last executing test programs: 3m37.974093615s ago: executing program 1 (id=565): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_ENABLE_HS_LIMITATION(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x98, 0x0, 0x104, 0x70bd2d, 0x25dfdbfb, {}, "e11b01861f153eb21a01be8e7999792d5896d96c5fba824b9729f688fd08fd7d00b80c52daa3b48588bbf10925503174f4e3285b0494f79d17107c61a21a257dc16bf784c31a93e662bf82bdd4411511d82f4b85ae6f7d24bbb531545cb1df3be39471cd4e459f6a29f223b1a78a5f46626750e49eaee4a622ab19b3c3a8add6ee"}, 0x98}, 0x1, 0x0, 0x0, 0x40015}, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x8242, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB=']'], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x5, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) r3 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ILA_CMD_DEL(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x50, r3, 0x1, 0x70bd21, 0x25dfdbfb, {}, [@ILA_ATTR_LOCATOR_MATCH={0xc, 0x3, 0xd}, @ILA_ATTR_LOCATOR_MATCH={0xc}, @ILA_ATTR_IDENT_TYPE={0x5, 0x8, 0x5}, @ILA_ATTR_IFINDEX={0x8}, @ILA_ATTR_CSUM_MODE={0x5, 0x7, 0x3}, @ILA_ATTR_LOCATOR={0xc, 0x1, 0x1ff}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004004}, 0x10) write$auto_proc_clear_refs_operations_internal(r1, 0x0, 0xffffff4b) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') 3m36.715147222s ago: executing program 1 (id=570): openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), 0xffffffffffffffff) mmap$auto(0x0, 0x20006, 0xe2, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x8, 0x0) io_uring_register$auto(0x2, 0x13, &(0x7f0000000000), 0x1000) close_range$auto(0x2, 0x8000, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sg0\x00', 0x8000, 0x0) ioctl$auto(0x3, 0xc0481273, 0x38) ioctl$auto(0x3, 0x1276, r0) 3m36.154485636s ago: executing program 1 (id=573): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x6, 0x8000) (async) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="180027"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) 3m35.640553678s ago: executing program 1 (id=575): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fsopen$auto(0x0, 0x1) r0 = semctl$auto_IPC_RMID(0x4, 0x9, 0x0, 0x17d8c934) syz_open_procfs$namespace(r0, &(0x7f0000000000)='ns/cgroup\x00') close_range$auto(0x2, 0x8, 0x0) 3m34.596777875s ago: executing program 1 (id=576): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) (async) sysfs$auto(0x2, 0x10000000000002d, 0x0) sysfs$auto(0x1, 0x0, 0x8000) (async) r0 = socket(0x25, 0x1, 0x0) sendto$auto(r0, 0x0, 0x3, 0x0, 0x0, 0x3) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/system/memory/memory12/power/control\x00', 0x100, 0x0) (async) r1 = fanotify_init$auto(0x7, 0x5) ioctl$auto_SNDCTL_DSP_RESET(r1, 0x5000, &(0x7f0000000140)="9ce17e9bfa7781da47c0e680cfec70ed8407ab64da87b0") close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000002180)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0) (async) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) socket(0xa, 0x5, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC2\x00', 0x2c100, 0x0) (async) setsockopt$auto(0x3, 0x10000000084, 0x71, 0x0, 0x109) (async) ioctl$auto_SNDRV_PCM_IOCTL_RESUME(r3, 0x4147, 0x0) (async) ioctl$auto(0x3, 0x4070aea0, r3) (async) r4 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r4, &(0x7f0000000180)={{&(0x7f0000000040), 0xb5, 0x0, 0x0, &(0x7f0000000140), 0x8, 0x80000000}, 0x5}, 0x1, 0x800a) sendmsg$auto_NL80211_CMD_AUTHENTICATE(r4, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="f4042d0000", @ANYRES16=0x0, @ANYBLOB="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"], 0x4f4}, 0x1, 0x0, 0x0, 0x4000000}, 0x408d4) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000001140), r5) sendmsg$auto_WG_CMD_SET_DEVICE(r5, &(0x7f00000028c0)={0x0, 0x0, &(0x7f0000002880)={&(0x7f0000000000)={0x30, r6, 0x21, 0x70bd26, 0x25dfdbfa, {}, [@WGDEVICE_A_PEERS={0x8, 0x8, 0x0, 0x1, [@nested={0x4, 0x140}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x841}, 0x80) (async) r7 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mtdblock0\x00', 0x40, 0x0) ioctl$auto_BLKRRPART(r7, 0x125f, 0x0) 3m32.700523435s ago: executing program 1 (id=578): mmap$auto(0x0, 0x200000000004, 0x4000000000df, 0x40eb2, 0xffffffffffffffff, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) io_uring_setup$auto(0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x40000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x0) ioctl$auto(r2, 0xffffffff, r1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x40000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, 0x0, 0x8044) msync$auto(0x1ffff000, 0x18000000003ffff, 0x400000004) mmap$auto(0x0, 0x4020009, 0x2, 0xeb2, 0x3ff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x42201, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000180), 0x142, 0x0) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x840, 0xc) socket(0x1d, 0x2, 0x6) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x4b, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x56f501, 0x0) io_uring_setup$auto(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m16.800998351s ago: executing program 32 (id=578): mmap$auto(0x0, 0x200000000004, 0x4000000000df, 0x40eb2, 0xffffffffffffffff, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) io_uring_setup$auto(0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x40000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ipv6_route\x00', 0x101000, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x0) ioctl$auto(r2, 0xffffffff, r1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x40000, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, 0x0, 0x8044) msync$auto(0x1ffff000, 0x18000000003ffff, 0x400000004) mmap$auto(0x0, 0x4020009, 0x2, 0xeb2, 0x3ff, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_sw_sync_debugfs_fops_sync_debug(0xffffffffffffff9c, &(0x7f0000000080), 0x42201, 0x0) openat$auto_userio_fops_userio(0xffffffffffffff9c, &(0x7f0000000180), 0x142, 0x0) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/vm/mmap_min_addr\x00', 0x101302, 0x0) signalfd$auto(0xffffffff, 0x0, 0x8) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x840, 0xc) socket(0x1d, 0x2, 0x6) socket(0x2, 0x2, 0x1) io_uring_setup$auto(0x4b, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0x56f501, 0x0) io_uring_setup$auto(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 11.607664649s ago: executing program 0 (id=1124): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) pselect6$auto(0x1, 0x0, &(0x7f0000000240)={[0xf, 0x5e9, 0x8, 0x8e, 0xd, 0xfffffffffffff801, 0x2d44b40f, 0x831f, 0x4, 0xb911, 0x2, 0x81, 0x4, 0x6, 0x1, 0x5]}, 0x0, &(0x7f00000000c0)={0x4, 0x7}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x808011}, 0xc, &(0x7f0000000140)={&(0x7f0000001740)=ANY=[@ANYBLOB="5c1400", @ANYRES16=r1, @ANYBLOB="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"], 0x145c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0x24b7}, 0x8, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x6) r2 = socket(0x10, 0x2, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x100) write$auto(0xca, &(0x7f00000001c0)='\x04\x13\xac\x04\x00\x00\x00\x00\x00\x00\x00\x01\n\xdc\x10\x00\x00\xef\xab\xe1ME:\xab \x87|\xe0Z\x1b\x9eZ\xa8\xff\x92+\xc9\x9fs\xbf\xd8\f\xf5\xa7j\x00\x00\x00\x00\x00\x00\x00\x00\xa5V\b\xf1Ne\xc6l\xd0\xdd7\x96gf\xb2\xa0\xf2cN\x8b\x95\xeb\xf3(\x9eM-\xdc\x84N\xc3\tts%\xe9\xbf<\xf1\xdav\xe0n\x04\xb33\x97\xd5\xb4\x02\x94-\xbb\x995\x1e\xcas\x99\xbb\x8d\a0 \xfa\x87V\xeb1\xe4M%\xdd\xfd\xf6\x8d\xb4\xc7\x9b\x9d\xf5\xd9^\xcdL@\x0f\xd4\x15F,\xc1\xd1i\xa4f/{\xfa\xd5\n\xe1\x95l[\x91\xbfX\xea6J\x8a\x85\t\x00\x05m\x1e\x9b\xca\xfb\x81\x9d{\x19S\xff\xe4\xd2k\x1b/wJ&\x03+{\x84R\xa8\x92\xad\xec\x1b\xb1\xe9\xa7XUo\x93\xd5\xfb\x94\xc4\xdf\x8e\xdd\x97\xfc\x00\x13\xd6\x80g\x7fR;\x88\xf7bm\x8fW\x89\x1a\xb63\x98\xaa\xcc\xbf\x94\xbf#u\xb9', 0x2b) ioctl$auto_FIOQSIZE(r3, 0x5460, 0xffffffffffffffff) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x7, 0x1bb4}, 0x803}, 0x5, 0x10, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0xe0e01, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 10.422783043s ago: executing program 0 (id=1126): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mtd0\x00', 0x1a1c81, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x1, 0x0) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x801, 0x84) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) ioctl$auto(r1, 0x40104d14, 0x8) socket(0x2, 0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu3\x00', 0x1, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, &(0x7f0000000080)="f5c94556d7b994ee4c7d6b000087cfce41d8b86d8574badcc9a0191d856056") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) mmap$auto(0xfffffffffffffffe, 0x580f, 0x112f4a03, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) getresgid$auto(0x0, &(0x7f0000000a40), 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xe0002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x40, 0x0) write$auto(r0, &(0x7f00000000c0)=',(\x00', 0x7) setsockopt$auto(r3, 0x6, 0x800, &(0x7f0000000280)='\x00\x15\x8d\xca`\xbcgY\xd2w\xf6\xaedN\x00\x00\x00\x00\x04\x00\x00\x00*\xaaL\'\xab>q\x9e\xdd`\x84_\r\xc2\x17\xb1\xaf\xd2\f\xfd[Iy\xbb*$\xec\xca\x8b\xde\xdcV@\x04+\x00\x00\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\xc3\xa2\x1a\xf1\xdf\x12\b?Q\xec*\b`\'\xfe\xcb\xe9\xc0\xf4\x119\xf6f\v\xf7\x13\xe6\xd8\xa2\xd3\xfd\xa7', 0xffff) mmap$auto(0x0, 0x5, 0x4000000000df, 0x40eb1, 0x401, 0x9) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) r4 = epoll_create$auto(0x3e) epoll_ctl$auto(r4, 0x1, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/vhci_hcd.0/usbip_debug\x00', 0x8002, 0x0) 7.291163921s ago: executing program 3 (id=1135): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) pselect6$auto(0x1, 0x0, &(0x7f0000000240)={[0xf, 0x5e9, 0x8, 0x8e, 0xd, 0xfffffffffffff801, 0x2d44b40f, 0x831f, 0x4, 0xb911, 0x2, 0x81, 0x4, 0x6, 0x1, 0x5]}, 0x0, &(0x7f00000000c0)={0x4, 0x7}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x808011}, 0xc, &(0x7f0000000140)={&(0x7f0000001740)=ANY=[@ANYBLOB="5c140000", @ANYRES16=r1, @ANYBLOB="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"], 0x145c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x6) r2 = socket(0x10, 0x2, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x100) write$auto(0xca, &(0x7f00000001c0)='\x04\x13\xac\x04\x00\x00\x00\x00\x00\x00\x00\x01\n\xdc\x10\x00\x00\xef\xab\xe1ME:\xab \x87|\xe0Z\x1b\x9eZ\xa8\xff\x92+\xc9\x9fs\xbf\xd8\f\xf5\xa7j\x00\x00\x00\x00\x00\x00\x00\x00\xa5V\b\xf1Ne\xc6l\xd0\xdd7\x96gf\xb2\xa0\xf2cN\x8b\x95\xeb\xf3(\x9eM-\xdc\x84N\xc3\tts%\xe9\xbf<\xf1\xdav\xe0n\x04\xb33\x97\xd5\xb4\x02\x94-\xbb\x995\x1e\xcas\x99\xbb\x8d\a0 \xfa\x87V\xeb1\xe4M%\xdd\xfd\xf6\x8d\xb4\xc7\x9b\x9d\xf5\xd9^\xcdL@\x0f\xd4\x15F,\xc1\xd1i\xa4f/{\xfa\xd5\n\xe1\x95l[\x91\xbfX\xea6J\x8a\x85\t\x00\x05m\x1e\x9b\xca\xfb\x81\x9d{\x19S\xff\xe4\xd2k\x1b/wJ&\x03+{\x84R\xa8\x92\xad\xec\x1b\xb1\xe9\xa7XUo\x93\xd5\xfb\x94\xc4\xdf\x8e\xdd\x97\xfc\x00\x13\xd6\x80g\x7fR;\x88\xf7bm\x8fW\x89\x1a\xb63\x98\xaa\xcc\xbf\x94\xbf#u\xb9', 0x2b) ioctl$auto_FIOQSIZE(r3, 0x5460, 0xffffffffffffffff) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x7, 0x1bb4}, 0x803}, 0x5, 0x10, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0xe0e01, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 7.288395217s ago: executing program 0 (id=1142): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'macsec0\x00'}) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)={0xfffffffffffffc40, r1, 0x201, 0x70bd2a, 0x25dfdbfe}, 0xfffffffffffffe84}, 0x1, 0x0, 0x0, 0x6044081}, 0x480b0) 6.461638679s ago: executing program 4 (id=1137): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r0, 0x1, 0x1a, 0x0, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/mem\x00', 0x100, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x41ff, 0x3) socket(0x2c, 0x3, 0x0) setsockopt$auto(0x4, 0x0, 0x480, 0xfffffffffffffffe, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/ipfrag_high_thresh\x00', 0x2400, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/ipvlan0/regen_max_retry\x00', 0xc0202, 0x0) sendfile$auto(r2, r1, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x9, 0x8, 0xc, 0x66b, 0x4, 0x7ff}, 0x6f4) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto(0xffffffffffffffff, 0x2289, 0xbb1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) getpid() 6.436354037s ago: executing program 2 (id=1138): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r0, 0x1, 0x1a, 0x0, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/mem\x00', 0x100, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x41ff, 0x3) socket(0x2c, 0x3, 0x0) setsockopt$auto(0x4, 0x0, 0x480, 0xfffffffffffffffe, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/ipfrag_high_thresh\x00', 0x2400, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/ipvlan0/regen_max_retry\x00', 0xc0202, 0x0) sendfile$auto(r2, r1, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x9, 0x8, 0xc, 0x66b, 0x4, 0x7ff}, 0x6f4) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xc2803, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) getpid() 6.289024162s ago: executing program 0 (id=1139): socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) timerfd_create$auto(0x9, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x18, 0x4, 0x0) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20c40, 0x0) socket(0x2, 0x801, 0x6) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x121080, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42dc0, 0x1a0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8102, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty17\x00', 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptye4\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) 6.125057859s ago: executing program 3 (id=1140): r0 = socket(0x1e, 0x805, 0x0) connect$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20, 0xffffff7f}}, 0x10) 5.917563702s ago: executing program 3 (id=1141): openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0x2b, 0x1, 0x6) (async) socket(0x2b, 0x1, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x19) futex$auto(0x0, 0x8d, 0x0, 0x0, 0x0, 0x100) (async) futex$auto(0x0, 0x8d, 0x0, 0x0, 0x0, 0x100) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) 4.899044552s ago: executing program 4 (id=1143): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001280)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x2, 0x0) pwrite64$auto(r0, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x80, 0x4) (async) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f00000012c0)="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", 0x10d) 4.724513389s ago: executing program 3 (id=1144): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r0, 0x1, 0x1a, 0x0, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/mem\x00', 0x100, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x41ff, 0x3) socket(0x2c, 0x3, 0x0) setsockopt$auto(0x4, 0x0, 0x480, 0xfffffffffffffffe, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/ipfrag_high_thresh\x00', 0x2400, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/ipvlan0/regen_max_retry\x00', 0xc0202, 0x0) sendfile$auto(r2, r1, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x9, 0x8, 0xc, 0x66b, 0x4, 0x7ff}, 0x6f4) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xc2803, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) getpid() 4.550570861s ago: executing program 2 (id=1145): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getitimer$auto_ITIMER_VIRTUAL(0x1, &(0x7f0000000000)={{0x401, 0x8}, {0x9, 0xfffffffffffffe01}}) (async) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x6, 0x4, 0x10, 0x61, 0x400, 0x0, 0x1, 0x80f0c8, 0x9, "38c1d5cbcb9f6b5e511f0cd8ed068f65", 0x0, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x3ad, 0x3, 0x0, 0x3, @attach_prog_fd, 0x6, 0xffff, 0x800, 0x81, 0xd}, 0x4a) getitimer$auto_ITIMER_PROF(0x2, &(0x7f0000000040)={{0x200, 0x9}, {0x0, 0x8}}) 4.541844541s ago: executing program 4 (id=1146): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi7\x00', 0x401, 0x0) write$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, &(0x7f0000000180)="6c6ec944b1398f9972f127df0dacf1b6b5871940629ddc34f04f8100a725cf599a1342cf93776a11b0580a0e2f09af03157802ed8aa8d592f8572c2e6c00533b3ee82ce2898e3e1f4dc210d405ba8bd53e74b261a97463b519ffce7776dbae24e4449cd8a0d3b1ca9d93ddace95c243a90357622d5f55524b89ee5ddb8", 0x7d) close_range$auto(0x2, 0x8, 0x0) pipe$auto(&(0x7f00000000c0)) socket(0x1e, 0x2, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x3ff, 0x948e, 0x3, 0x15f4da0a, 0x3, 0x2, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 4.236473234s ago: executing program 2 (id=1147): bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=<r0=>0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0xffffffffffffffff, 0x9) unshare$auto(0x40000080) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) (async) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) r1 = socket(0x12, 0x4, 0x440a) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r2, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)) (async) ioctl$auto_SNDCTL_DSP_SETFMT(r2, 0xc0045005, &(0x7f0000000040)) socket(0x25, 0x5, 0x0) (async) socket(0x25, 0x5, 0x0) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) (async) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x400, 0x0) (async) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x400, 0x0) mmap$auto(0x2000000000000, 0xfffffffffffffffe, 0x8, 0x810, r0, 0x5d63) io_setup$auto(0x80002, 0x0) (async) io_setup$auto(0x80002, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x20400, 0x0) (async) r3 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(r3, 0x40084149, &(0x7f0000001080)=0x7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/usb/usbmon/9t\x00', 0xa00, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) socket(0x11, 0x80003, 0x300) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NFC_CMD_STOP_POLL(r1, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000011c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="44000000b005340aebe5fa82cc2cfe070efe7393c78775a7fbd06451a308b2d75dbbc9314b37f854d5b05ee476d92d1c76c634d55ec71ff7edaeb9bf870880443128469ecac1b937af2434186513ea1de2def6266f268232ae88a517c5deaaa2de423a78b504169c1bebb902000000604ce722008ad319166a88d492ae3a921f7fc0d05390e545cdac589a1717", @ANYRES16=0x0, @ANYBLOB="20002bbd7000fedbdf250700000005000a0006000000060011000600000005000f00ff00000008000d000900000005001000bd0000000800150000004005"], 0x44}, 0x1, 0x0, 0x0, 0x20008050}, 0x4048041) socket(0x10, 0x2, 0xc) (async) socket(0x10, 0x2, 0xc) getpeername$auto(0x3, 0x0, 0x0) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/usbmon0\x00', 0x400, 0x0) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) (async) openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/usb/usbmon/36u\x00', 0x26040, 0x0) getpriority$auto(0x5, 0x7ff) io_pgetevents$auto(0x4, 0x8, 0xa31f, 0x0, 0x0, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r4, 0x4b49, 0xffffffffffffffff) (async) ioctl$auto(r4, 0x4b49, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) 3.329643966s ago: executing program 0 (id=1148): sysfs$auto(0x6dc7, 0xee8, 0x100000000) r0 = socket(0x1e, 0x805, 0x0) connect$auto(r0, &(0x7f0000000000)=@tipc=@id={0x1e, 0x3, 0x2, {0x4e20}}, 0x10) 3.326780769s ago: executing program 4 (id=1149): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0xf, 0x3, 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x106) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vbi7\x00', 0x401, 0x0) write$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, &(0x7f0000000180)="6c6ec944b1398f9972f127df0dacf1b6b5871940629ddc34f04f8100a725cf599a1342cf93776a11b0580a0e2f09af03157802ed8aa8d592f8572c2e6c00533b3ee82ce2898e3e1f4dc210d405ba8bd53e74b261a97463b519ffce7776dbae24e4449cd8a0d3b1ca9d93ddace95c243a90357622d5f55524b89ee5ddb8", 0x7d) close_range$auto(0x2, 0x8, 0x0) pipe$auto(&(0x7f00000000c0)) socket(0x1e, 0x2, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, 0x0, 0xa2741, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x0, 0xd, 0x3ff, 0x948e, 0x3, 0x15f4da0a, 0x3, 0x2, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 3.012670735s ago: executing program 2 (id=1150): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) pselect6$auto(0x1, 0x0, &(0x7f0000000240)={[0xf, 0x5e9, 0x8, 0x8e, 0xd, 0xfffffffffffff801, 0x2d44b40f, 0x831f, 0x4, 0xb911, 0x2, 0x81, 0x4, 0x6, 0x1, 0x5]}, 0x0, &(0x7f00000000c0)={0x4, 0x7}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x808011}, 0xc, &(0x7f0000000140)={&(0x7f0000001740)=ANY=[@ANYBLOB="5c140000", @ANYRES16=r1, @ANYBLOB="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"], 0x145c}, 0x1, 0x0, 0x0, 0x4000040}, 0x40) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x4, 0x6) r2 = socket(0x10, 