last executing test programs: 7m45.827053455s ago: executing program 2 (id=365): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0x200007, 0x19) getegid() close_range$auto(0x2, 0x8, 0x0) openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000007480)='/dev/cec12\x00', 0x400, 0x0) setsockopt$auto(0xffffffffffffffff, 0x10000008, 0x8005, 0x0, 0x2) sendmsg$auto_NL802154_CMD_SET_PAN_ID(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, 0x0, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_MAX_BE={0x5, 0x10, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) unshare$auto(0xfffffffffffffff8) socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) r1 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) writev$auto(r1, &(0x7f0000002bc0)={0x0, 0x7}, 0x7) mmap$auto(0x2, 0x4020009, 0x3, 0xeb1, 0x401, 0x4000008000) r2 = socket(0x2, 0x2, 0x88) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008001}, 0x4000030) sendmmsg$auto(r2, &(0x7f0000000080)={{0x0, 0x1c03, 0x0, 0x1, 0x0, 0x2, 0x2}, 0x7}, 0x3, 0x0) socket(0x10, 0x2, 0xc) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) syz_open_procfs$namespace(0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000000)) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) io_uring_setup$auto(0x6, 0x0) 7m44.153825117s ago: executing program 2 (id=377): r0 = socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000) (async) bind$auto(0x3, &(0x7f0000000100)=@phonet={0x23, 0x6, 0xa, 0x1}, 0x6a) (async) bpf$auto(0x0, 0x0, 0x4f4) (async) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(0xffffffffffffffff, 0x0, 0xc000) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x20202, 0x0) (async) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x48}) (async) sendmmsg$auto(r1, 0x0, 0x2, 0xff) (async, rerun: 64) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async, rerun: 64) r2 = open(&(0x7f0000000800)='./file0\x00', 0x20042, 0x154) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) (async, rerun: 32) capset$auto(0x0, &(0x7f0000000180)={0x40, 0x1ff, 0x9}) (rerun: 32) listxattr$auto(&(0x7f0000000000)='./file0\x00', 0x0, 0xf) (async) write$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000140)={'veth0_to_hsr\x00', 0x0}) sendmsg$auto_WG_CMD_GET_DEVICE(r2, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x4c, 0x0, 0x200, 0x70bd28, 0x25dfdbff, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'veth0_to_team\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'xfrm0\x00'}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40081}, 0x20000800) (async) ustat$auto(0x801, 0x0) (async) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x3, 0xeb1, 0x401, 0x7fff) (async) mremap$auto(0x4, 0xfee0, 0x3fd6, 0x3, 0xfffff000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) socket(0x10, 0x3, 0x9) (async, rerun: 64) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x88) (async) socket(0x10, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 7m41.808207871s ago: executing program 2 (id=388): mmap$auto(0x0, 0xffffffffffffffff, 0xc, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xffffff0f, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4008810}, 0x2000c041) r0 = socket(0x2a, 0x1, 0x0) ioprio_set$auto(0x6, 0x0, 0x8) connect$auto(r0, &(0x7f0000000000)=@hci={0x1f, 0xff7e}, 0x8) recvfrom$auto(r0, 0x0, 0x3, 0x6, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) unshare$auto(0x40000080) socket(0xa, 0x3, 0x3a) epoll_wait$auto(r0, 0x0, 0x7ff, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) splice$auto(0xffffffffffffffff, &(0x7f0000000140)=0x6, 0xffffffffffffffff, &(0x7f0000000440)=0x5, 0x401, 0x1ff) write$auto_proc_fail_nth_operations_base(0xffffffffffffffff, &(0x7f0000000040)="fd209f519c4922535c97bd4aba00e2ce47926a754ba39ed1e0a415b054073a4f76d3681789e1b34d406672b0be8599d391ffae81798f200734b7bd1c493a87566fad49dc99d718a5f5f522c4ffea3a74463d5307b5a77e02c84987c9692aca475c93af9367a28d9bfdab147a23f094b0562360253d9dfd043ef0e9213351762298f933a45c6c7771a5ad2c39ae1044a53f58ddac26b3c128020e8c69e66216a94bca88", 0xa3) ioctl$auto_SOUND_OLD_MIXER_INFO(0xffffffffffffffff, 0x80304d65, &(0x7f00000001c0)="7fa035fb074721b00b66a2399f189d8b2f1f10b113a1951c6094bf303e1cfe797d81e8ff433d0d7e0d91f3c9ba0210baed6507a2d3f932cf484152644a189bc490fde325c2ab5033632ebbe88e4cf038791fc7da246b55216ca2b29714015a5c169cd107042b41214c79711575acafc58a3a3661eb2b82d31fdd190ef946bd10ddd2b6838290e254dfb50573ed84cc2c6ec2a2fb4a8e3c23c6") mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/system/cpu/cpu0/cache/index2/level\x00', 0x0, 0x0) openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000040), 0x40, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/icmp/ratemask\x00', 0x179a02, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000004c0), 0x22000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STATUS64(r1, 0x80605414, 0x0) getrandom$auto(0x0, 0x284, 0x3) ioctl$auto_dvb_demux_fops_dmxdev(0xffffffffffffffff, 0x40146f2c, 0x0) setsockopt$auto(0xffffffffffffffff, 0x2d, 0xd6, 0x0, 0x578) 7m31.598024335s ago: executing program 2 (id=416): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote\x00', 0x183841, 0x0) write$auto(r0, &(0x7f0000000080)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(', 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x15, 0x3, 0x0) bind$auto(r1, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto(r1, &(0x7f0000000180)={0x0, 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000080), r2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'vlan1\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r4}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r2}, @NETDEV_A_DMABUF_QUEUES={0x4}]}, 0x28}, 0x1, 0x0, 0x4000000, 0x4000000}, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x4e, 0x0) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mremap$auto(0x200000, 0x3, 0x3fd6, 0x3, 0x20000000) 7m26.131762778s ago: executing program 2 (id=439): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000229bd70001cdddf250200020008000308"], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008800}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18"], 0x1ac}, 0x1, 0x0, 0x3f}, 0x40000) 7m22.32643213s ago: executing program 2 (id=445): madvise$auto(0x7ff, 0xfffffffffffefffd, 0x15) sysfs$auto(0x2, 0x10000000000002a, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000680)=""/227, 0xe3) madvise$auto(0x0, 0x20499d, 0x9) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) madvise$auto(0x108000, 0x800034, 0x9) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000069", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf2509000000", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4000044) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r7, @ANYBLOB="0c0002800800550007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYRESHEX=r4, @ANYBLOB="080027bd7000ffdbdf25050000000500060003000000d60203800077638e1277bb57223c1f46e5f8101f6baffbbf7185bd363d86f9774edbcf60db2456bcd89483b3d8c81128e44576464bbcd1be334dfb69d901a0800400c38031a875e3fcaa5f0e6312708be5b6e198dbb9513b6acd96ee9163b8af74e80e3fea1bc9914d8dffe4c7d609ecb479424faefb96121e1b2f1307b9ed6a3f7826cefa5e24463013cc77bddafd36d669bbd1af238e0cd7b24e53ea56ca92ddf509f6066af5e2e261a694864b42206ad20e6bcfbd05f3305d5b85ab6f7ba59b412262554735d8c896d44e4c2424197f8c5211fe69435d097525cbf6b756e6a81c6f3a38dd5df20e72067fd63114000b00fe8000000000000000000000000000aab6df3068457d16111ffa52dd8ca55cb35d142a261b3b63c84fb884fcd79d180474b9b2b286dc1057dc70e01142261414d672170afcc5915ea931455155116c012e9674fa65f7f95004002a800400f6808a896f68880d16e0e07199da26c68ed6736567c9f52cfbaae62e7aeccd59baeaf3d990b5de503091ed7ab2584a73628d683644c2c6c547f3910402d1a495e665658f2b9bd3f36d3b95e0ce11dba2b14fd71e2b9d0fa95b7cd1581d315ef726d3f9c05c30f2918aa4560a5fa227520d0af496d93e779a51c4a009ca96ffb62be2d81d62c9ba532d74fa3e7de873eed93dc73037779bd067bd942455a4b02c42c0b8e568d87b55f800941a2041ca4e3e716e78f1c14057cb7c9e9953c75b0017a8ee14740000004220595f8a12415967b410c25cfc7d2c22b6348469f436b95ad478ebf544d73a622a4c4a6d7891258771204e1c8c5471932b03e84ec3a292538b4d21cf6470c284a67df725afe02c401d91cab9a882c2be6b3cd421303726fc422764596ad53858e3632e2012782a23d92580f4475db790791e9336de19416c26d3aa06018fe788852ec21eb7cb96686ae1fe9e4e242563ee0efcf66b439c641d1065e5b348314b9a6cdf598e38f214f07037ac7ff4e4cf302d9c8576060025004500000000007800018008000100", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e31000000000000000008000100", @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="59a412ce8512f550b03727c19bd58f3391b4b1704a9438de267881c3468679a3b15673250b1ff342e65e4d3db13c885672197d80cb63a6601d78474412edc8d317dd5d01620334a611aab3366e867bbaec7f9981a61975bae1ebb3d3a3ce91c0", @ANYRES32=r7, @ANYBLOB="0800090052357cfeeab6bfa1ead9a875d0a3951bb348841d1fc59a2b0b58ae1b401cddef1e6fbcfc1c05d5fecfa01700"/57, @ANYRES32=0x0, @ANYBLOB="140002006970365f7674693000000000000000000800030068060000140002006772653000000000000000000000000008000300000000000800090009000000380001800800030008000000140002007767300000000000000000000000000008000300ff010000080003008b8900000800030003000000", @ANYRES64=r8], 0x3ac}, 0x1, 0x0, 0x0, 0x8000}, 0x814) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) 7m5.877061481s ago: executing program 32 (id=445): madvise$auto(0x7ff, 0xfffffffffffefffd, 0x15) sysfs$auto(0x2, 0x10000000000002a, 0x0) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000100), r1) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x54) madvise$auto(0x110c230000, 0x8031ca, 0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000000680)=""/227, 0xe3) madvise$auto(0x0, 0x20499d, 0x9) futex_waitv$auto(&(0x7f0000000000)={0x8, 0x5d94, 0x4, 0x4}, 0x77, 0x0, 0x0, 0x62bd) madvise$auto(0x108000, 0x800034, 0x9) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'hsr0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c00000069", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fcdbdf2509000000", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x8}, 0x4000044) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r5) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'gretap0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_STRSET_GET(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYRES32=r7, @ANYBLOB="0c0002800800550007000000"], 0x2c}, 0x1, 0x0, 0x0, 0x20000004}, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000180)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000580)={&(0x7f0000000780)=ANY=[@ANYRESHEX=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="140002006d6163766c616e31000000000000000008000100", @ANYBLOB="08000100", @ANYRES32=r4, @ANYBLOB="59a412ce8512f550b03727c19bd58f3391b4b1704a9438de267881c3468679a3b15673250b1ff342e65e4d3db13c885672197d80cb63a6601d78474412edc8d317dd5d01620334a611aab3366e867bbaec7f9981a61975bae1ebb3d3a3ce91c0", @ANYRES32=r7, @ANYBLOB="0800090052357cfeeab6bfa1ead9a875d0a3951bb348841d1fc59a2b0b58ae1b401cddef1e6fbcfc1c05d5fecfa01700"/57, @ANYRES32=0x0, @ANYBLOB="140002006970365f7674693000000000000000000800030068060000140002006772653000000000000000000000000008000300000000000800090009000000380001800800030008000000140002007767300000000000000000000000000008000300ff010000080003008b8900000800030003000000", @ANYRES64=r8], 0x3ac}, 0x1, 0x0, 0x0, 0x8000}, 0x814) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1000, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) write$auto(0x3, 0x0, 0xfdef) close_range$auto(0x2, 0x8, 0x0) 2m53.001515578s ago: executing program 4 (id=1646): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_overcommit_hugepages\x00', 0x1c9282, 0x0) sendfile$auto(r0, r0, 0x0, 0x1) r1 = openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim5/max_vfs\x00', 0x48402, 0x0) write$auto(r1, 0x0, 0x1) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x3, 0x12) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/netfilter/nf_hooks_lwtunnel\x00', 0x40000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x101100, 0x0) ioctl$auto_SW_SYNC_GET_DEADLINE(r3, 0xc0105702, &(0x7f0000000000)={0x0, 0x0, r3}) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) r6 = socket(0x10, 0x2, 0xf) mmap$auto(0x0, 0xc, 0x19c0f, 0x44eb2, 0x10006, 0x300000000000) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x2, 0x1) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyx1\x00', 0x400000, 0x0) ioctl$auto_TIOCVHANGUP2(r7, 0x5437, &(0x7f0000000240)="be5f8dbf9b680d3759fd058edcc3161847df96d41507842fe8c9c1145554c4e0e659c9bf797bb86baf02fd8d460bee10e7613ae7271828b8b197d02828f41a66a838604e8f683166d6fbace4909da9f6548b02ccc9aef8f33f4d8e856eb1c202f290181a636c1687fa8164e1ed723d00255cc69ad58c224f6d5a75f02afff02a18be9784c453d09a53520cf7e18755fe0647622d37ed88b9f9caeb1280ab741b0e") mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x403, 0x8000) move_pages$auto(0x1, 0x2, 0x0, 0x0, 0x0, 0x2) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) epoll_create$auto(0x4) socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(r6, 0x6, r4, 0x0) 2m51.601856834s ago: executing program 4 (id=1647): sysfs$auto(0x2, 0x10000000000048, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) sendmmsg$auto(r0, &(0x7f0000001100)={{&(0x7f0000000000)="9a4fd2f0d6232243af718bef461f239d8855d83169b64c2e219e2c2bea5520bb3636bd6f1d8ee366de67e9ae0626e91c0e166ec6afebaa357674deb85bf07ebe37de52f704a9b8132de60e1ac63568e17eb1f3090ed7ce9af2feb8bac0ff8f0d4e5d4543feed13d9c8b154f454c55380c74201b8bc76b189ea666cf3c82c80c53bc14e01cbdbd1a3f8ad906db2f2a0a2", 0x7fff, &(0x7f00000010c0)={&(0x7f00000000c0)="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"}, 0x8000000000000000, &(0x7f0000001200)="ceb2cc9c342b130908aa3c70d7e7c8439b5b826e3dbab6fb3a6416034739faadcbf13cac082ce08f7f91cf508fa5d15489b4538c0ada0216657971f2d00c3a90dee2f9aede9190a529b732d5a48919a68c3a843cf7bacaf08fab3f9eb0900ae9fdb2ba8952dce749f1494e113b3db28b5d29264eb3651a5ee0513fa2c34b993201a0d3837c74de32d97600ca61fbac5b21718ed50fcf52fb5f268bd2dd4d70dac23240aff78222684e333432175704061dec468d81dc98a88130b6b92cff3fb75e74efc08979465b3d3224da3226a8aa8f18313ee103e4983e0545720b1a8f6451bc0904a58b89f9cea8a6fde277513a1a6aa2307f66e6af0f2a7207c1e7514129b9f2a4f458a96a2d622eba33d3df14aacf1481d5df2c6410944f0a3dc61fcd56065a2242c887c1c7159ada771eb87dd9dec80d3f588cd11991a97f440b663456c8ab370127d2888fc148cce18aa87dbf55715d927adc2b3882c838b13359a8bbdd57b80cdc750917ad51720d2f74aa21b84354a0af9b2d18d56aa3fe323de558c8891776655fd2d55792e6f52b10d21bb3be7f3c382bb790f7792cb2ecc8eaf44458756b184b42dd07ab0ae4378b76e988cf8be6c5bf45e0f3852253fe1304101b04ce0dec060f6697c1691d5b257a1c5344c4871ba9f6cc6867d3fea2083f29430168344403794ea1be78dbe5d2dcadf9a2cfb9d2b46664c704ed405b1370de661c92e9dc5ca501642bb1d58a5b16522d8ae5ae26d1242e1276afce801e32f73c1134d60faf4edd621dc87a3571ecfe406099886a90ec63484ef17902444567daa6160ea53ee4d9e9b37eeb0259adabddd0b15564860dda78ff49bd15ea77308bf1a689a683e5d674f39f207977f5043e4c9573c3d8b06d2eb098ab08dc3f9b5e654b80803e1bbee825f949cf86c79aab5594f1787cc44b474a63f230bceeb414629c10cddd556fc2cc1eb5cb92552578804f303508daee1ca55c9aef208828a4122168ce0eb08f2f05c0600589712e3769b734284be760a53985b5b68e261bf0d7c039654e836ccc32c8ceaafe2ab0b71810388740629fd9749cc54bbf940eeda99a51dc3b039998f91c444462315c25f49d6e8184ddd5b81e57b01441ba8b42ed145ef4810e5753eca8d6762aae4b297af238baa7ee5323d528e30999c3a90744052411635f950a463069cb3c5eb0090a267df4554e0f4cf075663d4482669d82c50afecfb46f0832331c9c299446440dc685b50a937a257f31664046cdfc5e608e5dfa849fc5080828b66486b61e646ca4a30d5158ac68686a05af03dc8f46e356bcc4010c8593142bed9bae7b432672f416edf815d837fb7d510f744e337d318c2ca53e1f883f8eb38c0e9941416bf8b2d003fb2786f9d303f29eebe139b84edf1d93fa213ff38b2fb1c688a9dad96f14f8641dde7ae5f8e4b59795f26e092d832883ca1d6a4be359d351c1a91ddd79905f11211cf61ebb4c1a5849734c60f4018a7591eb7497213bb2d68f5e0dd007743008ea4d77be27eb4adeb554f24c92af373b33f590129bb00eb5e546bc4bd7fed8d977c7269af7868c7c3b1bc5cc9cf302d99a56b23afdc500c15496aff18330ebdc22fec6e5b701b33acf21d15879e3d63504e8f697eef966d82c450d5cf8e8f8eee7e8e814f9822afba9ed91c57a7a4ae2f22a4160e7536d5e5daeba60f738bb43d2db8485ddd140d712de0734ccfb9a99d3cf8acbd71bf6c805788c7f12a44f0455ac4d39d83abc684e34a0a7b679320f1fba0fabf31dd27965858d8f4d40589957466889567e5f6db43dbe3d7580e1d6ba8ca14703adaf47ecba6aef595db9315eb83a10a87d48f4daea4d30ffe25e6ec1b14cfbdf1b52a4c977aab618282ad55cf290ae1dd7f240fdaa4fe59140da7e8b561aa987f6964809660b0a5dcb37789ed3ce04ae60fbcd4af43465e628db13dc115f20b63ccaeeae9841b96a0b7587b66f0ed191aeda427cdfd89d06e2246dea7a51b38e8e77dee91b4a4c4bb19e7d23570bcbc0d103009bd54c52621cf95c4e7cf22e45624e675a59f79cebf86fa030017632d64d90b1e0c34c3c2501368af742e3b7b8f96e696c592314fb52b0a52d4df409fd3e5b3d9601d7ec0e6f9ed4a41bb456618e9e421f6d990c4c5a878467cc237816f8cdd655f4cb70e6090559a6ddda7db544190ee9f86330318b6edaeb92c49dc455bc23961f379b7c8502f750e7f7c8c3358ce1351b5546e2d0e65a9548aa1fffd2b93e85032ff99535bc25f69be51cdece9d7bead784bef98aa4f75d063c128e3c8d2b3a786f398e864e0196081fb25d82b2bd7668d2aef6463afd2fd2301b6dd1951461faf835baf48006722b07300c44846aa089b0df1236ea0fbb6239799ed86d2d32db67ddfb83edd273b46aa67bce87e946582123513af671247516eab4d1df89821f26948feed109f6e33c74f8d60fe54890b5cf6c10dd5988be279bb86c343e8a3db29cf8d287b58d23e5e20364168882a35dcfd5075e85bc8c2fadd88c8a4830b0321486963c79afa92c0acb83562a850f54c3a8a14cd7352b63b74ef51b2becf12d302bcc2541a9765e9cb8bb1ec19c229f4a40cc8a58a49d20d002809dda16d6c20cbf15e00514a5f39d3cd24b1fc313937c39edcf136b5f253c9b3d3c52b8a815f93fda605f83ff4d40c03e847ae5a567c99647b7adbad018c830a5768ca7c398d29054b4fbae7bce0f36c0755f8b0cb0105ee5c9dcf803d92408ff858215f06f4120ecb57665d50cc06f352176933ee6c4a833fb8ba542b81807769cd1de7bbe074c2c4dd2828395cd267fc08d22c3d8909f0575877905b4ce22d2188bc4212dbbb2917dc8d4da72b62a304a1d59d58afd4d9650ab0c99eea6b30664b15dcef6bfeccf63ac02afba740f26f3e4a2274c1e0cf5366c7b25dc02585c3536edd24c7ac4df2b441919e21cb0bd5f88850f052982dc71528f9d805bda14f8b4c2740faebadea02e7358f4825ea1c2bd48b0e20f67479948d1381d0a9509a9a1148f8379863e4775f145dcda80b44b264b1cd94685adb44cf1489c11967c621a991d41e34e983f0795b298dcfdbc87aca7fc097ba276ae4a43599bcee2f0fefb62bb0546461a0ac078de20b7f3a67a6f5a99af68cbc5e3127ca2e79bfcfd605cee0377744bf7349293c5f4169bb933123ab029b44d86297da5b29f039ebc9322881af993841f0ce8b38036c112a73cb91575013ff29ca0382b0d53118e975d7df9c0b386813b68c35f773f69743af0ab097ef247fae240872119996f46efb07504c8bbdc0cdefe2d4fb79ad4d967417dc6a3a2b98aa239b30341b49b88e4fbeac637abfefb0991ff75758083c0f19d7a582044e4b518645dbba305cc0ee9e9f26d7ac469a6a3c048f1fe42e98eec342eb169522c1ad2167ca055fc2bcf9ce03817794c0513abef5dc24fe454cdb43eff3c396781afd9f1e3a5b5829b5c9b979d826a09c990837bc3ef37f6d8a02e0fc20ef6383f34162e751f9d1abbf52ff932186f93ee422b246711cae3a7d98177450156cc0dbc02a5ee62ac8e25bc1146dad6d282ba080182d7f973c2d5c3131b1f2e392b57784efc04eb8da43fc0972951a984b6212ca713060d37cdc246af0df1bbdf855bb97dc60e06188f47e0110cce26c8863e7448b5c30bb7e6c0ef067cd239dc585ae2816678330485bca7f1f2069ef45e544a076b0d8d75f7dfccd30254c05035f9944cb49e98641b338a24a2fa494ee030b419c5660c761815f301ce8c1aba99d15edd103c6ecd019a45c3222200fde3170c45162f958371ade82f2465471da3cee285fd7ffa42abbf69c56801734be7215f5008653b9937e13d1e58df4d657a70112acb4dfc0c428ce249cf2452916fbe7e7c8b1fbafb779b6f4156454ff1b6189cf67815b0aedc79243c9b116342391ba6fb093aa1fb888be243bdeed7e04d2531b74bc6309541a4c6c20f7eda347f7271820e74e30b4598e53a0683eb58ec81e60fba90a9f5d2cabfa60bfcf53354d052ed0f5ad4fa2e2a011424467e507cd4c59dc55a76aaba857c822904ed3270dd7aee6a19f86ac59764e3ab077b9f3450f0eb40961ae18785762950fb1573d6b634fd0f1315d8cd906e7acfac793b96da13f4a1e780a6e65e05a377d254d696a5af5d0a60f308a2da018740e9c5a3b66dba45f919714a1efa91e41aea9df31b9fd8748573f47ac56bb00640c021b7309d39c4aec308416646ca2711c65a12ce2013d273bd4b3ef6d0791678808da4be899194f92c74b7264737507a6dbe9bf7c9c48b533a649402a92e633bd84acac3e9f498deaff02397e42779e14058e1aadea8ac7b3bfe276de2d2d6841d741373b4889ff82e12fdc73ac8df6d1ff27e472ead0a77cb5a8c9cac4b37ec0d52c14110d3f7dc71066220eb3c47effa19010a85d64775bfcd38807e9997a1573e1989e82b76f355a69da9862f8e35548c31c060f703f24dcde8a4cd35841b0cdb9bce8f33fb0b152ba520ada17b48f675007a0a22c8b8ad9e6666d5658176b0afad31782715d53e6478c549ccf48ddede23f701752553878f6829ebcd9439da3bd2edb0eb8c131ed70fae508f5301890f02e8e4b6ff2abb3a2057594799b32c80f4e32dfd240ee18b4cd93b939c38797d70bccbcfa8c48eafe6640f775cb6c28b6169d94fc10b4e7d0f536c6f9664af2432ec233afcfd1a482704d4037f592fa5d351bb0874fa774840b44f2ba2fad6afe3d2f13014bfb3298998377c1e24bc11a897e325251f27793606c1e8e6484f4f8cdde80cdc327e6d8fed022ffa35c6db66273c3c220ea5540fdd4740a8157c8cbe8bfb6b3aebd661eb358fc1361221ad78b3a770b2949b42a0b263744180103f306c217d4255df105ad021c1c5c1c747f1d440a8e8232e5859ece2578e8663e31f8aab67912ecea82a102a2d77fc097e1274e8edb5bc6e6816eea0141d8f4e4d118921adfba028f6a59f1dca5f007bc5a6dcfcd958e6aa61207f5cfcbf6b08021799938a088401ea2d27dbc3d386fd1c34dd7611c9c235d9cee0f6f3914754b5a701424dd435ffc9427a0473af57866654cf26e7e9c0065caf6dcffc1545b44174f3658d7b3145b63e102d66a422877b6d6d63862940346b50d1d087f68ce35808725b6f796084bc7ce0342424bf931a1275d180eb8c22a10474157b103a8ea78544d0e8b85d0ccdc2f1b01dc4c58a90ff72149b6468fdd32826fd6e2e55059ff4a761b1e77dee28df4cfe9b614ed2d280403f195ab45c4131450c68b0bfdbc95276aa881da8f067d9d7857af9e6c47c6d07b6225ae7d56b52b03fb863cb883b3f726cecdf028a560ce42324302a6bea1ca1bd1db911ccce175340981356757b40b0ffc592058411c7f5e4de726f1ab53490c1a96046e879b077f3d051b264211336529c6450519d03b9ad8a2c6c8226a257ecce60f20d0f78930a57743867884f39862511a4fa26b408b568af42c6a825a1f0899b5dbd928f7aa4c99e1da0f737383d0b4ab8f01ad05f482c3eb81744c1e2c11d7ac8dd9410e94fcb89d3e3c50635b0ce7e05d54aa6d87794d540e061f9404c45e32fa54c81121d52189b756d62f1a3285a1792876c5fa31b92eb66ae36d7cd86d10ff7252fa134e5e3b09e5eaf694c1c4bd821eb2f3374069e779a41f18eb3cc96c2fc004520172e90767282086873f00d3049c0a0e17175ca847901efe6e31e807b452a09705965a440699b563e1f00729822279e3814065adb9d664f8159e7e8c15ddefeaa4d7264d6533a3f", 