last executing test programs: 1m11.809914451s ago: executing program 1 (id=748): openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) socket(0x22, 0x2, 0x1) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x101, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x8138ae83, 0x0) 1m10.924035936s ago: executing program 1 (id=751): socket(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0xae47, 0xffffffffffffffff) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f00000000c0)="5b85c9f225bc8d4ac56901a14beffe61588413cc62c56c3a633fddf579e13442591befc6df25bd500ff90240fbc32e9c0f452600c2797452e527b4b9e0c77e62c3875786eb0e36b4951b5df88665373cfe4cc5e584879c911aa43a7e17fba047e2759dc9eecc237312d0080ae2979c4d86d266064da14a6eac212ce1472b997fcd18e4dbc709753a341dead6d4a454b998861dcaa330f577d6666dc69bb362b1440f41b1d35e51391ec141560085c2a8f4c438d1aeed18c50c93f2d77d2e9666ba8d6493365940c1e6a25b6b87a9ecb04587d88f48a755ae35034b9e3b0518baf0bc26fd3793cc4d192c", 0xea) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/fs/pipe-max-size\x00', 0x382, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xffffffffffff7fff, 0x1, 0x948b, 0x2, 0x15f4da0a, 0x400000006, 0x3, 0x300000000000000, 0x9, 0x5, 0x6d3c, 0x5, 0x80000000002]}, 0x0) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) write$auto_seq_oss_f_ops_seq_oss(r1, &(0x7f0000000c80)="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", 0x300) close_range$auto(0x0, 0xfffffffffffff000, 0x700) 1m10.307017371s ago: executing program 1 (id=754): r0 = socket(0x1d, 0x3, 0x1) ioperm$auto(0x80, 0x4, 0x800) setuid$auto(0x0) getsockopt$auto(r0, 0x65, 0x7, 0x0, 0x0) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="20000000f7c3ac55801427f137535e6a554e879035de31fa4ebd28176382a7b5b61e73104d7799ee1f26ccda418a26db8043873267d08ab57522e73da945e69f06a959e81cf949bf0cb516d08b86631d886d024372d3d213f9942f14e723f859cb971bf24cdc936a1ee81d921b136fc7c55d9bee383d9b5605ca9eb98a0959484ee560fcdb718cea5d9645bae0f88779cb9350efbc65ab249e5ce650e035de292a0a17adcba7b964c65f40957424000000000000000000", @ANYRES32, @ANYBLOB="010026bd7000fddbdf2507"], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x4040800) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000500), r0) sendmsg$auto_NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000001c00)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000001b80)={0x14, r1, 0x2, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x20008004) membarrier$auto(0x2, 0x100000000, 0x8000000000000001) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket$nl_generic(0x10, 0x3, 0x10) r3 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000003c0)=""/192, 0xc0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) sendmsg$auto_IPVS_CMD_GET_DAEMON(r3, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f0000000680)={0x136c, 0x0, 0x800, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x14, 0x1, 0x0, 0x1, [@typed={0x8, 0x3b, 0x0, 0x0, @u32=0x4}, @typed={0x7, 0x30, 0x0, 0x0, @str='\'%\x00'}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x6d}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0xe0, 0x0, 0x0, @fd=r2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DAEMON={0x1310, 0x3, 0x0, 0x1, [@typed={0x8, 0x99, 0x0, 0x0, @str='/].\x00'}, @nested={0x90, 0x1a, 0x0, 0x1, [@nested={0x4, 0x122}, @typed={0x86, 0x123, 0x0, 0x0, @binary="1f31e61f113566790692dbca899d82fc5946e108008796df548520bb860b892f73fd21bfb83cd643a2d4c123e610328749480df74aec73518965b203b98450f82e228c61bffd1fc061722e1e169e634f644e82b614a52002db13bf4ee2e72f8314e685889e1f1413a20740d4f425fb135a124fb7dc7c71084b7d6bb4dbc3f9fe73cd"}]}, @generic="14d34311ded4e0c7b3d1a70d852e60a585e6e4515a5a15f59b05c56bbd63a1203790e959c581ea6ee911a9289a5ca428789b8086f399df4fba2d74308f060e3bfdef28fbce00833b45cdbfa5f57d50eed3345be58b669ab815cdf26f11d3b8d1faf58a357393b89badede935e61b0c03c71e4328999b56429288fc79d8e869b1b41da66dabc597fa8ac2be6b1811521c0272c8c902e1a22415228440ed0a6516b70324c3c8e68bcd6f58ceb1ed0d2c3d3d059474cae4310f2c142518f595eac0843b32e2a854590bab48fb7eb9d93b5ea844f09cd271fb3ac3b85e5b0ae3", @generic="db7853cb1c925ef87a170cf4d2fb8d5dc545f83299de479244012f8b9aebb2f967c5151257f7b2e1ad5ff99dd8cc1b022b65ba2e61d570eb10589a6a71ecfe4f856f7cb2a272d8cd86757f381c1ab5d24f027a36f54bd0342a2c8eafb24b18b926d299c497095731cafb9650193e7360c3c75e37538597bd79716c93e2721d139a07", @nested={0x1020, 0xad, 0x0, 0x1, [@typed={0x1004, 0x64, 0x0, 0x0, @binary="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"}, @nested={0x4, 0xf3}, @typed={0xe, 0xab, 0x0, 0x0, @str='/dev/dsp1\x00'}, @nested={0x4, 0x13d}]}, @typed={0x14, 0x130, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @nested={0xe0, 0x14d, 0x0, 0x1, [@generic="8c501ef2b9ec38f3c4cb754c86700de0bc74a970ddf5297dd36f35399fdc5dd0931ea670e93ea0ac23de2d7f9dcc112ec594958e4de78309d761116786860b4dd97508cd1c3fc9da2a6fa7bd0ffed22b4b511590805b7e589ac215408b571f26c26f588c84e826d039dedb6806a2f40c5440543fc33d9cefc1cdf44d7fad6dfd7871b03e8cd8f88b4e37bc64f9cf3e34a6af1a6f2318b6f07c7622a7cc26d1f84c2ac9e112a3bf991792e5b0af6813e1e6cf4ae7ef254ca9f615aa714e73a368d31e5b4b75c4b94a02fa28672acc37be917c2cbe73b696f0a7d86bbe"]}]}]}, 0x136c}, 0x1, 0x0, 0x0, 0x40009c0}, 0x20000085) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000340), r2) 1m9.682314254s ago: executing program 1 (id=756): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_handshake(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket(0x2a, 0x2, 0x1) connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) r3 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r3, 0x0, 0x200001) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010027bc944034cde02659a8b570"], 0x14}, 0x1, 0x0, 0x0, 0x4002040}, 0x2004881c) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/debug_flag\x00', 0x501, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/smaps\x00', 0x40000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x20, 0x0, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MACSEC_ATTR_OFFLOAD={0x4}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040085}, 0x80) r6 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x101080, 0x7) read$auto(r6, 0x0, 0x1) write$auto_proc_coredump_filter_operations_base(r6, &(0x7f0000000040)="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", 0xfc) write$auto(0x3, 0x0, 0x1) 1m9.437266061s ago: executing program 1 (id=760): openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x101, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x8138ae83, 0x0) 1m9.053195423s ago: executing program 1 (id=764): mmap$auto(0x1, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x2f, 0x6, 0xdfffffef) semctl$auto(0x7, 0x2, 0x13, 0x1) r1 = socket(0xa, 0x801, 0x84) r2 = getsockopt$auto(r1, 0x84, 0x10, 0x0, 0x0) r3 = getsockopt$auto(r0, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x1000c) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x92800, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x800, 0x100) msync$auto(0x1ffff000, 0x180200000000000, 0x400000004) mmap$auto(0x0, 0x5, 0x4000000000de, 0xeb1, 0x401, 0xe0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x9, 0x4020009, 0xdf, 0xeb1, r5, 0xb) setns(0xffffffffffffffff, 0x0) mmap$auto(0x2, 0x4000000a00006, 0x6, 0x40eb1, 0x602, 0x300000000000) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r6, 0x40107447, &(0x7f00000000c0)={0x7, &(0x7f0000000000)={0x30, 0xf5, 0xb0, @raw=0x6e}}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70136cf0389544a3cec85595b9b1d3bc623c250bf6baf3eb1e159cd31c624ca3287cad444465845d3337fef0ab79f972454f81700a9679d13674c1f1a7fa8a85c8b17541dc795261693a8de68cc922f8c725fc0b4f6b909ecf3348ea6a1d7a720cd48ad3033084c38d8357302938d372b51540718d522cfea4190e6fabda399cc9aaa50d1816fb87edf5b981937f7c543d6d45f44f69a6ce1f0c8d2565e4cb63fc008d73033fad6a97c7e49d2ab4580240f742851a24230804ae35b7bae7857260a709d23ad4ec0ab6582e5470d0533e8802a4eafc58c066e1c47a522aa464dfb88098ee"], 0x14}}, 0x4000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r7, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x6, 0x2, 0x0, 0x7fff, 0xffffffffffffffff) ioctl$auto_FIOQSIZE(r8, 0x5460, r2) r10 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000140), r9) r11 = semctl$auto_SEM_STAT(0x5, 0x9, 0x12, 0x9) openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim1/ports/0/udp_ports_reset\x00', 0x400000, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r8, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f0000000700)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r10, @ANYRESDEC=r3, @ANYBLOB="01fb056c9886", @ANYRESHEX=r4, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRESOCT], 0x238}, 0x1, 0x0, 0x0, 0x8800}, 0x20000840) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) 53.799507759s ago: executing program 32 (id=764): mmap$auto(0x1, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = socket(0x2f, 0x6, 0xdfffffef) semctl$auto(0x7, 0x2, 0x13, 0x1) r1 = socket(0xa, 0x801, 0x84) r2 = getsockopt$auto(r1, 0x84, 0x10, 0x0, 0x0) r3 = getsockopt$auto(r0, 0x84, 0x85, 0x0, &(0x7f00000000c0)=0x1000c) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000180)='/dev/admmidi2\x00', 0x92800, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x800, 0x100) msync$auto(0x1ffff000, 0x180200000000000, 0x400000004) mmap$auto(0x0, 0x5, 0x4000000000de, 0xeb1, 0x401, 0xe0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x9, 0x4020009, 0xdf, 0xeb1, r5, 0xb) setns(0xffffffffffffffff, 0x0) mmap$auto(0x2, 0x4000000a00006, 0x6, 0x40eb1, 0x602, 0x300000000000) r6 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r6, 0xc004743e, 0x0) ioctl$auto_PPPIOCSPASS(r6, 0x40107447, &(0x7f00000000c0)={0x7, &(0x7f0000000000)={0x30, 0xf5, 0xb0, @raw=0x6e}}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="70136cf0389544a3cec85595b9b1d3bc623c250bf6baf3eb1e159cd31c624ca3287cad444465845d3337fef0ab79f972454f81700a9679d13674c1f1a7fa8a85c8b17541dc795261693a8de68cc922f8c725fc0b4f6b909ecf3348ea6a1d7a720cd48ad3033084c38d8357302938d372b51540718d522cfea4190e6fabda399cc9aaa50d1816fb87edf5b981937f7c543d6d45f44f69a6ce1f0c8d2565e4cb63fc008d73033fad6a97c7e49d2ab4580240f742851a24230804ae35b7bae7857260a709d23ad4ec0ab6582e5470d0533e8802a4eafc58c066e1c47a522aa464dfb88098ee"], 0x14}}, 0x4000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x2, 0x0) r7 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r7, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = prctl$auto_PR_SCHED_CORE_SHARE_TO(0x6, 0x2, 0x0, 0x7fff, 0xffffffffffffffff) ioctl$auto_FIOQSIZE(r8, 0x5460, r2) r10 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000140), r9) r11 = semctl$auto_SEM_STAT(0x5, 0x9, 0x12, 0x9) openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim1/ports/0/udp_ports_reset\x00', 0x400000, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r8, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f0000000700)=ANY=[@ANYRESDEC=0x0, @ANYRES16=r10, @ANYRESDEC=r3, @ANYBLOB="01fb056c9886", @ANYRESHEX=r4, @ANYRES32=r11, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRESOCT], 0x238}, 0x1, 0x0, 0x0, 0x8800}, 0x20000840) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) 13.729077678s ago: executing program 0 (id=957): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000001c0), 0x100, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000040)={&(0x7f0000000000)="b063294e", 0x442bc7de}, 0x2c9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0xb2) mmap$auto(0x0, 0x9, 0x3, 0x8012, 0x3, 0x8000) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) mlock$auto(0x8, 0xffff) socket(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0xfffffffe) socket(0x22, 0x2, 0x24) getsockopt$auto(0x200000000006, 0x84, 0x7, 0xfffffffffffffffc, 0xffffffffffffffff) ioctl$auto_TCFLSH2(0xffffffffffffffff, 0x80045439, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = gettid() rt_sigqueueinfo$auto(r1, 0x1, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/nr2/queues/tx-0/traffic_class\x00', 0xc0202, 0x0) mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(r2, 0x0, 0x1c61fe90) syz_open_procfs$namespace(r1, &(0x7f00000000c0)='ns/time_for_children\x00') socket(0xa, 0x1, 0x84) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/kcore\x00', 0x101000, 0x0) sendfile$auto(0x3, r3, 0x0, 0x2) set_mempolicy$auto(0x3, &(0x7f0000000100)=0x3, 0x2079aa7) close_range$auto(r0, 0xffffffffffffffff, 0x65) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/devices/platform/dummy_hcd.2/usb3/removable\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/17, 0x11) 12.858957531s ago: executing program 0 (id=960): syz_clone(0x100, 0x0, 0xff1d, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x8, 0xdc, 0x9b72, 0x2, 0x8000) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r0 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0) read$auto_proc_pid_cmdline_ops_base(r0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffefff0001, 0x15) read$auto_proc_pid_cmdline_ops_base(r0, &(0x7f0000000180)=""/78, 0x4e) 8.888992596s ago: executing program 0 (id=970): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) close_range$auto(0x2, 0x8, 0x0) ioperm$auto(0x7, 0x6, 0x2) sched_get_priority_min$auto(0x5) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$auto_XFS_IOC_OPEN_BY_HANDLE(0xffffffffffffffff, 0xc038586b, &(0x7f0000000100)={r1, 0x0, 0x80000080, 0x0, 0x2, 0x0, 0x0}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = getpid() process_vm_readv$auto(r2, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000140)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) write$auto(0x3, 0x0, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x22002, 0x0) getpgid(0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_generic(0xffffffffffffff9c, &(0x7f00000032c0)='/proc/kmsg\x00', 0x80002, 0x0) open(&(0x7f00000010c0)='./file0\x00', 0x4b42, 0xe1d2b27bdc14aaa1) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2682, 0x0) sendmsg$auto_MACSEC_CMD_GET_TXSC(r0, &(0x7f0000000840)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000800)={&(0x7f0000000880)=ANY=[@ANYBLOB="a4030000", @ANYRES16=0x0, @ANYBLOB="090c2cbd7000fddbdf250000000008000100", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="2cdab9c664ffb33ecb5322e86ee934188eac3f6e21304d4a87fbc2a1442b0c62d4ce2a967d9d537868764ee777b481bc59574592d38365a822b603c56f9c1b4d95b3d88ee0847f474b766587217854b655f8ecffde9f748fb84447b52b5f258e20d0be4e1135b7b4e56c6008b4926fa7dd5becdc9f1b63272625251e517656b43e56afd93cf0d40222426807504c39ddda226aa1660b670483b991cc04294e210df4500804006880514f5b759cd67531"], 0x3a4}, 0x1, 0x0, 0x0, 0xc010}, 0xc890) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) write$auto(r3, &(0x7f00000001c0)='/dev/audio1\x00JR\x00\x00\x00\x00\x00\x00\x00\x05\x02\x8f\xcb],\xd3\x1d\x8c\x8bB\xc7\xfc\x90\xd1\x03h$\x98\xc4\xc2#\xc0{\xf2\xdf\x83\xa40\xa5?\x8e\x92\xf5\"\xa9q\x8d\xf9uR\x82\xbe.\x82OD.5\xc2\xcd\xa4\xd9@\x00\x00\x00\x00\x00\x00\x00\x00\xa3\xb5\x10\'{7\x0f\x00\x00\x00\x00\x00\x00\xefe\xac.f\x82Lk\xe5\xb3\x11AT6R@\xbb\x8c\xa4\xf2\xe8\xafo\x17\xb9\b<|tB!\xa3\xa5\n\b\x8cA;\xbc\xc7\x91\xeb\xc0\xc7\xeb$\xc0\xa6', 0xa3d8) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x10000001ff, 0xa, 0xd, 0x1, 0x300, 0x2, 0x20000000000000, 0x1, 0x8, 0x7, 0x2a, 0x7, 0x4d40, 0x5, 0xee3c, 0x3]}, 0x0) write$auto(0x1, 0x0, 0x80000000) mmap$auto(0x0, 0x1, 0x8000800000000df, 0x10, 0xffffffffffffffff, 0x8) write$auto(0x3, 0x0, 0xfdef) 5.209784043s ago: executing program 4 (id=977): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) socket(0x22, 0x2, 0x1) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x8138ae83, 0x0) 4.789035823s ago: executing program 4 (id=978): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = socket(0x28, 0xa, 0xffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) mprotect$auto(0x4, 0x7, 0x437) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/queues/tx-10/xps_cpus\x00', 0x8080, 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socket(0x26, 0x3, 0xfffffff2) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/user/max_fanotify_groups\x00', 0x202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0xfffffffe) mmap$auto(0x0, 0x40009, 0x6, 0x9b72, 0x7, 0x7) bpf$auto(0x0, 0x0, 0x6f3) readv$auto(r0, &(0x7f0000000100)={0x0, 0x101d0}, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto_SO_REUSEPORT(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) close_range$auto(0xffffffffffffffff, r2, 0xfffffffd) memfd_create$auto(0x0, 0xe) socket(0x2, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) bind$auto(r1, &(0x7f0000000040)=@l2tp={0x2, 0x0, @multicast1, 0x1}, 0x8) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x3, 0x0, 0x0, 0x0, 0x1f, 0xb}, 0x7}, 0x8, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x5, 0x80009}, 0x7}, 0x101, 0x0) 4.786169685s ago: executing program 3 (id=979): syz_clone(0x100, 0x0, 0xff1d, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x8, 0xdc, 0x9b72, 0x2, 0x8000) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r0 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0) read$auto_proc_pid_cmdline_ops_base(r0, &(0x7f0000000040)=""/159, 0x9f) madvise$auto(0x0, 0xffffffffefff0001, 0x15) read$auto_proc_pid_cmdline_ops_base(r0, 0x0, 0x0) 4.398119477s ago: executing program 0 (id=981): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000b00), r0) sendmsg$auto_GTP_CMD_ECHOREQ(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000140)={0x54, r1, 0x300, 0x70bd2a, 0x25dfdbfd, {}, [@GTPA_PEER_ADDRESS={0x8}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_VERSION={0x8, 0x2, 0x8}, @GTPA_VERSION={0x5, 0x2, 0x6}, @GTPA_PEER_ADDR6={0x14, 0xb, @empty}, @GTPA_LINK={0x8, 0x1, 0x2}]}, 0x54}, 0x1, 0x0, 0x0, 0x90}, 0x80) r2 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socketpair$auto(0x0, 0x2, 0x1ff, 0x0) fcntl$auto(0x3, 0x4, 0xa553) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x48, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x1]}, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) seccomp$auto(0x1, 0x3, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/thread-self/projid_map\x00', 0x102, 0x0) r3 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r3, 0x0, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x402c542c, 0x38) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) select$auto(0xfffffffb, 0x0, &(0x7f0000000500)={[0x1, 0x101, 0x9, 0x4a, 0x0, 0x7, 0x0, 0x3, 0x4, 0xf, 0x51c7, 0x7, 0x8, 0x9, 0x1, 0x8000000000000001]}, &(0x7f0000000580)={[0x9, 0x8, 0xfffffffffffffc01, 0x10000000004, 0xfffd, 0x9, 0x14, 0x7fffffff, 0x8, 0x3fe, 0x69, 0x1, 0x5, 0x2, 0x5]}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_l2tp(0x0, 0xffffffffffffffff) sendmsg$auto_L2TP_CMD_SESSION_GET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x20000044) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0xd5b, 0x9, 0x37, 0x948a, 0x101, 0x15f4da0b, 0x1, 0x3, 0x300000000000600, 0x40080000001, 0x7, 0x6d3c, 0x8, 0x9, 0xfffffffffffffffc]}, 0x0) socket(0x2, 0x5, 0x0) close_range$auto(0x2, 0x8, 0x0) move_pages$auto(0xffffffffffffffff, 0x1, &(0x7f00000000c0)=&(0x7f0000000040)="c9d5270514bd6f5b4586b826fa503be0c5e466aed46f29d0ac22764dab87d9acafee5f236ba23633aafd", &(0x7f0000000280)=0xec, &(0x7f00000002c0), 0x0) 4.015875558s ago: executing program 4 (id=983): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_handshake(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket(0x2a, 0x2, 0x1) connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) r3 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) read$auto(r3, 0x0, 0x200001) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010027bc944034cde02659a8b570"], 0x14}, 0x1, 0x0, 0x0, 0x4002040}, 0x2004881c) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/debug_flag\x00', 0x501, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/smaps\x00', 0x40000, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x20, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MACSEC_ATTR_OFFLOAD={0x4}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r6}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040085}, 0x80) r7 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x101080, 0x7) read$auto(r7, 0x0, 0x1) write$auto_proc_coredump_filter_operations_base(r7, &(0x7f0000000040)="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", 0xfc) write$auto(0x3, 0x0, 0x1) 3.377555725s ago: executing program 3 (id=984): r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x10000, 0xde, 0x11, r0, 0x28000) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0x7, 0xe2, 0x100eb1, 0x405, 0x8000) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/net/dev_snmp6/macsec0\x00', 0x0, 0x0) lseek$auto(r1, 0x5, 0x0) fcntl$auto_F_SETLK(r0, 0x6, 