last executing test programs: 39.491091855s ago: executing program 1 (id=2031): mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/virtual/tty/ttyw6/power/runtime_suspended_time\x00', 0x109206, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)='-', 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) clock_getres$auto(0x6, 0x0) getrandom$auto(0x0, 0x6000000, 0x3) madvise$auto(0x0, 0xf663, 0x15) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_GETCAPS(r1, 0x8004500f, 0x0) close_range$auto(0x2, 0x8000, 0x3) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace\x00', 0x101100, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/adsp1\x00', 0x40000, 0x0) ioctl$auto_SOUND_PCM_READ_RATE(r2, 0x80045002, &(0x7f0000000000)) io_uring_register$auto(0x2, 0x22, &(0x7f0000000000), 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x76c5, 0x8, 0x100000000}}) io_uring_enter$auto(r3, 0x9, 0x820e, 0x29, 0x0, 0x18) socket(0x2a, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x800005411, 0x38) close_range$auto(0xffffffffffffffff, r0, 0x4) madvise$auto(0x0, 0x2000040080000004, 0xe) io_uring_setup$auto(0x6, 0x0) mbind$auto(0xf000, 0x8000000000000001, 0x100000000, 0x0, 0x6, 0x2) 38.325128799s ago: executing program 1 (id=2036): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0xffffffffffffffff, 0x28000) r0 = memfd_create$auto(0x0, 0x4) r1 = socket(0xa, 0x2, 0x3a) statx$auto(r0, 0x0, 0x1000, 0xbdfc, 0x0) setsockopt$auto(r1, 0x29, 0x14, 0x0, 0x56b) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r1, 0x29, 0x15, 0x0, 0x52b) 38.076498639s ago: executing program 1 (id=2039): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/nfs/parameters/delay_retrans\x00', 0x102, 0x0) mmap$auto(0x0, 0x20009, 0xfffffffffffffffe, 0xeb2, 0x401, 0x8000008000) ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x28, 0x2, 0x7) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0xa, 0x5, 0x0) socketpair$auto(0x8001, 0x5, 0x5, 0x0) ioctl$auto(0x3, 0xc048aec8, r0) 37.872503423s ago: executing program 1 (id=2041): r0 = openat$auto_sc_seq_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000040), 0x88080, 0x0) unshare$auto(0x40000080) unshare$auto(0x4) getsockopt$auto_SO_INCOMING_CPU(r0, 0xeb0, 0x31, &(0x7f0000000000)=']\x00', &(0x7f0000000080)=0x7) ioctl$auto_XFS_IOC_ALLOCSP64(r0, 0x40305824, &(0x7f00000000c0)={0x7, 0x81, 0x8b05, 0x7, 0x0, 0x0}) prctl$auto_PR_SCHED_CORE(0x3e, 0x7fffffffffffffff, r1, 0xa0, 0x0) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x202002, 0x0) pipe$auto(0x0) ioctl$auto_SNDCTL_SEQ_PANIC(r2, 0x5111, &(0x7f0000000380)="8b6ac1a03c64e9720da29b6257aed8b5597094127a88557972313455da30731769dd5af997cda0916436c32723846ca76ba464362e328ff079c2e47d3029a56d3ff9b29d9ac0f3d9bf37e7936b65213b9577af4fe46147ad5f9e973628372368a023efa655cba9c3a0") statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x1, 0x5, 0x40, 0x1ffe2, 0x9, 0x3, 0x9, 0x2, 0x7ffff, 0xc, 0x1ffffffffffd, 0x28a2, 0x6, 0xb, 0x10007, 0x80, 0x2a0, 0x0, 0xa, 0x22000, 0x200, 0x800, 0x84, [0x3, 0x2, 0x800200000002, 0x3, 0x10000000000000, 0x4, 0x53, 0x0, 0x70624ce7, 0x1, 0xffffffeffffffffd, 0x18000000000, 0x8, 0x10, 0x6, 0x0, 0xfffffffffffbfffd, 0x5, 0x10000000000001, 0x10000000000, 0xe, 0x4, 0xfffffffffffffe00, 0x0, 0x7, 0x5, 0x400000000005b8, 0xffff, 0x0, 0x100, 0x0, 0x6, 0x67d, 0xfffffffffffffffa, 0x8000000000008, 0xfffffffffffffffc, 0xa, 0xa38, 0x3, 0x3, 0xfffffffffffffffc, 0x9, 0x1, 0x7, 0xc567, 0x1000000000000]}, 0x1fe, 0x9) write$auto(0xca, &(0x7f0000000040)='\x04>\x01\r\xfb\xff\xf6OL\xc8\xbe\x94\xf2\xa2\x00\x00', 0x2d9) 37.487683204s ago: executing program 1 (id=2043): capget$auto(0x0, 0xfffffffffffffffe) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(0x3, 0x41045508, 0x1) r0 = socket(0x2b, 0x1, 0x1) r1 = socket(0x10, 0x2, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x59e, 0x0, 0x2, 0x9}, 0x207}, 0x40, 0x2102) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="3a0256"], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x5}, 0x5, 0x0, 0x2, 0x200}, 0x7ff}, 0x10a, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r4 = socket(0x10, 0x80002, 0x0) timerfd_settime$auto(r4, 0x3, 0x0, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) ioctl$auto_SOUND_PCM_READ_CHANNELS(r5, 0x80045006, &(0x7f0000000040)="8b638ce5200e849bf16c691e34384b4f2d774ee289345d0c960abe854d400934ac4ea9a7515b5ebd835c2fe447ddb1ec417dcb9c92ed32615fa915fb483270959392f0f31754e5f33009e742bf239d0f") close_range$auto(r0, r2, 0x889e) sendmsg$auto_NL80211_CMD_GET_REG(r5, 0x0, 0x4000004) r6 = gettid() process_vm_readv$auto(r6, &(0x7f0000000040)={0x0, 0x2}, 0x4, &(0x7f00000000c0)={0x0, 0x100000000000002}, 0x3, 0x0) setsockopt$auto(r0, 0x29, 0x20, 0x0, 0x23) socket(0x22, 0xa, 0x7fffffff) 36.579910719s ago: executing program 1 (id=2046): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/virtual/block/loop2/queue/scheduler\x00', 0x141042, 0x0) write$auto(r0, &(0x7f0000000240)='\x01\x00^\xa2\x02\x00\x00\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4a\xb5\x1b\xad0\x10\x19b\xbf\xb7\xa5`\x97\xddzG\x01[{\x17\x05I\xe0\xb1d\x00\x00\x00\x00L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2z\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a\x00\x00\x00', 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getdents64$auto(0xffffffffffffffff, 0x0, 0x7) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/virtual/block/loop2/queue/scheduler\x00', 0x141042, 0x0) (async) write$auto(r0, &(0x7f0000000240)='\x01\x00^\xa2\x02\x00\x00\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4a\xb5\x1b\xad0\x10\x19b\xbf\xb7\xa5`\x97\xddzG\x01[{\x17\x05I\xe0\xb1d\x00\x00\x00\x00L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2z\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a\x00\x00\x00', 0x3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) getdents64$auto(0xffffffffffffffff, 0x0, 0x7) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) (async) 21.140690391s ago: executing program 32 (id=2046): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/virtual/block/loop2/queue/scheduler\x00', 0x141042, 0x0) write$auto(r0, &(0x7f0000000240)='\x01\x00^\xa2\x02\x00\x00\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4a\xb5\x1b\xad0\x10\x19b\xbf\xb7\xa5`\x97\xddzG\x01[{\x17\x05I\xe0\xb1d\x00\x00\x00\x00L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2z\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a\x00\x00\x00', 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getdents64$auto(0xffffffffffffffff, 0x0, 0x7) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/devices/virtual/block/loop2/queue/scheduler\x00', 0x141042, 0x0) (async) write$auto(r0, &(0x7f0000000240)='\x01\x00^\xa2\x02\x00\x00\x00\x00\x00\xd8l\x00\x00\x00\x00\x00\x00\xbd\xc5_%\xc1\xa3\xd0\x95Hq\xf4a\xb5\x1b\xad0\x10\x19b\xbf\xb7\xa5`\x97\xddzG\x01[{\x17\x05I\xe0\xb1d\x00\x00\x00\x00L\xe6&[\xa9X6\x7f\xec\x94\xdal\xa1\xbb\x86\x9c\xc2\xef\x02\r9%\x06\xc5\'b%m_\x96A\"\xdd\xe40\xa7\xc3\x9ah\xf3B\xc2z\xf8\r\f[\xe5\x9dK\xe1\x99\x86\xfc\xac\x9f\x8a\x00\x00\x00', 0x3) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) getdents64$auto(0xffffffffffffffff, 0x0, 0x7) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0x3, 0x400454ca, 0x38) (async) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) (async) 11.68772549s ago: executing program 3 (id=2148): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = open(0x0, 0x261c2, 0x84) setreuid$auto(0x7, 0x806) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r1) sendmsg$auto_TIPC_NL_NET_SET(r1, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000040)={0x20, r2, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid=0xee00}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x2) sendmsg$auto_TIPC_NL_MON_SET(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x800, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_BEARER={0x8, 0x1, 0x0, 0x1, [@typed={0x4, 0xcb}]}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4040000) fcntl$auto(0xff80000000000000, 0x406, 0x1) bind$auto(0x3, &(0x7f0000002000), 0xf) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x200000000004) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) setrlimit$auto(0x1000000007, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000001140), 0x0, 0x2) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) pipe2$auto(0x0, 0x80) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) r3 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000180), 0x505002, 0x0) ioctl$auto_RTC_PARAM_GET(r3, 0x40187013, &(0x7f0000000100)={0x1, @ptr=0x10001}) mmap$auto(0x8, 0x4, 0xc000000, 0x19, 0xfffffffffffffffc, 0x29400000000000) 10.928716857s ago: executing program 3 (id=2151): rename$auto(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x25, 0x2, 0xf5f6) r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) r1 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4188aec6, r1) sendmsg$auto_ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000000}, 0x4) madvise$auto(0x10000, 0x2000040080000005, 0xe) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/dummy_udc.3/udc/dummy_udc.3/is_selfpowered\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000000)=""/45, 0x2d) connect$auto(r3, &(0x7f0000000080)=@sco, 0x7ff) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) r4 = getpid() process_vm_readv$auto(r4, &(0x7f0000000080)={0x0, 0xfff}, 0x4800000001, &(0x7f0000000040)={&(0x7f0000000340)="2687e4cc2793a0cb7759c12af36823dd6d50e7ef44816afe3f65860232ec5c7c0bceb51f474dfb92e9facea30238e3264f8f69fc4ab6fe9768d035018acde75258e955f46d8c7bede80bf94615f7552cbe01177ae5f37b3f4e3d66db9015ab7a79ea052843b8fc3009476a1d991ceeda537dfaf5ecc4691aad2cfaebdbba27ff57393b4fc4792a19bafb316d377107603428954782064c83403454ddc361890b6d319a4a93024cd3fbafce3ef7e17c30ab3e442a462bff82f44c350f60f9a51ad9334f6403cecf91c31542d6e22a2a518c746d634f1f06", 0x200000004}, 0x59, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/ram11/events_poll_msecs\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)='-7', 0x2) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x4008000) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) madvise$auto_MADV_GUARD_REMOVE(0x5, 0x3, 0x67) move_pages$auto(r6, 0x1002, 0x0, 0x0, 0x0, 0x2) ptrace$auto(0x7, r6, 0xffff, 0x8) 10.229433341s ago: executing program 3 (id=2153): socketpair$auto(0x1, 0x0, 0x4, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = epoll_create$auto(0x3e) epoll_ctl$auto(r0, 0x1, 0x8000000000000000, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x80002, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x400015) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) r3 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event2\x00', 0x0, 0x0) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, 0x0, 0x305, 0x70bd27, 0x25dfdbff}, 0x14}}, 0x84) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x34, 0x0, 0x400, 0x70bd2c, 0x25dfdbfe, {}, [@NL802154_ATTR_MIN_BE={0x5, 0x11, 0xfc}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x3}, @NL802154_ATTR_SCAN_DONE_REASON={0x5}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$auto_EVIOCGRAB(r3, 0x40044590, 0x0) write$auto(r2, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb0800) r4 = socket(0x2, 0x80002, 0x73) bind$auto(0x3, 0x0, 0x6a) getsockname$auto(r4, &(0x7f0000000000)=@isdn={0x22, 0x9, 0x0, 0x1, 0x10}, &(0x7f00000000c0)=0xd) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x20009, 0xdb, 0xeb1, 0x401, 0x1) sysfs$auto(0x2, 0x6, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) 6.808589789s ago: executing program 3 (id=2164): socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0x4, 0x3, 0xeb1, 0xfffffffffffffff7, 0x8008000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x8000, 0x7) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket(0xa, 0x801, 0x84) (async, rerun: 32) socket(0xa, 0x2, 0x0) swapoff$auto(0x0) (async) socket(0xa, 0x3, 0x6) mq_open$auto(&(0x7f0000000000)='.\xf1e4\xdf\x16\x95kxE\xd9x\x15\xb0\xf6V\x93\xb4E\x06\xc5}l', 0x56a, 0xb275, 0x0) (async) mq_timedreceive$auto(0x8, 0x0, 0xfffffffd, 0x0, 0x0) (async) mq_timedsend$auto(0x8, 0x0, 0x100, 0x9, 0x0) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async, rerun: 32) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) (rerun: 32) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) (async) writev$auto(0x1, 0x0, 0x1) (async, rerun: 32) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async, rerun: 32) quotactl_fd$auto(0xffffffffffffffff, 0x876, 0x0, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x5, 0xfffffffffffffffd, 0xd1, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x1, {0x100000002, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x6, 0xffffffffffff628e, 0x7fffffff, 0xdeb1, 0x804}) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async, rerun: 32) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async, rerun: 32) socket(0x2, 0x1, 0x0) bind$auto(0xffffffffffffffff, 0x0, 0x6a) ustat$auto(0x801, 0x0) sendmsg$auto(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0xc, 0x0, 0x1, 0x3}, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x9487, 0x4008, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) close_range$auto(0x2, 0xa, 0x0) 4.875040382s ago: executing program 2 (id=2171): r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/ieee80211/phy8/aql_enable\x00', 0x80001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r1 = io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x81, 0x0, 0x8) setsockopt$auto(0x3, 0x84, 0x15, 0x0, 0x28) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x3, 0x4, 0x0, 0x6, 0x2) close_range$auto(0x2, 0xa, 0x1) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x1, 0x20009, 0x4000000000df, 0xfffffffffffffe10, 0x401, 0x8000) listmount$auto(&(0x7f0000000100)={0x1f, @raw, 0x80000002, 0xfffffffffffffff8, 0x2}, 0x0, 0xf4240, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x3, 0x2001002020025, 0x1, 0xeb0, 0xffffffffffffffff, 0x2000000000008000) setsockopt$auto(r2, 0x0, 0x2, 0x0, 0x28) socket(0x6, 0x2, 0x0) madvise$auto(0x0, 0x23, 0x801) mmap$auto(0x5, 0x2000000000000f4, 0x8, 0xeb1, r0, 0x8000) write$auto_ftrace_enable_fops_trace_events(r1, &(0x7f0000000000)="5b6bb08c01f88a37d00f081467659fa19e1d51158c1564ff23de3d6d67a57c4ca03a3af003c8251dcd6bd7c4e525b23b697934e48068ecdc0f6d862a799539052f70a92e9e39dac8", 0x48) timer_create$auto(0x2, 0x0, 0x0) timer_settime$auto(0x10000009, 0xfffbf38f, &(0x7f00000000c0)={{0x1000000000100, 0x9947}, {0x8000, 0x9}}, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0x4038ae7a, 0x38) sendmsg$auto_NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f0000001400)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="000429bd7000ffdbdf256c000000"], 0x14}, 0x1, 0x0, 0x0, 0x8d0}, 0x24000080) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/virtual/net/bond0/duplex\x00', 0x20100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f00000003c0)=""/4096, 0x1000) write$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/firmware/memmap/0/start\x00', 0x8100, 0x0) 4.48922286s ago: executing program 0 (id=2172): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000d80), r0) sendmsg$auto_CGROUPSTATS_CMD_GET(r0, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000dc0)={0x14, r1, 0x1, 0x70bd29, 0x25dfdbff}, 0x14}}, 0x20000004) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) seccomp$auto(0x3, 0x8, 0x0) clock_nanosleep$auto(0x7, 0x8000, &(0x7f0000000080)={0x9, 0x6}, &(0x7f00000000c0)={0x80000001, 0xc7c}) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x800, 0x0) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/core/rps_default_mask\x00', 0x82, 0x0) msync$auto(0x0, 0x2000000005, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) io_uring_setup$auto(0x6, 0x0) fstat$auto(0x2, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) r4 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/controlC1\x00', 0x0, 0x0) ioctl$auto(r4, 0xc0045543, r3) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x13, &(0x7f00000001c0), 0x2) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r2, 0x40045010, &(0x7f0000000040)="dfddc610") 2.976363157s ago: executing program 2 (id=2174): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) write$auto(0xffffffffffffffff, 0x0, 0x81) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f00000006c0)='/sys/kernel/tracing/README\x00', 0x20400, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) writev$auto(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x5}, 0xf) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ptys1\x00', 0x20400, 0x0) ioctl$auto_TIOCSWINSZ2(r0, 0x5414, 0x0) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat2$dir(0xffffffffffffff9c, 0x0, &(0x7f0000000040)={0x149001, 0x91, 0x2f}, 0x18) mmap$auto(0x0, 0x4020009, 0xe1, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x18, 0x4, 0x1) getsockopt$auto(0x6, 0x111, 0x14, 0x0, 0x0) close_range$auto(0x0, 0x5, 0x0) 2.597065239s ago: executing program 3 (id=2177): mmap$auto(0x8, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xf, 0x3, 0x2) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000000c0), r0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x80) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) close_range$auto(0x2, r1, 0x0) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ubifs/chk_fs\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x101142, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x6) 2.545836603s ago: executing program 0 (id=2178): stat$auto(0x0, &(0x7f0000000140)={0x1d, 0x79, 0x2000000de0e, 0x3, 0x0, 0x0, 0x0, 0x180000001, 0x4, 0xafd0, 0x2000000000001, 0xffffffff80000000, 0x8, 0x9, 0x100000000, 0x2, 0xc}) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x2000008000000, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x126) socket(0x22, 0x2, 0x1) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x101, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) r2 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x100000000, 0x66) madvise$auto_MADV_GUARD_REMOVE(0xbb, 0x80000006, 0x67) fstat$auto(r2, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0x4048aecb, 0x0) open(&(0x7f0000000240)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x40181, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) writev$auto(0x3, &(0x7f0000000100)={0x0, 0x7111}, 0x86) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) write$auto(0x3, 0x0, 0x100082) openat$auto_evm_xattr_ops_evm_secfs(0xffffffffffffff9c, &(0x7f0000000200), 0x200000, 0x0) 2.42202168s ago: executing program 4 (id=2179): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000003c0)='/sys/module/nfs/parameters/delay_retrans\x00', 0x102, 0x0) mmap$auto(0x0, 0x20009, 0xfffffffffffffffe, 0xeb2, 0x401, 0x8000008000) ioctl$auto_EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) socketpair$auto(0x8001, 0x5, 0x5, 0x0) ioctl$auto(0x3, 0xc048aec8, r0) 2.156976794s ago: executing program 4 (id=2180): r0 = openat$auto_tracing_saved_cmdlines_size_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/saved_cmdlines_size\x00', 0x40, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyr9\x00', 0x10b080, 0x0) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r1, 0x5601, r2) ioctl$auto_KVM_GET_MSR_INDEX_LIST(r2, 0xc004ae02, &(0x7f0000000080)={0x4, [0x6, 0x9, 0x7]}) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socket(0xa, 0x2, 0x73) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) readv$auto(r0, &(0x7f0000000480)={&(0x7f0000000380), 0x8001}, 0x8) 1.910584042s ago: executing program 2 (id=2181): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/v4l-subdev2\x00', 0x80000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0xc040564b, 0x38) mmap$auto(0x7ff, 0x8, 0x1ff, 0x611, 0xffffffffffffffff, 0x9df0) mmap$auto(0x20000000, 0x400008, 0xdf, 0x10, 0x2, 0x8000) mmap$auto(0x0, 0x4020009, 0xe1, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xac}, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) close_range$auto(0x2, 0xa, 0x0) sysfs$auto(0x2, 0x10, 0x0) setuid$auto(0x1f) ioctl$auto(0x3, 0x4b30, 0x38) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = openat$auto_dynamic_events_ops_trace_dynevent(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/dynamic_events\x00', 0x80301, 0x0) write$auto_dynamic_events_ops_trace_dynevent(r1, &(0x7f0000000040)="6524b5aac083b05c1173a1174ad8f5246cdc9552bbdffc092d2e", 0x1a) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x560f, r2) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0xb74, 0x66a) getrandom$auto(&(0x7f0000000040)='/dev/tty12\x00', 0x732, 0x2) shutdown$auto(r0, 0x49) 1.860475093s ago: executing program 0 (id=2182): mmap$auto(0x0, 0x2000d, 0x4000000000df, 0xeb1, 0x404, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf250300000006000600810000000600070000800000060006000e0000000a00050000000000000000000a00010000000000000000000a000500aaaaaaaaaa400000080003003e00000008000200", @ANYRES32=0x0, @ANYBLOB="080004"], 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x40090) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x402, 0x8000) timer_create$auto(0x7, 0x0, 0x0) timer_gettime$auto(0x0, 0x0) socket(0x2, 0x4, 0x1ff) socket(0x10, 0x2, 0x0) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x101401, 0x0) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="86ad180916cd35e093b9901f03de02ef", 0x5d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}, 0x1, 0x0, 0x0, 0x10}, 0x44005) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x5, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x2, 0x9) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r1) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f80)={0x194, r2, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x179, 0x1, 0x0, 0x1, [@nested={0x4, 0x6}, @generic="398f32525e629163bfcc5d377bd8aed3ff1d26fc3c79ca435794c67d39b21ed0e95d1b3756e1789925d5c8a1a918c121a2b84869b15bb40ae4f671a8dd8ed01bb44efef2f4c768a2484f03635658fe8bfff71b8bf933532a61abcb7516ccfa73d70af3acc26f2c526959f19efd99202bc7ec5a2259a82d8e191691f5b23172f4f19ca9b0080dff732a7df559ae2279f426f2baa018832cd8e9b58fee32b1bcd4c087f83b0f3c0a", @typed={0x8, 0xd2, 0x0, 0x0, @ipv4=@rand_addr=0x64010101}, @generic="f3c1881feb99fe432d5fa89114591690f2efcbe9a7f87a8774637face20e7a821c481a653778aaf92185e8bfb092c2900920cca139540fd90efab653551552721f2b2889999ce801e47cfad8f735f702c852bd40e1ef6f259c36d7d8bc31748c903b1ceadd56ead8730d0e727f333855c6b3b286c779abbfff5f47e390b1336271492db0b266e2b8910bf339d4037a7dcf9c8a0669629580c65489f41db5adb59f53f3acd871444d9f34952c00ec9365f3dd", @typed={0x8, 0x38, 0x0, 0x0, @fd}, @nested={0x8, 0x6f, 0x0, 0x1, [@typed={0x4, 0x2d, 0x0, 0x0, @binary}]}]}]}, 0x194}, 0x1, 0x0, 0x0, 0x40}, 0x4) shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1) mmap$auto(0x0, 0x7, 0x3, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x0, 0x0) pwritev$auto(r3, &(0x7f00000001c0)={&(0x7f0000000540)="b0", 0x1}, 0x6, 0x80000000000306, 0x4009) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x5}, 0x7}, 0x3, 0x0) 1.720396301s ago: executing program 3 (id=2183): io_uring_setup$auto(0x2, 0x0) r0 = getsockopt$auto(0xffffffffffffffff, 0x84, 0xe, 0x0, &(0x7f0000000040)=0xb0) socket(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) openat2$auto(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x6, 