0xc6d, 0x80}, 0x7}, 0x7f, 0xb485) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) madvise$auto(0x0, 0x200007, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$auto_WG_CMD_GET_DEVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x703, 0x70bd27, 0x25dfd9fc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x20100, 0x0) read$auto(r4, 0x0, 0x8) 2m50.9605636s ago: executing program 4 (id=1652): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) request_key$auto_KEY_SPEC_REQUESTOR_KEYRING(&(0x7f0000000100)='-\x00\x00\xe2\xd0\x1c ,\x8a\xd5\xdf\x8b\xa0\xa5\xda\x19E\xe0\x81\xcf\xb6X\xf3*\'\x04\x06\f\x85Iw}\xb5X\xb8\xbc\x12++\x15\x9a\xb5\x1d0x0}) sendmsg$auto_WG_CMD_GET_DEVICE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r2, 0x703, 0x70bd27, 0x25dfd9fc, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x880}, 0x4) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x20100, 0x0) read$auto(r4, 0x0, 0x8) 2m48.307495541s ago: executing program 4 (id=1664): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) recvmmsg$auto(0xffffffffffffffff, 0x0, 0xc1f, 0x9, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xfffffffffffffffc, 0x1f, 0xffffffffffffffff, 0x62) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/10/effective_affinity\x00', 0x120682, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000300)=""/118, 0x76) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x22002, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) pidfd_getfd$auto(0x3, 0x1, 0x100000000) 2m33.090837578s ago: executing program 33 (id=1664): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) recvmmsg$auto(0xffffffffffffffff, 0x0, 0xc1f, 0x9, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xfffffffffffffffc, 0x1f, 0xffffffffffffffff, 0x62) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/irq/10/effective_affinity\x00', 0x120682, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0C0F:00/status\x00', 0xa140, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000300)=""/118, 0x76) mmap$auto(0x0, 0x202000c, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x22002, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) pidfd_getfd$auto(0x3, 0x1, 0x100000000) 18.544590166s ago: executing program 3 (id=2396): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x20100, 0x0) read$auto(r0, 0x0, 0x8) 17.2065326s ago: executing program 3 (id=2402): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20000800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) recvmmsg$auto(r0, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r1 = getsockopt$auto_SO_PEERNAME(r0, 0x7f, 0x1c, &(0x7f0000000140)='\x00', &(0x7f0000000180)=0x5) ioctl$auto_FIFREEZE(r1, 0xc0045878, r0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x20008841) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x50}, 0x8014) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x21c03, &(0x7f0000000000)={0x0, 0x5}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) 16.630844697s ago: executing program 3 (id=2407): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x20100, 0x0) read$auto(r0, 0x0, 0x8) 16.293381335s ago: executing program 3 (id=2410): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/ati_remote2/parameters/mode_mask\x00', 0x0, 0x0) r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$auto_TUNSETQUEUE(r0, 0x400454d9, &(0x7f00000000c0)=0x3) socket(0x25, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xe000) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x1e, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) 16.062970808s ago: executing program 3 (id=2412): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001a40), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000002280)={&(0x7f0000002300)=ANY=[@ANYBLOB="c80c0000", @ANYRES16=r1, @ANYBLOB="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"], 0xcc8}, 0x1, 0x0, 0x1400000000000000, 0x4090}, 0x20040054) 15.855182436s ago: executing program 3 (id=2416): r0 = socket(0x10, 0x2, 0x4) r1 = socket(0x10, 0x3, 0x6) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="01002dbd7000fedbdf2505000000da0203800800c000e000000204182a000400110008002e00", @ANYRES32, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4138553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43344b15bd494886e355cf6d92c8fe670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100005800c00c50003000000000000000c02368008027a8087010c800800e8", @ANYRES32=r0, @ANYRES32=r1], 0x2f0}, 0x1, 0x0, 0x0, 0x40000}, 0x50) 11.272731042s ago: executing program 0 (id=2432): mmap$auto(0x0, 0x400008, 0xb, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) mknod$auto(&(0x7f0000000580)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_', 0x1081, 0x9) (async) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') (async) open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x880c2, 0x95) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/trace\x00', 0x1a6b75d638a2a513, 0x0) socket(0x2b, 0x1, 0x1) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/cifs/traceSMB\x00', 0x351401, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) r1 = openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/current_tracer\x00', 0x1a3642, 0x0) writev$auto(r1, &(0x7f0000000100)={0x0, 0x8}, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) unshare$auto(0x40000080) (async) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x34, 0x65f, 0x7fffffff, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x8, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x2004, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, 0x6, 0xfffffffffffffffd, 0x200000000001, 0x3, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x10006]}, 0x1fe, 0xd) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r2 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$auto_FBIOPUTCMAP(r2, 0x4605, &(0x7f0000000040)="e88b149a59909d8b07b8e94a") (async) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r4 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), r2) sendmsg$auto_NFC_CMD_DEP_LINK_UP(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000380)={&(0x7f0000000140)={0x2c, r4, 0x200, 0x70bd28, 0x25dfdbfe, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0xa}, @NFC_ATTR_DEVICE_POWERED={0x5, 0xc, 0x7}, @NFC_ATTR_PROTOCOLS={0x8, 0x3, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40008}, 0x4004804) 10.195776138s ago: executing program 0 (id=2436): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto(0x2000000000000017, 0x8000, 0x2d, 0xc4, 0x20803) r0 = bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r0, 0x8000) unshare$auto(0x40000080) r2 = io_uring_setup$auto(0x6, 0x0) r3 = setfsuid$auto(0xee01) setresuid$auto(0x0, r3, 0x0) msgctl$auto_IPC_STAT(0x6, 0x2, &(0x7f0000001540)={{0x7fffffff, r3, 0x0, 0x0, 0x7ff, 0x10000004, 0xc}, &(0x7f00000014c0)=0x40, &(0x7f0000001500)=0x1, 0xa, 0xc, 0x5, 0x6b, 0x1, 0x9, 0x1ff, 0x541}) msgctl$auto_IPC_SET(0x7, 0x1, &(0x7f00000015c0)={{0x0, 0x0, r4, 0x3, 0x5, 0x80000001, 0x8001}, &(0x7f0000000080)=0xd, &(0x7f00000000c0)=0x98, 0x1, 0xfff, 0x9f6f, 0x1ff, 0x15f85bde, 0xfff, 0x9, 0x5, @inferred, @raw=0x10000}) sendmsg$auto_NL802154_CMD_DEL_SEC_LEVEL(r2, &(0x7f0000001680)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001640)={&(0x7f00000016c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032adf252100000018002f80e44d57bac38c747bce309f170800c300070011d9cb9e1899bff25ce963ee8090069db7487ab50000387fa3105d192a176b7d94e7a078e2ddac163ee593d178002a0e3b0b1d622f86145c69eb4200f8d7e2d44a5aabc74da3cdebd5cce2cecd05b6c17d1c9fab4c010c606459b4e20d139ed244d0e15b2b5ea6f912f942eaca33edaf6301000000e0c19d8253f07341e78b8f63c212e46bc62c38119ec8c520b4e6cbf10e000000494800108bcaa9b673a0ee3501000000000000000dc1c7c1d2438e0000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x400c1) r6 = syz_clone3(&(0x7f0000000340)={0x10042200, &(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200), {0x2f}, &(0x7f0000000240)=""/83, 0x53, &(0x7f00000002c0)=""/45, &(0x7f0000000300)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0], 0x8, {r2}}, 0x58) shmctl$auto_IPC_RMID(0xb, 0x0, &(0x7f0000001440)={{0x0, r3, r5, 0x3, 0x0, 0x7000000, 0x3}, 0x1, 0x1, 0xffffffff00000000, 0x1, @inferred=r6, @inferred=0xffffffffffffffff, 0x5, 0x0, &(0x7f00000003c0)="9106a3956e5c530def9eb09fec96c18727d82f3ba5fbbf1df10e94cfcac8e468b33b3d284f52ca5e1f5973dab06eb2d1daf9c954358ca7d0b9c36b6b85c409af98de1906a8ea20", &(0x7f0000000440)="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"}) fstat$auto(r1, &(0x7f0000000100)={0x28, 0x7, 0x7f80, 0x7, r3, 0x0, 0x0, 0xf, 0x2, 0xab3, 0x10001, 0x401, 0xffffffffffff1595, 0xfffffffffffffff9, 0x4, 0xc0ec, 0x1e}) socket(0x15, 0x3, 0x440a) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, &(0x7f00000000c0)={0x225c17d03}, 0x0, 0x5) futex$auto(&(0x7f0000000000)=0xf0fe, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x4000000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/dummy0/carrier\x00', 0x8182, 0x0) mmap$auto(0xffffffffffffffff, 0x400028, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x3, &(0x7f0000000000)={0x5, 0x66, 0x2, 0x9, 0xb, 0x2, 0xffffffffffffffff, [0x2, 0x34, 0x7fffffff], {0x2e, 0x6, 0x4355, 0x80000000, 0xa7, 0x7, 0xb, 0xba90, 0x7}, {0xfbfffc00, 0x6, 0x0, 0x400, 0x3, 0x7, 0x0, 0x7, 0x6}}) 6.988399567s ago: executing program 0 (id=2439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x7000000, 0x0, 0x24040000}, 0x18800) 6.437894112s ago: executing program 0 (id=2443): r0 = openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000080)='/dev/etherd/discover\x00', 0x80a02, 0x0) socket(0x15, 0x5, 0x0) socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r1, 0x4018bc13, 0x0) r2 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0xc800) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x124, r3, 0x1, 0x70bd25, 0x25dfdc02, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0x10c, 0x1, 0x0, 0x1, [@nested={0x108, 0x10, 0x0, 0x1, [@nested={0x104, 0xf, 0x0, 0x1, [@generic="99cb9d0ac5e7ca3db865f48743213f4895a92d889bcc52161a9db0c71042415f87e61e3975a378b736c3306b1a3ee4ce8b655fea2d69b00098f23b1cb37bf85739d04fb10a01766880ff82bbcaf8ffcc48221b11ee52385f95f3ca6366d40c8f351f1acb026136efeac333f139dc70761cb1b8ab2088cd036ec759ace6a86b542d5d8052a4be21311d98044cbdc3a15d34c29150d2cf295ab86ea42b51a5745e2911d0571fa6c66dad9cb30216732f9ba61fcdae60832bfa6da7e5c55339f2d80fbc2405cdbdf77856206c82c836024e4169fc9784aeafa9debd822a1bcf47979c0c1de2e67b3f8f747ebdf057a5be35", @generic="1a327b07757bb36f5c3608656cec1929"]}]}]}]}, 0x124}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioperm$auto(0xfb, 0x5, 0xe) socket(0x2, 0x3, 0x6) r5 = geteuid() setreuid$auto(r5, 0x0) close_range$auto(0x2, 0x8, 0x0) fadvise64$auto_POSIX_FADV_RANDOM(0xffffffffffffffff, 0x7, 0x1a, 0x1) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x20) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/proc/kpageflags\x00', 0x2, 0x0) read$auto(0x3, 0x0, 0x400000) write$auto_aoe_fops_aoechr(r0, 0x0, 0x0) 5.493714278s ago: executing program 1 (id=2445): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) request_key$auto_KEY_SPEC_REQUESTOR_KEYRING(&(0x7f0000000100)='-\x00\x00\xe2\xd0\x1c ,\x8a\xd5\xdf\x8b\xa0\xa5\xda\x19E\xe0\x81\xcf\xb6X\xf3*\'\x04\x06\f\x85Iw}\xb5X\xb8\xbc\x12++\x15\x9a\xb5\x1d0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbf9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x0) 4.176080836s ago: executing program 5 (id=2449): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) (async) fanotify_init$auto(0x5, 0x2000000000002) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x26, 0x80805, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) pidfd_getfd$auto(0x3, 0x1, 0x100000000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, 0x7f, 0x99, 0x8, 0x1, @relative_id=0x8, 0x5}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) (async) bpf$auto(0x4, &(0x7f00000001c0)=@raw_tracepoint={0x5, r0, 0x0, 0x8000000000007}, 0x9) (async) r2 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x180, 0x0) ioctl$auto(r2, 0xc0b45545, 0xffffffffffffffff) 4.035894038s ago: executing program 5 (id=2450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000900), 0xffffffffffffffff) r2 = openat$auto_proc_fault_inject_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/make-it-fail\x00', 0x140, 0x0) openat$auto_nvram_misc_fops_nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$auto_proc_fault_inject_operations_base(r2, &(0x7f0000000040)=""/189, 0xbd) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_NEW(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000940)={0x20, r1, 0x1, 0x70bd28, 0x25dfdbff, {}, [@OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_CLEAR={0x4}, @OVS_FLOW_ATTR_ACTIONS={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x50040}, 0x810) 3.917661578s ago: executing program 5 (id=2451): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010026bd7020f8dbdf250100000008000200", @ANYRES32=0x4, @ANYBLOB="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", @ANYRES32=0x9, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000500)={'gretap0\x00', 0x0}) close_range$auto(0x2, 0xa, 0x0) socket(0x0, 0x4, 0x1) socket(0x24, 0xa, 0x3a) sendmsg$auto_OVS_DP_CMD_DEL(r5, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="04002bbd7000fcdbdf250200000008000200", @ANYRES32=0x0, @ANYBLOB='\b\x00\t\x00', @ANYRES32=r6, @ANYBLOB='\x00'/16], 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x40) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/zram0/mem_limit\x00', 0x183841, 0x0) write$auto(r7, &(0x7f0000000540)='0P\xa6\xccI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94&\x81\xe2\x13\x8f\xea#\xf8F\xbbOO]\xe5[\xabxo\xd9\x90\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\b\xc1\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbsX\x9d\x9a\xf1\xb3\x88\xc9A\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xe6\xf0\xc4\xcb\x10\xae\xa5\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x01\x01\x00\x00/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x85R\x96\xe4\x86\\\x13\f\xe2\x8b\x9c\x7feh\xe4\a\x03\xc7/\x9c\xa9\x1a&\x19\x8a9\x82\xf0\x83', 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) clone$auto(0x1ff00, 0x0, &(0x7f0000002040)=0x7, 0x0, 0x9) r8 = socket(0x23, 0x80805, 0x0) poll$auto(&(0x7f0000000000)={r8, 0x1, 0x8}, 0x5, 0x400) setsockopt$auto(r9, 0x113, 0x3, 0x0, 0x2) r10 = socket(0x8, 0x0, 0x1) getsockname$auto(r10, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/class/net/bonding_masters\x00', 0x100, 0x0) r11 = open(0x0, 0x220c0, 0x20) fallocate$auto(r11, 0x3fbb061c, 0x0, 0x1) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x800, 0x0) ioctl$auto(r0, 0x400007, r11) 1.85638725s ago: executing program 1 (id=2452): r0 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$auto_TUNSETSNDBUF(r0, 0x400454d4, 0x0) 1.770111066s ago: executing program 0 (id=2453): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) write$auto(0x3, 0x0, 0x7fffffff) (async) write$auto(0x1, 0x0, 0x80000000) (async) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) (async) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = socket(0x2b, 0x1, 0x1) (async, rerun: 64) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (rerun: 64) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) ioctl$auto_PPPIOCSMAXCID(r1, 0x40047451, 0x0) (async, rerun: 32) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, 0x0, 0x20000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) (async) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) (async) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x7, 0xfffffffffffffdfd, 0x8011, 0x3, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) (async) sendmsg$auto_NL80211_CMD_GET_MPP(r0, 0x0, 0x880) (async) munmap$auto(0x8000, 0xffffffff) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, 0x0, 0x24004054) (async) getrandom$auto(0x0, 0x6000000, 0x3) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) mmap$auto(0xa1b7, 0x202000a, 0x3, 0x14, 0xfffffffffffffffa, 0x409) (async) sysfs$auto(0x2, 0x10000000000048, 0x0) (async) fsopen$auto(0x0, 0x6) close_range$auto(0x2, 0x8, 0x0) 1.649002747s ago: executing program 5 (id=2454): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x0, 0x0) ioctl$auto(r0, 0xab07, r0) 1.60436014s ago: executing program 1 (id=2455): r0 = openat$auto_uprobe_profile_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/tracing/uprobe_profile\x00', 0x480040, 0x0) r1 = socketcall$auto_SYS_RECVMSG(0x11, &(0x7f00000000c0)=0x5) close_range$auto(r0, r1, 0x2) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd5/queue/optimal_io_size\x00', 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) 1.088775685s ago: executing program 1 (id=2456): socket(0xa, 0x802, 0x3a) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x2, 0x0, 0x0) (async) sendmsg$auto_IOAM6_CMD_DUMP_SCHEMAS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8d0}, 0x800) (async) r1 = open(&(0x7f0000000040)='./file0\x00', 0x143483, 0x11) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0x538, 0x80, 0x10000, 0x0, r1, 0x1000, "72fea04183dce563f03f2a25077b3383", 0x0, r1, 0x4, 0x6, 0x101, 0x1, r1}, 0x6f3) (async) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='nfs4\x00', 0x200, &(0x7f00000001c0)) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) socket(0x29, 0x2, 0x0) (async) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0800040080000000"], 0x68}, 0x1, 0x0, 0x0, 0x20040084}, 0x40090) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x3, 0x100) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) (async) unshare$auto(0x40000080) (async) recvmmsg$auto(0x3, 0x0, 0x687bcbd, 0x8, 0x0) unshare$auto(0x40000080) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r2) sendmsg$auto_NETDEV_CMD_QSTATS_GET(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="01e828bd7000fedbdf250c000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8000) (async) socket(0x10, 0x2, 0xc) (async) socket(0x2000000000000021, 0x2, 0x10000000000002) 1.086392991s ago: executing program 5 (id=2457): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000100), 0x80, 0x0) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r0, 0x4018bc13, 0x0) read$auto(0x3, 0x0, 0x0) writev$auto(0xffffffffffffffff, 0x0, 0x3) r1 = openat$auto_ctl_device_fops_user(0xffffffffffffff9c, 0x0, 0x100, 0x0) r2 = socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x71, 0x0, 0x8) epoll_ctl$auto(r0, 0x5, r2, &(0x7f0000000000)={0x5, 0xe000000000000}) sendmmsg$auto(r1, 0x0, 0x6, 0x401) ioperm$auto(0x90d5, 0xc, 0x2) unshare$auto(0x40000080) 83.767732ms ago: executing program 0 (id=2458): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/net/rxrpc/bundles\x00', 0x8e40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000100), 0x40, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101900, 0x0) r0 = socket(0x11, 0x80003, 0x300) sendfile$auto(0x1, r0, 0x0, 0x8fb5) dup2$auto(0x0, 0x3) mmap$auto(0x0, 0x2020009, 0x4, 0xeb5, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) sysfs$auto(0x4, 0x6, 0x40) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x5, 0x0, 0x8004) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) r2 = fcntl$auto(0x3, 0x4, 0xa553) (fail_nth: 1) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) write$auto_proc_fail_nth_operations_base(r2, &(0x7f00000000c0), 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x181040, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000200)=""/206, 0xce) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/amidi2\x00', 0x80200, 0x0) write$auto(r4, &(0x7f0000000300)='/dev/audio1\x00\x86-\xe5.