0x2, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x100) write$auto(0xca, &(0x7f00000001c0)='\x04\x13\xac\x04\x00\x00\x00\x00\x00\x00\x00\x01\n\xdc\x10\x00\x00\xef\xab\xe1ME:\xab \x87|\xe0Z\x1b\x9eZ\xa8\xff\x92+\xc9\x9fs\xbf\xd8\f\xf5\xa7j\x00\x00\x00\x00\x00\x00\x00\x00\xa5V\b\xf1Ne\xc6l\xd0\xdd7\x96gf\xb2\xa0\xf2cN\x8b\x95\xeb\xf3(\x9eM-\xdc\x84N\xc3\tts%\xe9\xbf<\xf1\xdav\xe0n\x04\xb33\x97\xd5\xb4\x02\x94-\xbb\x995\x1e\xcas\x99\xbb\x8d\a0 \xfa\x87V\xeb1\xe4M%\xdd\xfd\xf6\x8d\xb4\xc7\x9b\x9d\xf5\xd9^\xcdL@\x0f\xd4\x15F,\xc1\xd1i\xa4f/{\xfa\xd5\n\xe1\x95l[\x91\xbfX\xea6J\x8a\x85\t\x00\x05m\x1e\x9b\xca\xfb\x81\x9d{\x19S\xff\xe4\xd2k\x1b/wJ&\x03+{\x84R\xa8\x92\xad\xec\x1b\xb1\xe9\xa7XUo\x93\xd5\xfb\x94\xc4\xdf\x8e\xdd\x97\xfc\x00\x13\xd6\x80g\x7fR;\x88\xf7bm\x8fW\x89\x1a\xb63\x98\xaa\xcc\xbf\x94\xbf#u\xb9', 0x2b) ioctl$auto_FIOQSIZE(r3, 0x5460, 0xffffffffffffffff) recvmmsg$auto(r2, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x7, 0x1bb4}, 0x803}, 0x5, 0x10, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/fb0\x00', 0xe0e01, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) 2.135587079s ago: executing program 0 (id=1151): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r0, 0x1, 0x1a, 0x0, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/mem\x00', 0x100, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x41ff, 0x3) socket(0x2c, 0x3, 0x0) setsockopt$auto(0x4, 0x0, 0x480, 0xfffffffffffffffe, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/ipfrag_high_thresh\x00', 0x2400, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/ipvlan0/regen_max_retry\x00', 0xc0202, 0x0) sendfile$auto(r2, r1, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x9, 0x8, 0xc, 0x66b, 0x4, 0x7ff}, 0x6f4) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r3 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0xc2803, 0x0) ioctl$auto(r3, 0x2289, 0xbb1) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) getpid() 1.864201473s ago: executing program 2 (id=1152): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x2b, 0x1, 0x1) getsockopt$auto(r0, 0x1, 0x1a, 0x0, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/mem\x00', 0x100, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x2, 0x2, &(0x7f0000002100)=0x4, 0x7, 0x0) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x41ff, 0x3) socket(0x2c, 0x3, 0x0) setsockopt$auto(0x4, 0x0, 0x480, 0xfffffffffffffffe, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/ipfrag_high_thresh\x00', 0x2400, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/ipvlan0/regen_max_retry\x00', 0xc0202, 0x0) sendfile$auto(r2, r1, 0x0, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0x4, 0x4, 0x9, 0x8, 0xc, 0x66b, 0x4, 0x7ff}, 0x6f4) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) ioctl$auto(0xffffffffffffffff, 0x2289, 0xbb1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) getpid() 1.39951299s ago: executing program 3 (id=1153): r0 = socket(0x10, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x800000000000df, 0xeb1, 0xa, 0x8000) getpeername$auto(0x3, 0x0, 0x0) setsockopt$auto(0x4, 0x1, 0xc, 0x0, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYBLOB='^\x00\''], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) read$auto(r0, &(0x7f0000000040)='\x00', 0x10001) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004c18}, 0x810) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'team0\x00', <r3=>0x0}) bind$auto(r2, &(0x7f0000000140)=@xdp={0x2c, 0x4, r3, 0x13}, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01202cbd7000fbdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40000}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='H'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x26}, 0x7}, 0x3, 0x0) 1.294765587s ago: executing program 4 (id=1154): socketcall$auto_SYS_RECV(0xa, &(0x7f0000000080)=0x9) (async) socketcall$auto_SYS_RECV(0xa, &(0x7f0000000080)=0x9) mmap$auto(0x0, 0xffffffff80000003, 0x66, 0x18, 0xffffffffffffffff, 0x1006) socket(0xf, 0x6, 0x4de) (async) socket(0xf, 0x6, 0x4de) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x400000000000, 0x8, 0xe0, 0x3735800000000010, 0x2, 0x8000) uname$auto(0x0) (async) uname$auto(0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2, 0x6, 0x0) listen$auto(r0, 0x81) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0xc040ff0b, 0xffffffffffffffff) (async) ioctl$auto(0x3, 0xc040ff0b, 0xffffffffffffffff) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r1 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto_EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) (async) ioctl$auto_EVIOCGKEYCODE_V2(r1, 0x80284504, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(0x0, 0x261c2, 0xb2) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) ioctl$auto_UI_SET_LEDBIT(0xffffffffffffffff, 0x40045569, &(0x7f0000000000)=0x1cac) openat$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) 824.613882ms ago: executing program 4 (id=1155): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) memfd_create$auto(0x0, 0x9) (async) write$auto(0x3, 0x0, 0xfffffdef) (async) finit_module$auto(0x3, 0xfffffffffffffffe, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000140)={0x34, r1, 0x23, 0x70bd27, 0x25dfdbfc, {}, [@MACSEC_ATTR_SA_CONFIG={0x14, 0x3, 0x0, 0x1, [@nested={0x5, 0x1, 0x0, 0x1, [@generic="03"]}, @nested={0x8, 0x140, 0x0, 0x1, [@nested={0x4, 0x127}]}]}, @MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) (async, rerun: 32) close_range$auto(0x6, 0xeffff000, 0x6) (rerun: 32) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) (async) r3 = socket(0x2, 0x801, 0x106) close_range$auto(0x2, 0x8, 0x0) r4 = fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x801, 0x100) (async, rerun: 64) connect$auto(0x3, &(0x7f00000000c0), 0x55) (rerun: 64) setsockopt$auto(r3, 0x6, 0x3, 0x0, 0xa1) (async, rerun: 32) ioctl$auto_SNDCTL_DSP_SPEED(r4, 0xc0045002, &(0x7f0000000040)) (async, rerun: 32) ppoll$auto(&(0x7f0000000000)={<r5=>r2, 0x40}, 0x2, 0x0, 0x0, 0x8) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r5, &(0x7f0000000200)=""/238, 0xee) ioctl$auto_SNDCTL_DSP_SYNC(r2, 0x5001, 0xfffffffffffffffc) close_range$auto(0x2, 0x8, 0x0) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)={0x3c, r7, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@nested={0x8, 0x17, 0x0, 0x1, [@nested={0x4, 0x1}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc000) (async, rerun: 64) open(0x0, 0x22240, 0x55) (async, rerun: 64) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto(0xffffffffffffffff, &(0x7f0000000000)='-\x00', 0x2fb) 634.379808ms ago: executing program 3 (id=1156): r0 = open(&(0x7f0000000000)='./cgroup\x00', 0x0, 0x64) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) read$auto(r1, 0x0, 0x1f40) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) openat$auto_ucma_fops_ucma(0xffffffffffffff9c, 0x0, 0x101002, 0x0) pidfd_open$auto(0xffffffffffffffff, 0x0) getdents64$auto(r0, &(0x7f0000000040)={0x1d6c, 0x1000000000, 0x2, 0x25}, 0x7f) shmget$auto(0x100000000, 0x3, 0x79e56dc9) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYRESOCT, @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030004020000060007000080000008000200", @ANYRES32=0x0, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="08000a0003", @ANYRES32=r2], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = getpgid$auto(0x0) syz_open_procfs$namespace(r3, &(0x7f0000000280)='ns/mnt\x00') sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) mmap$auto(0x7fff, 0x400008, 0xda, 0x9b72, 0x2, 0x480000000008001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) setsockopt$auto_SO_DETACH_FILTER(r4, 0x8000, 0x1b, &(0x7f0000000300)='()\r\'\x00', 0x5) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0x4) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x4, 0x400020009, 0x10000000000df, 0x13, 0x8000000401, 0x6) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) 0s ago: executing program 2 (id=1157): socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) timerfd_create$auto(0x9, 0x0) semctl$auto(0x1ff, 0x2, 0x13, 0x4) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x18, 0x4, 0x0) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20c40, 0x0) socket(0x2, 0x801, 0x6) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x121080, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42dc0, 0x1a0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8102, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty17\x00', 0x0, 0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptye4\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x6) kernel console output (not intermixed with test programs): 0) entered blocking state [ 91.968488][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.983571][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.990751][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.014086][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.021328][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.044855][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.113251][ T3532] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.120438][ T3532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.159659][ T3532] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.166960][ T3532] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.267421][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.376179][ T5839] veth0_vlan: entered promiscuous mode [ 92.412310][ T5839] veth1_vlan: entered promiscuous mode [ 92.539137][ T5839] veth0_macvtap: entered promiscuous mode [ 92.579330][ T5839] veth1_macvtap: entered promiscuous mode [ 92.638543][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.685545][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.715731][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.729011][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.738296][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.747993][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.757209][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.778598][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.821715][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.877009][ T5852] Bluetooth: hci1: command tx timeout [ 92.956871][ T5852] Bluetooth: hci0: command tx timeout [ 92.963774][ T5835] Bluetooth: hci2: command tx timeout [ 92.966312][ T5842] Bluetooth: hci3: command tx timeout [ 93.024552][ T5847] veth0_vlan: entered promiscuous