last executing test programs: 13m6.424771693s ago: executing program 1 (id=477): socket(0xb, 0x6, 0x200009f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = io_uring_setup$auto(0x8, 0x0) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x3}, 0x8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) write$auto(0xca, &(0x7f0000000000)='\x04#\x01\n2\x7f\x88\x83\xa9\xd7\xbea\xcd\x00\x00\x00\xef\xabJY\xee,\xf6\x80\xecP\x9f\x00\x00\x00\x00\x00\x00\x00\x80\xe0Z\x1bsZ\xac\xff\x92+\xc9\x9fs\xbf\xd8\f\xf5\xa7jUA\x11\xf9\xb4U\xc5\x92\xf1', 0x82) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f00000000c0), 0x20100, 0x0) socket(0x23, 0x2, 0x0) ioctl$auto(0x3, 0x89e0, 0x38) mprotect$auto(0xffffffffffffff0f, 0x8000000000000001, 0x8) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/set_event_notrace_pid\x00', 0x88382, 0x0) mmap$auto(0x0, 0x10000400009, 0x5, 0x9b72, r0, 0x7ffe) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x40000, 0x0) ioctl$auto_TCFLSH2(r1, 0x540b, &(0x7f0000000180)="e84ee0321f0f712003094e7564f4c005cd0af1583bb1977ce137db199f99e05c2e7f09c58f71a0fbc32326a15da3a53aaf057ab9be18959c874f490c078e40663eac6a4ea3005500") set_mempolicy$auto(0x6, &(0x7f0000000080)=0x3, 0x21) mmap$auto(0x0, 0x2020009, 0xc, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) eventfd2$auto(0xff, 0xa99) r2 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/personality\x00', 0x40, 0x0) mmap$auto(0x0, 0x2020005, 0xfffffffffffffcaf, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/netdevsim/netdevsim1/take_snapshot\x00', 0x280640, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) splice$auto(0x6, 0xfffffffffffffffd, 0x5, 0xfffffffffffffffc, 0x526, 0x7) landlock_add_rule$auto(0xffffffffffffffff, 0x1, 0x0, 0x2) pread64$auto(r2, &(0x7f0000000240)='3\\h,\x00', 0x6, 0x10001) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f0000000100)={0x64, 0x0, 0x100000, 0x7fffffffefff, 0xfffffffffffffffe, 0x0, 0x6, 0x50b301a, 0x8cb9, 0x2, 0x0, 0x2}) 13m5.929531005s ago: executing program 1 (id=478): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/slab/kmalloc-64/total_objects\x00', 0x2400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/250, 0xfa) 13m5.759509431s ago: executing program 1 (id=480): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sda\x00', 0x401, 0x0) ioctl$auto_BLKTRACESTOP(r0, 0x1275, 0x0) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg1\x00', 0x0, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/sunrpc/parameters/udp_slot_table_entries\x00', 0x80302, 0x0) sendfile$auto(r2, r2, 0x0, 0x2001) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x4c, 0x0, 0x9) r3 = io_uring_setup$auto(0x1, 0x0) connect$auto(0x3, 0x0, 0x56) r4 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x208002, 0x0) ioctl$auto_BLKFLSBUF(r3, 0x1261, 0x0) write$auto_ecryptfs_miscdev_fops_miscdev(r4, &(0x7f0000000180)="77f42b509abd2a837ad24ea266cd7dac02d8dd8b7f06a86e09bbc4fbc23d2fc591c4737eac26f35a0cffb094e4a4b591e623d4cbd7da4d243525625219243064846227b55e0ce5de7bb37ccff63d0ce69b4384ea94afc84275ac09fd64710ee8ed2382e75a2d3940afa7beef293ebb3b93aa53975207c01f043cd60424b61df5b5651dbb8ec7565610b38f7260da029c776a8927dafc8ad2d141ac17ddff8bb6de96e88dc1129ffe675076a82e4fe526c78ee902475cbd94c6cd4d499229b23b05abf8b6", 0xc4) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r1, 0x1, &(0x7f0000000080)="86b411d132c7f2cd49d40b4a8fa138d8a8d67f9f8e7d64091691bf43cb81b22abd57f6554ceec8f499d78eebde4d4a8c7e97413e3dc51ce8d5df32eb3aa37ffd5de2aaf49473779877deae8eb2a77f2b366c43684350993c7bdb777a27bc") pwrite64$auto(0xffffffffffffffff, &(0x7f0000000100)='/dev/sda\x00', 0x9, 0xfffffffffffffffa) ioctl$auto_BLKTRACETEARDOWN(r0, 0x1276, 0x0) 13m5.599247358s ago: executing program 1 (id=482): acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') acct$auto(&(0x7f0000000040)='/dev/sequencer2\x00') r0 = open(&(0x7f0000000840)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x22240, 0x0) r1 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000001180)='/proc/pressure/irq\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000000c0), 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) readlink$auto(0x0, 0x0, 0x7) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x20040054) sendmsg$auto_IPVS_CMD_GET_SERVICE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[], 0x680}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) write$auto_bm_entry_operations_binfmt_misc(0xffffffffffffffff, 0x0, 0x0) pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdds\x1cJ\x99\x00:+\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\xadCl\x9e\xeb\xcd\vp\x99\x00\xc8\x06\xa5\xdc3\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0A\x94\xa3\xaef\x87\xd8\x95I\xfd\xa8\t\xac\x87\xb7\x1d\xd5\x83\xdcyu]\xde\xbe\xbf$<.}\x8b`\x04\xfc\xa2\xab\xb5]\x80\x00\xb9D\xc5\xbc\xf2a\xd66\xa5\xd3\xc1r\x96\x1e\x8db\x05=`\x01\x11\x04Tz\x87A$\x115\x95PUf\xa7\xfe\x19\x00\x82go}@W\xd5\xaej\x01\xbf>5n\x17S\xc0\x8a\xaf%O\xd1W\xa3ua+sUJ\xea\xf9\xb7p-\x128\x9d\xbaM_\xff\x1c\xc3sG\x04\xf2\xd3\xf3{;\xd4\xd7\x1c\x1dZ\xe9\xe9\xc9\x9cu5\xe9\xa2\xb3N\xd2\xc1\xc8\xa5\xadt\xd5BKD\x86\xeb%\a*\x06\xbb\x1e\xfb\x11U\f&\xcbP\xf1\xcf\xccb\xe8Wb\xc5ae\xe3\xf9l\xa9vK\xed\x8cL\xfb%g\x83;\xe1\xe2w\xd6\xaa6\x16\x8fx\x1a\xd7\xc8\xf4[\xbc\b\xe1Z\x92\x14Q\xder0, 0x2, 0x8, 0x59, 0x0, 0xfffffffa}, &(0x7f00000004c0)={0xa5, 0x9, 0x2}) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000640)='/dev/snd/controlC0\x00', 0x80, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0xc4c85513, &(0x7f0000000700)={{@raw=0xb, 0x81, 0x2, 0x406, "26cb83211ffd7f6567850e138dd717bfeb7ab5c55e35d9811b26db6e6f8c5d7d57cdda7ca056a2a31e5dfe27"}, 0x0, @integer64=@value=[0x1000000, 0x1, 0x2, 0x8000, 0x5, 0x4, 0x2, 0xffff, 0x7, 0xffffffff, 0x5, 0xff, 0xe94, 0xb, 0x8, 0xfff, 0x2, 0x7, 0x2, 0x3be, 0x4, 0xd8a, 0x401, 0xa3, 0x6af, 0xb, 0x7ffffffc, 0x7fffffffffffffff, 0x6, 0x6, 0xc, 0x8, 0x4, 0x9, 0xcd, 0x40000000403, 0x6, 0x10000000000001, 0x3, 0x1, 0x6, 0x5, 0x5, 0x7, 0xffff, 0x548, 0xc, 0xe4, 0x7, 0x4, 0x1, 0x951, 0xe0000000000000, 0x6, 0x9, 0x0, 0x6, 0x4000000000000003, 0xb, 0x82c1, 0x4436, 0x0, 0xc1, 0x5], "1cd4f43065c34bdcb5fa6160f24c5f3eb5328361438ff4cd82ad2e9771421dffdad4d39a52fc70ab012aff448a8b4a75e7c5126da5c5495c46ff41d014151d5a4f55a63e9ba1ad1e6542796d2a1cd644b0d756001b66abab0c0fd3b4287befd247e5410bef4c180300b5bed4ab64dfeb4b7c5a69166021a8814332515a657e93"}) r3 = getsockopt$auto_SO_OOBINLINE(r1, 0x46, 0xa, &(0x7f0000000500)='\x00', &(0x7f0000000540)=0x7) ioctl$auto_KVM_GET_SUPPORTED_CPUID(r3, 0xc008ae05, &(0x7f0000000c00)={0x4cdcbf1f, 0x0, [{0x3, 0x6, 0xe, 0x8, 0xad, 0x420, 0xfffffff6}, {0x0, 0x4, 0x8, 0xc944, 0x6, 0x10001, 0x13c}, {0x6, 0x9, 0x2000000, 0xc7d5, 0x6, 0x5, 0x4}, {0x7, 0x8, 0x6, 0x3, 0x2, 0x755d, 0x6}, {0x9, 0x5, 0x8, 0x3, 0x5, 0x99, 0xb8}, {0x3, 0x2, 0x4c1e, 0x0, 0xfffffffd, 0x8000, 0x8d}, {0x0, 0x401, 0x4, 0x4c07219b, 0x3, 0x2, 0x3}, {0xffb, 0x7ff, 0xa794, 0x6, 0x40, 0x8, 0x4}]}) ioperm$auto(0x411f, 0x6b, 0xb2000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) syz_clone3(&(0x7f0000000300)={0x100000, &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000080), {0x35}, &(0x7f00000000c0)=""/207, 0xcf, &(0x7f00000001c0)=""/216, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x5}, 0x58) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0xfffffffc, 0x0) socket(0x2, 0x2, 0x0) openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000000380), 0x2000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/auth.unix.gid/content\x00', 0x20000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/freezer.self_freezing\x00', 0x101080, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x73) open(0x0, 0x161342, 0x80) socket(0xa, 0x2, 0x0) inotify_init1$auto(0x3000000000000) socket(0xa, 0x2, 0x3a) io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 4m13.470860691s ago: executing program 3 (id=2874): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r0, 0x0, 0x810) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) write$auto_snd_seq_f_ops_seq_clientmgr(r1, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) rt_sigaction$auto(0x5, &(0x7f0000000140)={&(0x7f0000000040)=0x0, 0x9, 0x0, {0x81}}, 0x0, 0x8) bind$auto(0xffffffffffffffff, &(0x7f0000000080)=@generic={0x9, "cc00000008f0ffffff000100"}, 0x6b) r2 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto_l2cap_debugfs_fops_(r2, &(0x7f0000000240)=""/177, 0xb1) rt_sigprocmask$auto(0x0, &(0x7f0000000000)={0xfffffffffffffe01}, 0x0, 0x8) r3 = gettid() r4 = getpid() rt_tgsigqueueinfo$auto(r4, r3, 0xa06000, &(0x7f0000000400)={@siginfo_0_0={0xffffffff, 0x1, 0x40, @_rt={0x0, 0xee01, @sival_ptr=&(0x7f0000000300)="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"}}}) rt_sigsuspend$auto(0x0, 0x8) fcntl$auto(0x0, 0x407, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7fffffffffffffff, 0x4) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) socketpair$auto(0x1f, 0x4, 0x8000000000000000, 0x0) get_mempolicy$auto(0x0, 0x0, 0x400, 0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x6, 0x0) 4m12.409839426s ago: executing program 3 (id=2880): mmap$auto(0x4, 0x20009, 0xdb, 0x10, 0x405, 0x30) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bpq4/statistics/tx_heartbeat_errors\x00', 0x200, 0x0) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000480)='/sys/module/zswap/parameters/compressor\x00', 0x80002, 0x0) write$auto_ocfs2_control_fops_stack_user(r2, &(0x7f0000003900)='\t', 0x1) fspick$auto(r1, &(0x7f0000000440)='\x00', 0x9) openat$auto_regulator_summary_fops_(0xffffffffffffff9c, &(0x7f0000000080), 0x801c0, 0x0) read$auto(r0, 0x0, 0x1) r3 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x4002, 0x8, 0x26}, 0x18) socketcall$auto_SYS_ACCEPT4(0x12, &(0x7f00000000c0)=0xfff) madvise$auto(0x43b6932a, 0x7d75, 0x9) mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) mknod$auto(&(0x7f0000000040)='./file0\x00', 0x1001, 0x4) madvise$auto(0x0, 0x80000000, 0x8) r4 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mprotect$auto(0x0, 0x4, 0x4) write$auto(0x3, 0x0, 0x7fffffff) read$auto_ftrace_enable_fops_trace_events(r4, &(0x7f0000000300)=""/249, 0xf9) read$auto(0x3, 0x0, 0x7fffffff) fsconfig$auto_SHMEM_HUGE_DENY(r3, 0xf9c4, &(0x7f00000001c0)='-,\x00', &(0x7f0000000200)="60d50e6eed942a657e35caee8312ac07e3446bd8adfc1924f81644c565029dbe04c6eea3dd7cfd908522d7e8eba1418c7d5aeb65b91077bd4e1d5a2380036d51b46499b310a0fd9df51a367a5beb7d420143e7167b32a68001a903f0378db0fc6a6954d0916af84ccc0bad863680cadf7c80c7eb587658d52fb83b14f9b01530a490e7382978822d80d4f39289d6e3a076002f533a3508139ed81f03945f5565850be052b2e9fc1f71a9ae34dce9cbb8e8a50b15aedf3a061a22a258dba761c934430c9bc6fbdec2beccb7b6d7eb043c907ac064e526da8b211acf28dd837e0fe1f0c68a97db7d11af677de302924869e7a3f3d4402f065abab50e", 0xffffffffffffffff) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_4={0x800000000012, 0x4, 0x80000001, 0x8}, 0x6f4) fanotify_init$auto(0xfffffffb, 0x4) 4m11.97693s ago: executing program 3 (id=2884): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x6, 0x20004, 0x80, 0xffff, r0, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) uname$auto(0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r2, 0x4008af00, 0x0) r3 = socket(0xa, 0x3, 0x87) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000040), r3) sendmsg$auto_TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04002793800000"], 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x20) setsockopt$auto(r3, 0x1, 0x21, 0x0, 0x9) mq_notify$auto(0x5cf5, &(0x7f0000000100)={@sival_ptr=0x0, @inferred=r3, 0x2, @_sigev_thread={0x0, 0x0}}) close_range$auto(0x0, 0x5, 0x0) madvise$auto(0x0, 0x20200, 0x15) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) mknod$auto(&(0x7f0000000180)='./file0\x00', 0x7f, 0x3) sendfile$auto(r5, r5, 0x0, 0x1) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0xa481, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r6, 0x40284504, 0x0) socket(0xa, 0x801, 0x84) set_mempolicy$auto(0x6, 0x0, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:01.0/d3cold_allowed\x00', 0x121002, 0x0) 4m11.436925533s ago: executing program 33 (id=2884): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) mmap$auto(0x6, 0x20004, 0x80, 0xffff, r0, 0x8000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) uname$auto(0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, 0x0, 0x0) r2 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r2, 0x4008af00, 0x0) r3 = socket(0xa, 0x3, 0x87) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000040), r3) sendmsg$auto_TIPC_NL_PEER_REMOVE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="04002793800000"], 0x14}, 0x1, 0x0, 0x0, 0x48891}, 0x20) setsockopt$auto(r3, 0x1, 0x21, 0x0, 0x9) mq_notify$auto(0x5cf5, &(0x7f0000000100)={@sival_ptr=0x0, @inferred=r3, 0x2, @_sigev_thread={0x0, 0x0}}) close_range$auto(0x0, 0x5, 0x0) madvise$auto(0x0, 0x20200, 0x15) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/fs/ocfs2/cluster_stack\x00', 0x88282, 0x0) mknod$auto(&(0x7f0000000180)='./file0\x00', 0x7f, 0x3) sendfile$auto(r5, r5, 0x0, 0x1) sendto$auto(0xffffffffffffffff, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r6 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0xa481, 0x0) ioctl$auto_EVIOCSKEYCODE_V2(r6, 0x40284504, 0x0) socket(0xa, 0x801, 0x84) set_mempolicy$auto(0x6, 0x0, 0x4) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:01.0/d3cold_allowed\x00', 0x121002, 0x0) 2m31.20626219s ago: executing program 5 (id=3213): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r1, 0x8008551c, 0x38) fanotify_init$auto(0x6, 0x2000000000002) socket(0x15, 0x5, 0x0) socket(0x28, 0x1, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x100602, 0x0) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/mounts\x00', 0x40000, 0x0) r2 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0xfffffffffffffffe, 0x948b, 0x5a, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x3]}, 0x0) 2m29.975458099s ago: executing program 5 (id=3220): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) epoll_create1$auto(0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop12\x00', 0x8200, 0x0) fadvise64$auto(r0, 0x4a, 0x400000000000006, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x3a) socket(0x29, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(r2, 0xc040563d, r1) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r3 = fcntl$auto_F_SETLKW(0xffffffffffffffff, 0x7, 0x0) write$auto_proc_clear_refs_operations_internal(r3, &(0x7f0000000080)="06ba44e41bfae49da3099da88950c347f6f839a6b2b0668a639b0e36601913a8e4b1d5d22000f0ebb6ba844ed2b462eb1d7def060930ef6e1cef41b41ae39d6e11f8c104d3dc4dc0c7e1b8d2e916dae03617aca994bc44efceb212edc0545cf31f590a3343ab24f7f3bb45b07171ef0909696327bc4b", 0x76) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto(0x3, 0x402c542b, 0x38) 2m29.08093987s ago: executing program 5 (id=3224): r0 = prctl$auto_PR_GET_TIMING(0xd, 0x6, 0xffffffffffffffff, 0x0, 0x2) write$auto(r0, &(0x7f00000001c0)='+%]\x00', 0xffffffffffffffff) mremap$auto(0x4000, 0xb8, 0x0, 0x3, 0xfffff000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_fops_blob_file(0xffffffffffffff9c, 0x0, 0xca981, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:20/adr\x00', 0x60080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000080)=""/58, 0x3a) socket(0x2, 0x1, 0x106) clock_adjtime$auto(0x4, &(0x7f00000000c0)={0xa91, 0x0, 0x10000, 0x2, 0x2, 0x9, 0x10000, 0x0, 0xb, 0x6, 0xcd4, {0x401, 0x9}, 0x9, 0x5, 0x8, 0x54f3, 0x0, 0x2, 0x8, 0x2, 0xfffffffffffffffe, 0xfffffffffffff9b4, 0x2}) prctl$auto_PR_SET_MDWE(0x41, 0x200, 0xffffffffffffffff, 0x100000000, 0x6) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x2, 0x8, 0x0) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000002c0), 0x2, 0x0) mmap$auto(0x0, 0x8, 0x4, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r4, 0x0, 0x39b8) 2m28.736617542s ago: executing program 5 (id=3227): r0 = epoll_create$auto(0x2) socket(0xa, 0x6, 0x0) socket(0x2b, 0x1, 0x1) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$auto_SG_GET_TIMEOUT2(0xffffffffffffffff, 0x2202, &(0x7f0000000740)="a0fbdc0851") r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r2 = syz_open_procfs$namespace(0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mdstat\x00', 0x1c1080, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0xfffffffffffff, 0x5) ioperm$auto(0x7, 0x6, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) r4 = syz_clone3(&(0x7f0000000200)={0x383281180, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) prctl$auto_PR_GET_CHILD_SUBREAPER(0x25, 0x56, r4, 0x100000001, 0x10000) socket(0x2, 0x3, 0x2) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xd, 0x1, 0x9, 0x4, 0x15f4da0b, 0x3, 0x5, 0xc, 0x80400001, 0x7, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) r5 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) write$auto(r5, &(0x7f0000001140)='.G+\xbcr\xd4-\x01K5\x042`\xbex3\xb2E\xd9g\xe4u%\x99\xb1~\xd1Q\v\xae\xbd\x1eN\xd1\xaa6\xd4\xa4h\xee\xda@\xf6\xbdNDxXmha2,\xee\x99\x83=C\x1e\xd9\xff5\xa4\xbb\x98\xc1\x8b\x17n]\xdc\x84\x9e\xa8a>2\xb3\x1c\x03H\xb8\xb6\x01\x8c\xa3WX\x98EMp\x96\xca\xd8\x06\x8d\x8d\x9e\x88L\x15\xa6\xd1G\xa9\xd5\xd5x\x9c\x9cY\x91\x99\x12m\x84\x17\x98\xe3\xa3\x98\x9c5\xd8\x047T\xe2L\x19\x89\xe3/Y\xb9l\xc8I\x86\x82\xb3\xf4\xdc\x04-\xaf;@t\xac\x9bH\xca\x0e\x04\xdb\x88\x88s\xe1\x8428\xcf\xb4\xeb\xaaI\xd6\xec\x88\xd4\b\x1e\xc2b\xdfF\x9d\x1eC\t\xdc\xe7\xd6\x8bmC$q\xa1D\'\xc4\xe8S\xf7\xf9\xcf\xb3\xd7\xe2\xfatQ\xa9P\x7fP$k\xd4%\xd7\v62\x89\x91b\x99\xc8`\xc6m\xbe\xde}\xdc\xc8\x18\x06\xd8\x86+*d\xed\xeb[SU\xc2)\xacm9\xfd\x9d\xd1\xf16Q\xf2Pk>\x86\xa6\xcfC\xe6(dzd(\xbe\x1f\"\x1bu\xf4V\xcf\x00\x15\x8b\xba\xe1\xf3*\xa0\x9b\xf9:J\x1f\x13{\x89\x9d\xb2\xef\xd0[|v\xd9*\x1b\xe2\xaa\x15\x80\x97\x01\x8bl\xfa,\x95kv\x1dV?&\xee\xf8\xea\x99|\xd1\xf0f\xb6?G\xb8\x88\xc4\xe1\xe5&\x01H2:\xb21`d\xb4\x98x\xdd\xceJ\xe6\x87r\x95\x11\x8a\xe8\xee\xb2;\x0e~D\xd1\v$\xeb\xc1\xf0\x9f\xb6E\x00\xe5\xe5\xef2\x170\xcdW`\xb67\xceQer\x1eF;\x80\x1dn\xbb\\F\xa5\r\xbc\xe1\xa0\xfdnZ\xbd\xc8\xffzf\x86\x9e\xba;8`\xf9Z\t', 0x7ef) read$auto(r2, &(0x7f0000000040)='}/)\x00', 0x4411) 2m27.508240445s ago: executing program 5 (id=3232): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0xffffffffffffffff, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0xd, 0xfffffffffffffffd, 0x63, 0x0, 0x0, 0x0, 0x8, 0x200, 0x800000000100002, 0x40000406, 0x1, 0xc, 0xe6, 0x11, 0x6, 0x7}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:01/status\x00', 0x100, 0x0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0], 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x2000c000}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x3000000) 2m27.261414584s ago: executing program 5 (id=3234): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, r0, 0x4000807c) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0x80003, 0x300) (async) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x5, 0x0, 0x8004) (async) setsockopt$auto(r1, 0x107, 0x5, 0x0, 0x8004) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) (async) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r2 = socket(0xa, 0x1, 0x84) socket(0x2a, 0x2, 0x9) (async) socket(0x2a, 0x2, 0x9) socket(0xa, 0x1, 0x84) (async) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) (async) r4 = socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x0) (async) socket(0x2, 0x6, 0x0) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0100df"], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r5, @ANYRES16=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x84) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) sendfile$auto(r6, r6, 0x0, 0x5) r7 = getpgid(0xffffffffffffffff) prctl$auto_PR_GET_PDEATHSIG(0x2, 0x4, r7, 0xa, 0x800000000) (async) prctl$auto_PR_GET_PDEATHSIG(0x2, 0x4, r7, 0xa, 0x800000000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x408440, 0x0) ioctl$auto_SNDCTL_DSP_RESET(r0, 0x5000, 0x0) (async) ioctl$auto_SNDCTL_DSP_RESET(r0, 0x5000, 0x0) mmap$auto(0x0, 0x6, 0x8100000001, 0x11, 0x401, 0x7ffe) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x408900, 0x0) write$auto(0x3, 0x0, 0x7ffffffa) 2m12.11813361s ago: executing program 34 (id=3234): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x7, 0xdf, 0x9b72, r0, 0x4000807c) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0x80003, 0x300) (async) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x5, 0x0, 0x8004) (async) setsockopt$auto(r1, 0x107, 0x5, 0x0, 0x8004) mmap$auto(0x0, 0x2, 0xffffffffffffffff, 0x40eb1, 0x602, 0x300000000000) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) (async) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r2 = socket(0xa, 0x1, 0x84) socket(0x2a, 0x2, 0x9) (async) socket(0x2a, 0x2, 0x9) socket(0xa, 0x1, 0x84) (async) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) (async) r4 = socket(0x10, 0x2, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x0) (async) socket(0x2, 0x6, 0x0) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0100df"], 0x14}, 0x1, 0x0, 0x0, 0x84}, 0x40) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYRES8=r2, @ANYRES8=r5, @ANYRES16=r3], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x84) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x82, 0x0) sendfile$auto(r6, r6, 0x0, 0x5) r7 = getpgid(0xffffffffffffffff) prctl$auto_PR_GET_PDEATHSIG(0x2, 0x4, r7, 0xa, 0x800000000) (async) prctl$auto_PR_GET_PDEATHSIG(0x2, 0x4, r7, 0xa, 0x800000000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x408440, 0x0) ioctl$auto_SNDCTL_DSP_RESET(r0, 0x5000, 0x0) (async) ioctl$auto_SNDCTL_DSP_RESET(r0, 0x5000, 0x0) mmap$auto(0x0, 0x6, 0x8100000001, 0x11, 0x401, 0x7ffe) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/pts/ptmx\x00', 0x408900, 0x0) write$auto(0x3, 0x0, 0x7ffffffa) 6.668985671s ago: executing program 4 (id=3885): mmap$auto(0x0, 0x20009, 0xe2, 0x16, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x2002, 0x0) writev$auto(r0, &(0x7f0000000140)={0x0, 0x8000}, 0x25) r1 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x80002, 0x0) madvise$auto(0x110c230000, 0x1, 0x9) mmap$auto(0x2, 0x400006, 0xdf, 0x9b76, r1, 0x8000) setresgid$auto(0x9, 0xffffffffffffffff, 0xffffffffffffffff) socket(0x21, 0x2, 0x2) socket(0x1d, 0x2, 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cgroup.subtree_control\x00', 0x142, 0x0) write$auto(r2, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C\x00\x00\x00\x00\x00\x00\x00\x00', 0x4) openat$auto_urandom_fops_random(0xffffffffffffff9c, 0x0, 0x2000, 0x0) r3 = socket(0x2c, 0x2, 0x4) r4 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/fb0\x00', 0x109e00, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x200, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS64(r5, 0xc0385720, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x8) mmap$auto(0x1000, 0x1, 0x7ff, 0x19, 0xffffffffffffffff, 0x1) mmap$auto(0x0, 0xe983, 0xdf, 0x16, 