\xd3iV\x9a-e\x15\xac\xb2\xd2a\x13\xf7\x8f\xb3\xe3\x9b s\xc5\x159\x10\xfeX\x0fP\xbf\xe4D\x9d6\xbc\xf4h\xf8Z\xe9\x9d\x19S\xc8fn\xff\xf4\xfb\x80\xec:\x95\x0f\xabHWQ\\\x03\x00\x94\x9f\xe6\x11\xe8\xbb\xf0/n\x19\x82>\xa0\xb2J9\xa6\xe6\x87[\xf6\x8e5=', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto(0x3, 0x541b, 0x10000000000402) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(0xffffffffffffffff, 0x4018bc13, &(0x7f0000000140)={0x400000000000000, 0xfffffffffffffff7, 0x1, [0x0]}) socket$nl_generic(0x10, 0x3, 0x10) 0s ago: executing program 5 (id=2459): mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x6, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x17) sendmsg$auto_TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b1000000", @ANYRES16, @ANYBLOB="01002dbd7000fddbdf25030000000c00018008"], 0x20}, 0x1, 0x0, 0x0, 0x41}, 0x40080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) write$auto(r0, &(0x7f0000000000)='@\x00', 0xfe) madvise$auto(0x0, 0xffffffffffff0005, 0x19) remap_file_pages$auto(0x6a25, 0x1000, 0x0, 0x3, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x5) kernel console output (not intermixed with test programs): k_unicast+0x10/0x10 [ 461.155278][T11922] ? __phys_addr_symbol+0x30/0x80 [ 461.155311][T11922] ? __check_object_size+0x488/0x710 [ 461.155350][T11922] netlink_sendmsg+0x8b8/0xd70 [ 461.155423][T11922] ? __pfx_netlink_sendmsg+0x10/0x10 [ 461.155484][T11922] ____sys_sendmsg+0xaaf/0xc90 [ 461.155520][T11922] ? copy_msghdr_from_user+0x10b/0x160 [ 461.155568][T11922] ? __pfx_____sys_sendmsg+0x10/0x10 [ 461.155623][T11922] ___sys_sendmsg+0x135/0x1e0 [ 461.155681][T11922] ? __pfx____sys_sendmsg+0x10/0x10 [ 461.155745][T11922] ? __pfx_lock_release+0x10/0x10 [ 461.155791][T11922] ? trace_lock_acquire+0x14e/0x1f0 [ 461.155845][T11922] ? __fget_files+0x206/0x3a0 [ 461.155902][T11922] __sys_sendmsg+0x16e/0x220 [ 461.155951][T11922] ? __pfx___sys_sendmsg+0x10/0x10 [ 461.155997][T11922] ? __x64_sys_futex+0x1e1/0x4c0 [ 461.156061][T11922] do_syscall_64+0xcd/0x250 [ 461.156107][T11922] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.156154][T11922] RIP: 0033:0x7fcdf338d169 [ 461.156179][T11922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.156210][T11922] RSP: 002b:00007fcdf11f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 461.156240][T11922] RAX: ffffffffffffffda RBX: 00007fcdf35a5fa0 RCX: 00007fcdf338d169 [ 461.156261][T11922] RDX: 0000000000040000 RSI: 0000400000000240 RDI: 0000000000000007 [ 461.156281][T11922] RBP: 00007fcdf340e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 461.156300][T11922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.156319][T11922] R13: 0000000000000000 R14: 00007fcdf35a5fa0 R15: 00007ffdea52c708 [ 461.156359][T11922] [ 461.606052][T11920] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1567'. [ 461.661684][T11920] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 463.122835][T11959] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1578'. [ 463.466084][T11967] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1580'. [ 464.259103][T11987] bond0: option arp_validate: invalid value () [ 464.613223][T11993] FAULT_INJECTION: forcing a failure. [ 464.613223][T11993] name failslab, interval 1, probability 0, space 0, times 0 [ 464.634705][T11993] CPU: 1 UID: 0 PID: 11993 Comm: syz.3.1585 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 464.634749][T11993] Tainted: [U]=USER [ 464.634759][T11993] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 464.634776][T11993] Call Trace: [ 464.634785][T11993] [ 464.634796][T11993] dump_stack_lvl+0x16c/0x1f0 [ 464.634842][T11993] should_fail_ex+0x50a/0x650 [ 464.634890][T11993] ? fs_reclaim_acquire+0xae/0x150 [ 464.634934][T11993] ? tomoyo_realpath_from_path+0xb9/0x720 [ 464.634977][T11993] should_failslab+0xc2/0x120 [ 464.635008][T11993] __kmalloc_noprof+0xcb/0x510 [ 464.635055][T11993] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 464.635108][T11993] tomoyo_realpath_from_path+0xb9/0x720 [ 464.635187][T11993] ? tomoyo_path_number_perm+0x235/0x590 [ 464.635228][T11993] ? tomoyo_path_number_perm+0x235/0x590 [ 464.635267][T11993] tomoyo_path_number_perm+0x248/0x590 [ 464.635300][T11993] ? tomoyo_path_number_perm+0x235/0x590 [ 464.635339][T11993] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 464.635412][T11993] ? __pfx_lock_release+0x10/0x10 [ 464.635465][T11993] ? trace_lock_acquire+0x14e/0x1f0 [ 464.635508][T11993] ? lock_acquire+0x2f/0xb0 [ 464.635548][T11993] ? __fget_files+0x40/0x3a0 [ 464.635601][T11993] ? __fget_files+0x206/0x3a0 [ 464.635652][T11993] security_file_ioctl+0x9b/0x240 [ 464.635694][T11993] __x64_sys_ioctl+0xb7/0x200 [ 464.635736][T11993] do_syscall_64+0xcd/0x250 [ 464.635780][T11993] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.635822][T11993] RIP: 0033:0x7fcdf338d169 [ 464.635846][T11993] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.635876][T11993] RSP: 002b:00007fcdf11d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 464.635905][T11993] RAX: ffffffffffffffda RBX: 00007fcdf35a6080 RCX: 00007fcdf338d169 [ 464.635924][T11993] RDX: 0000000000000000 RSI: 0000000080605414 RDI: 0000000000000004 [ 464.635942][T11993] RBP: 00007fcdf11d5090 R08: 0000000000000000 R09: 0000000000000000 [ 464.635960][T11993] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.635978][T11993] R13: 0000000000000000 R14: 00007fcdf35a6080 R15: 00007ffdea52c708 [ 464.636016][T11993] [ 464.636028][T11993] ERROR: Out of memory at tomoyo_realpath_from_path. [ 464.916045][T11998] FAULT_INJECTION: forcing a failure. [ 464.916045][T11998] name failslab, interval 1, probability 0, space 0, times 0 [ 464.945007][T11998] CPU: 1 UID: 0 PID: 11998 Comm: syz.4.1588 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 464.945061][T11998] Tainted: [U]=USER [ 464.945072][T11998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 464.945092][T11998] Call Trace: [ 464.945101][T11998] [ 464.945114][T11998] dump_stack_lvl+0x16c/0x1f0 [ 464.945175][T11998] should_fail_ex+0x50a/0x650 [ 464.945229][T11998] ? fs_reclaim_acquire+0xae/0x150 [ 464.945274][T11998] ? lsm_blob_alloc+0x68/0x90 [ 464.945322][T11998] should_failslab+0xc2/0x120 [ 464.945355][T11998] __kmalloc_noprof+0xcb/0x510 [ 464.945415][T11998] lsm_blob_alloc+0x68/0x90 [ 464.945467][T11998] security_sk_alloc+0x30/0x270 [ 464.945504][T11998] sk_prot_alloc+0x1c7/0x2a0 [ 464.945540][T11998] sk_alloc+0x36/0xb90 [ 464.945586][T11998] tap_open+0x2e8/0x1150 [ 464.945622][T11998] ? __pfx_tap_open+0x10/0x10 [ 464.945655][T11998] chrdev_open+0x237/0x6a0 [ 464.945705][T11998] ? __pfx_apparmor_file_open+0x10/0x10 [ 464.945745][T11998] ? __pfx_chrdev_open+0x10/0x10 [ 464.945800][T11998] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 464.945852][T11998] do_dentry_open+0x735/0x1c40 [ 464.945900][T11998] ? __pfx_chrdev_open+0x10/0x10 [ 464.945953][T11998] ? inode_permission+0xdd/0x5f0 [ 464.945993][T11998] vfs_open+0x82/0x3f0 [ 464.946023][T11998] ? may_open+0x1f2/0x400 [ 464.946064][T11998] path_openat+0x1e88/0x2d80 [ 464.946142][T11998] ? __pfx_path_openat+0x10/0x10 [ 464.946193][T11998] ? __pfx___lock_acquire+0x10/0x10 [ 464.946237][T11998] ? lock_acquire.part.0+0x11b/0x380 [ 464.946284][T11998] ? find_held_lock+0x2d/0x110 [ 464.946323][T11998] do_filp_open+0x20c/0x470 [ 464.946370][T11998] ? __pfx_do_filp_open+0x10/0x10 [ 464.946517][T11998] ? find_held_lock+0x2d/0x110 [ 464.946582][T11998] ? alloc_fd+0x41f/0x760 [ 464.946645][T11998] do_sys_openat2+0x17a/0x1e0 [ 464.946682][T11998] ? __pfx_do_sys_openat2+0x10/0x10 [ 464.946735][T11998] __x64_sys_openat+0x175/0x210 [ 464.946774][T11998] ? __pfx___x64_sys_openat+0x10/0x10 [ 464.946828][T11998] do_syscall_64+0xcd/0x250 [ 464.946874][T11998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.946921][T11998] RIP: 0033:0x7ffb1418d169 [ 464.946947][T11998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.946980][T11998] RSP: 002b:00007ffb1501f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 464.947011][T11998] RAX: ffffffffffffffda RBX: 00007ffb143a5fa0 RCX: 00007ffb1418d169 [ 464.947032][T11998] RDX: 0000000000000080 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 464.947052][T11998] RBP: 00007ffb1420e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 464.947071][T11998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 464.947090][T11998] R13: 0000000000000000 R14: 00007ffb143a5fa0 R15: 00007ffc6de58488 [ 464.947130][T11998] [ 466.395953][T12019] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1591'. [ 467.079855][T12026] nvme_fabrics: missing parameter 'transport=%s' [ 467.087578][T12026] nvme_fabrics: missing parameter 'nqn=%s' [ 467.423195][T12030] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1597'. [ 467.457292][T12030] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 467.463093][T12032] snd_dummy snd_dummy.0: control 1:6:6:¢¸è_ÅheºRŸª:0 is already present [ 467.634349][T12034] nvme_fabrics: missing parameter 'transport=%s' [ 467.641758][T12034] nvme_fabrics: missing parameter 'nqn=%s' [ 467.970376][T12045] nvme_fabrics: missing parameter 'transport=%s' [ 467.992761][T12045] nvme_fabrics: missing parameter 'nqn=%s' [ 468.092111][T12050] FAULT_INJECTION: forcing a failure. [ 468.092111][T12050] name failslab, interval 1, probability 0, space 0, times 0 [ 468.174873][T12050] CPU: 1 UID: 0 PID: 12050 Comm: syz.0.1602 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 468.174949][T12050] Tainted: [U]=USER [ 468.174959][T12050] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 468.174977][T12050] Call Trace: [ 468.174986][T12050] [ 468.174997][T12050] dump_stack_lvl+0x16c/0x1f0 [ 468.175041][T12050] should_fail_ex+0x50a/0x650 [ 468.175090][T12050] ? fs_reclaim_acquire+0xae/0x150 [ 468.175135][T12050] should_failslab+0xc2/0x120 [ 468.175165][T12050] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 468.175220][T12050] ? nvmf_parse_options+0x39f/0x1fb0 [ 468.175272][T12050] kstrdup+0x53/0x100 [ 468.175312][T12050] nvmf_parse_options+0x39f/0x1fb0 [ 468.175367][T12050] ? __pfx_nvmf_dev_write+0x10/0x10 [ 468.175413][T12050] ? __pfx_nvmf_parse_options+0x10/0x10 [ 468.175455][T12050] ? __kasan_kmalloc+0xaa/0xb0 [ 468.175499][T12050] ? nvmf_dev_write+0x15e/0xc40 [ 468.175543][T12050] ? vfs_write+0x24c/0x1150 [ 468.175585][T12050] ? do_syscall_64+0xcd/0x250 [ 468.175680][T12050] ? kasan_save_track+0x14/0x30 [ 468.175730][T12050] nvmf_dev_write+0x183/0xc40 [ 468.175778][T12050] ? rw_verify_area+0xcf/0x680 [ 468.175819][T12050] ? __pfx_nvmf_dev_write+0x10/0x10 [ 468.175862][T12050] vfs_write+0x24c/0x1150 [ 468.175913][T12050] ? __fget_files+0x1fc/0x3a0 [ 468.175957][T12050] ? __pfx_lock_release+0x10/0x10 [ 468.176003][T12050] ? __pfx_vfs_write+0x10/0x10 [ 468.176048][T12050] ? lock_acquire+0x2f/0xb0 [ 468.176090][T12050] ? __fget_files+0x40/0x3a0 [ 468.176139][T12050] ? __fget_files+0x206/0x3a0 [ 468.176197][T12050] ksys_write+0x12b/0x250 [ 468.176239][T12050] ? __pfx_ksys_write+0x10/0x10 [ 468.176295][T12050] do_syscall_64+0xcd/0x250 [ 468.176337][T12050] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.176383][T12050] RIP: 0033:0x7f079438d169 [ 468.176407][T12050] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.176439][T12050] RSP: 002b:00007f0795264038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 468.176468][T12050] RAX: ffffffffffffffda RBX: 00007f07945a6080 RCX: 00007f079438d169 [ 468.176488][T12050] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 468.176506][T12050] RBP: 00007f0795264090 R08: 0000000000000000 R09: 0000000000000000 [ 468.176524][T12050] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.176542][T12050] R13: 0000000000000001 R14: 00007f07945a6080 R15: 00007ffc4053c148 [ 468.176582][T12050] [ 469.877443][T12075] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1610'. [ 469.934456][T12075] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 470.290293][T12084] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1616'. [ 470.302272][T12084] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1616'. [ 471.851142][T12138] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1624'. [ 473.104596][T12156] zero sized request [ 475.655319][T12207] FAULT_INJECTION: forcing a failure. [ 475.655319][T12207] name fail_futex, interval 1, probability 0, space 0, times 0 [ 475.729117][T12207] CPU: 1 UID: 0 PID: 12207 Comm: syz.4.1646 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 475.729164][T12207] Tainted: [U]=USER [ 475.729174][T12207] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 475.729191][T12207] Call Trace: [ 475.729201][T12207] [ 475.729213][T12207] dump_stack_lvl+0x16c/0x1f0 [ 475.729259][T12207] should_fail_ex+0x50a/0x650 [ 475.729309][T12207] ? __lock_acquire+0x15a9/0x3c40 [ 475.729356][T12207] get_futex_key+0xac1/0x1000 [ 475.729397][T12207] ? __pfx_get_futex_key+0x10/0x10 [ 475.729449][T12207] futex_wake+0xe8/0x4e0 [ 475.729525][T12207] ? __pfx_futex_wake+0x10/0x10 [ 475.729576][T12207] ? find_held_lock+0x2d/0x110 [ 475.729621][T12207] do_futex+0x1e5/0x350 [ 475.729668][T12207] ? __pfx_do_futex+0x10/0x10 [ 475.729707][T12207] ? __might_fault+0xe3/0x190 [ 475.729741][T12207] ? __might_fault+0xe3/0x190 [ 475.729779][T12207] mm_release+0x24e/0x300 [ 475.729827][T12207] do_exit+0x886/0x2d70 [ 475.729866][T12207] ? get_signal+0x8f7/0x26c0 [ 475.729913][T12207] ? __pfx_do_exit+0x10/0x10 [ 475.729947][T12207] ? do_raw_spin_lock+0x12d/0x2c0 [ 475.729979][T12207] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 475.730015][T12207] do_group_exit+0xd3/0x2a0 [ 475.730054][T12207] get_signal+0x24ed/0x26c0 [ 475.730109][T12207] ? find_held_lock+0x2d/0x110 [ 475.730148][T12207] ? __pfx_get_signal+0x10/0x10 [ 475.730201][T12207] ? __pfx_do_futex+0x10/0x10 [ 475.730243][T12207] arch_do_signal_or_restart+0x90/0x7e0 [ 475.730281][T12207] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 475.730330][T12207] ? rcu_is_watching+0x12/0xc0 [ 475.730372][T12207] syscall_exit_to_user_mode+0x150/0x2a0 [ 475.730416][T12207] do_syscall_64+0xda/0x250 [ 475.730461][T12207] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.730506][T12207] RIP: 0033:0x7ffb1418d169 [ 475.730530][T12207] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.730561][T12207] RSP: 002b:00007ffb1501f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 475.730590][T12207] RAX: fffffffffffffe00 RBX: 00007ffb143a5fa8 RCX: 00007ffb1418d169 [ 475.730610][T12207] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ffb143a5fa8 [ 475.730628][T12207] RBP: 00007ffb143a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 475.730656][T12207] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffb143a5fac [ 475.730676][T12207] R13: 0000000000000000 R14: 00007ffc6de583a0 R15: 00007ffc6de58488 [ 475.730715][T12207] [ 475.804843][T12208] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1644'. [ 477.652991][T12231] warning: `syz.3.1648' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 478.673839][T12247] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1656'. [ 478.871795][T12251] FAULT_INJECTION: forcing a failure. [ 478.871795][T12251] name failslab, interval 1, probability 0, space 0, times 0 [ 478.928314][T12254] netlink: 'syz.0.1657': attribute type 11 has an invalid length. [ 479.028058][T12251] CPU: 1 UID: 0 PID: 12251 Comm: syz.1.1655 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 479.028108][T12251] Tainted: [U]=USER [ 479.028119][T12251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 479.028138][T12251] Call Trace: [ 479.028148][T12251] [ 479.028160][T12251] dump_stack_lvl+0x16c/0x1f0 [ 479.028208][T12251] should_fail_ex+0x50a/0x650 [ 479.028258][T12251] ? fs_reclaim_acquire+0xae/0x150 [ 479.028304][T12251] ? __register_sysctl_table+0xb4/0x1910 [ 479.028354][T12251] should_failslab+0xc2/0x120 [ 479.028387][T12251] __kmalloc_noprof+0xcb/0x510 [ 479.028456][T12251] __register_sysctl_table+0xb4/0x1910 [ 479.028512][T12251] ? rcu_is_watching+0x12/0xc0 [ 479.028551][T12251] ? __pfx___register_sysctl_table+0x10/0x10 [ 479.028600][T12251] ? is_module_address+0x2a/0x50 [ 479.028646][T12251] ? register_net_sysctl_sz+0x228/0x3e0 [ 479.028688][T12251] ? __asan_memcpy+0x3c/0x60 [ 479.028735][T12251] mptcp_net_init+0x44e/0x5d0 [ 479.028802][T12251] ? __pfx_mptcp_net_init+0x10/0x10 [ 479.028848][T12251] ops_init+0x1df/0x5f0 [ 479.028897][T12251] setup_net+0x21f/0x860 [ 479.028944][T12251] ? __pfx_setup_net+0x10/0x10 [ 479.028988][T12251] ? down_read_killable+0xcc/0x380 [ 479.029032][T12251] ? __pfx_down_read_killable+0x10/0x10 [ 479.029074][T12251] ? __raw_spin_lock_init+0x3a/0x110 [ 479.029125][T12251] ? debug_mutex_init+0x37/0x70 [ 479.029161][T12251] copy_net_ns+0x2a6/0x5f0 [ 479.029196][T12251] create_new_namespaces+0x3ea/0xad0 [ 479.029254][T12251] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 479.029311][T12251] ksys_unshare+0x45d/0xa40 [ 479.029344][T12251] ? __pfx_ksys_unshare+0x10/0x10 [ 479.029376][T12251] ? xfd_validate_state+0x5d/0x180 [ 479.029441][T12251] __x64_sys_unshare+0x31/0x40 [ 479.029475][T12251] do_syscall_64+0xcd/0x250 [ 479.029519][T12251] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.029564][T12251] RIP: 0033:0x7f1355d8d169 [ 479.029589][T12251] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 479.029621][T12251] RSP: 002b:00007f1356c92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 479.029651][T12251] RAX: ffffffffffffffda RBX: 00007f1355fa6080 RCX: 00007f1355d8d169 [ 479.029672][T12251] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 479.029691][T12251] RBP: 00007f1355e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 479.029710][T12251] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 479.029727][T12251] R13: 0000000000000000 R14: 00007f1355fa6080 R15: 00007ffd3aa794e8 [ 479.029765][T12251] [ 484.896813][T12320] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1678'. [ 485.127697][T12332] FAULT_INJECTION: forcing a failure. [ 485.127697][T12332] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 485.145383][T12332] CPU: 0 UID: 0 PID: 12332 Comm: syz.3.1680 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 485.145434][T12332] Tainted: [U]=USER [ 485.145446][T12332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 485.145466][T12332] Call Trace: [ 485.145478][T12332] [ 485.145491][T12332] dump_stack_lvl+0x16c/0x1f0 [ 485.145541][T12332] should_fail_ex+0x50a/0x650 [ 485.145604][T12332] _copy_to_user+0x32/0xd0 [ 485.145647][T12332] simple_read_from_buffer+0xd0/0x160 [ 485.145698][T12332] proc_fail_nth_read+0x198/0x270 [ 485.145743][T12332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.145807][T12332] ? rw_verify_area+0xcf/0x680 [ 485.145852][T12332] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 485.145897][T12332] vfs_read+0x1df/0xbf0 [ 485.145949][T12332] ? __fget_files+0x1fc/0x3a0 [ 485.146003][T12332] ? __pfx___mutex_lock+0x10/0x10 [ 485.146050][T12332] ? __pfx_vfs_read+0x10/0x10 [ 485.146112][T12332] ? __fget_files+0x206/0x3a0 [ 485.146179][T12332] ksys_read+0x12b/0x250 [ 485.146229][T12332] ? __pfx_ksys_read+0x10/0x10 [ 485.146294][T12332] do_syscall_64+0xcd/0x250 [ 485.146347][T12332] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 485.146400][T12332] RIP: 0033:0x7fcdf338bb7c [ 485.146429][T12332] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 485.146463][T12332] RSP: 002b:00007fcdf11f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 485.146496][T12332] RAX: ffffffffffffffda RBX: 00007fcdf35a5fa0 RCX: 00007fcdf338bb7c [ 485.146518][T12332] RDX: 000000000000000f RSI: 00007fcdf11f60a0 RDI: 0000000000000004 [ 485.146538][T12332] RBP: 00007fcdf11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 485.146557][T12332] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 485.146578][T12332] R13: 0000000000000000 R14: 00007fcdf35a5fa0 R15: 00007ffdea52c708 [ 485.146622][T12332] [ 486.469904][T12350] FAULT_INJECTION: forcing a failure. [ 486.469904][T12350] name failslab, interval 1, probability 0, space 0, times 0 [ 486.569880][T12350] CPU: 1 UID: 0 PID: 12350 Comm: syz.0.1684 