mode [ 93.049495][ T5834] veth0_vlan: entered promiscuous mode [ 93.082115][ T5838] veth0_vlan: entered promiscuous mode [ 93.098103][ T5834] veth1_vlan: entered promiscuous mode [ 93.111659][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.134061][ T5838] veth1_vlan: entered promiscuous mode [ 93.145971][ T5847] veth1_vlan: entered promiscuous mode [ 93.152016][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.233870][ T5834] veth0_macvtap: entered promiscuous mode [ 93.263195][ T5834] veth1_macvtap: entered promiscuous mode [ 93.282105][ T1149] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.284004][ T5847] veth0_macvtap: entered promiscuous mode [ 93.307880][ T1149] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.332065][ T5838] veth0_macvtap: entered promiscuous mode [ 93.342478][ T5847] veth1_macvtap: entered promiscuous mode [ 93.382625][ T5838] veth1_macvtap: entered promiscuous mode [ 93.418712][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.435695][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.458489][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.495443][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.508097][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.528256][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.539192][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.555121][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.574461][ T5839] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.601967][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.623345][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.648295][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.674383][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.685741][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 93.697202][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.708919][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.728327][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.739267][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.751637][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.768881][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.780251][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.791242][ T5847] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.802216][ T5847] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.813815][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.835789][ T5834] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.845392][ T5834] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.854347][ T5834] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.863222][ T5834] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.877290][ T5847] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.892085][ T5847] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.901315][ T5847] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.913855][ T5847] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.930798][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.941611][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.952013][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.962497][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.972403][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.983044][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.994649][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.014674][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.037087][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.045886][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.055213][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.199723][ T1156] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.213102][ T1156] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.262812][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.271206][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.340951][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.351620][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.390135][ T1149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.416429][ T1149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.500965][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.510993][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.664947][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.691989][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.957830][ T5842] Bluetooth: hci1: command tx timeout [ 95.022825][ T5919] FAULT_INJECTION: forcing a failure. [ 95.022825][ T5919] name failslab, interval 1, probability 0, space 0, times 1 [ 95.036518][ T5842] Bluetooth: hci3: command tx timeout [ 95.046449][ T5842] Bluetooth: hci2: command tx timeout [ 95.051933][ T5842] Bluetooth: hci0: command tx timeout [ 95.078491][ T5922] input: isc as /devices/virtual/input/input5 [ 95.088091][ T5919] CPU: 1 UID: 0 PID: 5919 Comm: syz.2.6 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 95.088134][ T5919] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.088159][ T5919] Call Trace: [ 95.088168][ T5919] <TASK> [ 95.088185][ T5919] dump_stack_lvl+0x16c/0x1f0 [ 95.088257][ T5919] should_fail_ex+0x50a/0x650 [ 95.088306][ T5919] ? fs_reclaim_acquire+0xae/0x150 [ 95.088352][ T5919] should_failslab+0xc2/0x120 [ 95.088387][ T5919] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 95.088443][ T5919] ? security_inode_alloc+0x3b/0x2b0 [ 95.088504][ T5919] security_inode_alloc+0x3b/0x2b0 [ 95.088559][ T5919] inode_init_always_gfp+0xce4/0x1030 [ 95.088617][ T5919] alloc_inode+0x86/0x240 [ 95.088656][ T5919] path_from_stashed+0x2c0/0xb00 [ 95.088708][ T5919] ? alloc_fd+0x420/0x760 [ 95.088757][ T5919] ? __pfx_path_from_stashed+0x10/0x10 [ 95.088810][ T5919] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 95.088843][ T5919] ? lock_acquire+0x2f/0xb0 [ 95.088895][ T5919] pidfs_alloc_file+0xf9/0x320 [ 95.088939][ T5919] ? __pfx_pidfs_alloc_file+0x10/0x10 [ 95.088994][ T5919] copy_process+0x3994/0x8c30 [ 95.089027][ T5919] ? find_held_lock+0x2d/0x110 [ 95.089068][ T5919] ? try_to_wake_up+0x8f0/0x1490 [ 95.089127][ T5919] ? __pfx_copy_process+0x10/0x10 [ 95.089160][ T5919] ? try_to_wake_up+0x953/0x1490 [ 95.089210][ T5919] ? __pfx_try_to_wake_up+0x10/0x10 [ 95.089263][ T5919] ? __pfx_lock_release+0x10/0x10 [ 95.089312][ T5919] ? plist_check_head+0xa3/0x150 [ 95.089352][ T5919] ? wake_up_q+0xb0/0x160 [ 95.089394][ T5919] ? do_raw_spin_unlock+0x172/0x230 [ 95.089431][ T5919] kernel_clone+0xfd/0x960 [ 95.089461][ T5919] ? __pfx_futex_wake+0x10/0x10 [ 95.089508][ T5919] ? __pfx_kernel_clone+0x10/0x10 [ 95.089559][ T5919] __do_sys_clone+0xcf/0x120 [ 95.089599][ T5919] ? __pfx___do_sys_clone+0x10/0x10 [ 95.089633][ T5919] ? __pfx___might_resched+0x10/0x10 [ 95.089706][ T5919] ? rcu_is_watching+0x12/0xc0 [ 95.089753][ T5919] do_syscall_64+0xcd/0x250 [ 95.089804][ T5919] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.089849][ T5919] RIP: 0033:0x7f0e7038d169 [ 95.089882][ T5919] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.089923][ T5919] RSP: 002b:00007f0e711f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 95.089955][ T5919] RAX: ffffffffffffffda RBX: 00007f0e705a5fa0 RCX: 00007f0e7038d169 [ 95.089977][ T5919] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000020003b42 [ 95.089996][ T5919] RBP: 00007f0e7040e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 95.090014][ T5919] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 95.090032][ T5919] R13: 0000000000000000 R14: 00007f0e705a5fa0 R15: 00007ffee8de0458 [ 95.090068][ T5919] </TASK> [ 95.148035][ T5924] netlink: 326 bytes leftover after parsing attributes in process `syz.1.2'. [ 95.403866][ T5912] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.415198][ T5928] random: crng reseeded on system resumption [ 95.426038][ T5924] Zero length message leads to an empty skb [ 95.471365][ T5912] FAULT_INJECTION: forcing a failure. [ 95.471365][ T5912] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 95.581855][ T5912] CPU: 1 UID: 0 PID: 5912 Comm: syz.3.4 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 95.581903][ T5912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 95.581921][ T5912] Call Trace: [ 95.581931][ T5912] <TASK> [ 95.581943][ T5912] dump_stack_lvl+0x16c/0x1f0 [ 95.581998][ T5912] should_fail_ex+0x50a/0x650 [ 95.582043][ T5912] ? __pfx___might_resched+0x10/0x10 [ 95.582101][ T5912] should_fail_alloc_page+0xe7/0x130 [ 95.582135][ T5912] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 95.582186][ T5912] ? kernel_text_address+0x8d/0x100 [ 95.582233][ T5912] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 95.582280][ T5912] ? hlock_class+0x4e/0x130 [ 95.582313][ T5912] ? mark_lock+0xb5/0xc60 [ 95.582354][ T5912] ? hlock_class+0x4e/0x130 [ 95.582383][ T5912] ? mark_lock+0xb5/0xc60 [ 95.582420][ T5912] ? __pfx_mark_lock+0x10/0x10 [ 95.582463][ T5912] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 95.582513][ T5912] ? __pfx_mark_lock+0x10/0x10 [ 95.582563][ T5912] ? hlock_class+0x4e/0x130 [ 95.582596][ T5912] ? hlock_class+0x4e/0x130 [ 95.582624][ T5912] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 95.582674][ T5912] ? policy_nodemask+0xea/0x4e0 [ 95.582706][ T5912] alloc_pages_mpol+0x1fc/0x540 [ 95.582737][ T5912] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 95.582763][ T5912] ? __pfx___lock_acquire+0x10/0x10 [ 95.582815][ T5912] alloc_pages_noprof+0x131/0x390 [ 95.582845][ T5912] pte_alloc_one+0x20/0x390 [ 95.582891][ T5912] __pte_alloc+0x6e/0x3d0 [ 95.582925][ T5912] ? __pfx___pte_alloc+0x10/0x10 [ 95.582960][ T5912] ? __pfx_lock_release+0x10/0x10 [ 95.583002][ T5912] ? do_raw_spin_lock+0x12d/0x2c0 [ 95.583034][ T5912] do_pte_missing+0x2828/0x3e10 [ 95.583083][ T5912] ? _raw_spin_unlock+0x28/0x50 [ 95.583118][ T5912] ? __pmd_alloc+0x3c2/0x870 [ 95.583160][ T5912] __handle_mm_fault+0x103c/0x2a40 [ 95.583220][ T5912] ? __pfx___handle_mm_fault+0x10/0x10 [ 95.583297][ T5912] handle_mm_fault+0x3fa/0xaa0 [ 95.583352][ T5912] __get_user_pages+0x773/0x36f0 [ 95.583408][ T5912] ? __pfx_mt_find+0x10/0x10 [ 95.583453][ T5912] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 95.583496][ T5912] ? __pfx___get_user_pages+0x10/0x10 [ 95.583542][ T5912] ? __mm_populate+0x21d/0x380 [ 95.583593][ T5912] populate_vma_page_range+0x27f/0x3a0 [ 95.583641][ T5912] ? __pfx_populate_vma_page_range+0x10/0x10 [ 95.583685][ T5912] ? __pfx_find_vma_intersection+0x10/0x10 [ 95.583724][ T5912] ? vm_mmap_pgoff+0x31a/0x440 [ 95.583771][ T5912] __mm_populate+0x1d6/0x380 [ 95.583817][ T5912] ? __pfx___mm_populate+0x10/0x10 [ 95.583862][ T5912] ? up_write+0x1b2/0x520 [ 95.583911][ T5912] vm_mmap_pgoff+0x352/0x440 [ 95.583958][ T5912] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 95.584008][ T5912] ? native_tss_update_io_bitmap+0x3cc/0x730 [ 95.584051][ T5912] ? __x64_sys_futex+0x1ea/0x4c0 [ 95.584094][ T5912] ksys_mmap_pgoff+0x7d/0x5c0 [ 95.584130][ T5912] ? rcu_is_watching+0x12/0xc0 [ 95.584166][ T5912] __x64_sys_mmap+0x125/0x190 [ 95.584221][ T5912] do_syscall_64+0xcd/0x250 [ 95.584289][ T5912] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.584335][ T5912] RIP: 0033:0x7f52c178d169 [ 95.584361][ T5912] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 95.584392][ T5912] RSP: 002b:00007f52c25e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 95.584424][ T5912] RAX: ffffffffffffffda RBX: 00007f52c19a5fa0 RCX: 00007f52c178d169 [ 95.584444][ T5912] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 95.584462][ T5912] RBP: 00007f52c180e2a0 R08: 0000000000000002 R09: 0000000000008000 [ 95.584482][ T5912] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 95.584502][ T5912] R13: 0000000000000000 R14: 00007f52c19a5fa0 R15: 00007ffd728fc438 [ 95.584542][ T5912] </TASK> [ 97.038666][ T5842] Bluetooth: hci1: command tx timeout [ 97.119295][ T5842] Bluetooth: hci0: command tx timeout [ 97.124780][ T5842] Bluetooth: hci3: command tx timeout [ 97.131510][ T5835] Bluetooth: hci2: command tx timeout [ 97.540263][ T976] cfg80211: failed to load regulatory.db [ 98.199235][ T5954] netlink: 346 bytes leftover after parsing attributes in process `syz.2.13'. [ 98.282196][ T5954] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.563527][ T5963] block2mtd: illegal erase size [ 99.008073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #342!!! [ 99.810681][ T5984] syz.2.19 uses obsolete (PF_INET,SOCK_PACKET) [ 99.892204][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a3bd400: rx timeout, send abort [ 99.916671][ T5984] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 99.964151][ T5984] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 100.060701][ T5984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.19'. [ 100.118710][ T5970] kexec: Could not allocate control_code_buffer [ 100.231040][ T5984] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 100.405095][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802a3bd400: abort rx timeout. Force session deactivation [ 101.915945][ T6011] capability: warning: `syz.2.25' uses deprecated v2 capabilities in a way that may be insecure [ 101.993286][ T6014] netlink: 544 bytes leftover after parsing attributes in process `syz.1.26'. [ 103.876230][ T30] audit: type=1800 audit(6037890075.228:2): pid=6030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.29" name="features" dev="configfs" ino=8519 res=0 errno=0 [ 104.051303][ T6029] FAULT_INJECTION: forcing a failure. [ 104.051303][ T6029] name failslab, interval 1, probability 0, space 0, times 0 [ 104.107959][ T6029] CPU: 1 UID: 0 PID: 6029 Comm: syz.0.31 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 104.108008][ T6029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 104.108029][ T6029] Call Trace: [ 104.108040][ T6029] <TASK> [ 104.108052][ T6029] dump_stack_lvl+0x16c/0x1f0 [ 104.108110][ T6029] should_fail_ex+0x50a/0x650 [ 104.108157][ T6029] ? fs_reclaim_acquire+0xae/0x150 [ 104.108233][ T6029] should_failslab+0xc2/0x120 [ 104.108268][ T6029] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 104.108331][ T6029] ? kstrdup_const+0x63/0x80 [ 104.108376][ T6029] kstrdup+0x53/0x100 [ 104.108431][ T6029] kstrdup_const+0x63/0x80 [ 104.108470][ T6029] alloc_vfsmnt+0xdf/0x6f0 [ 104.108509][ T6029] clone_mnt+0x6d/0xf90 [ 104.108559][ T6029] copy_tree+0x39e/0x9c0 [ 104.108620][ T6029] copy_mnt_ns+0x1b5/0xa70 [ 104.108650][ T6029] ? kmem_cache_alloc_noprof+0x279/0x3d0 [ 104.108700][ T6029] ? create_new_namespaces+0x30/0xad0 [ 104.108760][ T6029] create_new_namespaces+0xd3/0xad0 [ 104.108811][ T6029] ? bpf_lsm_capable+0x9/0x10 [ 104.108845][ T6029] ? security_capable+0x7e/0x260 [ 104.108897][ T6029] copy_namespaces+0x468/0x560 [ 104.108951][ T6029] copy_process+0x29fc/0x8c30 [ 104.109012][ T6029] ? __pfx_copy_process+0x10/0x10 [ 104.109040][ T6029] ? __pfx___futex_wait+0x10/0x10 [ 104.109122][ T6029] ? 0xffffffffff600000 [ 104.109145][ T6029] kernel_clone+0xfd/0x960 [ 104.109186][ T6029] ? __pfx_kernel_clone+0x10/0x10 [ 104.109226][ T6029] ? __might_fault+0xe3/0x190 [ 104.109268][ T6029] ? 0xffffffffff600000 [ 104.109292][ T6029] ? 0xffffffffff600000 [ 104.109315][ T6029] __do_sys_clone+0xcf/0x120 [ 104.109346][ T6029] ? __pfx___do_sys_clone+0x10/0x10 [ 104.109382][ T6029] ? __sys_connect+0xf2/0x170 [ 104.109440][ T6029] ? 0xffffffffff600000 [ 104.109464][ T6029] ? 0xffffffffff600000 [ 104.109487][ T6029] ? 0xffffffffff600000 [ 104.109526][ T6029] ? rcu_is_watching+0x12/0xc0 [ 104.109578][ T6029] do_syscall_64+0xcd/0x250 [ 104.109628][ T6029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.109675][ T6029] RIP: 0033:0x7fd140f8d169 [ 104.109700][ T6029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.109731][ T6029] RSP: 002b:00007fd141d2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 104.109764][ T6029] RAX: ffffffffffffffda RBX: 00007fd1411a5fa0 RCX: 00007fd140f8d169 [ 104.109785][ T6029] RDX: ffffffffff600000 RSI: 0000000000000002 RDI: 000fffffffe22000 [ 104.109805][ T6029] RBP: 00007fd14100e2a0 R08: 00000800fffffffc R09: 0000000000000000 [ 104.109825][ T6029] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 104.109845][ T6029] R13: 0000000000000000 R14: 00007fd1411a5fa0 R15: 00007fff59ed6528 [ 104.109874][ T6029] ? 0xffffffffff600000 [ 104.109901][ T6029] ? 0xffffffffff600000 [ 104.109932][ T6029] </TASK> [ 105.473847][ T6051] netlink: 350 bytes leftover after parsing attributes in process `syz.2.35'. [ 106.586313][ T6067] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 108.495474][ T6087] FAULT_INJECTION: forcing a failure. [ 108.495474][ T6087] name failslab, interval 1, probability 0, space 0, times 0 [ 108.508385][ T6087] CPU: 1 UID: 0 PID: 6087 Comm: syz.3.45 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 108.508427][ T6087] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 108.508444][ T6087] Call Trace: [ 108.508453][ T6087] <TASK> [ 108.508465][ T6087] dump_stack_lvl+0x16c/0x1f0 [ 108.508519][ T6087] should_fail_ex+0x50a/0x650 [ 108.508565][ T6087] ? fs_reclaim_acquire+0xae/0x150 [ 108.508611][ T6087] should_failslab+0xc2/0x120 [ 108.508643][ T6087] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 108.508700][ T6087] ? kstrdup_const+0x63/0x80 [ 108.508745][ T6087] kstrdup+0x53/0x100 [ 108.508785][ T6087] kstrdup_const+0x63/0x80 [ 108.508824][ T6087] alloc_vfsmnt+0xdf/0x6f0 [ 108.508861][ T6087] clone_mnt+0x6d/0xf90 [ 108.508909][ T6087] copy_tree+0x39e/0x9c0 [ 108.508969][ T6087] copy_mnt_ns+0x1b5/0xa70 [ 108.508999][ T6087] ? kmem_cache_alloc_noprof+0x279/0x3d0 [ 108.509055][ T6087] ? create_new_namespaces+0x30/0xad0 [ 108.509110][ T6087] create_new_namespaces+0xd3/0xad0 [ 108.509154][ T6087] ? bpf_lsm_capable+0x9/0x10 [ 108.509182][ T6087] ? security_capable+0x7e/0x260 [ 108.509226][ T6087] copy_namespaces+0x468/0x560 [ 108.509278][ T6087] copy_process+0x29fc/0x8c30 [ 108.509338][ T6087] ? __pfx_copy_process+0x10/0x10 [ 108.509365][ T6087] ? __pfx___futex_wait+0x10/0x10 [ 108.509471][ T6087] ? 0xffffffffff600000 [ 108.509495][ T6087] kernel_clone+0xfd/0x960 [ 108.509529][ T6087] ? __pfx_kernel_clone+0x10/0x10 [ 108.509569][ T6087] ? __might_fault+0xe3/0x190 [ 108.509610][ T6087] ? 0xffffffffff600000 [ 108.509634][ T6087] ? 0xffffffffff600000 [ 108.509656][ T6087] __do_sys_clone+0xcf/0x120 [ 108.509687][ T6087] ? __pfx___do_sys_clone+0x10/0x10 [ 108.509718][ T6087] ? __sys_connect+0xf2/0x170 [ 108.509757][ T6087] ? 0xffffffffff600000 [ 108.509779][ T6087] ? 0xffffffffff600000 [ 108.509800][ T6087] ? 0xffffffffff600000 [ 108.509837][ T6087] ? rcu_is_watching+0x12/0xc0 [ 108.509885][ T6087] do_syscall_64+0xcd/0x250 [ 108.509937][ T6087] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.509987][ T6087] RIP: 0033:0x7f52c178d169 [ 108.510013][ T6087] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.510051][ T6087] RSP: 002b:00007f52c25e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 108.510080][ T6087] RAX: ffffffffffffffda RBX: 00007f52c19a5fa0 RCX: 00007f52c178d169 [ 108.510100][ T6087] RDX: ffffffffff600000 RSI: 0000000000000002 RDI: 000fffffffe22000 [ 108.510119][ T6087] RBP: 00007f52c180e2a0 R08: 00000800fffffffc R09: 0000000000000000 [ 108.510138][ T6087] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 108.510158][ T6087] R13: 0000000000000000 R14: 00007f52c19a5fa0 R15: 00007ffd728fc438 [ 108.510186][ T6087] ? 0xffffffffff600000 [ 108.510212][ T6087] ? 