0x401, 0x7ffc) statmount$auto(0x0, &(0x7f0000000400)={0x8, 0x1, 0xb, 0x4, 0x16, 0x4, 0x1ffe0, 0x6, 0x6, 0x2, 0x2, 0x25, 0xfff, 0x7, 0x3, 0x1, 0x5, 0x20000003, 0x5, 0x7, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, [0x0, 0x2, 0x0, 0x5, 0x0, 0x3, 0x3, 0x3, 0x1000000000000, 0x0, 0x40000000003, 0x0, 0x0, 0x8, 0x1, 0x0, 0x0, 0x0, 0xbd3, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x4, 0x401, 0x0, 0x3, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x0, 0x1, 0xffffffff, 0x0, 0x0, 0x10000, 0xbf], "83cbff40f2b737303f587e561b1a0666a016842e92c11f02cbdcc027a7ddd574aa5f51abf1dd4c7d47aac410cb00b37359b214702470b1ad28a0e4c02e359e52658a9f"}, 0x1fe, 0xfffffb26) ioctl$auto(r4, 0x3, 0x1) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r3) sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET2(r3, &(0x7f0000000380)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, r6, 0x100, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x440ecc4159a90d00) semctl$auto_GETPID(0x1c02, 0x0, 0xb, 0x9) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x4, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 6.320672949s ago: executing program 4 (id=3886): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) timer_create$auto(0x3, 0x0, 0x0) timer_delete$auto(0x1) socket(0x1d, 0x3, 0x1) io_uring_setup$auto(0x3ff, 0x0) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/vmallocinfo\x00', 0x100182, 0x0) pread64$auto(r0, 0x0, 0x1c000000000000, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x2, 0x20009, 0x4000000000e0, 0xeb1, 0x401, 0x7ffd) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x4, 0x2020009, 0x9, 0xeb1, 0xffffffffffffffff, 0x8000) msync$auto(0x0, 0xe0, 0x6) mkdir$auto(0x0, 0x8001) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) bpf$auto(0xd, 0x0, 0x6f5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xa, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xffffffffffffff9f, &(0x7f0000000000)='>', 0x8000, 0x103}, 0xfffe}, 0x1, 0xb) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2, 0x1, 0x0) 3.244837557s ago: executing program 2 (id=3903): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) 3.097567482s ago: executing program 2 (id=3906): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040000}, 0x80) mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x400056a, 0x9, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) bpf$auto(0x2, 0x0, 0x91) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/psaux\x00', 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/udp_early_demux\x00', 0x20000, 0x0) read$auto(0x3, 0x0, 0x80) r0 = openat$auto_nsim_pp_hold_fops_netdev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim3/ports/3/pp_hold\x00', 0xc0b02, 0x0) write$auto(r0, 0x0, 0xc70) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) unshare$auto(0x200) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') setns(r1, 0x0) clone$auto(0xfffffffe22000, 0x2, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x800fffffffc) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x1, 0x5, 0x7181, 0x1ffde, 0x6, 0x3, 0x9, 0x6, 0x80003, 0x4, 0x1ffffffffffd, 0xb4, 0x3, 0x8000000000000000, 0x10007, 0x80, 0x459f, 0x0, 0xa, 0x22000, 0x200, 0x4, 0x84, [0x3, 0x2, 0x4, 0x9, 0x0, 0x2080, 0x0, 0x0, 0x2, 0x1, 0xfffffffffffffffd, 0x3, 0x100000001, 0x1004, 0x6, 0x0, 0xfffffffffffbfffd, 0x4, 0x10000000000001, 0x6, 0xe, 0x3, 0xfffffffffffffe00, 0x0, 0x0, 0x5, 0x400000000005b8, 0x6, 0x2, 0x100, 0xa252, 0x4, 0xffffffffffffffff, 0xff74, 0xfff, 0xfffffffffffffffc, 0xa, 0xa38, 0x80000000, 0xffff, 0xfffffffffffffffc, 0x9, 0x1, 0x7, 0x40c567]}, 0x8001, 0xd) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}, 0x1, 0x0, 0x0, 0x1}, 0x40000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_SET_CONFIG(r3, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000007c0)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3a8935ae}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x800) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0xfffffffffffffffa, 0x8}, 0x800}, 0x10a, 0x8, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x560a, 0x7) r6 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r6, 0xfffffffffffffd03, &(0x7f00000001c0)) 2.265111154s ago: executing program 4 (id=3910): r0 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000240)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x1000, 0x0) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={0x14, r2, 0x1f5, 0x70bd28, 0x25dfdbfb, {0xa, 0x0, 0xaf5}}, 0x14}, 0x1, 0x0, 0x0, 0x20040010}, 0x2000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000b80), 0xffffffffffffffff) r5 = semctl$auto_SEM_INFO(0x9, 0x401, 0x13, 0x9) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = prctl$auto(0x29, 0x0, 0x0, 0x0, 0x0) r8 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000580), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NFSD_CMD_POOL_MODE_SET(r9, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x1c, r8, 0x1, 0x70bd25, 0x25dfdbfc, {}, [@NFSD_A_POOL_MODE_MODE={0x7, 0x1, '!%\x00'}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x4800) sendmsg$auto_NFSD_CMD_THREADS_SET(r7, &(0x7f0000000c00)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x2c, r8, 0x10, 0x70bd29, 0x25dfdbfd, {}, [@NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x8}, @NFSD_A_SERVER_SCOPE={0x8, 0x4, '-\xe3\xfe\x00'}, @NFSD_A_SERVER_GRACETIME={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8044}, 0x44885) r10 = getuid() sendmsg$auto_NL80211_CMD_SET_CQM(r7, &(0x7f0000000c40)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x11052c0}, 0xc, &(0x7f00000002c0)={&(0x7f0000000480)=ANY=[@ANYRES64=r6, @ANYRES64=r10, @ANYBLOB="00082cbd7000fcdbdf253f00000005008900910000000600480002000000080009000200000004001601040093009000e380f6461d49fd0c121b1dced731001c140fc5fe657d4e1fe8560670a45b8aec06dea5c1c736bffaa004eedbe2cc318dfa2ba2fa3bcd9b16830db0133d814dec6eb7c5372292d5ffd0047adb0b205faf9796254ae3c5a12f6744adfda3b3389aa14e8b191a23e57a3750c7b99901863e5c088e2f6656c7d19a5ddb0f81e96c34448b5edc48a5ac622429a281c204"], 0xc4}, 0x1, 0x0, 0x0, 0x20008800}, 0x14) r11 = setfsuid$auto(r10) setresuid$auto(r10, r10, r11) r12 = gettid() lstat$auto(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000480)={0x3, 0x8, 0x0, 0xf, 0xee01, 0xee00, 0x0, 0x7, 0x101, 0x8000000, 0x2, 0x5, 0x8, 0x6, 0xf5, 0x5, 0x9}) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x5a0, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4c, 0x1, 0x0, 0x1, [@typed={0xb, 0xae, 0x0, 0x0, @str='nlctrl\x00'}, @typed={0xc, 0xe2, 0x0, 0x0, @u64=0x8}, @nested={0xc, 0x11e, 0x0, 0x1, [@typed={0x8, 0xcd, 0x0, 0x0, @pid=r5}]}, @typed={0x7, 0x45, 0x0, 0x0, @str='$]\x00'}, @typed={0x14, 0xb0, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x7e, 0x0, 0x0, @fd=r0}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x26, 0x0, 0x0, @ipv6=@empty}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2ac, 0x1, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @uid=r10}, @typed={0x8, 0xcf, 0x0, 0x0, @pid=r12}, @nested={0x1b6, 0x58, 0x0, 0x1, [@generic="da8c09d3f51187f66a1fa989404c69e0d6a2c67bae2c31125d7bf90af9422c7d4c5e3249007569c8e30f32cc893e1c6e76c99bfbb76ca365cbf0d2fbe37835b64ac75a30ee7206ea32881a5d0bbca591adad19632a5726b8eda514da2aff98fa022bc7389f450eaa99573b1b701ced2746523aebe63c75d8c81d172a11a73892b5f36f11920df264ee1c6afafea40a90d6445a688a2eb96275e7e522bd0918379904a8019e0dd53394fe2096c49f2ac671b233a90279007d39564b8707df3784806e08a5cdbdb3c548", @generic="aa50e2d30c57d0408ec774359739710756f35668c180dca820d3e2aee80711f175fb024aaf8af2d60533e26ac7f4cdfc86c850d3a586d8b5642bd9fe16e57d55fc5deed05651aa098a8f6273a11329e9e38bc0660c5516ee78cd64d62664d4207b9b8ca774285d0e89aa9683124c4e2e370a786a12396fc0c0d7847ff850ad70eaa24dceee933da936aaea54d85584a3f7ed6d9ac779974bb77f324f5c7f391168ab7f8bc9b265334230bd149c103ef40bc456130890ad5fe35033fac83cc0842d2a75de83d206a430ffaf4898b4794af0ec6e67f79af6677e2018e8d9fe442d15", @typed={0x8, 0x122, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0xe0, 0xa1, 0x0, 0x1, [@typed={0xd0, 0xc, 0x0, 0x0, @binary="083754ec5e0d6543d6723d4b5bb57ad10f7106ad78d59e3d8e0627170cf3e3a3af14be985fb9ced009ede2e0e935c8d5fd320754948eb35f9dc30aa2880c3c8d67717e6ce1ff97a41f61e6f162790fb548aa149a4220fc77b610bca3d2d6ed179c5f218812f2fcd59b6d636d3fd83c899faca4eb02eb3a5fa62795a83a410c318b35cb99a19371c6411117188e0c6c275af86732babea0557481dfc4ef61ce433c8ef44678e89190cb568933549528cbe9fbfc66a8acf9a124ceddc7322833ccdca38c64cb87b5ffea9b38a4"}, @typed={0xc, 0xb9, 0x0, 0x0, @u64=0x100000000}]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x27c, 0x1, 0x0, 0x1, [@generic="ae5dcdc9cc3d82d90098c68c3f1505e6616271e51619e684f6776cb69a13b47ba08a37c07748e7f951715360", @typed={0xc, 0x2d, 0x0, 0x0, @u64=0xaec}, @typed={0x34, 0xf8, 0x0, 0x0, @str='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00'}, @nested={0x4, 0x7f}, @nested={0x1cd, 0x3, 0x0, 0x1, [@generic="dfce07439041454d1b0d19eba362b75593b128171297283eae977907425bf4a0e4ddac5fd8694122ec139283a91ee455015373231c708b14b1b863eb30c57a9287abbf6713767ddcc2780401f1c21d3141699d6ac24fb0c8da99537d6d13dcbfb7f5a07605cee03c9df3460a85103f300bed73fd14d2ab9245064c644c3c4f06ae50980b23474a31cf53e387399f018cc1375555097374304595ac5cb4a0f2f43685c7fe4119ac3926802fff80b3961434d7ca3320c93c746a029275fc36b7f03fa8771f", @typed={0x7, 0x127, 0x0, 0x0, @str='/@\x00'}, @typed={0x8, 0x13c, 0x0, 0x0, @uid=r13}, @typed={0x8, 0x7a, 0x0, 0x0, @pid}, @typed={0x8, 0xe3, 0x0, 0x0, @str='nfc\x00'}, @nested={0x4, 0x118}, @generic="0b69dc4a97310d704a9fd632831b3755dedd1d7bd2e605e0ad1548c067b09a2fb3718bc7ba1641f73f5600421619456a41b86cd48af2d49d3283c08c0ffb52d6417723227c95a82cad373903b4926648fd09500d8ff74083ecb7dadae01c1ca3c0af25eb0dbb33b0d08a6bbc1a5f92f2a77ae24de82d90fd8bfba9ffead6cdeda4b88dfcbf0ec408e39af5307169da58431c8ced816efc521fdde529e80e3854933c4b113c3756c7cbe238dbbf4841058b0c2dc666a5a295b1141858c3bd604932f87446d9b3b79bea8d94d355670d5c0a6c9f51fb25b5ad42befadc10", @nested={0x4, 0x127}]}, @nested={0x10, 0xd6, 0x0, 0x1, [@nested={0x4, 0xab}, @typed={0x8, 0xae, 0x0, 0x0, @fd=r1}]}, @typed={0x6, 0xb4, 0x0, 0x0, @str=',\x00'}, @nested={0x20, 0x7a, 0x0, 0x1, [@generic="76ea90c8acd95f2981bf9ead", @nested={0x4, 0x4f}, @nested={0x4, 0xa3}, @typed={0x8, 0x4a, 0x0, 0x0, @u32=0x7fffffff}]}]}]}, 0x5a0}, 0x1, 0x0, 0x0, 0x4000040}, 0x51) r14 = syz_clone(0x5000400, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)={0x20b8, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x20a0, 0x1, 0x0, 0x1, [@nested={0x209c, 0x14d, 0x0, 0x1, [@nested={0x2090, 0x93, 0x0, 0x1, [@nested={0xc, 0x40, 0x0, 0x1, [@typed={0x8, 0x43, 0x0, 0x0, @fd=r0}]}, @generic="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", @nested={0x14, 0xce, 0x0, 0x1, [@typed={0x8, 0xbc, 0x0, 0x0, @pid=r14}, @typed={0x8, 0x92, 0x0, 0x0, @str='!#]\x00'}]}, @nested={0x60, 0xc9, 0x0, 0x1, [@typed={0x4, 0xc4}, @generic="99c52af30e39d3d01c5a4fcc1b62643573bfef25e0a05976a203dc8db407ed2235be9f1d6d138add995eeb960ee8", @nested={0x4, 0xd7}, @typed={0x8, 0x16, 0x0, 0x0, @str='\xa5*-\x00'}, @typed={0x8, 0x96, 0x0, 0x0, @u32=0x6082}, @generic="610b13c736719a6864145c076a18f9aad1ceeec9c970"]}, @nested={0x4, 0x31}, @nested={0x1008, 0x10d, 0x0, 0x1, [@nested={0x4, 0x40}, @generic="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"]}]}, @nested={0x5, 0xc3, 0x0, 0x1, [@generic="98"]}]}]}]}, 0x20b8}, 0x1, 0x0, 0x0, 0x44004}, 0x200400d0) 2.180706539s ago: executing program 2 (id=3912): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) io_uring_setup$auto(0x40000002c55, 0x0) socket(0x10, 0x2, 0x0) r1 = socket(0x2, 0x80002, 0x73) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@query={@target_fd=r1, 0x3ca, 0x6, 0x1, 0x6, @count=0x9c4b, 0x0, 0x2000003, 0x7fffffff, 0xdb, 0x7a7c}, 0x10) bpf$auto(0x1b, &(0x7f0000000380)=@task_fd_query={0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x8, 0xffffffffffffffff, 0x8}, 0x92) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) write$auto(0xffffffffffffffff, 0x0, 0x80000000) getpgid$auto(0x0) ioctl$auto_XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000280)={0x0, 0x4, &(0x7f00000000c0)="27c2fe0441c133959a705d4aa32bac501ff02d3036b0776da2e02ec7", &(0x7f0000000240)=0x84}) 2.091249603s ago: executing program 0 (id=3913): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x1, 0x0) getsockopt$auto(r0, 0x0, 0x61, 0x0, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f00000012c0)={{@raw=0x3, 0x1, 0x6d2e99e8, 0x6, "0582a820061b5c51a65a6dd72b0b15addbdf55cb4b0f2381f2673e3a1ebe21e1bf1b26f0db7b62b67bd764f9"}, 0x0, @integer64=@value_ptr=0x0, "528d458095d42b72adda0cac2d45bdaacfc82245992af763188bf00ab57d5d73b094925aa92857fd2f672f85343275f80841c6ca41e93023ab4510269ed959a79a789527276d90375018fc08050559d8936b8d72087a5689d4338da78b8b8bdcea8188ca43202fb78dacb3fea1258074885c899d75cd52751f9be959d90fa5c2"}) 1.87305267s ago: executing program 6 (id=3914): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) socket(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) write$auto(r0, &(0x7f00000001c0)='/dev/audio1\x00JR\xe7\xae\xd27M\xe1=\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14\x00'/192, 0x104, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000000000600010000000a0005000000000000000000b3fc010000000000000000000a0001000000000000000000060006000500000008000200", @ANYRES32=0x0, @ANYBLOB="0800040003"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0xa}, 0x2}, 0xfff, 0x0) ioctl$auto_KVM_GET_MSR_FEATURE_INDEX_LIST(r4, 0xc004ae0a, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtd0\x00', 0x0, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r5, 0x80045432, 0x7) move_pages$auto(0x0, 0x5, &(0x7f0000000380)=&(0x7f0000000280), &(0x7f00000003c0)=0x3, 0x0, 0x2) r6 = gettid() futex_wake$auto(&(0x7f0000000200)="2aebc467f25c2eab39f80f4b32718db11c904f5425fe2019c3700495dc2cb3527c2c55e017c235926358f82ce318ee2540e2b041cb3b74f378200d1f995799220c4ff028a4a3aeff8a7caa4fd6ea8d0d22c82153f62b03a5272d8a3a4d1009bca3a6506dd5292200ecfcae34bff3425e85635479f1d051070f59064db729fd8dbb4ff4", 0xfffffffffffffff8, 0x9, 0x6) process_vm_writev$auto(r6, 0x0, 0x3, 0x0, 0x4, 0x0) wait4$auto(0x0, &(0x7f0000000080), 0x4000, &(0x7f00000000c0)={{0x7, 0x7}, {0xe, 0x8}, 0x7fff, 0xd5f5, 0x48a, 0x5, 0x5, 0x80000000, 0x0, 0x1, 0x3, 0x9, 0x7, 0x1, 0x3, 0x5}) 1.146683167s ago: executing program 2 (id=3921): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{@inferred=0x0, 0x1, 0x6, 0x6, "a2b8e85fc56865ba529faa00fffffffe00000000000018f4ffffdeffff0000000000c7692a240000008000"}, 0x6, 0x5, 0x7, @inferred, @reserved="fb99d320be0de941ac3f58d7aae0c84cbe332d618e0342771e3ac6e9a9df07cf9b1c017c611ac455c01804d0d3c89bee7005c5affd5ab811fd53443e6cf63a902991b44e48364e8de3f344584996c31f9ae16c6c4f064c38f590125ed26400", "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f4ab606c276852295e00af49090000008034"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f00000000c0)={@inferred=r1, 0x7, 0xd, 0xa4, "e3eabf11dce36a2eac9cb4682c339b3ce615a9b97386d4462bc6553245da56e4978f37368e849db4a6e0aa4e", @raw=0xa2cfa1c}) 931.253034ms ago: executing program 2 (id=3922): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x20000000000000, 0x9, 0x3ff576b6, 0x50, 0xffffffffffffffff, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) cachestat$auto(0x2, &(0x7f0000000000)={0x605, 0xff}, 0x0, 0xffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001640), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001640), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_LEAVE_OCB(r2, &(0x7f0000001f00)={0x0, 0x0, &(0x7f0000001ec0)={&(0x7f0000001800)={0xa0, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL80211_ATTR_IE={0x8c, 0x2a, "3684a660bdccd1367bc48d95c45654a7d4ef122b5aaf580986f36c8305d02a0134617098711133f1352d29a8989d6853d2b62e6876842b9141c1f1baed01823c40a15b3a9b06aaa8c7fe2bcb43f0e02ab341b1480fd251e4695746cad00d4417d34c9d41ed33d62e634ac67f4a04ac804817cea529436086a5355b67030a24cc223223926569c0ee"}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000001f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000000c0)={0x1c, r4, 0x59e638bc4fbb3f7d, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48018}, 0x400c880) (async) sendmsg$auto_BATADV_CMD_GET_BLA_CLAIM(r3, &(0x7f0000002040)={0x0, 0x0, &(0x7f0000002000)={&(0x7f00000000c0)={0x1c, r4, 0x59e638bc4fbb3f7d, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x48018}, 0x400c880) sendmsg$auto_NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x2}, @NL80211_ATTR_MBSSID_CONFIG={0x34, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r5}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0xe8}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x5}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0xe9}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20001040}, 0x4000000) (async) sendmsg$auto_NL80211_CMD_RADAR_DETECT(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x50, r1, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x2}, @NL80211_ATTR_MBSSID_CONFIG={0x34, 0x132, 0x0, 0x1, [@NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8}, @NL80211_MBSSID_CONFIG_ATTR_TX_IFINDEX={0x8, 0x4, r5}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0xe8}, @NL80211_MBSSID_CONFIG_ATTR_INDEX={0x5, 0x3, 0x5}, @NL80211_MBSSID_CONFIG_ATTR_MAX_INTERFACES={0x5, 0x1, 0xe9}, @NL80211_MBSSID_CONFIG_ATTR_EMA={0x4}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x20001040}, 0x4000000) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x28, 0x1, 0x0) (async) r7 = socket(0x28, 0x1, 0x0) setsockopt$auto(r7, 0x28, 0x1, 0x0, 0x8) (async) setsockopt$auto(r7, 0x28, 0x1, 0x0, 0x8) socket(0x1e, 0xa, 0x1c) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r8 = syz_genetlink_get_family_id$auto_net_dm(&(0x7f0000000200), r0) sendmsg$auto_NET_DM_CMD_CONFIG_GET(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000208}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r8, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NET_DM_ATTR_UNSPEC={0xc, 0x0, "f00e3e10a1ab7c7a"}, @NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8) (async) sendmsg$auto_NET_DM_CMD_CONFIG_GET(r7, &(0x7f0000000300)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000208}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x2c, r8, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NET_DM_ATTR_UNSPEC={0xc, 0x0, "f00e3e10a1ab7c7a"}, @NET_DM_ATTR_SW_DROPS={0x4}, @NET_DM_ATTR_TRUNC_LEN={0x8, 0x9, 0xfffffffd}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x2}, 0x106, 0x0, 0x1, 0x697b}, 0xed7178c}, 0x9a4, 0xfffffffe) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="00042cbd7000f9db72ccf2c3ff03050000000808040004000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8c000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX5n\x91p\xe6\x1eRN8\x99\b\xff\x05\x00J\x99\x00:\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf82\xe0Q8\x0e\x94\x1e\xd37?\x9ef\x15\x02l@\x18*\xc0\xc1\xf2\x14_\x1cC\x8a\v\x00\x00\x00\x00\x00\x00\x00X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00\x00\x00\x00\x00\x00', 0x10, 0x3) mbind$auto(0x0, 0x800605, 0x8003, &(0x7f0000000100)=0xfffe, 0x3, 0x3) 921.310405ms ago: executing program 6 (id=3923): mremap$auto(0x4000, 0xb8, 0x0, 0x3, 0xfffff000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_fops_blob_file(0xffffffffffffff9c, 0x0, 0xca981, 0x0) socket$nl_generic(0x10, 0x3, 0x10) adjtimex$auto(0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) socket(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) write$auto(r0, &(0x7f00000001c0)='/dev/audio1\x00JR\xe7\xae\xd27M0xee01, 0xee00, 0x0, 0x7, 0x101, 0x8000000, 0x2, 0x5, 0x8, 0x6, 0xf5, 0x5, 0x9}) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000540)={0x5a0, 0x0, 0x800, 0x70bd26, 0x25dfdbfd, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4c, 0x1, 0x0, 0x1, [@typed={0xb, 0xae, 0x0, 0x0, @str='nlctrl\x00'}, @typed={0xc, 0xe2, 0x0, 0x0, @u64=0x8}, @nested={0xc, 0x11e, 0x0, 0x1, [@typed={0x8, 0xcd, 0x0, 0x0, @pid=r5}]}, @typed={0x7, 0x45, 0x0, 0x0, @str='$]\x00'}, @typed={0x14, 0xb0, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x7e, 0x0, 0x0, @fd=r0}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x26, 0x0, 0x0, @ipv6=@empty}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x2ac, 0x1, 0x0, 0x1, [@typed={0x8, 0x40, 0x0, 0x0, @uid=r10}, @typed={0x8, 0xcf, 0x0, 0x0, @pid=r12}, @nested={0x1b6, 0x58, 0x0, 0x1, [@generic="da8c09d3f51187f66a1fa989404c69e0d6a2c67bae2c31125d7bf90af9422c7d4c5e3249007569c8e30f32cc893e1c6e76c99bfbb76ca365cbf0d2fbe37835b64ac75a30ee7206ea32881a5d0bbca591adad19632a5726b8eda514da2aff98fa022bc7389f450eaa99573b1b701ced2746523aebe63c75d8c81d172a11a73892b5f36f11920df264ee1c6afafea40a90d6445a688a2eb96275e7e522bd0918379904a8019e0dd53394fe2096c49f2ac671b233a90279007d39564b8707df3784806e08a5cdbdb3c548", @generic="aa50e2d30c57d0408ec774359739710756f35668c180dca820d3e2aee80711f175fb024aaf8af2d60533e26ac7f4cdfc86c850d3a586d8b5642bd9fe16e57d55fc5deed05651aa098a8f6273a11329e9e38bc0660c5516ee78cd64d62664d4207b9b8ca774285d0e89aa9683124c4e2e370a786a12396fc0c0d7847ff850ad70eaa24dceee933da936aaea54d85584a3f7ed6d9ac779974bb77f324f5c7f391168ab7f8bc9b265334230bd149c103ef40bc456130890ad5fe35033fac83cc0842d2a75de83d206a430ffaf4898b4794af0ec6e67f79af6677e2018e8d9fe442d15", @typed={0x8, 0x122, 0x0, 0x0, @ipv4=@multicast1}]}, @nested={0xe0, 0xa1, 0x0, 0x1, [@typed={0xd0, 0xc, 0x0, 0x0, @binary="083754ec5e0d6543d6723d4b5bb57ad10f7106ad78d59e3d8e0627170cf3e3a3af14be985fb9ced009ede2e0e935c8d5fd320754948eb35f9dc30aa2880c3c8d67717e6ce1ff97a41f61e6f162790fb548aa149a4220fc77b610bca3d2d6ed179c5f218812f2fcd59b6d636d3fd83c899faca4eb02eb3a5fa62795a83a410c318b35cb99a19371c6411117188e0c6c275af86732babea0557481dfc4ef61ce433c8ef44678e89190cb568933549528cbe9fbfc66a8acf9a124ceddc7322833ccdca38c64cb87b5ffea9b38a4"}, @typed={0xc, 0xb9, 0x0, 0x0, @u64=0x100000000}]}]}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x27c, 0x1, 0x0, 0x1, [@generic="ae5dcdc9cc3d82d90098c68c3f1505e6616271e51619e684f6776cb69a13b47ba08a37c07748e7f951715360", @typed={0xc, 0x2d, 0x0, 0x0, @u64=0xaec}, @typed={0x34, 0xf8, 0x0, 0x0, @str='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe_raw\x00'}, @nested={0x4, 0x7f}, @nested={0x1cd, 0x3, 0x0, 0x1, [@generic="dfce07439041454d1b0d19eba362b75593b128171297283eae977907425bf4a0e4ddac5fd8694122ec139283a91ee455015373231c708b14b1b863eb30c57a9287abbf6713767ddcc2780401f1c21d3141699d6ac24fb0c8da99537d6d13dcbfb7f5a07605cee03c9df3460a85103f300bed73fd14d2ab9245064c644c3c4f06ae50980b23474a31cf53e387399f018cc1375555097374304595ac5cb4a0f2f43685c7fe4119ac3926802fff80b3961434d7ca3320c93c746a029275fc36b7f03fa8771f", @typed={0x7, 0x127, 0x0, 0x0, @str='/@\x00'}, @typed={0x8, 0x13c, 0x0, 0x0, @uid=r13}, @typed={0x8, 0x7a, 0x0, 0x0, @pid}, @typed={0x8, 0xe3, 0x0, 0x0, @str='nfc\x00'}, @nested={0x4, 0x118}, @generic="0b69dc4a97310d704a9fd632831b3755dedd1d7bd2e605e0ad1548c067b09a2fb3718bc7ba1641f73f5600421619456a41b86cd48af2d49d3283c08c0ffb52d6417723227c95a82cad373903b4926648fd09500d8ff74083ecb7dadae01c1ca3c0af25eb0dbb33b0d08a6bbc1a5f92f2a77ae24de82d90fd8bfba9ffead6cdeda4b88dfcbf0ec408e39af5307169da58431c8ced816efc521fdde529e80e3854933c4b113c3756c7cbe238dbbf4841058b0c2dc666a5a295b1141858c3bd604932f87446d9b3b79bea8d94d355670d5c0a6c9f51fb25b5ad42befadc10", @nested={0x4, 0x127}]}, @nested={0x10, 0xd6, 0x0, 0x1, [@nested={0x4, 0xab}, @typed={0x8, 0xae, 0x0, 0x0, @fd=r1}]}, @typed={0x6, 0xb4, 0x0, 0x0, @str=',\x00'}, @nested={0x20, 0x7a, 0x0, 0x1, [@generic="76ea90c8acd95f2981bf9ead", @nested={0x4, 0x4f}, @nested={0x4, 0xa3}, @typed={0x8, 0x4a, 0x0, 0x0, @u32=0x7fffffff}]}]}]}, 0x5a0}, 0x1, 0x0, 0x0, 0x4000040}, 0x51) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001c80)={0x20b8, r4, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x20a0, 0x1, 0x0, 0x1, [@nested={0x209c, 0x14d, 0x0, 0x1, [@nested={0x2090, 0x93, 0x0, 0x1, [@nested={0xc, 0x40, 0x0, 0x1, [@typed={0x8, 0x43, 0x0, 0x0, @fd=r0}]}, @generic="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", @nested={0x14, 0xce, 0x0, 0x1, [@typed={0x8, 0xbc, 0x0, 0x0, @pid}, @typed={0x8, 0x92, 0x0, 0x0, @str='!