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 486.569932][T12350] Tainted: [U]=USER [ 486.569944][T12350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 486.569963][T12350] Call Trace: [ 486.569973][T12350] [ 486.569987][T12350] dump_stack_lvl+0x16c/0x1f0 [ 486.570036][T12350] should_fail_ex+0x50a/0x650 [ 486.570086][T12350] ? fs_reclaim_acquire+0xae/0x150 [ 486.570132][T12350] should_failslab+0xc2/0x120 [ 486.570163][T12350] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 486.570225][T12350] ? __xlate_proc_name+0x173/0x210 [ 486.570272][T12350] ? __proc_create+0x2c0/0x8b0 [ 486.570327][T12350] __proc_create+0x2c0/0x8b0 [ 486.570377][T12350] ? __pfx___proc_create+0x10/0x10 [ 486.570424][T12350] ? do_raw_spin_unlock+0x172/0x230 [ 486.570456][T12350] ? _raw_spin_unlock+0x28/0x50 [ 486.570500][T12350] proc_create_reg+0x7d/0x180 [ 486.570533][T12350] proc_create_net_data+0x8f/0x1b0 [ 486.570586][T12350] ? __pfx_proc_create_net_data+0x10/0x10 [ 486.570642][T12350] ? mptcp_net_init+0x485/0x5d0 [ 486.570687][T12350] ? udp_pernet_init+0x61a/0x820 [ 486.570724][T12350] ? __pfx_udplite4_proc_init_net+0x10/0x10 [ 486.570769][T12350] udplite4_proc_init_net+0x57/0x80 [ 486.570813][T12350] ops_init+0x1df/0x5f0 [ 486.570870][T12350] setup_net+0x21f/0x860 [ 486.570920][T12350] ? __pfx_setup_net+0x10/0x10 [ 486.570966][T12350] ? down_read_killable+0xcc/0x380 [ 486.571011][T12350] ? __pfx_down_read_killable+0x10/0x10 [ 486.571055][T12350] ? __raw_spin_lock_init+0x3a/0x110 [ 486.571110][T12350] ? debug_mutex_init+0x37/0x70 [ 486.571148][T12350] copy_net_ns+0x2a6/0x5f0 [ 486.571201][T12350] create_new_namespaces+0x3ea/0xad0 [ 486.571265][T12350] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 486.571342][T12350] ksys_unshare+0x45d/0xa40 [ 486.571378][T12350] ? __pfx_ksys_unshare+0x10/0x10 [ 486.571411][T12350] ? xfd_validate_state+0x5d/0x180 [ 486.571471][T12350] __x64_sys_unshare+0x31/0x40 [ 486.571505][T12350] do_syscall_64+0xcd/0x250 [ 486.571549][T12350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 486.571596][T12350] RIP: 0033:0x7f079438d169 [ 486.571631][T12350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 486.571664][T12350] RSP: 002b:00007f0795264038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 486.571696][T12350] RAX: ffffffffffffffda RBX: 00007f07945a6080 RCX: 00007f079438d169 [ 486.571717][T12350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 486.571742][T12350] RBP: 00007f079440e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 486.571762][T12350] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 486.571781][T12350] R13: 0000000000000000 R14: 00007f07945a6080 R15: 00007ffc4053c148 [ 486.571821][T12350] [ 487.972194][T12363] netlink: 206 bytes leftover after parsing attributes in process `syz.1.1688'. [ 488.417831][T12372] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1690'. [ 489.048556][T12376] netlink: 222 bytes leftover after parsing attributes in process `syz.1.1691'. [ 490.237637][T12392] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1694'. [ 490.480966][T12394] netlink: 'syz.3.1695': attribute type 4 has an invalid length. [ 490.511014][T12394] netlink: 78 bytes leftover after parsing attributes in process `syz.3.1695'. [ 494.033994][T12423] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1704'. [ 494.075185][T12423] netlink: 354 bytes leftover after parsing attributes in process `syz.3.1704'. [ 494.250832][T12437] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1709'. [ 494.295556][T12437] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.324753][T12437] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.337684][T12437] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.374729][T12437] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.103221][T12455] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 496.163720][T12455] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 496.186754][T12455] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 496.228441][T12455] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 496.282632][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 496.298545][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 496.310245][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 496.320730][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 496.336351][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 496.347791][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 496.934042][T12458] chnl_net:caif_netlink_parms(): no params data found [ 497.171191][T12458] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.184523][T12458] bridge0: port 1(bridge_slave_0) entered disabled state [ 497.192709][T12458] bridge_slave_0: entered allmulticast mode [ 497.205441][T12458] bridge_slave_0: entered promiscuous mode [ 497.215577][T12458] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.223603][T12458] bridge0: port 2(bridge_slave_1) entered disabled state [ 497.231771][T12458] bridge_slave_1: entered allmulticast mode [ 497.249133][T12458] bridge_slave_1: entered promiscuous mode [ 497.312207][T12458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 497.341514][T12458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 497.423704][T12458] team0: Port device team_slave_0 added [ 497.470805][T12458] team0: Port device team_slave_1 added [ 497.539584][T12458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 497.554660][T12458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.583641][ T53] Bluetooth: hci1: command 0x0c1a tx timeout [ 497.638302][T12458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 497.672076][T12458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 497.679939][T12458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 497.787298][T12458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 498.054181][T12458] hsr_slave_0: entered promiscuous mode [ 498.085613][T12458] hsr_slave_1: entered promiscuous mode [ 498.092456][T12458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 498.123106][T12458] Cannot create hsr debugfs directory [ 498.194857][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 498.201570][ T53] Bluetooth: hci2: command 0x0c1a tx timeout [ 498.275104][ T53] Bluetooth: hci4: command 0x0c1a tx timeout [ 498.435814][ T53] Bluetooth: hci3: command tx timeout [ 498.795807][T12458] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 498.824665][T12458] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 498.872914][T12458] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 498.919869][T12458] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 499.255613][T12458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 499.316073][T12458] 8021q: adding VLAN 0 to HW filter on device team0 [ 499.347214][ T1105] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.355139][ T1105] bridge0: port 1(bridge_slave_0) entered forwarding state [ 499.383618][ T6916] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.391558][ T6916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 499.957802][T12458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 500.514814][ T53] Bluetooth: hci3: command tx timeout [ 501.010040][T12458] veth0_vlan: entered promiscuous mode [ 501.044445][T12458] veth1_vlan: entered promiscuous mode [ 501.214310][T12458] veth0_macvtap: entered promiscuous mode [ 501.390984][T12458] veth1_macvtap: entered promiscuous mode [ 501.749879][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 501.767158][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.796384][T12458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 501.828340][T12458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 501.858056][T12458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 501.872569][T12458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 501.940746][T12458] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.960829][T12458] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.974667][T12458] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 501.995041][T12458] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.201691][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.221893][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.291418][ T3566] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.311607][ T3566] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.603574][ T53] Bluetooth: hci3: command tx timeout [ 504.683470][ T53] Bluetooth: hci3: command tx timeout [ 504.794143][T12582] netlink: 'syz.0.1741': attribute type 4 has an invalid length. [ 504.803135][T12582] netlink: 78 bytes leftover after parsing attributes in process `syz.0.1741'. [ 505.116873][T12575] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 505.174756][T12575] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 506.999717][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 507.006952][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 510.884160][T12667] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 510.924680][T12667] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 512.936992][ T9307] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.373983][ T9307] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.600899][ T9307] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.707583][ T9307] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.068005][ T9307] bridge_slave_1: left allmulticast mode [ 514.115085][ T9307] bridge_slave_1: left promiscuous mode [ 514.121453][ T9307] bridge0: port 2(bridge_slave_1) entered disabled state [ 514.198560][ T9307] bridge_slave_0: left allmulticast mode [ 514.214662][ T9307] bridge_slave_0: left promiscuous mode [ 514.221044][ T9307] bridge0: port 1(bridge_slave_0) entered disabled state [ 516.498108][ T9307] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 516.531449][ T9307] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 516.553656][ T9307] bond0 (unregistering): Released all slaves [ 516.841794][ T9307] tipc: Left network mode [ 517.643354][T12755] netlink: 504 bytes leftover after parsing attributes in process `syz.1.1771'. [ 518.084728][ T9307] hsr_slave_0: left promiscuous mode [ 518.115022][ T9307] hsr_slave_1: left promiscuous mode [ 518.121553][ T9307] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 518.159956][ T9307] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 518.196357][ T9307] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 518.222146][ T9307] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 518.295743][ T9307] veth1_macvtap: left promiscuous mode [ 518.309480][ T9307] veth0_macvtap: left promiscuous mode [ 518.346518][T12773] netlink: 222 bytes leftover after parsing attributes in process `syz.5.1776'. [ 518.364764][ T9307] veth1_vlan: left promiscuous mode [ 518.370683][ T9307] veth0_vlan: left promiscuous mode [ 518.739663][ T29] audit: type=1800 audit(4294967531.682:11): pid=12777 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1777" name="features" dev="configfs" ino=46256 res=0 errno=0 [ 519.317494][ T9307] team0 (unregistering): Port device team_slave_1 removed [ 519.406820][ T9307] team0 (unregistering): Port device team_slave_0 removed [ 519.960702][T12773] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.997801][T12838] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1791'. [ 522.785170][T12858] FAULT_INJECTION: forcing a failure. [ 522.785170][T12858] name failslab, interval 1, probability 0, space 0, times 0 [ 522.843699][T12858] CPU: 0 UID: 0 PID: 12858 Comm: syz.3.1795 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 522.843747][T12858] Tainted: [U]=USER [ 522.843757][T12858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 522.843775][T12858] Call Trace: [ 522.843783][T12858] [ 522.843795][T12858] dump_stack_lvl+0x16c/0x1f0 [ 522.843839][T12858] should_fail_ex+0x50a/0x650 [ 522.843889][T12858] ? fs_reclaim_acquire+0xae/0x150 [ 522.843933][T12858] should_failslab+0xc2/0x120 [ 522.843963][T12858] __kmalloc_node_noprof+0xd1/0x510 [ 522.844015][T12858] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 522.844064][T12858] __kvmalloc_node_noprof+0xad/0x1a0 [ 522.844111][T12858] io_uring_setup+0x2a7/0x2200 [ 522.844148][T12858] ? __pfx_io_uring_setup+0x10/0x10 [ 522.844185][T12858] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 522.844232][T12858] ? __fget_files+0x206/0x3a0 [ 522.844295][T12858] ? ksys_write+0x1ba/0x250 [ 522.844339][T12858] ? __pfx_ksys_write+0x10/0x10 [ 522.844387][T12858] __x64_sys_io_uring_setup+0x98/0x140 [ 522.844422][T12858] do_syscall_64+0xcd/0x250 [ 522.844464][T12858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 522.844508][T12858] RIP: 0033:0x7fcdf338d169 [ 522.844535][T12858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 522.844562][T12858] RSP: 002b:00007fcdf11f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 522.844590][T12858] RAX: ffffffffffffffda RBX: 00007fcdf35a5fa0 RCX: 00007fcdf338d169 [ 522.844608][T12858] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000059 [ 522.844625][T12858] RBP: 00007fcdf11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 522.844643][T12858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 522.844660][T12858] R13: 0000000000000000 R14: 00007fcdf35a5fa0 R15: 00007ffdea52c708 [ 522.844697][T12858] [ 524.206462][T12879] input: f¬Îú0?\âhÕëJL­§'$d)K‘ƒžïLšÜÈìÆoÝ1oN½‰0«´À»Ã¸.›m)$­cÕâ½Ûj¯@ÍÜqwRÀ=æX as /devices/virtual/input/input22 [ 524.555738][T12889] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1801'. [ 524.836308][T12896] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1804'. [ 524.871257][T12896] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 525.524386][T12910] FAULT_INJECTION: forcing a failure. [ 525.524386][T12910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 525.714836][T12910] CPU: 1 UID: 0 PID: 12910 Comm: syz.1.1802 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 525.714884][T12910] Tainted: [U]=USER [ 525.714894][T12910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 525.714911][T12910] Call Trace: [ 525.714920][T12910] [ 525.714933][T12910] dump_stack_lvl+0x16c/0x1f0 [ 525.714978][T12910] should_fail_ex+0x50a/0x650 [ 525.715042][T12910] _copy_from_user+0x2e/0xd0 [ 525.715076][T12910] copy_msghdr_from_user+0x99/0x160 [ 525.715125][T12910] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 525.715190][T12910] ___sys_sendmsg+0xff/0x1e0 [ 525.715239][T12910] ? __pfx____sys_sendmsg+0x10/0x10 [ 525.715302][T12910] ? __pfx_lock_release+0x10/0x10 [ 525.715347][T12910] ? trace_lock_acquire+0x14e/0x1f0 [ 525.715397][T12910] ? __fget_files+0x206/0x3a0 [ 525.715452][T12910] __sys_sendmsg+0x16e/0x220 [ 525.715499][T12910] ? __pfx___sys_sendmsg+0x10/0x10 [ 525.715568][T12910] do_syscall_64+0xcd/0x250 [ 525.715611][T12910] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 525.715668][T12910] RIP: 0033:0x7f1355d8d169 [ 525.715691][T12910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 525.715721][T12910] RSP: 002b:00007f1356cb3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 525.715749][T12910] RAX: ffffffffffffffda RBX: 00007f1355fa5fa0 RCX: 00007f1355d8d169 [ 525.715768][T12910] RDX: 0000000000000810 RSI: 0000400000002f80 RDI: 0000000000000003 [ 525.715786][T12910] RBP: 00007f1356cb3090 R08: 0000000000000000 R09: 0000000000000000 [ 525.715803][T12910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 525.715819][T12910] R13: 0000000000000000 R14: 00007f1355fa5fa0 R15: 00007ffd3aa794e8 [ 525.715854][T12910] [ 528.920518][T13011] [U] [ 528.923583][T13011] [U] [ 528.926608][T13011] [U] [ 528.929631][T13011] [U] [ 528.958698][T13013] netlink: 326 bytes leftover after parsing attributes in process `syz.5.1824'. [ 528.966339][T13011] [U] [ 528.971722][T13011] [U] [ 528.974745][T13011] [U] [ 528.977752][T13011] [U] [ 529.029448][T13011] [U] [ 529.032530][T13011] [U] [ 529.035565][T13011] [U] [ 529.038602][T13011] [U] [ 529.075022][T13011] [U] [ 529.078075][T13011] [U] [ 529.081074][T13011] [U] [ 529.084064][T13011] [U] [ 529.145149][T13011] [U] [ 529.148217][T13011] [U] [ 529.151244][T13011] [U] [ 529.154267][T13011] [U] [ 529.228451][T13011] [U] [ 529.231530][T13011] [U] [ 529.234541][T13011] [U] [ 529.237533][T13011] [U] [ 529.315877][T13011] [U] [ 529.318958][T13011] [U] [ 529.322028][T13011] [U] [ 529.325056][T13011] [U] [ 529.379506][T13011] [U] [ 529.382633][T13011] [U] [ 529.385657][T13011] [U] [ 529.388681][T13011] [U] [ 529.495586][T13011] [U] [ 529.498714][T13011] [U] [ 529.501733][T13011] [U] [ 529.504748][T13011] [U] [ 529.542539][T13011] [U] [ 529.545608][T13011] [U] [ 529.548622][T13011] [U] [ 529.551610][T13011] [U] [ 529.561109][T13021] loop6: detected capacity change from 0 to 8 [ 529.576738][T13024] nvme_fabrics: missing parameter 'transport=%s' [ 529.599048][T13024] nvme_fabrics: missing parameter 'nqn=%s' [ 529.599832][T13011] [U] [ 529.608531][T13011] [U] [ 529.611560][T13011] [U] [ 529.614572][T13011] [U] [ 529.680442][T13011] [U] [ 529.683515][T13011] [U] [ 529.686530][T13011] [U] [ 529.689541][T13011] [U] [ 529.785630][T13011] [U] [ 529.996078][T13034] HfR: entered promiscuous mode [ 530.212353][T13048] snd_dummy snd_dummy.0: control 1:6:6:¢¸è_ÅheºRŸª:0 is already present [ 531.527805][T13088] netlink: 350 bytes leftover after parsing attributes in process `syz.0.1837'. [ 531.584804][T13087] nvme_fabrics: missing parameter 'transport=%s' [ 531.591835][T13087] nvme_fabrics: missing parameter 'nqn=%s' [ 531.629364][T13090] FAULT_INJECTION: forcing a failure. [ 531.629364][T13090] name failslab, interval 1, probability 0, space 0, times 0 [ 531.674679][T13090] CPU: 1 UID: 0 PID: 13090 Comm: syz.1.1838 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 531.674723][T13090] Tainted: [U]=USER [ 531.674733][T13090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 531.674750][T13090] Call Trace: [ 531.674758][T13090] [ 531.674770][T13090] dump_stack_lvl+0x16c/0x1f0 [ 531.674814][T13090] should_fail_ex+0x50a/0x650 [ 531.674861][T13090] ? fs_reclaim_acquire+0xae/0x150 [ 531.674903][T13090] ? __request_module+0x2c6/0x6c0 [ 531.674948][T13090] should_failslab+0xc2/0x120 [ 531.674977][T13090] __kmalloc_cache_noprof+0x68/0x410 [ 531.675019][T13090] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 531.675054][T13090] ? lockdep_hardirqs_on+0x7c/0x110 [ 531.675096][T13090] __request_module+0x2c6/0x6c0 [ 531.675138][T13090] ? nvmf_dev_write+0x255/0xc40 [ 531.675181][T13090] ? __pfx___request_module+0x10/0x10 [ 531.675248][T13090] ? nvmf_dev_write+0x18e/0xc40 [ 531.675295][T13090] nvmf_dev_write+0x255/0xc40 [ 531.675341][T13090] ? rw_verify_area+0xcf/0x680 [ 531.675390][T13090] ? __pfx_nvmf_dev_write+0x10/0x10 [ 531.675431][T13090] vfs_write+0x24c/0x1150 [ 531.675473][T13090] ? __fget_files+0x1fc/0x3a0 [ 531.675514][T13090] ? __pfx_lock_release+0x10/0x10 [ 531.675555][T13090] ? __pfx_vfs_write+0x10/0x10 [ 531.675597][T13090] ? lock_acquire+0x2f/0xb0 [ 531.675637][T13090] ? __fget_files+0x40/0x3a0 [ 531.675686][T13090] ? __fget_files+0x206/0x3a0 [ 531.675737][T13090] ksys_write+0x12b/0x250 [ 531.675779][T13090] ? __pfx_ksys_write+0x10/0x10 [ 531.675829][T13090] do_syscall_64+0xcd/0x250 [ 531.675871][T13090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.675913][T13090] RIP: 0033:0x7f1355d8d169 [ 531.675936][T13090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.675965][T13090] RSP: 002b:00007f1356c92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 531.675992][T13090] RAX: ffffffffffffffda RBX: 00007f1355fa6080 RCX: 00007f1355d8d169 [ 531.676011][T13090] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 531.676028][T13090] RBP: 00007f1356c92090 R08: 0000000000000000 R09: 0000000000000000 [ 531.676045][T13090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 531.676062][T13090] R13: 0000000000000001 R14: 00007f1355fa6080 R15: 00007ffd3aa794e8 [ 531.676100][T13090] [ 531.676115][T13090] nvme_fabrics: missing parameter 'transport=%s' [ 531.963303][T13090] nvme_fabrics: missing parameter 'nqn=%s' [ 532.100680][ T29] audit: type=1326 audit(4294967545.042:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13085 comm="syz.0.1837" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f079438d169 code=0x0 [ 533.188246][T13131] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1846'. [ 533.207388][T13131] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1846'. [ 534.384756][T13144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1849'. [ 