0x411, 0x9}, 0x8) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/profile\x00', 0x40802, 0x0) close_range$auto(0x2, 0xa, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001340)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000c6cc1a926b4b458533f319e2f8dc8e1d736a2dbad1a93247d4f3cc94037438fc35d860ad3b939150dc688596970ab69980776809b8705f2cf9110edc76da8ba91fe05ce6436332e9fbc0d0d46f2e315a9af12695a8d369cb0302d4ca0a1abcc339d24d3ac547c3769136bc4e2e6f95ec743f0fae25dce5d570bc5a7d3367b685b4237ed37ba8cb238a42492252f212e7ec14010a4d6b8059381b0c0f3acca7ec809830e6e5", @ANYRES32=r3, @ANYBLOB="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"], 0x24}}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2b, 0x1, 0x0) socket(0x2, 0x80002, 0x73) ioctl$auto_BTRFS_IOC_ENCODED_WRITE_32(r0, 0x40789440, &(0x7f0000000200)={0x4, 0x2, 0x9, 0xffffffffffff8001, 0xffffffff, 0x9, 0xffffffffffffffc7, 0x3, 0xc78, "9efc6e677abb9ae8896ced1af8862510114c380baae871b0d146e213a95f5be289a3c3829661923cb5677ced527ed221485a738c8c336344f719ba87b3f4db34"}) socketpair$auto(0x3, 0x5, 0x7, 0x0) setsockopt$auto(0x3, 0x0, 0x13, 0x0, 0x9) sendto$auto(0x3, 0x0, 0xf, 0xe, &(0x7f0000000100), 0x19) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0040000", @ANYRES16=r5, @ANYBLOB="2f212cbd7000fcdbdf252100000008000300", @ANYRES32=r6, @ANYBLOB], 0x4d0}}, 0x4000000) r8 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fddbdf250800030008000300", @ANYRES32=r10, @ANYRESOCT=r7], 0x24}, 0x1, 0x0, 0x0, 0x5c5fd097f751b33e}, 0x80) 1.523974885s ago: executing program 0 (id=2184): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x28440, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r1 = socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(r0, &(0x7f0000000300)={{0x0, 0x2, &(0x7f0000000280)={0x0, 0x40009}, 0xc, &(0x7f00000002c0), 0x404, 0x8}, 0x5a57}, 0xd, 0x1, 0x0) r2 = socket(0x2b, 0x1, 0x1) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20040000) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0xc76, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x6, 0x0, 0x3) setsockopt$auto(r2, 0x29, 0x39, 0x0, 0x0) syz_genetlink_get_family_id$auto_nfc(&(0x7f0000000100), r1) r3 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000001c0), r0) sendmsg$auto_NFC_CMD_GET_TARGET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000001800)=ANY=[@ANYBLOB="38100000", @ANYRES16=r3, @ANYBLOB="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"], 0x1038}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r4 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r4, 0xc, 0x0, 0x5) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) r5 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vhci_hcd.5/usb19/19-0:1.0/usb19-port1/uevent\x00', 0x10200, 0x0) ioctl$auto_PPPIOCSMRU(r5, 0xc004743e, 0x0) read$auto(0x4, 0x0, 0xfdef) 1.130402924s ago: executing program 4 (id=2186): mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x7ffe) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x1001, 0x0, 0x9, 0x0, 0x1d, 0xd}, 0x80000c}, 0x5, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mq_notify$auto(r0, 0x0) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040), 0x8000, 0x1}, 0x8}, 0x1, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0x7}, 0xb, 0x0) mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x7ffe) (async) socket(0x2b, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x1001, 0x0, 0x9, 0x0, 0x1d, 0xd}, 0x80000c}, 0x5, 0x20000000) (async) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) (async) mq_notify$auto(r0, 0x0) (async) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040), 0x8000, 0x1}, 0x8}, 0x1, 0x9) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0x7}, 0xb, 0x0) (async) 941.277132ms ago: executing program 2 (id=2187): r0 = socket(0x15, 0x5, 0x0) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x40040}, 0x4008010) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x1d, 0x2, 0x6) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptyc9\x00', 0x20c40, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/block/loop9/queue/rotational\x00', 0x242401, 0x0) socket(0x10, 0x2, 0x14) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyaf\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) write$auto(0x3, 0x0, 0xffd8) bind$auto(0x3, &(0x7f0000000040)=@generic={0xa, "02d0ac0c00e435826339c7328903"}, 0x6a) r2 = fsopen$auto(0x0, 0x7) r3 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000001c0), r2) sendmsg$auto_IEEE802154_LLSEC_LIST_KEY(r2, &(0x7f0000000000)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x3c, r3, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_PAN_COORD={0x5, 0x19, 0x5}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x1}, @IEEE802154_ATTR_DEST_PAN_ID={0x6, 0x10, 0xf0af}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x57f12d17e56c27fc}, 0x2000c000) read$auto_proc_oom_score_adj_operations_base(r2, &(0x7f0000000080)=""/165, 0xa5) 875.259004ms ago: executing program 4 (id=2188): mmap$auto(0x0, 0x20009, 0xfffffffffffffffe, 0xeb2, 0x401, 0x8000008000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) io_uring_setup$auto(0x1, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) socket(0xa, 0x5, 0x0) socketpair$auto(0x8001, 0x5, 0x5, 0x0) ioctl$auto(0x3, 0xc048aec8, r0) 770.432447ms ago: executing program 4 (id=2189): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x2, 0x3a) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r0, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x50bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200000000006}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0x1, 0x9, 0x80000}, 0x283) openat$auto_userio_fops_userio(0xffffffffffffff9c, 0x0, 0x1e1800, 0x0) prctl$auto(0x59616d61, 0xdaffffffffffffff, 0x2, 0xffffffffffffffff, 0x8) socket(0x9, 0x3, 0x6) r2 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) fchdir$auto(r2) mkdir$auto(&(0x7f00000002c0)='./cgroup\x00', 0x6) socket(0x2, 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/cgroup.type\x00', 0x103042, 0x0) rmdir$auto(&(0x7f0000000300)='./cgroup\x00') close_range$auto(0x2, 0x8, 0x0) ptrace$auto(0x10, 0x10000000000001, 0xffffffffffffff56, 0x868f) 469.423485ms ago: executing program 2 (id=2190): setsockopt$auto_SO_PASSPIDFD(0xffffffffffffffff, 0x8, 0x4c, &(0x7f0000000000)='(\x00', 0xf2) socket(0x5, 0x2, 0x3) (async) r0 = socket(0x5, 0x2, 0x3) tee$auto(r0, r0, 0x0, 0x1ff) r1 = fsopen$auto(&(0x7f0000000040)='(\x00', 0x1) r2 = epoll_create$auto(0xfffff801) read$auto_uinput_fops_uinput(r1, &(0x7f0000000080)=""/18, 0x12) (async) read$auto_uinput_fops_uinput(r1, &(0x7f0000000080)=""/18, 0x12) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001, 0x0) (async) r3 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000000c0), 0x4001, 0x0) fstatfs$auto(r3, &(0x7f0000000100)={0x5, 0x6, 0x8, 0x6, 0x100000000, 0xc, 0x2, {[0x5, 0xfffff000]}, 0x9, 0x9, 0x0, [0x1, 0x5, 0x0, 0x5]}) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000180), r2) (async) syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000180), r2) r4 = openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f00000001c0), 0x8000, 0x0) ioctl$auto_SNAPSHOT_POWER_OFF(r4, 0xc0045878, 0x0) read$auto_ppp_device_fops_ppp_generic(r1, &(0x7f0000000200)=""/90, 0x5a) read$auto_objects_fops_(r1, &(0x7f0000000280)=""/200, 0xc8) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000380), r0) epoll_pwait2$auto(r3, &(0x7f00000003c0)={0x80000001, 0x2}, 0x7, &(0x7f0000000400)={0x5, 0x8}, &(0x7f0000000440)={0x3}, 0x8) (async) epoll_pwait2$auto(r3, &(0x7f00000003c0)={0x80000001, 0x2}, 0x7, &(0x7f0000000400)={0x5, 0x8}, &(0x7f0000000440)={0x3}, 0x8) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000004c0), r2) (async) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000004c0), r2) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x81) (async) sendmsg$auto_NL802154_CMD_LIST_ASSOCIATIONS(r2, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x1c, r5, 0x100, 0x70bd27, 0x25dfdbfd, {}, [@NL802154_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x45}, 0x81) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r1) r6 = semctl$auto_GETALL(0xe, 0xfffffff9, 0xd, 0x6) prctl$auto(0x8, 0x1ff, r6, 0x1, 0x400) write$auto(r2, &(0x7f0000000600)='ethtool\x00', 0xfffffffffffffffe) openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/ieee80211/phy15/fragmentation_threshold\x00', 0x2601, 0x0) (async) r7 = openat$auto_fragmentation_threshold_ops_(0xffffffffffffff9c, &(0x7f0000000640)='/sys/kernel/debug/ieee80211/phy15/fragmentation_threshold\x00', 0x2601, 0x0) epoll_ctl$auto(r7, 0x80000000, r2, &(0x7f0000000680)={0x9, 0x5}) r8 = openat$auto_fops_init_pkru_pkeys(0xffffffffffffff9c, &(0x7f00000006c0), 0x44800, 0x0) signalfd4$auto(r8, &(0x7f0000000700)={0xfffffffffffffffc}, 0x6, 0x7) (async) signalfd4$auto(r8, &(0x7f0000000700)={0xfffffffffffffffc}, 0x6, 0x7) r9 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000740), 0x311002, 0x0) sendmmsg$auto(r9, &(0x7f0000001940)={{&(0x7f0000000780)="db37eb65b22a10864792e0d04ce558ffecec66181e97dab5e1b364d16b53039e0c47730c957d585568de9a696e419fb21fa75870eee963f143726304b88e3aa89f227de9ae23f67e478597519faf2db688f897dd17e645df04fcf7c7a4bbeb6580664e4df979f6", 0x891, &(0x7f0000000900)={&(0x7f0000000800)="a802448f9a080ad936da46f5c2a1c8bdfdaf131df328ef79ce355dcf872b3f4e174e211c101c9180ac6e6e462f4bef4113823881c3f169bbbd1d157745cd5f71829bbef08a555a7b7ab15dd79950214aab4238a45982ef73488daf79ab7889ffe3e9e10069f894a8a866fb7bf293de72109d7594bb64200e5b86917b523bb76ca73181eb0296938c9aeae78289980b6d18e75e49c9207a7f3b4ef72245bcf4a4e0c79d510766ed0706ca633454caf790d3ffbd111bebdc46f37877ce9202b484e4cba8f4a81e6db53f99cc7e9d1b44e722f4", 0x7}, 0x3, &(0x7f0000000940)="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", 0x8, 0x3}, 0x3}, 0x9, 0xc016) r10 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000019c0), r0) setfsuid$auto(0xee01) (async) r11 = setfsuid$auto(0xee01) sendmsg$auto_MACSEC_CMD_DEL_TXSA(r2, &(0x7f0000002740)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002700)={&(0x7f0000001b40)={0xb9c, r10, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@MACSEC_ATTR_SA_CONFIG={0x21d, 0x3, 0x0, 0x1, [@typed={0xc, 0x35, 0x0, 0x0, @u64=0x2}, @typed={0x8, 0xf4, 0x0, 0x0, @pid=r6}, @nested={0x8, 0x10b, 0x0, 0x1, [@nested={0x4, 0xc5}]}, @generic="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", @nested={0x10, 0xd3, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd=r7}, @nested={0x4, 0x3c}]}, @nested={0x8, 0x23, 0x0, 0x1, [@nested={0x4, 0x4b}]}, @nested={0xe7, 0x11c, 0x0, 0x1, [@nested={0x4, 0xc5}, @generic="2ba61dac4c29e3586f44e623f70a83effd1b3294c7804277396fa20f8a33a93804996a1e33bff8d69b17e66c370a73948543b3698d481d851a6a6245ead77bb207016edd", @generic="097cf47c82f412e31f8d61400fdf223b197b7d10b33302743044245610e2099a64f0389012ed4baf104cef3215ebd28d80f6d53239e8596462afe6df813123fff6babb2d7d7dc86ce1a0e192c0f235d4392f9e239fc143e9edc5d3783a24f2c68128e7ed5198b2cae9fbc68e058621de7d90a2f525f766e40e5664bdaa7cb46a0f4d64b46f3bf71408c7afd715309172072ed3d3c8314d3aa7e34b"]}]}, @MACSEC_ATTR_SA_CONFIG={0x103, 0x3, 0x0, 0x1, [@typed={0x8, 0x94, 0x0, 0x0, @u32=0x8}, @typed={0x8, 0xd5, 0x0, 0x0, @ipv4=@local}, @typed={0xc, 0xfc, 0x0, 0x0, @u64=0xfb}, @generic="2505b7814e8a21b624d6cac9d235a2fa5eada91affc5450cd16e8830888e8c3792c012494b7a2a3ec71cd25744bb38e836805fb8f673c60dc42fb54c4485cbb75f5e024c312b1be03eb7fac1a65d004b01bc6af07f16e3df01fe28d44249e0bd59cc6bdd4c26bd18a91b714411546ff5f993bddba375bb219060decbd8360b5e4c508df69d7100cfc41641fbb356c2873939b574c483445d16187e12062278d6bb93e3f772d03272b44a6f634f56beaa39cad8821ce12cf2bc221249462bc964f062343f500a57b3d41fa3533ef81aa961e860", @typed={0x8, 0x140, 0x0, 0x0, @uid=r11}, @typed={0x8, 0x2a, 0x0, 0x0, @u32=0x4d8ba734}]}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_OFFLOAD={0x4b0, 0x9, 0x0, 0x1, [@nested={0x8, 0x8f, 0x0, 0x1, [@nested={0x4, 0x4}]}, @nested={0x163, 0x43, 0x0, 0x1, [@nested={0x4, 0x46}, @typed={0x8, 0xf7, 0x0, 0x0, @u32}, @generic="220add91be0c668ac4fc697dd9cad5664ef77b08b6a2180fc386cce0d32a88bc05ff35414596883e180e9c7abf629e134ff2b2dccd76c3a991d1d10316d210fc8d880d4e4277deb95d934fae3308b6d6", @nested={0x4, 0x81}, @generic="3802c10f31e074638dd288785c5c54278d67965e4ccef8c12fc040a0895d262d17d2b3f84c0c9900d65d57ecb4ebe1c27dff771e087e06502e492df6fae96be051732d139a57d4f245326d0b61ca77f5211e4d0bd74d3845d3208d5f35e17aa1fc8b4d89750a6e5bdcaf3ba2dbf1d0aaa8a17c1772ed7ec39f06b046e19e53c1caa0ab1a11600921cf47e613ab43379d29baf47a2208867a97df3f75c6cf649131108e580873e621581412897c44b80f1b518d8fda059e371b0db28b806659fdf0aeb4674c204f4bff83d6698ff1a92df9e7a0652071795299057d37accb771e341ec0a3b0d07eb4048222f5e15fc7", @nested={0x4, 0xcf}, @nested={0x4, 0xf5}, @nested={0x4, 0x106}, @nested={0x4, 0x2e}]}, @typed={0xc, 0x92, 0x0, 0x0, @u64=0x2}, @nested={0x105, 0x9, 0x0, 0x1, [@generic="07b9d4157c5d7427563bde83960b4d3185043c2393681b3fc690f75bf0818356a9bb082499330fcbff0db534c7894a7d96e1beb3213723636652f3a20d04817b2a7fa052f2aec5fb5f2a7494e1aaf51d63943f6ba9e524134515ea1b6c62b2a90bd8e985a16af1eeaa68f28f40492627b7c0f173d53a34f1ff7e75a66d1889d4ea4cd8d86237d50eedb044cb6e02ed0241a6c5426bb49c39528d40e5600afa806f0857e1a13ae3acecd694564c21a9d84beee3478ac19fc8f77d3d8da3c60f2ea06461bf4efd4ed9f5e99e3487156923fe625c14228e471d9b0c69bd52fa089541b21d29bde33c7c7074ab9be5da4cf864", @typed={0x8, 0x0, 0x0, 0x0, @uid=0xee00}, @nested={0x4, 0x56}, @nested={0x4, 0x130}]}, @typed={0x8, 0x6b, 0x0, 0x0, @pid=r6}, @typed={0x8, 0xdb, 0x0, 0x0, @u32=0x3}, @nested={0x187, 0x122, 0x0, 0x1, [@nested={0x4, 0xcf}, @nested={0x4, 0x3b}, @generic="6ca3607bc3883ff982b52ad5146ab486eca26b15d1c6817a7589e30249c8c477c53ea8830bd851255f9ec28f0e099e49224518033555475463ed49062f52e1941b4c8f7ecaf5d8270ede1ad1e400e84e12be48d8bcd12d2100f124affbda21b81ca819cf694fdb68cfee3c6ca2221bae7fc9b612123dfc84e72cb909517edffed1a4c756b6cadce291e525ed7fdfc92f1157d5db285fd0c0ba1c84113110248b6c55c8a75d4166f59fd79e69cc121ca4e5e3cbf4", @generic="38780fdab66c198e3430747e32d435e053a897b53078cad0cd123af6ce55e1f4f8aaaaf4ece2ef6e", @typed={0x8, 0x8a, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x128}, @nested={0x4, 0x53}, @nested={0x4, 0x23}, @generic="4caeb67db41f910196459fc3a338352dd36e1796e784c5f344171730574906377c99f3806d842c6c32898deefe27499a5c3e7f5aacb8d95dba7da0eefa70b8a040199e1f64f80bb7a93f8593830daed1ac96a65e3d38d0c46e91f50b51a4773d8cac9b5d3f5aa564c273c2346baf4c8f89c4cc8dc303d2ede756b245023a63b7b276e732469758", @nested={0x4, 0x18}]}, @generic="ed2ba3c6f637365093d35fb4d2ef117f00fa055a3c1d6c34a13561d4be015b41525931616e50a655fe437d907c702f5c2ad02e37de72eb40fe07d683ee797964bc27b34ae24ca29ef3dad7971c4c23049abf3d6cf3d35a79f9c0d1dce8152905eccf95dc7f458917548bfadb949dd845f21bde642e31b9d3285cac73fda9af20d52a7ffbad0f90e0", @typed={0xc, 0xa9, 0x0, 0x0, @u64=0x5}]}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_OFFLOAD={0x12c, 0x9, 0x0, 0x1, [@typed={0x4, 0xc1}, @typed={0x4, 0x40}, @nested={0xc4, 0x95, 0x0, 0x1, [@generic="f3770ed3bd15e5660834e63110f8128bc69191b8174680a63d765b309f67a812573f22f7bb254318cd3106fb0d16d29f063fcf4002d6ed9e9148b70d189839a253615a3fb3539d002ce619b0e82c4b32373b2331fc6f46a040b3ffac5697ae32a65c821907941205e5b985cf118b494141759143a3a939f009e766b43d3d1b0cd289d3763df6774a59796b0269125f9832ae09bb73a6656aea7fe8e933462329", @typed={0x8, 0x113, 0x0, 0x0, @u32=0xffff}, @typed={0x14, 0x77, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0x105}]}, @generic="8fb6273d20157fb44c5b9a70a8400bfb61d973f892c6d042d7430e4fd49a7762985dcb612d6df94260a1dc92c21c61723690aaddaf98b42b7814f58bedb35a53df72d2ba8c96739fe3a922e0a1c99853a564b0f5b022fe29e6c30ade"]}, @MACSEC_ATTR_IFINDEX={0x8}, @MACSEC_ATTR_SA_CONFIG={0x268, 0x3, 0x0, 0x1, [@nested={0xbb, 0xa, 0x0, 0x1, [@nested={0x4, 0x1e}, @generic="962648eefc31ee1ccc3b67449af2115d4cc549c29ad415d5451592bab9f104edc1f05aaa50ae08eba8353f51b99cb3abcc70bab8b496762b9a38e4d6c195bbae20c7a63263276b54a03608dcd021f7b3fa69e445dc60de5b897f9f72b78b2903046c879084f7d85b42841ffde1bb5fe29dc687ad8fb01ab103d2beedc4a6673aff9fd9f9de24bd86e7f63c75f11702c209fde32b57", @generic="45ab8a9bcbf2f9cd7c98473d00984b683b3f56d87fdc", @typed={0x8, 0xe5, 0x0, 0x0, @u32=0x401}]}, @nested={0x1a6, 0x12d, 0x0, 0x1, [@nested={0x4, 0x68}, @typed={0x85, 0x9c, 0x0, 0x0, @binary="9522f089bccc09579397c1b79e18e7e2b3051b3a75f3ab3427ec48b93e103c14fdd8aa8f3ad785b049fbd8740fca34fecf5a463b53e6d7f17e8012cbf80c6a6398e9c9d9a456d71c03314c02a811065929fcfeb109479efbd3407d9fb66493f9bcedefefbaa828097e841775956705b776d9d8c0a9855b34490dc189a7c7c486b2"}, @generic="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", @nested={0x4, 0xd7}, @typed={0x8, 0xf7, 0x0, 0x0, @fd}, @nested={0x4, 0x28}, @nested={0x4, 0xfb}, @nested={0x4, 0x108}]}]}]}, 0xb9c}, 0x1, 0x0, 0x0, 0x8000}, 0x42) 455.951271ms ago: executing program 0 (id=2191): mmap$auto(0x8, 0x2020005, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x5) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xf, 0x3, 0x2) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f00000000c0), r0) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x48000}, 0x80) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0x200800, 0xffffffff, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e9ca6310ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE(0xffffffffffffffff, 0x54a2, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(0xffffffffffffffff, 0x54a3, 0x0) close_range$auto(0x2, r1, 0x0) openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ubifs/chk_fs\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x101142, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) setsockopt$auto(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x6) 288.522271ms ago: executing program 4 (id=2192): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x80, 0x0) mmap$auto(0xc, 0x200006, 0x1, 0x11, 0x602, 0x4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(r0, &(0x7f0000000380)="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", 0x1000) open(&(0x7f0000000040)='./file0/../file0\x00', 0x0, 0x20) sendfile$auto(0x6, 0x3, 0x0, 0xc01) r1 = socket(0x10, 0x2, 0x0) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x9, &(0x7f00000001c0)=@raw_tracepoint={0x1006, 0xffffffffffffffff, 0x0, 0x11}, 0x6f3) sendmsg$auto_ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f0000001700)={0x0, 0x0, &(0x7f00000016c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d4000000", @ANYRES16=0x0, @ANYBLOB="100027bd7000fbdbdf2518000000200001800247eea41fac000014000200766574683100000000000000000000000800070063fbffff0500060001000000840002803d00488013b37090badc49d6dc93876646d25a4d297d01cd3b7da38d12889cc50d505f353dc42d0a3c0a14c7b46428910708003600", @ANYRES32=0x0, @ANYBLOB="0400b3800000003d003b800400a4800c009a00008000000000000004008680c16ab1b1b39dcaa14b6af7dcc011b43cf706e562811c62b28a702b72e0a87126700294f2350000000c000180080003"], 0xd4}, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x42, 0x3, 0x1ffdf, 0x7, 0x200005, 0x209b, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x280, 0x100000000, 0x0, 0x7, 0x2100, 0x220, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2000, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffbff5, 0xfffffffffffffff9, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2000000000000000, 0x0, 0x0, 0x400000000005b4, 0xc, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x891, 0x7, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0x4, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 127.087141ms ago: executing program 2 (id=2193): r0 = prctl$auto_PR_GET_DUMPABLE(0x3, 0x8a, 0x0, 0xfffffffffffffffd, 0xd) waitid$auto_P_PGID(0x2, r0, 0x0, 0x5, 0x0) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, &(0x7f0000000040), 0x2482, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x5) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000e40)='/sys/devices/pci0000:00/0000:00:01.3/config\x00', 0x2, 0x0) read$auto(r1, 0x0, 0x1) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x0, 0x6, 0x4) newfstatat$auto(0xffffffffffffff9c, 0x0, 0x0, 0x1000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000a00), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_VENDOR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e80)={0x3a8, r3, 0x400, 0x70bda5, 0x25dfdbff, {}, [@NL80211_ATTR_TX_RATES={0x394, 0x5a, 0x0, 0x1, [@nested={0x301, 0xe5, 0x0, 0x1, [@generic="e33faf2b1e457c0d2be0d34e75c234989edd0e8ee026df0e1b52b0cdc38f929ed524032477b89a39d784e807358140257d5051797b56bbb0d574cd22ca62f1b229f0a839cd2ac8239f9cabe8cd4546eb1039be7d2c68830e402f6b3de0a5e479ae3cca04a7c6f14d7bb648d120f1666915debc2b56838bf4fe0ec4296c89399f1d7213d276f3fdfeb74f971714e6b4834aa6567f5a4fe94c330fd7d27e40bc3491c30aa76fc23e4ab3ac307f3e9ff5b340da65b75e8078eda714f07baaeb89719b578505cd", @generic="76d15f9b", @nested={0x231, 0x131, 0x0, 0x1, [@typed={0x4, 0x108}, @nested={0xa9, 0xf9, 0x0, 0x1, [@typed={0x8, 0x4e, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1b}}, @generic="e5dfdc6d2bae82a884cc541275e9833f922d99a367ae40b36dcb72d4e21a7374d12685b33477ddee716d3033646957a33b3340df672e19bc9ecfa2254a85afb3e73dd48226da621dce49f637ff0e910cf90ee0920402896c56acd532d988e09b71dbba3f4dde4942692920dd247abbe8b0d26777ea707dfbceec4c5062d487d9f25a04436d5fe039e74c4064b447013fb5fe9484182d8248e467fd1516"]}, @typed={0x8, 0x6e, 0x0, 0x0, @ipv4=@empty}, @nested={0xf1, 0xf8, 0x0, 0x1, [@generic="255ceba59054081b7afcf0206ef56a0936f12d70fb8cf8deaa7db29c6a62c9a277d0273581365edb9c8242d880590aa47deeaa322d0972ddf04b58c0398833025ddd393976e3dcb6c9404c92d55a4715582f45e9288cb01338e96f358b5fdebefc5ebe433ea8634b826b34aeb120c0992ed51f680cc282a39dddb1edf549cd24e4dd35200e3705cf254fc3f992caf3bf8824c2cce5dc4d44d2c910bdd7053342224dcf0ee983ad41e3d9ad9a5ec75d13dad59086792a32dcf843b44112d5c6ededdd6756f9e4e4b587610c7d6f5b158424525fb74d", @typed={0x14, 0x136, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0x108}]}, @generic="ba6fa840dd3fe603ec3cb58cc5f0420be83fddfd9dddeb14ef3dfe0f20340205ca8cd8eaca6dbe3b4a782e6d934197bd36ef0b9798168173cb6bb7427704849207555728033bfd6af4cdc94aa5f90866ad659b3c9989b113bbde50f16813dfd78cbaf21c9ba40e4bd0346efe695933add8211444a79b27ff30cddab61e14ac595b"]}]}, @typed={0xc, 0x110, 0x0, 0x0, @u64=0x586}, @nested={0x7d, 0x68, 0x0, 0x1, [@generic="782cdf6ea032597565a2c14d880dff9dd78d8744c29a9b0c1ea2c94eb81bd7153ae11b362d22a6ccdd22ce718bf1c94cee63e9bebb690e8f16d3226f8590b7e0dfdd7aaf81b9a5b7c7588190e7db290f121e54a9dc2b1b1aea14c6465ea42bbe35ee5dfc4d56a61b421c5a2f0791282633fa5db93c", @nested={0x4, 0x134}]}]}]}, 0x3a8}}, 0x34008811) r4 = socket(0x2a, 0x1, 0x0) connect$auto(r4, &(0x7f0000000000)=@can, 0x8) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/query\x00', 0xc0001, 0x0) recvfrom$auto(r4, 0x0, 0xa, 0x6, 0x0, 0xfffffffffffffffd) epoll_wait$auto(r4, 0x0, 0x7ff, 0x6) sendmsg$auto_NL80211_CMD_DEL_MPATH(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00022cbd7000ffdbdf25180000000400f40008009f000400000008006100ff030000"], 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) read$auto(0x3, 0x0, 0x80) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x3, 0x11e, 0x1, 0x0, 