#]\x00'}]}, @nested={0x60, 0xc9, 0x0, 0x1, [@typed={0x4, 0xc4}, @generic="99c52af30e39d3d01c5a4fcc1b62643573bfef25e0a05976a203dc8db407ed2235be9f1d6d138add995eeb960ee8", @nested={0x4, 0xd7}, @typed={0x8, 0x16, 0x0, 0x0, @str='\xa5*-\x00'}, @typed={0x8, 0x96, 0x0, 0x0, @u32=0x6082}, @generic="610b13c736719a6864145c076a18f9aad1ceeec9c970"]}, @nested={0x4, 0x31}, @nested={0x1008, 0x10d, 0x0, 0x1, [@nested={0x4, 0x40}, @generic="1dce2f93b5f93ebd5ab6d6fdb3bec6e04eea8e1594dd3037e605dcdafa77fae38394259553fe9a4b53fe53ce0ea3bba99e648c3a32a202ca76e556ff2a3d011f0874b6dd89fd81b9c420d049a6e3e1b4a5698eb810b95350fff76d6b235579fd938345710db0955434b7d29b755f1bfe6ab175669bc574d3f907d8d3ba06396822bc47e8495ad516ed1ebc4880da0e472fbf9b7265d327e0e589356b4b16c3c57400f58baf68c41835a1238d806b347bed16afe2342de790553a357361e8d6a26836ab76111311587d669ee8cf5f4d01831e4b9cb6151c0a641fe8512cc4a2f90c108ad302a0cbe860b5edf5db8f0b1004728f93c1049265ddae4e05916a56795099360f5f49633aaf4d3549242d3629c9caee1f396996140e02715b57bfad2e61e004bf2018b3b5676bd22518d31f23b550e41458e5a12a91f2438a87144bc3a5de5a48bbd290564d9978ee85cd3387f7223923d4e697d69cdca983083abfa70f9b1e62fce0184bf808d9b153d31718b446dfec1c95e54e636f4dfc3da43f945a7bee4076ee2b8ec8e62988b21551f01c20e354e5eef636fde7fb5a8911c0d4a6d60bf15022eaf71dda65953ace1c16f600fdf42f4934c7e4c8c115d9060af540c9f87b8f6a8521f67adce015113da038fcb7f89173b4c74d58b6b9361d9b8b6bcc0b161a6cca26bf6cf95e6d36e3d84829d96b23c61950aa851f040dc5bc9c68af6e57187c3f3fed59ad2c64fb30d9259669b3bcfaf7e8413c62db4a37974137d2eeea90a483d020a58e99299e49955b2815e737fd2010604c731a420e8f914608207c649b708f48b51c54f59c485b474bdeeba18fb53fcd05470dcf682e505626b5ee1c13a3f28d73da5d42cf1b0e919db1b2402d17fe50d5e3d3294eb69aacdadb32ebb7e0384db73e5ca0f94dddf8e6b621e278b8a2731ee553c6b3345964d3fd6d5166a7ba57ce31a23d6ac6653e358e1baba372e9ef8b4689ebb3ccb0993b710ba4c59e697fb6643675f40475a7b6309441033e7f29ce4d96e64f79605d7fe400536789a2e609a136934464ca4a063f71e9414db0aff4d7457530fb58d83eb488d3e7df4ef2ce13a0704241aab21891a384000d957a23cd0e143b9d9910d10d7ac6cd52744fe024323b98381a5f826fa4ffadaee7ef08f6ba5ecc9855a5e5fc178802e581c64d424eaa4e1f9304d59be180f7004e3d97bbadbe4b1599f47e5b3e3404ca658c024f6c3b0691f81b4446ee58b327b2f5ffcf321ceffd7dee955dd2cbf3e27e6a23fafba648716bea91ee34188de1722b9141c570ebbdf3bc522f72f472cf063bec0d6b20f93a2c7b9ef7d153e93d4497015239dcfd12d5015d988bfcc3ee6bf2c83c995c02cc80f678288ea18a1401d8ccb3a2dbb4885ef195f6a6826c920665525700ac3840968040d4c9ef499e878ae2642a4853190ba156f88f93d4396a8b158a11139147f158d533e4d208afc317b3e3eda67b388273ab93200e0a22040f5603e31f52dbd695c7c99fed7b95a0cd06995a4fd623a4e76b998911c9d46e54e86763f141a4e17e7e511fdea1539007e6524f1467eb8742732cb45ebf36eea8eac320a8ee253b2f5e3117382ced0ba1efde9aa3d247c9cb0a2ed793db8348578398f9d1658458a6047d94cfeb0443cbdd3d3d0a35dab8740b0e52cf891c2a2847e53761b946043e9a3ed001a9b19c0c83f9ddd34f4a9052318c14e5f6dccab7725f9408f80ba472b210d8b813c23e40d59c65e8129d795bd2ab134581c362b91628539b29928145a7b6d91f3b0f06254ba51eb3e091a56a7dad25309603f656bb85a1950eb957413072a33206be28f6d19e75c5df41e02dcae0d7a970712e7a7be958e1abf0df38a33fd4244c894cd35dedea3399b2385579c81c06771d7ca96e3c2c9eb3a16eaa26dd83cb5e7a83622b2ddc94ec9a7c2033072507bdf0455e1b87c29255119e9fd416b1b56c55b01176f9d75b4688350c3dd9f8e48ba13cecc5211932dbeda74b3aaf2d8542c372504d3ef6c56aba2a3ea21b0696b56dcb910d2ce88b29c9de8d0fed8e49d0d759c1e3f5a48377523b8299d973d4cc0e3e9f5bef34e3654866d5991fe5c70da8d1c987a47b830675fa3ad085dbcc9b922c613bd142ae597e880a4906c3a027f4eef3fbdb993e581c4ed47419aa4bee424af233b6c618ee0c0d43614f000f6eda9bf8a8f5619fa7e4bab4d9bb6e672071b0f1326bfa78915f385855588162be7249fb2d1ec40c6a0ae1752f4ac141b753ef9e2a5e9922732f33792943b766a5ffa75e0e988580b7be42c4a3b5705704c90599ed3d416ddbdef2525317da2db68107f941082d3dcad7844933f524bbd7706507155a192a371c1dfdd6dcc673792b6e42851f70f0557fd413e4c4c0f759b0175bb7b12f386a4b39a88fc2faa8ea4574b1e35d414f76b00c51b9c44b4e80bf804485049e93a9b38299b4b0119fc2d8b02d7ef592072b2e13700371b3c04b550055628075e1085e1cfeb76454c7d0df5d0a9f78db788811f293199cd64cbc511c36d9323d52855d5ae912451b54fd8b4ecdec108a16627f5f3ecf7534f7eb39920d573cfe5aab4b576dc5b274812a5fb2868d98530d150abb0a03699e0325202c602480baee9eec50882c086afd50bd793a4449117ab41999b1264f744e6a9b5562e3b02e943a0fff723646e877162dbfd737630220afbc0cbd332bc14b9fe5fb83e399e9d92da9102888071a71452343c2f4ff8db2dd6f7297c5f3e33e91f5d5dd7fb2be2492c32afbf067901f71dd13428993461cd2e76c6cb0b5c9b8982fa38f38a6ef96611450e0686b79b7a430d1f63d5c5fe41bdec0bf73ac949d41fec4754f98276df4d27a4e2031f7f584bda64e935945df9c329dbe1abefb0a349b706a3687030441669f0280a7e6a7231613002b7eb6b4a5c0e0f4c2861ae7633b2baabc20f4ef5ec954f95eb43c419fbc031ab1d2c004d0a58627f2a07e101457c0ed57cf46ad8b9d150410c709c6f81314273cbdbe120aedc0c5a2d754593f9bb0adf10b61ff86c25cfb01265fe2280594fe58454fd578f4c4d92ea4ae09e8c61ff24232db9380e7156115b58d7fbee8e029a1a7a654e30f1f3f734a49d1c534c26e208e2201e210e89cdb7d59883e3854e375043376e2d487cdb161bf95e977760080ca0122fbc539bf848ae27f399f29e59766e4b96ee65e83d58c2651280938e6505787960139db969b391f0ec8af414995c0897dedc8e55e12e02951a59b195dffc392b02bd5db2d811466e550a84d54c878d77ab54db859c7cbf66666a35b9804ca115f68275a94a5d426dcbf1369aa9f4e271f1d713a586b12758797a011659a26b3c863eca43d8c47674ff0716160653348cebf7d302ea0e713c6181449ee5a7910447065d6d30abd2b52e58e689cbe7b21c47ee6012c70361d4a1bbb13eb3a56a0fa21cf61898ba326d9689a4dac8a963ff19e3bf118cab4b9b2a0ea4905a95b96454134984b48de48998f3e6f07b73208d71a7cc20fec4fcbc324939b3893a3986d85e247be1499d8d5c3a94eae6482eab1de07826deb45d5816535220c7f813f12637f0fe68beffe6c756bcb2de6dd0a640673d1a1897e78b0039d8cc0fc54e41b4017c4d6c6a3009b2eb8dea3f146e0659797418be24accfe15f33885fab70e388f052e20c440839a97379a99f564ae2d3d28e7cd403a7167da8389b942c7bc1cf197c05a896207fa453deea5bfe0064ffa00abbefb88519ceb60dc98e8693789355e80b0d6878e37dd2b15756c102eb6055059985924a48f8e103825bcb26a7f8dd2df60e0ad78bd061ed5c4befa5a70a0a7f7542a0ab33b302988a57cd043ca8eb33f02e0d47ab1c6b41186c2686ea03201f93a229d3787353fec601218328f9a7677c3364b32f3c9b892f47ee379116249bb7563c3a2c19ce29b91e040166b98f469982279c5936a465ec4b425d6232182be8231d4c1c3a038d9ecbb08dfed74ef10ac1ee307b6e9578102c52fcac7efc8e575378638e912a5b95e6df369db2ad157c515c4ca069e3fd9d0ecdf707d1eed8804adea92aba3cf1eeaf07cfaaf6719be8307604839161ccd1e79cb44aae4d7f6d23bb3b3ac965f9bee6951903125d52d2cd3626ea14538b5a410bfe4edd7edb7477ccdedf4da38c4193f7e6f97de5fe5ff6d7f0064a2f8bbd873e4d188f1c82a4a7256350f5d18846feb72c3be5d44e5839b9159a4ad9189eed8c49f0248bfe2e0e9f39a93c510a26c00d3acde0508d403f74ef01d169ddbaadb33ddb0759ba2e8f954954dafdca3cc4a1edd9be1c4d34619899c0b5ce98e26271f31b4a68a0c344ddb2b657eb44b071f4a6a1757b9cd0761796e5002103f911fc3e0f96936fefcfce9a62b4a858f14a65e9d4fa93787f90f105bfb9261531de158a447e3ad3f420bea462f3bc14b58522cf1d4fc2dd414f4ac5708166ffc04c8fae0012338bb480280114bd7a3ddc9725ee685c2a9aebd763b4ee26574028c3449b628c867600f779f6083957dbeb05c1ff773f2060e7c880068852c75d1b97eeeabadbfc52d2639dee6dbe72cb1fd9f3000c320b122b4ad79517a4c4cbd4350f1c2bebe0802e10cec2d440489297157104ed461c870b867782a77bedb850f7c2e8ab12f5fa12e289cdd7e2e4ec3985c46b36b8355fc839571119c6c85a161c7a58e7d42d818fd51cdc4cc34e48e0af66aeac068e68ced08c88cf21a8f3a0e708eea9c1950f4f0a59901a38fee7051aa51537a70e1f934472edd6fe3dc790df72070009965adeabcb2d2f8dd2ef2335ef7c33d3b4c4661bbd07eb1759a85ff7d284f1256bbb006e8b56ff840f05cb80da7e855f133e5d92b0936faa358a6a2f93d25d64ea71ee644ae2561871ed36f809d25e1fa1f2c76d442a5ffc26e4eaa8fcd9c16607b0abc671aab0c554a5fc136789e12c77e4835878217fdf8b54a2bc9e4dae59b17845d686026e7dae73a2794e023e793ec35d5437a8d727db92e3a313cfd25c2190fed85556c05b083f5c58debc66811155f0ead29007f76e926367d2ecea533aea06edaca806fb5f0f58dd48b63ecc1285cb38faa71715dbed266cf966d33804ac676e0a35b5202bdfc3ae21d6cf0a5ee54eb3e95b617416b984c848701c81612caf388dd7c8c4b87a9c32cd5bb51c46cacc67358bd2ee16b54195390ab6ac74881933de736fc65c1a2a549e840a7cc24c3117f560672087f817b7ceda1528cef30e1c3d2348180336d4c01978ccf0ed5a12df69faab8c2da3cb4c824e5098f396238611b72e1c00ec6a0d780a19944358ffe68be23c27b514f28bc167ac24b82c64bb598ceefa1d57fbd89b06a9c8e4ad4fa99b6428b5bdc746e704b09eb4ef4fbad75a4fe23f03c6a8b5929aff02cd09598ededda997a813d73b33998852e3f3b98ec9405e8ab28e6c6677df2ef5655634de82b45cdbb7333457f964921f4c40968a0bdef76fb872f2a771d6acffcf0022eee0a1b1a2e88cc78696cce9c4f461c7d881b13e4660403f59238f2851d12965f649a79e812ede97168bb53fd2add69fd933825f11270764b843e5114505435895bcada518ca0cf123334855af8c01468ab81fa956079d12bcdcf68113385247710a042185df941656c71972534bbbf5edfc89887e6b40e9bac8c612155d59a1e09dfcce87b460d44c92693f755f43b78b4d8b663b3d80a5ccfa46c6bf5305cf254ec937147477878faaf87b844ad3018a9be18caaa2f4cf50c962d030b7b6bd0ef1ba3c1913ee7f958f63f106c368d"]}]}, @nested={0x5, 0xc3, 0x0, 0x1, [@generic="98"]}]}]}]}, 0x20b8}, 0x1, 0x0, 0x0, 0x44004}, 0x200400d0) 153.587533ms ago: executing program 0 (id=3927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r1, 0x0, 0x80000000006) signalfd$auto(r1, 0x0, 0x8) ioctl$auto_TIOCSETD2(r1, 0x5423, &(0x7f0000000180)="d19655a75fa67238a295dc1e0feac8ce98e95659eade7f6f96a99bc1192a62193f02a03e61732b9740c72d1354828a76cb38928d7cae25b653b460b12af31085d643571dce424cd4cd94c9475b4ea443a0a732a8de1d38060b633ffc2b5359b9b271486fd85a9c446da8c799c18e6bbe53840b7c3660d4886bad603dcc66849ec32a607f36fd1744823811a85e17f9300d92c7d508474c1615a20260c97aab32948d17fc844a3bd13028feab0926bfe373f8bc8d19160b7646") r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001180), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x30, r2, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@HWSIM_ATTR_PMSR_SUPPORT={0x1c, 0x1a, 0x0, 0x1, [@NL80211_PMSR_ATTR_TYPE_CAPA={0x10, 0x4, 0x0, 0x1, [@NL80211_PMSR_TYPE_FTM={0x4, 0x1, 0x0, 0x1, [@NL80211_PMSR_FTM_CAPA_ATTR_MAX_FTMS_PER_BURST={0x5, 0x8, 0x8}]}]}, @NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR={0x4}, @NL80211_PMSR_ATTR_RANDOMIZE_MAC_ADDR={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x48894}, 0x4) 131.656447ms ago: executing program 6 (id=3928): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x0) io_uring_setup$auto(0x40000002c55, 0x0) socket(0x10, 0x2, 0x0) r1 = socket(0x2, 0x80002, 0x73) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@query={@target_fd=r1, 0x3ca, 0x6, 0x1, 0x6, @count=0x9c4b, 0x0, 0x2000003, 0x7fffffff, 0xdb, 0x7a7c}, 0x10) bpf$auto(0x1b, &(0x7f0000000380)=@task_fd_query={0x0, 0xffffffffffffffff, 0x2, 0x5, 0x4, 0x8, 0xffffffffffffffff, 0x8}, 0x92) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) write$auto(0xffffffffffffffff, 0x0, 0x80000000) getpgid$auto(0x0) ioctl$auto_XFS_IOC_FSBULKSTAT_SINGLE(r0, 0xc0205866, &(0x7f0000000280)={0x0, 0x4, &(0x7f00000000c0)="27c2fe0441c133959a705d4aa32bac501ff02d3036b0776da2e02ec7", &(0x7f0000000240)=0x84}) 74.580667ms ago: executing program 4 (id=3929): r0 = openat$auto_gpiolib_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x442, 0x0) pread64$auto(r0, 0x0, 0x8000000fffb, 0xa76b) (fail_nth: 2) 0s ago: executing program 0 (id=3930): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0x3000000, 0x0, 0x1, 0x0, 0x10000000000000, 0x2}, 0x895}, 0x3, 0x0) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x5, 0x105, 0xc, 0xb, 0x800, 0xffffffffffffffff, 0x5, "d81ddef9d4e6d312212bab98f4060bd8", 0x0, 0xffffffffffffffff, 0x7fffffff, 0xa991, 0x7, 0x8001}, 0x7) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/power/pm_trace_dev_match\x00', 0x20080, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000100)=""/188, 0xbc) kernel console output (not intermixed with test programs): ady exists on: batadv_slave_0 [ 737.090025][T17583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.183278][T17583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 737.302554][T17583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.378786][T17583] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 737.478649][T17583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.537166][T17583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.596293][T17583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.642735][T17583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.699873][T17583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.738594][T17583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.791483][T17583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.802402][T17583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.813521][T17583] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 737.824148][T17583] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 737.835610][T17583] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 737.909294][T17583] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.923358][T17583] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.932542][T17583] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 737.949564][T17583] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 738.242596][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.263613][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 738.363501][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 738.371388][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 740.628540][T17919] block2mtd: illegal erase size [ 743.068570][T17997] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2957'. [ 743.088635][T17997] nbd: must specify a size in bytes for the device [ 743.517754][T18003] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2961'. [ 743.550909][T18003] FAULT_INJECTION: forcing a failure. [ 743.550909][T18003] name failslab, interval 1, probability 0, space 0, times 0 [ 743.603065][T18003] CPU: 1 UID: 0 PID: 18003 Comm: syz.4.2961 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 743.603103][T18003] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 743.603116][T18003] Call Trace: [ 743.603122][T18003] [ 743.603132][T18003] dump_stack_lvl+0x16c/0x1f0 [ 743.603170][T18003] should_fail_ex+0x50a/0x650 [ 743.603194][T18003] ? fs_reclaim_acquire+0xae/0x150 [ 743.603227][T18003] should_failslab+0xc2/0x120 [ 743.603248][T18003] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 743.603279][T18003] ? lockdep_rtnl_is_held+0x26/0x40 [ 743.603301][T18003] ? fib_trie_unmerge+0x26d/0xc30 [ 743.603327][T18003] fib_trie_unmerge+0x26d/0xc30 [ 743.603356][T18003] ? __pfx_fib_trie_unmerge+0x10/0x10 [ 743.603390][T18003] fib_unmerge+0xf8/0x520 [ 743.603414][T18003] ? __pfx_fib_nl2rule.constprop.0.isra.0+0x10/0x10 [ 743.603444][T18003] fib4_rule_configure+0x253/0xe00 [ 743.603467][T18003] fib_nl_newrule+0x34e/0x1bd0 [ 743.603501][T18003] ? __pfx_fib_nl_newrule+0x10/0x10 [ 743.603526][T18003] ? rcu_watching_snap_stopped_since+0xf0/0x110 [ 743.603548][T18003] ? trace_contention_end+0xee/0x140 [ 743.603592][T18003] ? trace_lock_acquire+0x14e/0x1f0 [ 743.603619][T18003] ? __pfx_fib_nl_newrule+0x10/0x10 [ 743.603645][T18003] rtnetlink_rcv_msg+0x3c7/0xea0 [ 743.603674][T18003] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 743.603722][T18003] netlink_rcv_skb+0x16b/0x440 [ 743.603752][T18003] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 743.603783][T18003] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 743.603826][T18003] ? netlink_deliver_tap+0x1ae/0xd30 [ 743.603857][T18003] netlink_unicast+0x53c/0x7f0 [ 743.603886][T18003] ? __pfx_netlink_unicast+0x10/0x10 [ 743.603912][T18003] ? __phys_addr_symbol+0x30/0x80 [ 743.603932][T18003] ? __check_object_size+0x488/0x710 [ 743.603956][T18003] netlink_sendmsg+0x8b8/0xd70 [ 743.603986][T18003] ? __pfx_netlink_sendmsg+0x10/0x10 [ 743.604022][T18003] ____sys_sendmsg+0xaaf/0xc90 [ 743.604044][T18003] ? copy_msghdr_from_user+0x10b/0x160 [ 743.604071][T18003] ? __pfx_____sys_sendmsg+0x10/0x10 [ 743.604091][T18003] ? __lock_acquire+0xcc5/0x3c40 [ 743.604119][T18003] ? hlock_class+0x4e/0x130 [ 743.604138][T18003] ? __lock_acquire+0x15a9/0x3c40 [ 743.604169][T18003] ___sys_sendmsg+0x135/0x1e0 [ 743.604197][T18003] ? __pfx____sys_sendmsg+0x10/0x10 [ 743.604223][T18003] ? __pfx___lock_acquire+0x10/0x10 [ 743.604271][T18003] ? __pfx___might_resched+0x10/0x10 [ 743.604298][T18003] ? __might_fault+0xe3/0x190 [ 743.604322][T18003] __sys_sendmmsg+0x201/0x420 [ 743.604352][T18003] ? __pfx___sys_sendmmsg+0x10/0x10 [ 743.604387][T18003] ? __pfx_do_futex+0x10/0x10 [ 743.604422][T18003] ? xfd_validate_state+0x5d/0x180 [ 743.604448][T18003] ? rcu_is_watching+0x12/0xc0 [ 743.604472][T18003] __x64_sys_sendmmsg+0x9c/0x100 [ 743.604499][T18003] ? lockdep_hardirqs_on+0x7c/0x110 [ 743.604523][T18003] do_syscall_64+0xcd/0x250 [ 743.604550][T18003] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 743.604576][T18003] RIP: 0033:0x7fe3a0b8d169 [ 743.604593][T18003] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 743.604611][T18003] RSP: 002b:00007fe3a1a8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 743.604630][T18003] RAX: ffffffffffffffda RBX: 00007fe3a0da5fa0 RCX: 00007fe3a0b8d169 [ 743.604644][T18003] RDX: 0000000000000007 RSI: 0000400000000200 RDI: 0000000000000007 [ 743.604656][T18003] RBP: 00007fe3a0c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 743.604669][T18003] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000000 [ 743.604681][T18003] R13: 0000000000000000 R14: 00007fe3a0da5fa0 R15: 00007ffed180be38 [ 743.604712][T18003] [ 745.230332][ T30] audit: type=1800 audit(4294967951.017:27): pid=18031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.2962" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 745.654059][T18038] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 745.654059][T18038] The task syz.0.2967 (18038) triggered the difference, watch for misbehavior. [ 747.810409][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.816889][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.283873][T18083] netlink: 172 bytes leftover after parsing attributes in process `syz.0.2974'. [ 748.529811][T18115] random: crng reseeded on system resumption [ 749.824257][T18124] nbd4: detected capacity change from 0 to 68719476736 [ 749.895730][T14432] block nbd4: Send control failed (result -89) [ 749.923258][T14432] block nbd4: Request send failed, requeueing [ 749.963689][T15088] block nbd4: Receive control failed (result -32) [ 749.970561][T13227] block nbd4: Dead connection, failed to find a fallback [ 749.984903][T13227] block nbd4: shutting down sockets [ 749.990163][T13227] blk_print_req_error: 6 callbacks suppressed [ 749.990185][T13227] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 750.005473][T13227] buffer_io_error: 6 callbacks suppressed [ 750.005488][T13227] Buffer I/O error on dev nbd4, logical block 0, async page read [ 750.019535][T14432] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 750.028830][T14432] Buffer I/O error on dev nbd4, logical block 0, async page read [ 750.037193][T14432] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 750.055501][T14432] Buffer I/O error on dev nbd4, logical block 0, async page read [ 750.063542][T14432] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 750.072616][T14432] Buffer I/O error on dev nbd4, logical block 0, async page read [ 750.080570][T14432] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 750.097684][T14432] Buffer I/O error on dev nbd4, logical block 0, async page read [ 750.106999][T14432] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 750.116600][T14432] Buffer I/O error on dev nbd4, logical block 0, async page read [ 750.124810][T14432] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 750.133937][T14432] Buffer I/O error on dev nbd4, logical block 0, async page read [ 750.142143][T14432] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 750.163171][T14432] Buffer I/O error on dev nbd4, logical block 0, async page read [ 750.171030][T14432] ldm_validate_partition_table(): Disk read failed. [ 750.183687][T14432] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 750.192786][T14432] Buffer I/O error on dev nbd4, logical block 0, async page read [ 750.248109][T14432] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 750.277865][T14432] Buffer I/O error on dev nbd4, logical block 0, async page read [ 750.301883][T14432] Dev nbd4: unable to read RDB block 0 [ 750.334207][T14432] nbd4: unable to read partition table [ 750.365723][T14432] ldm_validate_partition_table(): Disk read failed. [ 750.383601][T14432] Dev nbd4: unable to read RDB block 0 [ 750.389591][T14432] nbd4: unable to read partition table [ 752.351483][T18178] can: request_module (can-proto-3) failed. [ 756.516322][T15088] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 756.516360][T15088] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 756.531958][T15088] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 756.532056][T15088] Bluetooth: hci0: Malformed LE Event: 0x0d [ 756.841413][T18245] FAULT_INJECTION: forcing a failure. [ 756.841413][T18245] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 756.964599][T18245] CPU: 0 UID: 0 PID: 18245 Comm: syz.4.2994 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 756.964636][T18245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 756.964650][T18245] Call Trace: [ 756.964657][T18245] [ 756.964667][T18245] dump_stack_lvl+0x16c/0x1f0 [ 756.964705][T18245] should_fail_ex+0x50a/0x650 [ 756.964728][T18245] ? __pfx___might_resched+0x10/0x10 [ 756.964769][T18245] should_fail_alloc_page+0xe7/0x130 [ 756.964795][T18245] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 756.964833][T18245] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 756.964869][T18245] ? hlock_class+0x4e/0x130 [ 756.964893][T18245] ? mark_lock+0xb5/0xc60 [ 756.964926][T18245] ? __pfx_mark_lock+0x10/0x10 [ 756.964960][T18245] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 