537.605145][T13235] FAULT_INJECTION: forcing a failure. [ 537.605145][T13235] name failslab, interval 1, probability 0, space 0, times 0 [ 537.644825][T13235] CPU: 0 UID: 0 PID: 13235 Comm: syz.3.1871 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 537.644871][T13235] Tainted: [U]=USER [ 537.644880][T13235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 537.644905][T13235] Call Trace: [ 537.644914][T13235] [ 537.644925][T13235] dump_stack_lvl+0x16c/0x1f0 [ 537.644967][T13235] should_fail_ex+0x50a/0x650 [ 537.645012][T13235] ? fs_reclaim_acquire+0xae/0x150 [ 537.645051][T13235] should_failslab+0xc2/0x120 [ 537.645079][T13235] __kmalloc_node_noprof+0xd1/0x510 [ 537.645125][T13235] ? __pfx___mutex_lock+0x10/0x10 [ 537.645162][T13235] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 537.645208][T13235] __kvmalloc_node_noprof+0xad/0x1a0 [ 537.645251][T13235] traverse.part.0.constprop.0+0x392/0x640 [ 537.645290][T13235] ? __pfx_lock_release+0x10/0x10 [ 537.645331][T13235] ? trace_lock_acquire+0x14e/0x1f0 [ 537.645371][T13235] seq_read_iter+0x934/0x12b0 [ 537.645410][T13235] ? aa_file_perm+0x4d5/0xfe0 [ 537.645459][T13235] seq_read+0x39f/0x4e0 [ 537.645496][T13235] ? __pfx_seq_read+0x10/0x10 [ 537.645567][T13235] ? __pfx_seq_read+0x10/0x10 [ 537.645602][T13235] proc_reg_read+0x23d/0x330 [ 537.645645][T13235] ? __pfx_proc_reg_read+0x10/0x10 [ 537.645689][T13235] vfs_read+0x1df/0xbf0 [ 537.645728][T13235] ? __fget_files+0x1fc/0x3a0 [ 537.645768][T13235] ? __pfx_lock_release+0x10/0x10 [ 537.645808][T13235] ? __pfx_vfs_read+0x10/0x10 [ 537.645848][T13235] ? lock_acquire+0x2f/0xb0 [ 537.645884][T13235] ? __fget_files+0x40/0x3a0 [ 537.645937][T13235] ? __fget_files+0x206/0x3a0 [ 537.645986][T13235] __x64_sys_pread64+0x1f6/0x250 [ 537.646028][T13235] ? __pfx___x64_sys_pread64+0x10/0x10 [ 537.646080][T13235] do_syscall_64+0xcd/0x250 [ 537.646119][T13235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 537.646162][T13235] RIP: 0033:0x7fcdf338d169 [ 537.646184][T13235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 537.646210][T13235] RSP: 002b:00007fcdf11f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 537.646236][T13235] RAX: ffffffffffffffda RBX: 00007fcdf35a5fa0 RCX: 00007fcdf338d169 [ 537.646254][T13235] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 537.646270][T13235] RBP: 00007fcdf11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 537.646287][T13235] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 537.646303][T13235] R13: 0000000000000000 R14: 00007fcdf35a5fa0 R15: 00007ffdea52c708 [ 537.646338][T13235] [ 538.978064][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 541.137721][T13314] netlink: 'syz.3.1886': attribute type 8 has an invalid length. [ 544.095598][T13407] netlink: 'syz.0.1899': attribute type 8 has an invalid length. [ 545.726539][T13457] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1907'. [ 546.704672][ T29] audit: type=1326 audit(4294967559.642:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13456 comm="syz.3.1907" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fcdf338d169 code=0x0 [ 547.812783][T13492] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 547.835771][T13492] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 548.335022][T13516] netlink: 186 bytes leftover after parsing attributes in process `syz.5.1915'. [ 548.857126][T13530] FAULT_INJECTION: forcing a failure. [ 548.857126][T13530] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.924361][T13530] CPU: 1 UID: 0 PID: 13530 Comm: syz.1.1927 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 548.924421][T13530] Tainted: [U]=USER [ 548.924432][T13530] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 548.924453][T13530] Call Trace: [ 548.924462][T13530] [ 548.924474][T13530] dump_stack_lvl+0x16c/0x1f0 [ 548.924523][T13530] should_fail_ex+0x50a/0x650 [ 548.924577][T13530] strncpy_from_user+0x3b/0x2d0 [ 548.924625][T13530] getname_flags.part.0+0x8f/0x550 [ 548.924666][T13530] getname+0x8d/0xe0 [ 548.924708][T13530] do_sys_openat2+0x104/0x1e0 [ 548.924741][T13530] ? __pfx_do_sys_openat2+0x10/0x10 [ 548.924774][T13530] ? do_raw_spin_unlock+0x172/0x230 [ 548.924814][T13530] __x64_sys_openat+0x175/0x210 [ 548.924848][T13530] ? __pfx___x64_sys_openat+0x10/0x10 [ 548.924897][T13530] do_syscall_64+0xcd/0x250 [ 548.924942][T13530] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.924988][T13530] RIP: 0033:0x7f1355d8d169 [ 548.925010][T13530] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.925039][T13530] RSP: 002b:00007f1356cb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 548.925068][T13530] RAX: ffffffffffffffda RBX: 00007f1355fa5fa0 RCX: 00007f1355d8d169 [ 548.925087][T13530] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 548.925105][T13530] RBP: 00007f1355e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 548.925121][T13530] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 548.925145][T13530] R13: 0000000000000000 R14: 00007f1355fa5fa0 R15: 00007ffd3aa794e8 [ 548.925180][T13530] [ 552.253527][T13604] random: crng reseeded on system resumption [ 554.381702][T13644] program syz.3.1947 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 559.850152][T13790] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1984'. [ 560.231503][T13798] netlink: 15968 bytes leftover after parsing attributes in process `syz.3.1983'. [ 561.305324][T13825] Invalid ELF header magic: != ELF [ 563.039637][T13866] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1998'. [ 563.727483][T13869] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 564.610503][T13899] netlink: 222 bytes leftover after parsing attributes in process `syz.1.2007'. [ 565.799000][T13925] Invalid ELF header magic: != ELF [ 567.443665][T13950] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2018'. [ 568.311147][T13955] FAULT_INJECTION: forcing a failure. [ 568.311147][T13955] name failslab, interval 1, probability 0, space 0, times 0 [ 568.325791][T13955] CPU: 0 UID: 0 PID: 13955 Comm: syz.1.2022 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 568.325833][T13955] Tainted: [U]=USER [ 568.325844][T13955] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 568.325861][T13955] Call Trace: [ 568.325870][T13955] [ 568.325882][T13955] dump_stack_lvl+0x116/0x1f0 [ 568.325924][T13955] should_fail_ex+0x50a/0x650 [ 568.325972][T13955] ? trace_lock_acquire+0x14e/0x1f0 [ 568.326015][T13955] should_failslab+0xc2/0x120 [ 568.326045][T13955] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 568.326093][T13955] ? __send_signal_locked+0x159/0x12c0 [ 568.326135][T13955] ? sig_get_ucounts+0x1c0/0x5b0 [ 568.326175][T13955] __send_signal_locked+0x159/0x12c0 [ 568.326226][T13955] do_notify_parent+0xeb4/0x1040 [ 568.326272][T13955] ? __pfx_do_notify_parent+0x10/0x10 [ 568.326318][T13955] ? release_task+0xd24/0x1b00 [ 568.326351][T13955] ? __pfx_lock_release+0x10/0x10 [ 568.326405][T13955] ? __change_pid+0x3ba/0x5a0 [ 568.326450][T13955] release_task+0x1583/0x1b00 [ 568.326490][T13955] ? do_exit+0x15c3/0x2d70 [ 568.326523][T13955] ? __pfx_release_task+0x10/0x10 [ 568.326573][T13955] do_exit+0x16ca/0x2d70 [ 568.326611][T13955] ? get_signal+0x8f7/0x26c0 [ 568.326659][T13955] ? __pfx_do_exit+0x10/0x10 [ 568.326696][T13955] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 568.326743][T13955] do_group_exit+0xd3/0x2a0 [ 568.326782][T13955] get_signal+0x24ed/0x26c0 [ 568.326845][T13955] ? __pfx_get_signal+0x10/0x10 [ 568.326898][T13955] ? __pfx_do_futex+0x10/0x10 [ 568.326944][T13955] arch_do_signal_or_restart+0x90/0x7e0 [ 568.326982][T13955] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 568.327032][T13955] ? rcu_is_watching+0x12/0xc0 [ 568.327074][T13955] syscall_exit_to_user_mode+0x150/0x2a0 [ 568.327117][T13955] do_syscall_64+0xda/0x250 [ 568.327160][T13955] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.327205][T13955] RIP: 0033:0x7f1355d8d169 [ 568.327229][T13955] Code: Unable to access opcode bytes at 0x7f1355d8d13f. [ 568.327243][T13955] RSP: 002b:00007f1356cb30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 568.327271][T13955] RAX: 0000000000000001 RBX: 00007f1355fa5fa8 RCX: 00007f1355d8d169 [ 568.327291][T13955] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f1355fa5fac [ 568.327309][T13955] RBP: 00007f1355fa5fa0 R08: 00007f1356cb4000 R09: 0000000000000000 [ 568.327328][T13955] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f1355fa5fac [ 568.327346][T13955] R13: 0000000000000000 R14: 00007ffd3aa79400 R15: 00007ffd3aa794e8 [ 568.327386][T13955] [ 568.605040][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.612149][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 569.123284][T13974] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2025'. [ 569.214468][T13977] FAULT_INJECTION: forcing a failure. [ 569.214468][T13977] name failslab, interval 1, probability 0, space 0, times 0 [ 569.230333][T13977] CPU: 0 UID: 0 PID: 13977 Comm: syz.5.2027 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 569.230377][T13977] Tainted: [U]=USER [ 569.230386][T13977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 569.230403][T13977] Call Trace: [ 569.230413][T13977] [ 569.230426][T13977] dump_stack_lvl+0x16c/0x1f0 [ 569.230471][T13977] should_fail_ex+0x50a/0x650 [ 569.230521][T13977] ? fs_reclaim_acquire+0xae/0x150 [ 569.230565][T13977] should_failslab+0xc2/0x120 [ 569.230595][T13977] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 569.230647][T13977] ? __alloc_skb+0x2b1/0x380 [ 569.230695][T13977] __alloc_skb+0x2b1/0x380 [ 569.230738][T13977] ? __pfx___alloc_skb+0x10/0x10 [ 569.230785][T13977] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 569.230834][T13977] netlink_alloc_large_skb+0x69/0x130 [ 569.230880][T13977] netlink_sendmsg+0x689/0xd70 [ 569.230936][T13977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 569.230995][T13977] ____sys_sendmsg+0xaaf/0xc90 [ 569.231030][T13977] ? copy_msghdr_from_user+0x10b/0x160 [ 569.231078][T13977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 569.231131][T13977] ___sys_sendmsg+0x135/0x1e0 [ 569.231178][T13977] ? __pfx____sys_sendmsg+0x10/0x10 [ 569.231242][T13977] ? __pfx_lock_release+0x10/0x10 [ 569.231285][T13977] ? trace_lock_acquire+0x14e/0x1f0 [ 569.231340][T13977] ? __fget_files+0x206/0x3a0 [ 569.231397][T13977] __sys_sendmsg+0x16e/0x220 [ 569.231446][T13977] ? __pfx___sys_sendmsg+0x10/0x10 [ 569.231520][T13977] do_syscall_64+0xcd/0x250 [ 569.231566][T13977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.231611][T13977] RIP: 0033:0x7f177838d169 [ 569.231636][T13977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.231669][T13977] RSP: 002b:00007f17791e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 569.231699][T13977] RAX: ffffffffffffffda RBX: 00007f17785a5fa0 RCX: 00007f177838d169 [ 569.231720][T13977] RDX: 0000000000000810 RSI: 0000400000002f80 RDI: 0000000000000003 [ 569.231740][T13977] RBP: 00007f17791e4090 R08: 0000000000000000 R09: 0000000000000000 [ 569.231760][T13977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.231780][T13977] R13: 0000000000000000 R14: 00007f17785a5fa0 R15: 00007ffe3b76ec88 [ 569.231819][T13977] [ 569.842123][ T29] audit: type=1804 audit(4294967582.782:14): pid=13990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2030" name="/newroot/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw" dev="tracefs" ino=1172 res=1 errno=0 [ 570.121035][T13999] netlink: 222 bytes leftover after parsing attributes in process `syz.5.2033'. [ 570.200258][ T29] audit: type=1804 audit(4294967583.142:15): pid=14001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2041" name="/newroot/sys/kernel/tracing/per_cpu/cpu1/trace_pipe_raw" dev="tracefs" ino=1172 res=1 errno=0 [ 570.828844][T14015] Invalid ELF header magic: != ELF [ 571.618674][T14023] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2037'. [ 571.896755][T14030] openvswitch: netlink: Flow actions attr not present in new flow. [ 572.841785][T14049] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 572.850664][T14049] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 573.059865][T14052] HfR: entered promiscuous mode [ 574.604369][T14082] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2055'. [ 575.652299][T14101] openvswitch: netlink: Flow actions attr not present in new flow. [ 575.953593][ T29] audit: type=1800 audit(4294967588.892:16): pid=14110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2062" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 576.684919][ T29] audit: type=1326 audit(4294967589.622:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14121 comm="syz.5.2073" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f177838d169 code=0x0 [ 577.961207][T14159] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2071'. [ 580.804434][T14208] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2088'. [ 581.389357][T14218] MTRR 1 not used [ 582.031594][T14238] FAULT_INJECTION: forcing a failure. [ 582.031594][T14238] name failslab, interval 1, probability 0, space 0, times 0 [ 582.118631][T14238] CPU: 0 UID: 0 PID: 14238 Comm: syz.0.2100 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 582.118679][T14238] Tainted: [U]=USER [ 582.118689][T14238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 582.118707][T14238] Call Trace: [ 582.118716][T14238] [ 582.118728][T14238] dump_stack_lvl+0x16c/0x1f0 [ 582.118782][T14238] should_fail_ex+0x50a/0x650 [ 582.118846][T14238] ? fs_reclaim_acquire+0xae/0x150 [ 582.118888][T14238] ? netstat_seq_show+0x10d/0xaf0 [ 582.118932][T14238] should_failslab+0xc2/0x120 [ 582.118963][T14238] __kmalloc_cache_noprof+0x68/0x410 [ 582.119003][T14238] ? __asan_memcpy+0x3c/0x60 [ 582.119052][T14238] netstat_seq_show+0x10d/0xaf0 [ 582.119093][T14238] ? __mutex_lock+0x1/0xb10 [ 582.119130][T14238] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 582.119184][T14238] traverse.part.0.constprop.0+0x104/0x640 [ 582.119227][T14238] ? __pfx_lock_release+0x10/0x10 [ 582.119279][T14238] seq_read_iter+0x934/0x12b0 [ 582.119321][T14238] ? aa_file_perm+0x4d5/0xfe0 [ 582.119373][T14238] seq_read+0x39f/0x4e0 [ 582.119411][T14238] ? __pfx_seq_read+0x10/0x10 [ 582.119474][T14238] ? __pfx_seq_read+0x10/0x10 [ 582.119514][T14238] proc_reg_read+0x23d/0x330 [ 582.119560][T14238] ? __pfx_proc_reg_read+0x10/0x10 [ 582.119608][T14238] vfs_read+0x1df/0xbf0 [ 582.119652][T14238] ? __fget_files+0x1fc/0x3a0 [ 582.119702][T14238] ? __pfx_lock_release+0x10/0x10 [ 582.119770][T14238] ? __pfx_vfs_read+0x10/0x10 [ 582.119814][T14238] ? lock_acquire+0x2f/0xb0 [ 582.119856][T14238] ? __fget_files+0x40/0x3a0 [ 582.119908][T14238] ? __fget_files+0x206/0x3a0 [ 582.119964][T14238] __x64_sys_pread64+0x1f6/0x250 [ 582.120011][T14238] ? __pfx___x64_sys_pread64+0x10/0x10 [ 582.120069][T14238] do_syscall_64+0xcd/0x250 [ 582.120125][T14238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 582.120169][T14238] RIP: 0033:0x7f079438d169 [ 582.120193][T14238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 582.120223][T14238] RSP: 002b:00007f0795285038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 582.120251][T14238] RAX: ffffffffffffffda RBX: 00007f07945a5fa0 RCX: 00007f079438d169 [ 582.120271][T14238] RDX: 0000000000000003 RSI: 0000000000000000 RDI: 0000000000000003 [ 582.120288][T14238] RBP: 00007f0795285090 R08: 0000000000000000 R09: 0000000000000000 [ 582.120304][T14238] R10: 0000000000008000 R11: 0000000000000246 R12: 0000000000000001 [ 582.120321][T14238] R13: 0000000000000000 R14: 00007f07945a5fa0 R15: 00007ffc4053c148 [ 582.120358][T14238] [ 583.498572][ T29] audit: type=1800 audit(4294967596.442:18): pid=14275 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.2108" name="dbroot" dev="configfs" ino=53613 res=0 errno=0 [ 583.908943][T14281] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2110'. [ 585.021255][T14289] WARNING! power/level is deprecated; use power/control instead [ 585.103166][T14299] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2115'. [ 585.166953][T14293] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2113'. [ 585.220873][T14293] team_slave_0: entered allmulticast mode [ 586.196109][T14321] FAULT_INJECTION: forcing a failure. [ 586.196109][T14321] name failslab, interval 1, probability 0, space 0, times 0 [ 586.266854][T14321] CPU: 0 UID: 0 PID: 14321 Comm: syz.0.2123 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 586.266899][T14321] Tainted: [U]=USER [ 586.266908][T14321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 586.266926][T14321] Call Trace: [ 586.266935][T14321] [ 586.266946][T14321] dump_stack_lvl+0x16c/0x1f0 [ 586.266991][T14321] should_fail_ex+0x50a/0x650 [ 586.267039][T14321] ? fs_reclaim_acquire+0xae/0x150 [ 586.267081][T14321] ? tomoyo_realpath_from_path+0xb9/0x720 [ 586.267124][T14321] should_failslab+0xc2/0x120 [ 586.267153][T14321] __kmalloc_noprof+0xcb/0x510 [ 586.267200][T14321] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 586.267252][T14321] tomoyo_realpath_from_path+0xb9/0x720 [ 586.267296][T14321] ? tomoyo_path_number_perm+0x235/0x590 [ 586.267335][T14321] ? tomoyo_path_number_perm+0x235/0x590 [ 586.267375][T14321] tomoyo_path_number_perm+0x248/0x590 [ 586.267414][T14321] ? tomoyo_path_number_perm+0x235/0x590 [ 586.267454][T14321] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 586.267526][T14321] ? __pfx_lock_release+0x10/0x10 [ 586.267569][T14321] ? trace_lock_acquire+0x14e/0x1f0 [ 586.267638][T14321] ? lock_acquire+0x2f/0xb0 [ 586.267681][T14321] ? __fget_files+0x40/0x3a0 [ 586.267732][T14321] ? __fget_files+0x206/0x3a0 [ 586.267785][T14321] security_file_ioctl+0x9b/0x240 [ 586.267826][T14321] __x64_sys_ioctl+0xb7/0x200 [ 586.267867][T14321] do_syscall_64+0xcd/0x250 [ 586.267911][T14321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 586.267955][T14321] RIP: 0033:0x7f079438d169 [ 586.267978][T14321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 586.268008][T14321] RSP: 002b:00007f0795285038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 586.268038][T14321] RAX: ffffffffffffffda RBX: 00007f07945a5fa0 RCX: 00007f079438d169 [ 586.268058][T14321] RDX: 0000000000000000 RSI: 00000000400454d4 RDI: 0000000000000003 [ 586.268075][T14321] RBP: 00007f0795285090 R08: 0000000000000000 R09: 0000000000000000 [ 586.268094][T14321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 586.268111][T14321] R13: 0000000000000000 R14: 00007f07945a5fa0 R15: 00007ffc4053c148 [ 586.268151][T14321] [ 586.268298][T14321] ERROR: Out of memory at tomoyo_realpath_from_path. [ 587.091226][T14334] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2127'. [ 587.687885][T14345] FAULT_INJECTION: forcing a failure. [ 587.687885][T14345] name failslab, interval 1, probability 0, space 0, times 0 [ 587.702117][T14345] CPU: 0 UID: 0 PID: 14345 Comm: syz.3.2130 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 587.702160][T14345] Tainted: [U]=USER [ 587.702170][T14345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 587.702187][T14345] Call Trace: [ 587.702196][T14345] [ 587.702207][T14345] dump_stack_lvl+0x16c/0x1f0 [ 587.702250][T14345] should_fail_ex+0x50a/0x650 [ 587.702298][T14345] ? fs_reclaim_acquire+0xae/0x150 [ 587.702341][T14345] should_failslab+0xc2/0x120 [ 587.702372][T14345] __kmalloc_node_noprof+0xd1/0x510 [ 587.702420][T14345] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 587.702487][T14345] __kvmalloc_node_noprof+0xad/0x1a0 [ 587.702535][T14345] io_alloc_cache_init+0x33/0x170 [ 587.702581][T14345] io_uring_setup+0x5d6/0x2200 [ 587.702630][T14345] ? __pfx_io_uring_setup+0x10/0x10 [ 587.702669][T14345] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 587.702719][T14345] ? __fget_files+0x206/0x3a0 [ 587.702777][T14345] ? ksys_write+0x1ba/0x250 [ 587.702823][T14345] ? __pfx_ksys_write+0x10/0x10 [ 587.702876][T14345] __x64_sys_io_uring_setup+0x98/0x140 [ 587.702912][T14345] do_syscall_64+0xcd/0x250 [ 587.702955][T14345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.703001][T14345] RIP: 0033:0x7fcdf338d169 [ 587.703026][T14345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.703058][T14345] RSP: 002b:00007fcdf11f6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 587.703089][T14345] RAX: ffffffffffffffda RBX: 00007fcdf35a5fa0 RCX: 00007fcdf338d169 [ 587.703111][T14345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000059 [ 587.703130][T14345] RBP: 00007fcdf11f6090 R08: 0000000000000000 R09: 0000000000000000 [ 587.703150][T14345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 