f0 [ 1279.699635][T26326] should_fail_ex+0x50a/0x650 [ 1279.699665][T26326] ? fs_reclaim_acquire+0xae/0x150 [ 1279.699706][T26326] ? apply_subsystem_event_filter+0x3cc/0x1410 [ 1279.699731][T26326] should_failslab+0xc2/0x120 [ 1279.699762][T26326] __kmalloc_cache_noprof+0x68/0x420 [ 1279.699796][T26326] apply_subsystem_event_filter+0x3cc/0x1410 [ 1279.699832][T26326] ? __pfx_apply_subsystem_event_filter+0x10/0x10 [ 1279.699857][T26326] ? __might_fault+0xe3/0x190 [ 1279.699887][T26326] ? __might_fault+0xe3/0x190 [ 1279.699923][T26326] ? _copy_from_user+0x59/0xd0 [ 1279.699960][T26326] subsystem_filter_write+0x95/0x120 [ 1279.699988][T26326] ? __pfx_subsystem_filter_write+0x10/0x10 [ 1279.700012][T26326] vfs_write+0x24c/0x1150 [ 1279.700039][T26326] ? __fget_files+0x1fc/0x3a0 [ 1279.700064][T26326] ? __pfx___mutex_lock+0x10/0x10 [ 1279.700101][T26326] ? __pfx_vfs_write+0x10/0x10 [ 1279.700135][T26326] ? __fget_files+0x206/0x3a0 [ 1279.700169][T26326] ksys_write+0x12b/0x250 [ 1279.700194][T26326] ? __pfx_ksys_write+0x10/0x10 [ 1279.700231][T26326] do_syscall_64+0xcd/0x250 [ 1279.700257][T26326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1279.700290][T26326] RIP: 0033:0x7efed338cde9 [ 1279.700310][T26326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1279.700332][T26326] RSP: 002b:00007efed428e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1279.700354][T26326] RAX: ffffffffffffffda RBX: 00007efed35a5fa0 RCX: 00007efed338cde9 [ 1279.700371][T26326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 1279.700385][T26326] RBP: 00007efed340e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1279.700400][T26326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1279.700414][T26326] R13: 0000000000000000 R14: 00007efed35a5fa0 R15: 00007ffdad082318 [ 1279.700448][T26326] [ 1279.919052][ C1] vkms_vblank_simulate: vblank timer overrun [ 1280.954984][T26337] syz.1.4731: vmalloc error: size 1818624, failed to allocate pages, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1281.055302][T26337] CPU: 0 UID: 0 PID: 26337 Comm: syz.1.4731 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1281.055344][T26337] Tainted: [U]=USER [ 1281.055353][T26337] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1281.055367][T26337] Call Trace: [ 1281.055374][T26337] [ 1281.055383][T26337] dump_stack_lvl+0x16c/0x1f0 [ 1281.055425][T26337] warn_alloc+0x24d/0x3a0 [ 1281.055465][T26337] ? __pfx_warn_alloc+0x10/0x10 [ 1281.055499][T26337] ? alloc_pages_mpol+0x25b/0x540 [ 1281.055531][T26337] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1281.055573][T26337] __vmalloc_node_range_noprof+0x12bd/0x1530 [ 1281.055607][T26337] ? __snd_dma_alloc_pages+0x50/0x90 [ 1281.055641][T26337] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1281.055669][T26337] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 1281.055713][T26337] ? __snd_dma_alloc_pages+0x50/0x90 [ 1281.055740][T26337] vmalloc_noprof+0x6b/0x90 [ 1281.055762][T26337] ? __snd_dma_alloc_pages+0x50/0x90 [ 1281.055784][T26337] ? __pfx_snd_dma_vmalloc_alloc+0x10/0x10 [ 1281.055808][T26337] __snd_dma_alloc_pages+0x50/0x90 [ 1281.055829][T26337] snd_dma_alloc_dir_pages+0x151/0x240 [ 1281.055855][T26337] do_alloc_pages+0x115/0x270 [ 1281.055882][T26337] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 1281.055912][T26337] snd_pcm_hw_params+0x15e6/0x1b20 [ 1281.055944][T26337] ? __pfx_snd_pcm_hw_params+0x10/0x10 [ 1281.055970][T26337] ? snd_pcm_hw_param_near.constprop.0+0x743/0x8f0 [ 1281.056007][T26337] ? __pfx_snd_pcm_hw_param_near.constprop.0+0x10/0x10 [ 1281.056040][T26337] ? kfree+0x2c4/0x4d0 [ 1281.056065][T26337] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 1281.056092][T26337] snd_pcm_oss_change_params_locked+0x1410/0x3a50 [ 1281.056138][T26337] ? __pfx_snd_pcm_oss_change_params_locked+0x10/0x10 [ 1281.056175][T26337] ? snd_pcm_oss_sync+0x306/0x7f0 [ 1281.056231][T26337] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 1281.056267][T26337] snd_pcm_oss_sync+0x326/0x7f0 [ 1281.056303][T26337] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1281.056335][T26337] snd_pcm_oss_release+0x28b/0x310 [ 1281.056369][T26337] ? __pfx_snd_pcm_oss_release+0x10/0x10 [ 1281.056402][T26337] __fput+0x3ff/0xb70 [ 1281.056437][T26337] task_work_run+0x14e/0x250 [ 1281.056479][T26337] ? __pfx_task_work_run+0x10/0x10 [ 1281.056505][T26337] ? __pfx___do_sys_close_range+0x10/0x10 [ 1281.056540][T26337] syscall_exit_to_user_mode+0x27b/0x2a0 [ 1281.056577][T26337] do_syscall_64+0xda/0x250 [ 1281.056603][T26337] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.056635][T26337] RIP: 0033:0x7f10ead8cde9 [ 1281.056654][T26337] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1281.056678][T26337] RSP: 002b:00007f10ebb6b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1281.056703][T26337] RAX: 