756.964996][T18245] ? hlock_class+0x4e/0x130 [ 756.965019][T18245] ? mark_lock+0xb5/0xc60 [ 756.965049][T18245] ? hlock_class+0x4e/0x130 [ 756.965080][T18245] ? hlock_class+0x4e/0x130 [ 756.965104][T18245] ? __lock_acquire+0xcc5/0x3c40 [ 756.965135][T18245] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 756.965172][T18245] ? policy_nodemask+0xea/0x4e0 [ 756.965198][T18245] alloc_pages_mpol+0x1fc/0x540 [ 756.965223][T18245] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 756.965246][T18245] ? __lock_acquire+0x15a9/0x3c40 [ 756.965284][T18245] folio_alloc_mpol_noprof+0x36/0x2f0 [ 756.965317][T18245] vma_alloc_folio_noprof+0xee/0x1b0 [ 756.965344][T18245] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 756.965371][T18245] ? find_held_lock+0x2d/0x110 [ 756.965409][T18245] do_pte_missing+0x202f/0x3e10 [ 756.965457][T18245] __handle_mm_fault+0x1166/0x2c60 [ 756.965496][T18245] ? __pfx___handle_mm_fault+0x10/0x10 [ 756.965524][T18245] ? follow_page_pte+0x3ac/0x1490 [ 756.965553][T18245] ? __pfx_lock_release+0x10/0x10 [ 756.965603][T18245] handle_mm_fault+0x3fa/0xaa0 [ 756.965642][T18245] __get_user_pages+0x773/0x36f0 [ 756.965680][T18245] ? __pfx_mt_find+0x10/0x10 [ 756.965711][T18245] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 756.965746][T18245] ? __pfx___get_user_pages+0x10/0x10 [ 756.965783][T18245] ? __mm_populate+0x21d/0x380 [ 756.965824][T18245] populate_vma_page_range+0x27f/0x3a0 [ 756.965861][T18245] ? __pfx_populate_vma_page_range+0x10/0x10 [ 756.965894][T18245] ? __pfx_find_vma_intersection+0x10/0x10 [ 756.965926][T18245] ? vm_mmap_pgoff+0x29b/0x3a0 [ 756.965963][T18245] __mm_populate+0x1d6/0x380 [ 756.965999][T18245] ? __pfx___mm_populate+0x10/0x10 [ 756.966037][T18245] ? up_write+0x1b2/0x520 [ 756.966075][T18245] vm_mmap_pgoff+0x2d3/0x3a0 [ 756.966113][T18245] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 756.966152][T18245] ? __x64_sys_futex+0x1e1/0x4c0 [ 756.966179][T18245] ? __x64_sys_futex+0x1ea/0x4c0 [ 756.966212][T18245] ksys_mmap_pgoff+0x7d/0x5c0 [ 756.966243][T18245] ? syscall_user_dispatch+0x7a/0x130 [ 756.966283][T18245] __x64_sys_mmap+0x125/0x190 [ 756.966320][T18245] do_syscall_64+0xcd/0x250 [ 756.966356][T18245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 756.966396][T18245] RIP: 0033:0x7fe3a0b8d169 [ 756.966418][T18245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 756.966442][T18245] RSP: 002b:00007fe3a1a8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 756.966466][T18245] RAX: ffffffffffffffda RBX: 00007fe3a0da5fa0 RCX: 00007fe3a0b8d169 [ 756.966482][T18245] RDX: 00000000000000df RSI: 0000000000400005 RDI: 0000000000000000 [ 756.966501][T18245] RBP: 00007fe3a0c0e2a0 R08: 0000000000000002 R09: 0000000000008000 [ 756.966516][T18245] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 756.966530][T18245] R13: 0000000000000000 R14: 00007fe3a0da5fa0 R15: 00007ffed180be38 [ 756.966563][T18245] [ 763.702691][T15088] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 763.702732][T15088] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 763.720488][T15088] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 763.720552][T15088] Bluetooth: hci4: Malformed LE Event: 0x0d [ 764.024423][T18377] HSR: entered promiscuous mode [ 764.471942][T18377] nvme_fcloop: unknown parameter or missing value '' [ 768.085180][T18445] bond0: option all_slaves_active: invalid value () [ 768.215400][T18446] blk_print_req_error: 24 callbacks suppressed [ 768.215421][T18446] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 768.272956][T18446] buffer_io_error: 23 callbacks suppressed [ 768.272976][T18446] Buffer I/O error on dev nbd0, logical block 0, async page read [ 768.333240][T18446] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 768.424485][T18446] Buffer I/O error on dev nbd0, logical block 0, async page read [ 768.503405][T18446] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 768.512534][T18446] Buffer I/O error on dev nbd0, logical block 0, async page read [ 768.563443][T18446] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 768.578814][T18446] Buffer I/O error on dev nbd0, logical block 0, async page read [ 768.738721][T18446] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 768.748914][T18446] Buffer I/O error on dev nbd0, logical block 0, async page read [ 768.757236][T18446] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 768.766392][T18446] Buffer I/O error on dev nbd0, logical block 0, async page read [ 768.774653][T18446] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 768.783801][T18446] Buffer I/O error on dev nbd0, logical block 0, async page read [ 768.792376][T18446] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 768.801508][T18446] Buffer I/O error on dev nbd0, logical block 0, async page read [ 768.905646][T18446] ldm_validate_partition_table(): Disk read failed. [ 768.912409][T18446] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 768.922199][T18446] Buffer I/O error on dev nbd0, logical block 0, async page read [ 768.936581][T18446] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 768.949195][T18446] Buffer I/O error on dev nbd0, logical block 0, async page read [ 768.957749][T18446] Dev nbd0: unable to read RDB block 0 [ 768.964121][T18446] nbd0: unable to read partition table [ 769.561833][T15088] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 769.573929][T18462] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 769.697503][T18467] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input20 [ 769.703165][ T30] audit: type=1800 audit(4294967987.487:28): pid=18467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3022" name="dbroot" dev="configfs" ino=63723 res=0 errno=0 [ 769.813387][ T30] audit: type=1804 audit(4294967987.497:29): pid=18467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.3022" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=63723 res=1 errno=0 [ 770.983796][T18481] FAULT_INJECTION: forcing a failure. [ 770.983796][T18481] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 771.024778][T18481] CPU: 0 UID: 0 PID: 18481 Comm: syz.2.3026 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 771.024812][T18481] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 771.024827][T18481] Call Trace: [ 771.024834][T18481] [ 771.024842][T18481] dump_stack_lvl+0x16c/0x1f0 [ 771.024881][T18481] should_fail_ex+0x50a/0x650 [ 771.024905][T18481] ? __pfx___might_resched+0x10/0x10 [ 771.024948][T18481] should_fail_alloc_page+0xe7/0x130 [ 771.024974][T18481] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 771.025022][T18481] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 771.025064][T18481] ? hlock_class+0x4e/0x130 [ 771.025088][T18481] ? mark_lock+0xb5/0xc60 [ 771.025122][T18481] ? __pfx_mark_lock+0x10/0x10 [ 771.025157][T18481] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 771.025195][T18481] ? hlock_class+0x4e/0x130 [ 771.025219][T18481] ? mark_lock+0xb5/0xc60 [ 771.025248][T18481] ? hlock_class+0x4e/0x130 [ 771.025281][T18481] ? hlock_class+0x4e/0x130 [ 771.025304][T18481] ? __lock_acquire+0xcc5/0x3c40 [ 771.025334][T18481] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 771.025371][T18481] ? policy_nodemask+0xea/0x4e0 [ 771.025398][T18481] alloc_pages_mpol+0x1fc/0x540 [ 771.025424][T18481] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 771.025448][T18481] ? __lock_acquire+0x15a9/0x3c40 [ 771.025487][T18481] folio_alloc_mpol_noprof+0x36/0x2f0 [ 771.025517][T18481] vma_alloc_folio_noprof+0xee/0x1b0 [ 771.025545][T18481] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 771.025574][T18481] ? find_held_lock+0x2d/0x110 [ 771.025607][T18481] do_pte_missing+0x202f/0x3e10 [ 771.025654][T18481] __handle_mm_fault+0x1166/0x2c60 [ 771.025697][T18481] ? __pfx___handle_mm_fault+0x10/0x10 [ 771.025730][T18481] ? follow_page_pte+0x3ac/0x1490 [ 771.025762][T18481] ? __pfx_lock_release+0x10/0x10 [ 771.025824][T18481] handle_mm_fault+0x3fa/0xaa0 [ 771.025866][T18481] __get_user_pages+0x773/0x36f0 [ 771.025908][T18481] ? __pfx_mt_find+0x10/0x10 [ 771.025941][T18481] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 771.025974][T18481] ? __pfx___get_user_pages+0x10/0x10 [ 771.026018][T18481] ? __mm_populate+0x21d/0x380 [ 771.026059][T18481] populate_vma_page_range+0x27f/0x3a0 [ 771.026098][T18481] ? __pfx_populate_vma_page_range+0x10/0x10 [ 771.026130][T18481] ? __pfx_find_vma_intersection+0x10/0x10 [ 771.026162][T18481] ? vm_mmap_pgoff+0x29b/0x3a0 [ 771.026200][T18481] __mm_populate+0x1d6/0x380 [ 771.026235][T18481] ? __pfx___mm_populate+0x10/0x10 [ 771.026270][T18481] ? up_write+0x1b2/0x520 [ 771.026306][T18481] vm_mmap_pgoff+0x2d3/0x3a0 [ 771.026341][T18481] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 771.026376][T18481] ? __x64_sys_futex+0x1e1/0x4c0 [ 771.026402][T18481] ? __x64_sys_futex+0x1ea/0x4c0 [ 771.026433][T18481] ksys_mmap_pgoff+0x7d/0x5c0 [ 771.026460][T18481] ? rcu_is_watching+0x12/0xc0 [ 771.026488][T18481] __x64_sys_mmap+0x125/0x190 [ 771.026522][T18481] do_syscall_64+0xcd/0x250 [ 771.026559][T18481] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.026597][T18481] RIP: 0033:0x7f9b24f8d169 [ 771.026618][T18481] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.026641][T18481] RSP: 002b:00007f9b25d17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 771.026664][T18481] RAX: ffffffffffffffda RBX: 00007f9b251a5fa0 RCX: 00007f9b24f8d169 [ 771.026679][T18481] RDX: 000000000000000a RSI: 0000000000040009 RDI: 0000000000000000 [ 771.026694][T18481] RBP: 00007f9b2500e2a0 R08: 0000000000000002 R09: 0000000000028000 [ 771.026709][T18481] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 771.026723][T18481] R13: 0000000000000000 R14: 00007f9b251a5fa0 R15: 00007fff181f8188 [ 771.026755][T18481] [ 771.489127][T18490] FAULT_INJECTION: forcing a failure. [ 771.489127][T18490] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 771.503548][T18490] CPU: 0 UID: 0 PID: 18490 Comm: syz.4.3029 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 771.503583][T18490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 771.503598][T18490] Call Trace: [ 771.503605][T18490] [ 771.503614][T18490] dump_stack_lvl+0x16c/0x1f0 [ 771.503654][T18490] should_fail_ex+0x50a/0x650 [ 771.503682][T18490] _copy_from_user+0x2e/0xd0 [ 771.503710][T18490] kvm_dev_ioctl_get_cpuid+0x43c/0x6f0 [ 771.503736][T18490] ? trace_lock_acquire+0x14e/0x1f0 [ 771.503766][T18490] ? __pfx_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 771.503789][T18490] ? __might_fault+0xe3/0x190 [ 771.503814][T18490] ? __might_fault+0xe3/0x190 [ 771.503848][T18490] kvm_arch_dev_ioctl+0x40e/0x730 [ 771.503873][T18490] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 771.503897][T18490] ? do_vfs_ioctl+0x513/0x1990 [ 771.503927][T18490] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 771.503955][T18490] ? kmem_cache_free+0x2e2/0x4d0 [ 771.503990][T18490] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 771.504028][T18490] kvm_dev_ioctl+0x781/0x1a90 [ 771.504065][T18490] ? __pfx_lock_release+0x10/0x10 [ 771.504096][T18490] ? trace_lock_acquire+0x14e/0x1f0 [ 771.504126][T18490] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 771.504167][T18490] ? __fget_files+0x206/0x3a0 [ 771.504204][T18490] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 771.504251][T18490] __x64_sys_ioctl+0x190/0x200 [ 771.504284][T18490] do_syscall_64+0xcd/0x250 [ 771.504319][T18490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 771.504353][T18490] RIP: 0033:0x7fe3a0b8d169 [ 771.504372][T18490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 771.504394][T18490] RSP: 002b:00007fe3a1a8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 771.504417][T18490] RAX: ffffffffffffffda RBX: 00007fe3a0da5fa0 RCX: 00007fe3a0b8d169 [ 771.504433][T18490] RDX: 0000000000000000 RSI: 00000000c008ae09 RDI: 0000000000000005 [ 771.504447][T18490] RBP: 00007fe3a0c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 771.504460][T18490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 771.504473][T18490] R13: 0000000000000000 R14: 00007fe3a0da5fa0 R15: 00007ffed180be38 [ 771.504503][T18490] [ 772.215836][T18502] ldm_validate_partition_table(): Disk read failed. [ 772.254326][T18502] Dev nbd0: unable to read RDB block 0 [ 772.260386][T18502] nbd0: unable to read partition table [ 772.659695][T15088] Bluetooth: hci4: unexpected event 0x3e length: 726 > 260 [ 772.659734][T15088] Bluetooth: hci4: unexpected subevent 0x0d length: 725 > 260 [ 772.676335][T15088] Bluetooth: hci4: Unknown advertising packet type: 0x7f [ 772.676400][T15088] Bluetooth: hci4: Malformed LE Event: 0x0d [ 773.162250][T18520] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 775.262773][T18541] cougar: G6 mapped to space [ 775.559624][ T30] audit: type=1800 audit(4294968005.363:30): pid=18549 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3045" name="version" dev="configfs" ino=63374 res=0 errno=0 [ 776.213676][T18562] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 776.698955][T18567] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3050'. [ 776.819450][ T30] audit: type=1800 audit(4294968006.623:31): pid=18570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.3051" name="discovery_nqn" dev="configfs" ino=64103 res=0 errno=0 [ 777.221651][T18566] FAULT_INJECTION: forcing a failure. [ 777.221651][T18566] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 777.248441][T18566] CPU: 0 UID: 0 PID: 18566 Comm: syz.4.3058 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 777.248476][T18566] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 777.248490][T18566] Call Trace: [ 777.248498][T18566] [ 777.248508][T18566] dump_stack_lvl+0x16c/0x1f0 [ 777.248548][T18566] should_fail_ex+0x50a/0x650 [ 777.248572][T18566] ? __pfx___might_resched+0x10/0x10 [ 777.248615][T18566] should_fail_alloc_page+0xe7/0x130 [ 777.248642][T18566] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 777.248680][T18566] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 777.248718][T18566] ? mark_lock+0xb5/0xc60 [ 777.248748][T18566] ? __pfx_mark_lock+0x10/0x10 [ 777.248780][T18566] ? __pfx_mark_lock+0x10/0x10 [ 777.248809][T18566] ? __pfx_stack_trace_save+0x10/0x10 [ 777.248836][T18566] ? stack_depot_save_flags+0x28/0x9c0 [ 777.248861][T18566] ? rcu_is_watching+0x12/0xc0 [ 777.248886][T18566] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 777.248925][T18566] ? kasan_save_stack+0x42/0x60 [ 777.248957][T18566] ? kasan_save_stack+0x33/0x60 [ 777.248986][T18566] ? kasan_save_track+0x14/0x30 [ 777.249027][T18566] ? hlock_class+0x4e/0x130 [ 777.249051][T18566] ? __lock_acquire+0x15a9/0x3c40 [ 777.249087][T18566] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 777.249125][T18566] ? policy_nodemask+0xea/0x4e0 [ 777.249153][T18566] alloc_pages_mpol+0x1fc/0x540 [ 777.249179][T18566] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 777.249206][T18566] ? lock_acquire.part.0+0x11b/0x380 [ 777.249242][T18566] ? __pfx_filemap_map_pages+0x10/0x10 [ 777.249270][T18566] alloc_pages_noprof+0x131/0x390 [ 777.249295][T18566] pte_alloc_one+0x20/0x390 [ 777.249339][T18566] __do_fault+0x320/0x490 [ 777.249369][T18566] ? __pfx_filemap_map_pages+0x10/0x10 [ 777.249398][T18566] do_pte_missing+0x1a8/0x3e10 [ 777.249433][T18566] ? do_raw_spin_unlock+0x172/0x230 [ 777.249459][T18566] ? __pmd_alloc+0x3c2/0x870 [ 777.249497][T18566] __handle_mm_fault+0x1166/0x2c60 [ 777.249541][T18566] ? __pfx___handle_mm_fault+0x10/0x10 [ 777.249573][T18566] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 777.249626][T18566] ? find_vma+0xc0/0x140 [ 777.249652][T18566] ? __pfx_find_vma+0x10/0x10 [ 777.249686][T18566] handle_mm_fault+0x3fa/0xaa0 [ 777.249727][T18566] do_user_addr_fault+0x7a3/0x13f0 [ 777.249767][T18566] exc_page_fault+0x5c/0xc0 [ 777.249798][T18566] asm_exc_page_fault+0x26/0x30 [ 777.249829][T18566] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 777.249856][T18566] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 777.249878][T18566] RSP: 0018:ffffc900059e7bc0 EFLAGS: 00050206 [ 777.249898][T18566] RAX: 0000000000000000 RBX: 000000000000000e RCX: 000000000000000e [ 777.249912][T18566] RDX: ffffed100a6685e2 RSI: ffff888053342f00 RDI: 0000000000000054 [ 777.249928][T18566] RBP: 0000000000000054 R08: 0000000000000000 R09: ffffed100a6685e1 [ 777.249943][T18566] R10: ffff888053342f0d R11: 0000000000000001 R12: ffff888053342f00 [ 777.249958][T18566] R13: 0000000000000062 R14: 00007ffffffff000 R15: 0000000000000000 [ 777.249992][T18566] _copy_to_user+0xbb/0xd0 [ 777.250021][T18566] snd_pcm_oss_read2+0x292/0x3e0 [ 777.250053][T18566] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 777.250080][T18566] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 777.250122][T18566] snd_pcm_oss_read+0x5a3/0x750 [ 777.250154][T18566] ? rw_verify_area+0xcf/0x680 [ 777.250182][T18566] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 777.250212][T18566] vfs_read+0x1df/0xbf0 [ 777.250243][T18566] ? __fget_files+0x1fc/0x3a0 [ 777.250295][T18566] ? __pfx_lock_release+0x10/0x10 [ 777.250337][T18566] ? __pfx_vfs_read+0x10/0x10 [ 777.250366][T18566] ? do_futex+0x123/0x350 [ 777.250397][T18566] ? lock_acquire+0x2f/0xb0 [ 777.250427][T18566] ? __fget_files+0x40/0x3a0 [ 777.250463][T18566] ? __fget_files+0x206/0x3a0 [ 777.250507][T18566] ksys_read+0x12b/0x250 [ 777.250537][T18566] ? __pfx_ksys_read+0x10/0x10 [ 777.250579][T18566] do_syscall_64+0xcd/0x250 [ 777.250612][T18566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 777.250643][T18566] RIP: 0033:0x7fe3a0b8d169 [ 777.250663][T18566] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 777.250684][T18566] RSP: 002b:00007fe3a1a8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 777.250705][T18566] RAX: ffffffffffffffda RBX: 00007fe3a0da5fa0 RCX: 00007fe3a0b8d169 [ 777.250721][T18566] RDX: 000000000cefbce6 RSI: 0000000000000000 RDI: 000000000000000a [ 777.250736][T18566] RBP: 00007fe3a0c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 777.250750][T18566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 777.250765][T18566] R13: 0000000000000000 R14: 00007fe3a0da5fa0 R15: 00007ffed180be38 [ 777.250799][T18566] [ 778.533708][T18584] zswap: compressor not available [ 780.546318][T18629] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3065'. [ 781.592902][T18647] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(6) [ 782.217112][T18669] FAULT_INJECTION: forcing a failure. [ 782.217112][T18669] name failslab, interval 1, probability 0, space 0, times 0 [ 782.243863][T18669] CPU: 1 UID: 0 PID: 18669 Comm: syz.2.3066 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 782.243899][T18669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 782.243914][T18669] Call Trace: [ 782.243921][T18669] [ 782.243931][T18669] dump_stack_lvl+0x16c/0x1f0 [ 782.243969][T18669] should_fail_ex+0x50a/0x650 [ 782.243992][T18669] ? fs_reclaim_acquire+0xae/0x150 [ 782.244023][T18669] should_failslab+0xc2/0x120 [ 782.244054][T18669] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 782.244087][T18669] ? __pmd_alloc+0xc3/0x870 [ 782.244122][T18669] __pmd_alloc+0xc3/0x870 [ 782.244164][T18669] __handle_mm_fault+0x9fb/0x2c60 [ 782.244207][T18669] ? __pfx___handle_mm_fault+0x10/0x10 [ 782.244238][T18669] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 782.244289][T18669] ? find_vma+0xc0/0x140 [ 782.244314][T18669] ? __pfx_find_vma+0x10/0x10 [ 782.244345][T18669] handle_mm_fault+0x3fa/0xaa0 [ 782.244384][T18669] do_user_addr_fault+0x7a3/0x13f0 [ 782.244422][T18669] exc_page_fault+0x5c/0xc0 [ 782.244451][T18669] asm_exc_page_fault+0x26/0x30 [ 782.244480][T18669] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 782.244506][T18669] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 782.244527][T18669] RSP: 0018:ffffc90005957bc0 EFLAGS: 00050206 [ 782.244545][T18669] RAX: 0000000000000000 RBX: 000000000000000e RCX: 000000000000000e [ 782.244558][T18669] RDX: ffffed1009fc60d2 RSI: ffff88804fe30680 RDI: 0000000000000054 [ 782.244573][T18669] RBP: 0000000000000054 R08: 0000000000000000 R09: ffffed1009fc60d1 [ 782.244587][T18669] R10: ffff88804fe3068d R11: 0000000000000001 R12: ffff88804fe30680 [ 782.244602][T18669] R13: 0000000000000062 R14: 00007ffffffff000 R15: 0000000000000000 [ 782.244632][T18669] _copy_to_user+0xbb/0xd0 [ 782.244661][T18669] snd_pcm_oss_read2+0x292/0x3e0 [ 782.244693][T18669] ? __pfx_snd_pcm_oss_read2+0x10/0x10 [ 782.244719][T18669] ? snd_pcm_kernel_ioctl+0x267/0x2e0 [ 782.244759][T18669] snd_pcm_oss_read+0x5a3/0x750 [ 782.244789][T18669] ? rw_verify_area+0xcf/0x680 [ 782.244815][T18669] ? __pfx_snd_pcm_oss_read+0x10/0x10 [ 782.244843][T18669] vfs_read+0x1df/0xbf0 [ 782.244873][T18669] ? __fget_files+0x1fc/0x3a0 [ 782.244904][T18669] ? __pfx_lock_release+0x10/0x10 [ 782.244934][T18669] ? __pfx_vfs_read+0x10/0x10 [ 782.244960][T18669] ? do_futex+0x123/0x350 [ 782.244987][T18669] ? lock_acquire+0x2f/0xb0 [ 782.245014][T18669] ? __fget_files+0x40/0x3a0 [ 782.245055][T18669] ? __fget_files+0x206/0x3a0 [ 782.245098][T18669] ksys_read+0x12b/0x250 [ 782.245126][T18669] ? __pfx_ksys_read+0x10/0x10 [ 782.245166][T18669] do_syscall_64+0xcd/0x250 [ 782.245210][T18669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 782.245242][T18669] RIP: 0033:0x7f9b24f8d169 [ 782.245262][T18669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 782.245284][T18669] RSP: 002b:00007f9b22dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 782.245306][T18669] RAX: ffffffffffffffda RBX: 00007f9b251a6160 RCX: 00007f9b24f8d169 [ 782.245324][T18669] RDX: 000000000cefbce6 RSI: 0000000000000000 RDI: 000000000000000a [ 782.245337][T18669] RBP: 00007f9b2500e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 782.245352][T18669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 782.245367][T18669] R13: 0000000000000000 R14: 00007f9b251a6160 R15: 00007fff181f8188 [ 782.245400][T18669] [ 783.336830][ T30] audit: type=1326 audit(4294968013.133:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18684 comm="syz.2.3076" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9b24f8d169 code=0x0 [ 783.832343][T18690] cougar: G6 mapped to space [ 784.252452][ T30] audit: type=1800 audit(4294968014.053:33): pid=18710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3079" name="discovery_nqn" dev="configfs" ino=65617 res=0 errno=0 [ 787.311549][T18749] HfR: entered promiscuous mode [ 787.352302][T18749] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3092'. [ 787.383640][T18749] HfR: left promiscuous mode [ 790.465864][T18779] FAULT_INJECTION: forcing a failure. [ 790.465864][T18779] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 790.500517][T18779] CPU: 0 UID: 0 PID: 18779 Comm: syz.5.3088 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 