0x9) clone$auto(0x21002, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) unshare$auto(0x8000000) syz_clone(0x2360411, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=2194): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x101142, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8502, 0x0) bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x1, 0x84) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x85, 0x0, 0xc) read$auto_proc_pid_maps_operations_internal(0xffffffffffffffff, 0x0, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty3\x00', 0x2db878aaeb8f52b8, 0x0) write$auto(0x3, 0x0, 0xffd8) kernel console output (not intermixed with test programs): 69331][T10365] netlink: zone id is out of range [ 336.700873][T10403] nvme_fabrics: missing parameter 'transport=%s' [ 336.747025][T10403] nvme_fabrics: missing parameter 'nqn=%s' [ 336.777310][T10402] nvme_fabrics: missing parameter 'transport=%s' [ 336.785485][T10402] nvme_fabrics: missing parameter 'nqn=%s' [ 337.263361][ T5838] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 337.263399][ T5838] Bluetooth: hci3: unexpected subevent 0x05 length: 725 > 12 [ 337.314004][ T5838] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 337.314041][ T5838] Bluetooth: hci3: unexpected subevent 0x05 length: 725 > 12 [ 337.354854][T10422] usbip-vudc usbip-vudc.0: gadget not bound [ 338.714785][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.1.966'. [ 339.028029][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.0.968'. [ 339.278341][T10463] Process accounting resumed [ 339.297974][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 340.409225][T10480] netlink: 8 bytes leftover after parsing attributes in process `syz.2.972'. [ 341.278817][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 341.311111][T10501] netlink: 342 bytes leftover after parsing attributes in process `syz.3.975'. [ 344.453353][T10537] raw_sendmsg: syz.1.986 forgot to set AF_INET. Fix it! [ 345.761519][T10497] Process accounting resumed [ 346.425882][T10577] netlink: 4 bytes leftover after parsing attributes in process `syz.2.998'. [ 346.904957][T10582] bond0: option all_slaves_active: invalid value () [ 349.565685][T10638] net_ratelimit: 52 callbacks suppressed [ 349.565707][T10638] netlink: zone id is out of range [ 349.665707][T10638] netlink: zone id is out of range [ 349.671375][T10638] netlink: zone id is out of range [ 349.767458][T10638] netlink: zone id is out of range [ 349.818536][T10638] netlink: zone id is out of range [ 349.830281][T10638] netlink: zone id is out of range [ 349.851552][T10638] netlink: zone id is out of range [ 349.891687][T10638] netlink: zone id is out of range [ 349.969161][T10638] netlink: zone id is out of range [ 350.000420][T10638] netlink: zone id is out of range [ 350.016819][T10636] zswap: compressor not available [ 350.189757][ T29] audit: type=1326 audit(4294969367.939:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10654 comm="syz.2.1012" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ffb0118cde9 code=0x0 [ 350.196230][T10661] Process accounting resumed [ 350.315924][T10655] Process accounting resumed [ 350.352947][T10655] Process accounting resumed [ 350.390971][T10655] Process accounting resumed [ 350.441121][T10661] Process accounting resumed [ 350.512527][T10655] Process accounting resumed [ 350.597590][T10661] Process accounting resumed [ 351.781587][ T5838] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 353.264064][T10737] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1023'. [ 353.408323][T10737] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1023'. [ 353.471007][T10740] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1023'. [ 353.501567][T10739] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1024'. [ 353.509697][T10737] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1023'. [ 357.299880][T10782] net_ratelimit: 21 callbacks suppressed [ 357.299904][T10782] openvswitch: netlink: Duplicate key (type 15). [ 359.317816][T10807] could not allocate digest TFM handle [ 360.759800][ T5838] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 361.558886][T10834] usb usb32: usbfs: process 10834 (syz.0.1048) did not claim interface 0 before use [ 362.399486][T10848] zswap: compressor not available [ 363.620469][T10834] erspan0: entered allmulticast mode [ 364.464198][ T6704] erspan0 (unregistering): left allmulticast mode [ 366.437555][T10922] netlink: zone id is out of range [ 366.443238][T10922] netlink: zone id is out of range [ 366.512359][T10922] netlink: zone id is out of range [ 366.541541][T10922] netlink: zone id is out of range [ 366.557897][T10922] netlink: zone id is out of range [ 366.563579][T10922] netlink: zone id is out of range [ 366.576048][T10922] netlink: zone id is out of range [ 366.598062][T10922] netlink: zone id is out of range [ 366.613462][T10922] netlink: zone id is out of range [ 366.623581][T10922] netlink: zone id is out of range [ 366.756454][T10931] usb usb15: usbfs: interface 0 claimed by hub while 'syz.3.1069' sets config #5 [ 366.800032][T10931] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1069'. [ 366.901829][T10938] can: request_module (can-proto-0) failed. [ 368.908304][T11004] Process accounting paused [ 369.830294][T11024] : Can't lookup blockdev [ 369.996033][T10991] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1081'. [ 371.303250][T11059] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1100'. [ 371.665199][T11069] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 371.871328][T11080] netlink: 'syz.3.1105': attribute type 62 has an invalid length. [ 374.529376][T11113] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1114'. [ 374.667677][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.780879][T11113] bridge_slave_1 (unregistering): left allmulticast mode [ 374.814852][T11113] bridge_slave_1 (unregistering): left promiscuous mode [ 374.824261][T11113] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.752113][T11161] net_ratelimit: 52 callbacks suppressed [ 377.752134][T11161] netlink: zone id is out of range [ 377.764742][T11161] netlink: zone id is out of range [ 377.770392][T11161] netlink: zone id is out of range [ 377.776414][T11161] netlink: zone id is out of range [ 377.782055][T11161] netlink: zone id is out of range [ 377.825665][T11161] netlink: zone id is out of range [ 377.831331][T11161] netlink: zone id is out of range [ 377.837420][T11161] netlink: zone id is out of range [ 377.843053][T11161] netlink: zone id is out of range [ 377.848976][T11161] netlink: zone id is out of range [ 378.360943][T11176] Invalid ELF header magic: != ELF [ 379.840502][T11199] netlink: 'syz.3.1131': attribute type 1 has an invalid length. [ 380.602586][T11213] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 380.644367][T11213] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 380.784523][T11213] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 380.830452][T11218] Invalid ELF header magic: != ELF [ 380.855099][T11213] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 381.312236][T11220] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1137'. [ 381.429442][T11227] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1139'. [ 381.441388][T11225] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1139'. [ 381.495265][T11220] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 382.654871][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 382.661565][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 382.814848][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 382.900234][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 385.284829][T11284] net_ratelimit: 21 callbacks suppressed [ 385.284851][T11284] netlink: zone id is out of range [ 385.312026][T11284] netlink: zone id is out of range [ 385.324655][T11284] netlink: zone id is out of range [ 385.354121][T11284] netlink: zone id is out of range [ 385.363027][T11284] netlink: zone id is out of range [ 385.379554][T11284] netlink: zone id is out of range [ 385.419594][T11284] netlink: zone id is out of range [ 385.434892][T11284] netlink: zone id is out of range [ 385.511353][ T5838] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 385.560060][T11284] netlink: zone id is out of range [ 385.583260][T11284] netlink: zone id is out of range [ 385.764953][T11293] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1156'. [ 385.886960][T11294] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1156'. [ 386.834916][T11301] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 387.641371][T11325] FAULT_INJECTION: forcing a failure. [ 387.641371][T11325] name failslab, interval 1, probability 0, space 0, times 0 [ 387.708973][T11325] CPU: 1 UID: 0 PID: 11325 Comm: syz.2.1162 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 387.709012][T11325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 387.709027][T11325] Call Trace: [ 387.709034][T11325] [ 387.709045][T11325] dump_stack_lvl+0x16c/0x1f0 [ 387.709080][T11325] should_fail_ex+0x50a/0x650 [ 387.709118][T11325] ? fs_reclaim_acquire+0xae/0x150 [ 387.709153][T11325] should_failslab+0xc2/0x120 [ 387.709191][T11325] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 387.709234][T11325] ? kvasprintf_const+0x66/0x1a0 [ 387.709267][T11325] kvasprintf+0xbd/0x160 [ 387.709292][T11325] ? __pfx_kvasprintf+0x10/0x10 [ 387.709319][T11325] ? rcu_is_watching+0x12/0xc0 [ 387.709346][T11325] ? trace_contention_end+0xee/0x140 [ 387.709390][T11325] kvasprintf_const+0x66/0x1a0 [ 387.709417][T11325] kobject_set_name_vargs+0x5a/0x140 [ 387.709451][T11325] dev_set_name+0xc8/0x100 [ 387.709486][T11325] ? __pfx_dev_set_name+0x10/0x10 [ 387.709527][T11325] ? __init_waitqueue_head+0xca/0x150 [ 387.709564][T11325] rfkill_register+0xef/0xb40 [ 387.709606][T11325] nfc_register_device+0x11f/0x3c0 [ 387.709639][T11325] nci_register_device+0x7f4/0xb80 [ 387.709680][T11325] ? __pfx_nci_register_device+0x10/0x10 [ 387.709730][T11325] virtual_ncidev_open+0x141/0x220 [ 387.709766][T11325] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 387.709798][T11325] misc_open+0x35a/0x420 [ 387.709820][T11325] ? __pfx_misc_open+0x10/0x10 [ 387.709842][T11325] chrdev_open+0x237/0x6a0 [ 387.709877][T11325] ? __pfx_apparmor_file_open+0x10/0x10 [ 387.709907][T11325] ? __pfx_chrdev_open+0x10/0x10 [ 387.709946][T11325] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 387.709985][T11325] do_dentry_open+0x735/0x1c40 [ 387.710018][T11325] ? __pfx_chrdev_open+0x10/0x10 [ 387.710055][T11325] ? inode_permission+0xdd/0x5f0 [ 387.710085][T11325] vfs_open+0x82/0x3f0 [ 387.710108][T11325] ? may_open+0x1f2/0x400 [ 387.710138][T11325] path_openat+0x1e88/0x2d80 [ 387.710186][T11325] ? __pfx_path_openat+0x10/0x10 [ 387.710221][T11325] ? __pfx___lock_acquire+0x10/0x10 [ 387.710251][T11325] ? lock_acquire.part.0+0x11b/0x380 [ 387.710284][T11325] ? find_held_lock+0x2d/0x110 [ 387.710314][T11325] do_filp_open+0x20c/0x470 [ 387.710349][T11325] ? __pfx_do_filp_open+0x10/0x10 [ 387.710381][T11325] ? find_held_lock+0x2d/0x110 [ 387.710433][T11325] ? alloc_fd+0x41f/0x760 [ 387.710477][T11325] do_sys_openat2+0x17a/0x1e0 [ 387.710502][T11325] ? __pfx_do_sys_openat2+0x10/0x10 [ 387.710525][T11325] ? __pfx_lock_release+0x10/0x10 [ 387.710571][T11325] __x64_sys_openat+0x175/0x210 [ 387.710604][T11325] ? __pfx___x64_sys_openat+0x10/0x10 [ 387.710647][T11325] do_syscall_64+0xcd/0x250 [ 387.710680][T11325] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 387.710713][T11325] RIP: 0033:0x7ffb0118cde9 [ 387.710733][T11325] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 387.710758][T11325] RSP: 002b:00007ffb0201a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 387.710781][T11325] RAX: ffffffffffffffda RBX: 00007ffb013a5fa0 RCX: 00007ffb0118cde9 [ 387.710798][T11325] RDX: 0000000000000002 RSI: 0000400000000400 RDI: ffffffffffffff9c [ 387.710813][T11325] RBP: 00007ffb0120e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 387.710829][T11325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 387.710844][T11325] R13: 0000000000000000 R14: 00007ffb013a5fa0 R15: 00007ffc01225d98 [ 387.710877][T11325] [ 387.768822][T11314] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 387.772477][ C1] vkms_vblank_simulate: vblank timer overrun [ 388.102512][ C1] vkms_vblank_simulate: vblank timer overrun [ 388.109105][ C1] hrtimer: interrupt took 394421228 ns [ 388.209144][ C1] vkms_vblank_simulate: vblank timer overrun [ 390.877630][T11355] Invalid ELF header magic: != ELF [ 391.412877][T11367] net_ratelimit: 21 callbacks suppressed [ 391.412899][T11367] netlink: zone id is out of range [ 391.444788][T11367] netlink: zone id is out of range [ 391.462837][T11367] netlink: zone id is out of range [ 391.474831][T11367] netlink: zone id is out of range [ 391.485088][T11367] netlink: zone id is out of range [ 391.490743][T11367] netlink: zone id is out of range [ 391.522588][T11367] netlink: zone id is out of range [ 391.528677][T11367] netlink: zone id is out of range [ 391.534313][T11367] netlink: zone id is out of range [ 391.541742][T11367] netlink: zone id is out of range [ 392.146994][ T5838] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 393.038796][T11386] FAULT_INJECTION: forcing a failure. [ 393.038796][T11386] name failslab, interval 1, probability 0, space 0, times 0 [ 393.078266][T11386] CPU: 0 UID: 0 PID: 11386 Comm: syz.2.1177 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 393.078303][T11386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 393.078318][T11386] Call Trace: [ 393.078326][T11386] [ 393.078336][T11386] dump_stack_lvl+0x16c/0x1f0 [ 393.078373][T11386] should_fail_ex+0x50a/0x650 [ 393.078410][T11386] ? fs_reclaim_acquire+0xae/0x150 [ 393.078444][T11386] ? __register_sysctl_table+0xb4/0x1910 [ 393.078486][T11386] should_failslab+0xc2/0x120 [ 393.078525][T11386] __kmalloc_noprof+0xcb/0x510 [ 393.078568][T11386] __register_sysctl_table+0xb4/0x1910 [ 393.078611][T11386] ? trace_kmalloc+0x2d/0xd0 [ 393.078636][T11386] ? __pfx___register_sysctl_table+0x10/0x10 [ 393.078671][T11386] ? is_module_address+0x2a/0x50 [ 393.078704][T11386] ? register_net_sysctl_sz+0x228/0x3e0 [ 393.078733][T11386] ? __asan_memcpy+0x3c/0x60 [ 393.078764][T11386] ? __pfx_devinet_init_net+0x10/0x10 [ 393.078796][T11386] devinet_init_net+0x378/0x900 [ 393.078828][T11386] ? __pfx_devinet_init_net+0x10/0x10 [ 393.078858][T11386] ops_init+0x1df/0x5f0 [ 393.078897][T11386] setup_net+0x21f/0x860 [ 393.078934][T11386] ? __pfx_setup_net+0x10/0x10 [ 393.078967][T11386] ? down_read_killable+0xcc/0x380 [ 393.078998][T11386] ? __pfx_down_read_killable+0x10/0x10 [ 393.079028][T11386] ? __raw_spin_lock_init+0x3a/0x110 [ 393.079068][T11386] ? debug_mutex_init+0x37/0x70 [ 393.079097][T11386] copy_net_ns+0x2b4/0x6c0 [ 393.079136][T11386] create_new_namespaces+0x3ea/0xad0 [ 393.079180][T11386] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 393.079220][T11386] ksys_unshare+0x45d/0xa40 [ 393.079246][T11386] ? __pfx_ksys_unshare+0x10/0x10 [ 393.079269][T11386] ? xfd_validate_state+0x5d/0x180 [ 393.079314][T11386] __x64_sys_unshare+0x31/0x40 [ 393.079338][T11386] do_syscall_64+0xcd/0x250 [ 393.079369][T11386] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.079402][T11386] RIP: 0033:0x7ffb0118cde9 [ 393.079423][T11386] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.079448][T11386] RSP: 002b:00007ffb0201a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 393.079479][T11386] RAX: ffffffffffffffda RBX: 00007ffb013a5fa0 RCX: 00007ffb0118cde9 [ 393.079497][T11386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 393.079512][T11386] RBP: 00007ffb0120e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 393.079528][T11386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 393.079543][T11386] R13: 0000000000000000 R14: 00007ffb013a5fa0 R15: 00007ffc01225d98 [ 393.079578][T11386] [ 393.649705][T11418] netlink: 492 bytes leftover after parsing attributes in process `syz.2.1186'. [ 393.687925][T11418] netlink: 492 bytes leftover after parsing attributes in process `syz.2.1186'. [ 395.973681][ T5838] Bluetooth: hci2: Malformed LE Event: 0x02 [ 396.530158][ T5838] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 396.763225][T11473] ubi13: attaching mtd0 [ 396.769100][T11473] ubi13 error: ubi_attach_mtd_dev: bad VID header (13) or data offsets (77) [ 396.832964][T11474] ubi0: attaching mtd0 [ 396.843204][T11474] ubi0: scanning is finished [ 396.860648][T11474] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 397.124908][T11474] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 399.720607][ T5838] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 400.418300][T11503] Process accounting resumed [ 400.952313][ T5838] Bluetooth: hci1: unexpected subevent 0x1d length: 0 < 14 [ 401.764124][T11541] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1214'. [ 402.252987][T11569] net_ratelimit: 52 callbacks suppressed [ 402.253006][T11569] netlink: zone id is out of range [ 402.270465][T11569] netlink: zone id is out of range [ 402.277791][T11569] netlink: zone id is out of range [ 402.283572][T11569] netlink: zone id is out of range [ 402.293035][T11569] netlink: zone id is out of range [ 402.298897][T11569] netlink: zone id is out of range [ 402.305896][T11569] netlink: zone id is out of range [ 402.311740][T11569] netlink: zone id is out of range [ 402.317516][T11569] netlink: zone id is out of range [ 402.323274][T11569] netlink: zone id is out of range [ 403.145273][ T29] audit: type=1800 audit(4294969438.006:12): pid=11590 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1224" name="discovery_nqn" dev="configfs" ino=33417 res=0 errno=0 [ 405.065788][T11640] input: jJǸ-¶9ă%vø“û¨lĐQ  J86Ö‘ as /devices/virtual/input/input11 [ 406.934822][T11679] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1238'. [ 407.012303][T11666] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1238'. [ 408.436136][T11715] FAULT_INJECTION: forcing a failure. [ 408.436136][T11715] name failslab, interval 1, probability 0, space 0, times 0 [ 408.454255][T11715] CPU: 0 UID: 0 PID: 11715 Comm: syz.3.1246 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 408.454287][T11715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 408.454301][T11715] Call Trace: [ 408.454309][T11715] [ 408.454318][T11715] dump_stack_lvl+0x16c/0x1f0 [ 408.454354][T11715] should_fail_ex+0x50a/0x650 [ 408.454390][T11715] ? fs_reclaim_acquire+0xae/0x150 [ 408.454423][T11715] ? __netlink_kernel_create+0x180/0x750 [ 408.454452][T11715] should_failslab+0xc2/0x120 [ 408.454490][T11715] __kmalloc_noprof+0xcb/0x510 [ 408.454527][T11715] ? __netlink_create+0x208/0x2c0 [ 408.454554][T11715] __netlink_kernel_create+0x180/0x750 [ 408.454585][T11715] ? __pfx___netlink_kernel_create+0x10/0x10 [ 408.454617][T11715] ? find_held_lock+0x2d/0x110 [ 408.454649][T11715] rtnetlink_net_init+0xba/0x140 [ 408.454679][T11715] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 408.454706][T11715] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 408.454730][T11715] ? __pfx_rtnetlink_bind+0x10/0x10 [ 408.454756][T11715] ? __pfx_netlink_tap_init_net+0x10/0x10 [ 408.454782][T11715] ? debug_mutex_init+0x37/0x70 [ 408.454810][T11715] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 408.454834][T11715] ops_init+0x1df/0x5f0 [ 408.454871][T11715] setup_net+0x21f/0x860 [ 408.454903][T11715] ? __pfx_setup_net+0x10/0x10 [ 408.454932][T11715] ? down_read_killable+0xcc/0x380 [ 408.454962][T11715] ? __pfx_down_read_killable+0x10/0x10 [ 408.454989][T11715] ? __raw_spin_lock_init+0x3a/0x110 [ 408.455026][T11715] ? debug_mutex_init+0x37/0x70 [ 408.455055][T11715] copy_net_ns+0x2b4/0x6c0 [ 408.455105][T11715] create_new_namespaces+0x3ea/0xad0 [ 408.455157][T11715] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 408.455205][T11715] ksys_unshare+0x45d/0xa40 [ 408.455232][T11715] ? __pfx_ksys_unshare+0x10/0x10 [ 408.455256][T11715] ? xfd_validate_state+0x5d/0x180 [ 408.455297][T11715] __x64_sys_unshare+0x31/0x40 [ 408.455318][T11715] do_syscall_64+0xcd/0x250 [ 408.455346][T11715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.455377][T11715] RIP: 0033:0x7fe7ff38cde9 [ 408.455396][T11715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.455418][T11715] RSP: 002b:00007fe8001b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 408.455441][T11715] RAX: ffffffffffffffda RBX: 00007fe7ff5a6080 RCX: 00007fe7ff38cde9 [ 408.455457][T11715] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 408.455472][T11715] RBP: 00007fe7ff40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 408.455487][T11715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 408.455501][T11715] R13: 0000000000000000 R14: 00007fe7ff5a6080 R15: 00007fff58a2a918 [ 408.455533][T11715] [ 411.010364][T11744] netlink: 1204 bytes leftover after parsing attributes in process `syz.2.1255'. [ 411.190698][T11744] FAULT_INJECTION: forcing a failure. [ 411.190698][T11744] name failslab, interval 1, probability 0, space 0, times 0 [ 411.286944][T11744] CPU: 1 UID: 0 PID: 11744 Comm: syz.2.1255 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 411.286981][T11744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 411.286996][T11744] Call Trace: [ 411.287003][T11744] [ 411.287012][T11744] dump_stack_lvl+0x16c/0x1f0 [ 411.287048][T11744] should_fail_ex+0x50a/0x650 [ 411.287084][T11744] ? fs_reclaim_acquire+0xae/0x150 [ 411.287124][T11744] ? nfc_llcp_build_tlv+0xfd/0x230 [ 411.287150][T11744] should_failslab+0xc2/0x120 [ 411.287189][T11744] __kmalloc_noprof+0xcb/0x510 [ 411.287233][T11744] nfc_llcp_build_tlv+0xfd/0x230 [ 411.287261][T11744] nfc_llcp_build_gb.isra.0+0x196/0x400 [ 411.287300][T11744] ? __pfx_nfc_llcp_build_gb.isra.0+0x10/0x10 [ 411.287342][T11744] ? lockdep_init_map_type+0x16d/0x7d0 [ 411.287380][T11744] ? lockdep_init_map_type+0x16d/0x7d0 [ 411.287422][T11744] nfc_llcp_register_device+0x600/0xa60 [ 411.287450][T11744] nfc_register_device+0x6d/0x3c0 [ 411.287479][T11744] nci_register_device+0x7f4/0xb80 [ 411.287516][T11744] ? __pfx_nci_register_device+0x10/0x10 [ 411.287565][T11744] virtual_ncidev_open+0x141/0x220 [ 411.287599][T11744] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 411.287631][T11744] misc_open+0x35a/0x420 [ 411.287654][T11744] ? __pfx_misc_open+0x10/0x10 [ 411.287676][T11744] chrdev_open+0x237/0x6a0 [ 411.287710][T11744] ? __pfx_apparmor_file_open+0x10/0x10 [ 411.287739][T11744] ? __pfx_chrdev_open+0x10/0x10 [ 411.287778][T11744] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 411.287816][T11744] do_dentry_open+0x735/0x1c40 [ 411.287851][T11744] ? __pfx_chrdev_open+0x10/0x10 [ 411.287887][T11744] ? inode_permission+0xdd/0x5f0 [ 411.287918][T11744] vfs_open+0x82/0x3f0 [ 411.287940][T11744] ? may_open+0x1f2/0x400 [ 411.287974][T11744] path_openat+0x1e88/0x2d80 [ 411.288023][T11744] ? __pfx_path_openat+0x10/0x10 [ 411.288058][T11744] ? __pfx___lock_acquire+0x10/0x10 [ 411.288090][T11744] ? lock_acquire.part.0+0x11b/0x380 [ 411.288128][T11744] ? find_held_lock+0x2d/0x110 [ 411.288158][T11744] do_filp_open+0x20c/0x470 [ 411.288194][T11744] ? __pfx_do_filp_open+0x10/0x10 [ 411.288225][T11744] ? find_held_lock+0x2d/0x110 [ 411.288276][T11744] ? alloc_fd+0x41f/0x760 [ 411.288319][T11744] do_sys_openat2+0x17a/0x1e0 [ 411.288344][T11744] ? __pfx_do_sys_openat2+0x10/0x10 [ 