0000000000000000 RBX: 00007f10eafa5fa0 RCX: 00007f10ead8cde9 [ 1281.056718][T26337] RDX: 0000000000000000 RSI: 000000000000000a RDI: 0000000000000002 [ 1281.056732][T26337] RBP: 00007f10eae0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1281.056745][T26337] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1281.056760][T26337] R13: 0000000000000000 R14: 00007f10eafa5fa0 R15: 00007ffec7fc2358 [ 1281.056792][T26337] [ 1281.056802][T26337] Mem-Info: [ 1281.468613][T26337] active_anon:22091 inactive_anon:0 isolated_anon:0 [ 1281.468613][T26337] active_file:17607 inactive_file:50492 isolated_file:0 [ 1281.468613][T26337] unevictable:767 dirty:1096 writeback:0 [ 1281.468613][T26337] slab_reclaimable:12329 slab_unreclaimable:106360 [ 1281.468613][T26337] mapped:25104 shmem:2196 pagetables:1180 [ 1281.468613][T26337] sec_pagetables:0 bounce:0 [ 1281.468613][T26337] kernel_misc_reclaimable:0 [ 1281.468613][T26337] free:1294467 free_pcp:2286 free_cma:0 [ 1281.556798][T26342] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x7f7c05b7f pfn:0x79400 [ 1281.596323][T26337] Node 0 active_anon:88564kB inactive_anon:0kB active_file:70428kB inactive_file:201964kB unevictable:1532kB isolated(anon):0kB isolated(file):0kB mapped:100416kB dirty:4384kB writeback:0kB shmem:7248kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12140kB pagetables:4720kB sec_pagetables:0kB all_unreclaimable? no [ 1281.649940][T26342] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 1281.650129][T26342] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 1281.650159][T26342] raw: 00000007f7c05b7f 0000000000000000 00000001ffffffff 0000000000000000 [ 1281.650178][T26342] page dumped because: unmovable page [ 1281.650199][T26342] page_owner tracks the page as allocated [ 1281.650306][T26342] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), pid 5844, tgid 5844 (kworker/u9:7), ts 70014654496, free_ts 69300628483 [ 1281.650352][T26342] post_alloc_hook+0x181/0x1b0 [ 1281.650410][T26342] get_page_from_freelist+0xfce/0x2f80 [ 1281.650444][T26342] __alloc_frozen_pages_noprof+0x221/0x2470 [ 1281.650478][T26342] alloc_pages_mpol+0x1fc/0x540 [ 1281.650511][T26342] alloc_pages_noprof+0x131/0x390 [ 1281.650544][T26342] __vmalloc_node_range_noprof+0x721/0x1530 [ 1281.650576][T26342] vmalloc_noprof+0x6b/0x90 [ 1281.650602][T26342] kcov_remote_start+0x501/0x6e0 [ 1281.650635][T26342] hci_rx_work+0x140/0x16b0 [ 1281.650665][T26342] process_one_work+0x958/0x1b30 [ 1281.650697][T26342] worker_thread+0x6c8/0xf00 [ 1281.650727][T26342] kthread+0x3af/0x750 [ 1281.650755][T26342] ret_from_fork+0x45/0x80 [ 1281.650789][T26342] ret_from_fork_asm+0x1a/0x30 [ 1281.650819][T26342] page last free pid 5818 tgid 5818 stack trace: [ 1281.650837][T26342] free_unref_folios+0xa7b/0x1500 [ 1281.650867][T26342] folios_put_refs+0x587/0x7b0 [ 1281.650893][T26342] free_pages_and_swap_cache+0x351/0x500 [ 1281.650921][T26342] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 1281.652607][T26342] tlb_finish_mmu+0x168/0x7b0 [ 1281.652643][T26342] vms_clear_ptes+0x560/0x770 [ 1281.652673][T26342] vms_complete_munmap_vmas+0x1ca/0x970 [ 1281.652706][T26342] do_vmi_align_munmap+0x619/0x890 [ 1281.652738][T26342] do_vmi_munmap+0x208/0x3e0 [ 1281.652769][T26342] __vm_munmap+0x19b/0x390 [ 1281.652802][T26342] __x64_sys_munmap+0x59/0x80 [ 1281.652830][T26342] do_syscall_64+0xcd/0x250 [ 1281.652856][T26342] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1281.810651][T26337] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 1281.810758][T26337] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1281.810830][T26337] lowmem_reserve[]: 0 2490 2491 0 0 [ 1281.810887][T26337] Node 0 DMA32 free:1261448kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:88524kB inactive_anon:0kB active_file:70428kB inactive_file:201656kB unevictable:1532kB writepending:4384kB present:3129332kB managed:2550580kB mlocked:0kB bounce:0kB free_pcp:940kB local_pcp:440kB free_cma:0kB [ 1281.810962][T26337] lowmem_reserve[]: 0 0 0 0 0 [ 1281.811017][T26337] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 1281.811084][T26337] lowmem_reserve[]: 0 0 0 0 0 [ 1281.811140][T26337] Node 1 Normal free:3907964kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:0kB free_cma:0kB [ 1281.811209][T26337] lowmem_reserve[]: 0 0 0 0 0 [ 1281.811265][T26337] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1281.811482][T26337] Node 0 DMA32: 4245*4kB (UME) 3187*8kB (UME) 1752*16kB (UME) 1741*32kB (UME) 1593*64kB (UME) 960*128kB (UME) 404*256kB (UME) 140*512kB (UM) 48*1024kB (UME) 7*2048kB (UM) 164*4096kB (UM) = 1261388kB [ 1281.811813][T26337] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 1281.811971][T26337] Node 1 Normal: 123*4kB (UME) 64*8kB (UME) 47*16kB (UME) 209*32kB (UME) 104*64kB (UME) 29*128kB (UME) 12*256kB (UME) 8*512kB (UME) 7*1024kB (UME) 2*2048kB (U) 945*4096kB (M) = 3907964kB [ 1281.812217][T26337] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1281.812238][T26337] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1281.812259][T26337] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1281.812280][T26337] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 1281.812301][T26337] 70295 total pagecache pages [ 1281.812313][T26337] 2 pages in swap cache [ 1281.812323][T26337] Free swap = 124840kB [ 1281.812334][T26337] Total swap = 124996kB [ 1281.812346][T26337] 2097051 pages RAM [ 1281.812357][T26337] 0 pages HighMem/MovableOnly [ 1281.812368][T26337] 427684 pages reserved [ 1281.812385][T26337] 0 pages cma reserved [ 1282.974870][ C1] vkms_vblank_simulate: vblank timer overrun [ 1283.847392][T26369] netlink: 24 bytes leftover after parsing attributes in process `syz.5.4740'. [ 1284.170725][T26378] FAULT_INJECTION: forcing a failure. [ 1284.170725][T26378] name failslab, interval 1, probability 0, space 0, times 0 [ 1284.311907][T26378] CPU: 1 UID: 0 PID: 26378 Comm: syz.7.4742 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1284.311950][T26378] Tainted: [U]=USER [ 1284.311959][T26378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1284.311975][T26378] Call Trace: [ 1284.311987][T26378] [ 1284.311997][T26378] dump_stack_lvl+0x16c/0x1f0 [ 1284.312041][T26378] should_fail_ex+0x50a/0x650 [ 1284.312070][T26378] ? fs_reclaim_acquire+0xae/0x150 [ 1284.312113][T26378] should_failslab+0xc2/0x120 [ 1284.312143][T26378] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 1284.312174][T26378] ? sock_alloc_inode+0x25/0x1c0 [ 1284.312218][T26378] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1284.312249][T26378] sock_alloc_inode+0x25/0x1c0 [ 1284.312279][T26378] alloc_inode+0x5d/0x230 [ 1284.312310][T26378] sock_alloc+0x40/0x280 [ 1284.312339][T26378] __sock_create+0xc1/0x8d0 [ 1284.312378][T26378] __sys_socketpair+0x25d/0x5a0 [ 1284.312414][T26378] ? __pfx___sys_socketpair+0x10/0x10 [ 1284.312448][T26378] ? xfd_validate_state+0x5d/0x180 [ 1284.312480][T26378] ? rcu_is_watching+0x12/0xc0 [ 1284.312521][T26378] __x64_sys_socketpair+0x96/0x100 [ 1284.312555][T26378] ? lockdep_hardirqs_on+0x7c/0x110 [ 1284.312590][T26378] do_syscall_64+0xcd/0x250 [ 1284.312616][T26378] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1284.312648][T26378] RIP: 0033:0x7f36d598cde9 [ 1284.312668][T26378] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1284.312692][T26378] RSP: 002b:00007f36d6863038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1284.312715][T26378] RAX: ffffffffffffffda RBX: 00007f36d5ba5fa0 RCX: 00007f36d598cde9 [ 1284.312732][T26378] RDX: 8000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 1284.312748][T26378] RBP: 00007f36d5a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1284.312763][T26378] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1284.312777][T26378] R13: 0000000000000000 R14: 00007f36d5ba5fa0 R15: 00007ffdbe2d6a68 [ 1284.312809][T26378] [ 1284.516156][ C1] vkms_vblank_simulate: vblank timer overrun [ 1284.619756][T26378] socket: no more sockets [ 1286.333993][T26401] FAULT_INJECTION: forcing a failure. [ 1286.333993][T26401] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1286.361526][T26401] CPU: 0 UID: 0 PID: 26401 Comm: syz.6.4747 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1286.361566][T26401] Tainted: [U]=USER [ 1286.361575][T26401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1286.361590][T26401] Call Trace: [ 1286.361598][T26401] [ 1286.361609][T26401] dump_stack_lvl+0x16c/0x1f0 [ 1286.361651][T26401] should_fail_ex+0x50a/0x650 [ 1286.361681][T26401] ? __pfx_stack_trace_save+0x10/0x10 [ 1286.361723][T26401] get_futex_key+0x4a3/0x1000 [ 1286.361763][T26401] ? __pfx_get_futex_key+0x10/0x10 [ 1286.361800][T26401] ? kasan_save_track+0x14/0x30 [ 1286.361828][T26401] ? hlock_class+0x4e/0x130 [ 1286.361862][T26401] ? mark_lock+0xb5/0xc60 [ 1286.361886][T26401] ? __sys_socketpair+0x34f/0x5a0 [ 1286.361918][T26401] ? __x64_sys_socketpair+0x96/0x100 [ 1286.361947][T26401] ? do_syscall_64+0xcd/0x250 [ 1286.361967][T26401] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.362004][T26401] futex_wait_setup+0x78/0x290 [ 1286.362041][T26401] __futex_wait+0x267/0x3c0 [ 1286.362081][T26401] ? __pfx___futex_wait+0x10/0x10 [ 1286.362117][T26401] ? __pfx_futex_wake_mark+0x10/0x10 [ 1286.362162][T26401] futex_wait+0xe9/0x380 [ 1286.362191][T26401] ? __pfx_futex_wait+0x10/0x10 [ 1286.362232][T26401] ? fd_install+0x223/0x750 [ 1286.362257][T26401] ? __pfx_lock_release+0x10/0x10 [ 1286.362289][T26401] do_futex+0x22b/0x350 [ 1286.362313][T26401] ? __pfx_do_futex+0x10/0x10 [ 1286.362339][T26401] ? fd_install+0x242/0x750 [ 