790.500554][T18779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 790.500569][T18779] Call Trace: [ 790.500576][T18779] [ 790.500586][T18779] dump_stack_lvl+0x16c/0x1f0 [ 790.500627][T18779] should_fail_ex+0x50a/0x650 [ 790.500657][T18779] _copy_from_user+0x2e/0xd0 [ 790.500685][T18779] kvm_dev_ioctl_get_cpuid+0x43c/0x6f0 [ 790.500712][T18779] ? trace_lock_acquire+0x14e/0x1f0 [ 790.500745][T18779] ? __pfx_kvm_dev_ioctl_get_cpuid+0x10/0x10 [ 790.500770][T18779] ? __might_fault+0xe3/0x190 [ 790.500796][T18779] ? __might_fault+0xe3/0x190 [ 790.500829][T18779] kvm_arch_dev_ioctl+0x40e/0x730 [ 790.500853][T18779] ? __pfx_kvm_arch_dev_ioctl+0x10/0x10 [ 790.500877][T18779] ? do_vfs_ioctl+0x513/0x1990 [ 790.500907][T18779] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 790.500937][T18779] ? kmem_cache_free+0x2e2/0x4d0 [ 790.500987][T18779] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 790.501028][T18779] kvm_dev_ioctl+0x781/0x1a90 [ 790.501069][T18779] ? __pfx_lock_release+0x10/0x10 [ 790.501101][T18779] ? trace_lock_acquire+0x14e/0x1f0 [ 790.501132][T18779] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 790.501172][T18779] ? __fget_files+0x206/0x3a0 [ 790.501209][T18779] ? __pfx_kvm_dev_ioctl+0x10/0x10 [ 790.501247][T18779] __x64_sys_ioctl+0x190/0x200 [ 790.501278][T18779] do_syscall_64+0xcd/0x250 [ 790.501312][T18779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 790.501346][T18779] RIP: 0033:0x7f71e0f8d169 [ 790.501367][T18779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 790.501390][T18779] RSP: 002b:00007f71e1d93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 790.501413][T18779] RAX: ffffffffffffffda RBX: 00007f71e11a5fa0 RCX: 00007f71e0f8d169 [ 790.501430][T18779] RDX: 0000000000000000 RSI: 00000000c008ae09 RDI: 0000000000000005 [ 790.501445][T18779] RBP: 00007f71e100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 790.501460][T18779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 790.501474][T18779] R13: 0000000000000000 R14: 00007f71e11a5fa0 R15: 00007ffdb27d3828 [ 790.501505][T18779] [ 791.498039][T18790] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 792.144568][T15088] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 792.144606][T15088] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 792.159736][T15088] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 792.159835][T15088] Bluetooth: hci2: Malformed LE Event: 0x0d [ 802.700231][T18886] FAULT_INJECTION: forcing a failure. [ 802.700231][T18886] name failslab, interval 1, probability 0, space 0, times 0 [ 802.767208][T18886] CPU: 0 UID: 0 PID: 18886 Comm: syz.5.3114 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 802.767246][T18886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 802.767262][T18886] Call Trace: [ 802.767270][T18886] [ 802.767281][T18886] dump_stack_lvl+0x16c/0x1f0 [ 802.767323][T18886] should_fail_ex+0x50a/0x650 [ 802.767348][T18886] ? fs_reclaim_acquire+0xae/0x150 [ 802.767383][T18886] ? ip6addrlbl_alloc+0x9a/0x2c0 [ 802.767414][T18886] should_failslab+0xc2/0x120 [ 802.767438][T18886] __kmalloc_cache_noprof+0x68/0x410 [ 802.767469][T18886] ? do_raw_spin_lock+0x12d/0x2c0 [ 802.767501][T18886] ip6addrlbl_alloc+0x9a/0x2c0 [ 802.767537][T18886] ip6addrlbl_net_init+0x13d/0x400 [ 802.767573][T18886] ? __pfx_ip6addrlbl_net_init+0x10/0x10 [ 802.767607][T18886] ops_init+0x1df/0x5f0 [ 802.767634][T18886] setup_net+0x21f/0x860 [ 802.767660][T18886] ? __pfx_setup_net+0x10/0x10 [ 802.767706][T18886] ? down_read_killable+0xcc/0x380 [ 802.767744][T18886] ? __pfx_down_read_killable+0x10/0x10 [ 802.767781][T18886] ? __raw_spin_lock_init+0x3a/0x110 [ 802.767808][T18886] ? debug_mutex_init+0x37/0x70 [ 802.767840][T18886] copy_net_ns+0x2a6/0x5f0 [ 802.767871][T18886] create_new_namespaces+0x3ea/0xad0 [ 802.767916][T18886] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 802.767956][T18886] ksys_unshare+0x45d/0xa40 [ 802.767983][T18886] ? __pfx_ksys_unshare+0x10/0x10 [ 802.768012][T18886] ? xfd_validate_state+0x5d/0x180 [ 802.768048][T18886] ? syscall_user_dispatch+0x7a/0x130 [ 802.768093][T18886] __x64_sys_unshare+0x31/0x40 [ 802.768117][T18886] do_syscall_64+0xcd/0x250 [ 802.768151][T18886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 802.768183][T18886] RIP: 0033:0x7f71e0f8d169 [ 802.768203][T18886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 802.768226][T18886] RSP: 002b:00007f71e1d93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 802.768249][T18886] RAX: ffffffffffffffda RBX: 00007f71e11a5fa0 RCX: 00007f71e0f8d169 [ 802.768265][T18886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 802.768283][T18886] RBP: 00007f71e100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 802.768297][T18886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 802.768310][T18886] R13: 0000000000000000 R14: 00007f71e11a5fa0 R15: 00007ffdb27d3828 [ 802.768340][T18886] [ 803.076582][T18894] HSR: entered promiscuous mode [ 803.486830][T18898] nvme_fcloop: unknown parameter or missing value '' [ 809.249316][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.256335][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.740163][T18951] FAULT_INJECTION: forcing a failure. [ 809.740163][T18951] name failslab, interval 1, probability 0, space 0, times 0 [ 809.756687][T18951] CPU: 0 UID: 0 PID: 18951 Comm: syz.0.3127 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 809.756725][T18951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 809.756741][T18951] Call Trace: [ 809.756748][T18951] [ 809.756758][T18951] dump_stack_lvl+0x16c/0x1f0 [ 809.756800][T18951] should_fail_ex+0x50a/0x650 [ 809.756824][T18951] ? fs_reclaim_acquire+0xae/0x150 [ 809.756859][T18951] ? ip6addrlbl_alloc+0x9a/0x2c0 [ 809.756893][T18951] should_failslab+0xc2/0x120 [ 809.756918][T18951] __kmalloc_cache_noprof+0x68/0x410 [ 809.756949][T18951] ? do_raw_spin_lock+0x12d/0x2c0 [ 809.756981][T18951] ip6addrlbl_alloc+0x9a/0x2c0 [ 809.757017][T18951] ip6addrlbl_net_init+0x13d/0x400 [ 809.757054][T18951] ? __pfx_ip6addrlbl_net_init+0x10/0x10 [ 809.757102][T18951] ops_init+0x1df/0x5f0 [ 809.757131][T18951] setup_net+0x21f/0x860 [ 809.757157][T18951] ? __pfx_setup_net+0x10/0x10 [ 809.757179][T18951] ? down_read_killable+0xcc/0x380 [ 809.757215][T18951] ? __pfx_down_read_killable+0x10/0x10 [ 809.757248][T18951] ? __raw_spin_lock_init+0x3a/0x110 [ 809.757274][T18951] ? debug_mutex_init+0x37/0x70 [ 809.757303][T18951] copy_net_ns+0x2a6/0x5f0 [ 809.757331][T18951] create_new_namespaces+0x3ea/0xad0 [ 809.757377][T18951] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 809.757416][T18951] ksys_unshare+0x45d/0xa40 [ 809.757443][T18951] ? __pfx_ksys_unshare+0x10/0x10 [ 809.757466][T18951] ? xfd_validate_state+0x5d/0x180 [ 809.757501][T18951] ? syscall_user_dispatch+0x7a/0x130 [ 809.757545][T18951] __x64_sys_unshare+0x31/0x40 [ 809.757570][T18951] do_syscall_64+0xcd/0x250 [ 809.757604][T18951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 809.757637][T18951] RIP: 0033:0x7f84adf8d169 [ 809.757658][T18951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 809.757681][T18951] RSP: 002b:00007f84aed70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 809.757703][T18951] RAX: ffffffffffffffda RBX: 00007f84ae1a5fa0 RCX: 00007f84adf8d169 [ 809.757719][T18951] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 809.757734][T18951] RBP: 00007f84ae00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 809.757750][T18951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 809.757764][T18951] R13: 0000000000000000 R14: 00007f84ae1a5fa0 R15: 00007ffd45d23408 [ 809.757797][T18951] [ 813.237121][T19009] nvme_fcloop: unknown parameter or missing value '' [ 814.813277][T19036] nvme_fcloop: unknown parameter or missing value '' [ 815.269810][T19028] can: request_module (can-proto-3) failed. [ 815.293221][T19052] snd_aloop snd_aloop.0: control 1:6:6:¢¸è_ÅheºRŸª:0 is already present [ 816.373008][T19079] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3168'. [ 817.216815][ T30] audit: type=1806 audit(4294968083.026:34): xattr="." res=0 [ 817.414516][T19108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3180'. [ 817.431557][T15088] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 817.431596][T15088] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 817.453150][T15088] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 817.453214][T15088] Bluetooth: hci0: Malformed LE Event: 0x0d [ 817.553438][T19108] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3180'. [ 819.588007][T19144] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 819.667510][T19147] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3198'. [ 819.707154][T19144] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 819.764078][T19147] ipvlan1: entered allmulticast mode [ 819.769745][T19147] veth0_vlan: entered allmulticast mode [ 820.972569][T19175] FAULT_INJECTION: forcing a failure. [ 820.972569][T19175] name failslab, interval 1, probability 0, space 0, times 0 [ 821.091899][T19175] CPU: 0 UID: 0 PID: 19175 Comm: syz.5.3199 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 821.091935][T19175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 821.091948][T19175] Call Trace: [ 821.091955][T19175] [ 821.091964][T19175] dump_stack_lvl+0x16c/0x1f0 [ 821.092004][T19175] should_fail_ex+0x50a/0x650 [ 821.092027][T19175] ? fs_reclaim_acquire+0xae/0x150 [ 821.092060][T19175] should_failslab+0xc2/0x120 [ 821.092085][T19175] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 821.092116][T19175] ? down_write+0x14e/0x200 [ 821.092149][T19175] ? vm_area_dup+0x21/0x2f0 [ 821.092188][T19175] vm_area_dup+0x21/0x2f0 [ 821.092221][T19175] copy_process+0x776f/0x8c50 [ 821.092269][T19175] ? __pfx_copy_process+0x10/0x10 [ 821.092291][T19175] ? __pfx___futex_wait+0x10/0x10 [ 821.092356][T19175] kernel_clone+0xfd/0x960 [ 821.092382][T19175] ? __pfx_kernel_clone+0x10/0x10 [ 821.092426][T19175] __do_sys_clone+0xcf/0x120 [ 821.092449][T19175] ? __pfx___do_sys_clone+0x10/0x10 [ 821.092489][T19175] ? rcu_is_watching+0x12/0xc0 [ 821.092523][T19175] do_syscall_64+0xcd/0x250 [ 821.092555][T19175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.092584][T19175] RIP: 0033:0x7f71e0f8d169 [ 821.092603][T19175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.092626][T19175] RSP: 002b:00007f71e1d92fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 821.092650][T19175] RAX: ffffffffffffffda RBX: 00007f71e11a5fa0 RCX: 00007f71e0f8d169 [ 821.092667][T19175] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 821.092680][T19175] RBP: 00007f71e100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 821.092696][T19175] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 821.092711][T19175] R13: 0000000000000000 R14: 00007f71e11a5fa0 R15: 00007ffdb27d3828 [ 821.092745][T19175] [ 821.333219][T19177] FAULT_INJECTION: forcing a failure. [ 821.333219][T19177] name failslab, interval 1, probability 0, space 0, times 0 [ 821.383290][T19177] CPU: 1 UID: 0 PID: 19177 Comm: syz.2.3200 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 821.383329][T19177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 821.383344][T19177] Call Trace: [ 821.383352][T19177] [ 821.383361][T19177] dump_stack_lvl+0x16c/0x1f0 [ 821.383401][T19177] should_fail_ex+0x50a/0x650 [ 821.383425][T19177] ? fs_reclaim_acquire+0xae/0x150 [ 821.383459][T19177] ? input_allocate_device+0xc5/0x350 [ 821.383485][T19177] should_failslab+0xc2/0x120 [ 821.383512][T19177] __kmalloc_cache_noprof+0x68/0x410 [ 821.383549][T19177] ? kasan_save_track+0x14/0x30 [ 821.383584][T19177] ? __pfx_uinput_write+0x10/0x10 [ 821.383616][T19177] input_allocate_device+0xc5/0x350 [ 821.383643][T19177] uinput_write+0x992/0x12b0 [ 821.383684][T19177] ? __pfx_uinput_write+0x10/0x10 [ 821.383716][T19177] ? apparmor_file_permission+0x251/0x400 [ 821.383746][T19177] ? bpf_lsm_file_permission+0x9/0x10 [ 821.383780][T19177] ? security_file_permission+0x71/0x210 [ 821.383813][T19177] ? rw_verify_area+0xcf/0x680 [ 821.383843][T19177] ? __pfx_uinput_write+0x10/0x10 [ 821.383873][T19177] vfs_write+0x24c/0x1150 [ 821.383907][T19177] ? __fget_files+0x1fc/0x3a0 [ 821.383940][T19177] ? __pfx_lock_release+0x10/0x10 [ 821.383973][T19177] ? __pfx_vfs_write+0x10/0x10 [ 821.384003][T19177] ? do_futex+0x123/0x350 [ 821.384033][T19177] ? lock_acquire+0x2f/0xb0 [ 821.384062][T19177] ? __fget_files+0x40/0x3a0 [ 821.384109][T19177] ? __fget_files+0x206/0x3a0 [ 821.384155][T19177] ksys_write+0x207/0x250 [ 821.384189][T19177] ? __pfx_ksys_write+0x10/0x10 [ 821.384233][T19177] do_syscall_64+0xcd/0x250 [ 821.384268][T19177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 821.384301][T19177] RIP: 0033:0x7f9b24f8d169 [ 821.384322][T19177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 821.384345][T19177] RSP: 002b:00007f9b25d17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 821.384369][T19177] RAX: ffffffffffffffda RBX: 00007f9b251a5fa0 RCX: 00007f9b24f8d169 [ 821.384386][T19177] RDX: 000000000000045c RSI: 0000000000000000 RDI: 0000000000000008 [ 821.384402][T19177] RBP: 00007f9b2500e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 821.384416][T19177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 821.384430][T19177] R13: 0000000000000000 R14: 00007f9b251a5fa0 R15: 00007fff181f8188 [ 821.384462][T19177] [ 823.290252][T19207] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3209'. [ 823.462958][T19207] FAULT_INJECTION: forcing a failure. [ 823.462958][T19207] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 823.563382][T19207] CPU: 0 UID: 0 PID: 19207 Comm: syz.5.3209 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 823.563414][T19207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 823.563428][T19207] Call Trace: [ 823.563435][T19207] [ 823.563445][T19207] dump_stack_lvl+0x16c/0x1f0 [ 823.563481][T19207] should_fail_ex+0x50a/0x650 [ 823.563502][T19207] ? __pfx___might_resched+0x10/0x10 [ 823.563540][T19207] should_fail_alloc_page+0xe7/0x130 [ 823.563564][T19207] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 823.563600][T19207] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 823.563637][T19207] ? hlock_class+0x4e/0x130 [ 823.563661][T19207] ? mark_lock+0xb5/0xc60 [ 823.563693][T19207] ? __pfx_mark_lock+0x10/0x10 [ 823.563721][T19207] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 823.563760][T19207] ? hlock_class+0x4e/0x130 [ 823.563784][T19207] ? mark_lock+0xb5/0xc60 [ 823.563812][T19207] ? hlock_class+0x4e/0x130 [ 823.563853][T19207] ? hlock_class+0x4e/0x130 [ 823.563879][T19207] ? __lock_acquire+0xcc5/0x3c40 [ 823.563913][T19207] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 823.563954][T19207] ? policy_nodemask+0xea/0x4e0 [ 823.563983][T19207] alloc_pages_mpol+0x1fc/0x540 [ 823.564009][T19207] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 823.564034][T19207] ? __lock_acquire+0x15a9/0x3c40 [ 823.564073][T19207] folio_alloc_mpol_noprof+0x36/0x2f0 [ 823.564104][T19207] vma_alloc_folio_noprof+0xee/0x1b0 [ 823.564132][T19207] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 823.564160][T19207] ? find_held_lock+0x2d/0x110 [ 823.564194][T19207] do_pte_missing+0x202f/0x3e10 [ 823.564241][T19207] __handle_mm_fault+0x1166/0x2c60 [ 823.564285][T19207] ? __pfx___handle_mm_fault+0x10/0x10 [ 823.564316][T19207] ? follow_page_pte+0x3ac/0x1490 [ 823.564349][T19207] ? __pfx_lock_release+0x10/0x10 [ 823.564407][T19207] handle_mm_fault+0x3fa/0xaa0 [ 823.564448][T19207] __get_user_pages+0x773/0x36f0 [ 823.564491][T19207] ? __pfx_mt_find+0x10/0x10 [ 823.564523][T19207] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 823.564556][T19207] ? __pfx___get_user_pages+0x10/0x10 [ 823.564591][T19207] ? __mm_populate+0x21d/0x380 [ 823.564632][T19207] populate_vma_page_range+0x27f/0x3a0 [ 823.564669][T19207] ? __pfx_populate_vma_page_range+0x10/0x10 [ 823.564703][T19207] ? __pfx_find_vma_intersection+0x10/0x10 [ 823.564735][T19207] ? vm_mmap_pgoff+0x29b/0x3a0 [ 823.564773][T19207] __mm_populate+0x1d6/0x380 [ 823.564808][T19207] ? __pfx___mm_populate+0x10/0x10 [ 823.564856][T19207] ? up_write+0x1b2/0x520 [ 823.564896][T19207] vm_mmap_pgoff+0x2d3/0x3a0 [ 823.564934][T19207] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 823.564972][T19207] ? __x64_sys_futex+0x1e1/0x4c0 [ 823.564999][T19207] ? __x64_sys_futex+0x1ea/0x4c0 [ 823.565032][T19207] ksys_mmap_pgoff+0x7d/0x5c0 [ 823.565063][T19207] ? syscall_user_dispatch+0x7a/0x130 [ 823.565101][T19207] __x64_sys_mmap+0x125/0x190 [ 823.565139][T19207] do_syscall_64+0xcd/0x250 [ 823.565173][T19207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 823.565205][T19207] RIP: 0033:0x7f71e0f8d169 [ 823.565226][T19207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 823.565249][T19207] RSP: 002b:00007f71e1d93038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 823.565273][T19207] RAX: ffffffffffffffda RBX: 00007f71e11a5fa0 RCX: 00007f71e0f8d169 [ 823.565289][T19207] RDX: 000000000000000a RSI: 0000000000040009 RDI: 0000000000000000 [ 823.565304][T19207] RBP: 00007f71e100e2a0 R08: 0000000000000002 R09: 0000000000028000 [ 823.565319][T19207] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 823.565334][T19207] R13: 0000000000000000 R14: 00007f71e11a5fa0 R15: 00007ffdb27d3828 [ 823.565368][T19207] [ 825.773215][T19250] sp0: Synchronizing with TNC [ 826.068470][T19256] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3222'. [ 828.116233][T19296] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3231'. [ 828.218950][T19298] netlink: 186 bytes leftover after parsing attributes in process `syz.5.3232'. [ 828.237696][T19299] misc userio: No port type given on /dev/userio [ 829.218628][T19313] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3237'. [ 831.232731][T19353] program syz.0.3249 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 832.503395][T19379] netlink: 'syz.2.3256': attribute type 1 has an invalid length. [ 832.528384][T19379] netlink: 'syz.2.3256': attribute type 3 has an invalid length. [ 832.807137][T19395] program syz.0.3260 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 835.465154][T19463] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input27 [ 837.037248][ T30] audit: type=1326 audit(4294968114.843:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19492 comm="syz.0.3282" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f84adf8d169 code=0x0 [ 838.352457][T19513] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3289'. [ 838.972838][T19530] nbd: illegal input index -33554433 [ 839.900275][T19551] netlink: 2024 bytes leftover after parsing attributes in process `syz.0.3300'. [ 839.909592][T19551] netlink: zone id is out of range [ 839.915577][T19551] netlink: zone id is out of range [ 839.921229][T19551] netlink: get zone limit has 8 unknown bytes [ 840.266911][T19553] netlink: 2024 bytes leftover after parsing attributes in process `syz.0.3301'. [ 840.281000][T19553] netlink: zone id is out of range [ 840.289649][T19553] netlink: zone id is out of range [ 840.336134][T19553] netlink: get zone limit has 8 unknown bytes [ 841.174181][T19569] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input28 [ 842.262282][T19585] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3311'. [ 842.313458][T19585] netlink: 338 bytes leftover after parsing attributes in process `syz.4.3311'. [ 842.341323][T19594] FAULT_INJECTION: forcing a failure. [ 842.341323][T19594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 842.355547][T19585] device-mapper: ioctl: Unable to rename non-existent device, to uuid „ [ 842.362523][T19594] CPU: 0 UID: 0 PID: 19594 Comm: syz.0.3313 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 842.362557][T19594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 842.362570][T19594] Call Trace: [ 842.362576][T19594] [ 842.362585][T19594] dump_stack_lvl+0x16c/0x1f0 [ 842.362622][T19594] should_fail_ex+0x50a/0x650 [ 842.362649][T19594] _copy_to_iter+0x2a1/0x1560 [ 842.362677][T19594] ? chacha_block_generic+0x18a/0x270 [ 842.362712][T19594] ? __pfx__copy_to_iter+0x10/0x10 [ 842.362743][T19594] ? __pfx___might_resched+0x10/0x10 [ 842.362775][T19594] ? crng_make_state+0x48e/0x6d0 [ 842.362812][T19594] get_random_bytes_user+0x180/0x3c0 [ 842.362847][T19594] ? __pfx_get_random_bytes_user+0x10/0x10 [ 842.362886][T19594] ? do_futex+0x123/0x350 [ 842.362920][T19594] ? import_ubuf+0x1b6/0x220 [ 842.362950][T19594] __x64_sys_getrandom+0x184/0x290 [ 842.362973][T19594] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 842.362995][T19594] ? xfd_validate_state+0x5d/0x180 [ 842.363036][T19594] do_syscall_64+0xcd/0x250 [ 842.363073][T19594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 842.363110][T19594] RIP: 0033:0x7f84adf8d169 [ 842.363129][T19594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 842.363151][T19594] RSP: 002b:00007f84aed70038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 842.363172][T19594] RAX: ffffffffffffffda RBX: 00007f84ae1a5fa0 RCX: 00007f84adf8d169 [ 842.363187][T19594] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 842.363200][T19594] RBP: 00007f84ae00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 842.363214][T19594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 842.363227][T19594] R13: 0000000000000000 R14: 00007f84ae1a5fa0 R15: 00007ffd45d23408 [ 842.363255][T19594] [ 844.589527][ T5836] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 844.607356][ T5836] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 844.627791][ T5836] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 844.653228][ T5836] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 844.663473][ T5836] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 844.671439][ T5836] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 844.771839][T15088] Bluetooth: hci4: unexpected subevent 0x01 length: 4 < 18 [ 844.871906][ T67] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.902411][ T30] audit: type=1800 audit(4294968130.702:36): pid=19626 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3320" name="dbroot" dev="configfs" ino=69656 res=0 errno=0 [ 844.903458][T19629] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input29 [ 844.927643][T19626] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input30 [ 845.104355][ T5194] ERROR: Out of memory at tomoyo_memory_ok. [ 845.261876][ T67] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.466795][ T67] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 845.609893][ T28] ERROR: Out of memory at tomoyo_memory_ok. [ 845.877620][ T67] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 846.304372][T19618] chnl_net:caif_netlink_parms(): no params data found [ 846.377099][ T67] bridge_slave_1: left allmulticast mode [ 846.382979][ T67] bridge_slave_1: left promiscuous mode [ 846.389552][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 