411.288372][T11744] ? __pfx___might_resched+0x10/0x10 [ 411.288417][T11744] __x64_sys_openat+0x175/0x210 [ 411.288443][T11744] ? __pfx___x64_sys_openat+0x10/0x10 [ 411.288483][T11744] do_syscall_64+0xcd/0x250 [ 411.288515][T11744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.288549][T11744] RIP: 0033:0x7ffb0118cde9 [ 411.288569][T11744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.288591][T11744] RSP: 002b:00007ffb0201a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 411.288614][T11744] RAX: ffffffffffffffda RBX: 00007ffb013a5fa0 RCX: 00007ffb0118cde9 [ 411.288631][T11744] RDX: 0000000000000002 RSI: 0000400000000400 RDI: ffffffffffffff9c [ 411.288647][T11744] RBP: 00007ffb0120e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 411.288662][T11744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.288676][T11744] R13: 0000000000000000 R14: 00007ffb013a5fa0 R15: 00007ffc01225d98 [ 411.288710][T11744] [ 413.908112][T11788] cougar: G6 mapped to space [ 414.040051][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1266'. [ 414.269097][T11788] HfR: entered promiscuous mode [ 414.284920][T11785] svc: failed to register nfsdv3 RPC service (errno 111). [ 414.426748][T11785] svc: failed to register nfsaclv3 RPC service (errno 111). [ 414.809228][T11791] syz.3.1268: vmalloc error: size 245760, failed to allocate pages, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 414.857584][T11791] CPU: 1 UID: 0 PID: 11791 Comm: syz.3.1268 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 414.857628][T11791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 414.857643][T11791] Call Trace: [ 414.857651][T11791] [ 414.857660][T11791] dump_stack_lvl+0x16c/0x1f0 [ 414.857695][T11791] warn_alloc+0x24d/0x3a0 [ 414.857733][T11791] ? __pfx_warn_alloc+0x10/0x10 [ 414.857769][T11791] ? alloc_pages_mpol+0x25b/0x540 [ 414.857805][T11791] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 414.857841][T11791] ? trace_kmalloc+0x2d/0xd0 [ 414.857874][T11791] __vmalloc_node_range_noprof+0x12bd/0x1530 [ 414.857919][T11791] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 414.857960][T11791] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 414.858006][T11791] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 414.858041][T11791] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 414.858074][T11791] vmalloc_user_noprof+0x6b/0x90 [ 414.858106][T11791] ? vb2_vmalloc_alloc+0x11e/0x3d0 [ 414.858138][T11791] vb2_vmalloc_alloc+0x11e/0x3d0 [ 414.858174][T11791] ? __pfx_vb2_vmalloc_alloc+0x10/0x10 [ 414.858204][T11791] __vb2_queue_alloc+0x896/0x1230 [ 414.858253][T11791] vb2_core_reqbufs+0xa73/0xfb0 [ 414.858291][T11791] ? __pfx_vb2_core_reqbufs+0x10/0x10 [ 414.858342][T11791] __vb2_init_fileio+0x3f3/0x1110 [ 414.858372][T11791] ? lockdep_hardirqs_on+0x7c/0x110 [ 414.858400][T11791] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 414.858426][T11791] ? __pollwait+0x26d/0x4c0 [ 414.858461][T11791] vb2_core_poll+0x486/0x700 [ 414.858494][T11791] vb2_poll+0x33/0x150 [ 414.858522][T11791] vb2_fop_poll+0x10f/0x2c0 [ 414.858554][T11791] ? __pfx_vb2_fop_poll+0x10/0x10 [ 414.858581][T11791] v4l2_poll+0x160/0x320 [ 414.858630][T11791] ? __pfx_v4l2_poll+0x10/0x10 [ 414.858667][T11791] do_sys_poll+0x524/0xde0 [ 414.858711][T11791] ? __pfx_do_sys_poll+0x10/0x10 [ 414.858772][T11791] ? futex_wait_queue+0x103/0x1f0 [ 414.858805][T11791] ? futex_unqueue+0xba/0x140 [ 414.858834][T11791] ? __futex_wait+0x324/0x3c0 [ 414.858864][T11791] ? __pfx___pollwait+0x10/0x10 [ 414.858900][T11791] ? __pfx_pollwake+0x10/0x10 [ 414.858981][T11791] ? __pfx_timespec64_add_safe+0x10/0x10 [ 414.859019][T11791] ? ktime_get_ts64+0x2d2/0x400 [ 414.859050][T11791] ? read_tsc+0x9/0x20 [ 414.859074][T11791] ? ktime_get_ts64+0x256/0x400 [ 414.859113][T11791] __x64_sys_poll+0x1a8/0x450 [ 414.859146][T11791] ? __pfx___x64_sys_poll+0x10/0x10 [ 414.859190][T11791] do_syscall_64+0xcd/0x250 [ 414.859221][T11791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 414.859255][T11791] RIP: 0033:0x7fe7ff38cde9 [ 414.859277][T11791] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 414.859301][T11791] RSP: 002b:00007fe8001d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 414.859325][T11791] RAX: ffffffffffffffda RBX: 00007fe7ff5a5fa0 RCX: 00007fe7ff38cde9 [ 414.859342][T11791] RDX: 0000000000000008 RSI: 0000000000000006 RDI: 0000400000000480 [ 414.859358][T11791] RBP: 00007fe7ff40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 414.859374][T11791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 414.859388][T11791] R13: 0000000000000000 R14: 00007fe7ff5a5fa0 R15: 00007fff58a2a918 [ 414.859422][T11791] [ 414.859432][T11791] Mem-Info: [ 415.008030][T11787] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1265'. [ 415.232354][T11791] active_anon:66371 inactive_anon:2 isolated_anon:8 [ 415.232354][T11791] active_file:14758 inactive_file:43565 isolated_file:0 [ 415.232354][T11791] unevictable:768 dirty:71 writeback:0 [ 415.232354][T11791] slab_reclaimable:11727 slab_unreclaimable:96484 [ 415.232354][T11791] mapped:44360 shmem:53059 pagetables:1095 [ 415.232354][T11791] sec_pagetables:0 bounce:0 [ 415.232354][T11791] kernel_misc_reclaimable:0 [ 415.232354][T11791] free:1261891 free_pcp:11367 free_cma:0 [ 415.400034][T11791] Node 0 active_anon:272084kB inactive_anon:8kB active_file:59032kB inactive_file:174252kB unevictable:1536kB isolated(anon):32kB isolated(file):0kB mapped:180540kB dirty:584kB writeback:0kB shmem:217000kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11664kB pagetables:4380kB sec_pagetables:0kB all_unreclaimable? no [ 415.445501][T11791] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 415.479195][T11791] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 415.509492][T11791] lowmem_reserve[]: 0 2487 2487 0 0 [ 415.516128][T11791] Node 0 DMA32 free:1161416kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:275176kB inactive_anon:8kB active_file:59032kB inactive_file:174160kB unevictable:1536kB writepending:684kB present:3129332kB managed:2547560kB mlocked:0kB bounce:0kB free_pcp:1604kB local_pcp:412kB free_cma:0kB [ 415.551943][T11791] lowmem_reserve[]: 0 0 0 0 0 [ 415.559224][T11791] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 415.609572][T11791] lowmem_reserve[]: 0 0 0 0 0 [ 415.626909][T11791] Node 1 Normal free:3860880kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:8kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:43620kB local_pcp:22164kB free_cma:0kB [ 415.833522][T11791] lowmem_reserve[]: 0 0 0 0 0 [ 415.891043][T11791] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 416.031988][T11791] Node 0 DMA32: 125*4kB (UME) 350*8kB (UM) 197*16kB (UME) 846*32kB (UME) 1359*64kB (UM) 738*128kB (UME) 285*256kB (UME) 93*512kB (UM) 34*1024kB (UME) 5*2048kB (UE) 182*4096kB (M) = 1126068kB [ 416.194737][T11791] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 416.291907][T11791] Node 1 Normal: 223*4kB (UM) 27*8kB (UME) 45*16kB (UME) 197*32kB (UM) 100*64kB (UME) 42*128kB (UME) 18*256kB (UME) 9*512kB (UM) 10*1024kB (UME) 4*2048kB (UME) 931*4096kB (M) = 3860932kB [ 416.433265][T11791] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.604753][T11791] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 416.694996][T11791] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 416.726084][T11811] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 416.733911][T11811] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 416.734048][T11791] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 416.741141][T11811] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 416.788867][T11811] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 416.888824][T11791] 136985 total pagecache pages [ 416.894105][T11791] 12 pages in swap cache [ 417.010730][T11791] Free swap = 124376kB [ 417.032856][T11791] Total swap = 124996kB [ 417.073612][T11816] net_ratelimit: 21 callbacks suppressed [ 417.073633][T11816] netlink: zone id is out of range [ 417.095034][T11791] 2097051 pages RAM [ 417.099292][T11791] 0 pages HighMem/MovableOnly [ 417.104477][T11791] 428503 pages reserved [ 417.136572][T11816] netlink: zone id is out of range [ 417.147434][T11816] netlink: zone id is out of range [ 417.153088][T11816] netlink: zone id is out of range [ 417.174777][T11816] netlink: zone id is out of range [ 417.180439][T11816] netlink: zone id is out of range [ 417.186977][T11791] 0 pages cma reserved [ 417.211620][T11816] netlink: zone id is out of range [ 417.217498][T11816] netlink: zone id is out of range [ 417.223250][T11816] netlink: zone id is out of range [ 417.229067][T11816] netlink: zone id is out of range [ 418.335049][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 418.734916][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 418.818777][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 418.825910][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 419.438686][T11844] synth uevent: /module/qat_c62x: unknown uevent action string [ 421.932951][T11872] netlink: 'syz.1.1284': attribute type 1 has an invalid length. [ 424.689817][T11941] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 425.599083][ T5838] Bluetooth: hci3: unexpected event 0x14 length: 18 > 6 [ 425.691034][ T5838] Bluetooth: hci3: unexpected event 0x14 length: 18 > 6 [ 431.398129][T12041] sd 0:0:1:0: PR command failed: 1026 [ 431.404129][T12041] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 431.502564][T12048] net_ratelimit: 52 callbacks suppressed [ 431.502585][T12048] netlink: zone id is out of range [ 431.518012][T12048] netlink: zone id is out of range [ 431.548403][T12041] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 431.566962][T12048] netlink: zone id is out of range [ 431.572628][T12048] netlink: zone id is out of range [ 431.579160][T12048] netlink: zone id is out of range [ 431.584912][T12048] netlink: zone id is out of range [ 431.590678][T12048] netlink: zone id is out of range [ 431.596675][T12048] netlink: zone id is out of range [ 431.623672][T12048] netlink: zone id is out of range [ 431.735741][T12048] netlink: zone id is out of range [ 431.748324][T12041] svc: failed to register nfsdv3 RPC service (errno 111). [ 431.806749][T12041] svc: failed to register nfsaclv3 RPC service (errno 111). [ 432.534187][T12041] Process accounting paused [ 435.453788][T12093] Process accounting resumed [ 436.140293][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1335'. [ 436.197160][T12116] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(16777220.0.1), cmd(5) [ 437.117380][T12131] bridge0: port 2(netdevsim2) entered blocking state [ 437.125264][T12131] bridge0: port 2(netdevsim2) entered disabled state [ 437.144968][T12131] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 437.162747][T12131] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 437.217068][T12131] bridge0: port 2(netdevsim2) entered blocking state [ 437.225519][T12131] bridge0: port 2(netdevsim2) entered forwarding state [ 437.437217][ T5838] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 437.437261][ T5838] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 437.453725][ T5838] Bluetooth: hci1: Unknown advertising packet type: 0x7f [ 437.453809][ T5838] Bluetooth: hci1: Unknown advertising packet type: 0x40 [ 437.462386][ T5838] Bluetooth: hci1: adv larger than maximum supported [ 437.470198][ T5838] Bluetooth: hci1: adv larger than maximum supported [ 437.477650][ T5838] Bluetooth: hci1: Malformed LE Event: 0x0d [ 438.688880][T12153] net_ratelimit: 28 callbacks suppressed [ 438.688899][T12153] netlink: zone id is out of range [ 438.724801][T12153] netlink: zone id is out of range [ 438.730475][T12153] netlink: zone id is out of range [ 438.765484][T12153] netlink: zone id is out of range [ 438.774753][T12153] netlink: zone id is out of range [ 438.804393][T12153] netlink: zone id is out of range [ 438.825169][T12153] netlink: zone id is out of range [ 438.844773][T12153] netlink: zone id is out of range [ 438.850510][T12153] netlink: zone id is out of range [ 439.014786][T12153] netlink: zone id is out of range [ 440.548291][T12178] FAULT_INJECTION: forcing a failure. [ 440.548291][T12178] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 440.565829][T12178] CPU: 1 UID: 7 PID: 12178 Comm: syz.0.1352 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 440.565863][T12178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 440.565877][T12178] Call Trace: [ 440.565885][T12178] [ 440.565894][T12178] dump_stack_lvl+0x16c/0x1f0 [ 440.565928][T12178] should_fail_ex+0x50a/0x650 [ 440.565970][T12178] _copy_from_user+0x2e/0xd0 [ 440.565997][T12178] copy_msghdr_from_user+0x99/0x160 [ 440.566031][T12178] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 440.566063][T12178] ? __lock_acquire+0xcc5/0x3c40 [ 440.566112][T12178] ___sys_sendmsg+0xff/0x1e0 [ 440.566146][T12178] ? __pfx____sys_sendmsg+0x10/0x10 [ 440.566192][T12178] ? trace_lock_acquire+0x14e/0x1f0 [ 440.566242][T12178] __sys_sendmmsg+0x201/0x420 [ 440.566277][T12178] ? __pfx___sys_sendmmsg+0x10/0x10 [ 440.566315][T12178] ? __pfx_do_futex+0x10/0x10 [ 440.566355][T12178] ? xfd_validate_state+0x5d/0x180 [ 440.566387][T12178] ? rcu_is_watching+0x12/0xc0 [ 440.566418][T12178] __x64_sys_sendmmsg+0x9c/0x100 [ 440.566449][T12178] ? lockdep_hardirqs_on+0x7c/0x110 [ 440.566476][T12178] do_syscall_64+0xcd/0x250 [ 440.566506][T12178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.566538][T12178] RIP: 0033:0x7f6893f8cde9 [ 440.566558][T12178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.566581][T12178] RSP: 002b:00007f6894d5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 440.566604][T12178] RAX: ffffffffffffffda RBX: 00007f68941a5fa0 RCX: 00007f6893f8cde9 [ 440.566620][T12178] RDX: 000000000000000b RSI: 0000400000000080 RDI: 0000000000000003 [ 440.566635][T12178] RBP: 00007f689400e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 440.566649][T12178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 440.566664][T12178] R13: 0000000000000000 R14: 00007f68941a5fa0 R15: 00007ffc6882a698 [ 440.566702][T12178] [ 441.222190][T12184] netlink: 'syz.0.1355': attribute type 29 has an invalid length. [ 441.241294][T12184] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1355'. [ 441.775528][T12188] kernel read not supported for file /P¹Ơr¼Đ ^À!ÀƯ8°€ú;—nô~ZñïÑñÙJ›pßçÍ„-»¥¸ü÷v<)ƯRØ_çWtaú½¯kG÷ª6h mDü|vÔQ (pid: 12188 comm: syz.2.1354) [ 441.914139][ T29] audit: type=1800 audit(8277292067.140:13): pid=12188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1354" name=5002B9D50272BCD0095EC0217FC0DD38B080FA3B97056EF47E5A05F1EFD1F108D94A9B70DFE7CD1F842DBB05A5B8FCF7763C29DD5202D80D5F03E78E577461FABDAF066B47F7AA361C680B6D44FC7C76D451 dev="mqueue" ino=36207 res=0 errno=0 [ 442.786584][T12201] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1360'. [ 444.335946][T12222] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 17ec00000006 [ 444.653965][T12237] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 444.698292][T12237] net_ratelimit: 21 callbacks suppressed [ 444.698310][T12237] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 446.108298][T12266] netlink: 346 bytes leftover after parsing attributes in process `syz.2.1373'. [ 447.615092][T12295] sg_write: data in/out 79/64965 bytes for SCSI command 0x0-- guessing data in; [ 447.615092][T12295] program syz.0.1379 not setting count and/or reply_len properly [ 448.780371][T12317] Invalid ELF header magic: != ELF [ 449.532222][T12327] openvswitch: netlink: Unknown nsh attribute 0 [ 452.426041][T12360] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1397'. [ 454.252054][T12392] FAULT_INJECTION: forcing a failure. [ 454.252054][T12392] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.326809][T12392] CPU: 1 UID: 0 PID: 12392 Comm: syz.0.1405 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 454.326842][T12392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 454.326854][T12392] Call Trace: [ 454.326864][T12392] [ 454.326874][T12392] dump_stack_lvl+0x16c/0x1f0 [ 454.326907][T12392] should_fail_ex+0x50a/0x650 [ 454.326946][T12392] core_sys_select+0x4cf/0xb80 [ 454.326985][T12392] ? __pfx_core_sys_select+0x10/0x10 [ 454.327026][T12392] ? __pfx_lock_release+0x10/0x10 [ 454.327056][T12392] ? proc_fail_nth_write+0xa0/0x250 [ 454.327109][T12392] ? do_sys_openat2+0xb1/0x1e0 [ 454.327132][T12392] ? __pfx_do_sys_openat2+0x10/0x10 [ 454.327155][T12392] ? __pfx_do_sys_openat2+0x10/0x10 [ 454.327186][T12392] kern_select+0x15e/0x1e0 [ 454.327216][T12392] ? __pfx_kern_select+0x10/0x10 [ 454.327250][T12392] ? __pfx_ksys_write+0x10/0x10 [ 454.327285][T12392] __x64_sys_select+0xbd/0x160 [ 454.327313][T12392] ? do_syscall_64+0x91/0x250 [ 454.327338][T12392] ? lockdep_hardirqs_on+0x7c/0x110 [ 454.327363][T12392] do_syscall_64+0xcd/0x250 [ 454.327392][T12392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.327423][T12392] RIP: 0033:0x7f6893f8cde9 [ 454.327441][T12392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 454.327463][T12392] RSP: 002b:00007f6894d5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 454.327486][T12392] RAX: ffffffffffffffda RBX: 00007f68941a5fa0 RCX: 00007f6893f8cde9 [ 454.327501][T12392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 454.327515][T12392] RBP: 00007f6894d5a090 R08: 0000000000000000 R09: 0000000000000000 [ 454.327529][T12392] R10: 00004000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 454.327543][T12392] R13: 0000000000000000 R14: 00007f68941a5fa0 R15: 00007ffc6882a698 [ 454.327574][T12392] [ 458.570529][T12442] Invalid ELF header magic: != ELF [ 458.624770][T12441] Invalid ELF header magic: != ELF [ 465.508141][T12512] FAULT_INJECTION: forcing a failure. [ 465.508141][T12512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 465.570869][T12512] CPU: 0 UID: 0 PID: 12512 Comm: syz.2.1435 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 465.570899][T12512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 465.570912][T12512] Call Trace: [ 465.570918][T12512] [ 465.570927][T12512] dump_stack_lvl+0x16c/0x1f0 [ 465.570958][T12512] should_fail_ex+0x50a/0x650 [ 465.570995][T12512] _copy_from_user+0x2e/0xd0 [ 465.571019][T12512] move_addr_to_kernel+0x68/0x160 [ 465.571046][T12512] __sys_connect+0xb0/0x170 [ 465.571072][T12512] ? __pfx___sys_connect+0x10/0x10 [ 465.571117][T12512] ? __pfx_ksys_write+0x10/0x10 [ 465.571153][T12512] __x64_sys_connect+0x72/0xb0 [ 465.571190][T12512] ? lockdep_hardirqs_on+0x7c/0x110 [ 465.571217][T12512] do_syscall_64+0xcd/0x250 [ 465.571246][T12512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.571278][T12512] RIP: 0033:0x7ffb0118cde9 [ 465.571297][T12512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.571319][T12512] RSP: 002b:00007ffb0201a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 465.571340][T12512] RAX: ffffffffffffffda RBX: 00007ffb013a5fa0 RCX: 00007ffb0118cde9 [ 465.571356][T12512] RDX: 0000000000000055 RSI: 0000000000000000 RDI: 0000000000000003 [ 465.571370][T12512] RBP: 00007ffb0201a090 R08: 0000000000000000 R09: 0000000000000000 [ 465.571384][T12512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 465.571397][T12512] R13: 0000000000000000 R14: 00007ffb013a5fa0 R15: 00007ffc01225d98 [ 465.571427][T12512] [ 465.573934][T12514] db_root: cannot open: [ 465.604782][ T29] audit: type=1800 audit(8277292090.800:14): pid=12515 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1436" name="dbroot" dev="configfs" ino=37940 res=0 errno=0 [ 465.793279][T12510] FAULT_INJECTION: forcing a failure. [ 465.793279][T12510] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 465.910785][T12510] CPU: 0 UID: 0 PID: 12510 Comm: syz.3.1434 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 465.910821][T12510] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 465.910834][T12510] Call Trace: [ 465.910842][T12510] [ 465.910851][T12510] dump_stack_lvl+0x16c/0x1f0 [ 465.910886][T12510] should_fail_ex+0x50a/0x650 [ 465.910920][T12510] ? __pfx___might_resched+0x10/0x10 [ 465.910960][T12510] should_fail_alloc_page+0xe7/0x130 [ 465.910986][T12510] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 465.911024][T12510] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 465.911069][T12510] ? __pfx_mark_lock+0x10/0x10 [ 465.911101][T12510] ? lock_acquire.part.0+0x11b/0x380 [ 465.911137][T12510] ? hlock_class+0x4e/0x130 [ 465.911161][T12510] ? __lock_acquire+0x15a9/0x3c40 [ 465.911193][T12510] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 465.911232][T12510] ? mark_lock+0xb5/0xc60 [ 465.911279][T12510] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 465.911317][T12510] ? policy_nodemask+0xea/0x4e0 [ 465.911356][T12510] alloc_pages_mpol+0x1fc/0x540 [ 465.911394][T12510] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 465.911430][T12510] ? find_held_lock+0x2d/0x110 [ 465.911462][T12510] folio_alloc_mpol_noprof+0x36/0x2f0 [ 465.911492][T12510] shmem_alloc_folio+0x135/0x160 [ 465.911531][T12510] shmem_alloc_and_add_folio+0x48e/0xc10 [ 465.911564][T12510] ? shmem_huge_global_enabled+0x72/0x6b0 [ 465.911588][T12510] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 465.911619][T12510] ? shmem_allowable_huge_orders+0xd0/0x410 [ 465.911655][T12510] shmem_get_folio_gfp+0x689/0x1530 [ 465.911690][T12510] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 465.911717][T12510] ? find_held_lock+0x2d/0x110 [ 465.911750][T12510] shmem_write_begin+0x161/0x300 [ 465.911781][T12510] ? __pfx_shmem_write_begin+0x10/0x10 [ 465.911807][T12510] ? timestamp_truncate+0x21f/0x2e0 [ 465.911844][T12510] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 465.911889][T12510] generic_perform_write+0x2ba/0x920 [ 465.911927][T12510] ? __pfx_generic_perform_write+0x10/0x10 [ 465.911957][T12510] ? inode_needs_update_time.part.0+0x191/0x270 [ 465.912002][T12510] shmem_file_write_iter+0x10e/0x140 [ 465.912036][T12510] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 465.912072][T12510] __kernel_write_iter+0x318/0xa90 [ 465.912107][T12510] ? __pfx___kernel_write_iter+0x10/0x10 [ 465.912137][T12510] ? get_dump_page+0x15b/0x230 [ 465.912176][T12510] ? __pfx___might_resched+0x10/0x10 [ 465.912218][T12510] dump_user_range+0x389/0x8c0 [ 465.912255][T12510] ? __pfx_dump_user_range+0x10/0x10 [ 465.912285][T12510] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 465.912327][T12510] ? __pfx_writenote+0x10/0x10 [ 465.912366][T12510] elf_core_dump+0x287c/0x3a50 [ 465.912415][T12510] ? __pfx_elf_core_dump+0x10/0x10 [ 465.912442][T12510] ? kasan_save_stack+0x33/0x60 [ 465.912473][T12510] ? __kasan_kmalloc+0xaa/0xb0 [ 465.912502][T12510] ? __kmalloc_node_noprof+0x21f/0x510 [ 465.912536][T12510] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 465.912566][T12510] ? get_signal+0x230b/0x26c0 [ 465.912598][T12510] ? arch_do_signal_or_restart+0x90/0x7e0 [ 465.912624][T12510] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 465.912704][T12510] ? rcu_is_watching+0x12/0xc0 [ 465.912729][T12510] ? trace_lock_acquire+0x14e/0x1f0 [ 465.912755][T12510] ? __pfx_sort+0x10/0x10 [ 465.912777][T12510] ? get_signal+0x230b/0x26c0 [ 465.912819][T12510] ? do_coredump+0x3134/0x4400 [ 465.912843][T12510] do_coredump+0x3134/0x4400 [ 465.912882][T12510] ? __pfx_do_coredump+0x10/0x10 [ 465.912911][T12510] ? stack_trace_save+0x95/0xd0 [ 465.912937][T12510] ? __pfx_stack_trace_save+0x10/0x10 [ 465.912963][T12510] ? hlock_class+0x4e/0x130 [ 465.912986][T12510] ? stack_depot_save_flags+0x28/0x9c0 [ 465.913033][T12510] ? kmem_cache_free+0x2e2/0x4d0 [ 465.913068][T12510] ? __sigqueue_free+0xba/0x2a0 [ 465.913092][T12510] ? get_signal+0xcbc/0x26c0 [ 465.913123][T12510] ? arch_do_signal_or_restart+0x90/0x7e0 [ 465.913147][T12510] ? syscall_exit_to_user_mode+0x150/0x2a0 [ 465.913214][T12510] ? find_held_lock+0x2d/0x110 [ 465.913244][T12510] ? proc_coredump_connector+0x2d2/0x4f0 [ 465.913279][T12510] ? __pfx_proc_coredump_connector+0x10/0x10 [ 465.913329][T12510] get_signal+0x230b/0x26c0 [ 465.913372][T12510] ? lockdep_hardirqs_on+0x7c/0x110 [ 465.913400][T12510] ? __pfx_get_signal+0x10/0x10 [ 465.913445][T12510] arch_do_signal_or_restart+0x90/0x7e0 [ 465.913473][T12510] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 465.913522][T12510] syscall_exit_to_user_mode+0x150/0x2a0 [ 465.913551][T12510] do_syscall_64+0xda/0x250 [ 465.913581][T12510] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.913613][T12510] RIP: 0033:0x7fe7ff38cde9 [ 465.913634][T12510] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 465.913657][T12510] RSP: 002b:00007fe8001d20e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 465.913681][T12510] RAX: ffffffffffffffda RBX: 00007fe7ff5a5fa8 RCX: 00007fe7ff38cde9 [ 465.913698][T12510] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe7ff5a5fac [ 465.913713][T12510] RBP: 00007fe7ff5a5fa0 R08: 00007fe8001d3000 R09: 0000000000000000 [ 465.913728][T12510] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe7ff5a5fac [ 465.913742][T12510] R13: 0000000000000000 R14: 00007fff58a2a830 R15: 00007fff58a2a918 [ 465.913776][T12510] [ 468.200953][T12545] bridge0: port 3(team0) entered blocking state [ 468.232324][T12545] bridge0: port 3(team0) entered disabled state [ 468.255866][T12545] team0: entered allmulticast mode [ 468.278531][T12545] team_slave_0: entered allmulticast mode [ 468.313977][T12545] team_slave_1: entered allmulticast mode [ 468.333999][T12545] team0: entered promiscuous mode [ 468.334023][T12545] team_slave_0: entered promiscuous mode [ 468.334213][T12545] team_slave_1: entered promiscuous mode [ 468.342759][T12545] bridge0: port 3(team0) entered blocking state [ 468.342851][T12545] bridge0: port 3(team0) entered forwarding state [ 469.205378][ T29] audit: type=1800 audit(8277292094.440:15): pid=12558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm=1D name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 469.226798][ C1] vkms_vblank_simulate: vblank timer overrun [ 469.548799][T12562] netlink: 'syz.0.1447': attribute type 1 has an invalid length. [ 472.664131][T12600] FAULT_INJECTION: forcing a failure. [ 472.664131][T12600] name failslab, interval 1, probability 0, space 0, times 0 [ 472.750499][T12600] CPU: 1 UID: 0 PID: 12600 Comm: syz.0.1455 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 472.750535][T12600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 472.750550][T12600] Call Trace: [ 472.750557][T12600] [ 472.750567][T12600] dump_stack_lvl+0x16c/0x1f0 [ 472.750601][T12600] should_fail_ex+0x50a/0x650 [ 472.750636][T12600] ? fs_reclaim_acquire+0xae/0x150 [ 472.750671][T12600] should_failslab+0xc2/0x120 [ 472.750707][T12600] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 472.750745][T12600] ? __alloc_skb+0x2b1/0x380 [ 472.750780][T12600] __alloc_skb+0x2b1/0x380 [ 472.750809][T12600] ? __pfx___alloc_skb+0x10/0x10 [ 472.750842][T12600] ? __pfx___register_sysctl_table+0x10/0x10 [ 472.750874][T12600] ? is_module_address+0x2a/0x50 [ 472.750908][T12600] inet_netconf_notify_devconf+0x8b/0x1f0 [ 472.750939][T12600] __devinet_sysctl_register+0x223/0x360 [ 472.750970][T12600] ? __pfx___devinet_sysctl_register+0x10/0x10 [ 472.750998][T12600] ? trace_kmalloc+0x2d/0xd0 [ 472.751023][T12600] ? devinet_init_net+0xeb/0x900 [ 472.751051][T12600] ? __asan_memcpy+0x3c/0x60 [ 472.751081][T12600] ? __pfx_devinet_init_net+0x10/0x10 [ 472.751108][T12600] devinet_init_net+0x315/0x900 [ 472.751139][T12600] ? __pfx_devinet_init_net+0x10/0x10 [ 472.751165][T12600] ops_init+0x1df/0x5f0 [ 472.751202][T12600] setup_net+0x21f/0x860 [ 472.751235][T12600] ? __pfx_setup_net+0x10/0x10 [ 472.751264][T12600] ? down_read_killable+0xcc/0x380 [ 472.751295][T12600] ? __pfx_down_read_killable+0x10/0x10 [ 472.751322][T12600] ? __raw_spin_lock_init+0x3a/0x110 [ 472.751387][T12600] ? debug_mutex_init+0x37/0x70 [ 472.751415][T12600] copy_net_ns+0x2b4/0x6c0 [ 472.751453][T12600] create_new_namespaces+0x3ea/0xad0 [ 472.751493][T12600] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 472.751529][T12600] ksys_unshare+0x45d/0xa40 [ 472.751553][T12600] ? __pfx_ksys_unshare+0x10/0x10 [ 472.751575][T12600] ? xfd_validate_state+0x5d/0x180 [ 472.751614][T12600] __x64_sys_unshare+0x31/0x40 [ 472.751637][T12600] do_syscall_64+0xcd/0x250 [ 472.751664][T12600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 472.751697][T12600] RIP: 0033:0x7f6893f8cde9 [ 472.751717][T12600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 472.751740][T12600] RSP: 002b:00007f6894d39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 472.751764][T12600] RAX: ffffffffffffffda RBX: 00007f68941a6080 RCX: 00007f6893f8cde9 [ 472.751781][T12600] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 472.751797][T12600] RBP: 00007f689400e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 472.751812][T12600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 472.751826][T12600] R13: 0000000000000000 R14: 00007f68941a6080 R15: 00007ffc6882a698 [ 472.751868][T12600] [ 473.060238][ C1] vkms_vblank_simulate: vblank timer overrun [ 473.284388][T12615] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1460'. [ 473.507020][T12613] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1460'. [ 473.982908][T12623] FAULT_INJECTION: forcing a failure. [ 473.982908][T12623] name failslab, interval 1, probability 0, space 0, times 0 [ 474.004664][T12623] CPU: 1 UID: 0 PID: 12623 Comm: syz.2.1463 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 474.004697][T12623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 474.004711][T12623] Call Trace: [ 474.004718][T12623] [ 474.004728][T12623] dump_stack_lvl+0x16c/0x1f0 [ 474.004766][T12623] should_fail_ex+0x50a/0x650 [ 474.004804][T12623] ? fs_reclaim_acquire+0xae/0x150 [ 474.004842][T12623] should_failslab+0xc2/0x120 [ 474.004880][T12623] __kmalloc_node_noprof+0xd1/0x510 [ 474.004920][T12623] ? __pfx_aa_file_perm+0x10/0x10 [ 474.004951][T12623] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 474.005003][T12623] __kvmalloc_node_noprof+0xad/0x1a0 [ 474.005038][T12623] seq_read_iter+0x82a/0x12b0 [ 474.005072][T12623] ? __mutex_trylock_common+0xea/0x250 [ 474.005124][T12623] kernfs_fop_read_iter+0x414/0x580 [ 474.005152][T12623] ? rw_verify_area+0xcf/0x680 [ 474.005188][T12623] vfs_read+0x886/0xbf0 [ 474.005226][T12623] ? __pfx_vfs_read+0x10/0x10 [ 474.005283][T12623] ksys_read+0x12b/0x250 [ 474.005314][T12623] ? __pfx_ksys_read+0x10/0x10 [ 474.005358][T12623] do_syscall_64+0xcd/0x250 [ 474.005389][T12623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.005423][T12623] RIP: 0033:0x7ffb0118cde9 [ 474.005442][T12623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.005465][T12623] RSP: 002b:00007ffb0201a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 474.005489][T12623] RAX: ffffffffffffffda RBX: 00007ffb013a5fa0 RCX: 00007ffb0118cde9 [ 474.005515][T12623] RDX: 0000000000001000 RSI: 0000400000000ec0 RDI: 0000000000000007 [ 474.005532][T12623] RBP: 00007ffb0120e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 474.005547][T12623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 474.005561][T12623] R13: 0000000000000000 R14: 00007ffb013a5fa0 R15: 00007ffc01225d98 [ 474.005601][T12623] [ 474.223747][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.003742][T12642] FAULT_INJECTION: forcing a failure. [ 475.003742][T12642] name failslab, interval 1, probability 0, space 0, times 0 [ 475.043954][T12644] FAULT_INJECTION: forcing a failure. [ 475.043954][T12644] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 475.073727][T12642] CPU: 1 UID: 0 PID: 12642 Comm: syz.2.1468 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 475.073758][T12642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 475.073771][T12642] Call Trace: [ 475.073778][T12642] [ 475.073787][T12642] dump_stack_lvl+0x16c/0x1f0 [ 475.073824][T12642] should_fail_ex+0x50a/0x650 [ 475.073858][T12642] ? fs_reclaim_acquire+0xae/0x150 [ 475.073889][T12642] ? tomoyo_realpath_from_path+0xb9/0x720 [ 475.073920][T12642] should_failslab+0xc2/0x120 [ 475.073955][T12642] __kmalloc_noprof+0xcb/0x510 [ 475.073988][T12642] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 475.074026][T12642] tomoyo_realpath_from_path+0xb9/0x720 [ 475.074055][T12642] ? tomoyo_path_number_perm+0x235/0x590 [ 475.074082][T12642] ? tomoyo_path_number_perm+0x235/0x590 [ 475.074112][T12642] tomoyo_path_number_perm+0x248/0x590 [ 475.074144][T12642] ? tomoyo_path_number_perm+0x235/0x590 [ 475.074172][T12642] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 475.074229][T12642] ? __pfx_lock_release+0x10/0x10 [ 475.074259][T12642] ? trace_lock_acquire+0x14e/0x1f0 [ 475.074289][T12642] ? lock_acquire+0x2f/0xb0 [ 475.074318][T12642] ? __fget_files+0x40/0x3a0 [ 475.074353][T12642] ? __fget_files+0x206/0x3a0 [ 475.074388][T12642] security_file_ioctl+0x9b/0x240 [ 475.074418][T12642] __x64_sys_ioctl+0xb7/0x200 [ 475.074448][T12642] do_syscall_64+0xcd/0x250 [ 475.074476][T12642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.074509][T12642] RIP: 0033:0x7ffb0118cde9 [ 475.074527][T12642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.074549][T12642] RSP: 002b:00007ffb0201a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 475.074571][T12642] RAX: ffffffffffffffda RBX: 00007ffb013a5fa0 RCX: 00007ffb0118cde9 [ 475.074587][T12642] RDX: 00004000000002c0 RSI: 0000000081785501 RDI: 0000000000000003 [ 475.074605][T12642] RBP: 00007ffb0201a090 R08: 0000000000000000 R09: 0000000000000000 [ 475.074619][T12642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.074631][T12642] R13: 0000000000000000 R14: 00007ffb013a5fa0 R15: 00007ffc01225d98 [ 475.074661][T12642] [ 475.324911][T12644] CPU: 0 UID: 0 PID: 12644 Comm: syz.0.1469 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 475.324946][T12644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 475.324959][T12644] Call Trace: [ 475.324965][T12644] [ 475.324975][T12644] dump_stack_lvl+0x16c/0x1f0 [ 475.325008][T12644] should_fail_ex+0x50a/0x650 [ 475.325041][T12644] ? __pfx___might_resched+0x10/0x10 [ 475.325081][T12644] should_fail_alloc_page+0xe7/0x130 [ 475.325106][T12644] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 475.325142][T12644] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 475.325181][T12644] ? __pfx_mark_lock+0x10/0x10 [ 475.325209][T12644] ? __pfx_stack_trace_save+0x10/0x10 [ 475.325235][T12644] ? stack_depot_save_flags+0x28/0x9c0 [ 475.325270][T12644] ? rcu_is_watching+0x12/0xc0 [ 475.325298][T12644] ? kasan_save_stack+0x42/0x60 [ 475.325330][T12644] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 475.325367][T12644] ? hlock_class+0x4e/0x130 [ 475.325394][T12644] ? hlock_class+0x4e/0x130 [ 475.325431][T12644] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 475.325474][T12644] ? policy_nodemask+0xea/0x4e0 [ 475.325513][T12644] alloc_pages_mpol+0x1fc/0x540 [ 475.325550][T12644] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 475.325596][T12644] alloc_pages_noprof+0x131/0x390 [ 475.325632][T12644] pte_alloc_one+0x20/0x390 [ 475.325666][T12644] do_pte_missing+0x1aff/0x3e10 [ 475.325701][T12644] ? do_raw_spin_unlock+0x172/0x230 [ 475.325726][T12644] ? __pmd_alloc+0x3c2/0x870 [ 475.325758][T12644] __handle_mm_fault+0x1166/0x2c60 [ 475.325801][T12644] ? __pfx___handle_mm_fault+0x10/0x10 [ 475.325833][T12644] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 475.325882][T12644] ? find_vma+0xc0/0x140 [ 475.325909][T12644] ? __pfx_find_vma+0x10/0x10 [ 475.325940][T12644] handle_mm_fault+0x3fa/0xaa0 [ 475.325980][T12644] do_user_addr_fault+0x7a3/0x13f0 [ 475.326018][T12644] exc_page_fault+0x5c/0xc0 [ 475.326045][T12644] asm_exc_page_fault+0x26/0x30 [ 475.326075][T12644] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 475.326109][T12644] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 475.326131][T12644] RSP: 0018:ffffc90005037da0 EFLAGS: 00050202 [ 475.326150][T12644] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000055 [ 475.326164][T12644] RDX: fffff52000a06fce RSI: 0000000000000000 RDI: ffffc90005037e18 [ 475.326179][T12644] RBP: 0000000000000055 R08: 0000000000000001 R09: fffff52000a06fcd [ 475.326194][T12644] R10: ffffc90005037e6c R11: 0000000000000000 R12: 0000000000000000 [ 475.326208][T12644] R13: ffffc90005037e18 R14: 0000000000000055 R15: 0000000000000000 [ 475.326238][T12644] _copy_from_user+0x98/0xd0 [ 475.326265][T12644] move_addr_to_kernel+0x68/0x160 [ 475.326292][T12644] __sys_connect+0xb0/0x170 [ 475.326319][T12644] ? __pfx___sys_connect+0x10/0x10 [ 475.326363][T12644] ? __pfx_ksys_write+0x10/0x10 [ 475.326401][T12644] __x64_sys_connect+0x72/0xb0 [ 475.326426][T12644] ? lockdep_hardirqs_on+0x7c/0x110 [ 475.326451][T12644] do_syscall_64+0xcd/0x250 [ 475.326486][T12644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.326517][T12644] RIP: 0033:0x7f6893f8cde9 [ 475.326536][T12644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.326557][T12644] RSP: 002b:00007f6894d5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 475.326578][T12644] RAX: ffffffffffffffda RBX: 00007f68941a5fa0 RCX: 00007f6893f8cde9 [ 475.326593][T12644] RDX: 0000000000000055 RSI: 0000000000000000 RDI: 0000000000000003 [ 475.326607][T12644] RBP: 00007f6894d5a090 R08: 0000000000000000 R09: 0000000000000000 [ 475.326621][T12644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.326634][T12644] R13: 0000000000000000 R14: 00007f68941a5fa0 R15: 00007ffc6882a698 [ 475.326666][T12644] [ 475.764685][T12642] ERROR: Out of memory at tomoyo_realpath_from_path. [ 475.939966][T12646] Invalid ELF header magic: != ELF [ 476.991329][T12661] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1474'. [ 477.402953][T12666] FAULT_INJECTION: forcing a failure. [ 477.402953][T12666] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 477.454838][T12666] CPU: 0 UID: 0 PID: 12666 Comm: syz.3.1475 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 477.454878][T12666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 477.454892][T12666] Call Trace: [ 477.454900][T12666] [ 477.454909][T12666] dump_stack_lvl+0x16c/0x1f0 [ 477.454945][T12666] should_fail_ex+0x50a/0x650 [ 477.454987][T12666] _copy_from_iter+0x465/0x1560 [ 477.455020][T12666] ? __pfx__copy_from_iter+0x10/0x10 [ 477.455050][T12666] ? __virt_addr_valid+0x1a4/0x590 [ 477.455081][T12666] ? __virt_addr_valid+0x5e/0x590 [ 477.455106][T12666] ? __phys_addr_symbol+0x30/0x80 [ 477.455129][T12666] ? __check_object_size+0x488/0x710 [ 477.455158][T12666] skb_copy_datagram_from_iter+0x124/0x710 [ 477.455187][T12666] ? lock_acquire+0x2f/0xb0 [ 477.455228][T12666] packet_sendmsg+0x220f/0x56c0 [ 477.455278][T12666] ? __pfx___might_resched+0x10/0x10 [ 477.455312][T12666] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 477.455354][T12666] ? __pfx_packet_sendmsg+0x10/0x10 [ 477.455387][T12666] ? aa_label_seq_xprint+0x210/0x550 [ 477.455410][T12666] ? __might_fault+0xe3/0x190 [ 477.455435][T12666] ? __might_fault+0xe3/0x190 [ 477.455467][T12666] ____sys_sendmsg+0xaaf/0xc90 [ 477.455495][T12666] ? __pfx_____sys_sendmsg+0x10/0x10 [ 477.455517][T12666] ? __lock_acquire+0xcc5/0x3c40 [ 477.455563][T12666] ___sys_sendmsg+0x135/0x1e0 [ 477.455597][T12666] ? __pfx____sys_sendmsg+0x10/0x10 [ 477.455643][T12666] ? trace_lock_acquire+0x14e/0x1f0 [ 477.455669][T12666] ? __pfx___lock_acquire+0x10/0x10 [ 477.455720][T12666] __sys_sendmmsg+0x201/0x420 [ 477.455757][T12666] ? __pfx___sys_sendmmsg+0x10/0x10 [ 477.455816][T12666] ? xfd_validate_state+0x5d/0x180 [ 477.455849][T12666] ? rcu_is_watching+0x12/0xc0 [ 477.455880][T12666] __x64_sys_sendmmsg+0x9c/0x100 [ 477.455912][T12666] ? lockdep_hardirqs_on+0x7c/0x110 [ 477.455938][T12666] do_syscall_64+0xcd/0x250 [ 477.455969][T12666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.456002][T12666] RIP: 0033:0x7fe7ff38cde9 [ 477.456022][T12666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.456051][T12666] RSP: 002b:00007fe8001d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 477.456074][T12666] RAX: ffffffffffffffda RBX: 00007fe7ff5a5fa0 RCX: 00007fe7ff38cde9 [ 477.456091][T12666] RDX: 0000000000000002 RSI: 00004000000001c0 RDI: 0000000000000006 [ 477.456107][T12666] RBP: 00007fe7ff40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 477.456122][T12666] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000000 [ 477.456138][T12666] R13: 0000000000000000 R14: 00007fe7ff5a5fa0 R15: 00007fff58a2a918 [ 477.456169][T12666] [ 478.350060][T12676] FAULT_INJECTION: forcing a failure. [ 478.350060][T12676] name failslab, interval 1, probability 0, space 0, times 0 [ 478.407092][T12676] CPU: 0 UID: 0 PID: 12676 Comm: syz.0.1478 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 478.407127][T12676] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 478.407140][T12676] Call Trace: [ 478.407146][T12676] [ 478.407156][T12676] dump_stack_lvl+0x16c/0x1f0 [ 478.407190][T12676] should_fail_ex+0x50a/0x650 [ 478.407224][T12676] ? fs_reclaim_acquire+0xae/0x150 [ 478.407256][T12676] should_failslab+0xc2/0x120 [ 478.407293][T12676] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 478.407327][T12676] ? ptlock_alloc+0x1f/0x70 [ 478.407365][T12676] ptlock_alloc+0x1f/0x70 [ 478.407397][T12676] pte_alloc_one+0x74/0x390 [ 478.407432][T12676] do_pte_missing+0x1aff/0x3e10 [ 478.407466][T12676] ? do_raw_spin_unlock+0x172/0x230 [ 478.407492][T12676] ? __pmd_alloc+0x3c2/0x870 [ 478.407524][T12676] __handle_mm_fault+0x1166/0x2c60 [ 478.407566][T12676] ? __pfx___handle_mm_fault+0x10/0x10 [ 478.407596][T12676] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 478.407642][T12676] ? find_vma+0xc0/0x140 [ 478.407668][T12676] ? __pfx_find_vma+0x10/0x10 [ 478.407698][T12676] handle_mm_fault+0x3fa/0xaa0 [ 478.407736][T12676] do_user_addr_fault+0x7a3/0x13f0 [ 478.407774][T12676] exc_page_fault+0x5c/0xc0 [ 478.407800][T12676] asm_exc_page_fault+0x26/0x30 [ 478.407830][T12676] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 478.407864][T12676] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 478.407886][T12676] RSP: 0018:ffffc9000c177da0 EFLAGS: 00050202 [ 478.407912][T12676] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000055 [ 478.407927][T12676] RDX: fffff5200182efce RSI: 0000000000000000 RDI: ffffc9000c177e18 [ 478.407942][T12676] RBP: 0000000000000055 R08: 0000000000000001 R09: fffff5200182efcd [ 478.407957][T12676] R10: ffffc9000c177e6c R11: 0000000000000000 R12: 0000000000000000 [ 478.407971][T12676] R13: ffffc9000c177e18 R14: 0000000000000055 R15: 0000000000000000 [ 478.408003][T12676] _copy_from_user+0x98/0xd0 [ 478.408028][T12676] move_addr_to_kernel+0x68/0x160 [ 478.408056][T12676] __sys_connect+0xb0/0x170 [ 478.408082][T12676] ? __pfx___sys_connect+0x10/0x10 [ 478.408125][T12676] ? __pfx_ksys_write+0x10/0x10 [ 478.408162][T12676] __x64_sys_connect+0x72/0xb0 [ 478.408187][T12676] ? lockdep_hardirqs_on+0x7c/0x110 [ 478.408211][T12676] do_syscall_64+0xcd/0x250 [ 478.408239][T12676] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 478.408269][T12676] RIP: 0033:0x7f6893f8cde9 [ 478.408287][T12676] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 478.408308][T12676] RSP: 002b:00007f6894d5a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 478.408329][T12676] RAX: ffffffffffffffda RBX: 00007f68941a5fa0 RCX: 00007f6893f8cde9 [ 478.408344][T12676] RDX: 0000000000000055 RSI: 0000000000000000 RDI: 0000000000000003 [ 478.408358][T12676] RBP: 00007f6894d5a090 R08: 0000000000000000 R09: 0000000000000000 [ 478.408372][T12676] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 478.408385][T12676] R13: 0000000000000000 R14: 00007f68941a5fa0 R15: 00007ffc6882a698 [ 478.408417][T12676] [ 479.422408][T12677] tty tty12: ldisc open failed (-12), clearing slot 11 [ 482.034922][T12761] openvswitch: netlink: IP tunnel dst address not specified [ 483.457091][T12793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1504'. [ 484.096195][ T6701] Bluetooth: hci4: Frame reassembly failed (-84) [ 484.670702][T12818] ubi0: attaching mtd0 [ 484.679167][T12818] ubi0: scanning is finished [ 484.695085][T12818] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 484.807143][T12818] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 486.094733][ T5838] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 488.948364][T12887] FAULT_INJECTION: forcing a failure. [ 488.948364][T12887] name failslab, interval 1, probability 0, space 0, times 0 [ 489.089136][T12887] CPU: 1 UID: 0 PID: 12887 Comm: syz.0.1526 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 489.089165][T12887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 489.089178][T12887] Call Trace: [ 489.089184][T12887] [ 489.089193][T12887] dump_stack_lvl+0x16c/0x1f0 [ 489.089225][T12887] should_fail_ex+0x50a/0x650 [ 489.089258][T12887] ? fs_reclaim_acquire+0xae/0x150 [ 489.089289][T12887] should_failslab+0xc2/0x120 [ 489.089324][T12887] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 489.089359][T12887] ? rcu_is_watching+0x12/0xc0 [ 489.089382][T12887] ? security_file_alloc+0x34/0x2b0 [ 489.089417][T12887] security_file_alloc+0x34/0x2b0 [ 489.089446][T12887] init_file+0x93/0x4c0 [ 489.089469][T12887] alloc_empty_file+0x91/0x1e0 [ 489.089494][T12887] alloc_file_pseudo+0x13b/0x230 [ 489.089519][T12887] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 489.089544][T12887] ? tipc_sk_finish_conn+0x580/0x790 [ 489.089576][T12887] sock_alloc_file+0x50/0x210 [ 489.089610][T12887] __sys_socketpair+0x31d/0x5a0 [ 489.089638][T12887] ? __pfx___sys_socketpair+0x10/0x10 [ 489.089663][T12887] ? xfd_validate_state+0x5d/0x180 [ 489.089696][T12887] ? rcu_is_watching+0x12/0xc0 [ 489.089725][T12887] __x64_sys_socketpair+0x96/0x100 [ 489.089750][T12887] ? lockdep_hardirqs_on+0x7c/0x110 [ 489.089775][T12887] do_syscall_64+0xcd/0x250 [ 489.089804][T12887] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.089835][T12887] RIP: 0033:0x7f6893f8cde9 [ 489.089854][T12887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.089875][T12887] RSP: 002b:00007f6894d18038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 489.089898][T12887] RAX: ffffffffffffffda RBX: 00007f68941a6160 RCX: 00007f6893f8cde9 [ 489.089914][T12887] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 000000000000001e [ 489.089928][T12887] RBP: 00007f689400e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 489.089942][T12887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 489.089956][T12887] R13: 0000000000000000 R14: 00007f68941a6160 R15: 00007ffc6882a698 [ 489.089986][T12887] [ 491.184742][T12924] can0: slcan on ptm0. [ 