1286.362367][T26401] __x64_sys_futex+0x1e1/0x4c0 [ 1286.362400][T26401] ? __pfx___x64_sys_futex+0x10/0x10 [ 1286.362426][T26401] ? rcu_is_watching+0x12/0xc0 [ 1286.362470][T26401] do_syscall_64+0xcd/0x250 [ 1286.362495][T26401] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1286.362528][T26401] RIP: 0033:0x7efed338cde9 [ 1286.362547][T26401] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1286.362571][T26401] RSP: 002b:00007efed428e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1286.362596][T26401] RAX: ffffffffffffffda RBX: 00007efed35a5fa8 RCX: 00007efed338cde9 [ 1286.362613][T26401] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007efed35a5fa8 [ 1286.362628][T26401] RBP: 00007efed35a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1286.362644][T26401] R10: 0000000000000000 R11: 0000000000000246 R12: 00007efed35a5fac [ 1286.362659][T26401] R13: 0000000000000000 R14: 00007ffdad082230 R15: 00007ffdad082318 [ 1286.362691][T26401] [ 1287.555373][T26421] netlink: 24 bytes leftover after parsing attributes in process `syz.7.4752'. [ 1287.723788][T26423] FAULT_INJECTION: forcing a failure. [ 1287.723788][T26423] name failslab, interval 1, probability 0, space 0, times 0 [ 1287.738185][T26423] CPU: 1 UID: 0 PID: 26423 Comm: syz.1.4753 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1287.738226][T26423] Tainted: [U]=USER [ 1287.738235][T26423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1287.738250][T26423] Call Trace: [ 1287.738259][T26423] [ 1287.738270][T26423] dump_stack_lvl+0x16c/0x1f0 [ 1287.738313][T26423] should_fail_ex+0x50a/0x650 [ 1287.738343][T26423] ? fs_reclaim_acquire+0xae/0x150 [ 1287.738384][T26423] should_failslab+0xc2/0x120 [ 1287.738425][T26423] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1287.738453][T26423] ? __pfx___might_resched+0x10/0x10 [ 1287.738484][T26423] ? __anon_vma_prepare+0x344/0x5e0 [ 1287.738517][T26423] __anon_vma_prepare+0x344/0x5e0 [ 1287.738543][T26423] ? __pfx___pte_alloc+0x10/0x10 [ 1287.738581][T26423] __vmf_anon_prepare+0x11c/0x240 [ 1287.738607][T26423] do_pte_missing+0x1032/0x3e10 [ 1287.738639][T26423] ? _raw_spin_unlock+0x28/0x50 [ 1287.738670][T26423] ? __pmd_alloc+0x3c2/0x870 [ 1287.738697][T26423] __handle_mm_fault+0x1166/0x2c60 [ 1287.738735][T26423] ? __pfx___handle_mm_fault+0x10/0x10 [ 1287.738794][T26423] handle_mm_fault+0x3fa/0xaa0 [ 1287.738828][T26423] __get_user_pages+0x773/0x36f0 [ 1287.738863][T26423] ? __pfx_mt_find+0x10/0x10 [ 1287.738899][T26423] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1287.738929][T26423] ? __pfx___get_user_pages+0x10/0x10 [ 1287.738958][T26423] ? __mm_populate+0x21d/0x380 [ 1287.738998][T26423] populate_vma_page_range+0x27f/0x3a0 [ 1287.739029][T26423] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1287.739057][T26423] ? __pfx_find_vma_intersection+0x10/0x10 [ 1287.739099][T26423] ? vm_mmap_pgoff+0x29b/0x3a0 [ 1287.739132][T26423] __mm_populate+0x1d6/0x380 [ 1287.739161][T26423] ? __pfx___mm_populate+0x10/0x10 [ 1287.739192][T26423] ? up_write+0x1b2/0x520 [ 1287.739227][T26423] vm_mmap_pgoff+0x2d3/0x3a0 [ 1287.739252][T26423] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1287.739284][T26423] ? __x64_sys_futex+0x1e1/0x4c0 [ 1287.739307][T26423] ? __x64_sys_futex+0x1ea/0x4c0 [ 1287.739337][T26423] ksys_mmap_pgoff+0x7d/0x5c0 [ 1287.739373][T26423] ? rcu_is_watching+0x12/0xc0 [ 1287.739412][T26423] __x64_sys_mmap+0x125/0x190 [ 1287.739448][T26423] do_syscall_64+0xcd/0x250 [ 1287.739474][T26423] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1287.739506][T26423] RIP: 0033:0x7f10ead8cde9 [ 1287.739525][T26423] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1287.739549][T26423] RSP: 002b:00007f10ebb6b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1287.739571][T26423] RAX: ffffffffffffffda RBX: 00007f10eafa5fa0 RCX: 00007f10ead8cde9 [ 1287.739588][T26423] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 1287.739603][T26423] RBP: 00007f10eae0e2a0 R08: 0000000000000007 R09: 0000000000028000 [ 1287.739618][T26423] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1287.739633][T26423] R13: 0000000000000000 R14: 00007f10eafa5fa0 R15: 00007ffec7fc2358 [ 1287.739667][T26423] [ 1288.037070][ C1] vkms_vblank_simulate: vblank timer overrun [ 1289.072134][T26428] Process accounting resumed [ 1289.085934][T26428] kernel write not supported for file vkms/crtc-0/crc/data (pid: 26428 comm: syz.5.4754) [ 1290.153987][T26445] kernel write not supported for file vkms/crtc-0/crc/data (pid: 26445 comm: syz.5.4761) [ 1290.289171][T26460] kernel write not supported for file vkms/crtc-0/crc/data (pid: 26460 comm: syz.5.4763) [ 1290.731473][T26463] kernel write not supported for file vkms/crtc-0/crc/data (pid: 26463 comm: syz.5.4764) [ 1291.081639][T26470] kernel write not supported for file