846.410230][ T67] bridge_slave_0: left allmulticast mode [ 846.420957][ T67] bridge_slave_0: left promiscuous mode [ 846.430297][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 846.771454][T15088] Bluetooth: hci3: command tx timeout [ 847.713870][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 847.753996][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 847.815428][ T67] bond0 (unregistering): Released all slaves [ 848.209702][T19672] netlink: 2024 bytes leftover after parsing attributes in process `syz.4.3332'. [ 848.273417][T19672] netlink: zone id is out of range [ 848.278613][T19672] netlink: zone id is out of range [ 848.374526][T19672] netlink: get zone limit has 8 unknown bytes [ 848.843801][T15088] Bluetooth: hci3: command tx timeout [ 849.118405][T19618] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.133353][T19618] bridge0: port 1(bridge_slave_0) entered disabled state [ 849.153580][T19618] bridge_slave_0: entered allmulticast mode [ 849.184658][T19618] bridge_slave_0: entered promiscuous mode [ 849.393571][T19618] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.443904][T19618] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.480565][T19618] bridge_slave_1: entered allmulticast mode [ 849.519658][T19618] bridge_slave_1: entered promiscuous mode [ 849.646897][ T67] hsr_slave_0: left promiscuous mode [ 849.659191][ T67] hsr_slave_1: left promiscuous mode [ 849.674041][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 849.689031][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 849.699987][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 849.716353][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 849.760024][ T67] veth1_macvtap: left promiscuous mode [ 849.771973][ T67] veth0_macvtap: left promiscuous mode [ 849.784416][ T67] veth1_vlan: left promiscuous mode [ 849.790008][ T67] veth0_vlan: left promiscuous mode [ 850.923353][T15088] Bluetooth: hci3: command tx timeout [ 851.076987][ T67] team0 (unregistering): Port device team_slave_1 removed [ 851.140985][ T67] team0 (unregistering): Port device team_slave_0 removed [ 852.035726][T19618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 852.152601][T19618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 852.301395][T19618] team0: Port device team_slave_0 added [ 852.332130][T19618] team0: Port device team_slave_1 added [ 852.465473][T19618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 852.472493][T19618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.519511][T19618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 852.588589][T19618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 852.625005][T19618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 852.669388][T19618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 852.822994][T19618] hsr_slave_0: entered promiscuous mode [ 852.840816][T19618] hsr_slave_1: entered promiscuous mode [ 852.858302][T19618] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 852.876655][T19618] Cannot create hsr debugfs directory [ 853.004137][T15088] Bluetooth: hci3: command tx timeout [ 853.226981][T19618] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 853.254486][T19618] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 853.276216][T19618] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 853.292544][T19618] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 853.448649][T19618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 853.477922][T19618] 8021q: adding VLAN 0 to HW filter on device team0 [ 853.496808][T18146] bridge0: port 1(bridge_slave_0) entered blocking state [ 853.504061][T18146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 853.547248][T18152] bridge0: port 2(bridge_slave_1) entered blocking state [ 853.554413][T18152] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.937319][T19618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 854.304831][T19618] veth0_vlan: entered promiscuous mode [ 854.324578][T19618] veth1_vlan: entered promiscuous mode [ 854.372251][T19618] veth0_macvtap: entered promiscuous mode [ 854.386331][T19618] veth1_macvtap: entered promiscuous mode [ 854.409199][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.420117][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.439756][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.452663][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.475508][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.491979][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.509804][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.520754][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.538716][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 854.551402][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.572506][T19618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 854.600916][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.624160][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.642152][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.655349][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.665238][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.676052][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.687507][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.699067][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.708984][T19618] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 854.719709][T19618] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 854.730649][T19618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 854.764538][T19618] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.781097][T19618] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.797594][T19618] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.806632][T19618] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 854.910479][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.920786][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 854.950115][T18149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 854.973708][T18149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 855.195551][T19791] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3352'. [ 860.793734][T19936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3367'. [ 863.633959][T19980] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 863.679382][T19980] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 863.771157][T19980] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 863.845908][T19980] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 863.852003][T19980] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 864.063492][T19980] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 865.643573][T15088] Bluetooth: hci4: command 0x040f tx timeout [ 865.723243][T15088] Bluetooth: hci1: command 0x0c1a tx timeout [ 865.823266][T15088] Bluetooth: hci0: command 0x0c1a tx timeout [ 865.886756][T15088] Bluetooth: hci3: command 0x0c1a tx timeout [ 866.604388][T20034] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 866.612633][T20034] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 866.667687][T20034] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 866.706249][T20034] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 868.696048][T15088] Bluetooth: hci0: command 0x0c1a tx timeout [ 868.696065][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 868.702098][T15088] Bluetooth: hci4: command 0x040f tx timeout [ 868.764029][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 869.621069][T20104] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3402'. [ 869.732539][T20106] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 869.792983][T20106] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 869.864499][T20106] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 869.901351][T20106] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 870.696611][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.705039][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.803562][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 871.803569][T15088] Bluetooth: hci4: command 0x040f tx timeout [ 871.895017][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 871.980808][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 872.290105][T20156] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3413'. [ 872.823445][T20160] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 872.861953][T20160] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 872.927571][T20160] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 872.997768][T20160] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 874.853150][ T5836] Bluetooth: hci4: command 0x040f tx timeout [ 874.933258][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 875.003251][T15088] Bluetooth: hci0: command 0x0c1a tx timeout [ 875.009360][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 875.492174][T20236] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3424'. [ 875.743451][T20242] ptrace attach of "./syz-executor exec"[19618] was attempted by "./syz-executor exec"[20242] [ 876.689229][T20272] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3433'. [ 877.650487][T20299] ptrace attach of "./syz-executor exec"[16228] was attempted by "./syz-executor exec"[20299] [ 879.667950][T20365] ptrace attach of "./syz-executor exec"[16071] was attempted by "./syz-executor exec"[20365] [ 883.363560][T20435] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 883.373896][T20435] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 883.385456][T20435] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 883.391578][T20435] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 883.609036][T20439] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 883.657739][T20439] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 883.700378][T20439] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 883.773633][T20439] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 885.231208][T20455] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 885.249157][T20455] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 885.271060][T20455] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 885.290681][T20455] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 886.524138][ T5836] Bluetooth: hci4: command 0x040f tx timeout [ 886.647187][T20479] netlink: 'syz.0.3481': attribute type 1 has an invalid length. [ 886.983740][T20481] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 886.989855][T20481] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 887.062830][T20481] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 887.118311][T20481] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 887.567281][ T5836] Bluetooth: hci4: unexpected subevent 0x01 length: 125 > 18 [ 887.575161][ T5836] Bluetooth: hci4: Invalid handle: 0x1e1a > 0x0eff [ 887.989882][T20498] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3487'. [ 889.003244][T15088] Bluetooth: hci4: command 0x040f tx timeout [ 889.003236][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 889.092115][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 889.163664][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 890.735946][T20520] zswap: compressor not available [ 892.454244][ T5836] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 892.454283][ T5836] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 892.469383][ T5836] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 892.469469][ T5836] Bluetooth: hci3: Malformed LE Event: 0x0d [ 892.492855][T20559] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3502'. [ 893.828109][T20601] device-mapper: ioctl: Invalid ioctl structure: uuid ÿÿÿÿÿÿÿ, name , dev 3000000000 [ 895.186508][T20624] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 895.298504][T20624] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 895.386476][T20624] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 895.392614][T20624] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 897.253225][ T5836] Bluetooth: hci4: command 0x040f tx timeout [ 897.323373][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 897.403325][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 897.403563][T15088] Bluetooth: hci0: command 0x0c1a tx timeout [ 903.605459][T20736] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 903.613859][T20736] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 903.620011][T20736] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 903.627472][T20736] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 904.436826][T20750] kstrtoul() returned -22 for lu_gp_id [ 904.459430][ T30] audit: type=1800 audit(4294968190.242:37): pid=20750 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3554" name="lu_gp_id" dev="configfs" ino=74370 res=0 errno=0 [ 904.978918][T20764] nbd: must specify a size in bytes for the device [ 905.645514][T15088] Bluetooth: hci3: command 0x0c1a tx timeout [ 905.645575][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 905.651737][T15088] Bluetooth: hci1: command 0x0c1a tx timeout [ 905.659259][ T5836] Bluetooth: hci4: command 0x040f tx timeout [ 905.938429][T20784] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3563'. [ 906.630939][T20797] Invalid ELF header magic: != ELF [ 907.198849][ T30] audit: type=1800 audit(4294968193.002:38): pid=20805 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.3568" name="lu_gp_id" dev="configfs" ino=74510 res=0 errno=0 [ 907.199877][T20805] kstrtoul() returned -22 for lu_gp_id [ 907.793935][T20810] ERROR: Out of memory at tomoyo_memory_ok. [ 908.152222][T20822] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 908.221428][T20822] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 908.263427][T20822] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 908.303296][T20822] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 909.214318][T20847] block nbd5: Unsupported socket: shutdown callout must be supported. [ 910.151507][T20859] kstrtoul() returned -22 for lu_gp_id [ 910.157965][ T30] audit: type=1800 audit(4294968195.942:39): pid=20859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3580" name="lu_gp_id" dev="configfs" ino=74647 res=0 errno=0 [ 910.203162][T20778] Bluetooth: hci4: command 0x040f tx timeout [ 910.215205][T20867] FAULT_INJECTION: forcing a failure. [ 910.215205][T20867] name failslab, interval 1, probability 0, space 0, times 0 [ 910.263750][T20867] CPU: 1 UID: 0 PID: 20867 Comm: syz.0.3583 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 910.263788][T20867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 910.263808][T20867] Call Trace: [ 910.263827][T20867] [ 910.263837][T20867] dump_stack_lvl+0x16c/0x1f0 [ 910.263884][T20867] should_fail_ex+0x50a/0x650 [ 910.263914][T20867] ? fs_reclaim_acquire+0xae/0x150 [ 910.263954][T20867] should_failslab+0xc2/0x120 [ 910.263981][T20867] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 910.264016][T20867] ? find_held_lock+0x2d/0x110 [ 910.264044][T20867] ? __d_alloc+0x31/0xaa0 [ 910.264072][T20867] __d_alloc+0x31/0xaa0 [ 910.264094][T20867] ? do_raw_spin_lock+0x12d/0x2c0 [ 910.264123][T20867] d_alloc+0x4a/0x1e0 [ 910.264149][T20867] d_alloc_name+0x84/0xb0 [ 910.264172][T20867] ? __pfx_d_alloc_name+0x10/0x10 [ 910.264227][T20867] simple_fill_super+0x2eb/0x720 [ 910.264263][T20867] ? __pfx_nfsd_fill_super+0x10/0x10 [ 910.264299][T20867] nfsd_fill_super+0x90/0x530 [ 910.264332][T20867] ? __pfx_set_anon_super_fc+0x10/0x10 [ 910.264363][T20867] ? __pfx_nfsd_fill_super+0x10/0x10 [ 910.264408][T20867] get_tree_keyed+0x10b/0x1d0 [ 910.264441][T20867] vfs_get_tree+0x8b/0x340 [ 910.264469][T20867] path_mount+0x14e6/0x1f10 [ 910.264497][T20867] ? kmem_cache_free+0x2e2/0x4d0 [ 910.264530][T20867] ? __pfx_path_mount+0x10/0x10 [ 910.264558][T20867] ? putname+0x13c/0x180 [ 910.264589][T20867] __x64_sys_mount+0x28f/0x310 [ 910.264614][T20867] ? __pfx___x64_sys_mount+0x10/0x10 [ 910.264636][T20867] ? syscall_user_dispatch+0x7a/0x130 [ 910.264685][T20867] do_syscall_64+0xcd/0x250 [ 910.264719][T20867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 910.264751][T20867] RIP: 0033:0x7f84adf8d169 [ 910.264774][T20867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 910.264798][T20867] RSP: 002b:00007f84aed70038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 910.264834][T20867] RAX: ffffffffffffffda RBX: 00007f84ae1a5fa0 RCX: 00007f84adf8d169 [ 910.264854][T20867] RDX: 0000400000000100 RSI: 00004000000000c0 RDI: 0000000000000000 [ 910.264870][T20867] RBP: 00007f84ae00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 910.264884][T20867] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000000 [ 910.264897][T20867] R13: 0000000000000000 R14: 00007f84ae1a5fa0 R15: 00007ffd45d23408 [ 910.264932][T20867] [ 910.333489][T20778] Bluetooth: hci0: command 0x0c1a tx timeout [ 910.427272][T14022] Bluetooth: hci1: command 0x0c1a tx timeout [ 910.427343][T14022] Bluetooth: hci3: command 0x0c1a tx timeout [ 910.899361][T20875] netlink: 'syz.2.3584': attribute type 11 has an invalid length. [ 910.913203][T20875] netlink: 'syz.2.3584': attribute type 11 has an invalid length. [ 910.921090][T20875] netlink: 'syz.2.3584': attribute type 11 has an invalid length. [ 910.986011][T20874] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 911.002672][T20874] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 911.108191][T20874] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 911.222100][T20874] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 912.030797][T20898] FAULT_INJECTION: forcing a failure. [ 912.030797][T20898] name failslab, interval 1, probability 0, space 0, times 0 [ 912.064526][T20898] CPU: 1 UID: 0 PID: 20898 Comm: syz.0.3590 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 912.064560][T20898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 912.064572][T20898] Call Trace: [ 912.064579][T20898] [ 912.064588][T20898] dump_stack_lvl+0x16c/0x1f0 [ 912.064634][T20898] should_fail_ex+0x50a/0x650 [ 912.064657][T20898] ? fs_reclaim_acquire+0xae/0x150 [ 912.064688][T20898] ? tomoyo_realpath_from_path+0xb9/0x720 [ 912.064719][T20898] should_failslab+0xc2/0x120 [ 912.064742][T20898] __kmalloc_noprof+0xcb/0x510 [ 912.064775][T20898] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 912.064812][T20898] tomoyo_realpath_from_path+0xb9/0x720 [ 912.064842][T20898] ? tomoyo_path_number_perm+0x235/0x590 [ 912.064871][T20898] ? tomoyo_path_number_perm+0x235/0x590 [ 912.064901][T20898] tomoyo_path_number_perm+0x248/0x590 [ 912.064926][T20898] ? tomoyo_path_number_perm+0x235/0x590 [ 912.064957][T20898] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 912.065016][T20898] ? __pfx_lock_release+0x10/0x10 [ 912.065045][T20898] ? trace_lock_acquire+0x14e/0x1f0 [ 912.065075][T20898] ? lock_acquire+0x2f/0xb0 [ 912.065103][T20898] ? __fget_files+0x40/0x3a0 [ 912.065138][T20898] ? __fget_files+0x206/0x3a0 [ 912.065174][T20898] security_file_ioctl+0x9b/0x240 [ 912.065204][T20898] __x64_sys_ioctl+0xb7/0x200 [ 912.065235][T20898] do_syscall_64+0xcd/0x250 [ 912.065267][T20898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 912.065298][T20898] RIP: 0033:0x7f84adf8d169 [ 912.065317][T20898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 912.065338][T20898] RSP: 002b:00007f84aed70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 912.065360][T20898] RAX: ffffffffffffffda RBX: 00007f84ae1a5fa0 RCX: 00007f84adf8d169 [ 912.065375][T20898] RDX: 00004000000012c0 RSI: 00000000c4c85512 RDI: 0000000000000003 [ 912.065390][T20898] RBP: 00007f84aed70090 R08: 0000000000000000 R09: 0000000000000000 [ 912.065404][T20898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 912.065416][T20898] R13: 0000000000000000 R14: 00007f84ae1a5fa0 R15: 00007ffd45d23408 [ 912.065445][T20898] [ 912.065454][T20898] ERROR: Out of memory at tomoyo_realpath_from_path. [ 913.013529][T20778] Bluetooth: hci1: command 0x0c1a tx timeout [ 913.019656][T20778] Bluetooth: hci4: command 0x040f tx timeout [ 913.163213][T20778] Bluetooth: hci0: command 0x0c1a tx timeout [ 913.243412][T20778] Bluetooth: hci3: command 0x0c1a tx timeout [ 913.680049][T20929] snd_aloop snd_aloop.0: control 1:6:6:¢¸è_ÅheºRŸª:0 is already present [ 914.131294][T20946] FAULT_INJECTION: forcing a failure. [ 914.131294][T20946] name failslab, interval 1, probability 0, space 0, times 0 [ 914.163337][T20946] CPU: 1 UID: 0 PID: 20946 Comm: syz.4.3609 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 914.163368][T20946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 914.163378][T20946] Call Trace: [ 914.163384][T20946] [ 914.163391][T20946] dump_stack_lvl+0x16c/0x1f0 [ 914.163424][T20946] should_fail_ex+0x50a/0x650 [ 914.163443][T20946] ? fs_reclaim_acquire+0xae/0x150 [ 914.163470][T20946] should_failslab+0xc2/0x120 [ 914.163489][T20946] __kmalloc_node_noprof+0xd1/0x510 [ 914.163520][T20946] ? __pfx___mutex_lock+0x10/0x10 [ 914.163547][T20946] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 914.163582][T20946] __kvmalloc_node_noprof+0xad/0x1a0 [ 914.163644][T20946] traverse.part.0.constprop.0+0x392/0x640 [ 914.163676][T20946] ? __pfx_lock_release+0x10/0x10 [ 914.163706][T20946] ? trace_lock_acquire+0x14e/0x1f0 [ 914.163738][T20946] seq_read_iter+0x934/0x12b0 [ 914.163769][T20946] ? aa_file_perm+0x4d5/0xfe0 [ 914.163807][T20946] seq_read+0x39f/0x4e0 [ 914.163835][T20946] ? __pfx_seq_read+0x10/0x10 [ 914.163889][T20946] full_proxy_read+0x13c/0x200 [ 914.163919][T20946] ? __pfx_full_proxy_read+0x10/0x10 [ 914.163950][T20946] vfs_read+0x1df/0xbf0 [ 914.163982][T20946] ? __fget_files+0x1fc/0x3a0 [ 914.164012][T20946] ? __pfx_lock_release+0x10/0x10 [ 914.164042][T20946] ? __pfx_vfs_read+0x10/0x10 [ 914.164073][T20946] ? lock_acquire+0x2f/0xb0 [ 914.164100][T20946] ? __fget_files+0x40/0x3a0 [ 914.164136][T20946] ? __fget_files+0x206/0x3a0 [ 914.164176][T20946] __x64_sys_pread64+0x1f6/0x250 [ 914.164208][T20946] ? __pfx___x64_sys_pread64+0x10/0x10 [ 914.164250][T20946] do_syscall_64+0xcd/0x250 [ 914.164283][T20946] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 914.164313][T20946] RIP: 0033:0x7fe3a0b8d169 [ 914.164332][T20946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 914.164353][T20946] RSP: 002b:00007fe3a1a8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 914.164427][T20946] RAX: ffffffffffffffda RBX: 00007fe3a0da5fa0 RCX: 00007fe3a0b8d169 [ 914.164443][T20946] RDX: 000008000000fffb RSI: 0000000000000000 RDI: 0000000000000003 [ 914.164456][T20946] RBP: 00007fe3a1a8d090 R08: 0000000000000000 R09: 0000000000000000 [ 914.164468][T20946] R10: 000000000000a76b R11: 0000000000000246 R12: 0000000000000001 [ 914.164481][T20946] R13: 0000000000000000 R14: 00007fe3a0da5fa0 R15: 00007ffed180be38 [ 