491.647871][T12937] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1535'. [ 492.155246][T12919] can0 (unregistered): slcan off ptm0. [ 492.796137][T12975] FAULT_INJECTION: forcing a failure. [ 492.796137][T12975] name failslab, interval 1, probability 0, space 0, times 0 [ 492.870392][T12975] CPU: 1 UID: 0 PID: 12975 Comm: syz.0.1542 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 492.870427][T12975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 492.870441][T12975] Call Trace: [ 492.870448][T12975] [ 492.870459][T12975] dump_stack_lvl+0x16c/0x1f0 [ 492.870495][T12975] should_fail_ex+0x50a/0x650 [ 492.870531][T12975] ? fs_reclaim_acquire+0xae/0x150 [ 492.870567][T12975] should_failslab+0xc2/0x120 [ 492.870604][T12975] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 492.870645][T12975] ? sysctl_route_net_init+0x42/0x2c0 [ 492.870676][T12975] ? register_net_sysctl_sz+0x228/0x3e0 [ 492.870704][T12975] ? __pfx_sysctl_route_net_init+0x10/0x10 [ 492.870736][T12975] kmemdup_noprof+0x29/0x60 [ 492.870767][T12975] sysctl_route_net_init+0x42/0x2c0 [ 492.870799][T12975] ? __pfx_sysctl_route_net_init+0x10/0x10 [ 492.870838][T12975] ops_init+0x1df/0x5f0 [ 492.870877][T12975] setup_net+0x21f/0x860 [ 492.870915][T12975] ? __pfx_setup_net+0x10/0x10 [ 492.870946][T12975] ? down_read_killable+0xcc/0x380 [ 492.870977][T12975] ? __pfx_down_read_killable+0x10/0x10 [ 492.871007][T12975] ? __raw_spin_lock_init+0x3a/0x110 [ 492.871046][T12975] ? debug_mutex_init+0x37/0x70 [ 492.871075][T12975] copy_net_ns+0x2b4/0x6c0 [ 492.871118][T12975] create_new_namespaces+0x3ea/0xad0 [ 492.871164][T12975] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 492.871204][T12975] ksys_unshare+0x45d/0xa40 [ 492.871230][T12975] ? __pfx_ksys_unshare+0x10/0x10 [ 492.871254][T12975] ? xfd_validate_state+0x5d/0x180 [ 492.871300][T12975] __x64_sys_unshare+0x31/0x40 [ 492.871323][T12975] do_syscall_64+0xcd/0x250 [ 492.871355][T12975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 492.871389][T12975] RIP: 0033:0x7f6893f8cde9 [ 492.871409][T12975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 492.871433][T12975] RSP: 002b:00007f6894d5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 492.871455][T12975] RAX: ffffffffffffffda RBX: 00007f68941a5fa0 RCX: 00007f6893f8cde9 [ 492.871472][T12975] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 492.871487][T12975] RBP: 00007f689400e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 492.871502][T12975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 492.871516][T12975] R13: 0000000000000000 R14: 00007f68941a5fa0 R15: 00007ffc6882a698 [ 492.871550][T12975] [ 493.778193][ T29] audit: type=1800 audit(8277292119.010:16): pid=12989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1544" name="dbroot" dev="configfs" ino=39785 res=0 errno=0 [ 493.788430][T12989] Process accounting resumed [ 493.816983][T12992] zswap: compressor not available [ 494.085493][T13012] bridge0: port 3(team0) entered blocking state [ 494.147747][T13012] bridge0: port 3(team0) entered disabled state [ 494.154959][T13012] team0: entered allmulticast mode [ 494.160694][T13012] team_slave_0: entered allmulticast mode [ 494.172388][T13012] team_slave_1: entered allmulticast mode [ 494.184006][T13012] team0: entered promiscuous mode [ 494.190058][T13012] team_slave_0: entered promiscuous mode [ 494.196516][T13012] team_slave_1: entered promiscuous mode [ 494.203357][T13012] bridge0: port 3(team0) entered blocking state [ 494.210358][T13012] bridge0: port 3(team0) entered forwarding state [ 495.518632][T13034] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1554'. [ 496.653592][T13067] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1561'. [ 496.742127][T13067] hsr_slave_1 (unregistering): left promiscuous mode [ 497.881055][T13098] openvswitch: netlink: Duplicate or invalid key (type 1). [ 498.053004][T13108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1572'. [ 498.695982][T13117] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1574'. [ 499.690306][T13133] bridge0: port 4(vlan1) entered blocking state [ 499.714806][T13133] bridge0: port 4(vlan1) entered disabled state [ 499.752317][T13133] vlan1: entered allmulticast mode [ 499.775981][T13133] vlan1: entered promiscuous mode [ 499.797667][T13133] bridge0: port 4(vlan1) entered blocking state [ 499.804707][T13133] bridge0: port 4(vlan1) entered forwarding state [ 504.718141][T13269] openvswitch: netlink: Unknown nsh attribute 0 [ 507.000800][T13315] Invalid ELF header magic: != ELF [ 511.854836][ T5838] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 512.613184][T13460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1644'. [ 513.191318][T13467] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1645'. [ 513.288053][T13467] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1645'. [ 514.164920][T13473] netlink: 134 bytes leftover after parsing attributes in process `syz.1.1645'. [ 514.672675][T13487] netlink: zone id is out of range [ 514.704705][T13487] netlink: zone id is out of range [ 514.710369][T13487] netlink: zone id is out of range [ 514.786185][T13487] netlink: zone id is out of range [ 514.791911][T13487] netlink: zone id is out of range [ 514.858439][T13487] netlink: zone id is out of range [ 514.864112][T13487] netlink: zone id is out of range [ 515.009211][T13487] netlink: zone id is out of range [ 515.098377][T13487] netlink: zone id is out of range [ 515.104040][T13487] netlink: zone id is out of range [ 516.194554][T13508] Process accounting resumed [ 517.419686][T13524] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1656'. [ 518.514710][T13530] Process accounting resumed [ 520.069508][T13552] net_ratelimit: 22 callbacks suppressed [ 520.069529][T13552] netlink: zone id is out of range [ 520.236078][T13552] netlink: zone id is out of range [ 520.241759][T13552] netlink: zone id is out of range [ 520.285884][T13559] bridge0: port 3(team0) entered blocking state [ 520.328324][T13552] netlink: zone id is out of range [ 520.333989][T13552] netlink: zone id is out of range [ 520.345160][T13552] netlink: zone id is out of range [ 520.350905][T13552] netlink: zone id is out of range [ 520.360514][T13552] netlink: zone id is out of range [ 520.369600][T13559] bridge0: port 3(team0) entered disabled state [ 520.418373][T13559] team0: entered allmulticast mode [ 520.424062][T13559] team_slave_0: entered allmulticast mode [ 520.524662][T13552] netlink: zone id is out of range [ 520.534761][T13559] team_slave_1: entered allmulticast mode [ 520.544380][T13559] team0: entered promiscuous mode [ 520.575420][T13559] team_slave_0: entered promiscuous mode [ 520.581801][T13559] team_slave_1: entered promiscuous mode [ 520.595056][T13552] netlink: zone id is out of range [ 520.634331][T13559] bridge0: port 3(team0) entered blocking state [ 520.641335][T13559] bridge0: port 3(team0) entered forwarding state [ 522.248839][T13573] svc: failed to register nfsdv3 RPC service (errno 111). [ 522.356222][T13573] svc: failed to register nfsaclv3 RPC service (errno 111). [ 523.131513][T13585] ptrace attach of "./syz-executor exec"[5830] was attempted by ""[13585] [ 523.498464][T13582] netlink: 346 bytes leftover after parsing attributes in process `syz.2.1672'. [ 525.032684][T13617] synth uevent: /bus/memstick: unknown uevent action string [ 525.324563][T13624] Device name cannot be null; rc = [-22] [ 526.175007][T13605] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 526.227510][T13631] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1684'. [ 526.737265][T13638] nbd: nbd7 already in use [ 526.905187][T13631] Process accounting resumed [ 526.943494][T13638] FAULT_INJECTION: forcing a failure. [ 526.943494][T13638] name failslab, interval 1, probability 0, space 0, times 0 [ 526.976367][T13638] CPU: 0 UID: 0 PID: 13638 Comm: syz.2.1686 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 526.976403][T13638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 526.976419][T13638] Call Trace: [ 526.976426][T13638] [ 526.976436][T13638] dump_stack_lvl+0x16c/0x1f0 [ 526.976471][T13638] should_fail_ex+0x50a/0x650 [ 526.976507][T13638] ? fs_reclaim_acquire+0xae/0x150 [ 526.976542][T13638] should_failslab+0xc2/0x120 [ 526.976580][T13638] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 526.976624][T13638] ? __xlate_proc_name+0x173/0x210 [ 526.976660][T13638] ? __proc_create+0x2c0/0x8b0 [ 526.976700][T13638] __proc_create+0x2c0/0x8b0 [ 526.976738][T13638] ? __pfx___proc_create+0x10/0x10 [ 526.976778][T13638] ? _raw_write_unlock+0x28/0x50 [ 526.976803][T13638] ? proc_register+0x314/0x5f0 [ 526.976844][T13638] proc_create_reg+0x7d/0x180 [ 526.976868][T13638] ? __pfx_fib_triestat_seq_show+0x10/0x10 [ 526.976908][T13638] proc_create_net_single+0x87/0x170 [ 526.976946][T13638] ? __pfx_proc_create_net_single+0x10/0x10 [ 526.976984][T13638] ? __pfx___netlink_kernel_create+0x10/0x10 [ 526.977017][T13638] ? fib_default_rule_add+0x342/0x420 [ 526.977049][T13638] fib_proc_init+0xa3/0x1b0 [ 526.977074][T13638] fib_net_init+0x279/0x3d0 [ 526.977101][T13638] ? __pfx_fib_net_init+0x10/0x10 [ 526.977130][T13638] ? __pfx_nl_fib_input+0x10/0x10 [ 526.977162][T13638] ? devinet_init_net+0x5c1/0x900 [ 526.977195][T13638] ? __pfx_fib_net_init+0x10/0x10 [ 526.977221][T13638] ops_init+0x1df/0x5f0 [ 526.977258][T13638] setup_net+0x21f/0x860 [ 526.977293][T13638] ? __pfx_setup_net+0x10/0x10 [ 526.977325][T13638] ? down_read_killable+0xcc/0x380 [ 526.977354][T13638] ? __pfx_down_read_killable+0x10/0x10 [ 526.977384][T13638] ? __raw_spin_lock_init+0x3a/0x110 [ 526.977424][T13638] ? debug_mutex_init+0x37/0x70 [ 526.977453][T13638] copy_net_ns+0x2b4/0x6c0 [ 526.977493][T13638] create_new_namespaces+0x3ea/0xad0 [ 526.977539][T13638] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 526.977579][T13638] ksys_unshare+0x45d/0xa40 [ 526.977611][T13638] ? __pfx_ksys_unshare+0x10/0x10 [ 526.977635][T13638] ? xfd_validate_state+0x5d/0x180 [ 526.977682][T13638] __x64_sys_unshare+0x31/0x40 [ 526.977706][T13638] do_syscall_64+0xcd/0x250 [ 526.977737][T13638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 526.977771][T13638] RIP: 0033:0x7ffb0118cde9 [ 526.977791][T13638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 526.977815][T13638] RSP: 002b:00007ffb0201a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 526.977839][T13638] RAX: ffffffffffffffda RBX: 00007ffb013a5fa0 RCX: 00007ffb0118cde9 [ 526.977856][T13638] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 526.977872][T13638] RBP: 00007ffb0120e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 526.977888][T13638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 526.977903][T13638] R13: 0000000000000000 R14: 00007ffb013a5fa0 R15: 00007ffc01225d98 [ 526.977936][T13638] [ 527.952154][T13652] [ 529.239362][T13678] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1695'. [ 530.017626][T13699] Invalid ELF header magic: != ELF [ 530.378669][T13719] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1703'. [ 530.437643][T13709] Invalid ELF header magic: != ELF [ 531.897695][T13743] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1709'. [ 532.611820][T13772] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1714'. [ 533.716252][ T5838] Bluetooth: hci1: unexpected subevent 0x01 length: 125 > 18 [ 533.724544][ T5838] Bluetooth: hci1: Invalid handle: 0x1e1a > 0x0eff [ 534.464474][T13819] net_ratelimit: 22 callbacks suppressed [ 534.464496][T13819] netlink: zone id is out of range [ 534.481091][T13819] netlink: zone id is out of range [ 534.490161][T13819] netlink: zone id is out of range [ 534.516992][T13819] netlink: zone id is out of range [ 534.522639][T13819] netlink: zone id is out of range [ 534.533150][T13819] netlink: zone id is out of range [ 534.540936][T13819] netlink: zone id is out of range [ 534.548592][T13819] netlink: zone id is out of range [ 534.555787][T13819] netlink: zone id is out of range [ 534.561431][T13819] netlink: zone id is out of range [ 536.457098][T13870] Process accounting resumed [ 536.606046][T13879] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1745'. [ 536.624999][T13879] ipvlan1: entered allmulticast mode [ 536.630962][T13879] veth0_vlan: entered allmulticast mode [ 537.742158][ T5838] Bluetooth: hci1: unexpected event 0x03 length: 725 > 11 [ 537.744752][ T5838] Bluetooth: hci1: Unable to find connection for big 0xd2 [ 538.008879][T13946] netlink: 'syz.1.1755': attribute type 11 has an invalid length. [ 542.461297][T14009] Invalid ELF header magic: != ELF [ 545.069072][T14046] ubi0: attaching mtd0 [ 545.076196][T14046] ubi0: scanning is finished [ 545.081301][T14046] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 545.325503][T14046] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 546.003040][T14056] FAULT_INJECTION: forcing a failure. [ 546.003040][T14056] name failslab, interval 1, probability 0, space 0, times 0 [ 546.024214][T14056] CPU: 1 UID: 0 PID: 14056 Comm: syz.3.1781 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 546.024247][T14056] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 546.024263][T14056] Call Trace: [ 546.024270][T14056] [ 546.024280][T14056] dump_stack_lvl+0x16c/0x1f0 [ 546.024313][T14056] should_fail_ex+0x50a/0x650 [ 546.024349][T14056] ? fs_reclaim_acquire+0xae/0x150 [ 546.024384][T14056] should_failslab+0xc2/0x120 [ 546.024425][T14056] __kmalloc_node_noprof+0xd1/0x510 [ 546.024463][T14056] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 546.024500][T14056] __kvmalloc_node_noprof+0xad/0x1a0 [ 546.024534][T14056] io_alloc_cache_init+0x33/0x170 [ 546.024571][T14056] io_uring_setup+0x5a7/0x2200 [ 546.024599][T14056] ? __pfx_io_uring_setup+0x10/0x10 [ 546.024622][T14056] ? do_futex+0x123/0x350 [ 546.024652][T14056] ? __pfx_do_futex+0x10/0x10 [ 546.024684][T14056] ? __pfx___might_resched+0x10/0x10 [ 546.024733][T14056] ? rcu_is_watching+0x12/0xc0 [ 546.024766][T14056] __x64_sys_io_uring_setup+0x98/0x140 [ 546.024793][T14056] do_syscall_64+0xcd/0x250 [ 546.024823][T14056] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.024856][T14056] RIP: 0033:0x7fe7ff38cde9 [ 546.024876][T14056] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.024898][T14056] RSP: 002b:00007fe8001d2038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 546.024922][T14056] RAX: ffffffffffffffda RBX: 00007fe7ff5a5fa0 RCX: 00007fe7ff38cde9 [ 546.024938][T14056] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 546.024953][T14056] RBP: 00007fe7ff40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 546.024967][T14056] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 546.024981][T14056] R13: 0000000000000000 R14: 00007fe7ff5a5fa0 R15: 00007fff58a2a918 [ 546.025012][T14056] [ 546.802338][T12809] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 550.706851][T14013] Process accounting resumed [ 550.754453][T14148] bridge0: port 3(team0) entered blocking state [ 550.786210][T14148] bridge0: port 3(team0) entered disabled state [ 550.817677][T14148] team0: entered allmulticast mode [ 551.031156][T14148] team_slave_0: entered allmulticast mode [ 551.088828][T14148] team_slave_1: entered allmulticast mode [ 551.140589][T14148] team0: entered promiscuous mode [ 551.267422][T14148] team_slave_0: entered promiscuous mode [ 551.326075][T14148] team_slave_1: entered promiscuous mode [ 551.358160][T14148] bridge0: port 3(team0) entered blocking state [ 551.365212][T14148] bridge0: port 3(team0) entered forwarding state [ 554.629236][T14196] FAULT_INJECTION: forcing a failure. [ 554.629236][T14196] name failslab, interval 1, probability 0, space 0, times 0 [ 554.643353][T14196] CPU: 1 UID: 0 PID: 14196 Comm: syz.2.1813 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 554.643383][T14196] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 554.643397][T14196] Call Trace: [ 554.643404][T14196] [ 554.643413][T14196] dump_stack_lvl+0x16c/0x1f0 [ 554.643447][T14196] should_fail_ex+0x50a/0x650 [ 554.643483][T14196] ? fs_reclaim_acquire+0xae/0x150 [ 554.643515][T14196] ? tomoyo_encode2+0x100/0x3e0 [ 554.643545][T14196] should_failslab+0xc2/0x120 [ 554.643581][T14196] __kmalloc_noprof+0xcb/0x510 [ 554.643624][T14196] tomoyo_encode2+0x100/0x3e0 [ 554.643659][T14196] tomoyo_encode+0x29/0x50 [ 554.643689][T14196] tomoyo_realpath_from_path+0x19d/0x720 [ 554.643731][T14196] tomoyo_check_open_permission+0x2ad/0x3c0 [ 554.643760][T14196] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 554.643800][T14196] ? lock_acquire.part.0+0x11b/0x380 [ 554.643833][T14196] ? find_held_lock+0x2d/0x110 [ 554.643876][T14196] ? __pfx_hook_file_open+0x10/0x10 [ 554.643905][T14196] ? lock_acquire+0x2f/0xb0 [ 554.643931][T14196] ? mnt_get_write_access+0x6a/0x300 [ 554.643960][T14196] tomoyo_file_open+0x6b/0x90 [ 554.643996][T14196] security_file_open+0x84/0x1e0 [ 554.644027][T14196] do_dentry_open+0x57c/0x1c40 [ 554.644070][T14196] vfs_open+0x82/0x3f0 [ 554.644091][T14196] ? may_open+0x1f2/0x400 [ 554.644120][T14196] path_openat+0x1e88/0x2d80 [ 554.644165][T14196] ? __pfx_path_openat+0x10/0x10 [ 554.644199][T14196] ? __pfx___lock_acquire+0x10/0x10 [ 554.644229][T14196] ? lock_acquire.part.0+0x11b/0x380 [ 554.644270][T14196] ? find_held_lock+0x2d/0x110 [ 554.644300][T14196] do_filp_open+0x20c/0x470 [ 554.644334][T14196] ? __pfx_do_filp_open+0x10/0x10 [ 554.644365][T14196] ? find_held_lock+0x2d/0x110 [ 554.644415][T14196] ? alloc_fd+0x41f/0x760 [ 554.644453][T14196] do_sys_openat2+0x17a/0x1e0 [ 554.644475][T14196] ? __pfx_do_sys_openat2+0x10/0x10 [ 554.644501][T14196] ? __sys_connect+0xf2/0x170 [ 554.644537][T14196] __x64_sys_openat+0x175/0x210 [ 554.644565][T14196] ? __pfx___x64_sys_openat+0x10/0x10 [ 554.644602][T14196] do_syscall_64+0xcd/0x250 [ 554.644632][T14196] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.644664][T14196] RIP: 0033:0x7ffb0118cde9 [ 554.644682][T14196] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.644704][T14196] RSP: 002b:00007ffb0201a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 554.644727][T14196] RAX: ffffffffffffffda RBX: 00007ffb013a5fa0 RCX: 00007ffb0118cde9 [ 554.644743][T14196] RDX: 0000000000048101 RSI: 0000400000000000 RDI: ffffffffffffff9c [ 554.644758][T14196] RBP: 00007ffb0120e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 554.644772][T14196] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 554.644785][T14196] R13: 0000000000000000 R14: 00007ffb013a5fa0 R15: 00007ffc01225d98 [ 554.644815][T14196] [ 554.970917][T14196] ERROR: Out of memory at tomoyo_realpath_from_path. [ 555.003310][T14196] ima: Unable to open file: /surit‹¯Ṛy/integrity?iqa/policy (-2) [ 555.004037][T14196] ima: policy update failed [ 555.194890][ T29] audit: type=1802 audit(8277292180.370:17): pid=14196 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1813" res=0 errno=0 [ 555.519867][T14223] ovs_: entered promiscuous mode [ 555.767538][T14231] FAULT_INJECTION: forcing a failure. [ 555.767538][T14231] name failslab, interval 1, probability 0, space 0, times 0 [ 555.847246][T14231] CPU: 0 UID: 0 PID: 14231 Comm: syz.0.1821 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 555.847280][T14231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 555.847293][T14231] Call Trace: [ 555.847299][T14231] [ 555.847309][T14231] dump_stack_lvl+0x16c/0x1f0 [ 555.847337][T14231] should_fail_ex+0x50a/0x650 [ 555.847366][T14231] ? fs_reclaim_acquire+0xae/0x150 [ 555.847392][T14231] ? tomoyo_supervisor+0x46c/0x1380 [ 555.847419][T14231] should_failslab+0xc2/0x120 [ 555.847450][T14231] __kmalloc_noprof+0xcb/0x510 [ 555.847476][T14231] ? tomoyo_profile+0x47/0x60 [ 555.847509][T14231] tomoyo_supervisor+0x46c/0x1380 [ 555.847542][T14231] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 555.847576][T14231] ? mark_held_locks+0x9f/0xe0 [ 555.847612][T14231] ? tomoyo_check_path_acl+0xad/0x210 [ 555.847635][T14231] ? tomoyo_check_acl+0x1f7/0x410 [ 555.847669][T14231] tomoyo_path_permission+0x270/0x3b0 [ 555.847694][T14231] tomoyo_check_open_permission+0x37d/0x3c0 [ 555.847717][T14231] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 555.847750][T14231] ? __pfx___lock_acquire+0x10/0x10 [ 555.847790][T14231] ? __pfx_hook_file_open+0x10/0x10 [ 555.847814][T14231] ? lock_acquire+0x2f/0xb0 [ 555.847842][T14231] tomoyo_file_open+0x6b/0x90 [ 555.847871][T14231] security_file_open+0x84/0x1e0 [ 555.847896][T14231] do_dentry_open+0x57c/0x1c40 [ 555.847926][T14231] ? inode_permission+0xdd/0x5f0 [ 555.847950][T14231] vfs_open+0x82/0x3f0 [ 555.847967][T14231] ? may_open+0x1f2/0x400 [ 555.847990][T14231] path_openat+0x1e88/0x2d80 [ 555.848027][T14231] ? __pfx_path_openat+0x10/0x10 [ 555.848053][T14231] ? __pfx___lock_acquire+0x10/0x10 [ 555.848077][T14231] ? lock_acquire.part.0+0x11b/0x380 [ 555.848103][T14231] ? find_held_lock+0x2d/0x110 [ 555.848126][T14231] do_filp_open+0x20c/0x470 [ 555.848153][T14231] ? __pfx_do_filp_open+0x10/0x10 [ 555.848184][T14231] ? find_held_lock+0x2d/0x110 [ 555.848223][T14231] ? alloc_fd+0x41f/0x760 [ 555.848256][T14231] do_sys_openat2+0x17a/0x1e0 [ 555.848276][T14231] ? __pfx_do_sys_openat2+0x10/0x10 [ 555.848306][T14231] __x64_sys_openat+0x175/0x210 [ 555.848326][T14231] ? __pfx___x64_sys_openat+0x10/0x10 [ 555.848357][T14231] do_syscall_64+0xcd/0x250 [ 555.848382][T14231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.848409][T14231] RIP: 0033:0x7f6893f8cde9 [ 555.848424][T14231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.848443][T14231] RSP: 002b:00007f6894d5a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 555.848462][T14231] RAX: ffffffffffffffda RBX: 00007f68941a5fa0 RCX: 00007f6893f8cde9 [ 555.848475][T14231] RDX: 0000000000000000 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 555.848488][T14231] RBP: 00007f689400e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 555.848500][T14231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.848511][T14231] R13: 0000000000000000 R14: 00007f68941a5fa0 R15: 00007ffc6882a698 [ 555.848537][T14231] [ 556.178790][ C0] vkms_vblank_simulate: vblank timer overrun [ 557.722727][T14263] Process accounting resumed [ 562.562700][T14403] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 562.654980][T14403] svc: failed to register nfsdv3 RPC service (errno 111). [ 562.685876][T14403] svc: failed to register nfsaclv3 RPC service (errno 111). [ 563.395598][T14427] netlink: 'syz.0.1856': attribute type 1 has an invalid length. [ 563.404148][T14427] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1856'. [ 566.623693][T14466] Process accounting paused [ 567.341717][T12809] Bluetooth: hci0: Malformed HCI Event: 0x22 [ 567.937795][T14502] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1873'. [ 572.520520][T14559] net_ratelimit: 26 callbacks suppressed [ 572.520541][T14559] openvswitch: netlink: Key 2 has unexpected len 206 expected 4 [ 579.085436][T14671] netlink: zone id is out of range [ 579.118984][T14671] netlink: zone id is out of range [ 579.166322][T14671] netlink: zone id is out of range [ 579.196054][T14671] netlink: zone id is out of range [ 579.214033][T14671] netlink: zone id is out of range [ 579.264637][T14671] netlink: zone id is out of range [ 579.324654][T14671] netlink: zone id is out of range [ 579.347960][T14671] netlink: zone