587.703169][T14345] R13: 0000000000000000 R14: 00007fcdf35a5fa0 R15: 00007ffdea52c708 [ 587.703208][T14345] [ 587.915381][ C0] vkms_vblank_simulate: vblank timer overrun [ 588.003999][T14341] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 588.012486][T14341] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 589.216264][T14370] svc: failed to register nfsdv3 RPC service (errno 22). [ 589.236791][T14370] svc: failed to register nfsaclv3 RPC service (errno 22). [ 590.103380][T14373] delete_channel: no stack [ 592.565214][T14447] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 592.848122][T14455] FAULT_INJECTION: forcing a failure. [ 592.848122][T14455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 592.875072][T14455] CPU: 0 UID: 0 PID: 14455 Comm: syz.0.2159 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 592.875119][T14455] Tainted: [U]=USER [ 592.875130][T14455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 592.875149][T14455] Call Trace: [ 592.875159][T14455] [ 592.875172][T14455] dump_stack_lvl+0x16c/0x1f0 [ 592.875226][T14455] should_fail_ex+0x50a/0x650 [ 592.875283][T14455] _copy_from_iter+0x2a1/0x1560 [ 592.875317][T14455] ? trace_lock_acquire+0x14e/0x1f0 [ 592.875361][T14455] ? __pfx__copy_from_iter+0x10/0x10 [ 592.875391][T14455] ? __virt_addr_valid+0x1a4/0x590 [ 592.875431][T14455] ? __virt_addr_valid+0x5e/0x590 [ 592.875464][T14455] ? __phys_addr_symbol+0x30/0x80 [ 592.875496][T14455] ? __check_object_size+0x488/0x710 [ 592.875533][T14455] kernfs_fop_write_iter+0x19d/0x500 [ 592.875575][T14455] vfs_write+0x5ae/0x1150 [ 592.875620][T14455] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 592.875657][T14455] ? __pfx___mutex_lock+0x10/0x10 [ 592.875699][T14455] ? __pfx_vfs_write+0x10/0x10 [ 592.875771][T14455] ksys_write+0x12b/0x250 [ 592.875815][T14455] ? __pfx_ksys_write+0x10/0x10 [ 592.875870][T14455] do_syscall_64+0xcd/0x250 [ 592.875915][T14455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 592.875961][T14455] RIP: 0033:0x7f079438d169 [ 592.875986][T14455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 592.876018][T14455] RSP: 002b:00007f0795285038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 592.876048][T14455] RAX: ffffffffffffffda RBX: 00007f07945a5fa0 RCX: 00007f079438d169 [ 592.876068][T14455] RDX: 000000000002fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 592.876088][T14455] RBP: 00007f0795285090 R08: 0000000000000000 R09: 0000000000000000 [ 592.876108][T14455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 592.876126][T14455] R13: 0000000000000000 R14: 00007f07945a5fa0 R15: 00007ffc4053c148 [ 592.876166][T14455] [ 593.239568][T14463] netlink: 222 bytes leftover after parsing attributes in process `syz.1.2158'. [ 594.697539][T14496] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 595.090891][ T29] audit: type=1800 audit(4294967608.032:19): pid=14504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.2171" name="file0" dev="tmpfs" ino=2901 res=0 errno=0 [ 595.574060][T14519] FAULT_INJECTION: forcing a failure. [ 595.574060][T14519] name failslab, interval 1, probability 0, space 0, times 0 [ 595.602571][T14519] CPU: 0 UID: 0 PID: 14519 Comm: syz.0.2177 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 595.602620][T14519] Tainted: [U]=USER [ 595.602632][T14519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 595.602651][T14519] Call Trace: [ 595.602661][T14519] [ 595.602674][T14519] dump_stack_lvl+0x16c/0x1f0 [ 595.602721][T14519] should_fail_ex+0x50a/0x650 [ 595.602769][T14519] ? fs_reclaim_acquire+0xae/0x150 [ 595.602815][T14519] should_failslab+0xc2/0x120 [ 595.602848][T14519] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 595.602911][T14519] ? vma_merge_new_range+0x40a/0xbb0 [ 595.602958][T14519] ? vm_area_alloc+0x1f/0x230 [ 595.603015][T14519] vm_area_alloc+0x1f/0x230 [ 595.603061][T14519] __mmap_region+0x108d/0x2760 [ 595.603096][T14519] ? __pfx___mmap_region+0x10/0x10 [ 595.603136][T14519] ? hlock_class+0x4e/0x130 [ 595.603170][T14519] ? mark_lock+0xb5/0xc60 [ 595.603286][T14519] mmap_region+0x32b/0x3f0 [ 595.603324][T14519] do_mmap+0xd8d/0x11b0 [ 595.603373][T14519] ? __pfx_do_mmap+0x10/0x10 [ 595.603415][T14519] ? __pfx_down_write_killable+0x10/0x10 [ 595.603468][T14519] vm_mmap_pgoff+0x203/0x3a0 [ 595.603521][T14519] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 595.603572][T14519] ? __fget_files+0x206/0x3a0 [ 595.603624][T14519] ksys_mmap_pgoff+0x32c/0x5c0 [ 595.603664][T14519] ? __pfx_ksys_write+0x10/0x10 [ 595.603711][T14519] __x64_sys_mmap+0x125/0x190 [ 595.603762][T14519] do_syscall_64+0xcd/0x250 [ 595.603798][T14519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 595.603835][T14519] RIP: 0033:0x7f079438d169 [ 595.603855][T14519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 595.603880][T14519] RSP: 002b:00007f0795285038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 595.603904][T14519] RAX: ffffffffffffffda RBX: 00007f07945a5fa0 RCX: 00007f079438d169 [ 595.603921][T14519] RDX: 7fffffffffffffff RSI: 0000000000000009 RDI: 0000080000000000 [ 595.603937][T14519] RBP: 00007f0795285090 R08: 0000000000000001 R09: 0000010000008000 [ 595.603954][T14519] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 595.603970][T14519] R13: 0000000000000000 R14: 00007f07945a5fa0 R15: 00007ffc4053c148 [ 595.604005][T14519] [ 596.437700][T14531] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 596.461475][T14536] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 596.502160][T14536] usb usb15: usbfs: interface 0 claimed by hub while 'syz.1.2182' sets config #5 [ 596.866559][T14545] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2185'. [ 596.886158][T14545] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2185'. [ 597.368712][T14560] openvswitch: netlink: Flow key attribute not present in set flow. [ 597.497071][T14557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2187'. [ 597.803846][T14566] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2191'. [ 597.831352][T14566] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2191'. [ 598.336424][T14580] FAULT_INJECTION: forcing a failure. [ 598.336424][T14580] name failslab, interval 1, probability 0, space 0, times 0 [ 598.382075][T14580] CPU: 1 UID: 0 PID: 14580 Comm: syz.0.2197 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 598.382124][T14580] Tainted: [U]=USER [ 598.382134][T14580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 598.382150][T14580] Call Trace: [ 598.382158][T14580] [ 598.382169][T14580] dump_stack_lvl+0x16c/0x1f0 [ 598.382208][T14580] should_fail_ex+0x50a/0x650 [ 598.382251][T14580] ? fs_reclaim_acquire+0xae/0x150 [ 598.382291][T14580] should_failslab+0xc2/0x120 [ 598.382320][T14580] __kmalloc_node_noprof+0xd1/0x510 [ 598.382362][T14580] ? aa_file_perm+0x4c6/0xfe0 [ 598.382410][T14580] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 598.382451][T14580] __kvmalloc_node_noprof+0xad/0x1a0 [ 598.382489][T14580] seq_read_iter+0x82a/0x12b0 [ 598.382526][T14580] ? aa_file_perm+0x4d5/0xfe0 [ 598.382574][T14580] seq_read+0x39f/0x4e0 [ 598.382606][T14580] ? __pfx_seq_read+0x10/0x10 [ 598.382658][T14580] ? __pfx_seq_read+0x10/0x10 [ 598.382690][T14580] proc_reg_read+0x23d/0x330 [ 598.382729][T14580] ? __pfx_proc_reg_read+0x10/0x10 [ 598.382768][T14580] vfs_read+0x1df/0xbf0 [ 598.382805][T14580] ? __fget_files+0x1fc/0x3a0 [ 598.382842][T14580] ? __pfx___mutex_lock+0x10/0x10 [ 598.382875][T14580] ? __pfx_vfs_read+0x10/0x10 [ 598.382918][T14580] ? __fget_files+0x206/0x3a0 [ 598.382964][T14580] ksys_read+0x12b/0x250 [ 598.383003][T14580] ? __pfx_ksys_read+0x10/0x10 [ 598.383047][T14580] do_syscall_64+0xcd/0x250 [ 598.383083][T14580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 598.383120][T14580] RIP: 0033:0x7f079438d169 [ 598.383140][T14580] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.383165][T14580] RSP: 002b:00007f0795264038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 598.383189][T14580] RAX: ffffffffffffffda RBX: 00007f07945a6080 RCX: 00007f079438d169 [ 598.383207][T14580] RDX: 0000000000000008 RSI: 0000000000000000 RDI: 0000000000000004 [ 598.383222][T14580] RBP: 00007f0795264090 R08: 0000000000000000 R09: 0000000000000000 [ 598.383239][T14580] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.383254][T14580] R13: 0000000000000000 R14: 00007f07945a6080 R15: 00007ffc4053c148 [ 598.383286][T14580] [ 599.895850][T14613] openvswitch: netlink: Flow key attribute not present in set flow. [ 600.111572][T14620] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(2) [ 600.268487][T14617] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 600.280226][T14617] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 600.299471][T14629] netlink: 'syz.3.2215': attribute type 11 has an invalid length. [ 600.604408][T14643] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2219'. [ 600.616746][T14642] usbip-vudc usbip-vudc.0: gadget not bound [ 600.628065][T14643] FAULT_INJECTION: forcing a failure. [ 600.628065][T14643] name failslab, interval 1, probability 0, space 0, times 0 [ 600.644603][T14643] CPU: 0 UID: 0 PID: 14643 Comm: syz.5.2219 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 600.644650][T14643] Tainted: [U]=USER [ 600.644661][T14643] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 600.644679][T14643] Call Trace: [ 600.644689][T14643] [ 600.644701][T14643] dump_stack_lvl+0x16c/0x1f0 [ 600.644745][T14643] should_fail_ex+0x50a/0x650 [ 600.644797][T14643] should_failslab+0xc2/0x120 [ 600.644828][T14643] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 600.644879][T14643] ? skb_clone+0x190/0x3f0 [ 600.644929][T14643] skb_clone+0x190/0x3f0 [ 600.644976][T14643] netlink_deliver_tap+0xabd/0xd30 [ 600.645025][T14643] netlink_unicast+0x6b4/0x7f0 [ 600.645072][T14643] ? __pfx_netlink_unicast+0x10/0x10 [ 600.645111][T14643] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 600.645165][T14643] netlink_ack+0x6ac/0xb80 [ 600.645217][T14643] netlink_rcv_skb+0x348/0x440 [ 600.645259][T14643] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 600.645307][T14643] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 600.645395][T14643] ? netlink_deliver_tap+0x1ae/0xd30 [ 600.645453][T14643] netlink_unicast+0x53c/0x7f0 [ 600.645500][T14643] ? __pfx_netlink_unicast+0x10/0x10 [ 600.645544][T14643] ? __phys_addr_symbol+0x30/0x80 [ 600.645577][T14643] ? __check_object_size+0x488/0x710 [ 600.645614][T14643] netlink_sendmsg+0x8b8/0xd70 [ 600.645663][T14643] ? __pfx_netlink_sendmsg+0x10/0x10 [ 600.645721][T14643] ____sys_sendmsg+0xaaf/0xc90 [ 600.645755][T14643] ? copy_msghdr_from_user+0x10b/0x160 [ 600.645798][T14643] ? __pfx_____sys_sendmsg+0x10/0x10 [ 600.645849][T14643] ___sys_sendmsg+0x135/0x1e0 [ 600.645896][T14643] ? __pfx____sys_sendmsg+0x10/0x10 [ 600.645956][T14643] ? __pfx_lock_release+0x10/0x10 [ 600.646000][T14643] ? trace_lock_acquire+0x14e/0x1f0 [ 600.646048][T14643] ? __fget_files+0x206/0x3a0 [ 600.646101][T14643] __sys_sendmsg+0x16e/0x220 [ 600.646146][T14643] ? __pfx___sys_sendmsg+0x10/0x10 [ 600.646215][T14643] do_syscall_64+0xcd/0x250 [ 600.646259][T14643] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.646302][T14643] RIP: 0033:0x7f177838d169 [ 600.646327][T14643] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.646357][T14643] RSP: 002b:00007f17791e4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 600.646386][T14643] RAX: ffffffffffffffda RBX: 00007f17785a5fa0 RCX: 00007f177838d169 [ 600.646406][T14643] RDX: 0000000000000850 RSI: 0000400000000140 RDI: 0000000000000003 [ 600.646431][T14643] RBP: 00007f17791e4090 R08: 0000000000000000 R09: 0000000000000000 [ 600.646450][T14643] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 600.646468][T14643] R13: 0000000000000000 R14: 00007f17785a5fa0 R15: 00007ffe3b76ec88 [ 600.646505][T14643] [ 601.286289][T14658] openvswitch: netlink: Flow key attribute not present in set flow. [ 601.631486][T14665] netlink: 342 bytes leftover after parsing attributes in process `syz.5.2225'. [ 601.867854][T14659] delete_channel: no stack [ 602.109841][T14690] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2230'. [ 602.524741][T14700] usbip-vudc usbip-vudc.0: gadget not bound [ 602.801511][T14695] netlink: 186 bytes leftover after parsing attributes in process `syz.0.2231'. [ 602.811805][ T5148] Bluetooth: hci1: Malformed HCI Event [ 603.651333][T14724] netlink: 222 bytes leftover after parsing attributes in process `syz.5.2242'. [ 604.773087][T14762] svc: failed to register nfsdv3 RPC service (errno 111). [ 604.812564][T14762] svc: failed to register nfsaclv3 RPC service (errno 111). [ 605.341028][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 605.353438][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 605.363674][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 605.368894][T14779] FAULT_INJECTION: forcing a failure. [ 605.368894][T14779] name failslab, interval 1, probability 0, space 0, times 0 [ 605.373829][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 605.385862][T14779] CPU: 0 UID: 0 PID: 14779 Comm: syz.1.2257 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 605.385912][T14779] Tainted: [U]=USER [ 605.385923][T14779] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 605.385943][T14779] Call Trace: [ 605.385953][T14779] [ 605.385966][T14779] dump_stack_lvl+0x16c/0x1f0 [ 605.386014][T14779] should_fail_ex+0x50a/0x650 [ 605.386067][T14779] ? fs_reclaim_acquire+0xae/0x150 [ 605.386115][T14779] should_failslab+0xc2/0x120 [ 605.386147][T14779] __kmalloc_node_noprof+0xd1/0x510 [ 605.386203][T14779] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 605.386256][T14779] __kvmalloc_node_noprof+0xad/0x1a0 [ 605.386314][T14779] io_alloc_cache_init+0x33/0x170 [ 605.386363][T14779] io_uring_setup+0x58e/0x2200 [ 605.386404][T14779] ? __pfx_io_uring_setup+0x10/0x10 [ 605.386444][T14779] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 605.386501][T14779] ? __fget_files+0x206/0x3a0 [ 605.386561][T14779] ? ksys_write+0x1ba/0x250 [ 605.386606][T14779] ? __pfx_ksys_write+0x10/0x10 [ 605.386661][T14779] __x64_sys_io_uring_setup+0x98/0x140 [ 605.386700][T14779] do_syscall_64+0xcd/0x250 [ 605.386747][T14779] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 605.386796][T14779] RIP: 0033:0x7f1355d8d169 [ 605.386822][T14779] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 605.386856][T14779] RSP: 002b:00007f1356cb3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 605.386889][T14779] RAX: ffffffffffffffda RBX: 00007f1355fa5fa0 RCX: 00007f1355d8d169 [ 605.386913][T14779] RDX: 0000000000000000 RSI: 0000400000000080 RDI: 0000000000000059 [ 605.386935][T14779] RBP: 00007f1356cb3090 R08: 0000000000000000 R09: 0000000000000000 [ 605.386957][T14779] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 605.386978][T14779] R13: 0000000000000000 R14: 00007f1355fa5fa0 R15: 00007ffd3aa794e8 [ 605.387018][T14779] [ 605.614806][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 605.622949][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 605.682039][T14765] delete_channel: no stack [ 606.015242][T14773] chnl_net:caif_netlink_parms(): no params data found [ 606.236662][T14773] bridge0: port 1(bridge_slave_0) entered blocking state [ 606.254850][T14773] bridge0: port 1(bridge_slave_0) entered disabled state [ 606.273103][T14773] bridge_slave_0: entered allmulticast mode [ 606.283545][T14773] bridge_slave_0: entered promiscuous mode [ 606.303259][T14773] bridge0: port 2(bridge_slave_1) entered blocking state [ 606.334687][T14773] bridge0: port 2(bridge_slave_1) entered disabled state [ 606.342838][T14773] bridge_slave_1: entered allmulticast mode [ 606.363309][T14773] bridge_slave_1: entered promiscuous mode [ 606.498395][T14791] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2259'. [ 606.563488][T14800] FAULT_INJECTION: forcing a failure. [ 606.563488][T14800] name failslab, interval 1, probability 0, space 0, times 0 [ 606.594822][T14800] CPU: 1 UID: 0 PID: 14800 Comm: syz.1.2260 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 606.594875][T14800] Tainted: [U]=USER [ 606.594887][T14800] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 606.594907][T14800] Call Trace: [ 606.594918][T14800] [ 606.594931][T14800] dump_stack_lvl+0x16c/0x1f0 [ 606.594979][T14800] should_fail_ex+0x50a/0x650 [ 606.595040][T14800] ? fs_reclaim_acquire+0xae/0x150 [ 606.595087][T14800] should_failslab+0xc2/0x120 [ 606.595119][T14800] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 606.595172][T14800] ? vm_area_dup+0x53/0x2f0 [ 606.595227][T14800] vm_area_dup+0x53/0x2f0 [ 606.595277][T14800] __split_vma+0x181/0x1160 [ 606.595332][T14800] ? __pfx___split_vma+0x10/0x10 [ 606.595398][T14800] vms_gather_munmap_vmas+0x38b/0x1730 [ 606.595460][T14800] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 606.595517][T14800] ? mas_walk+0x6a6/0x910 [ 606.595566][T14800] __mmap_region+0x328/0x2760 [ 606.595599][T14800] ? __pfx___mmap_region+0x10/0x10 [ 606.595642][T14800] ? hlock_class+0x4e/0x130 [ 606.595677][T14800] ? mark_lock+0xb5/0xc60 [ 606.595726][T14800] ? __pfx_mark_lock+0x10/0x10 [ 606.595771][T14800] ? __pfx___schedule+0x10/0x10 [ 606.595808][T14800] ? schedule+0x298/0x350 [ 606.595893][T14800] ? cap_capable+0xb3/0x250 [ 606.595934][T14800] mmap_region+0x1ab/0x3f0 [ 606.595973][T14800] do_mmap+0xd8d/0x11b0 [ 606.596038][T14800] ? __pfx_do_mmap+0x10/0x10 [ 606.596084][T14800] ? __pfx_down_write_killable+0x10/0x10 [ 606.596141][T14800] vm_mmap_pgoff+0x203/0x3a0 [ 606.596196][T14800] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 606.596262][T14800] ? __x64_sys_futex+0x1e1/0x4c0 [ 606.596300][T14800] ? __x64_sys_futex+0x1ea/0x4c0 [ 606.596346][T14800] ksys_mmap_pgoff+0x7d/0x5c0 [ 606.596387][T14800] ? rcu_is_watching+0x12/0xc0 [ 606.596423][T14800] __x64_sys_mmap+0x125/0x190 [ 606.596472][T14800] do_syscall_64+0xcd/0x250 [ 606.596515][T14800] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.596559][T14800] RIP: 0033:0x7f1355d8d169 [ 606.596584][T14800] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 606.596615][T14800] RSP: 002b:00007f1356cb3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 606.596645][T14800] RAX: ffffffffffffffda RBX: 00007f1355fa5fa0 RCX: 00007f1355d8d169 [ 606.596666][T14800] RDX: 00004000000000df RSI: 0000000000020009 RDI: 0000000000000000 [ 606.596687][T14800] RBP: 00007f1355e0e2a0 R08: 0000000000000401 R09: 0000000000008000 [ 606.596706][T14800] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 606.596725][T14800] R13: 0000000000000000 R14: 00007f1355fa5fa0 R15: 00007ffd3aa794e8 [ 606.596765][T14800] [ 606.898884][T14773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 607.086873][T14773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 607.259090][T14773] team0: Port device team_slave_0 added [ 607.321270][T14773] team0: Port device team_slave_1 added [ 607.336173][T14807] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2261'. [ 607.347521][T14807] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 607.426369][T14773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 607.444610][T14773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.497175][T14773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 607.519676][T14773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 607.539215][T14773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 607.611797][T14773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 607.717332][ T5842] Bluetooth: hci4: command tx timeout [ 607.834265][T14773] hsr_slave_0: entered promiscuous mode [ 607.863278][T14773] hsr_slave_1: entered promiscuous mode [ 607.887471][T14773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 607.912539][T14773] Cannot create hsr debugfs directory [ 608.322376][T14773] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.446524][T14773] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.508343][T14773] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 608.718279][T14773] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 608.738434][T14773] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 608.751330][T14773] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 608.764016][T14773] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 608.836985][T14773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 608.860966][T14773] 8021q: adding VLAN 0 to HW filter on device team0 [ 608.874150][ T9308] bridge0: port 