914.164511][T20946] [ 914.550264][T20951] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 914.597197][T20951] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 914.626255][T20951] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 914.632414][T20951] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 914.764835][T20958] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 914.771065][T20958] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 914.872148][T20958] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 914.890346][T20958] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 914.954621][T20967] openvswitch: netlink: Duplicate key (type 15). [ 914.961754][T20966] openvswitch: netlink: Duplicate key (type 15). [ 915.799501][T20986] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 915.824180][T20986] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 915.830420][T20986] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 915.884085][T20986] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 916.351523][T20994] Invalid ELF header magic: != ELF [ 916.518439][T21008] netlink: zone id is out of range [ 916.595223][T21011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3628'. [ 916.632395][T21011] netlink: 23 bytes leftover after parsing attributes in process `syz.0.3628'. [ 916.643300][T21010] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 916.650046][T21010] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 916.694692][T21010] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 916.716319][T21010] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 917.008813][T21015] FAULT_INJECTION: forcing a failure. [ 917.008813][T21015] name failslab, interval 1, probability 0, space 0, times 0 [ 917.046176][T21015] CPU: 1 UID: 0 PID: 21015 Comm: syz.6.3630 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 917.046215][T21015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 917.046235][T21015] Call Trace: [ 917.046242][T21015] [ 917.046254][T21015] dump_stack_lvl+0x16c/0x1f0 [ 917.046311][T21015] should_fail_ex+0x50a/0x650 [ 917.046345][T21015] ? fs_reclaim_acquire+0xae/0x150 [ 917.046380][T21015] ? device_add+0xccf/0x1a70 [ 917.046415][T21015] should_failslab+0xc2/0x120 [ 917.046441][T21015] __kmalloc_cache_noprof+0x68/0x410 [ 917.046483][T21015] device_add+0xccf/0x1a70 [ 917.046513][T21015] ? dev_set_name+0xc8/0x100 [ 917.046548][T21015] ? __pfx_dev_set_name+0x10/0x10 [ 917.046585][T21015] ? __pfx_device_add+0x10/0x10 [ 917.046622][T21015] ? __init_waitqueue_head+0xca/0x150 [ 917.046658][T21015] netdev_register_kobject+0x183/0x3a0 [ 917.046697][T21015] register_netdevice+0x147b/0x1eb0 [ 917.046727][T21015] ? __pfx_register_netdevice+0x10/0x10 [ 917.046758][T21015] __ip_tunnel_create+0x4aa/0x690 [ 917.046790][T21015] ? __pfx___ip_tunnel_create+0x10/0x10 [ 917.046820][T21015] ? read_word_at_a_time+0xe/0x20 [ 917.046859][T21015] ip_tunnel_init_net+0x22a/0x790 [ 917.046894][T21015] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 917.046928][T21015] ? __kmalloc_noprof+0x23b/0x510 [ 917.046963][T21015] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 917.046987][T21015] ops_init+0x1df/0x5f0 [ 917.047012][T21015] setup_net+0x21f/0x860 [ 917.047037][T21015] ? __pfx_setup_net+0x10/0x10 [ 917.047057][T21015] ? down_read_killable+0xcc/0x380 [ 917.047110][T21015] ? __pfx_down_read_killable+0x10/0x10 [ 917.047144][T21015] ? __raw_spin_lock_init+0x3a/0x110 [ 917.047169][T21015] ? debug_mutex_init+0x37/0x70 [ 917.047198][T21015] copy_net_ns+0x2a6/0x5f0 [ 917.047228][T21015] create_new_namespaces+0x3ea/0xad0 [ 917.047271][T21015] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 917.047311][T21015] ksys_unshare+0x45d/0xa40 [ 917.047336][T21015] ? __pfx_ksys_unshare+0x10/0x10 [ 917.047359][T21015] ? xfd_validate_state+0x5d/0x180 [ 917.047402][T21015] __x64_sys_unshare+0x31/0x40 [ 917.047426][T21015] do_syscall_64+0xcd/0x250 [ 917.047459][T21015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 917.047491][T21015] RIP: 0033:0x7f2981b8d169 [ 917.047520][T21015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 917.047549][T21015] RSP: 002b:00007f2982a58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 917.047573][T21015] RAX: ffffffffffffffda RBX: 00007f2981da5fa0 RCX: 00007f2981b8d169 [ 917.047589][T21015] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 917.047604][T21015] RBP: 00007f2981c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 917.047618][T21015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 917.047632][T21015] R13: 0000000000000000 R14: 00007f2981da5fa0 R15: 00007ffc770ce338 [ 917.047664][T21015] [ 917.888331][T21031] netlink: 'syz.0.3634': attribute type 2 has an invalid length. [ 918.333823][T21039] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 918.344219][T21039] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 918.375063][T21039] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 918.403636][T21039] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 919.133630][T21055] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 919.139782][T21055] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 919.220678][T21055] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 919.253354][T21055] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 921.163239][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 921.164339][T20778] Bluetooth: hci4: command 0x040f tx timeout [ 921.245580][T20778] Bluetooth: hci0: command 0x0c1a tx timeout [ 921.323193][T20778] Bluetooth: hci3: command 0x0c1a tx timeout [ 921.609324][T21097] FAULT_INJECTION: forcing a failure. [ 921.609324][T21097] name failslab, interval 1, probability 0, space 0, times 0 [ 921.629834][T21097] CPU: 1 UID: 0 PID: 21097 Comm: syz.2.3652 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 921.629867][T21097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 921.629880][T21097] Call Trace: [ 921.629887][T21097] [ 921.629896][T21097] dump_stack_lvl+0x16c/0x1f0 [ 921.629932][T21097] should_fail_ex+0x50a/0x650 [ 921.629955][T21097] ? fs_reclaim_acquire+0xae/0x150 [ 921.629987][T21097] should_failslab+0xc2/0x120 [ 921.630010][T21097] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 921.630044][T21097] ? getname_flags.part.0+0x4c/0x550 [ 921.630071][T21097] ? vfs_write+0x306/0x1150 [ 921.630104][T21097] getname_flags.part.0+0x4c/0x550 [ 921.630133][T21097] getname+0x8d/0xe0 [ 921.630163][T21097] do_sys_openat2+0x104/0x1e0 [ 921.630187][T21097] ? __pfx_do_sys_openat2+0x10/0x10 [ 921.630215][T21097] ? __fget_files+0x206/0x3a0 [ 921.630252][T21097] __x64_sys_openat+0x175/0x210 [ 921.630277][T21097] ? __pfx___x64_sys_openat+0x10/0x10 [ 921.630301][T21097] ? ksys_write+0x1ba/0x250 [ 921.630341][T21097] do_syscall_64+0xcd/0x250 [ 921.630375][T21097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 921.630406][T21097] RIP: 0033:0x7f9b24f8d169 [ 921.630424][T21097] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 921.630446][T21097] RSP: 002b:00007f9b25d17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 921.630467][T21097] RAX: ffffffffffffffda RBX: 00007f9b251a5fa0 RCX: 00007f9b24f8d169 [ 921.630483][T21097] RDX: 0000000000000002 RSI: 0000400000000080 RDI: ffffffffffffff9c [ 921.630497][T21097] RBP: 00007f9b25d17090 R08: 0000000000000000 R09: 0000000000000000 [ 921.630511][T21097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 921.630525][T21097] R13: 0000000000000001 R14: 00007f9b251a5fa0 R15: 00007fff181f8188 [ 921.630556][T21097] [ 921.892601][T21078] kexec: Could not allocate control_code_buffer [ 922.116271][T21101] FAULT_INJECTION: forcing a failure. [ 922.116271][T21101] name failslab, interval 1, probability 0, space 0, times 0 [ 922.178290][T21101] CPU: 1 UID: 0 PID: 21101 Comm: syz.0.3653 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 922.178324][T21101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 922.178338][T21101] Call Trace: [ 922.178345][T21101] [ 922.178354][T21101] dump_stack_lvl+0x16c/0x1f0 [ 922.178395][T21101] should_fail_ex+0x50a/0x650 [ 922.178419][T21101] ? fs_reclaim_acquire+0xae/0x150 [ 922.178451][T21101] should_failslab+0xc2/0x120 [ 922.178475][T21101] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 922.178507][T21101] ? down_write+0x14e/0x200 [ 922.178539][T21101] ? vm_area_dup+0x53/0x2f0 [ 922.178592][T21101] vm_area_dup+0x53/0x2f0 [ 922.178628][T21101] copy_process+0x776f/0x8c50 [ 922.178678][T21101] ? __pfx_copy_process+0x10/0x10 [ 922.178704][T21101] ? try_to_wake_up+0x953/0x1490 [ 922.178747][T21101] ? plist_check_head+0xa3/0x150 [ 922.178779][T21101] ? wake_up_q+0xb0/0x160 [ 922.178805][T21101] ? do_raw_spin_unlock+0x172/0x230 [ 922.178836][T21101] kernel_clone+0xfd/0x960 [ 922.178857][T21101] ? __pfx_futex_wake+0x10/0x10 [ 922.178885][T21101] ? __pfx_kernel_clone+0x10/0x10 [ 922.178904][T21101] ? __pfx_vfs_writev+0x10/0x10 [ 922.178949][T21101] __do_sys_clone+0xcf/0x120 [ 922.178971][T21101] ? __pfx___do_sys_clone+0x10/0x10 [ 922.179010][T21101] ? rcu_is_watching+0x12/0xc0 [ 922.179047][T21101] do_syscall_64+0xcd/0x250 [ 922.179081][T21101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 922.179111][T21101] RIP: 0033:0x7f84adf8d169 [ 922.179131][T21101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 922.179154][T21101] RSP: 002b:00007f84aed6ffe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 922.179176][T21101] RAX: ffffffffffffffda RBX: 00007f84ae1a5fa0 RCX: 00007f84adf8d169 [ 922.179192][T21101] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 922.179205][T21101] RBP: 00007f84ae00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 922.179218][T21101] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 922.179232][T21101] R13: 0000000000000000 R14: 00007f84ae1a5fa0 R15: 00007ffd45d23408 [ 922.179263][T21101] [ 923.557594][T21127] FAULT_INJECTION: forcing a failure. [ 923.557594][T21127] name failslab, interval 1, probability 0, space 0, times 0 [ 923.637707][T21127] CPU: 1 UID: 0 PID: 21127 Comm: syz.6.3663 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 923.637739][T21127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 923.637753][T21127] Call Trace: [ 923.637760][T21127] [ 923.637769][T21127] dump_stack_lvl+0x16c/0x1f0 [ 923.637805][T21127] should_fail_ex+0x50a/0x650 [ 923.637829][T21127] ? fs_reclaim_acquire+0xae/0x150 [ 923.637861][T21127] ? ima_alloc_init_template+0xb8/0x720 [ 923.637881][T21127] should_failslab+0xc2/0x120 [ 923.637903][T21127] __kmalloc_noprof+0xcb/0x510 [ 923.637936][T21127] ? mark_held_locks+0x9f/0xe0 [ 923.637969][T21127] ima_alloc_init_template+0xb8/0x720 [ 923.637993][T21127] ? take_dentry_name_snapshot+0x314/0x730 [ 923.638023][T21127] ima_store_measurement+0x1ea/0x5c0 [ 923.638050][T21127] ? __pfx_ima_store_measurement+0x10/0x10 [ 923.638074][T21127] ? vfs_getxattr_alloc+0xf1/0x340 [ 923.638113][T21127] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 923.638149][T21127] process_measurement+0x1bcb/0x2370 [ 923.638193][T21127] ? __pfx_process_measurement+0x10/0x10 [ 923.638237][T21127] ? aa_file_perm+0x4c6/0xfe0 [ 923.638269][T21127] ? trace_lock_acquire+0x14e/0x1f0 [ 923.638335][T21127] ima_file_mmap+0x1b3/0x1e0 [ 923.638366][T21127] ? __pfx_ima_file_mmap+0x10/0x10 [ 923.638403][T21127] security_mmap_file+0x88c/0x990 [ 923.638446][T21127] vm_mmap_pgoff+0xdb/0x3a0 [ 923.638482][T21127] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 923.638511][T21127] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 923.638543][T21127] ? hugetlbfs_get_inode+0x323/0x740 [ 923.638580][T21127] ksys_mmap_pgoff+0x1c8/0x5c0 [ 923.638616][T21127] __x64_sys_mmap+0x125/0x190 [ 923.638650][T21127] do_syscall_64+0xcd/0x250 [ 923.638685][T21127] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.638717][T21127] RIP: 0033:0x7f2981b8d169 [ 923.638738][T21127] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.638761][T21127] RSP: 002b:00007f2982a58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 923.638785][T21127] RAX: ffffffffffffffda RBX: 00007f2981da5fa0 RCX: 00007f2981b8d169 [ 923.638800][T21127] RDX: 00004000000000df RSI: 0000000000000004 RDI: 0000000000000000 [ 923.638813][T21127] RBP: 00007f2981c0e2a0 R08: 0000000000000401 R09: 0000300000000000 [ 923.638826][T21127] R10: 0000000000040eb1 R11: 0000000000000246 R12: 0000000000000000 [ 923.638838][T21127] R13: 0000000000000000 R14: 00007f2981da5fa0 R15: 00007ffc770ce338 [ 923.638866][T21127] [ 923.653172][ T30] audit: type=1804 audit(4294968221.438:40): pid=21127 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=add_template_measure cause=ENOMEM comm="syz.6.3663" name="anon_hugepage" dev="hugetlbfs" ino=76221 res=0 errno=0 [ 923.841721][ C0] vkms_vblank_simulate: vblank timer overrun [ 924.331160][T21146] sysfs_service_op_store: Client not running :-5: [ 924.365503][T21146] sysfs_service_op_store: Client not running :-5: [ 924.468032][T21150] sysfs_service_op_show: Client not running :-5: [ 925.609120][T21177] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 925.688064][T21173] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 925.713561][T21173] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 925.748860][T21173] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 925.755717][T21173] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 926.615167][T21192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3680'. [ 927.637725][T21211] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3685'. [ 927.723861][T20778] Bluetooth: hci1: command 0x0c1a tx timeout [ 927.728910][ T5836] Bluetooth: hci4: command 0x040f tx timeout [ 927.803671][ T5836] Bluetooth: hci3: command 0x0c1a tx timeout [ 927.805106][T20778] Bluetooth: hci0: command 0x0c1a tx timeout [ 928.232616][T21223] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 928.364839][T21223] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 928.441443][T21223] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 928.557580][T21223] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 928.820401][T21237] netlink: 'syz.0.3693': attribute type 27 has an invalid length. [ 928.873160][T21237] netlink: 334 bytes leftover after parsing attributes in process `syz.0.3693'. [ 929.977474][T20778] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 930.170940][ T30] audit: type=1800 audit(4294968235.968:41): pid=21259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3699" name="dbroot" dev="configfs" ino=76718 res=0 errno=0 [ 930.283335][T20778] Bluetooth: hci4: command 0x040f tx timeout [ 930.435940][ T30] audit: type=1804 audit(4294968236.238:42): pid=21259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.3699" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=76718 res=1 errno=0 [ 930.443427][T20778] Bluetooth: hci0: command 0x0c1a tx timeout [ 930.460150][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 930.536338][T21259] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input36 [ 930.615921][T20778] Bluetooth: hci3: command 0x0c1a tx timeout [ 932.133459][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 932.139817][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.354337][T20778] Bluetooth: hci1: unexpected subevent 0x01 length: 125 > 18 [ 933.362305][T20778] Bluetooth: hci1: Invalid handle: 0x1e1a > 0x0eff [ 933.668668][T21300] netlink: 2024 bytes leftover after parsing attributes in process `syz.4.3714'. [ 933.703602][T21300] netlink: zone id is out of range [ 933.708798][T21300] netlink: zone id is out of range [ 933.730511][T21300] netlink: get zone limit has 8 unknown bytes [ 934.125572][T21307] netlink: 346 bytes leftover after parsing attributes in process `syz.4.3716'. [ 934.968095][T21317] mkiss: ax0: crc mode is auto. [ 936.239571][T21347] Invalid ELF header magic: != ELF [ 937.171025][T21371] netlink: 346 bytes leftover after parsing attributes in process `syz.2.3729'. [ 937.779108][T20778] Bluetooth: hci4: unexpected subevent 0x01 length: 4 < 18 [ 937.797097][T20778] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 937.998985][ T30] audit: type=1800 audit(4294968259.798:43): pid=21389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.3736" name="dbroot" dev="configfs" ino=77287 res=0 errno=0 [ 938.357511][ T30] audit: type=1804 audit(4294968260.158:44): pid=21391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.3738" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=77287 res=1 errno=0 [ 938.433372][T21386] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 938.464553][T21386] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 938.663396][T21386] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 938.756588][T21386] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 940.253783][T21408] mkiss: ax0: crc mode is auto. [ 940.443880][T20778] Bluetooth: hci4: command 0x040f tx timeout [ 940.523228][T20778] Bluetooth: hci1: command 0x0c1a tx timeout [ 940.683320][T20778] Bluetooth: hci0: command 0x0c1a tx timeout [ 940.730469][T21412] netlink: 346 bytes leftover after parsing attributes in process `syz.6.3744'. [ 940.763236][T20778] Bluetooth: hci3: command 0x0c1a tx timeout [ 941.522547][T20778] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 941.724422][ T30] audit: type=1800 audit(4294968271.521:45): pid=21435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.3751" name="dbroot" dev="configfs" ino=77408 res=0 errno=0 [ 941.888263][ T30] audit: type=1804 audit(4294968271.691:46): pid=21435 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.3751" name="/newroot/sys/kernel/config/target/dbroot" dev="configfs" ino=77408 res=1 errno=0 [ 941.978468][T21435] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input37 [ 943.228036][T21457] netlink: 'syz.0.3757': attribute type 10 has an invalid length. [ 943.238941][T21457] netlink: 230 bytes leftover after parsing attributes in process `syz.0.3757'. [ 943.272025][T21457] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 943.354915][T21458] mkiss: ax0: crc mode is auto. [ 944.111292][T20778] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 944.184779][ T5836] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 944.823550][T21488] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 944.823699][T21488] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 944.823821][T21488] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 944.823973][T21488] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 945.065839][T21497] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 945.083320][T21497] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 945.112489][T21497] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 945.164330][T21497] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 945.994421][T21513] FAULT_INJECTION: forcing a failure. [ 945.994421][T21513] name failslab, interval 1, probability 0, space 0, times 0 [ 946.020348][T21513] CPU: 0 UID: 0 PID: 21513 Comm: syz.0.3775 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 946.020385][T21513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 946.020400][T21513] Call Trace: [ 946.020408][T21513] [ 946.020417][T21513] dump_stack_lvl+0x16c/0x1f0 [ 946.020456][T21513] should_fail_ex+0x50a/0x650 [ 946.020487][T21513] ? fs_reclaim_acquire+0xae/0x150 [ 946.020522][T21513] should_failslab+0xc2/0x120 [ 946.020546][T21513] __kmalloc_node_noprof+0xd1/0x510 [ 946.020582][T21513] ? __pfx_lock_release+0x10/0x10 [ 946.020615][T21513] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 946.020648][T21513] ? lockdep_init_map_type+0x16d/0x7d0 [ 946.020683][T21513] __kvmalloc_node_noprof+0xad/0x1a0 [ 946.020714][T21513] bucket_table_alloc.isra.0+0x86/0x460 [ 946.020750][T21513] rhashtable_init_noprof+0x41a/0x7e0 [ 946.020774][T21513] ipc_init_ids+0x92/0x280 [ 946.020800][T21513] msg_init_ns+0x13d/0x190 [ 946.020822][T21513] copy_ipcs+0x4bd/0x610 [ 946.020846][T21513] ? copy_utsname+0xab/0x470 [ 946.020880][T21513] create_new_namespaces+0x20a/0xad0 [ 946.020918][T21513] ? security_capable+0x7e/0x260 [ 946.020948][T21513] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 946.020986][T21513] ksys_unshare+0x45d/0xa40 [ 946.021011][T21513] ? __pfx_ksys_unshare+0x10/0x10 [ 946.021035][T21513] ? xfd_validate_state+0x5d/0x180 [ 946.021077][T21513] __x64_sys_unshare+0x31/0x40 [ 946.021102][T21513] do_syscall_64+0xcd/0x250 [ 946.021136][T21513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 946.021167][T21513] RIP: 0033:0x7f84adf8d169 [ 946.021187][T21513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 946.021210][T21513] RSP: 002b:00007f84aed70038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 946.021234][T21513] RAX: ffffffffffffffda RBX: 00007f84ae1a5fa0 RCX: 00007f84adf8d169 [ 946.021251][T21513] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 946.021266][T21513] RBP: 00007f84ae00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 946.021281][T21513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 946.021295][T21513] R13: 0000000000000000 R14: 00007f84ae1a5fa0 R15: 00007ffd45d23408 [ 946.021325][T21513] [ 946.393528][T21515] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 946.399697][T21515] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 946.405830][T21515] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 946.411909][T21515] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 946.745515][T21531] netlink: 'syz.4.3779': attribute type 10 has an invalid length. [ 946.753538][T21531] netlink: 230 bytes leftover after parsing attributes in process `syz.4.3779'. [ 946.773432][T21527] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 946.778149][T21531] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 946.779678][T21527] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 946.803543][T21527] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 946.809775][T21527] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 948.853219][T20778] Bluetooth: hci1: command 0x0c1a tx timeout [ 948.859304][T20778] Bluetooth: hci3: command 0x0c1a tx timeout [ 948.866096][T14022] Bluetooth: hci0: command 0x0c1a tx timeout [ 948.872165][T14022] Bluetooth: hci4: command 0x040f tx timeout [ 948.904398][T21562] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 948.923630][T21562] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 948.937966][T21562] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 948.944338][T21562] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 949.393627][T21570] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 949.414377][T21575] FAULT_INJECTION: forcing a failure. [ 949.414377][T21575] name failslab, interval 1, probability 0, space 0, times 0 [ 949.435660][T21570] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 949.453227][T21575] CPU: 1 UID: 0 PID: 21575 Comm: syz.2.3791 