vkms/crtc-0/crc/data (pid: 26470 comm: syz.5.4766) [ 1291.670350][T26475] FAULT_INJECTION: forcing a failure. [ 1291.670350][T26475] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1291.725375][T26475] CPU: 1 UID: 0 PID: 26475 Comm: syz.7.4767 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1291.725414][T26475] Tainted: [U]=USER [ 1291.725422][T26475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1291.725437][T26475] Call Trace: [ 1291.725444][T26475] [ 1291.725452][T26475] dump_stack_lvl+0x16c/0x1f0 [ 1291.725491][T26475] should_fail_ex+0x50a/0x650 [ 1291.725518][T26475] ? lockdep_hardirqs_on+0x7c/0x110 [ 1291.725555][T26475] should_fail_futex+0x4c/0x60 [ 1291.725588][T26475] __x64_sys_futex+0x260/0x4c0 [ 1291.725615][T26475] ? __pfx___x64_sys_futex+0x10/0x10 [ 1291.725640][T26475] ? rcu_is_watching+0x12/0xc0 [ 1291.725681][T26475] do_syscall_64+0xcd/0x250 [ 1291.725705][T26475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1291.725736][T26475] RIP: 0033:0x7f36d598cde9 [ 1291.725754][T26475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1291.725775][T26475] RSP: 002b:00007ffdbe2d6bc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1291.725794][T26475] RAX: ffffffffffffffda RBX: 000000000013b573 RCX: 00007f36d598cde9 [ 1291.725809][T26475] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f36d5ba624c [ 1291.725822][T26475] RBP: 0000000000000032 R08: 00007f36d6864000 R09: 0000001dbe2d6ebf [ 1291.725836][T26475] R10: 00007ffdbe2d6cc0 R11: 0000000000000246 R12: 00007f36d5ba624c [ 1291.725851][T26475] R13: 00007ffdbe2d6cc0 R14: 000000000013b5a5 R15: 00007ffdbe2d6ce0 [ 1291.725881][T26475] [ 1291.887188][ C1] vkms_vblank_simulate: vblank timer overrun [ 1292.369768][T26492] netlink: 346 bytes leftover after parsing attributes in process `syz.5.4778'. [ 1294.952391][T26492] kernel write not supported for file vkms/crtc-0/crc/data (pid: 26492 comm: syz.5.4778) [ 1295.998461][T15889] Bluetooth: hci0: unexpected event 0x04 length: 463 > 10 [ 1296.675643][T26532] kernel write not supported for file vkms/crtc-0/crc/data (pid: 26532 comm: syz.5.4777) [ 1297.331701][T26556] sp0: Synchronizing with TNC [ 1297.383915][ T6845] [ 1297.386272][ T6845] ===================================================== [ 1297.393209][ T6845] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 1297.400685][ T6845] 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 Tainted: G U [ 1297.409287][ T6845] ----------------------------------------------------- [ 1297.416228][ T6845] kworker/u8:8/6845 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1297.424044][ T6845] ffffffff8f344058 (disc_data_lock#2){.+.+}-{3:3}, at: sp_get+0x18/0xf0 [ 1297.432415][ T6845] [ 1297.432415][ T6845] and this task is already holding: [ 1297.439772][ T6845] ffffffff9aad5578 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 1297.448498][ T6845] which would create a new lock dependency: [ 1297.454375][ T6845] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#2){.+.+}-{3:3} [ 1297.462225][ T6845] [ 1297.462225][ T6845] but this new dependency connects a HARDIRQ-irq-safe lock: [ 1297.471669][ T6845] (&port_lock_key){-.-.}-{3:3} [ 1297.471697][ T6845] [ 1297.471697][ T6845] ... which became HARDIRQ-irq-safe at: [ 1297.484225][ T6845] lock_acquire.part.0+0x11b/0x380 [ 1297.489430][ T6845] _raw_spin_lock_irqsave+0x3a/0x60 [ 1297.494719][ T6845] serial8250_handle_irq+0x95/0xc80 [ 1297.500001][ T6845] serial8250_default_handle_irq+0x9a/0x210 [ 1297.505977][ T6845] serial8250_interrupt+0x103/0x210 [ 1297.511259][ T6845] __handle_irq_event_percpu+0x229/0x7d0 [ 1297.516980][ T6845] handle_irq_event+0xab/0x1e0 [ 1297.521835][ T6845] handle_edge_irq+0x263/0xd10 [ 1297.526702][ T6845] __common_interrupt+0xdf/0x250 [ 1297.531734][ T6845] common_interrupt+0xba/0xe0 [ 1297.536518][ T6845] asm_common_interrupt+0x26/0x40 [ 1297.541646][ T6845] acpi_safe_halt+0x1a/0x20 [ 1297.546238][ T6845] acpi_idle_enter+0xc5/0x160 [ 1297.550999][ T6845] cpuidle_enter_state+0xaa/0x4f0 [ 1297.556104][ T6845] cpuidle_enter+0x4e/0xa0 [ 1297.560602][ T6845] do_idle+0x310/0x3f0 [ 1297.564752][ T6845] cpu_startup_entry+0x4f/0x60 [ 1297.569624][ T6845] rest_init+0x16b/0x2b0 [ 1297.573950][ T6845] start_kernel+0x3e9/0x4d0 [ 1297.578547][ T6845] x86_64_start_reservations+0x18/0x30 [ 1297.584102][ T6845] x86_64_start_kernel+0xb2/0xc0 [ 1297.589128][ T6845] common_startup_64+0x13e/0x148 [ 1297.594164][ T6845] [ 1297.594164][ T6845] to a HARDIRQ-irq-unsafe lock: [ 1297.601172][ T6845] (disc_data_lock#2){.+.