id is out of range [ 579.364645][T14671] netlink: zone id is out of range [ 579.380504][T14671] netlink: zone id is out of range [ 579.409608][T12809] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 579.427091][T14676] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1908'. [ 579.445499][T14676] veth1_macvtap: left promiscuous mode [ 579.454813][T14676] macsec0: entered promiscuous mode [ 581.573834][T14707] Process accounting paused [ 586.416191][T12809] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 586.678967][T14784] Invalid ELF header magic: != ELF [ 586.779750][T14779] Process accounting resumed [ 587.906874][T14789] Process accounting paused [ 590.988097][T14866] FAULT_INJECTION: forcing a failure. [ 590.988097][T14866] name failslab, interval 1, probability 0, space 0, times 0 [ 591.027839][T14866] CPU: 0 UID: 0 PID: 14866 Comm: syz.3.1954 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 591.027877][T14866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 591.027892][T14866] Call Trace: [ 591.027900][T14866] [ 591.027909][T14866] dump_stack_lvl+0x16c/0x1f0 [ 591.027945][T14866] should_fail_ex+0x50a/0x650 [ 591.027983][T14866] ? fs_reclaim_acquire+0xae/0x150 [ 591.028016][T14866] should_failslab+0xc2/0x120 [ 591.028054][T14866] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 591.028090][T14866] ? fcntl_setlease+0xc7/0x5a0 [ 591.028123][T14866] fcntl_setlease+0xc7/0x5a0 [ 591.028150][T14866] ? __pfx_fcntl_setlease+0x10/0x10 [ 591.028187][T14866] ? __fget_files+0x1fc/0x3a0 [ 591.028225][T14866] do_fcntl+0x768/0x15b0 [ 591.028250][T14866] ? __pfx_do_fcntl+0x10/0x10 [ 591.028283][T14866] ? tomoyo_file_fcntl+0x6c/0xc0 [ 591.028323][T14866] __x64_sys_fcntl+0x170/0x200 [ 591.028352][T14866] do_syscall_64+0xcd/0x250 [ 591.028383][T14866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.028417][T14866] RIP: 0033:0x7fe7ff38cde9 [ 591.028438][T14866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.028462][T14866] RSP: 002b:00007fe8001d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 591.028485][T14866] RAX: ffffffffffffffda RBX: 00007fe7ff5a5fa0 RCX: 00007fe7ff38cde9 [ 591.028503][T14866] RDX: 9ec0000000000000 RSI: 0000000000000400 RDI: 0000000000000003 [ 591.028519][T14866] RBP: 00007fe7ff40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 591.028534][T14866] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 591.028548][T14866] R13: 0000000000000000 R14: 00007fe7ff5a5fa0 R15: 00007fff58a2a918 [ 591.028607][T14866] [ 591.718683][T14873] FAULT_INJECTION: forcing a failure. [ 591.718683][T14873] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 591.748651][T14873] CPU: 1 UID: 0 PID: 14873 Comm: syz.3.1956 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 591.748682][T14873] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 591.748694][T14873] Call Trace: [ 591.748701][T14873] [ 591.748709][T14873] dump_stack_lvl+0x16c/0x1f0 [ 591.748741][T14873] should_fail_ex+0x50a/0x650 [ 591.748778][T14873] _copy_from_user+0x2e/0xd0 [ 591.748801][T14873] restore_altstack+0x94/0x170 [ 591.748826][T14873] ? __pfx_restore_altstack+0x10/0x10 [ 591.748852][T14873] ? _raw_spin_unlock_irq+0x23/0x50 [ 591.748873][T14873] ? lockdep_hardirqs_on+0x7c/0x110 [ 591.748896][T14873] ? _raw_spin_unlock_irq+0x2e/0x50 [ 591.748916][T14873] ? set_current_blocked+0xdd/0x120 [ 591.748947][T14873] __do_sys_rt_sigreturn+0x13d/0x240 [ 591.748975][T14873] ? __pfx___do_sys_rt_sigreturn+0x10/0x10 [ 591.749009][T14873] do_syscall_64+0xcd/0x250 [ 591.749038][T14873] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.749069][T14873] RIP: 0033:0x7fe7ff328fb9 [ 591.749088][T14873] Code: 64 c7 00 16 00 00 00 b8 ff ff ff ff c3 0f 1f 40 00 90 66 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 c7 c0 0f 00 00 00 0f 05 <0f> 1f 80 00 00 00 00 48 81 ec 48 01 00 00 49 89 d0 64 48 8b 04 25 [ 591.749109][T14873] RSP: 002b:00007fe8001d1a80 EFLAGS: 00000246 ORIG_RAX: 000000000000000f [ 591.749131][T14873] RAX: ffffffffffffffda RBX: 00007fe7ff5a5fa0 RCX: 00007fe7ff328fb9 [ 591.749146][T14873] RDX: 00007fe8001d1a80 RSI: 00007fe8001d1bb0 RDI: 0000000000000011 [ 591.749161][T14873] RBP: 00007fe8001d2090 R08: 0000000000000000 R09: 0000000000000000 [ 591.749175][T14873] R10: 00004000000000c0 R11: 0000000000000246 R12: 0000000000000001 [ 591.749188][T14873] R13: 0000000000000000 R14: 00007fe7ff5a5fa0 R15: 00007fff58a2a918 [ 591.749216][T14873] [ 593.567446][T14906] can: request_module (can-proto-0) failed. [ 594.374210][T12809] Bluetooth: hci2: Malformed LE Event: 0x1d [ 594.416985][T14932] Invalid ELF header magic: != ELF [ 595.054281][T14949] net_ratelimit: 54 callbacks suppressed [ 595.054300][T14949] netlink: zone id is out of range [ 595.099479][T14949] netlink: zone id is out of range [ 595.119746][T14949] netlink: zone id is out of range [ 595.165434][T14949] netlink: zone id is out of range [ 595.219480][T14940] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1972'. [ 595.253587][T14949] netlink: zone id is out of range [ 595.260215][T14949] netlink: zone id is out of range [ 595.266933][T14949] netlink: zone id is out of range [ 595.272648][T14949] netlink: zone id is out of range [ 595.278823][T14949] netlink: zone id is out of range [ 595.284522][T14949] netlink: zone id is out of range [ 595.291709][T14940] geneve1: entered allmulticast mode [ 597.621211][T15000] FAULT_INJECTION: forcing a failure. [ 597.621211][T15000] name failslab, interval 1, probability 0, space 0, times 0 [ 597.688787][T15000] CPU: 0 UID: 0 PID: 15000 Comm: syz.3.1984 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 597.688822][T15000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 597.688837][T15000] Call Trace: [ 597.688844][T15000] [ 597.688854][T15000] dump_stack_lvl+0x16c/0x1f0 [ 597.688889][T15000] should_fail_ex+0x50a/0x650 [ 597.688926][T15000] ? fs_reclaim_acquire+0xae/0x150 [ 597.688959][T15000] ? open_substream+0xec/0x9b0 [ 597.688983][T15000] should_failslab+0xc2/0x120 [ 597.689020][T15000] __kmalloc_cache_noprof+0x68/0x410 [ 597.689052][T15000] ? trace_lock_acquire+0x14e/0x1f0 [ 597.689089][T15000] open_substream+0xec/0x9b0 [ 597.689113][T15000] ? lockdep_hardirqs_on+0x7c/0x110 [ 597.689143][T15000] rawmidi_open_priv+0x542/0x6e0 [ 597.689179][T15000] snd_rawmidi_open+0x4bf/0xbd0 [ 597.689215][T15000] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 597.689246][T15000] ? __pfx_default_wake_function+0x10/0x10 [ 597.689284][T15000] ? kobject_get_unless_zero+0x157/0x1e0 [ 597.689319][T15000] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 597.689348][T15000] snd_open+0x1fe/0x450 [ 597.689386][T15000] ? __pfx_snd_open+0x10/0x10 [ 597.689420][T15000] chrdev_open+0x237/0x6a0 [ 597.689463][T15000] ? __pfx_apparmor_file_open+0x10/0x10 [ 597.689495][T15000] ? __pfx_chrdev_open+0x10/0x10 [ 597.689534][T15000] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 597.689573][T15000] do_dentry_open+0x735/0x1c40 [ 597.689609][T15000] ? __pfx_chrdev_open+0x10/0x10 [ 597.689647][T15000] ? inode_permission+0xdd/0x5f0 [ 597.689676][T15000] vfs_open+0x82/0x3f0 [ 597.689697][T15000] ? may_open+0x1f2/0x400 [ 597.689726][T15000] path_openat+0x1e88/0x2d80 [ 597.689770][T15000] ? __pfx_path_openat+0x10/0x10 [ 597.689805][T15000] ? __pfx___lock_acquire+0x10/0x10 [ 597.689838][T15000] ? lock_acquire.part.0+0x11b/0x380 [ 597.689872][T15000] ? find_held_lock+0x2d/0x110 [ 597.689902][T15000] do_filp_open+0x20c/0x470 [ 597.689938][T15000] ? __pfx_do_filp_open+0x10/0x10 [ 597.689969][T15000] ? find_held_lock+0x2d/0x110 [ 597.690019][T15000] ? alloc_fd+0x41f/0x760 [ 597.690061][T15000] do_sys_openat2+0x17a/0x1e0 [ 597.690086][T15000] ? __pfx_do_sys_openat2+0x10/0x10 [ 597.690114][T15000] ? __sys_sendmsg+0x19a/0x220 [ 597.690157][T15000] __x64_sys_openat+0x175/0x210 [ 597.690182][T15000] ? __pfx___x64_sys_openat+0x10/0x10 [ 597.690222][T15000] do_syscall_64+0xcd/0x250 [ 597.690256][T15000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.690289][T15000] RIP: 0033:0x7fe7ff38cde9 [ 597.690309][T15000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.690333][T15000] RSP: 002b:00007fe8001d2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 597.690356][T15000] RAX: ffffffffffffffda RBX: 00007fe7ff5a5fa0 RCX: 00007fe7ff38cde9 [ 597.690371][T15000] RDX: 0000000000000001 RSI: 0000400000000000 RDI: ffffffffffffff9c [ 597.690386][T15000] RBP: 00007fe7ff40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 597.690400][T15000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.690413][T15000] R13: 0000000000000000 R14: 00007fe7ff5a5fa0 R15: 00007fff58a2a918 [ 597.690452][T15000] [ 598.045128][T15000] cougar: G6 mapped to space [ 598.842238][T15023] netlink: 1060 bytes leftover after parsing attributes in process `syz.0.1995'. [ 601.322667][T15053] lo: entered allmulticast mode [ 602.128663][T15048] lo: left allmulticast mode [ 603.299031][T15091] netlink: 492 bytes leftover after parsing attributes in process `syz.3.2011'. [ 603.331831][T15091] netlink: 492 bytes leftover after parsing attributes in process `syz.3.2011'. [ 606.800779][T12809] Bluetooth: hci0: ACL packet for unknown connection handle 3584 [ 607.906058][T15203] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2037'. [ 608.119994][T15203] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 608.155441][T15209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2040'. [ 608.201740][T12809] Bluetooth: hci2: unexpected event 0x3e length: 726 > 260 [ 608.201779][T12809] Bluetooth: hci2: unexpected subevent 0x0d length: 725 > 260 [ 608.221698][T12809] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 608.221898][T12809] Bluetooth: hci2: adv larger than maximum supported [ 608.231649][T12809] Bluetooth: hci2: adv larger than maximum supported [ 608.241028][T12809] Bluetooth: hci2: Unknown advertising packet type: 0x7f [ 608.248801][T12809] Bluetooth: hci2: Malformed LE Event: 0x0d [ 610.829038][T15244] delete_channel: no stack [ 611.873406][T15263] Process accounting resumed [ 612.475332][T15266] FAULT_INJECTION: forcing a failure. [ 612.475332][T15266] name failslab, interval 1, probability 0, space 0, times 0 [ 612.507157][T15266] CPU: 0 UID: 0 PID: 15266 Comm: syz.0.2053 Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 612.507194][T15266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 612.507210][T15266] Call Trace: [ 612.507218][T15266] [ 612.507228][T15266] dump_stack_lvl+0x16c/0x1f0 [ 612.507272][T15266] should_fail_ex+0x50a/0x650 [ 612.507310][T15266] ? fs_reclaim_acquire+0xae/0x150 [ 612.507345][T15266] ? copy_mount_options+0x55/0x190 [ 612.507371][T15266] should_failslab+0xc2/0x120 [ 612.507408][T15266] __kmalloc_cache_noprof+0x68/0x410 [ 612.507444][T15266] ? _copy_from_user+0x59/0xd0 [ 612.507471][T15266] copy_mount_options+0x55/0x190 [ 612.507500][T15266] __x64_sys_mount+0x1ad/0x310 [ 612.507537][T15266] ? __pfx___x64_sys_mount+0x10/0x10 [ 612.507585][T15266] do_syscall_64+0xcd/0x250 [ 612.507617][T15266] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 612.507651][T15266] RIP: 0033:0x7f6893f8cde9 [ 612.507670][T15266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 612.507694][T15266] RSP: 002b:00007f6894d5a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 612.507717][T15266] RAX: ffffffffffffffda RBX: 00007f68941a5fa0 RCX: 00007f6893f8cde9 [ 612.507733][T15266] RDX: 0000400000000100 RSI: 0000000000000000 RDI: 0000400000000040 [ 612.507749][T15266] RBP: 00007f689400e2a0 R08: 0000400000000140 R09: 0000000000000000 [ 612.507765][T15266] R10: 0000000000000005 R11: 0000000000000246 R12: 0000000000000000 [ 612.507779][T15266] R13: 0000000000000000 R14: 00007f68941a5fa0 R15: 00007ffc6882a698 [ 612.507811][T15266] [ 615.856672][T15310] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2064'. [ 615.866720][T15309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2064'. [ 616.071648][T15315] bond0: option all_slaves_active: invalid value (7) [ 616.810488][T15335] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2069'. [ 616.904861][T15336] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2069'. [ 617.498386][T15340] net_ratelimit: 22 callbacks suppressed [ 617.498407][T15340] netlink: zone id is out of range [ 617.541186][T15340] netlink: zone id is out of range [ 617.565455][T15340] netlink: zone id is out of range [ 617.571135][T15340] netlink: zone id is out of range [ 617.623620][T15340] netlink: zone id is out of range [ 617.654655][T15340] netlink: zone id is out of range [ 617.660311][T15340] netlink: zone id is out of range [ 617.689707][T15340] netlink: zone id is out of range [ 617.695945][T15340] netlink: zone id is out of range [ 617.701663][T15340] netlink: zone id is out of range [ 618.575386][T15370] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2077'. [ 618.780695][T15381] netlink: 'syz.3.2081': attribute type 1 has an invalid length. [ 618.789412][T15381] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2081'. [ 619.376474][T15375] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2079'. [ 621.455623][T15422] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2090'. [ 623.495349][T15478] net_ratelimit: 8 callbacks suppressed [ 623.495369][T15478] netlink: zone id is out of range [ 623.514595][T15478] netlink: zone id is out of range [ 623.520446][T15478] netlink: zone id is out of range [ 623.558455][T15478] netlink: zone id is out of range [ 623.564104][T15478] netlink: zone id is out of range [ 623.604668][T15478] netlink: zone id is out of range [ 623.610331][T15478] netlink: zone id is out of range [ 623.652367][T15478] netlink: zone id is out of range [ 623.674040][T15478] netlink: zone id is out of range [ 623.694187][T15478] netlink: zone id is out of range [ 624.095964][T15500] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7fe00 [ 624.228281][T15500] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 624.264681][T15500] memcg:ffff888064788081 [ 624.269404][T15500] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 624.298088][T15500] page_type: f5(slab) [ 624.302506][T15500] raw: 00fff00000000040 ffff88801b04f3c0 dead000000000122 0000000000000000 [ 624.334594][T15500] raw: 0000000000000000 0000000000080008 00000000f5000000 ffff888064788081 [ 624.344169][T15500] head: 00fff00000000040 ffff88801b04f3c0 dead000000000122 0000000000000000 [ 624.384678][T15500] head: 0000000000000000 0000000000080008 00000000f5000000 ffff888064788081 [ 624.394254][T15500] head: 00fff00000000003 ffffea0001ff8001 ffffffffffffffff 0000000000000000 [ 624.438294][T15500] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 624.464616][T15500] page dumped because: unmovable page [ 624.470573][T15500] page_owner tracks the page as allocated [ 624.494639][T15500] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 15292, tgid 15288 (syz.0.2059), ts 614153247479, free_ts 614098689571 [ 624.544641][T15500] post_alloc_hook+0x181/0x1b0 [ 624.549937][T15500] get_page_from_freelist+0xfce/0x2f80 [ 624.564606][T15500] __alloc_frozen_pages_noprof+0x221/0x2470 [ 624.594590][T15500] alloc_pages_mpol+0x1fc/0x540 [ 624.599996][T15500] new_slab+0x23d/0x330 [ 624.624667][T15500] ___slab_alloc+0xc5d/0x1720 [ 624.629891][T15500] __slab_alloc.constprop.0+0x56/0xb0 [ 624.654656][T15500] __kmalloc_noprof+0x2ec/0x510 [ 624.660042][T15500] __register_sysctl_table+0xb4/0x1910 [ 624.686464][T15500] __devinet_sysctl_register+0x1b5/0x360 [ 624.692705][T15500] devinet_sysctl_register+0x17b/0x200 [ 624.716446][T15500] inetdev_init+0x2b8/0x5a0 [ 624.721442][T15500] inetdev_event+0xc61/0x18a0 [ 624.755024][T15500] notifier_call_chain+0xb7/0x410 [ 624.760598][T15500] call_netdevice_notifiers_info+0xbe/0x140 [ 624.794647][T15500] register_netdevice+0x17c2/0x1eb0 [ 624.800529][T15500] page last free pid 15291 tgid 15290 stack trace: [ 624.824695][T15500] free_frozen_pages+0x6db/0xfb0 [ 624.830179][T15500] __put_partials+0x14c/0x170 [ 624.844586][T15500] qlist_free_all+0x4e/0x120 [ 624.852069][T15500] kasan_quarantine_reduce+0x195/0x1e0 [ 624.864635][T15500] __kasan_slab_alloc+0x69/0x90 [ 624.882542][T15500] __kmalloc_cache_noprof+0x243/0x410 [ 624.902844][T15500] mpls_dev_notify+0x346/0xa20 [ 624.914909][T15500] notifier_call_chain+0xb7/0x410 [ 624.920479][T15500] call_netdevice_notifiers_info+0xbe/0x140 [ 624.954640][T15500] register_netdevice+0x17c2/0x1eb0 [ 624.960408][T15500] register_netdev+0x34/0x50 [ 624.980954][T15500] ip6_tnl_init_net+0x296/0x4b0 [ 625.005575][T15500] ops_init+0x1df/0x5f0 [ 625.010205][T15500] setup_net+0x21f/0x860 [ 625.019544][T15500] copy_net_ns+0x2b4/0x6c0 [ 625.024457][T15500] create_new_namespaces+0x3ea/0xad0 [ 626.121454][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 626.133300][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 626.164594][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 626.195572][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 626.225611][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 626.249843][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 627.598146][T15529] chnl_net:caif_netlink_parms(): no params data found [ 628.074665][T15529] bridge0: port 1(bridge_slave_0) entered blocking state [ 628.082489][T15529] bridge0: port 1(bridge_slave_0) entered disabled state [ 628.115021][T15529] bridge_slave_0: entered allmulticast mode [ 628.127873][T15529] bridge_slave_0: entered promiscuous mode [ 628.194800][T15529] bridge0: port 2(bridge_slave_1) entered blocking state [ 628.202636][T15529] bridge0: port 2(bridge_slave_1) entered disabled state [ 628.235056][T15529] bridge_slave_1: entered allmulticast mode [ 628.256832][T15529] bridge_slave_1: entered promiscuous mode [ 628.334730][ T5838] Bluetooth: hci4: command tx timeout [ 628.425859][T15557] zswap: compressor not available [ 628.667981][T15529] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 628.688961][T15529] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 628.882815][T15529] team0: Port device team_slave_0 added [ 628.932924][T15529] team0: Port device team_slave_1 added [ 629.125905][T15529] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 629.162056][T15529] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.244593][T15529] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 629.278540][T15529] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 629.295480][T15529] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 629.414678][T15529] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 629.580065][T15529] hsr_slave_0: entered promiscuous mode [ 629.595509][T15529] hsr_slave_1: entered promiscuous mode [ 629.615325][T15529] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 629.649700][T15529] Cannot create hsr debugfs directory [ 630.181702][T15529] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 630.233073][T15529] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 630.245747][T15529] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 630.288024][T15529] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 630.414788][ T5838] Bluetooth: hci4: command tx timeout [ 630.708962][T15609] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2136'. [ 630.783840][T15529] 8021q: adding VLAN 0 to HW filter on device bond0 [ 630.813328][T15529] 8021q: adding VLAN 0 to HW filter on device team0 [ 630.826571][ T7143] bridge0: port 1(bridge_slave_0) entered blocking state [ 630.834380][ T7143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 631.064961][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.072793][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 631.337870][T15529] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 632.396672][T15529] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 632.494758][ T5838] Bluetooth: hci4: command tx timeout [ 633.906605][T15529] veth0_vlan: entered promiscuous mode [ 633.961906][T15529] veth1_vlan: entered promiscuous mode [ 634.011923][T15529] veth0_macvtap: entered promiscuous mode [ 634.022546][T15529] veth1_macvtap: entered promiscuous mode [ 634.071949][T15529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.107618][T15529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.167394][T15529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.219425][T15529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.244874][T15529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 634.279115][T15529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.311114][T15529] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 634.354746][T15677] tipc: Started in network mode [ 634.360134][T15677] tipc: Node identity ee00, cluster identity 4711 [ 634.384599][T15677] tipc: Node number set to 60928 [ 634.397938][T15529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.412888][T15529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.438481][T15529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.464557][T15529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.515140][T15529] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 634.544670][T15529] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 634.561363][T15529] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 634.579751][ T5838] Bluetooth: hci4: command tx timeout [ 635.004733][T15529] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.028207][T15529] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.067278][T15529] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.104600][T15529] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 635.417195][ T6701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.455117][ T6701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 635.533550][ T7144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 635.564714][ T7144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 637.490501][T15718] Invalid ELF header magic: != ELF [ 637.843026][T15736] block nbd8: NBD_DISCONNECT [ 639.708364][T15761] sp0: Synchronizing with TNC [ 640.146757][T15774] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2167'. [ 642.712640][T15801] Process accounting paused [ 644.069705][T15839] net_ratelimit: 15 callbacks suppressed [ 644.069725][T15839] netlink: zone id is out of range [ 644.136843][T15839] netlink: zone id is out of range [ 644.142559][T15839] netlink: zone id is out of range [ 644.155327][T15839] netlink: zone id is out of range [ 644.160978][T15839] netlink: zone id is out of range [ 644.176928][T15839] netlink: zone id is out of range [ 644.182690][T15839] netlink: zone id is out of range [ 644.188852][T15839] netlink: zone id is out of range [ 644.195009][T15839] netlink: zone id is out of range [ 644.204870][T15839] netlink: zone id is out of range [ 644.295345][T15848] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2183'. [ 644.338461][T15848] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2183'. [ 645.313725][T15864] ptrace attach of "./syz-executor exec"[15529] was attempted by "./syz-executor exec"[15864] [ 645.414682][T15863] nbd2: detected capacity change from 0 to 68719476736 [ 645.438149][T10181] block nbd2: Send control failed (result -22) [ 645.489943][T10181] block nbd2: Request send failed, requeueing [ 645.535794][ T5838] block nbd2: Receive control failed (result -32) [ 645.544034][ T1161] block nbd2: Dead connection, failed to find a fallback [ 645.555423][ T1161] block nbd2: shutting down sockets [ 645.561595][ T1161] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 645.573734][ T1161] Buffer I/O error on dev nbd2, logical block 0, async page read [ 645.576219][ T5838] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 645.584648][T10181] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 645.606467][ T5838] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 645.624843][ T5838] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 645.636746][T10181] Buffer I/O error on dev nbd2, logical block 0, async page read [ 645.637618][ T5838] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 645.648451][T10181] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 645.728461][ T5838] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 645.736517][T10181] Buffer I/O error on dev nbd2, logical block 0, async page read [ 645.736630][ T5838] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 645.755286][T10181] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 645.765636][T10181] Buffer I/O error on dev nbd2, logical block 0, async page read [ 645.774274][T10181] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 645.789328][T10181] Buffer I/O error on dev nbd2, logical block 0, async page read [ 645.799749][T10181] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 645.811854][T10181] Buffer I/O error on dev nbd2, logical block 0, async page read [ 645.821743][T10181] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 645.920226][T10181] Buffer I/O error on dev nbd2, logical block 0, async page read [ 645.934415][T10181] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 645.952382][T10181] Buffer I/O error on dev nbd2, logical block 0, async page read [ 645.961464][T10181] ldm_validate_partition_table(): Disk read failed. [ 645.969301][T10181] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 645.979297][T10181] Buffer I/O error on dev nbd2, logical block 0, async page read [ 646.016628][T15879] Invalid ELF header magic: != ELF [ 646.028589][T10181] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 646.038641][T10181] Buffer I/O error on dev nbd2, logical block 0, async page read [ 646.050513][T10181] Dev nbd2: unable to read RDB block 0 [ 646.057233][T10181] nbd2: unable to read partition table [ 646.072359][T10181] ldm_validate_partition_table(): Disk read failed. [ 646.082064][T10181] Dev nbd2: unable to read RDB block 0 [ 646.088616][T10181] nbd2: unable to read partition table [ 646.097763][T10181] [ 646.100326][T10181] ====================================================== [ 646.108037][T10181] WARNING: possible circular locking dependency detected SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 646.115749][T10181] 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 Not tainted [ 646.123564][T10181] ------------------------------------------------------ [ 646.131278][T10181] udevd/10181 is trying to acquire lock: [ 646.137462][T10181] ffff8881443d80a8 (&q->q_usage_counter(io)#51){++++}-{0:0}, at: __submit_bio+0x3d1/0x690 [ 646.148388][T10181] [ 646.148388][T10181] but task is already holding lock: [ 646.156478][T10181] ffff888148c80940 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_unbounded+0x173/0x7d0 [ 646.168351][T10181] [ 646.168351][T10181] which lock already depends on the new lock. [ 646.168351][T10181] [ 646.179774][T10181] [ 646.179774][T10181] the existing dependency chain (in reverse order) is: [ 646.189672][T10181] [ 646.189672][T10181] -> #6 (mapping.invalidate_lock#2){++++}-{4:4}: [ 646.199038][T10181] down_read+0x9a/0x330 [ 646.204177][T10181] filemap_fault+0x2e7/0x2ca0 [ 646.209889][T10181] __do_fault+0x10a/0x490 [ 646.215214][T10181] do_pte_missing+0xecf/0x3e10 [ 646.221023][T10181] __handle_mm_fault+0x1166/0x2c60 [ 646.227213][T10181] handle_mm_fault+0x3fa/0xaa0 [ 646.233025][T10181] __get_user_pages+0x773/0x36f0 [ 646.239022][T10181] populate_vma_page_range+0x27f/0x3a0 [ 646.245599][T10181] __mm_populate+0x1d6/0x380 [ 646.251215][T10181] vm_mmap_pgoff+0x2d3/0x3a0 [ 646.256833][T10181] ksys_mmap_pgoff+0x32c/0x5c0 [ 646.262636][T10181] __x64_sys_mmap+0x125/0x190 [ 646.268346][T10181] do_syscall_64+0xcd/0x250 [ 646.273862][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.280914][T10181] [ 646.280914][T10181] -> #5 (&mm->mmap_lock){++++}-{4:4}: [ 646.289216][T10181] __might_fault+0x11b/0x190 [ 646.294824][T10181] _copy_from_user+0x29/0xd0 [ 646.300430][T10181] csum_and_copy_from_iter_full+0x218/0x1e20 [ 646.307570][T10181] ip_generic_getfrag+0x175/0x260 [ 646.313659][T10181] raw6_getfrag+0x22d/0x2a0 [ 646.319184][T10181] __ip6_append_data.isra.0+0x3dca/0x4650 [ 646.326037][T10181] ip6_append_data+0x1e6/0x500 [ 646.331837][T10181] rawv6_sendmsg+0x15c9/0x4610 [ 646.337637][T10181] inet_sendmsg+0x119/0x140 [ 646.343157][T10181] ____sys_sendmsg+0x98c/0xc90 [ 646.348953][T10181] ___sys_sendmsg+0x135/0x1e0 [ 646.354670][T10181] __sys_sendmsg+0x16e/0x220 [ 646.360291][T10181] do_syscall_64+0xcd/0x250 [ 646.365806][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.372856][T10181] [ 646.372856][T10181] -> #4 (sk_lock-AF_INET6){+.+.}-{0:0}: [ 646.381349][T10181] lock_sock_nested+0x3a/0xf0 [ 646.387057][T10181] inet_autobind+0x1a/0x1a0 [ 646.392573][T10181] inet_send_prepare+0x317/0x530 [ 646.398567][T10181] inet_sendmsg+0x43/0x140 [ 646.403987][T10181] sock_sendmsg+0x389/0x490 [ 646.409503][T10181] __sock_xmit+0x1e8/0x4f0 [ 646.414934][T10181] nbd_send_cmd+0x8ec/0x1c90 [ 646.420543][T10181] nbd_queue_rq+0x941/0x1220 [ 646.426152][T10181] blk_mq_dispatch_rq_list+0x443/0x1dc0 [ 646.432815][T10181] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 646.440343][T10181] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 646.447488][T10181] blk_mq_run_hw_queue+0x239/0x670 [ 646.453683][T10181] blk_mq_flush_plug_list+0x673/0x1c60 [ 646.460246][T10181] __blk_flush_plug+0x2c5/0x4b0 [ 646.466143][T10181] __submit_bio+0x547/0x690 [ 646.471652][T10181] submit_bio_noacct_nocheck+0x698/0xd70 [ 646.478406][T10181] submit_bio_noacct+0x50d/0x1ec0 [ 646.484498][T10181] block_read_full_folio+0x812/0xa50 [ 646.490889][T10181] filemap_read_folio+0xc6/0x2a0 [ 646.496881][T10181] do_read_cache_folio+0x263/0x5c0 [ 646.503067][T10181] read_part_sector+0xd4/0x310 [ 646.508873][T10181] adfspart_check_ICS+0x94/0x940 [ 646.514871][T10181] bdev_disk_changed+0x71f/0x1520 [ 646.520962][T10181] blkdev_get_whole+0x187/0x290 [ 646.526860][T10181] bdev_open+0x2c7/0xe20 [ 646.532090][T10181] blkdev_open+0x272/0x3f0 [ 646.537513][T10181] do_dentry_open+0x735/0x1c40 [ 646.543318][T10181] vfs_open+0x82/0x3f0 [ 646.548354][T10181] path_openat+0x1e88/0x2d80 [ 646.553968][T10181] do_filp_open+0x20c/0x470 [ 646.559483][T10181] do_sys_openat2+0x17a/0x1e0 [ 646.565191][T10181] __x64_sys_openat+0x175/0x210 [ 646.571085][T10181] do_syscall_64+0xcd/0x250 [ 646.576601][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.583649][T10181] [ 646.583649][T10181] -> #3 (&nsock->tx_lock){+.+.}-{4:4}: [ 646.592046][T10181] __mutex_lock+0x19b/0xb10 [ 646.597562][T10181] nbd_queue_rq+0x424/0x1220 [ 646.603170][T10181] blk_mq_dispatch_rq_list+0x443/0x1dc0 [ 646.609836][T10181] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 646.617366][T10181] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 646.624518][T10181] blk_mq_run_hw_queue+0x239/0x670 [ 646.630724][T10181] blk_mq_flush_plug_list+0x673/0x1c60 [ 646.637307][T10181] __blk_flush_plug+0x2c5/0x4b0 [ 646.643214][T10181] __submit_bio+0x547/0x690 [ 646.648739][T10181] submit_bio_noacct_nocheck+0x698/0xd70 [ 646.655500][T10181] submit_bio_noacct+0x50d/0x1ec0 [ 646.661587][T10181] block_read_full_folio+0x812/0xa50 [ 646.667975][T10181] filemap_read_folio+0xc6/0x2a0 [ 646.673978][T10181] do_read_cache_folio+0x263/0x5c0 [ 646.680171][T10181] read_part_sector+0xd4/0x310 [ 646.685982][T10181] adfspart_check_ICS+0x94/0x940 [ 646.691983][T10181] bdev_disk_changed+0x71f/0x1520 [ 646.698075][T10181] blkdev_get_whole+0x187/0x290 [ 646.703972][T10181] bdev_open+0x2c7/0xe20 [ 646.709201][T10181] blkdev_open+0x272/0x3f0 [ 646.714620][T10181] do_dentry_open+0x735/0x1c40 [ 646.720425][T10181] vfs_open+0x82/0x3f0 [ 646.725460][T10181] path_openat+0x1e88/0x2d80 [ 646.731076][T10181] do_filp_open+0x20c/0x470 [ 646.736597][T10181] do_sys_openat2+0x17a/0x1e0 [ 646.742299][T10181] __x64_sys_openat+0x175/0x210 [ 646.748199][T10181] do_syscall_64+0xcd/0x250 [ 646.753713][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.760784][T10181] [ 646.760784][T10181] -> #2 (&cmd->lock){+.+.}-{4:4}: [ 646.768712][T10181] __mutex_lock+0x19b/0xb10 [ 646.774238][T10181] nbd_queue_rq+0xbe/0x1220 [ 646.779758][T10181] blk_mq_dispatch_rq_list+0x443/0x1dc0 [ 646.786424][T10181] __blk_mq_sched_dispatch_requests+0xcdf/0x1620 [ 646.793956][T10181] blk_mq_sched_dispatch_requests+0xd8/0x1b0 [ 646.801106][T10181] blk_mq_run_hw_queue+0x239/0x670 [ 646.807300][T10181] blk_mq_flush_plug_list+0x673/0x1c60 [ 646.813864][T10181] __blk_flush_plug+0x2c5/0x4b0 [ 646.819760][T10181] __submit_bio+0x547/0x690 [ 646.825272][T10181] submit_bio_noacct_nocheck+0x698/0xd70 [ 646.832026][T10181] submit_bio_noacct+0x50d/0x1ec0 [ 646.838113][T10181] block_read_full_folio+0x812/0xa50 [ 646.844497][T10181] filemap_read_folio+0xc6/0x2a0 [ 646.850497][T10181] do_read_cache_folio+0x263/0x5c0 [ 646.856683][T10181] read_part_sector+0xd4/0x310 [ 646.862494][T10181] adfspart_check_ICS+0x94/0x940 [ 646.868498][T10181] bdev_disk_changed+0x71f/0x1520 [ 646.874593][T10181] blkdev_get_whole+0x187/0x290 [ 646.880499][T10181] bdev_open+0x2c7/0xe20 [ 646.885725][T10181] blkdev_open+0x272/0x3f0 [ 646.891145][T10181] do_dentry_open+0x735/0x1c40 [ 646.896950][T10181] vfs_open+0x82/0x3f0 [ 646.901982][T10181] path_openat+0x1e88/0x2d80 [ 646.907596][T10181] do_filp_open+0x20c/0x470 [ 646.913113][T10181] do_sys_openat2+0x17a/0x1e0 [ 646.918815][T10181] __x64_sys_openat+0x175/0x210 [ 646.924710][T10181] do_syscall_64+0xcd/0x250 [ 646.930228][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 646.937279][T10181] [ 646.937279][T10181] -> #1 (set->srcu){.+.+}-{0:0}: [ 646.945106][T10181] __synchronize_srcu+0xa9/0x2a0 [ 646.951108][T10181] blk_mq_update_nr_requests+0x288/0x670 [ 646.957869][T10181] queue_requests_store+0x161/0x210 [ 646.964149][T10181] queue_attr_store+0x370/0x510 [ 646.970047][T10181] sysfs_kf_write+0x117/0x170 [ 646.975751][T10181] kernfs_fop_write_iter+0x33d/0x500 [ 646.982122][T10181] vfs_write+0x5ae/0x1150 [ 646.987446][T10181] ksys_write+0x12b/0x250 [ 646.992775][T10181] do_syscall_64+0xcd/0x250 [ 646.998289][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.005339][T10181] [ 647.005339][T10181] -> #0 (&q->q_usage_counter(io)#51){++++}-{0:0}: [ 647.014796][T10181] __lock_acquire+0x249e/0x3c40 [ 647.020697][T10181] lock_acquire.part.0+0x11b/0x380 [ 647.026886][T10181] blk_mq_submit_bio+0x20db/0x25f0 [ 647.033068][T10181] __submit_bio+0x3d1/0x690 [ 647.038581][T10181] submit_bio_noacct_nocheck+0x698/0xd70 [ 647.045337][T10181] submit_bio_noacct+0x50d/0x1ec0 [ 647.051420][T10181] mpage_readahead+0x41d/0x590 [ 647.057220][T10181] read_pages+0x1a7/0xc60 [ 647.062545][T10181] page_cache_ra_unbounded+0x426/0x7d0 [ 647.069111][T10181] force_page_cache_ra+0x24b/0x340 [ 647.075292][T10181] page_cache_sync_ra+0x158/0xa30 [ 647.081380][T10181] filemap_get_pages+0xb62/0x1c30 [ 647.087475][T10181] filemap_read+0x3c5/0xe70 [ 647.092992][T10181] blkdev_read_iter+0x187/0x4b0 [ 647.098891][T10181] vfs_read+0x886/0xbf0 [ 647.104024][T10181] ksys_read+0x12b/0x250 [ 647.109254][T10181] do_syscall_64+0xcd/0x250 [ 647.114768][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.121817][T10181] [ 647.121817][T10181] other info that might help us debug this: [ 647.121817][T10181] [ 647.133048][T10181] Chain exists of: [ 647.133048][T10181] &q->q_usage_counter(io)#51 --> &mm->mmap_lock --> mapping.invalidate_lock#2 [ 647.133048][T10181] [ 647.149316][T10181] Possible unsafe locking scenario: [ 647.149316][T10181] [ 647.157502][T10181] CPU0 CPU1 [ 647.163396][T10181] ---- ---- [ 647.169285][T10181] rlock(mapping.invalidate_lock#2); [ 647.175192][T10181] lock(&mm->mmap_lock); [ 647.182711][T10181] lock(mapping.invalidate_lock#2); [ 647.191290][T10181] rlock(&q->q_usage_counter(io)#51); [ 647.197286][T10181] [ 647.197286][T10181] *** DEADLOCK *** [ 647.197286][T10181] [ 647.206222][T10181] 1 lock held by udevd/10181: [ 647.211343][T10181] #0: ffff888148c80940 (mapping.invalidate_lock#2){++++}-{4:4}, at: page_cache_ra_unbounded+0x173/0x7d0 [ 647.223694][T10181] [ 647.223694][T10181] stack backtrace: [ 647.230150][T10181] CPU: 1 UID: 0 PID: 10181 Comm: udevd Not tainted 6.14.0-rc2-syzkaller-00185-g128c8f96eb86 #0 [ 647.230172][T10181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 647.230184][T10181] Call Trace: [ 647.230190][T10181] [ 647.230198][T10181] dump_stack_lvl+0x116/0x1f0 [ 647.230222][T10181] print_circular_bug+0x490/0x760 [ 647.230249][T10181] check_noncircular+0x31a/0x400 [ 647.230273][T10181] ? __pfx_check_noncircular+0x10/0x10 [ 647.230297][T10181] ? __kernel_text_address+0xd/0x40 [ 647.230323][T10181] ? unwind_get_return_address+0x59/0xa0 [ 647.230353][T10181] ? lockdep_lock+0xc6/0x200 [ 647.230373][T10181] ? __pfx_lockdep_lock+0x10/0x10 [ 647.230395][T10181] __lock_acquire+0x249e/0x3c40 [ 647.230424][T10181] ? __pfx___lock_acquire+0x10/0x10 [ 647.230449][T10181] ? hlock_class+0x4e/0x130 [ 647.230467][T10181] ? mark_lock+0xb5/0xc60 [ 647.230489][T10181] ? page_cache_ra_unbounded+0x426/0x7d0 [ 647.230516][T10181] ? page_cache_sync_ra+0x158/0xa30 [ 647.230538][T10181] lock_acquire.part.0+0x11b/0x380 [ 647.230563][T10181] ? __submit_bio+0x3d1/0x690 [ 647.230583][T10181] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 647.230609][T10181] ? rcu_is_watching+0x12/0xc0 [ 647.230628][T10181] ? trace_lock_acquire+0x14e/0x1f0 [ 647.230649][T10181] ? __submit_bio+0x3d1/0x690 [ 647.230668][T10181] ? lock_acquire+0x2f/0xb0 [ 647.230691][T10181] ? __submit_bio+0x3d1/0x690 [ 647.230711][T10181] blk_mq_submit_bio+0x20db/0x25f0 [ 647.230732][T10181] ? __submit_bio+0x3d1/0x690 [ 647.230752][T10181] ? __pfx_blk_mq_submit_bio+0x10/0x10 [ 647.230773][T10181] ? mark_lock+0xb5/0xc60 [ 647.230797][T10181] ? __pfx___lock_acquire+0x10/0x10 [ 647.230821][T10181] ? trace_lock_acquire+0x14e/0x1f0 [ 647.230842][T10181] ? __pfx_mark_lock+0x10/0x10 [ 647.230865][T10181] ? find_held_lock+0x2d/0x110 [ 647.230887][T10181] __submit_bio+0x3d1/0x690 [ 647.230906][T10181] ? __pfx___submit_bio+0x10/0x10 [ 647.230928][T10181] ? ktime_get+0x200/0x310 [ 647.230950][T10181] ? lockdep_hardirqs_on+0x7c/0x110 [ 647.230972][T10181] ? submit_bio_noacct_nocheck+0x698/0xd70 [ 647.230992][T10181] submit_bio_noacct_nocheck+0x698/0xd70 [ 647.231014][T10181] ? __pfx_submit_bio_noacct_nocheck+0x10/0x10 [ 647.231036][T10181] ? __pfx___might_resched+0x10/0x10 [ 647.231066][T10181] submit_bio_noacct+0x50d/0x1ec0 [ 647.231089][T10181] mpage_readahead+0x41d/0x590 [ 647.231109][T10181] ? __pfx_mpage_readahead+0x10/0x10 [ 647.231134][T10181] ? __pfx_blkdev_get_block+0x10/0x10 [ 647.231157][T10181] ? __folio_batch_add_and_move+0x5f3/0xc60 [ 647.231182][T10181] ? __pfx_lock_release+0x10/0x10 [ 647.231206][T10181] ? trace_lock_acquire+0x14e/0x1f0 [ 647.231226][T10181] ? __pfx_blkdev_readahead+0x10/0x10 [ 647.231249][T10181] read_pages+0x1a7/0xc60 [ 647.231267][T10181] ? __folio_batch_add_and_move+0x689/0xc60 [ 647.231294][T10181] ? __pfx_read_pages+0x10/0x10 [ 647.231319][T10181] page_cache_ra_unbounded+0x426/0x7d0 [ 647.231345][T10181] force_page_cache_ra+0x24b/0x340 [ 647.231368][T10181] page_cache_sync_ra+0x158/0xa30 [ 647.231389][T10181] ? __lock_acquire+0xcc5/0x3c40 [ 647.231414][T10181] filemap_get_pages+0xb62/0x1c30 [ 647.231443][T10181] ? __pfx_filemap_get_pages+0x10/0x10 [ 647.231469][T10181] ? __pfx___might_resched+0x10/0x10 [ 647.231498][T10181] filemap_read+0x3c5/0xe70 [ 647.231525][T10181] ? trace_lock_acquire+0x14e/0x1f0 [ 647.231550][T10181] ? __pfx_filemap_read+0x10/0x10 [ 647.231584][T10181] ? apparmor_file_permission+0x251/0x400 [ 647.231606][T10181] blkdev_read_iter+0x187/0x4b0 [ 647.231630][T10181] vfs_read+0x886/0xbf0 [ 647.231656][T10181] ? __pfx_vfs_read+0x10/0x10 [ 647.231681][T10181] ? blkdev_llseek+0x9b/0xd0 [ 647.231702][T10181] ? __pfx_lock_release+0x10/0x10 [ 647.231729][T10181] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 647.231759][T10181] ksys_read+0x12b/0x250 [ 647.231783][T10181] ? __pfx_ksys_read+0x10/0x10 [ 647.231810][T10181] do_syscall_64+0xcd/0x250 [ 647.231832][T10181] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.231859][T10181] RIP: 0033:0x7f6ddbb16b6a [ 647.231875][T10181] Code: 00 3d 00 00 41 00 75 0d 50 48 8d 3d 2d 08 0a 00 e8 ea 7d 01 00 31 c0 e9 07 ff ff ff 64 8b 04 25 18 00 00 00 85 c0 75 1b 0f 05 <48> 3d 00 f0 ff ff 76 6c 48 8b 15 8f a2 0d 00 f7 d8 64 89 02 48 83 [ 647.231893][T10181] RSP: 002b:00007ffe25c56528 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 647.231911][T10181] RAX: ffffffffffffffda RBX: 00001fffffff0000 RCX: 00007f6ddbb16b6a [ 647.231924][T10181] RDX: 0000000000000040 RSI: 000055704c3e9d08 RDI: 0000000000000009 [ 647.231936][T10181] RBP: 0000000000000040 R08: 000055704c3e9ce0 R09: 0000000000000080 [ 647.231948][T10181] R10: 0000000000000015 R11: 0000000000000246 R12: 000055704c3e9ce0 [ 647.231961][T10181] R13: 000055704c3e9cf8 R14: 000055704c4145e8 R15: 000055704c414590 [ 647.231978][T10181] [ 647.867572][T15872] chnl_net:caif_netlink_parms(): no params data found [ 647.953867][ T5838] Bluetooth: hci5: command tx timeout [ 648.607990][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.720537][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.803267][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.857142][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 648.925485][ T12] team0: left allmulticast mode [ 648.930820][ T12] team_slave_0: left allmulticast mode [ 648.939311][ T12] team_slave_1: left allmulticast mode [ 648.947107][ T12] team0: left promiscuous mode [ 648.952359][ T12] team_slave_0: left promiscuous mode [ 648.958966][ T12] team_slave_1: left promiscuous mode [ 648.966955][ T12] bridge0: port 3(team0) entered disabled state [ 648.977844][ T12] bridge_slave_1: left allmulticast mode [ 648.984155][ T12] bridge_slave_1: left promiscuous mode [ 648.992102][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.001128][ T12] bridge_slave_0: left allmulticast mode [ 649.009019][ T12] bridge_slave_0: left promiscuous mode [ 649.015680][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.131618][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 649.143001][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 649.155396][ T12] bond0 (unregistering): Released all slaves [ 649.392897][ T12] hsr_slave_0: left promiscuous mode [ 649.402568][ T12] hsr_slave_1: left promiscuous mode [ 649.409064][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 649.420732][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 649.429077][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 649.437459][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 649.446563][ T12] veth0_macvtap: left promiscuous mode [ 649.551998][ T12] team0 (unregistering): Port device team_slave_1 removed [ 649.577941][ T12] team0 (unregistering): Port device team_slave_0 removed [ 649.909404][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.010187][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.106024][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.182331][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.319451][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.349208][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.403846][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.464137][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 650.547415][ T12] team0: left allmulticast mode [ 650.553605][ T12] team_slave_0: left allmulticast mode [ 650.559911][ T12] team_slave_1: left allmulticast mode [ 650.566156][ T12] team0: left promiscuous mode [ 650.571425][ T12] team_slave_0: left promiscuous mode [ 650.577511][ T12] team_slave_1: left promiscuous mode [ 650.583541][ T12] bridge0: port 3(team0) entered disabled state [ 650.591472][ T12] bridge_slave_1: left allmulticast mode [ 650.597735][ T12] bridge_slave_1: left promiscuous mode [ 650.603915][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.613317][ T12] bridge_slave_0: left allmulticast mode [ 650.619834][ T12] bridge_slave_0: left promiscuous mode [ 650.626377][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.635595][ T12] vlan1: left allmulticast mode [ 650.640926][ T12] vlan1: left promiscuous mode [ 650.646432][ T12] bridge0: port 4(vlan1) entered disabled state [ 650.654068][ T12] team0: left allmulticast mode [ 650.659567][ T12] team_slave_0: left allmulticast mode [ 650.665636][ T12] team_slave_1: left allmulticast mode [ 650.671620][ T12] team0: left promiscuous mode [ 650.676876][ T12] team_slave_0: left promiscuous mode [ 650.682834][ T12] team_slave_1: left promiscuous mode [ 650.689626][ T12] bridge0: port 3(team0) entered disabled state [ 650.697362][ T12] bridge_slave_1: left allmulticast mode [ 650.703539][ T12] bridge_slave_1: left promiscuous mode [ 650.709760][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 650.718568][ T12] bridge_slave_0: left allmulticast mode [ 650.724845][ T12] bridge_slave_0: left promiscuous mode [ 650.730995][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 650.990276][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 651.000942][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 651.011627][ T12] bond0 (unregistering): Released all slaves [ 651.020329][ T12] bond0 (unregistering): Released all slaves [ 651.112785][ T12] .SR: left promiscuous mode [ 651.146030][ T12] ovs_: left promiscuous mode [ 651.639121][ T12] hsr_slave_0: left promiscuous mode [ 651.648544][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.657717][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.666140][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.674266][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.684927][ T12] hsr_slave_0: left promiscuous mode [ 651.690995][ T12] hsr_slave_1: left promiscuous mode [ 651.697273][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.705459][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.713659][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 651.721972][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 651.731925][ T12] veth0_macvtap: left promiscuous mode [ 651.738092][ T12] veth1_vlan: left promiscuous mode [ 651.743832][ T12] veth0_vlan: left promiscuous mode [ 651.750458][ T12] veth1_macvtap: left promiscuous mode [ 651.756513][ T12] veth0_macvtap: left promiscuous mode [ 651.762558][ T12] veth1_vlan: left promiscuous mode [ 651.768421][ T12] veth0_vlan: left promiscuous mode [ 651.910694][ T12] team0 (unregistering): Port device team_slave_1 removed [ 651.921563][ T12] team0 (unregistering): Port device team_slave_0 removed [ 652.069636][ T12] team0 (unregistering): Port device team_slave_1 removed [ 652.090614][ T12] team0 (unregistering): Port device team_slave_0 removed