0x0) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) 3.01676276s ago: executing program 2 (id=986): r0 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r0, 0x8, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r1, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="230027bd7000fcdbdfff070000001800038005000180030000000c000900feffffffffffffff04000280080001"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0xc000) r3 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0x24, r3, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c010}, 0x140000e4) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, r3, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_TPMETER_COOKIE={0x8, 0xd, 0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x9}, @BATADV_ATTR_LOG_LEVEL={0x8, 0x36, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40800}, 0x8081) fcntl$getown(r0, 0x9) 2.859520872s ago: executing program 3 (id=987): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xffffffffffffffff, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) socket(0x22, 0x2, 0x1) socketpair$auto(0x1, 0x3, 0x8000000000000000, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x8138ae83, 0x0) 2.785773998s ago: executing program 2 (id=988): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r0) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)={0x24, r1, 0x1, 0x51bd2e, 0x25dfcbfb, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xc, 0x1, 0x0, 0x1, [@nested={0x4, 0x6}, @nested={0x4, 0x6f}]}]}, 0x24}, 0x1, 0x6000000000000000, 0x0, 0x40}, 0x4) 2.718083246s ago: executing program 4 (id=989): openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000200)=""/114, 0x72) r0 = socket(0x9, 0x1, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mprotect$auto(0x5, 0x8000000000000004, 0x5) madvise$auto(0x0, 0xffffffffffff0001, 0x15) msync$auto(0x0, 0x2000000005, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r2 = syz_clone(0x40040000, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r2, 0x1002, 0x0, 0x0, 0x0, 0x5) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/radio6\x00', 0x8a240, 0x0) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), r0) r5 = getpid() process_vm_readv$auto(r5, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={0x0, 0xffffffff}, 0x6, 0x0) sendmsg$auto_NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)={0x104, r4, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_PID={0x8, 0x1c, r5}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x8}, @NL802154_ATTR_SEC_DEVICE={0xc, 0x2e, 0x0, 0x1, [@typed={0x8, 0xae, 0x0, 0x0, @u32=0xffffffff}]}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'veth0_to_hsr\x00'}, @NL802154_ATTR_SEC_LEVEL={0xa8, 0x2d, 0x0, 0x1, [@nested={0x91, 0xe7, 0x0, 0x1, [@generic="f994f9b391316f24fa09192d3264478cdf0681ef8b848605fa3d7ae821f9f922072f6c873c36fc72f5944680c3ee5f88a4739ad41f30df6df64524d0b81b5892d0a06e8a7818f2cd7f470a7d3749545cedbacb84eac07a5cec6b56b73e28ba4600fbb16180a67f89eff562dc172dfc95dab69ca6f7e96416a8357f4a89024d1eb5b71ada5c", @nested={0x4, 0x114}, @nested={0x4, 0xac}]}, @nested={0x10, 0x12a, 0x0, 0x1, [@nested={0x4, 0xae}, @generic, @typed={0x8, 0xb9, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}]}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL802154_ATTR_PID={0x8, 0x1c, 0xffffffffffffffff}, @NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x6}]}, 0x104}, 0x1, 0x0, 0x0, 0x800}, 0x40800) ioctl$auto(r3, 0x5646, r3) read$auto_v4l2_fops_v4l2_dev(r3, &(0x7f0000000080)=""/27, 0x1b) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000001080)=""/244, 0xf4) 2.52628917s ago: executing program 0 (id=990): close_range$auto(0x2, 0x8, 0x0) pwrite64$auto(0xc8, &(0x7f0000000180)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x00\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\xff\x01\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xe0\x9bm%#Dd\x85\"\x01\x0e#\xae\xa9i8W\xe5Iq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbbsFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xc1\"\xact\xee\xc9\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00^\xe5A\xd2l\xcb\x1d\x8aD\xc4K\x81E\xe6^\xa3\x19J \xddG;\xa7\x96ml\xd1N\x0e\xa7\xd4Z(K\v\xc7\xdf\xb6\xd1q\xee\xe7\x8fv6_E\xe8/z O\xc3qP1\xf2GC_J\xe2\x94\x95\x91\b\x9f\xb4\xc4\xcd\xb3G\xc4\xedX\x0fE+\x92\x0f5\x1f\xba\"\xc4\fn\xd1s\bI\xa7\x15\x86S+\xf2\xabRhv\x9cvq\x127\x82\x042\\\x9f\xb6:\x95\xd8\xfa', 0xffff, 0x100) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd12/sched/batching\x00', 0x143642, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x11, 0x80003, 0x300) socket(0x29, 0x5, 0x0) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000200)={{@inferred, 0x1, 0x1, 0x81, "3112d585005a614d19e22af9ffb683dbede3d0bf828bbfba40f035f4be6b7fe5e2f94bd90484b0755015e48d"}, 0x401, 0x5, 0x4, @inferred, @integer={0xdbe, 0x255, 0x8}, "7a9fc199a16a2311eacf2fc7ae1d8778dc618090334fdd73340238d21000debe0eda71bdd709254592b67f9cb5adb17884a16f7ce8cbce0bb32791702b8d7c2d"}) bpf$auto(0x8000000, &(0x7f0000000000)=@test={0xffffffffffffffff, 0x5, 0x9, 0x3a8453d3, 0x80, 0x8, 0x2, 0x1, 0x200, 0x8, 0x401, 0x2, 0x2, 0x2, 0xc28}, 0x0) r2 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5ac, &(0x7f0000000100)={&(0x7f0000000200), 0x12}, 0x5, &(0x7f0000000180), 0x5, 0xe}, 0x5}, 0x2, 0x100) open_by_handle_at$auto(r1, &(0x7f0000001280)={0x8, 0x2, "0200000000000000"}, 0x6) cachestat$auto(r0, &(0x7f0000000000)={0x1, 0x8}, &(0x7f0000000040)={0x81, 0x7f, 0x18e0932f, 0x2, 0x6}, 0xb) sendfile$auto(r0, r0, 0x0, 0x2) 2.516399448s ago: executing program 2 (id=991): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) socket(0x2b, 0x1, 0x1) read$auto(0xffffffffffffffff, &(0x7f00000001c0)='/proc/thread-self/net/nfsfs/servers\x00', 0x10001) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.2/usb13/13-0:1.0/bAlternateSetting\x00', 0x4480, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) read$auto(r1, 0x0, 0x5) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x28f, 0x3, 0x9b72, r0, 0x8004) sysfs$auto(0x2, 0x10000000000000b, 0x0) madvise$auto(0x0, 0x5, 0x15) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x10c) write$auto_proc_pid_set_comm_operations_base(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x1e0) 2.480226818s ago: executing program 3 (id=992): mmap$auto(0x0, 0x2020009, 0x3, 0x7fffffffffffffff, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x4) r0 = fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_MON_IOCG_STATS(r0, 0x80089203, &(0x7f0000000000)={0x80, 0x6}) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) userfaultfd$auto(0x1) read$auto(0x3, 0x0, 0x80) io_cancel$auto(0x64, &(0x7f0000000000)={0x6, 0x9, 0x7, 0x4, 0x1, 0x409691, 0x5a43, 0x0, 0x5, 0x10, 0x7f, 0x4}, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mq_unlink$auto(0x0) socket(0xa, 0x5, 0x0) madvise$auto(0x3, 0xd, 0x7ff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x5, 0x8000) sysfs$auto(0x2, 0x100000000, 0x40) close_range$auto(0x2, 0x8, 0x0) ioctl$auto(0x3, 0xc018aec0, r0) 2.195347256s ago: executing program 2 (id=993): syz_clone(0x100, 0x0, 0xff1d, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x8, 0xdc, 0x9b72, 0x2, 0x8000) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r0 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/cmdline\x00', 0x2000, 0x0) read$auto_proc_pid_cmdline_ops_base(r0, &(0x7f0000000040)=""/159, 0x9f) madvise$auto(0x0, 0xffffffffefff0001, 0x15) read$auto_proc_pid_cmdline_ops_base(r0, 0x0, 0x0) 1.916487828s ago: executing program 0 (id=994): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) ioctl$auto(0xffffffffffffffff, 0x64c8, 0x1e2) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000180)={0x1f4, 0x0, 0x800, 0x70bd2b, 0x25dfdbff, {}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x5b}, @NL80211_ATTR_FTM_RESPONDER={0x1d8, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_CIVICLOC={0x1b, 0x3, "8e192b25fe4b6195ae4cbdfc7ca4f56a124659bd1822f7"}, @NL80211_FTM_RESP_ATTR_LCI={0x6, 0x2, "0896"}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0xd8, 0x2, "1aa0a6e1d42519c2e0dd92db0cf0939f29fb50f055ec96fbc178d40ea00ee0324086ae673d2c4a3db2a60466ea3bbd436185a1d8d86f58899a21bdbaf39532dcb7eba62f766c8a485f5b9bcc741633202e760a39c43d9c7c37e1c6d0cd4f2701d92aafcf44952bda7f7062af6d59f9edbec22d69edf556b66d280c96b93dfd21c5922b5bb8462845aa211a56bf60bc54207c8c35c3b253af9ce92e25e4c3157b6a705bc279cc66f963d359cf758707d5a88104aebf98d31309f7d575ee111c3116690024401d50b090f437f9b380472213f4be79"}, @NL80211_FTM_RESP_ATTR_LCI={0xcf, 0x2, "b8e8b5b35f454d88cc53db14a26e05fe4ae9817a4f7fb9d590e405ba6c0dbb276683720cb824c500fa358b3fc62f0e9626a2c71adeedbbcc43e7d12dc3ef7f228e6e295c7c8deffc3cf25ba9570a3b7b10656b61c995058c8f27db4523e0cf412cc3b77345bbda07583b9bc4e0c4c447e05e9b760cb48b37eae6c12598caae539a600be98081492feb48a1def5b3fda482e9f956466709aeefcec47b221b1281658e362ed8bba3d06b31419ed1ce429dca2f0e4ddb8017422f0e2f0777a53c50ba9d74716c19bf4b3c09e3"}]}]}, 0x1f4}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) get_mempolicy$auto(0x0, 0x0, 0x3, 0x1ff, 0x3) r1 = openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x1a6b75d63882a712, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, r1, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCVHANGUP2(0xffffffffffffffff, 0x5437, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) openat$auto_bm_status_operations_binfmt_misc(0xffffffffffffff9c, &(0x7f0000000100), 0x80000, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) mmap$auto(0x0, 0xe9, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xf90000, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 898.68419ms ago: executing program 2 (id=995): close_range$auto(0x2, 0x8, 0x0) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/block/nbd12/sched/batching\x00', 0x143642, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) keyctl$auto_KEYCTL_PKEY_VERIFY(0x1c, 0x0, 0x0, 0x0, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) close_range$auto(0x0, 0xfffffffffffff001, 0x2) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dmmidi2\x00', 0x8000, 0x0) socket(0x29, 0x5, 0x0) r0 = open(&(0x7f00000000c0)='./cgroup\x00', 0x80400, 0xb5d1af1605322dd2) open_by_handle_at$auto(r0, &(0x7f0000000040)={0x8, 0x2, "0200000000000000"}, 0x2) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x2) close_range$auto(0x2, 0xa, 0x0) 709.711624ms ago: executing program 3 (id=996): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd9/queue/atomic_write_unit_max_bytes\x00', 0x0, 0x0) ioctl$auto_FIDEDUPERANGE(0xffffffffffffffff, 0xc0189436, r0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000003c0)=""/4053, 0xfffffd92) 575.917001ms ago: executing program 2 (id=997): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x806, 0x0) socket(0x10, 0x2, 0x6) socketpair$auto(0x200001e, 0x5, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/hugepages/hugepages-2048kB/nr_overcommit_hugepages\x00', 0x1c9282, 0x0) write$auto_tracing_iter_fops_trace(r1, &(0x7f0000000240)="0e45f988c97b", 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) r5 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r5, 0x0, 0xe) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f00000000c0)={0x28, r3, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x200}]}, 0x28}, 0x1, 0x0, 0x0, 0x4089c}, 0x4004010) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) socket(0x1e, 0x1, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000001c0)={{&(0x7f0000000000), 0x58a, &(0x7f0000000100)={0x0, 0x2}, 0x5, 0x0, 0x5, 0x1000}, 0x5}, 0x2, 0x100) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x9, 0x100000001, 0x63, 0x0, 0x0, 0x0, 0x1000000006, 0x6, 0x7, 0x400, 0x7ffffff9, 0x5, 0xffffffff80000000, 0x9, 0x61, 0x105}) fadvise64$auto(0x0, 0x9, 0x9, 0xb28) socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40400c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x5, 0xa503}, 0x800}, 0x7, 0x4008) 264.677079ms ago: executing program 4 (id=998): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_handshake(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket(0x2a, 0x2, 0x1) connect$auto(r2, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) read$auto(0xffffffffffffffff, 0x0, 0x200001) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="010027bc944034cde02659a8b570"], 0x14}, 0x1, 0x0, 0x0, 0x4002040}, 0x2004881c) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/scsi/drivers/st/debug_flag\x00', 0x501, 0x0) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0x40000000000a5, 0x8000) openat$auto_proc_pid_smaps_operations_internal(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/smaps\x00', 0x40000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_bond\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_OFFLOAD(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000840)={0x20, r4, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@MACSEC_ATTR_OFFLOAD={0x4}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040085}, 0x80) r6 = open(&(0x7f0000000000)='./cgroup.cpu/cgroup.procs\x00', 0x101080, 0x7) read$auto(r6, 0x0, 0x1) write$auto_proc_coredump_filter_operations_base(r6, &(0x7f0000000040)="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", 0xfc) write$auto(0x3, 0x0, 0x1) 137.514207ms ago: executing program 3 (id=999): openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, &(0x7f0000000580)='/sys/kernel/debug/tracing/tracing_cpumask\x00', 0x8002, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) socket(0x2, 0x6, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/rpc/auth.unix.gid/content\x00', 0x20000, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x20000, 0x0) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net/freezer.self_freezing\x00', 0x101080, 0x0) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x2, 0x73) socket(0xa, 0x2, 0x0) inotify_init1$auto(0x3000000000000) (async) socket(0xa, 0x2, 0x3a) r0 = io_uring_setup$auto(0x4, 0x0) socketpair$auto(0x1, 0x2, 0x5, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x1c8340, 0x0) (async) openat$auto_proc_page_owner_operations_page_owner(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x482, 0x0) (async, rerun: 32) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0xa4e00, 0x0) (async, rerun: 32) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) close_range$auto(0x2, r0, 0x0) (async, rerun: 32) open(0x0, 0x22240, 0x55) (async, rerun: 32) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r1) 0s ago: executing program 4 (id=1000): mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) (fail_nth: 3) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) socket(0x2b, 0x1, 0x1) read$auto(0xffffffffffffffff, &(0x7f00000001c0)='/proc/thread-self/net/nfsfs/servers\x00', 0x10001) write$auto(0xffffffffffffffff, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0x20499d, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x29, 0x2, 0x0) socket(0x10, 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/vhci_hcd.2/usb13/13-0:1.0/bAlternateSetting\x00', 0x4480, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) read$auto(r1, 0x0, 0x5) writev$auto(0xffffffffffffffff, 0x0, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x28f, 0x3, 0x9b72, r0, 0x8004) sysfs$auto(0x2, 0x10000000000000b, 0x0) madvise$auto(0x0, 0x5, 0x15) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x10c) write$auto_proc_pid_set_comm_operations_base(0xffffffffffffffff, &(0x7f00000002c0)="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", 0x1e0) kernel console output (not intermixed with test programs): 00000246 ORIG_RAX: 0000000000000010 [ 137.211770][ T6854] RAX: ffffffffffffffda RBX: 00007f5d81fa5fa0 RCX: 00007f5d81d8d169 [ 137.211789][ T6854] RDX: ffffffff81000000 RSI: 0000000000004c80 RDI: 000000000000000b [ 137.211807][ T6854] RBP: 00007f5d81e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 137.211824][ T6854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 137.211840][ T6854] R13: 0000000000000000 R14: 00007f5d81fa5fa0 R15: 00007ffcdb07f978 [ 137.211868][ T6854] ? 0xffffffff81000000 [ 137.211894][ T6854] [ 137.633421][ T6859] netlink: 354 bytes leftover after parsing attributes in process `syz.2.256'. [ 138.023498][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.036471][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.045121][ T6878] sock: sock_timestamping_bind_phc: sock not bind to device [ 142.701480][ T6932] hub 8-0:1.0: USB hub found [ 142.731236][ T6932] hub 8-0:1.0: 1 port detected [ 147.877283][ T7005] device-mapper: ioctl: Invalid new mapped device name or uuid string supplied. [ 150.041732][ T7027] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 150.120952][ T7027] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 152.252100][ T7035] vivid-003: ================= START STATUS ================= [ 152.364775][ T7035] vivid-003: Radio HW Seek Mode: Bounded [ 152.475437][ T7035] vivid-003: Radio Programmable HW Seek: false [ 152.579954][ T7035] vivid-003: RDS Rx I/O Mode: Block I/O [ 152.621448][ T7035] vivid-003: Generate RBDS Instead of RDS: false [ 152.627899][ T7035] vivid-003: RDS Reception: true [ 152.692951][ T7035] vivid-003: RDS Program Type: 0 inactive [ 152.698870][ T7035] vivid-003: RDS PS Name: inactive [ 152.720973][ T7035] vivid-003: RDS Radio Text: inactive [ 152.734646][ T7035] vivid-003: RDS Traffic Announcement: false inactive [ 152.744105][ T7048] netlink: 12 bytes leftover after parsing attributes in process `syz.1.309'. [ 152.821000][ T7035] vivid-003: RDS Traffic Program: false inactive [ 152.950871][ T7035] vivid-003: RDS Music: false inactive [ 152.956502][ T7035] vivid-003: ================== END STATUS ================== [ 153.682725][ T7063] FAULT_INJECTION: forcing a failure. [ 153.682725][ T7063] name failslab, interval 1, probability 0, space 0, times 0 [ 153.726893][ T7063] CPU: 1 UID: 0 PID: 7063 Comm: syz.0.311 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 153.726945][ T7063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 153.726963][ T7063] Call Trace: [ 153.726972][ T7063] [ 153.726984][ T7063] dump_stack_lvl+0x16c/0x1f0 [ 153.727032][ T7063] should_fail_ex+0x512/0x640 [ 153.727081][ T7063] ? fs_reclaim_acquire+0xae/0x150 [ 153.727127][ T7063] should_failslab+0xc2/0x120 [ 153.727160][ T7063] __kmalloc_cache_noprof+0x6a/0x3e0 [ 153.727206][ T7063] ? __up_read+0x1f8/0x750 [ 153.727237][ T7063] ? kobject_uevent_env+0x265/0x1870 [ 153.727292][ T7063] kobject_uevent_env+0x265/0x1870 [ 153.727341][ T7063] ? __pfx_dev_uevent_name+0x10/0x10 [ 153.727376][ T7063] ? kobject_put+0xab/0x5a0 [ 153.727424][ T7063] device_release_driver_internal+0x51c/0x620 [ 153.727474][ T7063] bus_remove_device+0x22f/0x420 [ 153.727511][ T7063] device_del+0x396/0x9f0 [ 153.727550][ T7063] ? __pfx_device_del+0x10/0x10 [ 153.727585][ T7063] ? kobject_put+0x210/0x5a0 [ 153.727635][ T7063] usb_disable_device+0x34d/0x7c0 [ 153.727689][ T7063] usb_set_configuration+0x12cd/0x1e20 [ 153.727737][ T7063] ? __pfx_sscanf+0x10/0x10 [ 153.727769][ T7063] ? trace_contention_end+0xdd/0x130 [ 153.727829][ T7063] bConfigurationValue_store+0x100/0x180 [ 153.727879][ T7063] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 153.727948][ T7063] ? __pfx__copy_from_iter+0x10/0x10 [ 153.727985][ T7063] ? __pfx_bConfigurationValue_store+0x10/0x10 [ 153.728033][ T7063] dev_attr_store+0x55/0x80 [ 153.728075][ T7063] ? __pfx_dev_attr_store+0x10/0x10 [ 153.728117][ T7063] sysfs_kf_write+0x117/0x170 [ 153.728164][ T7063] kernfs_fop_write_iter+0x349/0x510 [ 153.728205][ T7063] ? __pfx_sysfs_kf_write+0x10/0x10 [ 153.728253][ T7063] iter_file_splice_write+0x91c/0x1150 [ 153.728322][ T7063] ? __pfx_iter_file_splice_write+0x10/0x10 [ 153.728378][ T7063] ? __pfx_copy_splice_read+0x10/0x10 [ 153.728442][ T7063] ? __pfx_iter_file_splice_write+0x10/0x10 [ 153.728494][ T7063] direct_splice_actor+0x18f/0x6c0 [ 153.728546][ T7063] splice_direct_to_actor+0x342/0xa30 [ 153.728596][ T7063] ? __pfx_direct_splice_actor+0x10/0x10 [ 153.728651][ T7063] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 153.728699][ T7063] ? get_pid_task+0xfc/0x250 [ 153.728734][ T7063] do_splice_direct+0x174/0x240 [ 153.728784][ T7063] ? __pfx_do_splice_direct+0x10/0x10 [ 153.728833][ T7063] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 153.728884][ T7063] ? rw_verify_area+0xcf/0x680 [ 153.728938][ T7063] do_sendfile+0xafd/0xe50 [ 153.728988][ T7063] ? __pfx_do_sendfile+0x10/0x10 [ 153.729034][ T7063] ? __fget_files+0x20e/0x3c0 [ 153.729069][ T7063] __x64_sys_sendfile64+0x1d8/0x220 [ 153.729102][ T7063] ? ksys_write+0x1b9/0x240 [ 153.729148][ T7063] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 153.729192][ T7063] do_syscall_64+0xcd/0x260 [ 153.729235][ T7063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.729266][ T7063] RIP: 0033:0x7f5d81d8d169 [ 153.729290][ T7063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 153.729319][ T7063] RSP: 002b:00007f5d82c02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 153.729346][ T7063] RAX: ffffffffffffffda RBX: 00007f5d81fa5fa0 RCX: 00007f5d81d8d169 [ 153.729365][ T7063] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 153.729381][ T7063] RBP: 00007f5d82c02090 R08: 0000000000000000 R09: 0000000000000000 [ 153.729399][ T7063] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000002 [ 153.729415][ T7063] R13: 0000000000000000 R14: 00007f5d81fa5fa0 R15: 00007ffcdb07f978 [ 153.729448][ T7063] [ 154.201990][ T7063] hub 8-0:1.0: USB hub found [ 154.245476][ T7063] hub 8-0:1.0: 1 port detected [ 154.639256][ T7073] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 154.694161][ T7073] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 155.297859][ T7080] rnbd_client L202: map_device: Unknown parameter or missing value '(' [ 156.651403][ T7078] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 156.661177][ T7078] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 156.667277][ T7078] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 156.703612][ T7078] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 158.260973][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 158.381387][ T7105] vivid-003: ================= START STATUS ================= [ 158.393964][ T7105] vivid-003: Radio HW Seek Mode: Bounded [ 158.399716][ T7105] vivid-003: Radio Programmable HW Seek: false [ 158.447437][ T7105] vivid-003: RDS Rx I/O Mode: Block I/O [ 158.486221][ T7105] vivid-003: Generate RBDS Instead of RDS: false [ 158.523002][ T7105] vivid-003: RDS Reception: true [ 158.528055][ T7105] vivid-003: RDS Program Type: 0 inactive [ 158.591320][ T7105] vivid-003: RDS PS Name: inactive [ 158.596671][ T7105] vivid-003: RDS Radio Text: inactive [ 158.639886][ T7105] vivid-003: RDS Traffic Announcement: false inactive [ 158.671162][ T7105] vivid-003: RDS Traffic Program: false inactive [ 158.677665][ T7105] vivid-003: RDS Music: false inactive [ 158.703708][ T7105] vivid-003: ================== END STATUS ================== [ 158.746899][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 158.753118][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 158.759213][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 163.664522][ T7158] vivid-003: ================= START STATUS ================= [ 163.733133][ T7158] vivid-003: Radio HW Seek Mode: Bounded [ 163.759330][ T7158] vivid-003: Radio Programmable HW Seek: false [ 163.798491][ T7158] vivid-003: RDS Rx I/O Mode: Block I/O [ 163.836363][ T7158] vivid-003: Generate RBDS Instead of RDS: false [ 163.893317][ T7183] capability: warning: `syz.3.339' uses 32-bit capabilities (legacy support in use) [ 163.903477][ T7158] vivid-003: RDS Reception: true [ 163.908939][ T7158] vivid-003: RDS Program Type: 0 inactive [ 163.918183][ T7158] vivid-003: RDS PS Name: inactive [ 163.923906][ T7158] vivid-003: RDS Radio Text: inactive [ 163.929464][ T7158] vivid-003: RDS Traffic Announcement: false inactive [ 163.939823][ T7158] vivid-003: RDS Traffic Program: false inactive [ 163.948693][ T7158] vivid-003: RDS Music: false inactive [ 163.960162][ T7158] vivid-003: ================== END STATUS ================== [ 165.099967][ T7199] netlink: 15056 bytes leftover after parsing attributes in process `syz.3.345'. [ 165.161154][ T7199] net_ratelimit: 77 callbacks suppressed [ 165.161178][ T7199] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 165.179530][ T7200] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input7 [ 167.076272][ T7225] FAULT_INJECTION: forcing a failure. [ 167.076272][ T7225] name failslab, interval 1, probability 0, space 0, times 0 [ 167.095840][ T7225] CPU: 1 UID: 0 PID: 7225 Comm: syz.0.351 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 167.095913][ T7225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 167.095950][ T7225] Call Trace: [ 167.095959][ T7225] [ 167.095972][ T7225] dump_stack_lvl+0x16c/0x1f0 [ 167.096020][ T7225] should_fail_ex+0x512/0x640 [ 167.096069][ T7225] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 167.096124][ T7225] should_failslab+0xc2/0x120 [ 167.096157][ T7225] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 167.096209][ T7225] ? __kernfs_new_node+0xd2/0x8a0 [ 167.096243][ T7225] __kernfs_new_node+0xd2/0x8a0 [ 167.096276][ T7225] ? __pfx___kernfs_new_node+0x10/0x10 [ 167.096306][ T7225] ? __pfx___might_resched+0x10/0x10 [ 167.096346][ T7225] ? kernfs_link_sibling+0x3fc/0x550 [ 167.096376][ T7225] ? down_write+0x14d/0x200 [ 167.096417][ T7225] ? find_held_lock+0x2b/0x80 [ 167.096454][ T7225] ? kernfs_add_one+0x3d8/0x530 [ 167.096493][ T7225] ? up_write+0x1b2/0x520 [ 167.096525][ T7225] kernfs_new_node+0x186/0x240 [ 167.096565][ T7225] __kernfs_create_file+0x53/0x350 [ 167.096612][ T7225] sysfs_add_file_mode_ns+0x207/0x3c0 [ 167.096668][ T7225] internal_create_group+0x578/0xf30 [ 167.096707][ T7225] ? __pfx_internal_create_group+0x10/0x10 [ 167.096743][ T7225] ? kernfs_create_link+0x1bd/0x240 [ 167.096790][ T7225] internal_create_groups+0x9d/0x150 [ 167.096824][ T7225] device_add+0x6d1/0x1a70 [ 167.096871][ T7225] ? __pfx_device_add+0x10/0x10 [ 167.096914][ T7225] ? lockdep_init_map_type+0x5c/0x280 [ 167.096969][ T7225] ? __init_waitqueue_head+0xca/0x150 [ 167.097011][ T7225] netdev_register_kobject+0x182/0x3a0 [ 167.097052][ T7225] register_netdevice+0x13dc/0x2040 [ 167.097092][ T7225] ? __pfx_register_netdevice+0x10/0x10 [ 167.097129][ T7225] ? alloc_netdev_mqs+0xe7e/0x1570 [ 167.097165][ T7225] ? __pfx_loopback_net_init+0x10/0x10 [ 167.097209][ T7225] register_netdev+0x34/0x50 [ 167.097243][ T7225] loopback_net_init+0x7a/0x170 [ 167.097287][ T7225] ? __pfx_loopback_net_init+0x10/0x10 [ 167.097329][ T7225] ops_init+0x1df/0x5f0 [ 167.097364][ T7225] setup_net+0x21e/0x850 [ 167.097398][ T7225] ? __pfx_setup_net+0x10/0x10 [ 167.097430][ T7225] ? lockdep_init_map_type+0x5c/0x280 [ 167.097477][ T7225] ? __pfx_down_read_killable+0x10/0x10 [ 167.097526][ T7225] ? debug_mutex_init+0x37/0x70 [ 167.097564][ T7225] copy_net_ns+0x2a6/0x5f0 [ 167.097603][ T7225] create_new_namespaces+0x3ea/0xad0 [ 167.097649][ T7225] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 167.097692][ T7225] ksys_unshare+0x45b/0xa40 [ 167.097737][ T7225] ? __pfx_ksys_unshare+0x10/0x10 [ 167.097781][ T7225] ? xfd_validate_state+0x5d/0x180 [ 167.097816][ T7225] ? rcu_is_watching+0x12/0xc0 [ 167.097858][ T7225] __x64_sys_unshare+0x31/0x40 [ 167.097903][ T7225] do_syscall_64+0xcd/0x260 [ 167.097951][ T7225] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.097982][ T7225] RIP: 0033:0x7f5d81d8d169 [ 167.098007][ T7225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.098037][ T7225] RSP: 002b:00007f5d82c02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 167.098066][ T7225] RAX: ffffffffffffffda RBX: 00007f5d81fa5fa0 RCX: 00007f5d81d8d169 [ 167.098085][ T7225] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 167.098103][ T7225] RBP: 00007f5d81e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 167.098120][ T7225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 167.098136][ T7225] R13: 0000000000000000 R14: 00007f5d81fa5fa0 R15: 00007ffcdb07f978 [ 167.098168][ T7225] [ 168.123343][ T54] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 168.640313][ T7242] netlink: 15056 bytes leftover after parsing attributes in process `syz.0.357'. [ 168.763878][ T7242] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 169.614531][ T7261] netlink: 338 bytes leftover after parsing attributes in process `syz.2.361'. [ 170.105917][ T7272] netlink: 4 bytes leftover after parsing attributes in process `syz.2.361'. [ 170.258150][ T7261] netlink: 338 bytes leftover after parsing attributes in process `syz.2.361'. [ 172.679731][ T7307] sd 0:0:1:0: PR command failed: 1026 [ 172.689433][ T7307] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 172.718227][ T7307] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 172.878136][ T7302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.371'. [ 173.016957][ T7302] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 173.647258][ T7331] random: crng reseeded on system resumption [ 180.097933][ T7424] netlink: 8 bytes leftover after parsing attributes in process `syz.3.402'. [ 181.311371][ T7446] netlink: 8 bytes leftover after parsing attributes in process `syz.0.416'. [ 181.321601][ T7447] netlink: 544 bytes leftover after parsing attributes in process `syz.3.405'. [ 183.431090][ T7478] netlink: 544 bytes leftover after parsing attributes in process `syz.0.424'. [ 185.775876][ T7522] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 189.066510][ T7577] bond0: option all_slaves_active: invalid value () [ 189.075009][ T7578] syz.1.439 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 190.381582][ T7595] FAULT_INJECTION: forcing a failure. [ 190.381582][ T7595] name failslab, interval 1, probability 0, space 0, times 0 [ 190.411860][ T7595] CPU: 1 UID: 0 PID: 7595 Comm: syz.3.446 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 190.411900][ T7595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 190.411917][ T7595] Call Trace: [ 190.411925][ T7595] [ 190.411939][ T7595] dump_stack_lvl+0x16c/0x1f0 [ 190.411980][ T7595] should_fail_ex+0x512/0x640 [ 190.412022][ T7595] ? fs_reclaim_acquire+0xae/0x150 [ 190.412061][ T7595] should_failslab+0xc2/0x120 [ 190.412099][ T7595] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 190.412145][ T7595] ? security_inode_alloc+0x3b/0x2b0 [ 190.412202][ T7595] security_inode_alloc+0x3b/0x2b0 [ 190.412247][ T7595] inode_init_always_gfp+0xce4/0x1030 [ 190.412277][ T7595] alloc_inode+0x86/0x240 [ 190.412311][ T7595] new_inode+0x22/0x1c0 [ 190.412347][ T7595] bdev_alloc+0x2b/0x420 [ 190.412374][ T7595] __alloc_disk_node+0x116/0x610 [ 190.412410][ T7595] __blk_mq_alloc_disk+0x89/0x120 [ 190.412441][ T7595] loop_add+0x496/0xb70 [ 190.412479][ T7595] ? 0xffffffff81000000 [ 190.412497][ T7595] ? do_vfs_ioctl+0x512/0x1990 [ 190.412532][ T7595] ? __pfx_loop_add+0x10/0x10 [ 190.412579][ T7595] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 190.412629][ T7595] ? __pfx___might_resched+0x10/0x10 [ 190.412666][ T7595] ? 0xffffffff81000000 [ 190.412683][ T7595] loop_control_ioctl+0x13c/0x630 [ 190.412722][ T7595] ? __pfx_loop_control_ioctl+0x10/0x10 [ 190.412760][ T7595] ? xfd_validate_state+0x5d/0x180 [ 190.412789][ T7595] ? 0xffffffff81000000 [ 190.412806][ T7595] ? __pfx_loop_control_ioctl+0x10/0x10 [ 190.412845][ T7595] ? 0xffffffff81000000 [ 190.412862][ T7595] __x64_sys_ioctl+0x190/0x200 [ 190.412898][ T7595] do_syscall_64+0xcd/0x260 [ 190.412956][ T7595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 190.412982][ T7595] RIP: 0033:0x7fefe778d169 [ 190.413002][ T7595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 190.413029][ T7595] RSP: 002b:00007fefe8672038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 190.413054][ T7595] RAX: ffffffffffffffda RBX: 00007fefe79a5fa0 RCX: 00007fefe778d169 [ 190.413077][ T7595] RDX: ffffffff81000000 RSI: 0000000000004c80 RDI: 0000000000000009 [ 190.413093][ T7595] RBP: 00007fefe780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 190.413109][ T7595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 190.413124][ T7595] R13: 0000000000000000 R14: 00007fefe79a5fa0 R15: 00007ffc0c764048 [ 190.413146][ T7595] ? 0xffffffff81000000 [ 190.413167][ T7595] [ 191.590231][ T7617] bond0: option all_slaves_active: invalid value () [ 191.914357][ T7627] netlink: 186 bytes leftover after parsing attributes in process `syz.3.455'. [ 193.363566][ T7663] netlink: 12 bytes leftover after parsing attributes in process `syz.2.463'. [ 195.041003][ T7683] bond0: option all_slaves_active: invalid value () [ 195.925649][ T7701] netlink: 186 bytes leftover after parsing attributes in process `syz.2.467'. [ 196.648026][ T7711] FAULT_INJECTION: forcing a failure. [ 196.648026][ T7711] name failslab, interval 1, probability 0, space 0, times 0 [ 196.691128][ T7711] CPU: 0 UID: 0 PID: 7711 Comm: syz.0.469 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 196.691169][ T7711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.691186][ T7711] Call Trace: [ 196.691196][ T7711] [ 196.691207][ T7711] dump_stack_lvl+0x16c/0x1f0 [ 196.691252][ T7711] should_fail_ex+0x512/0x640 [ 196.691300][ T7711] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 196.691354][ T7711] should_failslab+0xc2/0x120 [ 196.691388][ T7711] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 196.691457][ T7711] ? lockdep_init_map_type+0x5c/0x280 [ 196.691508][ T7711] ? mempool_init_node+0x31d/0x760 [ 196.691541][ T7711] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 196.691572][ T7711] mempool_init_node+0x31d/0x760 [ 196.691608][ T7711] ? __pfx_mempool_alloc_slab+0x10/0x10 [ 196.691637][ T7711] ? __pfx_mempool_free_slab+0x10/0x10 [ 196.691690][ T7711] mempool_init_noprof+0x3a/0x50 [ 196.691723][ T7711] bioset_init+0x37a/0x880 [ 196.691769][ T7711] ? __pfx_bioset_init+0x10/0x10 [ 196.691822][ T7711] __alloc_disk_node+0x83/0x610 [ 196.691861][ T7711] __blk_mq_alloc_disk+0x89/0x120 [ 196.691898][ T7711] loop_add+0x496/0xb70 [ 196.691949][ T7711] ? 0xffffffff81000000 [ 196.691971][ T7711] ? do_vfs_ioctl+0x512/0x1990 [ 196.692014][ T7711] ? __pfx_loop_add+0x10/0x10 [ 196.692057][ T7711] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 196.692119][ T7711] ? __pfx___might_resched+0x10/0x10 [ 196.692164][ T7711] ? 0xffffffff81000000 [ 196.692186][ T7711] loop_control_ioctl+0x13c/0x630 [ 196.692234][ T7711] ? __pfx_loop_control_ioctl+0x10/0x10 [ 196.692281][ T7711] ? xfd_validate_state+0x5d/0x180 [ 196.692318][ T7711] ? 0xffffffff81000000 [ 196.692338][ T7711] ? __pfx_loop_control_ioctl+0x10/0x10 [ 196.692386][ T7711] ? 0xffffffff81000000 [ 196.692407][ T7711] __x64_sys_ioctl+0x190/0x200 [ 196.692451][ T7711] do_syscall_64+0xcd/0x260 [ 196.692513][ T7711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.692546][ T7711] RIP: 0033:0x7f5d81d8d169 [ 196.692569][ T7711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.692600][ T7711] RSP: 002b:00007f5d82c02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 196.692629][ T7711] RAX: ffffffffffffffda RBX: 00007f5d81fa5fa0 RCX: 00007f5d81d8d169 [ 196.692649][ T7711] RDX: ffffffff81000000 RSI: 0000000000004c80 RDI: 0000000000000009 [ 196.692669][ T7711] RBP: 00007f5d81e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 196.692687][ T7711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.692704][ T7711] R13: 0000000000000000 R14: 00007f5d81fa5fa0 R15: 00007ffcdb07f978 [ 196.692731][ T7711] ? 0xffffffff81000000 [ 196.692757][ T7711] [ 196.966516][ C0] vkms_vblank_simulate: vblank timer overrun [ 197.086883][ T7723] netlink: 12 bytes leftover after parsing attributes in process `syz.1.476'. [ 199.475125][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.481532][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.899207][ T7773] FAULT_INJECTION: forcing a failure. [ 200.899207][ T7773] name failslab, interval 1, probability 0, space 0, times 0 [ 200.912400][ T7773] CPU: 1 UID: 0 PID: 7773 Comm: syz.0.486 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 200.912441][ T7773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 200.912459][ T7773] Call Trace: [ 200.912469][ T7773] [ 200.912480][ T7773] dump_stack_lvl+0x16c/0x1f0 [ 200.912525][ T7773] should_fail_ex+0x512/0x640 [ 200.912571][ T7773] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 200.912623][ T7773] should_failslab+0xc2/0x120 [ 200.912653][ T7773] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 200.912700][ T7773] ? security_inode_alloc+0x3b/0x2b0 [ 200.912765][ T7773] ? sk_prot_alloc+0x60/0x2a0 [ 200.912807][ T7773] sk_prot_alloc+0x60/0x2a0 [ 200.912846][ T7773] sk_alloc+0x36/0xc20 [ 200.912894][ T7773] rxrpc_create+0x116/0x7d0 [ 200.912935][ T7773] __sock_create+0x335/0x8d0 [ 200.912981][ T7773] __sys_socket+0x14d/0x260 [ 200.913024][ T7773] ? __pfx___sys_socket+0x10/0x10 [ 200.913067][ T7773] ? rcu_is_watching+0x12/0xc0 [ 200.913108][ T7773] __x64_sys_socket+0x72/0xb0 [ 200.913149][ T7773] ? lockdep_hardirqs_on+0x7c/0x110 [ 200.913188][ T7773] do_syscall_64+0xcd/0x260 [ 200.913230][ T7773] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.913262][ T7773] RIP: 0033:0x7f5d81d8d169 [ 200.913287][ T7773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.913317][ T7773] RSP: 002b:00007f5d82be1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 200.913354][ T7773] RAX: ffffffffffffffda RBX: 00007f5d81fa6080 RCX: 00007f5d81d8d169 [ 200.913375][ T7773] RDX: 0000000000000002 RSI: 0000000000000002 RDI: 0000000000000021 [ 200.913393][ T7773] RBP: 00007f5d81e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 200.913411][ T7773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.913428][ T7773] R13: 0000000000000000 R14: 00007f5d81fa6080 R15: 00007ffcdb07f978 [ 200.913460][ T7773] [ 201.465604][ T7777] FAULT_INJECTION: forcing a failure. [ 201.465604][ T7777] name failslab, interval 1, probability 0, space 0, times 0 [ 201.540989][ T7777] CPU: 1 UID: 0 PID: 7777 Comm: syz.3.492 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 201.541019][ T7777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 201.541035][ T7777] Call Trace: [ 201.541045][ T7777] [ 201.541055][ T7777] dump_stack_lvl+0x16c/0x1f0 [ 201.541100][ T7777] should_fail_ex+0x512/0x640 [ 201.541148][ T7777] should_failslab+0xc2/0x120 [ 201.541195][ T7777] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 201.541244][ T7777] ? dst_alloc+0x99/0x1a0 [ 201.541300][ T7777] dst_alloc+0x99/0x1a0 [ 201.541347][ T7777] rt_dst_alloc+0x35/0x3a0 [ 201.541381][ T7777] ip_route_output_key_hash_rcu+0x87a/0x28f0 [ 201.541435][ T7777] ip_route_output_key_hash+0x137/0x2e0 [ 201.541478][ T7777] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 201.541528][ T7777] ? __pfx_crng_fast_key_erasure+0x10/0x10 [ 201.541581][ T7777] ip_route_output_flow+0x27/0x150 [ 201.541629][ T7777] sctp_v4_get_dst+0x41e/0x1340 [ 201.541662][ T7777] ? crng_make_state+0x46e/0x6d0 [ 201.541709][ T7777] ? lockdep_hardirqs_on+0x7c/0x110 [ 201.541746][ T7777] ? crng_make_state+0x48e/0x6d0 [ 201.541799][ T7777] ? __pfx_sctp_v4_get_dst+0x10/0x10 [ 201.541846][ T7777] ? __pfx_sctp_generate_proto_unreach_event+0x10/0x10 [ 201.541899][ T7777] ? lockdep_init_map_type+0x5c/0x280 [ 201.541952][ T7777] ? sctp_transport_route+0x12f/0x350 [ 201.541997][ T7777] sctp_transport_route+0x12f/0x350 [ 201.542046][ T7777] sctp_assoc_add_peer+0x741/0x1550 [ 201.542094][ T7777] sctp_process_init+0x27f6/0x2e20 [ 201.542135][ T7777] ? __pfx_sctp_process_init+0x10/0x10 [ 201.542177][ T7777] ? sctp_bind_addr_copy+0xe0/0x530 [ 201.542207][ T7777] ? sctp_bind_addr_copy+0x23a/0x530 [ 201.542261][ T7777] sctp_sf_do_unexpected_init.isra.0+0x967/0x16f0 [ 201.542301][ T7777] ? __pfx_sctp_sf_do_unexpected_init.isra.0+0x10/0x10 [ 201.542343][ T7777] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 201.542377][ T7777] ? __pfx_sctp_cname+0x10/0x10 [ 201.542406][ T7777] sctp_do_sm+0x17e/0x5c80 [ 201.542450][ T7777] ? sctp_packet_singleton+0x1a5/0x370 [ 201.542493][ T7777] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 201.542538][ T7777] ? __pfx_sctp_do_sm+0x10/0x10 [ 201.542614][ T7777] ? ktime_get+0x200/0x310 [ 201.542651][ T7777] ? lockdep_hardirqs_on+0x7c/0x110 [ 201.542691][ T7777] sctp_assoc_bh_rcv+0x392/0x6f0 [ 201.542736][ T7777] sctp_inq_push+0x1d8/0x270 [ 201.542793][ T7777] sctp_backlog_rcv+0x169/0x590 [ 201.542846][ T7777] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 201.542897][ T7777] __release_sock+0x35f/0x400 [ 201.542928][ T7777] ? lockdep_hardirqs_on+0x7c/0x110 [ 201.542970][ T7777] release_sock+0x5a/0x220 [ 201.543001][ T7777] sctp_wait_for_connect+0x1c4/0x5c0 [ 201.543043][ T7777] ? __pfx_sctp_wait_for_connect+0x10/0x10 [ 201.543081][ T7777] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 201.543127][ T7777] ? __pfx_autoremove_wake_function+0x10/0x10 [ 201.543178][ T7777] ? sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 201.543235][ T7777] __sctp_connect+0x9c7/0xc60 [ 201.543288][ T7777] ? do_raw_spin_lock+0x12c/0x2b0 [ 201.543322][ T7777] ? __pfx___sctp_connect+0x10/0x10 [ 201.543368][ T7777] ? __pfx_sctp_inet_connect+0x10/0x10 [ 201.543413][ T7777] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 201.543467][ T7777] ? __pfx_sctp_inet_connect+0x10/0x10 [ 201.543510][ T7777] sctp_inet_connect+0x15f/0x200 [ 201.543556][ T7777] __sys_connect_file+0x13e/0x1a0 [ 201.543605][ T7777] __sys_connect+0x14d/0x170 [ 201.543651][ T7777] ? __pfx___sys_connect+0x10/0x10 [ 201.543716][ T7777] ? rcu_is_watching+0x12/0xc0 [ 201.543755][ T7777] __x64_sys_connect+0x72/0xb0 [ 201.543797][ T7777] ? lockdep_hardirqs_on+0x7c/0x110 [ 201.543832][ T7777] do_syscall_64+0xcd/0x260 [ 201.543871][ T7777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.543901][ T7777] RIP: 0033:0x7fefe778d169 [ 201.543925][ T7777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.543953][ T7777] RSP: 002b:00007fefe8672038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 201.543980][ T7777] RAX: ffffffffffffffda RBX: 00007fefe79a5fa0 RCX: 00007fefe778d169 [ 201.543998][ T7777] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 201.544015][ T7777] RBP: 00007fefe780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 201.544031][ T7777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 201.544048][ T7777] R13: 0000000000000000 R14: 00007fefe79a5fa0 R15: 00007ffc0c764048 [ 201.544078][ T7777] [ 202.803822][ T7799] netlink: 12 bytes leftover after parsing attributes in process `syz.3.496'. [ 203.647781][ T7817] random: crng reseeded on system resumption [ 205.217220][ T7838] FAULT_INJECTION: forcing a failure. [ 205.217220][ T7838] name failslab, interval 1, probability 0, space 0, times 0 [ 205.254872][ T7838] CPU: 0 UID: 0 PID: 7838 Comm: syz.0.505 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 205.254916][ T7838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 205.254935][ T7838] Call Trace: [ 205.254943][ T7838] [ 205.254954][ T7838] dump_stack_lvl+0x16c/0x1f0 [ 205.254999][ T7838] should_fail_ex+0x512/0x640 [ 205.255063][ T7838] should_failslab+0xc2/0x120 [ 205.255094][ T7838] __kmalloc_cache_noprof+0x6a/0x3e0 [ 205.255138][ T7838] ? sctp_transport_new+0xa8/0x7b0 [ 205.255183][ T7838] sctp_transport_new+0xa8/0x7b0 [ 205.255228][ T7838] sctp_assoc_add_peer+0x2e3/0x1550 [ 205.255273][ T7838] sctp_process_init+0x27f6/0x2e20 [ 205.255315][ T7838] ? __pfx_sctp_process_init+0x10/0x10 [ 205.255355][ T7838] ? sctp_bind_addr_copy+0xe0/0x530 [ 205.255384][ T7838] ? sctp_bind_addr_copy+0x23a/0x530 [ 205.255419][ T7838] sctp_sf_do_unexpected_init.isra.0+0x967/0x16f0 [ 205.255459][ T7838] ? __pfx_sctp_sf_do_unexpected_init.isra.0+0x10/0x10 [ 205.255493][ T7838] ? __pfx_sctp_sm_lookup_event+0x10/0x10 [ 205.255526][ T7838] ? __pfx_sctp_cname+0x10/0x10 [ 205.255555][ T7838] sctp_do_sm+0x17e/0x5c80 [ 205.255598][ T7838] ? sctp_packet_singleton+0x1a5/0x370 [ 205.255640][ T7838] ? __pfx_sctp_packet_singleton+0x10/0x10 [ 205.255685][ T7838] ? __pfx_sctp_do_sm+0x10/0x10 [ 205.255760][ T7838] ? ktime_get+0x200/0x310 [ 205.255797][ T7838] ? lockdep_hardirqs_on+0x7c/0x110 [ 205.255839][ T7838] sctp_assoc_bh_rcv+0x392/0x6f0 [ 205.255884][ T7838] sctp_inq_push+0x1d8/0x270 [ 205.255924][ T7838] sctp_backlog_rcv+0x169/0x590 [ 205.255973][ T7838] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 205.256025][ T7838] __release_sock+0x35f/0x400 [ 205.256054][ T7838] ? lockdep_hardirqs_on+0x7c/0x110 [ 205.256093][ T7838] release_sock+0x5a/0x220 [ 205.256122][ T7838] sctp_wait_for_connect+0x1c4/0x5c0 [ 205.256161][ T7838] ? __pfx_sctp_wait_for_connect+0x10/0x10 [ 205.256197][ T7838] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 205.256239][ T7838] ? __pfx_autoremove_wake_function+0x10/0x10 [ 205.256287][ T7838] ? sctp_primitive_ASSOCIATE+0x9c/0xd0 [ 205.256334][ T7838] __sctp_connect+0x9c7/0xc60 [ 205.256377][ T7838] ? do_raw_spin_lock+0x12c/0x2b0 [ 205.256408][ T7838] ? __pfx___sctp_connect+0x10/0x10 [ 205.256451][ T7838] ? __pfx_sctp_inet_connect+0x10/0x10 [ 205.256494][ T7838] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 205.256544][ T7838] ? __pfx_sctp_inet_connect+0x10/0x10 [ 205.256584][ T7838] sctp_inet_connect+0x15f/0x200 [ 205.256626][ T7838] __sys_connect_file+0x13e/0x1a0 [ 205.256672][ T7838] __sys_connect+0x14d/0x170 [ 205.256713][ T7838] ? __pfx___sys_connect+0x10/0x10 [ 205.256765][ T7838] ? rcu_is_watching+0x12/0xc0 [ 205.256804][ T7838] __x64_sys_connect+0x72/0xb0 [ 205.256845][ T7838] ? lockdep_hardirqs_on+0x7c/0x110 [ 205.256880][ T7838] do_syscall_64+0xcd/0x260 [ 205.256920][ T7838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.256950][ T7838] RIP: 0033:0x7f5d81d8d169 [ 205.256973][ T7838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.257001][ T7838] RSP: 002b:00007f5d82c02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 205.257035][ T7838] RAX: ffffffffffffffda RBX: 00007f5d81fa5fa0 RCX: 00007f5d81d8d169 [ 205.257054][ T7838] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 205.257071][ T7838] RBP: 00007f5d81e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 205.257088][ T7838] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 205.257104][ T7838] R13: 0000000000000000 R14: 00007f5d81fa5fa0 R15: 00007ffcdb07f978 [ 205.257135][ T7838] [ 205.612724][ C0] vkms_vblank_simulate: vblank timer overrun [ 205.748551][ T7849] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 208.115994][ T7883] random: crng reseeded on system resumption [ 212.475769][ T7946] netlink: 28 bytes leftover after parsing attributes in process `syz.1.525'. [ 212.516813][ T7946] mac80211_hwsim hwsim7 wlan1: entered allmulticast mode [ 214.164068][ T54] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 215.704947][ T7992] FAULT_INJECTION: forcing a failure. [ 215.704947][ T7992] name failslab, interval 1, probability 0, space 0, times 0 [ 215.722963][ T7992] CPU: 1 UID: 0 PID: 7992 Comm: syz.1.541 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 215.723005][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.723023][ T7992] Call Trace: [ 215.723032][ T7992] [ 215.723043][ T7992] dump_stack_lvl+0x16c/0x1f0 [ 215.723087][ T7992] should_fail_ex+0x512/0x640 [ 215.723136][ T7992] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 215.723189][ T7992] should_failslab+0xc2/0x120 [ 215.723221][ T7992] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 215.723272][ T7992] ? __kernfs_new_node+0xd2/0x8a0 [ 215.723314][ T7992] __kernfs_new_node+0xd2/0x8a0 [ 215.723347][ T7992] ? __pfx___kernfs_new_node+0x10/0x10 [ 215.723378][ T7992] ? __pfx___might_resched+0x10/0x10 [ 215.723418][ T7992] ? kernfs_link_sibling+0x3fc/0x550 [ 215.723450][ T7992] ? down_write+0x14d/0x200 [ 215.723491][ T7992] ? find_held_lock+0x2b/0x80 [ 215.723528][ T7992] ? kernfs_add_one+0x3d8/0x530 [ 215.723567][ T7992] ? up_write+0x1b2/0x520 [ 215.723599][ T7992] kernfs_new_node+0x186/0x240 [ 215.723638][ T7992] __kernfs_create_file+0x53/0x350 [ 215.723683][ T7992] sysfs_add_file_mode_ns+0x207/0x3c0 [ 215.723737][ T7992] internal_create_group+0x578/0xf30 [ 215.723773][ T7992] ? __pfx_internal_create_group+0x10/0x10 [ 215.723809][ T7992] ? kernfs_create_link+0x1bd/0x240 [ 215.723858][ T7992] internal_create_groups+0x9d/0x150 [ 215.723893][ T7992] device_add+0x6d1/0x1a70 [ 215.723944][ T7992] ? __pfx_device_add+0x10/0x10 [ 215.723992][ T7992] ? lockdep_init_map_type+0x5c/0x280 [ 215.724046][ T7992] ? __init_waitqueue_head+0xca/0x150 [ 215.724090][ T7992] netdev_register_kobject+0x182/0x3a0 [ 215.724145][ T7992] register_netdevice+0x13dc/0x2040 [ 215.724204][ T7992] ? __pfx_register_netdevice+0x10/0x10 [ 215.724243][ T7992] ? alloc_netdev_mqs+0xe7e/0x1570 [ 215.724302][ T7992] ? __pfx_loopback_net_init+0x10/0x10 [ 215.724348][ T7992] register_netdev+0x34/0x50 [ 215.724382][ T7992] loopback_net_init+0x7a/0x170 [ 215.724425][ T7992] ? __pfx_loopback_net_init+0x10/0x10 [ 215.724485][ T7992] ops_init+0x1df/0x5f0 [ 215.724521][ T7992] setup_net+0x21e/0x850 [ 215.724558][ T7992] ? __pfx_setup_net+0x10/0x10 [ 215.724590][ T7992] ? lockdep_init_map_type+0x5c/0x280 [ 215.724641][ T7992] ? __pfx_down_read_killable+0x10/0x10 [ 215.724693][ T7992] ? debug_mutex_init+0x37/0x70 [ 215.724734][ T7992] copy_net_ns+0x2a6/0x5f0 [ 215.724776][ T7992] create_new_namespaces+0x3ea/0xad0 [ 215.724826][ T7992] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 215.724873][ T7992] ksys_unshare+0x45b/0xa40 [ 215.724921][ T7992] ? __pfx_ksys_unshare+0x10/0x10 [ 215.724967][ T7992] ? xfd_validate_state+0x5d/0x180 [ 215.725003][ T7992] ? rcu_is_watching+0x12/0xc0 [ 215.725046][ T7992] __x64_sys_unshare+0x31/0x40 [ 215.725090][ T7992] do_syscall_64+0xcd/0x260 [ 215.725132][ T7992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.725162][ T7992] RIP: 0033:0x7f9ff9f8d169 [ 215.725186][ T7992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.725215][ T7992] RSP: 002b:00007f9ffae56038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 215.725242][ T7992] RAX: ffffffffffffffda RBX: 00007f9ffa1a5fa0 RCX: 00007f9ff9f8d169 [ 215.725261][ T7992] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 215.725278][ T7992] RBP: 00007f9ffa00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 215.725305][ T7992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 215.725323][ T7992] R13: 0000000000000000 R14: 00007f9ffa1a5fa0 R15: 00007ffd8e425a18 [ 215.725355][ T7992] [ 216.175532][ T8001] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input8 [ 216.451161][ T30] audit: type=1800 audit(4294979144.248:5): pid=8001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.542" name="dbroot" dev="configfs" ino=16075 res=0 errno=0 [ 216.471114][ C0] vkms_vblank_simulate: vblank timer overrun [ 217.721113][ T8015] netlink: 12 bytes leftover after parsing attributes in process `syz.3.557'. [ 218.971564][ T8014] netlink: 28 bytes leftover after parsing attributes in process `syz.2.545'. [ 218.980582][ T8014] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 220.021024][ T54] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 220.536390][ T8058] vivid-003: ================= START STATUS ================= [ 220.605887][ T8058] vivid-003: Radio HW Seek Mode: Bounded [ 220.611758][ T8058] vivid-003: Radio Programmable HW Seek: false [ 220.617977][ T8058] vivid-003: RDS Rx I/O Mode: Block I/O [ 220.623772][ T8058] vivid-003: Generate RBDS Instead of RDS: false [ 220.630180][ T8058] vivid-003: RDS Reception: true [ 220.635334][ T8058] vivid-003: RDS Program Type: 0 inactive [ 220.641194][ T8058] vivid-003: RDS PS Name: inactive [ 220.646564][ T8058] vivid-003: RDS Radio Text: inactive [ 220.652197][ T8058] vivid-003: RDS Traffic Announcement: false inactive [ 220.660085][ T8058] vivid-003: RDS Traffic Program: false inactive [ 220.666704][ T8058] vivid-003: RDS Music: false inactive [ 220.673623][ T8058] vivid-003: ================== END STATUS ================== [ 222.184694][ T8077] netlink: 12 bytes leftover after parsing attributes in process `syz.2.561'. [ 223.187324][ T8053] vivid-003: ================= START STATUS ================= [ 223.205430][ T8053] vivid-003: Radio HW Seek Mode: Bounded [ 223.236499][ T8053] vivid-003: Radio Programmable HW Seek: false [ 223.274342][ T8053] vivid-003: RDS Rx I/O Mode: Block I/O [ 223.279997][ T8053] vivid-003: Generate RBDS Instead of RDS: false [ 223.317166][ T8053] vivid-003: RDS Reception: true [ 223.328092][ T8053] vivid-003: RDS Program Type: 0 inactive [ 223.334705][ T8053] vivid-003: RDS PS Name: inactive [ 223.340171][ T8053] vivid-003: RDS Radio Text: inactive [ 223.347572][ T8053] vivid-003: RDS Traffic Announcement: false inactive [ 223.354852][ T8053] vivid-003: RDS Traffic Program: false inactive [ 223.361824][ T8053] vivid-003: RDS Music: false inactive [ 223.367486][ T8053] vivid-003: ================== END STATUS ================== [ 224.360951][ T8066] vivid-003: ================= START STATUS ================= [ 224.368683][ T8066] vivid-003: Radio HW Seek Mode: Bounded [ 224.400910][ T8066] vivid-003: Radio Programmable HW Seek: false [ 224.407198][ T8066] vivid-003: RDS Rx I/O Mode: Block I/O [ 224.490307][ T8066] vivid-003: Generate RBDS Instead of RDS: false [ 224.537551][ T8066] vivid-003: RDS Reception: true [ 224.555817][ T8066] vivid-003: RDS Program Type: 0 inactive [ 224.591218][ T8066] vivid-003: RDS PS Name: inactive [ 224.596525][ T8066] vivid-003: RDS Radio Text: inactive [ 224.641432][ T8066] vivid-003: RDS Traffic Announcement: false inactive [ 224.648319][ T8066] vivid-003: RDS Traffic Program: false inactive [ 224.678032][ T8066] vivid-003: RDS Music: false inactive [ 224.691399][ T8066] vivid-003: ================== END STATUS ================== [ 224.983631][ T8112] openvswitch: netlink: IP tunnel dst address not specified [ 224.995062][ T8112] openvswitch: netlink: IP tunnel dst address not specified [ 226.121978][ T8129] vivid-003: ================= START STATUS ================= [ 226.131011][ T8129] vivid-003: Radio HW Seek Mode: Bounded [ 226.150052][ T8129] vivid-003: Radio Programmable HW Seek: false [ 226.171454][ T8129] vivid-003: RDS Rx I/O Mode: Block I/O [ 226.190075][ T8129] vivid-003: Generate RBDS Instead of RDS: false [ 226.200931][ T8129] vivid-003: RDS Reception: true [ 226.214413][ T8129] vivid-003: RDS Program Type: 0 inactive [ 226.234834][ T8134] netlink: 12 bytes leftover after parsing attributes in process `syz.0.571'. [ 226.244203][ T8129] vivid-003: RDS PS Name: inactive [ 226.249668][ T8129] vivid-003: RDS Radio Text: inactive [ 226.257564][ T8129] vivid-003: RDS Traffic Announcement: false inactive [ 226.266905][ T8129] vivid-003: RDS Traffic Program: false inactive [ 226.279490][ T8129] vivid-003: RDS Music: false inactive [ 226.355860][ T8129] vivid-003: ================== END STATUS ================== [ 228.076523][ T8170] mkiss: ax0: crc mode is auto. [ 228.339846][ T8139] vivid-003: ================= START STATUS ================= [ 228.373389][ T8139] vivid-003: Radio HW Seek Mode: Bounded [ 228.379211][ T8139] vivid-003: Radio Programmable HW Seek: false [ 228.401605][ T8139] vivid-003: RDS Rx I/O Mode: Block I/O [ 228.418677][ T8139] vivid-003: Generate RBDS Instead of RDS: false [ 228.428859][ T8139] vivid-003: RDS Reception: true [ 228.449146][ T8139] vivid-003: RDS Program Type: 0 inactive [ 228.476543][ T8139] vivid-003: RDS PS Name: inactive [ 228.500974][ T8139] vivid-003: RDS Radio Text: inactive [ 228.506550][ T8139] vivid-003: RDS Traffic Announcement: false inactive [ 228.541181][ T8139] vivid-003: RDS Traffic Program: false inactive [ 228.560161][ T8139] vivid-003: RDS Music: false inactive [ 228.611521][ T8139] vivid-003: ================== END STATUS ================== [ 228.921388][ T8157] vivid-003: ================= START STATUS ================= [ 228.939404][ T8157] vivid-003: Radio HW Seek Mode: Bounded [ 228.949426][ T8180] netlink: 338 bytes leftover after parsing attributes in process `syz.1.579'. [ 228.969851][ T8157] vivid-003: Radio Programmable HW Seek: false [ 228.976582][ T8182] netlink: 338 bytes leftover after parsing attributes in process `syz.1.579'. [ 228.981349][ T8157] vivid-003: RDS Rx I/O Mode: Block I/O [ 228.997036][ T8180] netlink: 4 bytes leftover after parsing attributes in process `syz.1.579'. [ 229.020980][ T8157] vivid-003: Generate RBDS Instead of RDS: false [ 229.027422][ T8157] vivid-003: RDS Reception: true [ 229.049207][ T8157] vivid-003: RDS Program Type: 0 inactive [ 229.071882][ T8157] vivid-003: RDS PS Name: inactive [ 229.077196][ T8157] vivid-003: RDS Radio Text: inactive [ 229.136423][ T8157] vivid-003: RDS Traffic Announcement: false inactive [ 229.195362][ T8157] vivid-003: RDS Traffic Program: false inactive [ 229.216401][ T8157] vivid-003: RDS Music: false inactive [ 229.242171][ T8157] vivid-003: ================== END STATUS ================== syzkaller syzkaller login: [ 233.059685][ T8239] netlink: 338 bytes leftover after parsing attributes in process `syz.0.593'. [ 233.080404][ T8239] netlink: 338 bytes leftover after parsing attributes in process `syz.0.593'. [ 233.100211][ T8239] netlink: 4 bytes leftover after parsing attributes in process `syz.0.593'. [ 233.971349][ T8251] vivid-003: ================= START STATUS ================= [ 234.030592][ T8251] vivid-003: Radio HW Seek Mode: Bounded [ 234.059351][ T8251] vivid-003: Radio Programmable HW Seek: false [ 234.068071][ T8251] vivid-003: RDS Rx I/O Mode: Block I/O [ 234.076390][ T8251] vivid-003: Generate RBDS Instead of RDS: false [ 234.119659][ T8251] vivid-003: RDS Reception: true [ 234.129772][ T8251] vivid-003: RDS Program Type: 0 inactive [ 234.146156][ T8251] vivid-003: RDS PS Name: inactive [ 234.154973][ T8251] vivid-003: RDS Radio Text: inactive [ 234.165025][ T8251] vivid-003: RDS Traffic Announcement: false inactive [ 234.213851][ T8251] vivid-003: RDS Traffic Program: false inactive [ 234.229392][ T8251] vivid-003: RDS Music: false inactive [ 234.250151][ T8251] vivid-003: ================== END STATUS ================== [ 238.915038][ T8310] vivid-003: ================= START STATUS ================= [ 238.977905][ T8310] vivid-003: Radio HW Seek Mode: Bounded [ 239.021114][ T8310] vivid-003: Radio Programmable HW Seek: false [ 239.027369][ T8310] vivid-003: RDS Rx I/O Mode: Block I/O [ 239.045735][ T8310] vivid-003: Generate RBDS Instead of RDS: false [ 239.071225][ T8310] vivid-003: RDS Reception: true [ 239.081735][ T8310] vivid-003: RDS Program Type: 0 inactive [ 239.087588][ T8310] vivid-003: RDS PS Name: inactive [ 239.118252][ T8310] vivid-003: RDS Radio Text: inactive [ 239.127513][ T8310] vivid-003: RDS Traffic Announcement: false inactive [ 239.141273][ T8310] vivid-003: RDS Traffic Program: false inactive [ 239.167184][ T8310] vivid-003: RDS Music: false inactive [ 239.208435][ T8310] vivid-003: ================== END STATUS ================== [ 239.623747][ T8308] vivid-003: ================= START STATUS ================= [ 239.647864][ T8308] vivid-003: Radio HW Seek Mode: Bounded [ 239.669935][ T8308] vivid-003: Radio Programmable HW Seek: false [ 239.688133][ T8308] vivid-003: RDS Rx I/O Mode: Block I/O [ 239.694050][ T8308] vivid-003: Generate RBDS Instead of RDS: false [ 239.704209][ T8308] vivid-003: RDS Reception: true [ 239.709215][ T8308] vivid-003: RDS Program Type: 0 inactive [ 239.781004][ T8308] vivid-003: RDS PS Name: inactive [ 239.796761][ T8308] vivid-003: RDS Radio Text: inactive [ 239.820197][ T8308] vivid-003: RDS Traffic Announcement: false inactive [ 239.841755][ T8308] vivid-003: RDS Traffic Program: false inactive [ 239.870980][ T8308] vivid-003: RDS Music: false inactive [ 239.876766][ T8308] vivid-003: ================== END STATUS ================== [ 239.895669][ T8312] vivid-003: ================= START STATUS ================= [ 239.904252][ T8312] vivid-003: Radio HW Seek Mode: Bounded [ 239.920145][ T8312] vivid-003: Radio Programmable HW Seek: false [ 239.931289][ T8312] vivid-003: RDS Rx I/O Mode: Block I/O [ 239.936957][ T8312] vivid-003: Generate RBDS Instead of RDS: false [ 239.952137][ T8312] vivid-003: RDS Reception: true [ 239.957301][ T8312] vivid-003: RDS Program Type: 0 inactive [ 239.970341][ T8312] vivid-003: RDS PS Name: inactive [ 239.975839][ T8312] vivid-003: RDS Radio Text: inactive [ 239.987888][ T8312] vivid-003: RDS Traffic Announcement: false inactive [ 240.005046][ T8312] vivid-003: RDS Traffic Program: false inactive [ 240.021922][ T8312] vivid-003: RDS Music: false inactive [ 240.039030][ T8312] vivid-003: ================== END STATUS ================== [ 241.586173][ T8379] FAULT_INJECTION: forcing a failure. [ 241.586173][ T8379] name failslab, interval 1, probability 0, space 0, times 0 [ 241.672536][ T8379] CPU: 1 UID: 0 PID: 8379 Comm: syz.0.622 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 241.672584][ T8379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 241.672617][ T8379] Call Trace: [ 241.672627][ T8379] [ 241.672639][ T8379] dump_stack_lvl+0x16c/0x1f0 [ 241.672690][ T8379] should_fail_ex+0x512/0x640 [ 241.672749][ T8379] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 241.672809][ T8379] should_failslab+0xc2/0x120 [ 241.672844][ T8379] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 241.672900][ T8379] ? bdev_alloc_inode+0x26/0x90 [ 241.672950][ T8379] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 241.672990][ T8379] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 241.673039][ T8379] bdev_alloc_inode+0x26/0x90 [ 241.673085][ T8379] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 241.673133][ T8379] alloc_inode+0x61/0x240 [ 241.673173][ T8379] new_inode+0x22/0x1c0 [ 241.673215][ T8379] bdev_alloc+0x2b/0x420 [ 241.673247][ T8379] __alloc_disk_node+0x116/0x610 [ 241.673281][ T8379] ? blk_alloc_queue+0x1a3/0x760 [ 241.673335][ T8379] __blk_alloc_disk+0xd7/0x170 [ 241.673371][ T8379] ? __pfx___blk_alloc_disk+0x10/0x10 [ 241.673425][ T8379] ? lockdep_init_map_type+0x5c/0x280 [ 241.673480][ T8379] ? __raw_spin_lock_init+0x3a/0x110 [ 241.673517][ T8379] ? __pfx_hot_add_show+0x10/0x10 [ 241.673566][ T8379] zram_add+0x16e/0x6c0 [ 241.673612][ T8379] ? __pfx_zram_add+0x10/0x10 [ 241.673658][ T8379] ? __pfx___might_resched+0x10/0x10 [ 241.673736][ T8379] ? __pfx_hot_add_show+0x10/0x10 [ 241.673786][ T8379] hot_add_show+0x21/0x80 [ 241.673834][ T8379] class_attr_show+0x6f/0xa0 [ 241.673880][ T8379] ? __pfx_class_attr_show+0x10/0x10 [ 241.673924][ T8379] sysfs_kf_seq_show+0x23e/0x410 [ 241.673978][ T8379] seq_read_iter+0x506/0x12b0 [ 241.674040][ T8379] kernfs_fop_read_iter+0x422/0x5a0 [ 241.674082][ T8379] ? rw_verify_area+0xcf/0x680 [ 241.674130][ T8379] vfs_read+0x8c8/0xc70 [ 241.674182][ T8379] ? __pfx___mutex_lock+0x10/0x10 [ 241.674225][ T8379] ? __pfx_vfs_read+0x10/0x10 [ 241.674294][ T8379] ksys_read+0x12a/0x240 [ 241.674343][ T8379] ? __pfx_ksys_read+0x10/0x10 [ 241.674390][ T8379] ? rcu_is_watching+0x12/0xc0 [ 241.674455][ T8379] do_syscall_64+0xcd/0x260 [ 241.674509][ T8379] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.674554][ T8379] RIP: 0033:0x7f5d81d8d169 [ 241.674579][ T8379] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.674611][ T8379] RSP: 002b:00007f5d82c02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 241.674643][ T8379] RAX: ffffffffffffffda RBX: 00007f5d81fa5fa0 RCX: 00007f5d81d8d169 [ 241.674665][ T8379] RDX: 0000000000001000 RSI: 0000200000000ec0 RDI: 0000000000000007 [ 241.674685][ T8379] RBP: 00007f5d81e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 241.674704][ T8379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.674733][ T8379] R13: 0000000000000000 R14: 00007f5d81fa5fa0 R15: 00007ffcdb07f978 [ 241.674770][ T8379] [ 242.303007][ T8379] zram: Error allocating disk structure for device 1 [ 242.864294][ T8397] netlink: 28 bytes leftover after parsing attributes in process `syz.1.628'. [ 243.141331][ T8397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 243.173649][ T8397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 243.192335][ T8397] bond0 (unregistering): Released all slaves [ 243.659813][ T8385] vivid-003: ================= START STATUS ================= [ 243.701604][ T8385] vivid-003: Radio HW Seek Mode: Bounded [ 243.719841][ T8385] vivid-003: Radio Programmable HW Seek: false [ 243.735169][ T8385] vivid-003: RDS Rx I/O Mode: Block I/O [ 243.751067][ T8385] vivid-003: Generate RBDS Instead of RDS: false [ 243.770231][ T8385] vivid-003: RDS Reception: true [ 243.830158][ T8385] vivid-003: RDS Program Type: 0 inactive [ 243.878242][ T8385] vivid-003: RDS PS Name: inactive [ 243.927087][ T8385] vivid-003: RDS Radio Text: inactive [ 243.969523][ T8385] vivid-003: RDS Traffic Announcement: false inactive [ 243.995487][ T8385] vivid-003: RDS Traffic Program: false inactive [ 243.999448][ T8421] FAULT_INJECTION: forcing a failure. [ 243.999448][ T8421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.018506][ T8385] vivid-003: RDS Music: false inactive [ 244.036986][ T8385] vivid-003: ================== END STATUS ================== [ 244.049324][ T8421] CPU: 1 UID: 0 PID: 8421 Comm: syz.0.635 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 244.049372][ T8421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 244.049391][ T8421] Call Trace: [ 244.049400][ T8421] [ 244.049411][ T8421] dump_stack_lvl+0x16c/0x1f0 [ 244.049454][ T8421] should_fail_ex+0x512/0x640 [ 244.049508][ T8421] _copy_from_user+0x2e/0xd0 [ 244.049539][ T8421] __sys_bpf+0x226/0x4c80 [ 244.049580][ T8421] ? __pfx___sys_bpf+0x10/0x10 [ 244.049608][ T8421] ? vfs_write+0x316/0x1180 [ 244.049655][ T8421] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 244.049709][ T8421] ? __pfx_vfs_write+0x10/0x10 [ 244.049757][ T8421] ? do_sys_openat2+0x157/0x1d0 [ 244.049809][ T8421] ? ksys_write+0x1b9/0x240 [ 244.049856][ T8421] ? __pfx_ksys_write+0x10/0x10 [ 244.049904][ T8421] ? rcu_is_watching+0x12/0xc0 [ 244.049944][ T8421] __x64_sys_bpf+0x78/0xc0 [ 244.049975][ T8421] ? lockdep_hardirqs_on+0x7c/0x110 [ 244.050013][ T8421] do_syscall_64+0xcd/0x260 [ 244.050056][ T8421] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.050087][ T8421] RIP: 0033:0x7f5d81d8d169 [ 244.050111][ T8421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.050141][ T8421] RSP: 002b:00007f5d82c02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 244.050169][ T8421] RAX: ffffffffffffffda RBX: 00007f5d81fa5fa0 RCX: 00007f5d81d8d169 [ 244.050189][ T8421] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000002 [ 244.050207][ T8421] RBP: 00007f5d82c02090 R08: 0000000000000000 R09: 0000000000000000 [ 244.050224][ T8421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.050241][ T8421] R13: 0000000000000000 R14: 00007f5d81fa5fa0 R15: 00007ffcdb07f978 [ 244.050274][ T8421] [ 245.286527][ T8451] FAULT_INJECTION: forcing a failure. [ 245.286527][ T8451] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 245.330384][ T8451] CPU: 0 UID: 0 PID: 8451 Comm: syz.3.644 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 245.330441][ T8451] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.330463][ T8451] Call Trace: [ 245.330473][ T8451] [ 245.330486][ T8451] dump_stack_lvl+0x16c/0x1f0 [ 245.330535][ T8451] should_fail_ex+0x512/0x640 [ 245.330590][ T8451] should_fail_alloc_page+0xe7/0x130 [ 245.330628][ T8451] prepare_alloc_pages.constprop.0+0x172/0x570 [ 245.330675][ T8451] ? arch_stack_walk+0xa6/0x100 [ 245.330720][ T8451] __alloc_frozen_pages_noprof+0x18f/0x24d0 [ 245.330756][ T8451] ? stack_trace_save+0x8e/0xc0 [ 245.330799][ T8451] ? __pfx_stack_trace_save+0x10/0x10 [ 245.330839][ T8451] ? stack_depot_save_flags+0x29/0x9c0 [ 245.330891][ T8451] ? __lock_acquire+0xaa4/0x1ba0 [ 245.330941][ T8451] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 245.330978][ T8451] ? kasan_save_stack+0x42/0x60 [ 245.331028][ T8451] ? kasan_save_stack+0x33/0x60 [ 245.331076][ T8451] ? kasan_save_track+0x14/0x30 [ 245.331126][ T8451] ? __kasan_kmalloc+0xaa/0xb0 [ 245.331173][ T8451] ? mon_bin_open+0x1a8/0x4a0 [ 245.331206][ T8451] ? chrdev_open+0x231/0x6a0 [ 245.331240][ T8451] ? __x64_sys_openat+0x174/0x210 [ 245.331279][ T8451] ? do_syscall_64+0xcd/0x260 [ 245.331320][ T8451] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.331360][ T8451] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 245.331415][ T8451] ? policy_nodemask+0xea/0x4e0 [ 245.331462][ T8451] alloc_pages_mpol+0x1fb/0x540 [ 245.331497][ T8451] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 245.331541][ T8451] alloc_pages_noprof+0x131/0x390 [ 245.331578][ T8451] get_zeroed_page_noprof+0x14/0x50 [ 245.331619][ T8451] mon_alloc_buff+0xbc/0x180 [ 245.331652][ T8451] ? kasan_save_track+0x14/0x30 [ 245.331705][ T8451] mon_bin_open+0x207/0x4a0 [ 245.331739][ T8451] ? __pfx_mon_bin_open+0x10/0x10 [ 245.331774][ T8451] chrdev_open+0x231/0x6a0 [ 245.331807][ T8451] ? __pfx_chrdev_open+0x10/0x10 [ 245.331841][ T8451] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 245.331898][ T8451] do_dentry_open+0x741/0x1c10 [ 245.331948][ T8451] ? __pfx_chrdev_open+0x10/0x10 [ 245.331981][ T8451] ? inode_permission+0xdd/0x5f0 [ 245.332024][ T8451] vfs_open+0x82/0x3f0 [ 245.332059][ T8451] ? may_open+0x1f2/0x400 [ 245.332103][ T8451] path_openat+0x1e5e/0x2d40 [ 245.332142][ T8451] ? __pfx_path_openat+0x10/0x10 [ 245.332179][ T8451] do_filp_open+0x20b/0x470 [ 245.332210][ T8451] ? __pfx_do_filp_open+0x10/0x10 [ 245.332239][ T8451] ? find_held_lock+0x2b/0x80 [ 245.332296][ T8451] ? alloc_fd+0x420/0x760 [ 245.332354][ T8451] do_sys_openat2+0x11b/0x1d0 [ 245.332392][ T8451] ? __pfx_do_sys_openat2+0x10/0x10 [ 245.332447][ T8451] __x64_sys_openat+0x174/0x210 [ 245.332488][ T8451] ? __pfx___x64_sys_openat+0x10/0x10 [ 245.332529][ T8451] ? rcu_is_watching+0x12/0xc0 [ 245.332576][ T8451] do_syscall_64+0xcd/0x260 [ 245.332620][ T8451] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.332653][ T8451] RIP: 0033:0x7fefe778d169 [ 245.332678][ T8451] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.332712][ T8451] RSP: 002b:00007fefe8672038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 245.332743][ T8451] RAX: ffffffffffffffda RBX: 00007fefe79a5fa0 RCX: 00007fefe778d169 [ 245.332764][ T8451] RDX: 0000000000080000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 245.332785][ T8451] RBP: 00007fefe780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 245.332804][ T8451] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 245.332822][ T8451] R13: 0000000000000000 R14: 00007fefe79a5fa0 R15: 00007ffc0c764048 [ 245.332856][ T8451] [ 245.691097][ C0] vkms_vblank_simulate: vblank timer overrun [ 245.816961][ T8458] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(2) [ 247.457175][ T8468] vivid-003: ================= START STATUS ================= [ 247.577022][ T8468] vivid-003: Radio HW Seek Mode: Bounded [ 247.610490][ T8468] vivid-003: Radio Programmable HW Seek: false [ 247.663492][ T8468] vivid-003: RDS Rx I/O Mode: Block I/O [ 247.731477][ T8468] vivid-003: Generate RBDS Instead of RDS: false [ 247.737992][ T8468] vivid-003: RDS Reception: true [ 247.743147][ T8468] vivid-003: RDS Program Type: 0 inactive [ 247.748985][ T8468] vivid-003: RDS PS Name: inactive [ 247.755212][ T8468] vivid-003: RDS Radio Text: inactive [ 247.765064][ T8468] vivid-003: RDS Traffic Announcement: false inactive [ 247.771999][ T8468] vivid-003: RDS Traffic Program: false inactive [ 247.778411][ T8468] vivid-003: RDS Music: false inactive [ 247.784188][ T8468] vivid-003: ================== END STATUS ================== [ 250.224297][ T8544] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 251.204023][ T8569] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input10 [ 251.255804][ T8570] FAULT_INJECTION: forcing a failure. [ 251.255804][ T8570] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 251.350718][ T8570] CPU: 1 UID: 0 PID: 8570 Comm: syz.0.674 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 251.350768][ T8570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 251.350790][ T8570] Call Trace: [ 251.350799][ T8570] [ 251.350810][ T8570] dump_stack_lvl+0x16c/0x1f0 [ 251.350855][ T8570] should_fail_ex+0x512/0x640 [ 251.350908][ T8570] _copy_from_user+0x2e/0xd0 [ 251.350939][ T8570] input_event_from_user+0x133/0x3b0 [ 251.350984][ T8570] ? __pfx_input_event_from_user+0x10/0x10 [ 251.351040][ T8570] ? __pfx___might_resched+0x10/0x10 [ 251.351081][ T8570] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 251.351115][ T8570] ? input_event+0x98/0xb0 [ 251.351156][ T8570] uinput_write+0xbb4/0x12b0 [ 251.351210][ T8570] ? __pfx_uinput_write+0x10/0x10 [ 251.351261][ T8570] ? bpf_lsm_file_permission+0x9/0x10 [ 251.351292][ T8570] ? security_file_permission+0x71/0x210 [ 251.351328][ T8570] ? rw_verify_area+0xcf/0x680 [ 251.351373][ T8570] vfs_write+0x25c/0x1180 [ 251.351415][ T8570] ? __pfx_uinput_write+0x10/0x10 [ 251.351469][ T8570] ? __pfx_vfs_write+0x10/0x10 [ 251.351512][ T8570] ? find_held_lock+0x2b/0x80 [ 251.351549][ T8570] ? __fget_files+0x204/0x3c0 [ 251.351580][ T8570] ? __fget_files+0x20e/0x3c0 [ 251.351605][ T8570] ? __up_read+0x190/0x750 [ 251.351641][ T8570] ksys_write+0x205/0x240 [ 251.351686][ T8570] ? __pfx_ksys_write+0x10/0x10 [ 251.351740][ T8570] do_syscall_64+0xcd/0x260 [ 251.351791][ T8570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.351823][ T8570] RIP: 0033:0x7f5d81d8d169 [ 251.351846][ T8570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.351876][ T8570] RSP: 002b:00007f5d82bc0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 251.351904][ T8570] RAX: ffffffffffffffda RBX: 00007f5d81fa6160 RCX: 00007f5d81d8d169 [ 251.351924][ T8570] RDX: 000000000000045c RSI: 0000000000000000 RDI: 0000000000000003 [ 251.351941][ T8570] RBP: 00007f5d82bc0090 R08: 0000000000000000 R09: 0000000000000000 [ 251.351958][ T8570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 251.351976][ T8570] R13: 0000000000000001 R14: 00007f5d81fa6160 R15: 00007ffcdb07f978 [ 251.352007][ T8570] [ 253.215889][ T8603] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input11 [ 253.796404][ T8621] netlink: 28 bytes leftover after parsing attributes in process `syz.0.686'. [ 254.181557][ T8619] syz.3.685 (8619): attempted to duplicate a private mapping with mremap. This is not supported. [ 254.395030][ T8642] netlink: 266 bytes leftover after parsing attributes in process `syz.2.688'. [ 254.427622][ T8642] IPv6: NLM_F_CREATE should be specified when creating new route [ 254.656946][ T8648] FAULT_INJECTION: forcing a failure. [ 254.656946][ T8648] name failslab, interval 1, probability 0, space 0, times 0 [ 254.703220][ T8648] CPU: 1 UID: 0 PID: 8648 Comm: syz.2.690 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 254.703266][ T8648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 254.703285][ T8648] Call Trace: [ 254.703294][ T8648] [ 254.703307][ T8648] dump_stack_lvl+0x16c/0x1f0 [ 254.703352][ T8648] should_fail_ex+0x512/0x640 [ 254.703407][ T8648] should_failslab+0xc2/0x120 [ 254.703441][ T8648] __kmalloc_cache_noprof+0x6a/0x3e0 [ 254.703489][ T8648] ? sctp_add_bind_addr+0xae/0x3f0 [ 254.703523][ T8648] sctp_add_bind_addr+0xae/0x3f0 [ 254.703556][ T8648] sctp_copy_local_addr_list+0x39d/0x5a0 [ 254.703598][ T8648] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 254.703641][ T8648] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 254.703687][ T8648] ? sctp_bind_addr_copy+0xe0/0x530 [ 254.703718][ T8648] sctp_bind_addr_copy+0xe0/0x530 [ 254.703756][ T8648] sctp_connect_new_asoc+0x1d7/0x790 [ 254.703812][ T8648] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 254.703860][ T8648] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 254.703908][ T8648] __sctp_connect+0x3f3/0xc60 [ 254.703955][ T8648] ? do_raw_spin_lock+0x12c/0x2b0 [ 254.703991][ T8648] ? __pfx___sctp_connect+0x10/0x10 [ 254.704037][ T8648] ? __pfx_sctp_inet_connect+0x10/0x10 [ 254.704083][ T8648] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 254.704139][ T8648] ? __pfx_sctp_inet_connect+0x10/0x10 [ 254.704182][ T8648] sctp_inet_connect+0x15f/0x200 [ 254.704228][ T8648] __sys_connect_file+0x13e/0x1a0 [ 254.704279][ T8648] __sys_connect+0x14d/0x170 [ 254.704323][ T8648] ? __pfx___sys_connect+0x10/0x10 [ 254.704381][ T8648] ? __pfx_ksys_write+0x10/0x10 [ 254.704428][ T8648] ? rcu_is_watching+0x12/0xc0 [ 254.704470][ T8648] __x64_sys_connect+0x72/0xb0 [ 254.704514][ T8648] ? lockdep_hardirqs_on+0x7c/0x110 [ 254.704553][ T8648] do_syscall_64+0xcd/0x260 [ 254.704608][ T8648] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.704638][ T8648] RIP: 0033:0x7f646f98d169 [ 254.704662][ T8648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.704709][ T8648] RSP: 002b:00007f64707b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 254.704753][ T8648] RAX: ffffffffffffffda RBX: 00007f646fba5fa0 RCX: 00007f646f98d169 [ 254.704780][ T8648] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 254.704799][ T8648] RBP: 00007f64707b1090 R08: 0000000000000000 R09: 0000000000000000 [ 254.704818][ T8648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 254.704834][ T8648] R13: 0000000000000000 R14: 00007f646fba5fa0 R15: 00007ffc30eef6b8 [ 254.704866][ T8648] [ 256.459316][ T8674] ======================================================= [ 256.459316][ T8674] WARNING: The mand mount option has been deprecated and [ 256.459316][ T8674] and is ignored by this kernel. Remove the mand [ 256.459316][ T8674] option from the mount to silence this warning. [ 256.459316][ T8674] ======================================================= [ 256.494273][ C0] vkms_vblank_simulate: vblank timer overrun [ 257.749422][ T8700] usbip-vudc usbip-vudc.0: gadget not bound [ 257.813380][ T8701] usbip-vudc usbip-vudc.0: gadget not bound [ 257.887527][ T8701] nbd: must specify at least one socket [ 257.912435][ T8702] nbd: must specify at least one socket [ 259.320537][ T8739] nbd: nbd7 already in use [ 260.566524][ T8781] FAULT_INJECTION: forcing a failure. [ 260.566524][ T8781] name failslab, interval 1, probability 0, space 0, times 0 [ 260.644807][ T8781] CPU: 1 UID: 0 PID: 8781 Comm: syz.2.719 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 260.644870][ T8781] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 260.644889][ T8781] Call Trace: [ 260.644898][ T8781] [ 260.644910][ T8781] dump_stack_lvl+0x16c/0x1f0 [ 260.644955][ T8781] should_fail_ex+0x512/0x640 [ 260.645003][ T8781] ? __kmalloc_noprof+0xbf/0x510 [ 260.645034][ T8781] ? __tipc_nl_compat_dumpit+0x208/0xbe0 [ 260.645073][ T8781] should_failslab+0xc2/0x120 [ 260.645106][ T8781] __kmalloc_noprof+0xd2/0x510 [ 260.645140][ T8781] ? do_raw_spin_unlock+0x172/0x230 [ 260.645175][ T8781] ? _raw_spin_unlock+0x28/0x50 [ 260.645212][ T8781] __tipc_nl_compat_dumpit+0x208/0xbe0 [ 260.645260][ T8781] ? __pfx___tipc_nl_compat_dumpit+0x10/0x10 [ 260.645326][ T8781] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.645360][ T8781] ? skb_put+0x138/0x1b0 [ 260.645399][ T8781] ? __asan_memset+0x23/0x50 [ 260.645444][ T8781] ? __nlmsg_put+0x152/0x1c0 [ 260.645496][ T8781] tipc_nl_compat_dumpit+0x45f/0x820 [ 260.645542][ T8781] tipc_nl_compat_recv+0xb6e/0xc50 [ 260.645586][ T8781] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 260.645632][ T8781] ? __pfx_tipc_nl_node_dump+0x10/0x10 [ 260.645661][ T8781] ? __pfx_tipc_nl_compat_node_dump+0x10/0x10 [ 260.645701][ T8781] ? __mutex_trylock_common+0xe9/0x250 [ 260.645759][ T8781] ? rcu_is_watching+0x12/0xc0 [ 260.645794][ T8781] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 260.645851][ T8781] genl_family_rcv_msg_doit+0x206/0x2f0 [ 260.645895][ T8781] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 260.645938][ T8781] ? genl_get_cmd+0x194/0x580 [ 260.645983][ T8781] ? __local_bh_enable_ip+0xa4/0x120 [ 260.646022][ T8781] ? __dev_queue_xmit+0x896/0x43e0 [ 260.646067][ T8781] ? __radix_tree_lookup+0x21f/0x2c0 [ 260.646110][ T8781] genl_rcv_msg+0x55c/0x800 [ 260.646173][ T8781] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.646212][ T8781] ? __pfx___dev_queue_xmit+0x10/0x10 [ 260.646257][ T8781] ? __pfx_tipc_nl_compat_recv+0x10/0x10 [ 260.646301][ T8781] ? __lock_acquire+0xaa4/0x1ba0 [ 260.646352][ T8781] netlink_rcv_skb+0x16a/0x440 [ 260.646386][ T8781] ? __pfx_genl_rcv_msg+0x10/0x10 [ 260.646427][ T8781] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 260.646473][ T8781] ? __pfx_down_read+0x10/0x10 [ 260.646517][ T8781] ? netlink_deliver_tap+0x1ae/0xd30 [ 260.646552][ T8781] genl_rcv+0x28/0x40 [ 260.646585][ T8781] netlink_unicast+0x53a/0x7f0 [ 260.646622][ T8781] ? __pfx_netlink_unicast+0x10/0x10 [ 260.646658][ T8781] ? __phys_addr_symbol+0x30/0x80 [ 260.646702][ T8781] ? __check_object_size+0x4c7/0x710 [ 260.646739][ T8781] netlink_sendmsg+0x8da/0xd70 [ 260.646779][ T8781] ? __pfx_netlink_sendmsg+0x10/0x10 [ 260.646825][ T8781] ____sys_sendmsg+0xa8d/0xc60 [ 260.646865][ T8781] ? copy_msghdr_from_user+0x10a/0x160 [ 260.646894][ T8781] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.646948][ T8781] ___sys_sendmsg+0x134/0x1d0 [ 260.646980][ T8781] ? __pfx____sys_sendmsg+0x10/0x10 [ 260.647044][ T8781] __sys_sendmsg+0x16d/0x220 [ 260.647074][ T8781] ? __pfx___sys_sendmsg+0x10/0x10 [ 260.647112][ T8781] ? rcu_is_watching+0x12/0xc0 [ 260.647160][ T8781] do_syscall_64+0xcd/0x260 [ 260.647201][ T8781] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.647231][ T8781] RIP: 0033:0x7f646f98d169 [ 260.647253][ T8781] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.647283][ T8781] RSP: 002b:00007f64707b1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 260.647311][ T8781] RAX: ffffffffffffffda RBX: 00007f646fba5fa0 RCX: 00007f646f98d169 [ 260.647330][ T8781] RDX: 0000000000000010 RSI: 0000200000007500 RDI: 0000000000000004 [ 260.647348][ T8781] RBP: 00007f64707b1090 R08: 0000000000000000 R09: 0000000000000000 [ 260.647365][ T8781] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 260.647382][ T8781] R13: 0000000000000000 R14: 00007f646fba5fa0 R15: 00007ffc30eef6b8 [ 260.647415][ T8781] [ 261.052061][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.058426][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.069524][ T8832] netlink: 342 bytes leftover after parsing attributes in process `syz.2.724'. [ 263.094708][ T8832] netlink: 342 bytes leftover after parsing attributes in process `syz.2.724'. [ 264.220899][ T8858] vivid-003: ================= START STATUS ================= [ 264.228738][ T8858] vivid-003: Radio HW Seek Mode: Bounded [ 264.238495][ T8858] vivid-003: Radio Programmable HW Seek: false [ 264.298491][ T8858] vivid-003: RDS Rx I/O Mode: Block I/O [ 264.354650][ T8858] vivid-003: Generate RBDS Instead of RDS: false [ 264.427380][ T8858] vivid-003: RDS Reception: true [ 