+}-{3:3} [ 1297.601208][ T6845] [ 1297.601208][ T6845] ... which became HARDIRQ-irq-unsafe at: [ 1297.614086][ T6845] ... [ 1297.614095][ T6845] lock_acquire.part.0+0x11b/0x380 [ 1297.621873][ T6845] _raw_read_lock+0x5f/0x70 [ 1297.626478][ T6845] sp_get+0x18/0xf0 [ 1297.630384][ T6845] sixpack_receive_buf+0x59/0x1c80 [ 1297.635596][ T6845] tty_ldisc_receive_buf+0x153/0x190 [ 1297.640980][ T6845] tty_port_default_receive_buf+0x70/0xb0 [ 1297.646797][ T6845] flush_to_ldisc+0x264/0x780 [ 1297.651566][ T6845] process_one_work+0x958/0x1b30 [ 1297.656590][ T6845] worker_thread+0x6c8/0xf00 [ 1297.661265][ T6845] kthread+0x3af/0x750 [ 1297.665419][ T6845] ret_from_fork+0x45/0x80 [ 1297.669924][ T6845] ret_from_fork_asm+0x1a/0x30 [ 1297.674787][ T6845] [ 1297.674787][ T6845] other info that might help us debug this: [ 1297.674787][ T6845] [ 1297.685110][ T6845] Possible interrupt unsafe locking scenario: [ 1297.685110][ T6845] [ 1297.693426][ T6845] CPU0 CPU1 [ 1297.698781][ T6845] ---- ---- [ 1297.704138][ T6845] lock(disc_data_lock#2); [ 1297.708652][ T6845] local_irq_disable(); [ 1297.715399][ T6845] lock(&port_lock_key); [ 1297.722244][ T6845] lock(disc_data_lock#2); [ 1297.729271][ T6845] [ 1297.732714][ T6845] lock(&port_lock_key); [ 1297.737214][ T6845] [ 1297.737214][ T6845] *** DEADLOCK *** [ 1297.737214][ T6845] [ 1297.745346][ T6845] 6 locks held by kworker/u8:8/6845: [ 1297.750624][ T6845] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x12cd/0x1b30 [ 1297.761774][ T6845] #1: ffffc900192bfd18 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x8bb/0x1b30 [ 1297.772856][ T6845] #2: ffff8880252308a8 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x31/0x780 [ 1297.781917][ T6845] #3: ffff888030ea10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 1297.791234][ T6845] #4: ffffffff9aad5578 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 1297.800383][ T6845] #5: ffff888030ea10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 1297.809704][ T6845] [ 1297.809704][ T6845] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 1297.820095][ T6845] -> (&port_lock_key){-.-.}-{3:3} { [ 1297.825310][ T6845] IN-HARDIRQ-W at: [ 1297.829288][ T6845] lock_acquire.part.0+0x11b/0x380 [ 1297.836049][ T6845] _raw_spin_lock_irqsave+0x3a/0x60 [ 1297.842900][ T6845] serial8250_handle_irq+0x95/0xc80 [ 1297.849742][ T6845] serial8250_default_handle_irq+0x9a/0x210 [ 1297.857283][ T6845] serial8250_interrupt+0x103/0x210 [ 1297.864129][ T6845] __handle_irq_event_percpu+0x229/0x7d0 [ 1297.871413][ T6845] handle_irq_event+0xab/0x1e0 [ 1297.877829][ T6845] handle_edge_irq+0x263/0xd10 [ 1297.884243][ T6845] __common_interrupt+0xdf/0x250 [ 1297.890825][ T6845] common_interrupt+0xba/0xe0 [ 1297.897151][ T6845] asm_common_interrupt+0x26/0x40 [ 1297.903837][ T6845] acpi_safe_halt+0x1a/0x20 [ 1297.909986][ T6845] acpi_idle_enter+0xc5/0x160 [ 1297.916309][ T6845] cpuidle_enter_state+0xaa/0x4f0 [ 1297.922976][ T6845] cpuidle_enter+0x4e/0xa0 [ 1297.929040][ T6845] do_idle+0x310/0x3f0 [ 1297.934754][ T6845] cpu_startup_entry+0x4f/0x60 [ 1297.941164][ T6845] rest_init+0x16b/0x2b0 [ 1297.947053][ T6845] start_kernel+0x3e9/0x4d0 [ 1297.953203][ T6845] x86_64_start_reservations+0x18/0x30 [ 1297.960309][ T6845] x86_64_start_kernel+0xb2/0xc0 [ 1297.966890][ T6845] common_startup_64+0x13e/0x148 [ 1297.973485][ T6845] IN-SOFTIRQ-W at: [ 1297.977456][ T6845] lock_acquire.part.0+0x11b/0x380 [ 1297.984220][ T6845] _raw_spin_lock_irqsave+0x3a/0x60 [ 1297.991068][ T6845] serial8250_console_write+0x17c/0x1870 [ 1297.998362][ T6845] console_flush_all+0x800/0xc60 [ 1298.004953][ T6845] console_unlock+0xd9/0x210 [ 1298.011193][ T6845] wake_up_klogd_work_func+0xcf/0x110 [ 1298.018217][ T6845] irq_work_single+0x1bc/0x260 [ 1298.024629][ T6845] irq_work_run_list+0x92/0xc0 [ 1298.031040][ T6845] update_process_times+0x1d4/0x2d0 [ 1298.037887][ T6845] tick_nohz_handler+0x376/0x530 [ 1298.044479][ T6845] __hrtimer_run_queues+0x5fb/0xae0 [ 1298.051327][ T6845] hrtimer_interrupt+0x392/0x8e0 [ 1298.057917][ T6845] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 1298.065547][ T6845] sysvec_apic_timer_interrupt+0x52/0xc0 [ 1298.072830][ T6845] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1298.080462][ T6845] queue_work_on+0x98/0x140 [ 1298.086626][ T6845] ieee80211_rx_handlers+0x6d14/0xc5b0 [ 1298.093735][ T6845] ieee80211_prepare_and_rx_handle+0x2dbc/0x7180 [ 1298.101713][ T6845] ieee80211_rx_for_interface+0x10a/0x1f0 [ 1298.109084][ T6845] ieee80211_rx_list+0x108e/0x2990 [ 1298.115845][ T6845] ieee80211_rx_napi+0xdd/0x400 [ 1298.122349][ T6845] ieee80211_handle_queued_frames+0xd5/0x130 [ 1298.129979][ T6845] tasklet_action_common+0x251/0x3f0 [ 1298.136915][ T6845] handle_softirqs+0x213/0x8f0 [ 1298.143329][ T6845] __irq_exit_rcu+0x109/0x170 [ 1298.149657][ T6845] irq_exit_rcu+0x9/0x30 [ 1298.155550][ T6845] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1298.162834][ T6845] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1298.170469][ T6845] kasan_check_range+0x5a/0x1a0 [ 1298.177060][ T6845] folio_remove_rmap_ptes+0x94/0x3c0 [ 1298.183988][ T6845] unmap_page_range+0x1b1d/0x4350 [ 1298.190663][ T6845] unmap_single_vma+0x194/0x2b0 [ 1298.197165][ T6845] unmap_vmas+0x22f/0x490 [ 1298.203145][ T6845] exit_mmap+0x1c1/0xba0 [ 1298.209032][ T6845] __mmput+0x12a/0x410 [ 1298.214763][ T6845] mmput+0x62/0x70 [ 1298.220144][ T6845] do_exit+0x9ba/0x2d70 [ 1298.225954][ T6845] do_group_exit+0xd3/0x2a0 [ 1298.232105][ T6845] __x64_sys_exit_group+0x3e/0x50 [ 1298.238778][ T6845] x64_sys_call+0x151f/0x1720 [ 1298.245106][ T6845] do_syscall_64+0xcd/0x250 [ 1298.251259][ T6845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.258807][ T6845] INITIAL USE at: [ 1298.262693][ T6845] lock_acquire.part.0+0x11b/0x380 [ 1298.269369][ T6845] _raw_spin_lock_irqsave+0x3a/0x60 [ 1298.276133][ T6845] serial8250_do_set_termios+0x307/0x16f0 [ 1298.283416][ T6845] serial8250_set_termios+0x6e/0x80 [ 1298.290183][ T6845] uart_set_options+0x31b/0x5f0 [ 1298.296608][ T6845] serial8250_console_setup+0x18a/0x460 [ 1298.303718][ T6845] univ8250_console_setup+0x1d4/0x2c0 [ 1298.310658][ T6845] try_enable_preferred_console+0x2fd/0x530 [ 1298.318124][ T6845] register_console+0x3ac/0x1170 [ 1298.324629][ T6845] univ8250_console_init+0x5f/0x90 [ 1298.331303][ T6845] console_init+0x154/0x690 [ 1298.337362][ T6845] start_kernel+0x29f/0x4d0 [ 1298.343428][ T6845] x86_64_start_reservations+0x18/0x30 [ 1298.350456][ T6845] x86_64_start_kernel+0xb2/0xc0 [ 1298.356952][ T6845] common_startup_64+0x13e/0x148 [ 1298.363453][ T6845] } [ 1298.365943][ T6845] ... key at: [] port_lock_key+0x0/0x40 [ 1298.373568][ T6845] [ 1298.373568][ T6845] the dependencies between the lock to be acquired [ 1298.373579][ T6845] and HARDIRQ-irq-unsafe lock: [ 1298.387066][ T6845] -> (disc_data_lock#2){.+.+}-{3:3} { [ 1298.392458][ T6845] HARDIRQ-ON-R at: [ 1298.396428][ T6845] lock_acquire.part.0+0x11b/0x380 [ 1298.403188][ T6845] _raw_read_lock+0x5f/0x70 [ 1298.409340][ T6845] sp_get+0x18/0xf0 [ 1298.414796][ T6845] sixpack_receive_buf+0x59/0x1c80 [ 1298.421553][ T6845] tty_ldisc_receive_buf+0x153/0x190 [ 1298.428490][ T6845] tty_port_default_receive_buf+0x70/0xb0 [ 1298.435951][ T6845] flush_to_ldisc+0x264/0x780 [ 1298.442278][ T6845] process_one_work+0x958/0x1b30 [ 1298.448865][ T6845] worker_thread+0x6c8/0xf00 [ 1298.455104][ T6845] kthread+0x3af/0x750 [ 1298.460816][ T6845] ret_from_fork+0x45/0x80 [ 1298.466881][ T6845] ret_from_fork_asm+0x1a/0x30 [ 1298.473304][ T6845] SOFTIRQ-ON-R at: [ 1298.477281][ T6845] lock_acquire.part.0+0x11b/0x380 [ 1298.484046][ T6845] _raw_read_lock+0x5f/0x70 [ 1298.490206][ T6845] sp_get+0x18/0xf0 [ 1298.495664][ T6845] sixpack_receive_buf+0x59/0x1c80 [ 1298.502421][ T6845] tty_ldisc_receive_buf+0x153/0x190 [ 1298.509361][ T6845] tty_port_default_receive_buf+0x70/0xb0 [ 1298.516735][ T6845] flush_to_ldisc+0x264/0x780 [ 1298.523060][ T6845] process_one_work+0x958/0x1b30 [ 1298.529644][ T6845] worker_thread+0x6c8/0xf00 [ 1298.535879][ T6845] kthread+0x3af/0x750 [ 1298.541596][ T6845] ret_from_fork+0x45/0x80 [ 1298.547663][ T6845] ret_from_fork_asm+0x1a/0x30 [ 1298.554074][ T6845] INITIAL USE at: [ 1298.557960][ T6845] lock_acquire.part.0+0x11b/0x380 [ 1298.564641][ T6845] _raw_write_lock_irq+0x36/0x50 [ 1298.571147][ T6845] sixpack_close+0x1e/0x2f0 [ 1298.577212][ T6845] tty_ldisc_close+0x111/0x1a0 [ 1298.583536][ T6845] tty_ldisc_kill+0x8e/0x150 [ 1298.589697][ T6845] tty_ldisc_release+0x116/0x2a0 [ 1298.596203][ T6845] tty_release_struct+0x23/0xe0 [ 1298.602614][ T6845] tty_release+0xe25/0x1410 [ 1298.608681][ T6845] __fput+0x3ff/0xb70 [ 1298.614222][ T6845] task_work_run+0x14e/0x250 [ 1298.620368][ T6845] do_exit+0xad8/0x2d70 [ 1298.626079][ T6845] do_group_exit+0xd3/0x2a0 [ 1298.632137][ T6845] get_signal+0x2576/0x2610 [ 1298.638202][ T6845] arch_do_signal_or_restart+0x90/0x7e0 [ 1298.645304][ T6845] syscall_exit_to_user_mode+0x150/0x2a0 [ 1298.652503][ T6845] do_syscall_64+0xda/0x250 [ 1298.658567][ T6845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1298.666026][ T6845] INITIAL READ USE at: [ 1298.670349][ T6845] lock_acquire.part.0+0x11b/0x380 [ 1298.677460][ T6845] _raw_read_lock+0x5f/0x70 [ 1298.683960][ T6845] sp_get+0x18/0xf0 [ 1298.689765][ T6845] sixpack_receive_buf+0x59/0x1c80 [ 1298.696871][ T6845] tty_ldisc_receive_buf+0x153/0x190 [ 1298.704153][ T6845] tty_port_default_receive_buf+0x70/0xb0 [ 1298.711877][ T6845] flush_to_ldisc+0x264/0x780 [ 1298.718553][ T6845] process_one_work+0x958/0x1b30 [ 1298.725483][ T6845] worker_thread+0x6c8/0xf00 [ 1298.732063][ T6845] kthread+0x3af/0x750 [ 1298.738125][ T6845] ret_from_fork+0x45/0x80 [ 1298.744578][ T6845] ret_from_fork_asm+0x1a/0x30 [ 1298.751335][ T6845] } [ 1298.753827][ T6845] ... key at: [] disc_data_lock+0x18/0x1020 [ 1298.761809][ T6845] ... acquired at: [ 1298.765605][ T6845] lock_acquire.part.0+0x11b/0x380 [ 1298.770888][ T6845] _raw_read_lock+0x5f/0x70 [ 1298.775572][ T6845] sp_get+0x18/0xf0 [ 1298.779549][ T6845] sixpack_write_wakeup+0x20/0x390 [ 1298.784829][ T6845] tty_wakeup+0xe5/0x120 [ 1298.789244][ T6845] tty_port_default_wakeup+0x2a/0x40 [ 1298.794696][ T6845] serial8250_tx_chars+0x68e/0x860 [ 1298.799972][ T6845] __start_tx+0x3e9/0x4a0 [ 1298.804466][ T6845] serial8250_start_tx+0x368/0x530 [ 1298.809743][ T6845] __uart_start+0x292/0x4c0 [ 1298.814417][ T6845] uart_write+0x218/0xb30 [ 1298.818925][ T6845] sixpack_receive_buf+0x3d7/0x1c80 [ 1298.824292][ T6845] tty_ldisc_receive_buf+0x153/0x190 [ 1298.829751][ T6845] tty_port_default_receive_buf+0x70/0xb0 [ 1298.835644][ T6845] flush_to_ldisc+0x264/0x780 [ 1298.840492][ T6845] process_one_work+0x958/0x1b30 [ 1298.845602][ T6845] worker_thread+0x6c8/0xf00 [ 1298.850360][ T6845] kthread+0x3af/0x750 [ 1298.854595][ T6845] ret_from_fork+0x45/0x80 [ 1298.859184][ T6845] ret_from_fork_asm+0x1a/0x30 [ 1298.864114][ T6845] [ 1298.866429][ T6845] [ 1298.866429][ T6845] stack backtrace: [ 1298.872309][ T6845] CPU: 0 UID: 0 PID: 6845 Comm: kworker/u8:8 Tainted: G U 6.14.0-rc2-syzkaller-00034-gfebbc555cf0f #0 [ 1298.872337][ T6845] Tainted: [U]=USER [ 1298.872343][ T6845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1298.872357][ T6845] Workqueue: events_unbound flush_to_ldisc [ 1298.872384][ T6845] Call Trace: [ 1298.872394][ T6845] [ 1298.872402][ T6845] dump_stack_lvl+0x116/0x1f0 [ 1298.872432][ T6845] check_irq_usage+0xf22/0x1290 [ 1298.872456][ T6845] ? __pfx_check_irq_usage+0x10/0x10 [ 1298.872477][ T6845] ? hlock_conflict+0x58/0x200 [ 1298.872495][ T6845] ? __bfs+0x2fa/0x670 [ 1298.872511][ T6845] ? __pfx_hlock_conflict+0x10/0x10 [ 1298.872529][ T6845] ? hlock_conflict+0x58/0x200 [ 1298.872553][ T6845] ? lockdep_lock+0xc6/0x200 [ 1298.872580][ T6845] ? __pfx_lockdep_lock+0x10/0x10 [ 1298.872608][ T6845] ? __lock_acquire+0x24b4/0x3c40 [ 1298.872628][ T6845] __lock_acquire+0x24b4/0x3c40 [ 1298.872653][ T6845] ? __pfx___lock_acquire+0x10/0x10 [ 1298.872674][ T6845] ? lock_acquire.part.0+0x11b/0x380 [ 1298.872697][ T6845] lock_acquire.part.0+0x11b/0x380 [ 1298.872719][ T6845] ? sp_get+0x18/0xf0 [ 1298.872738][ T6845] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1298.872761][ T6845] ? rcu_is_watching+0x12/0xc0 [ 1298.872787][ T6845] ? trace_lock_acquire+0x14e/0x1f0 [ 1298.872804][ T6845] ? sp_get+0x18/0xf0 [ 1298.872822][ T6845] ? lock_acquire+0x2f/0xb0 [ 1298.872842][ T6845] ? sp_get+0x18/0xf0 [ 1298.872860][ T6845] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 1298.872881][ T6845] _raw_read_lock+0x5f/0x70 [ 1298.872905][ T6845] ? sp_get+0x18/0xf0 [ 1298.872922][ T6845] sp_get+0x18/0xf0 [ 1298.872941][ T6845] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 1298.872961][ T6845] sixpack_write_wakeup+0x20/0x390 [ 1298.872982][ T6845] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 1298.873003][ T6845] tty_wakeup+0xe5/0x120 [ 1298.873026][ T6845] tty_port_default_wakeup+0x2a/0x40 [ 1298.873045][ T6845] serial8250_tx_chars+0x68e/0x860 [ 1298.873066][ T6845] __start_tx+0x3e9/0x4a0 [ 1298.873083][ T6845] serial8250_start_tx+0x368/0x530 [ 1298.873102][ T6845] __uart_start+0x292/0x4c0 [ 1298.873125][ T6845] uart_write+0x218/0xb30 [ 1298.873152][ T6845] sixpack_receive_buf+0x3d7/0x1c80 [ 1298.873179][ T6845] ? ldsem_down_read_trylock+0x121/0x180 [ 1298.873199][ T6845] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 1298.873220][ T6845] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 1298.873242][ T6845] tty_ldisc_receive_buf+0x153/0x190 [ 1298.873268][ T6845] tty_port_default_receive_buf+0x70/0xb0 [ 1298.873296][ T6845] flush_to_ldisc+0x264/0x780 [ 1298.873322][ T6845] ? lock_acquire+0x2f/0xb0 [ 1298.873342][ T6845] ? process_one_work+0x8bb/0x1b30 [ 1298.873364][ T6845] process_one_work+0x958/0x1b30 [ 1298.873387][ T6845] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1298.873410][ T6845] ? __pfx_process_one_work+0x10/0x10 [ 1298.873433][ T6845] ? assign_work+0x1a0/0x250 [ 1298.873452][ T6845] worker_thread+0x6c8/0xf00 [ 1298.873476][ T6845] ? __pfx_worker_thread+0x10/0x10 [ 1298.873497][ T6845] kthread+0x3af/0x750 [ 1298.873515][ T6845] ? __pfx_kthread+0x10/0x10 [ 1298.873532][ T6845] ? lock_acquire+0x2f/0xb0 [ 1298.873554][ T6845] ? __pfx_kthread+0x10/0x10 [ 1298.873572][ T6845] ret_from_fork+0x45/0x80 [ 1298.873595][ T6845] ? __pfx_kthread+0x10/0x10 [ 1298.873612][ T6845] ret_from_fork_asm+0x1a/0x30 [ 1298.873637][ T6845] [ 1299.200507][T15889] Bluetooth: hci0: command 0x0c1a tx timeout [ 1299.384205][T26541] kernel write not supported for file vkms/crtc-0/crc/data (pid: 26541 comm: syz.5.4784) [ 1300.637654][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.643939][ T1297] ieee802154 phy1 wpan1: encryption failed: -22