1(bridge_slave_0) entered blocking state [ 608.882034][ T9308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 608.900539][ T6924] bridge0: port 2(bridge_slave_1) entered blocking state [ 608.908431][ T6924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 609.088786][T14773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 609.135168][T14773] veth0_vlan: entered promiscuous mode [ 609.149836][T14773] veth1_vlan: entered promiscuous mode [ 609.189494][T14773] veth0_macvtap: entered promiscuous mode [ 609.203084][T14773] veth1_macvtap: entered promiscuous mode [ 609.228241][T14773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 609.240058][T14773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.256360][T14773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 609.273000][T14773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 609.311017][T14773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 609.346920][T14773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 609.506576][T14773] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.545624][T14773] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.568952][T14773] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.578790][T14773] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 609.604763][T14841] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2271'. [ 609.769001][ T9306] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 609.804661][ T5842] Bluetooth: hci4: command tx timeout [ 610.534681][ T9306] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.642527][ T9306] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 610.661532][ T9306] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 610.963216][T14868] usbip-vudc usbip-vudc.0: gadget not bound [ 611.803627][T14891] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2281'. [ 611.876989][ T5842] Bluetooth: hci4: command tx timeout [ 611.988229][ T5148] Bluetooth: hci2: Malformed HCI Event [ 611.996866][T14893] netlink: 186 bytes leftover after parsing attributes in process `syz.3.2284'. [ 612.935957][T14911] Invalid ELF header magic: != ELF [ 613.275411][T14916] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2289'. [ 613.341966][T14916] geneve1: entered allmulticast mode [ 613.889585][T14930] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2294'. [ 613.916330][T14930] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2294'. [ 613.928603][T14930] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2294'. [ 613.954951][ T5148] Bluetooth: hci4: command tx timeout [ 614.034929][T14936] snd_dummy snd_dummy.0: control 1:6:6:¢¸è_ÅheºRŸª:0 is already present [ 614.609311][T14946] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2299'. [ 614.865438][T14952] sg_read: process 23 (syz.0.2303) changed security contexts after opening file descriptor, this is not allowed. [ 615.670564][T14950] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2302'. [ 616.290278][T14983] nvme_fabrics: missing parameter 'transport=%s' [ 616.309628][T14983] nvme_fabrics: missing parameter 'nqn=%s' [ 616.316809][T14974] delete_channel: no stack [ 616.342291][T14987] FAULT_INJECTION: forcing a failure. [ 616.342291][T14987] name failslab, interval 1, probability 0, space 0, times 0 [ 616.394664][T14987] CPU: 1 UID: 0 PID: 14987 Comm: syz.1.2314 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 616.394711][T14987] Tainted: [U]=USER [ 616.394721][T14987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 616.394741][T14987] Call Trace: [ 616.394751][T14987] [ 616.394763][T14987] dump_stack_lvl+0x16c/0x1f0 [ 616.394808][T14987] should_fail_ex+0x50a/0x650 [ 616.394859][T14987] ? fs_reclaim_acquire+0xae/0x150 [ 616.394903][T14987] ? call_usermodehelper_setup+0x9a/0x340 [ 616.394951][T14987] should_failslab+0xc2/0x120 [ 616.394983][T14987] __kmalloc_cache_noprof+0x68/0x410 [ 616.395027][T14987] ? trace_kmalloc+0x2d/0xd0 [ 616.395063][T14987] ? __kmalloc_node_track_caller_noprof+0x240/0x510 [ 616.395118][T14987] ? __pfx_free_modprobe_argv+0x10/0x10 [ 616.395173][T14987] call_usermodehelper_setup+0x9a/0x340 [ 616.395227][T14987] __request_module+0x3d6/0x6c0 [ 616.395282][T14987] ? nvmf_dev_write+0x255/0xc40 [ 616.395330][T14987] ? __pfx___request_module+0x10/0x10 [ 616.395403][T14987] ? nvmf_dev_write+0x18e/0xc40 [ 616.395454][T14987] nvmf_dev_write+0x255/0xc40 [ 616.395504][T14987] ? rw_verify_area+0xcf/0x680 [ 616.395546][T14987] ? __pfx_nvmf_dev_write+0x10/0x10 [ 616.395592][T14987] vfs_write+0x24c/0x1150 [ 616.395639][T14987] ? __fget_files+0x1fc/0x3a0 [ 616.395686][T14987] ? __pfx_lock_release+0x10/0x10 [ 616.395731][T14987] ? __pfx_vfs_write+0x10/0x10 [ 616.395779][T14987] ? lock_acquire+0x2f/0xb0 [ 616.395821][T14987] ? __fget_files+0x40/0x3a0 [ 616.395874][T14987] ? __fget_files+0x206/0x3a0 [ 616.395932][T14987] ksys_write+0x12b/0x250 [ 616.395976][T14987] ? __pfx_ksys_write+0x10/0x10 [ 616.396032][T14987] do_syscall_64+0xcd/0x250 [ 616.396077][T14987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 616.396122][T14987] RIP: 0033:0x7f1355d8d169 [ 616.396146][T14987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 616.396179][T14987] RSP: 002b:00007f1356c92038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 616.396208][T14987] RAX: ffffffffffffffda RBX: 00007f1355fa6080 RCX: 00007f1355d8d169 [ 616.396230][T14987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 616.396248][T14987] RBP: 00007f1356c92090 R08: 0000000000000000 R09: 0000000000000000 [ 616.396273][T14987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 616.396293][T14987] R13: 0000000000000001 R14: 00007f1355fa6080 R15: 00007ffd3aa794e8 [ 616.396334][T14987] [ 616.396440][T14987] nvme_fabrics: missing parameter 'transport=%s' [ 616.681144][T14987] nvme_fabrics: missing parameter 'nqn=%s' [ 617.330776][T14992] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2315'. [ 618.127773][T15020] delete_channel: no stack [ 618.678255][T15045] sg_write: data in/out 16027157/1 bytes for SCSI command 0x7b-- guessing data in; [ 618.678255][T15045] program syz.5.2331 not setting count and/or reply_len properly [ 619.385094][T15063] delete_channel: no stack [ 619.982123][T15078] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2344'. [ 620.009442][T15081] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 620.020880][T15081] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 620.031216][T15081] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 620.045582][T15081] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 620.055489][T15081] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 620.064150][T15081] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 620.744861][T15079] chnl_net:caif_netlink_parms(): no params data found [ 621.229919][T15079] bridge0: port 1(bridge_slave_0) entered blocking state [ 621.243093][T15079] bridge0: port 1(bridge_slave_0) entered disabled state [ 621.261512][T15079] bridge_slave_0: entered allmulticast mode [ 621.272745][T15079] bridge_slave_0: entered promiscuous mode [ 621.360604][T15079] bridge0: port 2(bridge_slave_1) entered blocking state [ 621.371426][T15079] bridge0: port 2(bridge_slave_1) entered disabled state [ 621.385238][T15079] bridge_slave_1: entered allmulticast mode [ 621.406298][T15079] bridge_slave_1: entered promiscuous mode [ 621.416492][T15108] delete_channel: no stack [ 621.518332][T15079] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 621.541943][T15079] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 621.631375][T15079] team0: Port device team_slave_0 added [ 621.661044][T15079] team0: Port device team_slave_1 added [ 621.719680][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 621.766699][T15079] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 621.801892][T15116] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2351'. [ 621.817349][T15079] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.852445][T15116] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2351'. [ 621.874699][T15079] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 621.903085][T15079] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 621.910978][T15079] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 621.924730][T15116] netlink: 350 bytes leftover after parsing attributes in process `syz.0.2351'. [ 621.939522][ C0] vkms_vblank_simulate: vblank timer overrun [ 621.939838][T15079] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 622.181603][T15079] hsr_slave_0: entered promiscuous mode [ 622.199954][T15079] hsr_slave_1: entered promiscuous mode [ 622.200851][ T5148] Bluetooth: hci1: command tx timeout [ 622.207018][T15079] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 622.221727][T15079] Cannot create hsr debugfs directory [ 622.971965][T15079] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.178478][T15079] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.268558][T15079] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.326454][T15079] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 623.497604][T15079] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 623.520819][T15079] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 623.565305][T15079] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 623.578108][T15079] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 623.717992][T15079] 8021q: adding VLAN 0 to HW filter on device bond0 [ 623.747581][T15079] 8021q: adding VLAN 0 to HW filter on device team0 [ 623.770783][ T6912] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.778758][ T6912] bridge0: port 1(bridge_slave_0) entered forwarding state [ 623.825480][ T6924] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.833399][ T6924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 623.923519][T15079] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 623.942467][T15079] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 624.277257][ T5148] Bluetooth: hci1: command tx timeout [ 624.364345][T15151] delete_channel: no stack [ 624.457289][T15079] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 624.820725][T15079] veth0_vlan: entered promiscuous mode [ 624.847460][T15079] veth1_vlan: entered promiscuous mode [ 624.881356][T15079] veth0_macvtap: entered promiscuous mode [ 624.891723][T15079] veth1_macvtap: entered promiscuous mode [ 624.929597][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 624.951721][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 624.985074][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 625.010260][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.035967][T15079] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 625.062249][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.104713][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.134585][T15079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 625.165315][T15079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 625.195896][T15079] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 625.250931][T15079] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.280712][T15079] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.301194][T15079] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.322065][T15079] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 625.648477][ T9308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.682582][ T9308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 625.782294][ T6924] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 625.824208][ T6924] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 626.131152][T15169] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 626.154852][T15169] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 626.355532][ T5148] Bluetooth: hci1: command tx timeout [ 626.476128][T15186] svc: failed to register nfsdv3 RPC service (errno 111). [ 626.514947][T15186] svc: failed to register nfsaclv3 RPC service (errno 111). [ 626.567564][T15182] delete_channel: no stack [ 626.910196][T15203] netlink: 186 bytes leftover after parsing attributes in process `syz.5.2369'. [ 627.106728][T15212] FAULT_INJECTION: forcing a failure. [ 627.106728][T15212] name failslab, interval 1, probability 0, space 0, times 0 [ 627.144735][T15212] CPU: 0 UID: 0 PID: 15212 Comm: syz.0.2374 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 627.144780][T15212] Tainted: [U]=USER [ 627.144789][T15212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 627.144806][T15212] Call Trace: [ 627.144814][T15212] [ 627.144825][T15212] dump_stack_lvl+0x16c/0x1f0 [ 627.144864][T15212] should_fail_ex+0x50a/0x650 [ 627.144906][T15212] ? fs_reclaim_acquire+0xae/0x150 [ 627.144943][T15212] should_failslab+0xc2/0x120 [ 627.144969][T15212] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 627.145014][T15212] ? bonding_sysfs_store_option+0x67/0x120 [ 627.145052][T15212] kstrndup+0x6d/0x160 [ 627.145085][T15212] ? __pfx_bonding_sysfs_store_option+0x10/0x10 [ 627.145116][T15212] bonding_sysfs_store_option+0x67/0x120 [ 627.145149][T15212] dev_attr_store+0x55/0x80 [ 627.145182][T15212] ? __pfx_dev_attr_store+0x10/0x10 [ 627.145216][T15212] sysfs_kf_write+0x117/0x170 [ 627.145248][T15212] kernfs_fop_write_iter+0x33d/0x500 [ 627.145274][T15212] ? __pfx_sysfs_kf_write+0x10/0x10 [ 627.145306][T15212] vfs_write+0x5ae/0x1150 [ 627.145342][T15212] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 627.145372][T15212] ? __pfx___mutex_lock+0x10/0x10 [ 627.145405][T15212] ? __pfx_vfs_write+0x10/0x10 [ 627.145464][T15212] ksys_write+0x12b/0x250 [ 627.145507][T15212] ? __pfx_ksys_write+0x10/0x10 [ 627.145553][T15212] do_syscall_64+0xcd/0x250 [ 627.145589][T15212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 627.145625][T15212] RIP: 0033:0x7f799718d169 [ 627.145649][T15212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 627.145679][T15212] RSP: 002b:00007f7997f4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 627.145703][T15212] RAX: ffffffffffffffda RBX: 00007f79973a5fa0 RCX: 00007f799718d169 [ 627.145722][T15212] RDX: 000000000002fdef RSI: 0000000000000000 RDI: 0000000000000003 [ 627.145739][T15212] RBP: 00007f7997f4c090 R08: 0000000000000000 R09: 0000000000000000 [ 627.145755][T15212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 627.145770][T15212] R13: 0000000000000000 R14: 00007f79973a5fa0 R15: 00007fffe0542b48 [ 627.145806][T15212] [ 628.434728][ T5148] Bluetooth: hci1: command tx timeout [ 628.479955][T15226] delete_channel: no stack [ 628.685144][T15246] FAULT_INJECTION: forcing a failure. [ 628.685144][T15246] name failslab, interval 1, probability 0, space 0, times 0 [ 628.729927][T15246] CPU: 1 UID: 0 PID: 15246 Comm: syz.0.2386 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 628.729975][T15246] Tainted: [U]=USER [ 628.729985][T15246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 628.730003][T15246] Call Trace: [ 628.730012][T15246] [ 628.730025][T15246] dump_stack_lvl+0x16c/0x1f0 [ 628.730069][T15246] should_fail_ex+0x50a/0x650 [ 628.730117][T15246] ? fs_reclaim_acquire+0xae/0x150 [ 628.730159][T15246] should_failslab+0xc2/0x120 [ 628.730189][T15246] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 628.730236][T15246] ? vma_merge_new_range+0x40a/0xbb0 [ 628.730283][T15246] ? vm_area_alloc+0x134/0x230 [ 628.730336][T15246] vm_area_alloc+0x134/0x230 [ 628.730382][T15246] __mmap_region+0x108d/0x2760 [ 628.730413][T15246] ? __pfx___mmap_region+0x10/0x10 [ 628.730454][T15246] ? hlock_class+0x4e/0x130 [ 628.730487][T15246] ? mark_lock+0xb5/0xc60 [ 628.730599][T15246] mmap_region+0x32b/0x3f0 [ 628.730644][T15246] do_mmap+0xd8d/0x11b0 [ 628.730691][T15246] ? __pfx_do_mmap+0x10/0x10 [ 628.730733][T15246] ? __pfx_down_write_killable+0x10/0x10 [ 628.730787][T15246] vm_mmap_pgoff+0x203/0x3a0 [ 628.730839][T15246] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 628.730895][T15246] ? __fget_files+0x206/0x3a0 [ 628.730946][T15246] ksys_mmap_pgoff+0x32c/0x5c0 [ 628.730986][T15246] ? __pfx_ksys_write+0x10/0x10 [ 628.731034][T15246] __x64_sys_mmap+0x125/0x190 [ 628.731086][T15246] do_syscall_64+0xcd/0x250 [ 628.731129][T15246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.731174][T15246] RIP: 0033:0x7f799718d169 [ 628.731199][T15246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.731230][T15246] RSP: 002b:00007f7997f4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 628.731258][T15246] RAX: ffffffffffffffda RBX: 00007f79973a5fa0 RCX: 00007f799718d169 [ 628.731280][T15246] RDX: 7fffffffffffffff RSI: 0000000000000009 RDI: 0000080000000000 [ 628.731301][T15246] RBP: 00007f7997f4c090 R08: 0000000000000001 R09: 0000010000008000 [ 628.731320][T15246] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 628.731339][T15246] R13: 0000000000000000 R14: 00007f79973a5fa0 R15: 00007fffe0542b48 [ 628.731377][T15246] [ 629.161725][T15258] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2390'. [ 629.191959][T15258] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2390'. [ 629.884694][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.891679][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.485182][T15280] FAULT_INJECTION: forcing a failure. [ 630.485182][T15280] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 630.596199][T15270] delete_channel: no stack [ 630.644642][T15280] CPU: 1 UID: 0 PID: 15280 Comm: syz.1.2397 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 630.644688][T15280] Tainted: [U]=USER [ 630.644698][T15280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 630.644716][T15280] Call Trace: [ 630.644726][T15280] [ 630.644739][T15280] dump_stack_lvl+0x16c/0x1f0 [ 630.644784][T15280] should_fail_ex+0x50a/0x650 [ 630.644838][T15280] _copy_to_user+0x32/0xd0 [ 630.644875][T15280] simple_read_from_buffer+0xd0/0x160 [ 630.644918][T15280] proc_fail_nth_read+0x198/0x270 [ 630.644958][T15280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 630.645000][T15280] ? rw_verify_area+0xcf/0x680 [ 630.645039][T15280] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 630.645078][T15280] vfs_read+0x1df/0xbf0 [ 630.645121][T15280] ? __fget_files+0x1fc/0x3a0 [ 630.645166][T15280] ? __pfx___mutex_lock+0x10/0x10 [ 630.645207][T15280] ? __pfx_vfs_read+0x10/0x10 [ 630.645267][T15280] ? __fget_files+0x206/0x3a0 [ 630.645323][T15280] ksys_read+0x12b/0x250 [ 630.645365][T15280] ? __pfx_ksys_read+0x10/0x10 [ 630.645419][T15280] do_syscall_64+0xcd/0x250 [ 630.645463][T15280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 630.645508][T15280] RIP: 0033:0x7fb0e198bb7c [ 630.645533][T15280] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 630.645562][T15280] RSP: 002b:00007fb0e27b0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 630.645590][T15280] RAX: ffffffffffffffda RBX: 00007fb0e1ba5fa0 RCX: 00007fb0e198bb7c [ 630.645609][T15280] RDX: 000000000000000f RSI: 00007fb0e27b00a0 RDI: 0000000000000005 [ 630.645628][T15280] RBP: 00007fb0e27b0090 R08: 0000000000000000 R09: 0000000000000000 [ 630.645645][T15280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 630.645663][T15280] R13: 0000000000000000 R14: 00007fb0e1ba5fa0 R15: 00007fff6ccee7e8 [ 630.645701][T15280] [ 631.194035][T15289] input: AT Translated Set 2 keyboard as /devices/platform/i8042/serio0/input/input26 [ 631.488604][T15296] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2402'. [ 631.526918][T15296] netlink: 274 bytes leftover after parsing attributes in process `syz.3.2402'. [ 632.180793][T15313] delete_channel: no stack [ 632.588428][T15337] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2416'. [ 633.248278][T15333] FAULT_INJECTION: forcing a failure. [ 633.248278][T15333] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 633.315966][T15333] CPU: 0 UID: 0 PID: 15333 Comm: syz.1.2414 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 633.316018][T15333] Tainted: [U]=USER [ 633.316028][T15333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 633.316045][T15333] Call Trace: [ 633.316054][T15333] [ 633.316066][T15333] dump_stack_lvl+0x16c/0x1f0 [ 633.316111][T15333] should_fail_ex+0x50a/0x650 [ 633.316165][T15333] _copy_from_user+0x2e/0xd0 [ 633.316199][T15333] get_timespec64+0x8c/0x240 [ 633.316237][T15333] ? __pfx_get_timespec64+0x10/0x10 [ 633.316280][T15333] ? common_nsleep+0xa1/0xd0 [ 633.316321][T15333] __x64_sys_clock_nanosleep+0x1ce/0x4a0 [ 633.316357][T15333] ? __pfx___x64_sys_clock_nanosleep+0x10/0x10 [ 633.316400][T15333] do_syscall_64+0xcd/0x250 [ 633.316444][T15333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 