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 949.453262][T21575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 949.453276][T21575] Call Trace: [ 949.453282][T21575] [ 949.453292][T21575] dump_stack_lvl+0x16c/0x1f0 [ 949.453329][T21575] should_fail_ex+0x50a/0x650 [ 949.453353][T21575] ? fs_reclaim_acquire+0xae/0x150 [ 949.453385][T21575] ? pagemap_read+0x29c/0x880 [ 949.453411][T21575] should_failslab+0xc2/0x120 [ 949.453433][T21575] __kmalloc_cache_noprof+0x68/0x410 [ 949.453463][T21575] ? bpf_lsm_capable+0x9/0x10 [ 949.453486][T21575] ? security_capable+0x7e/0x260 [ 949.453515][T21575] pagemap_read+0x29c/0x880 [ 949.453551][T21575] ? __pfx_pagemap_read+0x10/0x10 [ 949.453587][T21575] ? rw_verify_area+0xcf/0x680 [ 949.453614][T21575] ? __pfx_pagemap_read+0x10/0x10 [ 949.453645][T21575] vfs_read+0x1df/0xbf0 [ 949.453675][T21575] ? __fget_files+0x1fc/0x3a0 [ 949.453708][T21575] ? __pfx___mutex_lock+0x10/0x10 [ 949.453739][T21575] ? __pfx_vfs_read+0x10/0x10 [ 949.453778][T21575] ? __fget_files+0x206/0x3a0 [ 949.453819][T21575] ksys_read+0x12b/0x250 [ 949.453848][T21575] ? __pfx_ksys_read+0x10/0x10 [ 949.453887][T21575] do_syscall_64+0xcd/0x250 [ 949.453920][T21575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 949.453949][T21575] RIP: 0033:0x7f9b24f8d169 [ 949.453967][T21575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 949.453990][T21575] RSP: 002b:00007f9b25d17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 949.454012][T21575] RAX: ffffffffffffffda RBX: 00007f9b251a5fa0 RCX: 00007f9b24f8d169 [ 949.454027][T21575] RDX: 00000000000039b8 RSI: 0000000000000000 RDI: 0000000000000003 [ 949.454041][T21575] RBP: 00007f9b25d17090 R08: 0000000000000000 R09: 0000000000000000 [ 949.454055][T21575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 949.454068][T21575] R13: 0000000000000000 R14: 00007f9b251a5fa0 R15: 00007fff181f8188 [ 949.454103][T21575] [ 949.454322][T21570] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 949.723378][T21570] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 951.403393][T20778] Bluetooth: hci4: command 0x040f tx timeout [ 951.483339][T20778] Bluetooth: hci1: command 0x0c1a tx timeout [ 951.483396][ T5836] Bluetooth: hci0: command 0x0c1a tx timeout [ 951.713582][T21609] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 951.720578][T21609] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 951.720799][T21609] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 951.720991][T21609] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 952.294022][T21618] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 952.303556][T21618] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 952.309661][T21618] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 952.354569][T21618] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 953.737553][T21642] cougar: G6 mapped to space [ 954.363360][ T5836] Bluetooth: hci1: command 0x0c1a tx timeout [ 954.364318][T14022] Bluetooth: hci0: command 0x0c1a tx timeout [ 954.369547][ T5836] Bluetooth: hci4: command 0x040f tx timeout [ 954.382640][T20778] Bluetooth: hci3: command 0x0c1a tx timeout [ 954.490667][T21658] snd_aloop snd_aloop.0: control 1:6:6:¢¸è_ÅheºRŸª:0 is already present [ 955.331120][T21663] netlink: 'syz.6.3818': attribute type 1 has an invalid length. [ 955.782284][T21678] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3823'. [ 955.925640][T21656] Bluetooth: hci0: unexpected subevent 0x01 length: 125 > 18 [ 955.935142][T21656] Bluetooth: hci0: Invalid handle: 0x1e1a > 0x0eff [ 956.202951][T15088] Bluetooth: hci3: Unable to find connection for big 0xd2 [ 957.103515][T21700] [U]  [ 957.106388][T21700] [U] [ 957.109112][T21700] [U] [ 957.111831][T21700] [U] [ 957.128267][T21700] [U] [ 957.131048][T21700] [U] [ 957.133777][T21700] [U] [ 957.136510][T21700] [U] [ 957.150363][T21700] [U] [ 957.153126][T21700] [U] [ 957.155832][T21700] [U] [ 957.158523][T21700] [U] [ 957.200471][T21700] [U] [ 957.203247][T21700] [U] [ 957.205959][T21700] [U] [ 957.208656][T21700] [U] [ 957.232711][T21700] [U] [ 957.235488][T21700] [U] [ 957.238222][T21700] [U] [ 957.240950][T21700] [U] [ 957.259109][T21700] [U] [ 957.261888][T21700] [U] [ 957.264621][T21700] [U] [ 957.267345][T21700] [U] [ 957.277682][T21700] [U] [ 957.280444][T21700] [U] [ 957.283167][T21700] [U] [ 957.285891][T21700] [U] [ 957.292549][T21700] [U] [ 957.295345][T21700] [U] [ 957.298094][T21700] [U] [ 957.300819][T21700] [U] [ 957.315147][T21700] [U] [ 957.317916][T21700] [U] [ 957.320627][T21700] [U] [ 957.323331][T21700] [U] [ 957.377378][T21698] [U] [ 959.192592][T21729] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3834'. [ 960.011757][T21656] Bluetooth: hci4: unexpected event 0x35 length: 13 > 6 [ 960.024747][T21745] device-mapper: ioctl: Invalid ioctl structure: uuid ÿÿÿÿÿÿÿ, name , dev 3000000000 [ 960.277918][T21751] FAULT_INJECTION: forcing a failure. [ 960.277918][T21751] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 960.301985][T21751] CPU: 0 UID: 0 PID: 21751 Comm: syz.4.3840 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 960.302023][T21751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 960.302037][T21751] Call Trace: [ 960.302044][T21751] [ 960.302053][T21751] dump_stack_lvl+0x16c/0x1f0 [ 960.302094][T21751] should_fail_ex+0x50a/0x650 [ 960.302117][T21751] ? __pfx___might_resched+0x10/0x10 [ 960.302160][T21751] should_fail_alloc_page+0xe7/0x130 [ 960.302194][T21751] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 960.302233][T21751] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 960.302274][T21751] ? __pfx_register_lock_class+0x10/0x10 [ 960.302316][T21751] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 960.302363][T21751] ? hlock_class+0x4e/0x130 [ 960.302387][T21751] ? __pfx___lock_acquire+0x10/0x10 [ 960.302423][T21751] ? __pfx_mark_lock+0x10/0x10 [ 960.302452][T21751] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 960.302490][T21751] ? policy_nodemask+0xea/0x4e0 [ 960.302518][T21751] alloc_pages_mpol+0x1fc/0x540 [ 960.302544][T21751] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 960.302566][T21751] ? __pfx_lock_release+0x10/0x10 [ 960.302603][T21751] ? do_raw_spin_lock+0x12d/0x2c0 [ 960.302626][T21751] ? __pti_set_user_pgtbl+0xf2/0x1a0 [ 960.302665][T21751] alloc_pages_noprof+0x131/0x390 [ 960.302691][T21751] __pmd_alloc+0x3f/0x870 [ 960.302740][T21751] copy_page_range+0x3bc1/0x5570 [ 960.302809][T21751] ? mas_wr_store_entry+0xa0c/0x24b0 [ 960.302848][T21751] ? mas_destroy+0x5ba/0x9e0 [ 960.302895][T21751] ? __pfx_copy_page_range+0x10/0x10 [ 960.302928][T21751] ? mas_store+0x941/0x10d0 [ 960.302972][T21751] ? __pfx_mas_store+0x10/0x10 [ 960.303123][T21751] ? lock_acquire+0x2f/0xb0 [ 960.303152][T21751] ? copy_process+0x79c4/0x8c50 [ 960.303187][T21751] ? up_write+0x1b2/0x520 [ 960.303227][T21751] copy_process+0x7ccb/0x8c50 [ 960.303275][T21751] ? __pfx_copy_process+0x10/0x10 [ 960.303302][T21751] ? try_to_wake_up+0x953/0x1490 [ 960.303341][T21751] ? plist_check_head+0xa3/0x150 [ 960.303375][T21751] ? wake_up_q+0xb0/0x160 [ 960.303403][T21751] ? do_raw_spin_unlock+0x172/0x230 [ 960.303434][T21751] kernel_clone+0xfd/0x960 [ 960.303457][T21751] ? __pfx_futex_wake+0x10/0x10 [ 960.303490][T21751] ? __pfx_kernel_clone+0x10/0x10 [ 960.303511][T21751] ? __mm_populate+0x297/0x380 [ 960.303566][T21751] __do_sys_clone+0xcf/0x120 [ 960.303590][T21751] ? __pfx___do_sys_clone+0x10/0x10 [ 960.303612][T21751] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 960.303664][T21751] ? rcu_is_watching+0x12/0xc0 [ 960.303697][T21751] do_syscall_64+0xcd/0x250 [ 960.303735][T21751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 960.303770][T21751] RIP: 0033:0x7fe3a0b8d169 [ 960.303791][T21751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 960.303814][T21751] RSP: 002b:00007fe3a1a8cfe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 960.303837][T21751] RAX: ffffffffffffffda RBX: 00007fe3a0da5fa0 RCX: 00007fe3a0b8d169 [ 960.303853][T21751] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 960.303868][T21751] RBP: 00007fe3a0c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 960.303884][T21751] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 960.303899][T21751] R13: 0000000000000000 R14: 00007fe3a0da5fa0 R15: 00007ffed180be38 [ 960.303948][T21751] [ 961.502373][T21757] [U]  [ 961.505252][T21757] [U] [ 961.507984][T21757] [U] [ 961.510761][T21757] [U] [ 961.514011][T21757] [U] [ 961.516746][T21757] [U] [ 961.519450][T21757] [U] [ 961.522164][T21757] [U] [ 961.525425][T21757] [U] [ 961.528157][T21757] [U] [ 961.530873][T21757] [U] [ 961.533588][T21757] [U] [ 961.536576][T21757] [U] [ 961.539305][T21757] [U] [ 961.542023][T21757] [U] [ 961.544762][T21757] [U] [ 961.548074][T21757] [U] [ 961.550818][T21757] [U] [ 961.553549][T21757] [U] [ 961.556274][T21757] [U] [ 961.561274][T21757] [U] [ 961.564024][T21757] [U] [ 961.566748][T21757] [U] [ 961.569476][T21757] [U] [ 961.573673][T21764] [U] [ 963.271434][T21799] netlink: zone id is out of range [ 963.285648][T21799] netlink: zone id is out of range [ 963.291291][T21799] netlink: zone id is out of range [ 963.296727][T21799] netlink: zone id is out of range [ 963.302416][T21799] netlink: zone id is out of range [ 963.307704][T21799] netlink: zone id is out of range [ 963.313387][T21799] netlink: zone id is out of range [ 963.318655][T21799] netlink: zone id is out of range [ 963.324212][T21799] netlink: zone id is out of range [ 963.331590][T21799] netlink: zone id is out of range [ 963.846005][T21656] Bluetooth: hci3: unexpected subevent 0x01 length: 123 > 18 [ 963.856229][T21656] Bluetooth: hci0: Unable to find connection for big 0xd2 [ 964.232952][T21813] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3857'. [ 964.294174][T21815] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 964.300677][T21815] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 964.311592][T21815] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 964.325693][T21815] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 965.807977][T21845] Invalid ELF header magic: != ELF [ 966.364371][T21656] Bluetooth: hci3: command 0x0c1a tx timeout [ 966.370464][T21656] Bluetooth: hci0: command 0x0c1a tx timeout [ 966.377884][T15088] Bluetooth: hci1: command 0x0c1a tx timeout [ 966.385049][T20778] Bluetooth: hci4: command 0x040f tx timeout [ 966.632640][T20778] Bluetooth: hci0: unexpected subevent 0x01 length: 123 > 18 [ 967.203674][T21865] netlink: 342 bytes leftover after parsing attributes in process `syz.6.3870'. [ 967.412752][T21870] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3872'. [ 968.104044][T21881] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 968.110265][T21881] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 968.125259][T21881] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 968.131360][T21881] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 968.671814][T20778] Bluetooth: hci4: unexpected subevent 0x01 length: 123 > 18 [ 968.961853][T21902] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3883'. [ 969.796926][T21656] Bluetooth: hci4: Unable to find connection for big 0xd2 [ 970.123366][T20778] Bluetooth: hci1: command 0x0c1a tx timeout [ 970.129471][T21656] Bluetooth: hci4: command 0x040f tx timeout [ 970.203566][T21656] Bluetooth: hci0: command 0x0c1a tx timeout [ 970.209678][T20778] Bluetooth: hci3: command 0x0c1a tx timeout [ 970.548840][T21937] netlink: 'syz.6.3894': attribute type 1 has an invalid length. [ 971.503463][T21946] nbd5: detected capacity change from 0 to 68719476736 [ 971.543942][T14432] block nbd5: Send control failed (result -22) [ 971.550173][T14432] block nbd5: Request send failed, requeueing [ 971.609804][T17050] block nbd5: Dead connection, failed to find a fallback [ 971.617176][T17050] block nbd5: shutting down sockets [ 971.623334][T17050] blk_print_req_error: 22 callbacks suppressed [ 971.623352][T17050] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 971.639675][T17050] buffer_io_error: 22 callbacks suppressed [ 971.639690][T17050] Buffer I/O error on dev nbd5, logical block 0, async page read [ 971.658416][T14432] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 971.674061][T14432] Buffer I/O error on dev nbd5, logical block 0, async page read [ 971.682019][T14432] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 971.697543][T14432] Buffer I/O error on dev nbd5, logical block 0, async page read [ 971.706013][T14432] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 971.716025][T14432] Buffer I/O error on dev nbd5, logical block 0, async page read [ 971.724462][T14432] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 971.733720][T14432] Buffer I/O error on dev nbd5, logical block 0, async page read [ 971.741637][T14432] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 971.750823][T14432] Buffer I/O error on dev nbd5, logical block 0, async page read [ 971.759188][T14432] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 971.773136][T14432] Buffer I/O error on dev nbd5, logical block 0, async page read [ 971.781127][T14432] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 971.803763][T14432] Buffer I/O error on dev nbd5, logical block 0, async page read [ 971.811966][T14432] ldm_validate_partition_table(): Disk read failed. [ 971.853323][T14432] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 971.862783][T14432] Buffer I/O error on dev nbd5, logical block 0, async page read [ 971.951743][T14432] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 971.983781][T14432] Buffer I/O error on dev nbd5, logical block 0, async page read [ 971.992213][T14432] Dev nbd5: unable to read RDB block 0 [ 972.054635][T14432] nbd5: unable to read partition table [ 972.079364][T14432] ldm_validate_partition_table(): Disk read failed. [ 972.133780][T14432] Dev nbd5: unable to read RDB block 0 [ 972.148586][T14432] nbd5: unable to read partition table [ 973.623629][T21995] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 973.654923][T21995] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 973.687351][T22001] net_ratelimit: 686 callbacks suppressed [ 973.687371][T22001] netlink: zone id is out of range [ 973.702835][T21995] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 973.741177][T22001] netlink: zone id is out of range [ 973.763478][T21995] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 973.791174][T22001] netlink: zone id is out of range [ 973.873871][T22001] netlink: zone id is out of range [ 973.879316][T22001] netlink: zone id is out of range [ 973.903289][T22001] netlink: zone id is out of range [ 973.921073][T22001] netlink: zone id is out of range [ 973.943153][T22001] netlink: zone id is out of range [ 973.948332][T22001] netlink: zone id is out of range [ 974.014645][T22001] netlink: zone id is out of range [ 974.346004][T22014] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3919'. [ 974.490312][T22018] netlink: 330 bytes leftover after parsing attributes in process `syz.6.3920'. [ 974.561322][T22021] snd_aloop snd_aloop.0: control 1:6:6:¢¸è_ÅheºRŸª:0 is already present [ 975.632529][T22045] FAULT_INJECTION: forcing a failure. [ 975.632529][T22045] name failslab, interval 1, probability 0, space 0, times 0 [ 975.644681][T20778] Bluetooth: hci4: command 0x040f tx timeout [ 975.705086][T22045] CPU: 1 UID: 0 PID: 22045 Comm: syz.4.3929 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 975.705118][T22045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 975.705132][T22045] Call Trace: [ 975.705138][T22045] [ 975.705147][T22045] dump_stack_lvl+0x16c/0x1f0 [ 975.705185][T22045] should_fail_ex+0x50a/0x650 [ 975.705208][T22045] ? fs_reclaim_acquire+0xae/0x150 [ 975.705239][T22045] ? gpiolib_seq_start+0x69/0x270 [ 975.705265][T22045] should_failslab+0xc2/0x120 [ 975.705288][T22045] __kmalloc_cache_noprof+0x68/0x410 [ 975.705319][T22045] ? __mutex_lock+0x1/0xb10 [ 975.705347][T22045] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 975.705381][T22045] gpiolib_seq_start+0x69/0x270 [ 975.705410][T22045] traverse.part.0.constprop.0+0xac/0x640 [ 975.705447][T22045] ? __pfx_lock_release+0x10/0x10 [ 975.705485][T22045] seq_read_iter+0x934/0x12b0 [ 975.705516][T22045] ? aa_file_perm+0x4d5/0xfe0 [ 975.705553][T22045] seq_read+0x39f/0x4e0 [ 975.705579][T22045] ? __pfx_seq_read+0x10/0x10 [ 975.705629][T22045] full_proxy_read+0x13c/0x200 [ 975.705659][T22045] ? __pfx_full_proxy_read+0x10/0x10 [ 975.705688][T22045] vfs_read+0x1df/0xbf0 [ 975.705717][T22045] ? __fget_files+0x1fc/0x3a0 [ 975.705746][T22045] ? __pfx_lock_release+0x10/0x10 [ 975.705774][T22045] ? __pfx_vfs_read+0x10/0x10 [ 975.705806][T22045] ? lock_acquire+0x2f/0xb0 [ 975.705833][T22045] ? __fget_files+0x40/0x3a0 [ 975.705868][T22045] ? __fget_files+0x206/0x3a0 [ 975.705906][T22045] __x64_sys_pread64+0x1f6/0x250 [ 975.705937][T22045] ? __pfx___x64_sys_pread64+0x10/0x10 [ 975.705979][T22045] do_syscall_64+0xcd/0x250 [ 975.706011][T22045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 975.706042][T22045] RIP: 0033:0x7fe3a0b8d169 [ 975.706061][T22045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 975.706082][T22045] RSP: 002b:00007fe3a1a8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 975.706103][T22045] RAX: ffffffffffffffda RBX: 00007fe3a0da5fa0 RCX: 00007fe3a0b8d169 [ 975.706119][T22045] RDX: 000008000000fffb RSI: 0000000000000000 RDI: 0000000000000003 [ 975.706132][T22045] RBP: 00007fe3a1a8d090 R08: 0000000000000000 R09: 0000000000000000 [ 975.706146][T22045] R10: 000000000000a76b R11: 0000000000000246 R12: 0000000000000001 [ 975.706160][T22045] R13: 0000000000000000 R14: 00007fe3a0da5fa0 R15: 00007ffed180be38 [ 975.706191][T22045] [ 975.706247][T22045] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 975.723208][T20778] Bluetooth: hci0: command 0x0c1a tx timeout [ 975.727100][T22045] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 975.730413][T21656] Bluetooth: hci1: command 0x0c1a tx timeout [ 975.733281][T22045] CPU: 1 UID: 0 PID: 22045 Comm: syz.4.3929 Not tainted 6.14.0-rc5-syzkaller-00268-g1110ce6a1e34 #0 [ 975.733307][T22045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 975.733321][T22045] RIP: 0010:gpiolib_seq_stop+0x4c/0xe0 [ 975.733355][T22045] Code: 48 c1 ea 03 80 3c 02 00 0f 85 98 00 00 00 48 8b 9b e0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 60 8b [ 975.733377][T22045] RSP: 0018:ffffc90004dcfa58 EFLAGS: 00010247 [ 975.803225][T20778] Bluetooth: hci3: command 0x0c1a tx timeout [ 975.806786][T22045] [ 975.806793][T22045] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88803052ca80 [ 975.806808][T22045] RDX: 0000000000000000 RSI: ffffffff84f6b9be RDI: 0000000000000004 [ 975.806822][T22045] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 975.806835][T22045] R10: ffffffff8e37f8d3 R11: 0000000000000001 R12: ffffffff8bd73a00 [ 975.806849][T22045] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90004dcfc40 [ 975.806864][T22045] FS: 00007fe3a1a8d6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 975.806885][T22045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 975.806899][T22045] CR2: 00007f84aed6ff98 CR3: 0000000066444000 CR4: 00000000003526f0 [ 976.101375][T22045] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 976.109343][T22045] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 976.117331][T22045] Call Trace: [ 976.120607][T22045] [ 976.123534][T22045] ? die_addr+0x3b/0xa0 [ 976.127713][T22045] ? exc_general_protection+0x155/0x230 [ 976.133287][T22045] ? asm_exc_general_protection+0x26/0x30 [ 976.139151][T22045] ? gpiolib_seq_stop+0xe/0xe0 [ 976.143924][T22045] ? gpiolib_seq_stop+0x4c/0xe0 [ 976.148777][T22045] ? gpiolib_seq_stop+0xe/0xe0 [ 976.153552][T22045] traverse.part.0.constprop.0+0x2bd/0x640 [ 976.159367][T22045] ? __pfx_lock_release+0x10/0x10 [ 976.164493][T22045] seq_read_iter+0x934/0x12b0 [ 976.169177][T22045] ? aa_file_perm+0x4d5/0xfe0 [ 976.173863][T22045] seq_read+0x39f/0x4e0 [ 976.178018][T22045] ? __pfx_seq_read+0x10/0x10 [ 976.182704][T22045] full_proxy_read+0x13c/0x200 [ 976.187468][T22045] ? __pfx_full_proxy_read+0x10/0x10 [ 976.193193][T22045] vfs_read+0x1df/0xbf0 [ 976.197358][T22045] ? __fget_files+0x1fc/0x3a0 [ 976.202038][T22045] ? __pfx_lock_release+0x10/0x10 [ 976.207066][T22045] ? __pfx_vfs_read+0x10/0x10 [ 976.211745][T22045] ? lock_acquire+0x2f/0xb0 [ 976.216246][T22045] ? __fget_files+0x40/0x3a0 [ 976.220837][T22045] ? __fget_files+0x206/0x3a0 [ 976.225517][T22045] __x64_sys_pread64+0x1f6/0x250 [ 976.230456][T22045] ? __pfx___x64_sys_pread64+0x10/0x10 [ 976.235920][T22045] do_syscall_64+0xcd/0x250 [ 976.240426][T22045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 976.246326][T22045] RIP: 0033:0x7fe3a0b8d169 [ 976.251344][T22045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 976.270954][T22045] RSP: 002b:00007fe3a1a8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 976.279366][T22045] RAX: ffffffffffffffda RBX: 00007fe3a0da5fa0 RCX: 00007fe3a0b8d169 [ 976.287428][T22045] RDX: 000008000000fffb RSI: 0000000000000000 RDI: 0000000000000003 [ 976.295396][T22045] RBP: 00007fe3a1a8d090 R08: 0000000000000000 R09: 0000000000000000 [ 976.303375][T22045] R10: 000000000000a76b R11: 0000000000000246 R12: 0000000000000001 [ 976.311353][T22045] R13: 0000000000000000 R14: 00007fe3a0da5fa0 R15: 00007ffed180be38 [ 976.319348][T22045] [ 976.322458][T22045] Modules linked in: [ 976.327191][T22045] ---[ end trace 0000000000000000 ]--- [ 976.366726][T22045] RIP: 0010:gpiolib_seq_stop+0x4c/0xe0 [ 976.372324][T22045] Code: 48 c1 ea 03 80 3c 02 00 0f 85 98 00 00 00 48 8b 9b e0 00 00 00 48 b8 00 00 00 00 00 fc ff df 48 8d 7b 04 48 89 fa 48 c1 ea 03 <0f> b6 14 02 48 89 f8 83 e0 07 83 c0 03 38 d0 7c 04 84 d2 75 60 8b [ 976.392750][T22045] RSP: 0018:ffffc90004dcfa58 EFLAGS: 00010247 [ 976.399922][T22045] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: ffff88803052ca80 [ 976.408537][T22045] RDX: 0000000000000000 RSI: ffffffff84f6b9be RDI: 0000000000000004 [ 976.433168][T22045] RBP: 0000000000000000 R08: 0000000000000dc0 R09: 00000000ffffffff [ 976.451348][T22045] R10: ffffffff8e37f8d3 R11: 0000000000000001 R12: ffffffff8bd73a00 [ 976.469383][T22045] R13: 0000000000000000 R14: 0000000000000000 R15: ffffc90004dcfc40 [ 976.478200][T22045] FS: 00007fe3a1a8d6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 976.487477][T22045] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 976.494372][T22045] CR2: 00007f2981beb950 CR3: 0000000066444000 CR4: 00000000003526f0 [ 976.502456][T22045] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 976.510857][T22045] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 976.519200][T22045] Kernel panic - not syncing: Fatal exception [ 976.525547][T22045] Kernel Offset: disabled [ 976.529857][T22045] Rebooting in 86400 seconds..