264.436556][ T8858] vivid-003: RDS Program Type: 0 inactive [ 264.440047][ T8862] netlink: 28 bytes leftover after parsing attributes in process `syz.0.735'. [ 264.513863][ T8858] vivid-003: RDS PS Name: inactive [ 264.568025][ T8858] vivid-003: RDS Radio Text: inactive [ 264.680924][ T8858] vivid-003: RDS Traffic Announcement: false inactive [ 264.721649][ T8858] vivid-003: RDS Traffic Program: false inactive [ 264.728100][ T8858] vivid-003: RDS Music: false inactive [ 264.768395][ T8858] vivid-003: ================== END STATUS ================== [ 265.512988][ T54] Bluetooth: hci1: unexpected subevent 0x01 length: 4 < 18 [ 266.533082][ T8900] FAULT_INJECTION: forcing a failure. [ 266.533082][ T8900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.570835][ T8900] CPU: 0 UID: 0 PID: 8900 Comm: syz.2.746 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 266.570877][ T8900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 266.570894][ T8900] Call Trace: [ 266.570904][ T8900] [ 266.570915][ T8900] dump_stack_lvl+0x16c/0x1f0 [ 266.570960][ T8900] should_fail_ex+0x512/0x640 [ 266.571010][ T8900] _copy_from_user+0x2e/0xd0 [ 266.571042][ T8900] mem_rw+0x1f1/0x670 [ 266.571087][ T8900] vfs_write+0x25c/0x1180 [ 266.571130][ T8900] ? __pfx_mem_write+0x10/0x10 [ 266.571172][ T8900] ? __pfx___mutex_lock+0x10/0x10 [ 266.571213][ T8900] ? __pfx_vfs_write+0x10/0x10 [ 266.571266][ T8900] ? __fget_files+0x20e/0x3c0 [ 266.571301][ T8900] ksys_write+0x12a/0x240 [ 266.571346][ T8900] ? __pfx_ksys_write+0x10/0x10 [ 266.571390][ T8900] ? rcu_is_watching+0x12/0xc0 [ 266.571433][ T8900] do_syscall_64+0xcd/0x260 [ 266.571473][ T8900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.571504][ T8900] RIP: 0033:0x7f646f98d169 [ 266.571528][ T8900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.571558][ T8900] RSP: 002b:00007f64707b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.571585][ T8900] RAX: ffffffffffffffda RBX: 00007f646fba5fa0 RCX: 00007f646f98d169 [ 266.571606][ T8900] RDX: 0000000000080000 RSI: 0000200000001680 RDI: 0000000000000005 [ 266.571624][ T8900] RBP: 00007f64707b1090 R08: 0000000000000000 R09: 0000000000000000 [ 266.571642][ T8900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 266.571660][ T8900] R13: 0000000000000000 R14: 00007f646fba5fa0 R15: 00007ffc30eef6b8 [ 266.571691][ T8900] [ 266.749834][ C0] vkms_vblank_simulate: vblank timer overrun [ 267.162079][ T8902] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 267.168694][ T8902] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 267.175057][ T8902] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 267.191021][ T8902] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 267.870251][ T8918] vivid-003: ================= START STATUS ================= [ 267.890897][ T8918] vivid-003: Radio HW Seek Mode: Bounded [ 267.896637][ T8918] vivid-003: Radio Programmable HW Seek: false [ 267.934675][ T8918] vivid-003: RDS Rx I/O Mode: Block I/O [ 267.940326][ T8918] vivid-003: Generate RBDS Instead of RDS: false [ 268.021735][ T8918] vivid-003: RDS Reception: true [ 268.037016][ T8918] vivid-003: RDS Program Type: 0 inactive [ 268.087275][ T8918] vivid-003: RDS PS Name: inactive [ 268.195393][ T8918] vivid-003: RDS Radio Text: inactive [ 268.275257][ T8918] vivid-003: RDS Traffic Announcement: false inactive [ 268.282313][ T8918] vivid-003: RDS Traffic Program: false inactive [ 268.289074][ T8918] vivid-003: RDS Music: false inactive [ 268.294778][ T8918] vivid-003: ================== END STATUS ================== [ 268.520863][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 269.223628][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 269.229723][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 269.236509][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 270.395035][ T8978] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807fe00220 pfn:0x7fe00 [ 270.575316][ T8978] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 270.674762][ T8978] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 270.814233][ T8978] raw: ffff88807fe00220 0000000000000000 00000001ffffffff 0000000000000000 [ 270.958869][ T8978] page dumped because: unmovable page [ 271.068337][ T8978] page_owner tracks the page as allocated [ 271.170311][ T8978] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd02(GFP_NOIO|__GFP_HIGHMEM|__GFP_ZERO), pid 6220, tgid 6219 (syz.2.90), ts 95919755561, free_ts 94168218922 [ 271.218620][ T8978] post_alloc_hook+0x181/0x1b0 [ 271.240293][ T8978] get_page_from_freelist+0x10c4/0x34c0 [ 271.297660][ T8978] __alloc_frozen_pages_noprof+0x223/0x24d0 [ 271.383002][ T8978] alloc_pages_mpol+0x1fb/0x540 [ 271.387936][ T8978] alloc_pages_noprof+0x131/0x390 [ 271.439849][ T8978] brd_insert_page+0x59/0x120 [ 271.480141][ T8978] brd_submit_bio+0x365/0xe30 [ 271.490513][ T8978] __submit_bio+0x301/0x690 [ 271.608271][ T8978] submit_bio_noacct_nocheck+0x855/0xd30 [ 271.618215][ T8978] submit_bio_noacct+0x50d/0x1ec0 [ 271.670916][ T8978] __block_write_full_folio+0x735/0xe00 [ 271.676594][ T8978] block_write_full_folio+0x341/0x400 [ 271.985878][ T8978] write_cache_pages+0xaf/0x130 [ 272.094030][ T8978] blkdev_writepages+0xa5/0xf0 [ 272.098895][ T8978] do_writepages+0x1b2/0x820 [ 272.183397][ T8978] filemap_fdatawrite_wbc+0x104/0x160 [ 272.233190][ T8978] page last free pid 6200 tgid 6199 stack trace: [ 272.282122][ T8994] vivid-003: ================= START STATUS ================= [ 272.289844][ T8994] vivid-003: Radio HW Seek Mode: Bounded [ 272.345069][ T8994] vivid-003: Radio Programmable HW Seek: false [ 272.346914][ T8978] free_frozen_pages+0x6d8/0xf40 [ 272.351833][ T8994] vivid-003: RDS Rx I/O Mode: Block I/O [ 272.366781][ T8994] vivid-003: Generate RBDS Instead of RDS: false [ 272.373746][ T8994] vivid-003: RDS Reception: true [ 272.378831][ T8994] vivid-003: RDS Program Type: 0 inactive [ 272.385765][ T8994] vivid-003: RDS PS Name: inactive [ 272.391901][ T8978] vfree+0x176/0x960 [ 272.438257][ T8994] vivid-003: RDS Radio Text: inactive [ 272.444220][ T8994] vivid-003: RDS Traffic Announcement: false inactive [ 272.460916][ T8978] snd_dma_free_pages+0x51/0x70 [ 272.471232][ T8978] snd_pcm_lib_free_pages+0x172/0x390 [ 272.476830][ T8994] vivid-003: RDS Traffic Program: false inactive [ 272.497263][ T8994] vivid-003: RDS Music: false inactive [ 272.514365][ T8978] snd_pcm_release_substream.part.0+0x2a8/0x340 [ 272.534179][ T8994] vivid-003: ================== END STATUS ================== [ 272.562225][ T8978] snd_pcm_release_substream+0x5b/0x70 [ 272.608456][ T8978] snd_pcm_oss_release+0x16f/0x310 [ 272.654925][ T8985] kexec: Could not allocate control_code_buffer [ 272.671057][ T8978] __fput+0x3ff/0xb70 [ 272.738340][ T8978] task_work_run+0x14d/0x240 [ 272.754139][ T8978] do_exit+0xafe/0x2d90 [ 272.758492][ T8978] do_group_exit+0xd3/0x2a0 [ 272.804023][ T8978] get_signal+0x2673/0x26d0 [ 272.808626][ T8978] arch_do_signal_or_restart+0x8f/0x7d0 [ 272.934543][ T8978] syscall_exit_to_user_mode+0x150/0x2a0 [ 272.940283][ T8978] do_syscall_64+0xda/0x260 [ 272.970900][ T8978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 274.941446][ T9028] FAULT_INJECTION: forcing a failure. [ 274.941446][ T9028] name failslab, interval 1, probability 0, space 0, times 0 [ 275.080979][ T9028] CPU: 0 UID: 0 PID: 9028 Comm: syz.2.776 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 275.081024][ T9028] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 275.081043][ T9028] Call Trace: [ 275.081052][ T9028] [ 275.081063][ T9028] dump_stack_lvl+0x16c/0x1f0 [ 275.081119][ T9028] should_fail_ex+0x512/0x640 [ 275.081167][ T9028] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 275.081221][ T9028] should_failslab+0xc2/0x120 [ 275.081254][ T9028] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 275.081307][ T9028] ? __pmd_alloc+0xc3/0x870 [ 275.081355][ T9028] __pmd_alloc+0xc3/0x870 [ 275.081400][ T9028] huge_pte_alloc+0x292/0x3a0 [ 275.081447][ T9028] hugetlb_fault+0x37c/0x2fc0 [ 275.081509][ T9028] ? __pfx_hugetlb_fault+0x10/0x10 [ 275.081564][ T9028] ? find_vma+0xbf/0x140 [ 275.081601][ T9028] ? __pfx_find_vma+0x10/0x10 [ 275.081642][ T9028] handle_mm_fault+0x963/0xae0 [ 275.081695][ T9028] do_user_addr_fault+0x7a9/0x1430 [ 275.081736][ T9028] exc_page_fault+0x5c/0xc0 [ 275.081770][ T9028] asm_exc_page_fault+0x26/0x30 [ 275.081799][ T9028] RIP: 0010:__get_user_4+0x14/0x20 [ 275.081830][ T9028] Code: 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 48 ba 00 f0 ff ff ff 7f 00 00 48 39 d0 48 0f 47 c2 0f 01 cb <8b> 10 31 c0 0f 01 ca c3 cc cc cc cc 90 90 90 90 90 90 90 90 90 90 [ 275.081860][ T9028] RSP: 0018:ffffc9001a2ffdf8 EFLAGS: 00050287 [ 275.081885][ T9028] RAX: 0000000000000572 RBX: ffff88802fafda00 RCX: ffffc9001a2ffd9c [ 275.081905][ T9028] RDX: 00007ffffffff000 RSI: ffffffff8249b402 RDI: ffffffff8bf3d4c0 [ 275.081925][ T9028] RBP: 0000000000000572 R08: e4c0a9e1e38d5b9c R09: 0000000000000001 [ 275.081945][ T9028] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000572 [ 275.081962][ T9028] R13: ffff88807dc65a00 R14: 0000000000000000 R15: 0000000000000000 [ 275.081991][ T9028] ? lookup_ioctx+0x52/0x820 [ 275.082040][ T9028] lookup_ioctx+0x5a/0x820 [ 275.082109][ T9028] __x64_sys_io_submit+0x116/0x350 [ 275.082141][ T9028] ? __pfx___x64_sys_io_submit+0x10/0x10 [ 275.082170][ T9028] ? fput+0x70/0xf0 [ 275.082215][ T9028] do_syscall_64+0xcd/0x260 [ 275.082257][ T9028] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.082288][ T9028] RIP: 0033:0x7f646f98d169 [ 275.082312][ T9028] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.082342][ T9028] RSP: 002b:00007f6470790038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 275.082369][ T9028] RAX: ffffffffffffffda RBX: 00007f646fba6080 RCX: 00007f646f98d169 [ 275.082388][ T9028] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000572 [ 275.082406][ T9028] RBP: 00007f6470790090 R08: 0000000000000000 R09: 0000000000000000 [ 275.082424][ T9028] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 275.082442][ T9028] R13: 0000000000000000 R14: 00007f646fba6080 R15: 00007ffc30eef6b8 [ 275.082475][ T9028] [ 275.374881][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.017684][ T9035] netlink: 4 bytes leftover after parsing attributes in process `syz.2.778'. [ 276.419001][ T54] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 276.663408][ T9046] vivid-003: ================= START STATUS ================= [ 276.766180][ T9046] vivid-003: Radio HW Seek Mode: Bounded [ 276.845229][ T9046] vivid-003: Radio Programmable HW Seek: false [ 276.924327][ T9046] vivid-003: RDS Rx I/O Mode: Block I/O [ 277.136713][ T9046] vivid-003: Generate RBDS Instead of RDS: false [ 277.143393][ T9046] vivid-003: RDS Reception: true [ 277.148485][ T9046] vivid-003: RDS Program Type: 0 inactive [ 277.154425][ T9046] vivid-003: RDS PS Name: inactive [ 277.159900][ T9046] vivid-003: RDS Radio Text: inactive [ 277.165879][ T9046] vivid-003: RDS Traffic Announcement: false inactive [ 277.180877][ T9046] vivid-003: RDS Traffic Program: false inactive [ 277.187371][ T9046] vivid-003: RDS Music: false inactive [ 277.193261][ T9046] vivid-003: ================== END STATUS ================== [ 277.975054][ T9067] FAULT_INJECTION: forcing a failure. [ 277.975054][ T9067] name failslab, interval 1, probability 0, space 0, times 0 [ 278.031102][ T9067] CPU: 0 UID: 0 PID: 9067 Comm: syz.0.784 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 278.031146][ T9067] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 278.031165][ T9067] Call Trace: [ 278.031174][ T9067] [ 278.031185][ T9067] dump_stack_lvl+0x16c/0x1f0 [ 278.031231][ T9067] should_fail_ex+0x512/0x640 [ 278.031284][ T9067] should_failslab+0xc2/0x120 [ 278.031317][ T9067] __kmalloc_cache_noprof+0x6a/0x3e0 [ 278.031364][ T9067] ? sctp_add_bind_addr+0xae/0x3f0 [ 278.031398][ T9067] sctp_add_bind_addr+0xae/0x3f0 [ 278.031431][ T9067] sctp_copy_local_addr_list+0x39d/0x5a0 [ 278.031473][ T9067] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 278.031516][ T9067] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 278.031562][ T9067] ? sctp_bind_addr_copy+0xe0/0x530 [ 278.031592][ T9067] sctp_bind_addr_copy+0xe0/0x530 [ 278.031630][ T9067] sctp_connect_new_asoc+0x1d7/0x790 [ 278.031678][ T9067] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 278.031725][ T9067] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 278.031774][ T9067] __sctp_connect+0x3f3/0xc60 [ 278.031820][ T9067] ? do_raw_spin_lock+0x12c/0x2b0 [ 278.031856][ T9067] ? __pfx___sctp_connect+0x10/0x10 [ 278.031913][ T9067] ? __pfx_sctp_inet_connect+0x10/0x10 [ 278.031958][ T9067] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 278.032012][ T9067] ? __pfx_sctp_inet_connect+0x10/0x10 [ 278.032056][ T9067] sctp_inet_connect+0x15f/0x200 [ 278.032101][ T9067] __sys_connect_file+0x13e/0x1a0 [ 278.032151][ T9067] __sys_connect+0x14d/0x170 [ 278.032197][ T9067] ? __pfx___sys_connect+0x10/0x10 [ 278.032255][ T9067] ? __pfx_ksys_write+0x10/0x10 [ 278.032301][ T9067] ? rcu_is_watching+0x12/0xc0 [ 278.032341][ T9067] __x64_sys_connect+0x72/0xb0 [ 278.032386][ T9067] ? lockdep_hardirqs_on+0x7c/0x110 [ 278.032428][ T9067] do_syscall_64+0xcd/0x260 [ 278.032469][ T9067] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.032500][ T9067] RIP: 0033:0x7f5d81d8d169 [ 278.032524][ T9067] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.032555][ T9067] RSP: 002b:00007f5d82c02038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 278.032584][ T9067] RAX: ffffffffffffffda RBX: 00007f5d81fa5fa0 RCX: 00007f5d81d8d169 [ 278.032604][ T9067] RDX: 0000000000000054 RSI: 0000200000000080 RDI: 0000000000000003 [ 278.032622][ T9067] RBP: 00007f5d82c02090 R08: 0000000000000000 R09: 0000000000000000 [ 278.032640][ T9067] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 278.032658][ T9067] R13: 0000000000000000 R14: 00007f5d81fa5fa0 R15: 00007ffcdb07f978 [ 278.032691][ T9067] [ 278.299284][ C0] vkms_vblank_simulate: vblank timer overrun [ 278.707175][ T9072] FAULT_INJECTION: forcing a failure. [ 278.707175][ T9072] name failslab, interval 1, probability 0, space 0, times 0 [ 278.750493][ T9072] CPU: 1 UID: 0 PID: 9072 Comm: syz.0.786 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 278.750556][ T9072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 278.750584][ T9072] Call Trace: [ 278.750595][ T9072] [ 278.750611][ T9072] dump_stack_lvl+0x16c/0x1f0 [ 278.750669][ T9072] should_fail_ex+0x512/0x640 [ 278.750741][ T9072] should_failslab+0xc2/0x120 [ 278.750782][ T9072] __kmalloc_cache_noprof+0x6a/0x3e0 [ 278.750827][ T9072] ? proc_thread_self_get_link+0x1c6/0x240 [ 278.750863][ T9072] proc_thread_self_get_link+0x1c6/0x240 [ 278.750895][ T9072] ? __pfx_proc_thread_self_get_link+0x10/0x10 [ 278.750921][ T9072] step_into+0x19e4/0x2270 [ 278.750981][ T9072] ? __pfx_step_into+0x10/0x10 [ 278.751021][ T9072] ? lookup_fast+0x156/0x610 [ 278.751062][ T9072] walk_component+0xfc/0x5b0 [ 278.751116][ T9072] link_path_walk.part.0.constprop.0+0x682/0xd60 [ 278.751178][ T9072] path_lookupat+0x91/0x780 [ 278.751230][ T9072] path_openat+0x1758/0x2d40 [ 278.751257][ T9072] ? __x64_sys_openat+0x174/0x210 [ 278.751295][ T9072] ? do_syscall_64+0xcd/0x260 [ 278.751335][ T9072] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.751378][ T9072] ? __pfx_path_openat+0x10/0x10 [ 278.751415][ T9072] do_filp_open+0x20b/0x470 [ 278.751444][ T9072] ? __pfx_do_filp_open+0x10/0x10 [ 278.751473][ T9072] ? find_held_lock+0x2b/0x80 [ 278.751521][ T9072] ? alloc_fd+0x420/0x760 [ 278.751567][ T9072] do_sys_openat2+0x11b/0x1d0 [ 278.751597][ T9072] ? __pfx_do_sys_openat2+0x10/0x10 [ 278.751635][ T9072] __x64_sys_openat+0x174/0x210 [ 278.751667][ T9072] ? __pfx___x64_sys_openat+0x10/0x10 [ 278.751700][ T9072] ? rcu_is_watching+0x12/0xc0 [ 278.751736][ T9072] do_syscall_64+0xcd/0x260 [ 278.751773][ T9072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 278.751800][ T9072] RIP: 0033:0x7f5d81d8d169 [ 278.751820][ T9072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 278.751846][ T9072] RSP: 002b:00007f5d82c02038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 278.751872][ T9072] RAX: ffffffffffffffda RBX: 00007f5d81fa5fa0 RCX: 00007f5d81d8d169 [ 278.751890][ T9072] RDX: 00000000003c8082 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 278.751907][ T9072] RBP: 00007f5d81e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 278.751922][ T9072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 278.751938][ T9072] R13: 0000000000000000 R14: 00007f5d81fa5fa0 R15: 00007ffcdb07f978 [ 278.751966][ T9072] [ 279.102604][ T9072] openvswitch: netlink: Key type 247 is out of range max 32 [ 279.121688][ T9079] openvswitch: netlink: Key type 247 is out of range max 32 [ 281.242618][ T9106] vivid-003: ================= START STATUS ================= [ 281.250394][ T9106] vivid-003: Radio HW Seek Mode: Bounded [ 281.441023][ T9106] vivid-003: Radio Programmable HW Seek: false [ 281.447269][ T9106] vivid-003: RDS Rx I/O Mode: Block I/O [ 281.461036][ T9106] vivid-003: Generate RBDS Instead of RDS: false [ 281.472999][ T9106] vivid-003: RDS Reception: true [ 281.477992][ T9106] vivid-003: RDS Program Type: 0 inactive [ 281.483862][ T9106] vivid-003: RDS PS Name: inactive [ 281.489090][ T9106] vivid-003: RDS Radio Text: inactive [ 281.495492][ T9106] vivid-003: RDS Traffic Announcement: false inactive [ 281.574233][ T9106] vivid-003: RDS Traffic Program: false inactive [ 281.580689][ T9106] vivid-003: RDS Music: false inactive [ 281.646122][ T9106] vivid-003: ================== END STATUS ================== [ 285.196264][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 285.213559][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 285.222341][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 285.230455][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 285.240939][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 285.566823][ T9163] vivid-003: ================= START STATUS ================= [ 285.626674][ T9163] vivid-003: Radio HW Seek Mode: Bounded [ 285.643134][ T9163] vivid-003: Radio Programmable HW Seek: false [ 285.649373][ T9163] vivid-003: RDS Rx I/O Mode: Block I/O [ 285.703683][ T9163] vivid-003: Generate RBDS Instead of RDS: false [ 285.742105][ T9163] vivid-003: RDS Reception: true [ 285.820958][ T9163] vivid-003: RDS Program Type: 0 inactive [ 285.835477][ T9163] vivid-003: RDS PS Name: inactive [ 285.846531][ T9163] vivid-003: RDS Radio Text: inactive [ 285.868137][ T9163] vivid-003: RDS Traffic Announcement: false inactive [ 285.890603][ T9163] vivid-003: RDS Traffic Program: false inactive [ 285.931758][ T9163] vivid-003: RDS Music: false inactive [ 285.953595][ T9163] vivid-003: ================== END STATUS ================== [ 286.503634][ T9178] netlink: 28 bytes leftover after parsing attributes in process `syz.2.811'. [ 286.671225][ T9159] chnl_net:caif_netlink_parms(): no params data found [ 286.925069][ T9179] FAULT_INJECTION: forcing a failure. [ 286.925069][ T9179] name failslab, interval 1, probability 0, space 0, times 0 [ 287.037800][ T9179] CPU: 0 UID: 0 PID: 9179 Comm: syz.3.812 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 287.037845][ T9179] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 287.037864][ T9179] Call Trace: [ 287.037874][ T9179] [ 287.037885][ T9179] dump_stack_lvl+0x16c/0x1f0 [ 287.037930][ T9179] should_fail_ex+0x512/0x640 [ 287.037975][ T9179] ? __kmalloc_cache_node_noprof+0x5a/0x420 [ 287.038026][ T9179] should_failslab+0xc2/0x120 [ 287.038057][ T9179] __kmalloc_cache_node_noprof+0x6d/0x420 [ 287.038124][ T9179] ? lockdep_init_map_type+0x5c/0x280 [ 287.038172][ T9179] ? __alloc_workqueue+0x694/0x1810 [ 287.038223][ T9179] __alloc_workqueue+0x694/0x1810 [ 287.038280][ T9179] alloc_workqueue+0xd2/0x200 [ 287.038326][ T9179] ? __pfx_alloc_workqueue+0x10/0x10 [ 287.038377][ T9179] ? rcu_is_watching+0x12/0xc0 [ 287.038412][ T9179] ? trace_kmalloc+0x2b/0xd0 [ 287.038447][ T9179] ? do_raw_spin_lock+0x12c/0x2b0 [ 287.038486][ T9179] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 287.038544][ T9179] ieee80211_register_hw+0x1e18/0x4020 [ 287.038590][ T9179] ? _raw_spin_unlock_irqrestore+0x21/0x80 [ 287.038628][ T9179] ? __debug_object_init+0x2a1/0x3d0 [ 287.038669][ T9179] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 287.038716][ T9179] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 287.038768][ T9179] ? __hrtimer_init+0xc6/0x220 [ 287.038796][ T9179] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 287.038842][ T9179] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 287.038890][ T9179] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 287.038930][ T9179] hwsim_new_radio_nl+0xb51/0x12c0 [ 287.038963][ T9179] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 287.039001][ T9179] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 287.039048][ T9179] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 287.039110][ T9179] genl_family_rcv_msg_doit+0x206/0x2f0 [ 287.039152][ T9179] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 287.039192][ T9179] ? trace_cap_capable+0x18d/0x200 [ 287.039260][ T9179] ? bpf_lsm_capable+0x9/0x10 [ 287.039295][ T9179] ? security_capable+0x7e/0x260 [ 287.039342][ T9179] ? ns_capable+0xd7/0x110 [ 287.039392][ T9179] genl_rcv_msg+0x55c/0x800 [ 287.039432][ T9179] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.039468][ T9179] ? __pfx___dev_queue_xmit+0x10/0x10 [ 287.039518][ T9179] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 287.039549][ T9179] ? __lock_acquire+0xaa4/0x1ba0 [ 287.039599][ T9179] netlink_rcv_skb+0x16a/0x440 [ 287.039631][ T9179] ? __pfx_genl_rcv_msg+0x10/0x10 [ 287.039672][ T9179] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.039718][ T9179] ? __pfx_down_read+0x10/0x10 [ 287.039760][ T9179] ? netlink_deliver_tap+0x1ae/0xd30 [ 287.039794][ T9179] genl_rcv+0x28/0x40 [ 287.039827][ T9179] netlink_unicast+0x53a/0x7f0 [ 287.039863][ T9179] ? __pfx_netlink_unicast+0x10/0x10 [ 287.039897][ T9179] ? __phys_addr_symbol+0x30/0x80 [ 287.039939][ T9179] ? __check_object_size+0x4c7/0x710 [ 287.039974][ T9179] netlink_sendmsg+0x8da/0xd70 [ 287.040010][ T9179] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.040052][ T9179] ____sys_sendmsg+0xa8d/0xc60 [ 287.040090][ T9179] ? copy_msghdr_from_user+0x10a/0x160 [ 287.040118][ T9179] ? __pfx_____sys_sendmsg+0x10/0x10 [ 287.040167][ T9179] ___sys_sendmsg+0x134/0x1d0 [ 287.040197][ T9179] ? __pfx____sys_sendmsg+0x10/0x10 [ 287.040257][ T9179] __sys_sendmsg+0x16d/0x220 [ 287.040287][ T9179] ? __pfx___sys_sendmsg+0x10/0x10 [ 287.040315][ T9179] ? __x64_sys_futex+0x1e0/0x4c0 [ 287.040362][ T9179] ? rcu_is_watching+0x12/0xc0 [ 287.040403][ T9179] do_syscall_64+0xcd/0x260 [ 287.040444][ T9179] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.040474][ T9179] RIP: 0033:0x7fefe778d169 [ 287.040504][ T9179] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 287.040535][ T9179] RSP: 002b:00007fefe8672038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 287.040562][ T9179] RAX: ffffffffffffffda RBX: 00007fefe79a5fa0 RCX: 00007fefe778d169 [ 287.040581][ T9179] RDX: 00000000040000c0 RSI: 0000200000000300 RDI: 0000000000000008 [ 287.040598][ T9179] RBP: 00007fefe780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 287.040616][ T9179] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 287.040632][ T9179] R13: 0000000000000000 R14: 00007fefe79a5fa0 R15: 00007ffc0c764048 [ 287.040663][ T9179] [ 287.490935][ T54] Bluetooth: hci4: command tx timeout [ 287.694835][ T9159] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.718693][ T9159] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.787532][ T9159] bridge_slave_0: entered allmulticast mode [ 287.796352][ T9159] bridge_slave_0: entered promiscuous mode [ 287.928146][ T9159] bridge0: port 2(bridge_slave_1) entered blocking state [ 287.935498][ T9159] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.961491][ T9159] bridge_slave_1: entered allmulticast mode [ 288.004302][ T9159] bridge_slave_1: entered promiscuous mode [ 288.233822][ T9159] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.302972][ T9159] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.595825][ T9159] team0: Port device team_slave_0 added [ 288.632210][ T9159] team0: Port device team_slave_1 added [ 288.860605][ T9159] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.870924][ T9159] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.197416][ T9159] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.247034][ T9159] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.272316][ T9159] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.320315][ T9193] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 289.326898][ T9193] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 289.333085][ T9193] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 289.345331][ T9193] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 289.361188][ T9193] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 289.371131][ T9159] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.402758][ T9193] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 289.482663][ T9159] hsr_slave_0: entered promiscuous mode [ 289.488827][ T9159] hsr_slave_1: entered promiscuous mode [ 289.497016][ T9193] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 289.504903][ T9159] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.520204][ T9159] Cannot create hsr debugfs directory [ 290.256594][ T9159] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 290.364662][ T9159] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 290.403364][ T9159] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 290.421152][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 290.462179][ T9159] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 290.764397][ T9159] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.819110][ T9159] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.871880][ T6317] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.879064][ T6317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.922912][ T6317] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.930117][ T6317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.267960][ T9230] vivid-003: ================= START STATUS ================= [ 291.311114][ T9230] vivid-003: Radio HW Seek Mode: Bounded [ 291.316860][ T9230] vivid-003: Radio Programmable HW Seek: false [ 291.380941][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 291.381193][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 291.387012][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 291.410909][ T5843] Bluetooth: hci4: command 0x040f tx timeout [ 291.469835][ T9230] vivid-003: RDS Rx I/O Mode: Block I/O [ 291.549402][ T9230] vivid-003: Generate RBDS Instead of RDS: false [ 291.605048][ T9230] vivid-003: RDS Reception: true [ 291.610254][ T9230] vivid-003: RDS Program Type: 0 inactive [ 291.672085][ T9230] vivid-003: RDS PS Name: inactive [ 291.678058][ T9230] vivid-003: RDS Radio Text: inactive [ 291.729982][ T9159] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.732197][ T9230] vivid-003: RDS Traffic Announcement: false inactive [ 291.771050][ T9230] vivid-003: RDS Traffic Program: false inactive [ 291.777474][ T9230] vivid-003: RDS Music: false inactive [ 291.810871][ T9230] vivid-003: ================== END STATUS ================== [ 292.787068][ T9159] veth0_vlan: entered promiscuous mode [ 292.860263][ T9159] veth1_vlan: entered promiscuous mode [ 292.995566][ T9159] veth0_macvtap: entered promiscuous mode [ 293.073677][ T9159] veth1_macvtap: entered promiscuous mode [ 293.296641][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.337835][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.379975][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.416628][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.438872][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.463059][ T54] Bluetooth: hci4: command 0x040f tx timeout [ 293.473167][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.493411][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.515254][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.595882][ T9159] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.708680][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.740998][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.755313][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.790949][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.840813][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.890819][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.900689][ T9159] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.999071][ T9159] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.030410][ T9159] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.070917][ T9159] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.120368][ T9159] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.186276][ T9159] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.240383][ T9159] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.728561][ T1138] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.796197][ T1138] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.968672][ T6321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.000218][ T6321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.541054][ T54] Bluetooth: hci4: command 0x040f tx timeout [ 295.874069][ T9283] vivid-003: ================= START STATUS ================= [ 295.881936][ T9283] vivid-003: Radio HW Seek Mode: Bounded [ 295.887601][ T9283] vivid-003: Radio Programmable HW Seek: false [ 295.979336][ T9283] vivid-003: RDS Rx I/O Mode: Block I/O [ 295.989950][ T9283] vivid-003: Generate RBDS Instead of RDS: false [ 295.999769][ T9283] vivid-003: RDS Reception: true [ 296.010921][ T9283] vivid-003: RDS Program Type: 0 inactive [ 296.016751][ T9283] vivid-003: RDS PS Name: inactive [ 296.022419][ T9283] vivid-003: RDS Radio Text: inactive [ 296.032465][ T9283] vivid-003: RDS Traffic Announcement: false inactive [ 296.050441][ T9283] vivid-003: RDS Traffic Program: false inactive [ 296.059672][ T9283] vivid-003: RDS Music: false inactive [ 296.065434][ T9283] vivid-003: ================== END STATUS ================== [ 297.620868][ T54] Bluetooth: hci4: command 0x040f tx timeout [ 298.047628][ T9317] netlink: 330 bytes leftover after parsing attributes in process `syz.3.842'. [ 298.728621][ T9318] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 298.734930][ T9318] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 298.763336][ T9318] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 298.806953][ T9318] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 298.831170][ T9318] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 300.292976][ T9345] vivid-003: ================= START STATUS ================= [ 300.333860][ T9345] vivid-003: Radio HW Seek Mode: Bounded [ 300.341424][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 300.351740][ T9345] vivid-003: Radio Programmable HW Seek: false [ 300.357999][ T9345] vivid-003: RDS Rx I/O Mode: Block I/O [ 300.420852][ T9345] vivid-003: Generate RBDS Instead of RDS: false [ 300.427306][ T9345] vivid-003: RDS Reception: true [ 300.492225][ T9345] vivid-003: RDS Program Type: 0 inactive [ 300.498156][ T9345] vivid-003: RDS PS Name: inactive [ 300.566925][ T9345] vivid-003: RDS Radio Text: inactive [ 300.610939][ T9345] vivid-003: RDS Traffic Announcement: false inactive [ 300.640854][ T9345] vivid-003: RDS Traffic Program: false inactive [ 300.698292][ T9345] vivid-003: RDS Music: false inactive [ 300.729604][ T9345] vivid-003: ================== END STATUS ================== [ 300.740885][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 300.823131][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 300.829396][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 300.900957][ T54] Bluetooth: hci4: command 0x040f tx timeout [ 301.854462][ T9381] netlink: 4 bytes leftover after parsing attributes in process `syz.4.859'. [ 304.062384][ T9414] FAULT_INJECTION: forcing a failure. [ 304.062384][ T9414] name failslab, interval 1, probability 0, space 0, times 0 [ 304.149806][ T9414] CPU: 0 UID: 0 PID: 9414 Comm: syz.2.868 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 304.149854][ T9414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 304.149874][ T9414] Call Trace: [ 304.149883][ T9414] [ 304.149895][ T9414] dump_stack_lvl+0x16c/0x1f0 [ 304.149942][ T9414] should_fail_ex+0x512/0x640 [ 304.149993][ T9414] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 304.150031][ T9414] should_failslab+0xc2/0x120 [ 304.150066][ T9414] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 304.150099][ T9414] ? __might_fault+0xe3/0x190 [ 304.150129][ T9414] ? __might_fault+0xe3/0x190 [ 304.150159][ T9414] ? drm_edid_alloc+0x4d/0x130 [ 304.150209][ T9414] kmemdup_noprof+0x29/0x60 [ 304.150251][ T9414] drm_edid_alloc+0x4d/0x130 [ 304.150307][ T9414] drm_edid_override_set+0x25/0x340 [ 304.150344][ T9414] edid_write+0xe3/0x180 [ 304.150375][ T9414] full_proxy_write+0x13c/0x200 [ 304.150409][ T9414] vfs_write+0x25c/0x1180 [ 304.150455][ T9414] ? __pfx_full_proxy_write+0x10/0x10 [ 304.150490][ T9414] ? __pfx___mutex_lock+0x10/0x10 [ 304.150533][ T9414] ? __pfx_vfs_write+0x10/0x10 [ 304.150588][ T9414] ? __fget_files+0x20e/0x3c0 [ 304.150624][ T9414] ksys_write+0x12a/0x240 [ 304.150672][ T9414] ? __pfx_ksys_write+0x10/0x10 [ 304.150718][ T9414] ? rcu_is_watching+0x12/0xc0 [ 304.150765][ T9414] do_syscall_64+0xcd/0x260 [ 304.150808][ T9414] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.150839][ T9414] RIP: 0033:0x7f646f98d169 [ 304.150864][ T9414] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.150895][ T9414] RSP: 002b:00007f64707b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 304.150926][ T9414] RAX: ffffffffffffffda RBX: 00007f646fba5fa0 RCX: 00007f646f98d169 [ 304.150947][ T9414] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000006 [ 304.150965][ T9414] RBP: 00007f646fa0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 304.150984][ T9414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.151001][ T9414] R13: 0000000000000000 R14: 00007f646fba5fa0 R15: 00007ffc30eef6b8 [ 304.151033][ T9414] [ 305.804875][ T9422] vivid-003: ================= START STATUS ================= [ 305.873789][ T9422] vivid-003: Radio HW Seek Mode: Bounded [ 305.879533][ T9422] vivid-003: Radio Programmable HW Seek: false [ 306.061021][ T9422] vivid-003: RDS Rx I/O Mode: Block I/O [ 306.097387][ T9422] vivid-003: Generate RBDS Instead of RDS: false [ 306.161694][ T9422] vivid-003: RDS Reception: true [ 306.203819][ T9422] vivid-003: RDS Program Type: 0 inactive [ 306.241607][ T9422] vivid-003: RDS PS Name: inactive [ 306.259691][ T9422] vivid-003: RDS Radio Text: inactive [ 306.374347][ T9422] vivid-003: RDS Traffic Announcement: false inactive [ 306.426862][ T9422] vivid-003: RDS Traffic Program: false inactive [ 306.462763][ T9422] vivid-003: RDS Music: false inactive [ 306.468653][ T9422] vivid-003: ================== END STATUS ================== [ 306.988446][ T9460] FAULT_INJECTION: forcing a failure. [ 306.988446][ T9460] name failslab, interval 1, probability 0, space 0, times 0 [ 307.061732][ T9460] CPU: 1 UID: 0 PID: 9460 Comm: syz.3.881 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 307.061777][ T9460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 307.061796][ T9460] Call Trace: [ 307.061806][ T9460] [ 307.061818][ T9460] dump_stack_lvl+0x16c/0x1f0 [ 307.061876][ T9460] should_fail_ex+0x512/0x640 [ 307.061923][ T9460] ? __kmalloc_noprof+0xbf/0x510 [ 307.061953][ T9460] ? __register_sysctl_table+0xb3/0x1900 [ 307.061993][ T9460] should_failslab+0xc2/0x120 [ 307.062026][ T9460] __kmalloc_noprof+0xd2/0x510 [ 307.062060][ T9460] __register_sysctl_table+0xb3/0x1900 [ 307.062103][ T9460] ? rcu_is_watching+0x12/0xc0 [ 307.062139][ T9460] ? trace_kmalloc+0x2b/0xd0 [ 307.062175][ T9460] ? __pfx___register_sysctl_table+0x10/0x10 [ 307.062215][ T9460] ? is_module_address+0x2a/0x50 [ 307.062263][ T9460] ? register_net_sysctl_sz+0x228/0x3e0 [ 307.062303][ T9460] ? __asan_memcpy+0x3c/0x60 [ 307.062351][ T9460] mptcp_net_init+0x499/0x620 [ 307.062402][ T9460] ? __pfx_mptcp_net_init+0x10/0x10 [ 307.062448][ T9460] ops_init+0x1df/0x5f0 [ 307.062501][ T9460] setup_net+0x21e/0x850 [ 307.062536][ T9460] ? __pfx_setup_net+0x10/0x10 [ 307.062570][ T9460] ? lockdep_init_map_type+0x5c/0x280 [ 307.062621][ T9460] ? __pfx_down_read_killable+0x10/0x10 [ 307.062672][ T9460] ? debug_mutex_init+0x37/0x70 [ 307.062712][ T9460] copy_net_ns+0x2a6/0x5f0 [ 307.062753][ T9460] create_new_namespaces+0x3ea/0xad0 [ 307.062804][ T9460] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 307.062851][ T9460] ksys_unshare+0x45b/0xa40 [ 307.062908][ T9460] ? __pfx_ksys_unshare+0x10/0x10 [ 307.062954][ T9460] ? xfd_validate_state+0x5d/0x180 [ 307.062990][ T9460] ? rcu_is_watching+0x12/0xc0 [ 307.063034][ T9460] __x64_sys_unshare+0x31/0x40 [ 307.063079][ T9460] do_syscall_64+0xcd/0x260 [ 307.063123][ T9460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 307.063156][ T9460] RIP: 0033:0x7fefe778d169 [ 307.063181][ T9460] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 307.063215][ T9460] RSP: 002b:00007fefe8672038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 307.063246][ T9460] RAX: ffffffffffffffda RBX: 00007fefe79a5fa0 RCX: 00007fefe778d169 [ 307.063269][ T9460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 307.063288][ T9460] RBP: 00007fefe780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 307.063307][ T9460] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 307.063326][ T9460] R13: 0000000000000000 R14: 00007fefe79a5fa0 R15: 00007ffc0c764048 [ 307.063361][ T9460] [ 309.893375][ T9487] vivid-003: ================= START STATUS ================= [ 309.964010][ T9487] vivid-003: Radio HW Seek Mode: Bounded [ 309.969759][ T9487] vivid-003: Radio Programmable HW Seek: false [ 310.033174][ T9487] vivid-003: RDS Rx I/O Mode: Block I/O [ 310.069324][ T9487] vivid-003: Generate RBDS Instead of RDS: false [ 310.116659][ T9487] vivid-003: RDS Reception: true [ 310.160900][ T9487] vivid-003: RDS Program Type: 0 inactive [ 310.174049][ T9521] Invalid ELF header magic: != ELF [ 310.200912][ T9487] vivid-003: RDS PS Name: inactive [ 310.251052][ T9487] vivid-003: RDS Radio Text: inactive [ 310.256567][ T9487] vivid-003: RDS Traffic Announcement: false inactive [ 310.309951][ T9487] vivid-003: RDS Traffic Program: false inactive [ 310.387949][ T9487] vivid-003: RDS Music: false inactive [ 310.425177][ T9487] vivid-003: ================== END STATUS ================== [ 313.659240][ T9576] Invalid ELF header magic: != ELF [ 313.879108][ T9584] FAULT_INJECTION: forcing a failure. [ 313.879108][ T9584] name failslab, interval 1, probability 0, space 0, times 0 [ 314.057078][ T9584] CPU: 0 UID: 0 PID: 9584 Comm: syz.2.917 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 314.057111][ T9584] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 314.057124][ T9584] Call Trace: [ 314.057130][ T9584] [ 314.057139][ T9584] dump_stack_lvl+0x16c/0x1f0 [ 314.057171][ T9584] should_fail_ex+0x512/0x640 [ 314.057207][ T9584] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 314.057245][ T9584] should_failslab+0xc2/0x120 [ 314.057270][ T9584] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 314.057305][ T9584] ? __pfx___schedule+0x10/0x10 [ 314.057330][ T9584] ? alloc_empty_file+0x55/0x1e0 [ 314.057358][ T9584] alloc_empty_file+0x55/0x1e0 [ 314.057393][ T9584] path_openat+0xe0/0x2d40 [ 314.057411][ T9584] ? __x64_sys_openat+0x174/0x210 [ 314.057438][ T9584] ? do_syscall_64+0xcd/0x260 [ 314.057466][ T9584] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.057495][ T9584] ? __pfx_path_openat+0x10/0x10 [ 314.057519][ T9584] do_filp_open+0x20b/0x470 [ 314.057539][ T9584] ? __pfx_do_filp_open+0x10/0x10 [ 314.057558][ T9584] ? find_held_lock+0x2b/0x80 [ 314.057597][ T9584] ? alloc_fd+0x420/0x760 [ 314.057636][ T9584] do_sys_openat2+0x11b/0x1d0 [ 314.057662][ T9584] ? __pfx_do_sys_openat2+0x10/0x10 [ 314.057689][ T9584] ? __fget_files+0x20e/0x3c0 [ 314.057713][ T9584] __x64_sys_openat+0x174/0x210 [ 314.057740][ T9584] ? __pfx___x64_sys_openat+0x10/0x10 [ 314.057768][ T9584] ? rcu_is_watching+0x12/0xc0 [ 314.057798][ T9584] do_syscall_64+0xcd/0x260 [ 314.057828][ T9584] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.057850][ T9584] RIP: 0033:0x7f646f98d169 [ 314.057867][ T9584] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.057889][ T9584] RSP: 002b:00007f64707b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 314.057910][ T9584] RAX: ffffffffffffffda RBX: 00007f646fba5fa0 RCX: 00007f646f98d169 [ 314.057925][ T9584] RDX: 0000000000040000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 314.057939][ T9584] RBP: 00007f646fa0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 314.057953][ T9584] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.057966][ T9584] R13: 0000000000000000 R14: 00007f646fba5fa0 R15: 00007ffc30eef6b8 [ 314.057989][ T9584] [ 314.945024][ T9562] vivid-003: ================= START STATUS ================= [ 315.094269][ T9562] vivid-003: Radio HW Seek Mode: Bounded [ 315.100025][ T9562] vivid-003: Radio Programmable HW Seek: false [ 315.188322][ T9562] vivid-003: RDS Rx I/O Mode: Block I/O [ 315.236800][ T9562] vivid-003: Generate RBDS Instead of RDS: false [ 315.381110][ T9562] vivid-003: RDS Reception: true [ 315.386187][ T9562] vivid-003: RDS Program Type: 0 inactive [ 315.520814][ T9562] vivid-003: RDS PS Name: inactive [ 315.526234][ T9562] vivid-003: RDS Radio Text: inactive [ 315.571326][ T9562] vivid-003: RDS Traffic Announcement: false inactive [ 315.655303][ T9562] vivid-003: RDS Traffic Program: false inactive [ 315.740908][ T9562] vivid-003: RDS Music: false inactive [ 315.768985][ T9562] vivid-003: ================== END STATUS ================== [ 317.094784][ T9633] netlink: 342 bytes leftover after parsing attributes in process `syz.3.933'. [ 317.628374][ T9626] delete_channel: no stack [ 318.838398][ T9651] netlink: 20 bytes leftover after parsing attributes in process `syz.0.939'. [ 318.975316][ T9659] FAULT_INJECTION: forcing a failure. [ 318.975316][ T9659] name fail_futex, interval 1, probability 0, space 0, times 1 [ 319.020884][ T9659] CPU: 1 UID: 0 PID: 9659 Comm: syz.2.940 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 319.020925][ T9659] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 319.020943][ T9659] Call Trace: [ 319.020952][ T9659] [ 319.020962][ T9659] dump_stack_lvl+0x16c/0x1f0 [ 319.021007][ T9659] should_fail_ex+0x512/0x640 [ 319.021069][ T9659] get_futex_key+0x49e/0x1000 [ 319.021111][ T9659] ? __pfx_get_futex_key+0x10/0x10 [ 319.021147][ T9659] ? __check_object_size+0x4c7/0x710 [ 319.021184][ T9659] ? seq_read_iter+0x6b/0x12b0 [ 319.021234][ T9659] futex_wake+0xe7/0x4e0 [ 319.021283][ T9659] ? __pfx_futex_wake+0x10/0x10 [ 319.021330][ T9659] ? proc_reg_read_iter+0x123/0x310 [ 319.021367][ T9659] ? ksys_read+0x190/0x240 [ 319.021417][ T9659] do_futex+0x1e3/0x350 [ 319.021457][ T9659] ? __pfx_do_futex+0x10/0x10 [ 319.021505][ T9659] __x64_sys_futex+0x1e0/0x4c0 [ 319.021548][ T9659] ? fput+0x70/0xf0 [ 319.021578][ T9659] ? __pfx___x64_sys_futex+0x10/0x10 [ 319.021618][ T9659] ? ksys_read+0x1b9/0x240 [ 319.021662][ T9659] ? __pfx_ksys_read+0x10/0x10 [ 319.021706][ T9659] ? rcu_is_watching+0x12/0xc0 [ 319.021748][ T9659] do_syscall_64+0xcd/0x260 [ 319.021790][ T9659] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.021821][ T9659] RIP: 0033:0x7f646f98d169 [ 319.021843][ T9659] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.021873][ T9659] RSP: 002b:00007f64707900e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 319.021902][ T9659] RAX: ffffffffffffffda RBX: 00007f646fba6088 RCX: 00007f646f98d169 [ 319.021921][ T9659] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f646fba608c [ 319.021940][ T9659] RBP: 00007f646fba6080 R08: 00007f64707b2000 R09: 0000000000000000 [ 319.021958][ T9659] R10: 000000000000003a R11: 0000000000000246 R12: 00007f646fba608c [ 319.021977][ T9659] R13: 0000000000000000 R14: 00007ffc30eef5d0 R15: 00007ffc30eef6b8 [ 319.022008][ T9659] [ 320.101650][ T9674] zero sized request [ 322.356202][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.362601][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.061847][ T9729] delete_channel: no stack [ 326.392294][ T9750] FAULT_INJECTION: forcing a failure. [ 326.392294][ T9750] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 326.473893][ T9748] Invalid ELF header magic: != ELF [ 326.572758][ T9750] CPU: 0 UID: 0 PID: 9750 Comm: syz.4.962 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 326.572801][ T9750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 326.572821][ T9750] Call Trace: [ 326.572830][ T9750] [ 326.572841][ T9750] dump_stack_lvl+0x16c/0x1f0 [ 326.572888][ T9750] should_fail_ex+0x512/0x640 [ 326.572942][ T9750] _copy_from_user+0x2e/0xd0 [ 326.572974][ T9750] copy_msghdr_from_user+0x98/0x160 [ 326.573006][ T9750] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 326.573042][ T9750] ? kfree+0x252/0x4d0 [ 326.573084][ T9750] ? __lock_acquire+0x5ca/0x1ba0 [ 326.573136][ T9750] ___sys_recvmsg+0xdb/0x1a0 [ 326.573167][ T9750] ? __pfx____sys_recvmsg+0x10/0x10 [ 326.573212][ T9750] ? __pfx___might_resched+0x10/0x10 [ 326.573260][ T9750] do_recvmmsg+0x2fe/0x740 [ 326.573294][ T9750] ? __pfx_do_recvmmsg+0x10/0x10 [ 326.573330][ T9750] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 326.573381][ T9750] ? __fget_files+0x20e/0x3c0 [ 326.573407][ T9750] ? __up_read+0x190/0x750 [ 326.573444][ T9750] __x64_sys_recvmmsg+0x22a/0x280 [ 326.573481][ T9750] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 326.573523][ T9750] do_syscall_64+0xcd/0x260 [ 326.573567][ T9750] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.573600][ T9750] RIP: 0033:0x7fe5ae18d169 [ 326.573637][ T9750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.573668][ T9750] RSP: 002b:00007fe5abfd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 326.573713][ T9750] RAX: ffffffffffffffda RBX: 00007fe5ae3a6160 RCX: 00007fe5ae18d169 [ 326.573732][ T9750] RDX: 0000000000010000 RSI: 0000000000000000 RDI: 0000000000000003 [ 326.573749][ T9750] RBP: 00007fe5abfd5090 R08: 0000000000000000 R09: 0000000000000000 [ 326.573767][ T9750] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000002 [ 326.573784][ T9750] R13: 0000000000000001 R14: 00007fe5ae3a6160 R15: 00007ffd6d077ce8 [ 326.573815][ T9750] [ 326.820462][ T9756] FAULT_INJECTION: forcing a failure. [ 326.820462][ T9756] name failslab, interval 1, probability 0, space 0, times 0 [ 327.001057][ T9756] CPU: 0 UID: 0 PID: 9756 Comm: syz.3.963 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 327.001104][ T9756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 327.001123][ T9756] Call Trace: [ 327.001132][ T9756] [ 327.001144][ T9756] dump_stack_lvl+0x16c/0x1f0 [ 327.001191][ T9756] should_fail_ex+0x512/0x640 [ 327.001241][ T9756] ? __kvmalloc_node_noprof+0x122/0x600 [ 327.001296][ T9756] should_failslab+0xc2/0x120 [ 327.001329][ T9756] __kvmalloc_node_noprof+0x135/0x600 [ 327.001381][ T9756] ? bucket_table_alloc.isra.0+0x83/0x460 [ 327.001435][ T9756] ? bucket_table_alloc.isra.0+0x83/0x460 [ 327.001483][ T9756] bucket_table_alloc.isra.0+0x83/0x460 [ 327.001534][ T9756] rhashtable_init_noprof+0x41a/0x7e0 [ 327.001585][ T9756] ? __pfx_ipmr_new_table_set+0x10/0x10 [ 327.001636][ T9756] rhltable_init_noprof+0x20/0x60 [ 327.001696][ T9756] mr_table_alloc+0x116/0x2e0 [ 327.001728][ T9756] ? __pfx_ipmr_expire_process+0x10/0x10 [ 327.001759][ T9756] ? __pfx_ipmr_net_init+0x10/0x10 [ 327.001792][ T9756] ipmr_net_init+0x3c4/0x4e0 [ 327.001823][ T9756] ? __pfx_ipmr_net_init+0x10/0x10 [ 327.001854][ T9756] ops_init+0x1df/0x5f0 [ 327.001892][ T9756] setup_net+0x21e/0x850 [ 327.001929][ T9756] ? __pfx_setup_net+0x10/0x10 [ 327.001963][ T9756] ? lockdep_init_map_type+0x5c/0x280 [ 327.002012][ T9756] ? __pfx_down_read_killable+0x10/0x10 [ 327.002064][ T9756] ? debug_mutex_init+0x37/0x70 [ 327.002105][ T9756] copy_net_ns+0x2a6/0x5f0 [ 327.002146][ T9756] create_new_namespaces+0x3ea/0xad0 [ 327.002194][ T9756] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 327.002240][ T9756] ksys_unshare+0x45b/0xa40 [ 327.002288][ T9756] ? __pfx_ksys_unshare+0x10/0x10 [ 327.002334][ T9756] ? xfd_validate_state+0x5d/0x180 [ 327.002371][ T9756] ? rcu_is_watching+0x12/0xc0 [ 327.002414][ T9756] __x64_sys_unshare+0x31/0x40 [ 327.002466][ T9756] do_syscall_64+0xcd/0x260 [ 327.002511][ T9756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.002544][ T9756] RIP: 0033:0x7fefe778d169 [ 327.002570][ T9756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.002602][ T9756] RSP: 002b:00007fefe8672038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 327.002634][ T9756] RAX: ffffffffffffffda RBX: 00007fefe79a5fa0 RCX: 00007fefe778d169 [ 327.002654][ T9756] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 327.002672][ T9756] RBP: 00007fefe780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 327.002698][ T9756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.002717][ T9756] R13: 0000000000000000 R14: 00007fefe79a5fa0 R15: 00007ffc0c764048 [ 327.002751][ T9756] [ 333.303851][ T9804] kexec: Could not allocate control_code_buffer [ 335.666049][ T9853] netlink: set zone limit has 8 unknown bytes [ 336.902152][ T9855] vivid-003: ================= START STATUS ================= [ 337.021226][ T9855] vivid-003: Radio HW Seek Mode: Bounded [ 337.026989][ T9855] vivid-003: Radio Programmable HW Seek: false [ 337.136867][ T9855] vivid-003: RDS Rx I/O Mode: Block I/O [ 337.183395][ T9855] vivid-003: Generate RBDS Instead of RDS: false [ 337.208995][ T9855] vivid-003: RDS Reception: true [ 337.296273][ T9855] vivid-003: RDS Program Type: 0 inactive [ 337.380818][ T9855] vivid-003: RDS PS Name: inactive [ 337.386139][ T9855] vivid-003: RDS Radio Text: inactive [ 337.514771][ T9855] vivid-003: RDS Traffic Announcement: false inactive [ 337.646797][ T9855] vivid-003: RDS Traffic Program: false inactive [ 337.671083][ T9855] vivid-003: RDS Music: false inactive [ 337.676681][ T9855] vivid-003: ================== END STATUS ================== [ 338.492257][ T9896] FAULT_INJECTION: forcing a failure. [ 338.492257][ T9896] name failslab, interval 1, probability 0, space 0, times 0 [ 338.580916][ T9896] CPU: 1 UID: 0 PID: 9896 Comm: syz.4.1000 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 338.580960][ T9896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 338.580980][ T9896] Call Trace: [ 338.580990][ T9896] [ 338.581001][ T9896] dump_stack_lvl+0x16c/0x1f0 [ 338.581051][ T9896] should_fail_ex+0x512/0x640 [ 338.581100][ T9896] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 338.581154][ T9896] should_failslab+0xc2/0x120 [ 338.581187][ T9896] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 338.581241][ T9896] ? mas_alloc_nodes+0x18b/0x8b0 [ 338.581280][ T9896] mas_alloc_nodes+0x18b/0x8b0 [ 338.581322][ T9896] mas_node_count_gfp+0x105/0x130 [ 338.581359][ T9896] mas_preallocate+0x53e/0xcd0 [ 338.581411][ T9896] ? __pfx_mas_preallocate+0x10/0x10 [ 338.581474][ T9896] vma_link+0x130/0x490 [ 338.581506][ T9896] ? __pfx_vma_link+0x10/0x10 [ 338.581551][ T9896] ? __pfx_hugetlb_vm_op_open+0x10/0x10 [ 338.581583][ T9896] copy_vma+0x6c5/0xa90 [ 338.581618][ T9896] ? __pfx_copy_vma+0x10/0x10 [ 338.581684][ T9896] ? up_write+0x1b2/0x520 [ 338.581719][ T9896] move_vma+0x63e/0x1c60 [ 338.581758][ T9896] ? __pfx_move_vma+0x10/0x10 [ 338.581788][ T9896] ? mtree_load+0x270/0xa40 [ 338.581829][ T9896] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 338.581882][ T9896] ? cap_mmap_addr+0x4b/0x120 [ 338.581928][ T9896] ? bpf_lsm_mmap_addr+0x9/0x10 [ 338.581957][ T9896] ? security_mmap_addr+0x6c/0x1e0 [ 338.581997][ T9896] __do_sys_mremap+0xfdc/0x1610 [ 338.582036][ T9896] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 338.582080][ T9896] ? __pfx___do_sys_mremap+0x10/0x10 [ 338.582114][ T9896] ? __fget_files+0x20e/0x3c0 [ 338.582148][ T9896] ? fput+0x70/0xf0 [ 338.582182][ T9896] ? ksys_write+0x1b9/0x240 [ 338.582230][ T9896] ? __pfx_ksys_write+0x10/0x10 [ 338.582277][ T9896] ? rcu_is_watching+0x12/0xc0 [ 338.582320][ T9896] do_syscall_64+0xcd/0x260 [ 338.582364][ T9896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.582395][ T9896] RIP: 0033:0x7fe5ae18d169 [ 338.582420][ T9896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.582474][ T9896] RSP: 002b:00007fe5aef06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 338.582503][ T9896] RAX: ffffffffffffffda RBX: 00007fe5ae3a5fa0 RCX: 00007fe5ae18d169 [ 338.582523][ T9896] RDX: 0000000000003fd6 RSI: 0000000000000007 RDI: 0000000000000000 [ 338.582541][ T9896] RBP: 00007fe5aef06090 R08: 0000000020000000 R09: 0000000000000000 [ 338.582560][ T9896] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 338.582577][ T9896] R13: 0000000000000000 R14: 00007fe5ae3a5fa0 R15: 00007ffd6d077ce8 [ 338.582611][ T9896] [ 338.917042][ T9896] ------------[ cut here ]------------ [ 338.922783][ T9896] page_counter underflow: -512 nr_pages=512 [ 338.928910][ T9896] WARNING: CPU: 1 PID: 9896 at mm/page_counter.c:60 page_counter_cancel+0x110/0x170 [ 338.938427][ T9896] Modules linked in: [ 338.942540][ T9896] CPU: 1 UID: 0 PID: 9896 Comm: syz.4.1000 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 338.954387][ T9896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 338.964509][ T9896] RIP: 0010:page_counter_cancel+0x110/0x170 [ 338.970566][ T9896] Code: e8 c5 8e 96 ff 45 84 ed 75 24 e8 eb 93 96 ff c6 05 e1 b6 47 0e 01 90 48 c7 c7 20 76 9d 8b 4c 89 e2 48 89 ee e8 a1 2d 56 ff 90 <0f> 0b 90 90 e8 c7 93 96 ff be 08 00 00 00 48 89 df e8 9a 5e f9 ff [ 338.990454][ T9896] RSP: 0018:ffffc90002f077d0 EFLAGS: 00010282 [ 338.996881][ T9896] RAX: 0000000000000000 RBX: ffff8881446f2440 RCX: ffffffff817ade18 [ 339.005056][ T9896] RDX: ffff888030138000 RSI: ffffffff817ade25 RDI: 0000000000000001 [ 339.013229][ T9896] RBP: fffffffffffffe00 R08: 0000000000000001 R09: 0000000000000000 [ 339.021343][ T9896] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000200 [ 339.029329][ T9896] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88806e49aa28 [ 339.037384][ T9896] FS: 00007fe5aef066c0(0000) GS:ffff888124b20000(0000) knlGS:0000000000000000 [ 339.046493][ T9896] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 339.053238][ T9896] CR2: 00007fe5abff6d58 CR3: 000000008430a000 CR4: 00000000003526f0 [ 339.061398][ T9896] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 339.069402][ T9896] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 339.077437][ T9896] Call Trace: [ 339.080727][ T9896] [ 339.083900][ T9896] ? __warn+0xea/0x3c0 [ 339.087986][ T9896] ? __pfx_vprintk_emit+0x10/0x10 [ 339.093246][ T9896] ? page_counter_cancel+0x110/0x170 [ 339.098561][ T9896] ? report_bug+0x3c3/0x580 [ 339.103133][ T9896] ? page_counter_cancel+0x110/0x170 [ 339.108435][ T9896] ? handle_bug+0x184/0x210 [ 339.113005][ T9896] ? exc_invalid_op+0x17/0x50 [ 339.117725][ T9896] ? asm_exc_invalid_op+0x1a/0x20 [ 339.122929][ T9896] ? __warn_printk+0x198/0x350 [ 339.127747][ T9896] ? __warn_printk+0x1a5/0x350 [ 339.132574][ T9896] ? page_counter_cancel+0x110/0x170 [ 339.137887][ T9896] page_counter_uncharge+0x32/0x70 [ 339.143156][ T9896] hugetlb_cgroup_uncharge_counter+0xd6/0x410 [ 339.149352][ T9896] hugetlb_vm_op_close+0x3fb/0x5b0 [ 339.154640][ T9896] __mmap_region+0x5ac/0x27c0 [ 339.159359][ T9896] ? __pfx_hugetlb_vm_op_close+0x10/0x10 [ 339.165086][ T9896] ? rcu_is_watching+0x12/0xc0 [ 339.169871][ T9896] ? __pfx___mmap_region+0x10/0x10 [ 339.175032][ T9896] ? finish_task_switch.isra.0+0x221/0xc10 [ 339.180967][ T9896] ? __schedule+0x1186/0x5de0 [ 339.185683][ T9896] ? kvm_sched_clock_read+0x11/0x20 [ 339.191153][ T9896] ? sched_clock+0x38/0x60 [ 339.195600][ T9896] ? lock_acquire+0x179/0x350 [ 339.200314][ T9896] ? find_held_lock+0x2b/0x80 [ 339.205246][ T9896] ? trace_cap_capable+0x18d/0x200 [ 339.210386][ T9896] ? cap_capable+0xb3/0x250 [ 339.214957][ T9896] mmap_region+0x1ab/0x3f0 [ 339.219387][ T9896] do_mmap+0xd8e/0x11b0 [ 339.223655][ T9896] ? __pfx_do_mmap+0x10/0x10 [ 339.228280][ T9896] ? __pfx_down_write_killable+0x10/0x10 [ 339.233971][ T9896] vm_mmap_pgoff+0x281/0x450 [ 339.238588][ T9896] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 339.243798][ T9896] ? __pfx___do_sys_mremap+0x10/0x10 [ 339.249237][ T9896] ? __x64_sys_futex+0x1e0/0x4c0 [ 339.254362][ T9896] ? __x64_sys_futex+0x1e9/0x4c0 [ 339.259333][ T9896] ksys_mmap_pgoff+0x7d/0x5c0 [ 339.264079][ T9896] ? rcu_is_watching+0x12/0xc0 [ 339.268879][ T9896] __x64_sys_mmap+0x125/0x190 [ 339.273635][ T9896] do_syscall_64+0xcd/0x260 [ 339.278179][ T9896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.284140][ T9896] RIP: 0033:0x7fe5ae18d169 [ 339.288792][ T9896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.308737][ T9896] RSP: 002b:00007fe5aef06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 339.317239][ T9896] RAX: ffffffffffffffda RBX: 00007fe5ae3a5fa0 RCX: 00007fe5ae18d169 [ 339.325261][ T9896] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 339.333270][ T9896] RBP: 00007fe5ae20e2a0 R08: fffffffffffffffa R09: 0000000000008000 [ 339.341314][ T9896] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 339.349296][ T9896] R13: 0000000000000000 R14: 00007fe5ae3a5fa0 R15: 00007ffd6d077ce8 [ 339.357454][ T9896] [ 339.360490][ T9896] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 339.367776][ T9896] CPU: 1 UID: 0 PID: 9896 Comm: syz.4.1000 Not tainted 6.14.0-syzkaller-07318-g4fa118e5b79f #0 PREEMPT(full) [ 339.379433][ T9896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 339.389498][ T9896] Call Trace: [ 339.392785][ T9896] [ 339.395725][ T9896] dump_stack_lvl+0x3d/0x1f0 [ 339.400337][ T9896] panic+0x71c/0x800 [ 339.404260][ T9896] ? __pfx_panic+0x10/0x10 [ 339.408708][ T9896] ? show_trace_log_lvl+0x29c/0x3c0 [ 339.413929][ T9896] ? check_panic_on_warn+0x1f/0xb0 [ 339.419052][ T9896] ? page_counter_cancel+0x110/0x170 [ 339.424354][ T9896] check_panic_on_warn+0xab/0xb0 [ 339.429301][ T9896] __warn+0xf6/0x3c0 [ 339.433204][ T9896] ? __pfx_vprintk_emit+0x10/0x10 [ 339.438244][ T9896] ? page_counter_cancel+0x110/0x170 [ 339.443547][ T9896] report_bug+0x3c3/0x580 [ 339.447899][ T9896] ? page_counter_cancel+0x110/0x170 [ 339.453202][ T9896] handle_bug+0x184/0x210 [ 339.457599][ T9896] exc_invalid_op+0x17/0x50 [ 339.462167][ T9896] asm_exc_invalid_op+0x1a/0x20 [ 339.467082][ T9896] RIP: 0010:page_counter_cancel+0x110/0x170 [ 339.473004][ T9896] Code: e8 c5 8e 96 ff 45 84 ed 75 24 e8 eb 93 96 ff c6 05 e1 b6 47 0e 01 90 48 c7 c7 20 76 9d 8b 4c 89 e2 48 89 ee e8 a1 2d 56 ff 90 <0f> 0b 90 90 e8 c7 93 96 ff be 08 00 00 00 48 89 df e8 9a 5e f9 ff [ 339.492641][ T9896] RSP: 0018:ffffc90002f077d0 EFLAGS: 00010282 [ 339.498724][ T9896] RAX: 0000000000000000 RBX: ffff8881446f2440 RCX: ffffffff817ade18 [ 339.506703][ T9896] RDX: ffff888030138000 RSI: ffffffff817ade25 RDI: 0000000000000001 [ 339.514684][ T9896] RBP: fffffffffffffe00 R08: 0000000000000001 R09: 0000000000000000 [ 339.522692][ T9896] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000200 [ 339.530670][ T9896] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88806e49aa28 [ 339.538653][ T9896] ? __warn_printk+0x198/0x350 [ 339.543441][ T9896] ? __warn_printk+0x1a5/0x350 [ 339.548229][ T9896] page_counter_uncharge+0x32/0x70 [ 339.553356][ T9896] hugetlb_cgroup_uncharge_counter+0xd6/0x410 [ 339.559456][ T9896] hugetlb_vm_op_close+0x3fb/0x5b0 [ 339.564590][ T9896] __mmap_region+0x5ac/0x27c0 [ 339.569273][ T9896] ? __pfx_hugetlb_vm_op_close+0x10/0x10 [ 339.574922][ T9896] ? rcu_is_watching+0x12/0xc0 [ 339.579702][ T9896] ? __pfx___mmap_region+0x10/0x10 [ 339.584824][ T9896] ? finish_task_switch.isra.0+0x221/0xc10 [ 339.590652][ T9896] ? __schedule+0x1186/0x5de0 [ 339.595345][ T9896] ? kvm_sched_clock_read+0x11/0x20 [ 339.600576][ T9896] ? sched_clock+0x38/0x60 [ 339.605004][ T9896] ? lock_acquire+0x179/0x350 [ 339.609719][ T9896] ? find_held_lock+0x2b/0x80 [ 339.614440][ T9896] ? trace_cap_capable+0x18d/0x200 [ 339.619624][ T9896] ? cap_capable+0xb3/0x250 [ 339.624168][ T9896] mmap_region+0x1ab/0x3f0 [ 339.628599][ T9896] do_mmap+0xd8e/0x11b0 [ 339.632780][ T9896] ? __pfx_do_mmap+0x10/0x10 [ 339.637406][ T9896] ? __pfx_down_write_killable+0x10/0x10 [ 339.643067][ T9896] vm_mmap_pgoff+0x281/0x450 [ 339.647696][ T9896] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 339.652827][ T9896] ? __pfx___do_sys_mremap+0x10/0x10 [ 339.658138][ T9896] ? __x64_sys_futex+0x1e0/0x4c0 [ 339.663139][ T9896] ? __x64_sys_futex+0x1e9/0x4c0 [ 339.668099][ T9896] ksys_mmap_pgoff+0x7d/0x5c0 [ 339.672814][ T9896] ? rcu_is_watching+0x12/0xc0 [ 339.677610][ T9896] __x64_sys_mmap+0x125/0x190 [ 339.682305][ T9896] do_syscall_64+0xcd/0x260 [ 339.686828][ T9896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.692749][ T9896] RIP: 0033:0x7fe5ae18d169 [ 339.697177][ T9896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 339.716798][ T9896] RSP: 002b:00007fe5aef06038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 339.725236][ T9896] RAX: ffffffffffffffda RBX: 00007fe5ae3a5fa0 RCX: 00007fe5ae18d169 [ 339.733300][ T9896] RDX: 0000000000000003 RSI: 0000000002020009 RDI: 0000000000000000 [ 339.741279][ T9896] RBP: 00007fe5ae20e2a0 R08: fffffffffffffffa R09: 0000000000008000 [ 339.749255][ T9896] R10: 0000000000000eb1 R11: 0000000000000246 R12: 0000000000000000 [ 339.757230][ T9896] R13: 0000000000000000 R14: 00007fe5ae3a5fa0 R15: 00007ffd6d077ce8 [ 339.765220][ T9896] [ 339.768637][ T9896] Kernel Offset: disabled [ 339.773059][ T9896] Rebooting in 86400 seconds..