633.316487][T15333] RIP: 0033:0x7fb0e19bfa25 [ 633.316511][T15333] Code: 24 0c 89 3c 24 48 89 4c 24 18 e8 f6 54 ff ff 4c 8b 54 24 18 48 8b 54 24 10 41 89 c0 8b 74 24 0c 8b 3c 24 b8 e6 00 00 00 0f 05 <44> 89 c7 48 89 04 24 e8 4f 55 ff ff 48 8b 04 24 48 83 c4 28 f7 d8 [ 633.316542][T15333] RSP: 002b:00007fff6ccee8e0 EFLAGS: 00000293 ORIG_RAX: 00000000000000e6 [ 633.316571][T15333] RAX: ffffffffffffffda RBX: 00007fb0e1ba5fa0 RCX: 00007fb0e19bfa25 [ 633.316591][T15333] RDX: 00007fff6ccee920 RSI: 0000000000000000 RDI: 0000000000000000 [ 633.316611][T15333] RBP: 00007fb0e1ba7ba0 R08: 0000000000000000 R09: 00007fb0e27b1000 [ 633.316630][T15333] R10: 0000000000000000 R11: 0000000000000293 R12: 000000000009a9ea [ 633.316648][T15333] R13: 00007fff6cceea40 R14: ffffffffffffffff R15: 00007fff6cceea60 [ 633.316686][T15333] [ 633.686957][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 633.698071][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 633.734107][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 633.754728][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 633.775936][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 633.786198][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 634.535445][T15351] chnl_net:caif_netlink_parms(): no params data found [ 634.710395][T15363] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2421'. [ 635.038514][T15351] bridge0: port 1(bridge_slave_0) entered blocking state [ 635.050277][T15351] bridge0: port 1(bridge_slave_0) entered disabled state [ 635.084814][T15351] bridge_slave_0: entered allmulticast mode [ 635.120274][T15351] bridge_slave_0: entered promiscuous mode [ 635.155193][T15351] bridge0: port 2(bridge_slave_1) entered blocking state [ 635.174949][T15351] bridge0: port 2(bridge_slave_1) entered disabled state [ 635.182981][T15351] bridge_slave_1: entered allmulticast mode [ 635.218318][T15351] bridge_slave_1: entered promiscuous mode [ 635.349481][T15382] ======================================================= [ 635.349481][T15382] WARNING: The mand mount option has been deprecated and [ 635.349481][T15382] and is ignored by this kernel. Remove the mand [ 635.349481][T15382] option from the mount to silence this warning. [ 635.349481][T15382] ======================================================= [ 635.460130][T15351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 635.503524][T15351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 635.695875][T15351] team0: Port device team_slave_0 added [ 635.881030][ T5842] Bluetooth: hci0: command tx timeout [ 635.921912][T15351] team0: Port device team_slave_1 added [ 636.501410][T15351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 636.537274][T15351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.577262][T15351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 636.623042][T15351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 636.641029][T15351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 636.676496][T15351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 636.895599][T15351] hsr_slave_0: entered promiscuous mode [ 636.909651][T15351] hsr_slave_1: entered promiscuous mode [ 636.919739][T15351] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 636.946157][T15351] Cannot create hsr debugfs directory [ 637.409069][T15412] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2432'. [ 637.680509][T14106] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.856555][T14106] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 637.964617][ T5842] Bluetooth: hci0: command tx timeout [ 637.987685][T14106] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.156582][T14106] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 638.542676][T15423] could not allocate digest TFM handle [ 638.939340][T15432] cougar: G6 mapped to space [ 639.196952][T14106] bridge_slave_1: left allmulticast mode [ 639.203214][T14106] bridge_slave_1: left promiscuous mode [ 639.437908][T14106] bridge0: port 2(bridge_slave_1) entered disabled state [ 639.695462][T14106] bridge_slave_0: left allmulticast mode [ 639.702930][T14106] bridge_slave_0: left promiscuous mode [ 639.715034][T14106] bridge0: port 1(bridge_slave_0) entered disabled state [ 640.044814][ T5842] Bluetooth: hci0: command tx timeout [ 640.654727][T14106] HfR: left promiscuous mode [ 640.796213][T14106] tipc: Left network mode [ 641.079218][T15351] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 641.098037][T15351] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 641.128050][T15351] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 641.158726][T15351] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 641.955774][T15351] 8021q: adding VLAN 0 to HW filter on device bond0 [ 642.050054][T15472] openvswitch: netlink: ERSPAN option length err (len 256, max 255). [ 642.105799][T15351] 8021q: adding VLAN 0 to HW filter on device team0 [ 642.118014][ T5842] Bluetooth: hci0: command tx timeout [ 642.242411][ T9308] bridge0: port 1(bridge_slave_0) entered blocking state [ 642.250372][ T9308] bridge0: port 1(bridge_slave_0) entered forwarding state [ 642.679873][T15468] delete_channel: no stack [ 642.687834][T14112] bridge0: port 2(bridge_slave_1) entered blocking state [ 642.695763][T14112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 642.847122][T15486] svc: failed to register nfsdv3 RPC service (errno 111). [ 642.880106][T15486] svc: failed to register nfsaclv3 RPC service (errno 111). [ 643.036861][T15495] FAULT_INJECTION: forcing a failure. [ 643.036861][T15495] name failslab, interval 1, probability 0, space 0, times 0 [ 643.096895][T15495] CPU: 1 UID: 0 PID: 15495 Comm: syz.1.2445 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 643.096946][T15495] Tainted: [U]=USER [ 643.096956][T15495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 643.096975][T15495] Call Trace: [ 643.096984][T15495] [ 643.096997][T15495] dump_stack_lvl+0x16c/0x1f0 [ 643.097043][T15495] should_fail_ex+0x50a/0x650 [ 643.097094][T15495] ? fs_reclaim_acquire+0xae/0x150 [ 643.097139][T15495] ? tomoyo_realpath_from_path+0xb9/0x720 [ 643.097184][T15495] should_failslab+0xc2/0x120 [ 643.097216][T15495] __kmalloc_noprof+0xcb/0x510 [ 643.097265][T15495] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 643.097325][T15495] tomoyo_realpath_from_path+0xb9/0x720 [ 643.097372][T15495] ? tomoyo_path_number_perm+0x235/0x590 [ 643.097411][T15495] ? tomoyo_path_number_perm+0x235/0x590 [ 643.097452][T15495] tomoyo_path_number_perm+0x248/0x590 [ 643.097488][T15495] ? tomoyo_path_number_perm+0x235/0x590 [ 643.097532][T15495] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 643.097613][T15495] ? __pfx_lock_release+0x10/0x10 [ 643.097658][T15495] ? trace_lock_acquire+0x14e/0x1f0 [ 643.097701][T15495] ? lock_acquire+0x2f/0xb0 [ 643.097741][T15495] ? __fget_files+0x40/0x3a0 [ 643.097793][T15495] ? __fget_files+0x206/0x3a0 [ 643.097844][T15495] security_file_ioctl+0x9b/0x240 [ 643.097890][T15495] __x64_sys_ioctl+0xb7/0x200 [ 643.097933][T15495] do_syscall_64+0xcd/0x250 [ 643.097978][T15495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.098023][T15495] RIP: 0033:0x7fb0e198d169 [ 643.098049][T15495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.098080][T15495] RSP: 002b:00007fb0e278f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 643.098109][T15495] RAX: ffffffffffffffda RBX: 00007fb0e1ba6080 RCX: 00007fb0e198d169 [ 643.098130][T15495] RDX: 000040000000c380 RSI: 00000000c0606610 RDI: 0000000000000005 [ 643.098148][T15495] RBP: 00007fb0e278f090 R08: 0000000000000000 R09: 0000000000000000 [ 643.098167][T15495] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.098185][T15495] R13: 0000000000000000 R14: 00007fb0e1ba6080 R15: 00007fff6ccee7e8 [ 643.098224][T15495] [ 643.098361][T15495] ERROR: Out of memory at tomoyo_realpath_from_path. [ 643.530395][T15509] FAULT_INJECTION: forcing a failure. [ 643.530395][T15509] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 643.571098][T15509] CPU: 0 UID: 0 PID: 15509 Comm: syz.1.2447 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 643.571145][T15509] Tainted: [U]=USER [ 643.571156][T15509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 643.571174][T15509] Call Trace: [ 643.571184][T15509] [ 643.571196][T15509] dump_stack_lvl+0x16c/0x1f0 [ 643.571239][T15509] should_fail_ex+0x50a/0x650 [ 643.571309][T15509] _copy_from_iter+0x2a1/0x1560 [ 643.571344][T15509] ? trace_lock_acquire+0x14e/0x1f0 [ 643.571381][T15509] ? __alloc_skb+0x1fe/0x380 [ 643.571425][T15509] ? __pfx__copy_from_iter+0x10/0x10 [ 643.571456][T15509] ? __virt_addr_valid+0x1a4/0x590 [ 643.571496][T15509] ? __virt_addr_valid+0x5e/0x590 [ 643.571535][T15509] ? __phys_addr_symbol+0x30/0x80 [ 643.571568][T15509] ? __check_object_size+0x488/0x710 [ 643.571606][T15509] netlink_sendmsg+0x813/0xd70 [ 643.571656][T15509] ? __pfx_netlink_sendmsg+0x10/0x10 [ 643.571715][T15509] ____sys_sendmsg+0xaaf/0xc90 [ 643.571751][T15509] ? copy_msghdr_from_user+0x10b/0x160 [ 643.571798][T15509] ? __pfx_____sys_sendmsg+0x10/0x10 [ 643.571851][T15509] ___sys_sendmsg+0x135/0x1e0 [ 643.571901][T15509] ? __pfx____sys_sendmsg+0x10/0x10 [ 643.571963][T15509] ? __pfx_lock_release+0x10/0x10 [ 643.572008][T15509] ? trace_lock_acquire+0x14e/0x1f0 [ 643.572058][T15509] ? __fget_files+0x206/0x3a0 [ 643.572126][T15509] __sys_sendmsg+0x16e/0x220 [ 643.572171][T15509] ? __pfx___sys_sendmsg+0x10/0x10 [ 643.572237][T15509] do_syscall_64+0xcd/0x250 [ 643.572281][T15509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 643.572343][T15509] RIP: 0033:0x7fb0e198d169 [ 643.572367][T15509] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 643.572399][T15509] RSP: 002b:00007fb0e27b0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 643.572428][T15509] RAX: ffffffffffffffda RBX: 00007fb0e1ba5fa0 RCX: 00007fb0e198d169 [ 643.572448][T15509] RDX: 0000000000000810 RSI: 0000400000002f80 RDI: 0000000000000003 [ 643.572479][T15509] RBP: 00007fb0e27b0090 R08: 0000000000000000 R09: 0000000000000000 [ 643.572499][T15509] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 643.572517][T15509] R13: 0000000000000000 R14: 00007fb0e1ba5fa0 R15: 00007fff6ccee7e8 [ 643.572561][T15509] [ 644.077314][T14106] hsr_slave_0: left promiscuous mode [ 644.112966][T14106] hsr_slave_1: left promiscuous mode [ 644.149726][T14106] veth1_macvtap: left promiscuous mode [ 644.163527][T14106] veth0_macvtap: left promiscuous mode [ 644.170016][T14106] veth1_vlan: left promiscuous mode [ 644.183033][T14106] veth0_vlan: left promiscuous mode [ 644.353949][T15522] openvswitch: netlink: Flow key attr not present in new flow. [ 644.580058][T15525] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2451'. [ 645.128354][T14106] team0 (unregistering): Port device team_slave_1 removed [ 645.200552][T14106] team0 (unregistering): Port device team_slave_0 removed [ 646.334066][T15524] Hf: entered promiscuous mode [ 646.708000][T15351] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 646.810627][T15351] veth0_vlan: entered promiscuous mode [ 646.872396][T15351] veth1_vlan: entered promiscuous mode [ 646.997593][T15351] veth0_macvtap: entered promiscuous mode [ 647.034291][T15351] veth1_macvtap: entered promiscuous mode [ 647.123933][T15351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.152747][T15351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.191043][T15351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.215101][T15351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.235401][T15351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 647.254749][T15351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.319280][T15351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 647.578659][T15351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.635254][T15351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.656872][T15351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.675002][T15351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.686529][T15351] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 647.699362][T15351] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 647.712028][T15351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 647.825838][T15351] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.844678][T15351] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.854310][T15351] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.874445][T15351] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 647.938628][T14106] ref_tracker: net notrefcnt@ffff8880646c01e0 has 1/2 users at [ 647.938628][T14106] sk_alloc+0xa93/0xb90 [ 647.938628][T14106] inet6_create+0x380/0x1320 [ 647.938628][T14106] __sock_create+0x335/0x8d0 [ 647.938628][T14106] udp_sock_create6+0xc8/0x6a0 [ 647.938628][T14106] sctp_udp_sock_start+0x280/0x4b0 [ 647.938628][T14106] proc_sctp_do_udp_port+0x380/0x450 [ 647.938628][T14106] proc_sys_call_handler+0x3c6/0x5a0 [ 647.938628][T14106] iter_file_splice_write+0x90f/0x10b0 [ 647.938628][T14106] direct_splice_actor+0x18f/0x6c0 [ 647.938628][T14106] splice_direct_to_actor+0x346/0xa40 [ 647.938628][T14106] do_splice_direct+0x178/0x250 [ 647.938628][T14106] do_sendfile+0xafb/0xe40 [ 647.938628][T14106] __x64_sys_sendfile64+0x1da/0x220 [ 647.938628][T14106] do_syscall_64+0xcd/0x250 [ 647.938628][T14106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.938628][T14106] [ 648.035177][T14106] ref_tracker: net notrefcnt@ffff8880646c01e0 has 1/2 users at [ 648.035177][T14106] sk_alloc+0xa93/0xb90 [ 648.035177][T14106] inet_create+0x3a1/0x10a0 [ 648.035177][T14106] __sock_create+0x335/0x8d0 [ 648.035177][T14106] udp_sock_create4+0xa7/0x450 [ 648.035177][T14106] sctp_udp_sock_start+0x10b/0x4b0 [ 648.035177][T14106] proc_sctp_do_udp_port+0x380/0x450 [ 648.035177][T14106] proc_sys_call_handler+0x3c6/0x5a0 [ 648.035177][T14106] iter_file_splice_write+0x90f/0x10b0 [ 648.035177][T14106] direct_splice_actor+0x18f/0x6c0 [ 648.035177][T14106] splice_direct_to_actor+0x346/0xa40 [ 648.035177][T14106] do_splice_direct+0x178/0x250 [ 648.035177][T14106] do_sendfile+0xafb/0xe40 [ 648.035177][T14106] __x64_sys_sendfile64+0x1da/0x220 [ 648.035177][T14106] do_syscall_64+0xcd/0x250 [ 648.035177][T14106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 648.035177][T14106] [ 648.319076][T14106] ------------[ cut here ]------------ [ 648.325831][T14106] WARNING: CPU: 0 PID: 14106 at lib/ref_tracker.c:179 ref_tracker_dir_exit+0x3e3/0x680 [ 648.336784][T14106] Modules linked in: [ 648.341136][T14106] CPU: 0 UID: 0 PID: 14106 Comm: kworker/u8:28 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 648.353174][T14106] Tainted: [U]=USER [ 648.357619][T14106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 648.368885][T14106] Workqueue: netns cleanup_net [ 648.374199][T14106] RIP: 0010:ref_tracker_dir_exit+0x3e3/0x680 [ 648.380952][T14106] Code: 11 02 00 00 4d 39 f5 49 8b 06 4d 89 f7 0f 85 0e ff ff ff 48 8b 2c 24 e8 ab 12 c8 fc 48 8b 74 24 18 48 89 ef e8 ae d8 65 06 90 <0f> 0b 90 e8 95 12 c8 fc 48 8d 5d 44 be 04 00 00 00 48 89 df e8 64 [ 648.402904][T14106] RSP: 0018:ffffc9000d167ab0 EFLAGS: 00010246 [ 648.410249][T14106] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 648.419595][T14106] RDX: 0000000000000001 RSI: ffffffff8b6cec80 RDI: 0000000000000001 [ 648.428511][T14106] RBP: ffff8880646c01e0 R08: 0000000000000001 R09: fffffbfff2dd7dbb [ 648.437690][T14106] R10: ffffffff96ebeddf R11: 0000000000002ba2 R12: ffff8880646c0230 [ 648.446623][T14106] R13: ffff8880646c0230 R14: ffff8880646c0230 R15: ffff8880646c0230 [ 648.455580][T14106] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 648.465551][T14106] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 648.472841][T14106] CR2: 0000555590c1f808 CR3: 0000000065a48000 CR4: 00000000003526f0 [ 648.481802][T14106] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 648.490667][T14106] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 648.499612][T14106] Call Trace: [ 648.503486][T14106] [ 648.506932][T14106] ? __warn+0xea/0x3c0 [ 648.511822][T14106] ? ref_tracker_dir_exit+0x3e3/0x680 [ 648.518381][T14106] ? report_bug+0x3c0/0x580 [ 648.523407][T14106] ? handle_bug+0x54/0xa0 [ 648.528316][T14106] ? exc_invalid_op+0x17/0x50 [ 648.533529][T14106] ? asm_exc_invalid_op+0x1a/0x20 [ 648.539226][T14106] ? ref_tracker_dir_exit+0x3e3/0x680 [ 648.545304][T14106] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 648.551664][T14106] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 648.558197][T14106] ? net_passive_dec+0x7d/0xd0 [ 648.563495][T14106] net_passive_dec+0x89/0xd0 [ 648.568729][T14106] cleanup_net+0x8ac/0xb30 [ 648.573710][T14106] ? __pfx_cleanup_net+0x10/0x10 [ 648.579305][T14106] ? lock_acquire+0x2f/0xb0 [ 648.584313][T14106] ? process_one_work+0x921/0x1ba0 [ 648.590078][T14106] process_one_work+0x9c5/0x1ba0 [ 648.595724][T14106] ? __pfx_cleanup_net+0x10/0x10 [ 648.601200][T14106] ? __pfx_process_one_work+0x10/0x10 [ 648.607525][T14106] ? assign_work+0x1a0/0x250 [ 648.612771][T14106] worker_thread+0x6c8/0xf00 [ 648.618657][T14106] ? __pfx_worker_thread+0x10/0x10 [ 648.624345][T14106] kthread+0x3af/0x750 [ 648.628928][T14106] ? __pfx_kthread+0x10/0x10 [ 648.634023][T14106] ? lock_acquire+0x2f/0xb0 [ 648.639119][T14106] ? __pfx_kthread+0x10/0x10 [ 648.644231][T14106] ret_from_fork+0x45/0x80 [ 648.649239][T14106] ? __pfx_kthread+0x10/0x10 [ 648.654340][T14106] ret_from_fork_asm+0x1a/0x30 [ 648.659743][T14106] [ 648.663099][T14106] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 648.671150][T14106] CPU: 0 UID: 0 PID: 14106 Comm: kworker/u8:28 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 648.683037][T14106] Tainted: [U]=USER [ 648.687264][T14106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 648.698363][T14106] Workqueue: netns cleanup_net [ 648.703653][T14106] Call Trace: [ 648.707289][T14106] [ 648.710554][T14106] dump_stack_lvl+0x3d/0x1f0 [ 648.715666][T14106] panic+0x71d/0x800 [ 648.719994][T14106] ? __pfx_panic+0x10/0x10 [ 648.724880][T14106] ? show_trace_log_lvl+0x29d/0x3d0 [ 648.730642][T14106] ? check_panic_on_warn+0x1f/0xb0 [ 648.736286][T14106] ? ref_tracker_dir_exit+0x3e3/0x680 [ 648.742247][T14106] check_panic_on_warn+0xab/0xb0 [ 648.747717][T14106] __warn+0xf6/0x3c0 [ 648.752035][T14106] ? ref_tracker_dir_exit+0x3e3/0x680 [ 648.757986][T14106] report_bug+0x3c0/0x580 [ 648.762780][T14106] handle_bug+0x54/0xa0 [ 648.767379][T14106] exc_invalid_op+0x17/0x50 [ 648.772362][T14106] asm_exc_invalid_op+0x1a/0x20 [ 648.777723][T14106] RIP: 0010:ref_tracker_dir_exit+0x3e3/0x680 [ 648.784339][T14106] Code: 11 02 00 00 4d 39 f5 49 8b 06 4d 89 f7 0f 85 0e ff ff ff 48 8b 2c 24 e8 ab 12 c8 fc 48 8b 74 24 18 48 89 ef e8 ae d8 65 06 90 <0f> 0b 90 e8 95 12 c8 fc 48 8d 5d 44 be 04 00 00 00 48 89 df e8 64 [ 648.805937][T14106] RSP: 0018:ffffc9000d167ab0 EFLAGS: 00010246 [ 648.812649][T14106] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 648.821435][T14106] RDX: 0000000000000001 RSI: ffffffff8b6cec80 RDI: 0000000000000001 [ 648.830223][T14106] RBP: ffff8880646c01e0 R08: 0000000000000001 R09: fffffbfff2dd7dbb [ 648.839004][T14106] R10: ffffffff96ebeddf R11: 0000000000002ba2 R12: ffff8880646c0230 [ 648.847789][T14106] R13: ffff8880646c0230 R14: ffff8880646c0230 R15: ffff8880646c0230 [ 648.856593][T14106] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 648.862921][T14106] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 648.869349][T14106] ? net_passive_dec+0x7d/0xd0 [ 648.874632][T14106] net_passive_dec+0x89/0xd0 [ 648.879740][T14106] cleanup_net+0x8ac/0xb30 [ 648.884624][T14106] ? __pfx_cleanup_net+0x10/0x10 [ 648.890081][T14106] ? lock_acquire+0x2f/0xb0 [ 648.895064][T14106] ? process_one_work+0x921/0x1ba0 [ 648.900722][T14106] process_one_work+0x9c5/0x1ba0 [ 648.906191][T14106] ? __pfx_cleanup_net+0x10/0x10 [ 648.911643][T14106] ? __pfx_process_one_work+0x10/0x10 [ 648.917598][T14106] ? assign_work+0x1a0/0x250 [ 648.922695][T14106] worker_thread+0x6c8/0xf00 [ 648.927792][T14106] ? __pfx_worker_thread+0x10/0x10 [ 648.933468][T14106] kthread+0x3af/0x750 [ 648.937982][T14106] ? __pfx_kthread+0x10/0x10 [ 648.943066][T14106] ? lock_acquire+0x2f/0xb0 [ 648.948068][T14106] ? __pfx_kthread+0x10/0x10 [ 648.953157][T14106] ret_from_fork+0x45/0x80 [ 648.958042][T14106] ? __pfx_kthread+0x10/0x10 [ 648.963134][T14106] ret_from_fork_asm+0x1a/0x30 [ 648.968411][T14106] [ 648.972054][T14106] Kernel Offset: disabled [ 648.976894][T14106] Rebooting in 86400 seconds..