0xffffffffff600000 [ 108.510241][ T6087] </TASK> [ 109.533029][ T30] audit: type=1800 audit(6037890206.888:3): pid=6097 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.46" name="features" dev="configfs" ino=7957 res=0 errno=0 [ 109.730175][ T6100] netlink: 544 bytes leftover after parsing attributes in process `syz.3.48'. [ 113.900152][ T6145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.59'. [ 113.916344][ T6145] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 113.972317][ T6145] netlink: 28 bytes leftover after parsing attributes in process `syz.1.59'. [ 114.075015][ T6145] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 114.426779][ T30] audit: type=1800 audit(6037890337.742:4): pid=6153 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.62" name="features" dev="configfs" ino=8064 res=0 errno=0 [ 116.659669][ T6177] FAULT_INJECTION: forcing a failure. [ 116.659669][ T6177] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 116.696562][ T6177] CPU: 1 UID: 0 PID: 6177 Comm: syz.3.66 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 116.696604][ T6177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 116.696620][ T6177] Call Trace: [ 116.696628][ T6177] <TASK> [ 116.696639][ T6177] dump_stack_lvl+0x16c/0x1f0 [ 116.696687][ T6177] should_fail_ex+0x50a/0x650 [ 116.696745][ T6177] _copy_from_user+0x2e/0xd0 [ 116.696789][ T6177] move_addr_to_kernel+0x74/0x160 [ 116.696823][ T6177] __sys_connect+0xb0/0x170 [ 116.696855][ T6177] ? __pfx___sys_connect+0x10/0x10 [ 116.696884][ T6177] ? __fget_files+0x20e/0x3b0 [ 116.696936][ T6177] ? __pfx_ksys_write+0x10/0x10 [ 116.696983][ T6177] __x64_sys_connect+0x72/0xb0 [ 116.697014][ T6177] ? lockdep_hardirqs_on+0x7c/0x110 [ 116.697052][ T6177] do_syscall_64+0xcd/0x250 [ 116.697100][ T6177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.697141][ T6177] RIP: 0033:0x7f52c178d169 [ 116.697162][ T6177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.697188][ T6177] RSP: 002b:00007f52c25a5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 116.697215][ T6177] RAX: ffffffffffffffda RBX: 00007f52c19a6160 RCX: 00007f52c178d169 [ 116.697232][ T6177] RDX: 0000000000000055 RSI: 0000000000000000 RDI: 0000000000000003 [ 116.697248][ T6177] RBP: 00007f52c25a5090 R08: 0000000000000000 R09: 0000000000000000 [ 116.697264][ T6177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 116.697280][ T6177] R13: 0000000000000000 R14: 00007f52c19a6160 R15: 00007ffd728fc438 [ 116.697312][ T6177] </TASK> [ 117.792155][ T6197] WARNING! power/level is deprecated; use power/control instead [ 118.153743][ T6210] random: crng reseeded on system resumption [ 119.902849][ T6239] FAULT_INJECTION: forcing a failure. [ 119.902849][ T6239] name failslab, interval 1, probability 0, space 0, times 0 [ 119.970260][ T6239] CPU: 1 UID: 0 PID: 6239 Comm: syz.0.78 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 119.970308][ T6239] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 119.970332][ T6239] Call Trace: [ 119.970341][ T6239] <TASK> [ 119.970354][ T6239] dump_stack_lvl+0x16c/0x1f0 [ 119.970406][ T6239] should_fail_ex+0x50a/0x650 [ 119.970451][ T6239] ? fs_reclaim_acquire+0xae/0x150 [ 119.970492][ T6239] should_failslab+0xc2/0x120 [ 119.970524][ T6239] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 119.970571][ T6239] ? rcu_is_watching+0x12/0xc0 [ 119.970604][ T6239] ? __alloc_skb+0x2b1/0x380 [ 119.970662][ T6239] __alloc_skb+0x2b1/0x380 [ 119.970701][ T6239] ? __pfx___alloc_skb+0x10/0x10 [ 119.970738][ T6239] ? __pfx_tcp_set_state+0x10/0x10 [ 119.970793][ T6239] tcp_send_active_reset+0x8b/0x840 [ 119.970825][ T6239] ? mark_lock+0xb5/0xc60 [ 119.970871][ T6239] tcp_disconnect+0x15ab/0x1f50 [ 119.970908][ T6239] __inet_stream_connect+0x245/0x1020 [ 119.970953][ T6239] ? find_held_lock+0x2d/0x110 [ 119.970990][ T6239] ? __pfx___inet_stream_connect+0x10/0x10 [ 119.971045][ T6239] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 119.971078][ T6239] ? __pfx_inet_stream_connect+0x10/0x10 [ 119.971121][ T6239] ? mark_held_locks+0x9f/0xe0 [ 119.971165][ T6239] ? __local_bh_enable_ip+0xa4/0x120 [ 119.971219][ T6239] ? __pfx_inet_stream_connect+0x10/0x10 [ 119.971261][ T6239] inet_stream_connect+0x57/0xa0 [ 119.971307][ T6239] __sys_connect_file+0x13e/0x1a0 [ 119.971346][ T6239] __sys_connect+0x14f/0x170 [ 119.971382][ T6239] ? __pfx___sys_connect+0x10/0x10 [ 119.971417][ T6239] ? __fget_files+0x20e/0x3b0 [ 119.971477][ T6239] ? __pfx_ksys_write+0x10/0x10 [ 119.971527][ T6239] __x64_sys_connect+0x72/0xb0 [ 119.971561][ T6239] ? lockdep_hardirqs_on+0x7c/0x110 [ 119.971602][ T6239] do_syscall_64+0xcd/0x250 [ 119.971648][ T6239] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.971691][ T6239] RIP: 0033:0x7fd140f8d169 [ 119.971716][ T6239] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 119.971743][ T6239] RSP: 002b:00007fd13edf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 119.971772][ T6239] RAX: ffffffffffffffda RBX: 00007fd1411a6160 RCX: 00007fd140f8d169 [ 119.971791][ T6239] RDX: 0000000000000055 RSI: 0000000000000000 RDI: 0000000000000003 [ 119.971807][ T6239] RBP: 00007fd13edf6090 R08: 0000000000000000 R09: 0000000000000000 [ 119.971824][ T6239] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.971841][ T6239] R13: 0000000000000000 R14: 00007fd1411a6160 R15: 00007fff59ed6528 [ 119.971875][ T6239] </TASK> [ 124.135759][ T6328] netlink: 342 bytes leftover after parsing attributes in process `syz.3.100'. [ 124.147274][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.155804][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.164604][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.218905][ T6328] netlink: 4 bytes leftover after parsing attributes in process `syz.3.100'. [ 124.436589][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 124.844100][ T6336] block2mtd: parameter too long [ 125.529010][ T6345] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.552174][ T6345] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 125.640636][ T6345] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 125.748390][ T6345] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.754498][ T6345] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 125.781928][ T6345] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 125.804377][ T6345] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.817635][ T6345] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.880113][ T6345] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 125.883683][ T6367] block nbd8: NBD_DISCONNECT [ 125.902540][ T6345] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.908479][ T6367] mtrr: base(0x101000) is not aligned on a size(0x0000) boundary [ 125.942349][ T6345] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 125.962481][ T6345] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 126.411236][ T6391] input: jJǸ-���9�%v����l��Q� J86�� as /devices/virtual/input/input7 [ 127.037340][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.766288][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.775894][ T6409] netlink: 28 bytes leftover after parsing attributes in process `syz.3.120'. [ 127.846291][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.888242][ T6409] mac80211_hwsim hwsim6 wlan1: entered promiscuous mode [ 127.998573][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 129.127536][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 129.151842][ T6433] netlink: 4 bytes leftover after parsing attributes in process `syz.2.127'. [ 129.839146][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.916986][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.921468][ T6435] process 'syz.2.127' launched './file0' with NULL argv: empty string added [ 130.077613][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.421138][ T6450] openvswitch: netlink: IP tunnel dst address not specified [ 131.206627][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 131.916359][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.997514][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 132.165367][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 132.297105][ T6443] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[6443] [ 134.977865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 134.988896][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 135.936950][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.056520][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.065246][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.625902][ T6581] __vm_enough_memory: pid: 6581, comm: syz.2.159, bytes: 4503599627366400 not enough memory for the allocation [ 137.801692][ T6589] capability: warning: `syz.1.162' uses 32-bit capabilities (legacy support in use) [ 138.481964][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.496759][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.792584][ T6610] could not allocate digest TFM handle [ 140.440329][ T6628] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 140.807644][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.0.169'. [ 142.285092][ T6647] mmap: syz.0.174 (6647) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 142.625421][ T6657] netlink: 342 bytes leftover after parsing attributes in process `syz.1.177'. [ 144.725876][ T6701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.184'. [ 148.651410][ T6765] FAULT_INJECTION: forcing a failure. [ 148.651410][ T6765] name fail_futex, interval 1, probability 0, space 0, times 1 [ 148.706314][ T6765] CPU: 0 UID: 7 PID: 6765 Comm: syz.1.196 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 148.706361][ T6765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.706383][ T6765] Call Trace: [ 148.706393][ T6765] <TASK> [ 148.706405][ T6765] dump_stack_lvl+0x16c/0x1f0 [ 148.706474][ T6765] should_fail_ex+0x50a/0x650 [ 148.706518][ T6765] ? hlock_class+0x4e/0x130 [ 148.706569][ T6765] get_futex_key+0x4a3/0x1000 [ 148.706612][ T6765] ? __pfx_get_futex_key+0x10/0x10 [ 148.706649][ T6765] ? __pfx___lock_acquire+0x10/0x10 [ 148.706718][ T6765] futex_wake+0xe8/0x4e0 [ 148.706764][ T6765] ? find_held_lock+0x2d/0x110 [ 148.706796][ T6765] ? __pfx_futex_wake+0x10/0x10 [ 148.706845][ T6765] ? __pfx_lock_release+0x10/0x10 [ 148.706889][ T6765] ? do_raw_spin_lock+0x12d/0x2c0 [ 148.706926][ T6765] do_futex+0x1e5/0x350 [ 148.706965][ T6765] ? __pfx_do_futex+0x10/0x10 [ 148.707005][ T6765] ? dec_rlimit_ucounts+0x114/0x170 [ 148.707048][ T6765] __x64_sys_futex+0x1e1/0x4c0 [ 148.707092][ T6765] ? __pfx___x64_sys_futex+0x10/0x10 [ 148.707146][ T6765] do_syscall_64+0xcd/0x250 [ 148.707195][ T6765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.707241][ T6765] RIP: 0033:0x7f23e418d169 [ 148.707267][ T6765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.707301][ T6765] RSP: 002b:00007f23e50ca0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 148.707332][ T6765] RAX: ffffffffffffffda RBX: 00007f23e43a5fa8 RCX: 00007f23e418d169 [ 148.707354][ T6765] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f23e43a5fac [ 148.707373][ T6765] RBP: 00007f23e43a5fa0 R08: 00007f23e50cb000 R09: 0000000000000000 [ 148.707391][ T6765] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f23e43a5fac [ 148.707410][ T6765] R13: 0000000000000000 R14: 00007ffdeafc12f0 R15: 00007ffdeafc13d8 [ 148.707447][ T6765] </TASK> [ 148.875133][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.0.197'. [ 150.813674][ T6792] FAULT_INJECTION: forcing a failure. [ 150.813674][ T6792] name failslab, interval 1, probability 0, space 0, times 0 [ 150.828525][ T6792] CPU: 0 UID: 0 PID: 6792 Comm: syz.3.203 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 150.828570][ T6792] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.828591][ T6792] Call Trace: [ 150.828601][ T6792] <TASK> [ 150.828614][ T6792] dump_stack_lvl+0x16c/0x1f0 [ 150.828673][ T6792] should_fail_ex+0x50a/0x650 [ 150.828720][ T6792] ? fs_reclaim_acquire+0xae/0x150 [ 150.828763][ T6792] ? devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 150.828801][ T6792] should_failslab+0xc2/0x120 [ 150.828832][ T6792] __kmalloc_cache_noprof+0x68/0x410 [ 150.828887][ T6792] devlink_fmsg_nest_common.part.0+0x48/0x1e0 [ 150.828929][ T6792] devlink_fmsg_bool_pair_put+0x286/0x2f0 [ 150.828970][ T6792] ? __pfx_devlink_fmsg_bool_pair_put+0x10/0x10 [ 150.829012][ T6792] ? __kasan_kmalloc+0xaa/0xb0 [ 150.829058][ T6792] ? devlink_fmsg_nest_common.part.0+0xcd/0x1e0 [ 150.829103][ T6792] nsim_dev_dummy_fmsg_put+0xe7/0x1e0 [ 150.829156][ T6792] devlink_health_do_dump+0x240/0x620 [ 150.829203][ T6792] devlink_health_report+0x3d4/0x9d0 [ 150.829251][ T6792] ? __pfx_devlink_health_report+0x10/0x10 [ 150.829293][ T6792] ? _copy_from_user+0x59/0xd0 [ 150.829360][ T6792] nsim_dev_health_break_write+0x167/0x210 [ 150.829418][ T6792] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 150.829492][ T6792] ? rcu_is_watching+0x12/0xc0 [ 150.829530][ T6792] ? trace_lock_acquire+0x14e/0x1f0 [ 150.829578][ T6792] full_proxy_write+0x13c/0x200 [ 150.829619][ T6792] ? __pfx_full_proxy_write+0x10/0x10 [ 150.829655][ T6792] vfs_write+0x24c/0x1150 [ 150.829707][ T6792] ? __pfx___mutex_lock+0x10/0x10 [ 150.829753][ T6792] ? __pfx_vfs_write+0x10/0x10 [ 150.829813][ T6792] ? __fget_files+0x20e/0x3b0 [ 150.829873][ T6792] ksys_write+0x12b/0x250 [ 150.829919][ T6792] ? __pfx_ksys_write+0x10/0x10 [ 150.829977][ T6792] do_syscall_64+0xcd/0x250 [ 150.830028][ T6792] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.830074][ T6792] RIP: 0033:0x7f52c178d169 [ 150.830100][ T6792] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.830131][ T6792] RSP: 002b:00007f52c25e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 150.830162][ T6792] RAX: ffffffffffffffda RBX: 00007f52c19a5fa0 RCX: 00007f52c178d169 [ 150.830184][ T6792] RDX: 00000000000000ef RSI: 0000200000000000 RDI: 0000000000000005 [ 150.830204][ T6792] RBP: 00007f52c180e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 150.830224][ T6792] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.830242][ T6792] R13: 0000000000000000 R14: 00007f52c19a5fa0 R15: 00007ffd728fc438 [ 150.830282][ T6792] </TASK> [ 154.521067][ T6864] netlink: 346 bytes leftover after parsing attributes in process `syz.2.216'. [ 154.632939][ T6864] kAFS: Invalid Command on /proc/fs/afs/cells file [ 158.426751][ T6891] ima: policy update failed [ 158.438179][ T30] audit: type=1802 audit(6037890381.792:5): pid=6891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.225" res=0 errno=0 [ 159.197996][ T6944] zram: Added device: zram1 [ 162.773880][ T30] audit: type=1326 audit(6037890386.122:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7010 comm="syz.3.250" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f52c178d169 code=0x0 [ 163.032028][ T7019] netlink: zone id is out of range [ 163.037518][ T7019] netlink: zone id is out of range [ 163.042714][ T7019] netlink: zone id is out of range [ 163.063710][ T7019] netlink: zone id is out of range [ 163.082056][ T7019] netlink: zone id is out of range [ 163.092371][ T7019] netlink: zone id is out of range [ 163.097672][ T7019] netlink: zone id is out of range [ 163.103552][ T7019] netlink: zone id is out of range [ 163.109755][ T7019] netlink: zone id is out of range [ 163.216251][ T7019] netlink: zone id is out of range [ 163.819356][ T30] audit: type=1800 audit(6037890387.172:7): pid=7031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.255" name="members" dev="configfs" ino=13074 res=0 errno=0 [ 166.164853][ T7072] netlink: 346 bytes leftover after parsing attributes in process `syz.2.265'. [ 166.196453][ T7076] netlink: 346 bytes leftover after parsing attributes in process `syz.2.265'. [ 168.547620][ T7134] Invalid ELF header magic: != ELF [ 169.522209][ T7151] netlink: 28 bytes leftover after parsing attributes in process `syz.0.276'. [ 169.531728][ T7151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.871680][ T7151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.075350][ T7172] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 171.088322][ T7172] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 171.110922][ T7172] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 171.137548][ T7172] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 172.317003][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 173.117566][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 173.117586][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 173.206402][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 176.310706][ T7279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.308'. [ 177.541584][ T7298] netlink: 123 bytes leftover after parsing attributes in process `syz.0.311'. [ 177.626978][ T7298] nbd: socks must be embedded in a SOCK_ITEM attr [ 177.676555][ T7298] block nbd0: shutting down sockets [ 177.963262][ T30] audit: type=1800 audit(6037890401.302:8): pid=7309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.315" name="dummy_udc" dev="gadgetfs" ino=7152 res=0 errno=0 [ 179.881105][ T7341] Invalid ELF header magic: != ELF [ 180.155475][ T7351] netlink: 93 bytes leftover after parsing attributes in process `syz.0.327'. [ 181.571717][ T7386] random: crng reseeded on system resumption [ 181.828328][ T5852] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 181.828377][ T5852] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 181.846417][ T5852] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 181.846537][ T5852] Bluetooth: hci0: Malformed LE Event: 0x0d [ 181.866976][ T5852] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 181.867022][ T5852] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 181.882076][ T5852] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 181.882117][ T5852] Bluetooth: hci0: adv larger than maximum supported [ 181.896267][ T5852] Bluetooth: hci0: Unknown advertising packet type: 0x40 [ 181.903030][ T5852] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 181.910347][ T5852] Bluetooth: hci0: Malformed LE Event: 0x0d [ 184.310882][ T7434] netlink: 4 bytes leftover after parsing attributes in process `syz.1.348'. [ 184.522622][ T7438] random: crng reseeded on system resumption [ 184.971663][ T5852] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 184.971722][ T5852] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 184.986845][ T5852] Bluetooth: hci3: adv larger than maximum supported [ 184.986908][ T5852] Bluetooth: hci3: adv larger than maximum supported [ 184.993976][ T5852] Bluetooth: hci3: adv larger than maximum supported [ 185.000856][ T5852] Bluetooth: hci3: Unknown advertising packet type: 0x20 [ 185.007627][ T5852] Bluetooth: hci3: adv larger than maximum supported [ 185.259361][ T7452] netlink: 28 bytes leftover after parsing attributes in process `syz.3.352'. [ 186.696211][ T5852] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 188.628491][ T7489] FAULT_INJECTION: forcing a failure. [ 188.628491][ T7489] name failslab, interval 1, probability 0, space 0, times 0 [ 188.905592][ T7489] CPU: 0 UID: 0 PID: 7489 Comm: syz.0.358 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 188.905637][ T7489] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 188.905655][ T7489] Call Trace: [ 188.905664][ T7489] <TASK> [ 188.905681][ T7489] dump_stack_lvl+0x16c/0x1f0 [ 188.905733][ T7489] should_fail_ex+0x50a/0x650 [ 188.905778][ T7489] ? fs_reclaim_acquire+0xae/0x150 [ 188.905831][ T7489] should_failslab+0xc2/0x120 [ 188.905863][ T7489] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 188.905915][ T7489] ? find_held_lock+0x2d/0x110 [ 188.905948][ T7489] ? __d_alloc+0x31/0xaa0 [ 188.905985][ T7489] __d_alloc+0x31/0xaa0 [ 188.906019][ T7489] d_alloc_pseudo+0x1c/0xc0 [ 188.906058][ T7489] alloc_file_pseudo+0xd0/0x230 [ 188.906099][ T7489] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 188.906135][ T7489] ? alloc_fd+0x420/0x760 [ 188.906185][ T7489] sock_alloc_file+0x50/0x210 [ 188.906234][ T7489] __sys_socket+0x1c2/0x260 [ 188.906269][ T7489] ? __pfx___sys_socket+0x10/0x10 [ 188.906302][ T7489] ? rcu_is_watching+0x12/0xc0 [ 188.906344][ T7489] __x64_sys_socket+0x72/0xb0 [ 188.906377][ T7489] ? lockdep_hardirqs_on+0x7c/0x110 [ 188.906421][ T7489] do_syscall_64+0xcd/0x250 [ 188.906477][ T7489] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.906522][ T7489] RIP: 0033:0x7fd140f8d169 [ 188.906546][ T7489] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.906575][ T7489] RSP: 002b:00007fd13edf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 188.906606][ T7489] RAX: ffffffffffffffda RBX: 00007fd1411a6160 RCX: 00007fd140f8d169 [ 188.906626][ T7489] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 000000000000002b [ 188.906662][ T7489] RBP: 00007fd14100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 188.906683][ T7489] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.906701][ T7489] R13: 0000000000000000 R14: 00007fd1411a6160 R15: 00007fff59ed6528 [ 188.906740][ T7489] </TASK> [ 191.889499][ T7533] can: request_module (can-proto-0) failed. [ 191.898270][ T7537] Invalid ELF header magic: != ELF [ 192.222140][ T7548] netlink: 28 bytes leftover after parsing attributes in process `syz.1.373'. [ 192.935583][ T30] audit: type=1800 audit(6037890442.282:9): pid=7558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.373" name="features" dev="configfs" ino=15635 res=0 errno=0 [ 199.937080][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.944560][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 200.916737][ T7738] net_ratelimit: 164 callbacks suppressed [ 200.916762][ T7738] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. syzkaller syzkaller login: [ 201.901780][ T7741] ubi0: attaching mtd0 [ 201.921696][ T7741] ubi0: scanning is finished [ 201.946340][ T7741] ubi0: empty MTD device detected [ 202.181338][ T7741] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 202.204918][ T7741] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 202.279294][ T7741] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 202.298831][ T7741] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 202.309623][ T7741] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 202.317539][ T7741] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 202.325583][ T7741] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2919179452 [ 202.346217][ T7741] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 202.360002][ T7757] ubi0: background thread "ubi_bgt0d" started, PID 7757 [ 202.800722][ T7748] kexec: Could not allocate control_code_buffer [ 205.647069][ T7818] FAULT_INJECTION: forcing a failure. [ 205.647069][ T7818] name failslab, interval 1, probability 0, space 0, times 0 [ 205.678882][ T7818] CPU: 0 UID: 0 PID: 7818 Comm: syz.0.427 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 205.678924][ T7818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 205.678942][ T7818] Call Trace: [ 205.678950][ T7818] <TASK> [ 205.678963][ T7818] dump_stack_lvl+0x16c/0x1f0 [ 205.679012][ T7818] should_fail_ex+0x50a/0x650 [ 205.679055][ T7818] ? fs_reclaim_acquire+0xae/0x150 [ 205.679107][ T7818] should_failslab+0xc2/0x120 [ 205.679140][ T7818] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 205.679193][ T7818] ? sock_alloc_inode+0x25/0x1c0 [ 205.679267][ T7818] ? __pfx_sock_alloc_inode+0x10/0x10 [ 205.679319][ T7818] sock_alloc_inode+0x25/0x1c0 [ 205.679372][ T7818] alloc_inode+0x61/0x240 [ 205.679410][ T7818] sock_alloc+0x40/0x280 [ 205.679459][ T7818] sock_create_lite+0x82/0x120 [ 205.679512][ T7818] __netlink_kernel_create+0xbe/0x750 [ 205.679557][ T7818] ? __pfx___netlink_kernel_create+0x10/0x10 [ 205.679601][ T7818] ? find_held_lock+0x2d/0x110 [ 205.679639][ T7818] ? __pfx_genl_pernet_init+0x10/0x10 [ 205.679681][ T7818] genl_pernet_init+0xbe/0x170 [ 205.679727][ T7818] ? __pfx_genl_pernet_init+0x10/0x10 [ 205.679773][ T7818] ? __pfx_genl_rcv+0x10/0x10 [ 205.679816][ T7818] ? __pfx_genl_bind+0x10/0x10 [ 205.679853][ T7818] ? __pfx_genl_unbind+0x10/0x10 [ 205.679886][ T7818] ? __pfx_genl_release+0x10/0x10 [ 205.679925][ T7818] ? __pfx_netlink_tap_init_net+0x10/0x10 [ 205.679953][ T7818] ? debug_mutex_init+0x37/0x70 [ 205.679981][ T7818] ops_init+0x1df/0x5f0 [ 205.680021][ T7818] setup_net+0x21f/0x860 [ 205.680059][ T7818] ? __pfx_setup_net+0x10/0x10 [ 205.680101][ T7818] ? down_read_killable+0xcc/0x380 [ 205.680140][ T7818] ? __pfx_down_read_killable+0x10/0x10 [ 205.680178][ T7818] ? __raw_spin_lock_init+0x3a/0x110 [ 205.680220][ T7818] ? debug_mutex_init+0x37/0x70 [ 205.680248][ T7818] copy_net_ns+0x2a6/0x5f0 [ 205.680272][ T7818] create_new_namespaces+0x3ea/0xad0 [ 205.680319][ T7818] copy_namespaces+0x468/0x560 [ 205.680360][ T7818] copy_process+0x29fc/0x8c30 [ 205.680403][ T7818] ? __pfx_copy_process+0x10/0x10 [ 205.680423][ T7818] ? __pfx___futex_wait+0x10/0x10 [ 205.680484][ T7818] kernel_clone+0xfd/0x960 [ 205.680508][ T7818] ? __pfx_kernel_clone+0x10/0x10 [ 205.680546][ T7818] __do_sys_clone+0xcf/0x120 [ 205.680568][ T7818] ? __pfx___do_sys_clone+0x10/0x10 [ 205.680604][ T7818] ? rcu_is_watching+0x12/0xc0 [ 205.680637][ T7818] do_syscall_64+0xcd/0x250 [ 205.680673][ T7818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.680708][ T7818] RIP: 0033:0x7fd140f8d169 [ 205.680726][ T7818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.680761][ T7818] RSP: 002b:00007fd141d2afe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 205.680784][ T7818] RAX: ffffffffffffffda RBX: 00007fd1411a5fa0 RCX: 00007fd140f8d169 [ 205.680799][ T7818] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000001432a0091 [ 205.680813][ T7818] RBP: 00007fd14100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 205.680827][ T7818] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 205.680840][ T7818] R13: 0000000000000000 R14: 00007fd1411a5fa0 R15: 00007fff59ed6528 [ 205.680868][ T7818] </TASK> [ 206.772778][ T7831] kAFS: No cell specified [ 211.507778][ T7892] sctp: [Deprecated]: syz.1.443 (pid 7892) Use of struct sctp_assoc_value in delayed_ack socket option. [ 211.507778][ T7892] Use struct sctp_sack_info instead [ 211.542165][ T7893] nbd: must specify at least one socket [ 212.853228][ T30] audit: type=1800 audit(6037890462.202:10): pid=7910 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.448" name=06 dev="tmpfs" ino=564 res=0 errno=0 [ 214.571996][ T7940] netlink: 28 bytes leftover after parsing attributes in process `syz.1.455'. [ 214.769703][ T7937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.455'. [ 218.060030][ T7997] HfR: entered promiscuous mode [ 218.121825][ T7998] openvswitch: HfR: Dropping previously announced user features [ 218.897685][ T8019] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 219.821632][ T8028] netlink: 4 bytes leftover after parsing attributes in process `syz.1.477'. [ 220.670496][ T8048] netlink: 342 bytes leftover after parsing attributes in process `syz.2.481'. [ 222.182943][ T8068] Invalid ELF header magic: != ELF [ 225.230284][ T8117] netlink: 'syz.0.497': attribute type 4 has an invalid length. [ 226.909759][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz.0.509'. [ 226.924055][ T8158] nbd: must specify a size in bytes for the device [ 227.869194][ T8175] netlink: 330 bytes leftover after parsing attributes in process `syz.3.512'. [ 228.213611][ T8180] sg_write: data in/out 32732/16086 bytes for SCSI command 0x0-- guessing data in; [ 228.213611][ T8180] program syz.1.513 not setting count and/or reply_len properly [ 229.466720][ T8200] netlink: 28 bytes leftover after parsing attributes in process `syz.1.519'. [ 229.653126][ T8200] bridge_slave_1: left allmulticast mode [ 229.673208][ T8200] bridge_slave_1: left promiscuous mode [ 229.692439][ T8200] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.846222][ T8200] bridge_slave_0: left allmulticast mode [ 229.851954][ T8200] bridge_slave_0: left promiscuous mode [ 229.879512][ T8200] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.093960][ T8233] openvswitch: HfR: Dropping previously announced user features [ 230.164768][ T8233] device-mapper: ioctl: Unable to rename non-existent device, to � [ 230.476371][ T8240] vivid-003: ================= START STATUS ================= [ 230.484520][ T8240] vivid-003: Radio HW Seek Mode: Bounded [ 230.588030][ T8240] vivid-003: Radio Programmable HW Seek: false [ 230.594970][ T8240] vivid-003: RDS Rx I/O Mode: Block I/O [ 230.663510][ T8240] vivid-003: Generate RBDS Instead of RDS: false [ 230.670358][ T8240] vivid-003: RDS Reception: true [ 230.677883][ T8240] vivid-003: RDS Program Type: 0 inactive [ 230.683697][ T8240] vivid-003: RDS PS Name: inactive [ 230.726240][ T8240] vivid-003: RDS Radio Text: inactive [ 230.731745][ T8247] cougar: G6 mapped to space [ 230.739873][ T8240] vivid-003: RDS Traffic Announcement: false inactive [ 230.762563][ T8240] vivid-003: RDS Traffic Program: false inactive [ 230.769682][ T8240] vivid-003: RDS Music: false inactive [ 230.775415][ T8240] vivid-003: ================== END STATUS ================== [ 230.862642][ T8256] netlink: zone id is out of range [ 230.880454][ T8256] netlink: zone id is out of range [ 230.885887][ T8256] netlink: zone id is out of range [ 230.891863][ T8256] netlink: zone id is out of range [ 230.898240][ T8256] netlink: zone id is out of range [ 230.903414][ T8256] netlink: zone id is out of range [ 230.909296][ T8256] netlink: zone id is out of range [ 230.914491][ T8256] netlink: zone id is out of range [ 230.930544][ T8256] netlink: zone id is out of range [ 230.936157][ T8256] netlink: zone id is out of range [ 232.010240][ T8274] FAULT_INJECTION: forcing a failure. [ 232.010240][ T8274] name failslab, interval 1, probability 0, space 0, times 0 [ 232.049443][ T8274] CPU: 0 UID: 0 PID: 8274 Comm: syz.0.535 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 232.049508][ T8274] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 232.049531][ T8274] Call Trace: [ 232.049542][ T8274] <TASK> [ 232.049555][ T8274] dump_stack_lvl+0x16c/0x1f0 [ 232.049617][ T8274] should_fail_ex+0x50a/0x650 [ 232.049666][ T8274] ? fs_reclaim_acquire+0xae/0x150 [ 232.049712][ T8274] should_failslab+0xc2/0x120 [ 232.049745][ T8274] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 232.049798][ T8274] ? alloc_vfsmnt+0x23/0x6f0 [ 232.049840][ T8274] alloc_vfsmnt+0x23/0x6f0 [ 232.049887][ T8274] clone_mnt+0x6d/0xf90 [ 232.049941][ T8274] copy_tree+0x39e/0x9c0 [ 232.050008][ T8274] copy_mnt_ns+0x1b5/0xa70 [ 232.050042][ T8274] ? kmem_cache_alloc_noprof+0x279/0x3d0 [ 232.050095][ T8274] ? create_new_namespaces+0x30/0xad0 [ 232.050158][ T8274] create_new_namespaces+0xd3/0xad0 [ 232.050209][ T8274] ? bpf_lsm_capable+0x9/0x10 [ 232.050243][ T8274] ? security_capable+0x7e/0x260 [ 232.050298][ T8274] copy_namespaces+0x468/0x560 [ 232.050354][ T8274] copy_process+0x29fc/0x8c30 [ 232.050414][ T8274] ? __pfx_copy_process+0x10/0x10 [ 232.050447][ T8274] ? try_to_wake_up+0x953/0x1490 [ 232.050502][ T8274] ? plist_check_head+0xa3/0x150 [ 232.050549][ T8274] ? wake_up_q+0xb0/0x160 [ 232.050591][ T8274] ? do_raw_spin_unlock+0x172/0x230 [ 232.050629][ T8274] kernel_clone+0xfd/0x960 [ 232.050658][ T8274] ? __pfx_futex_wake+0x10/0x10 [ 232.050728][ T8274] ? __pfx_kernel_clone+0x10/0x10 [ 232.050785][ T8274] __do_sys_clone+0xcf/0x120 [ 232.050809][ T8274] ? __pfx___do_sys_clone+0x10/0x10 [ 232.050851][ T8274] ? rcu_is_watching+0x12/0xc0 [ 232.050900][ T8274] do_syscall_64+0xcd/0x250 [ 232.050946][ T8274] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.050986][ T8274] RIP: 0033:0x7fd140f8d169 [ 232.051008][ T8274] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.051035][ T8274] RSP: 002b:00007fd141d2afe8 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 232.051065][ T8274] RAX: ffffffffffffffda RBX: 00007fd1411a5fa0 RCX: 00007fd140f8d169 [ 232.051085][ T8274] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000001432a0091 [ 232.051101][ T8274] RBP: 00007fd14100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 232.051118][ T8274] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 232.051134][ T8274] R13: 0000000000000000 R14: 00007fd1411a5fa0 R15: 00007fff59ed6528 [ 232.051169][ T8274] </TASK> [ 233.758824][ T8325] netlink: 28 bytes leftover after parsing attributes in process `syz.2.546'. [ 234.299852][ T8325] netlink: 342 bytes leftover after parsing attributes in process `syz.2.546'. [ 239.339580][ T8424] netlink: 'syz.1.564': attribute type 1 has an invalid length. [ 239.463872][ T8417] sp0: Synchronizing with TNC [ 239.501240][ T8422] ======================================================= [ 239.501240][ T8422] WARNING: The mand mount option has been deprecated and [ 239.501240][ T8422] and is ignored by this kernel. Remove the mand [ 239.501240][ T8422] option from the mount to silence this warning. [ 239.501240][ T8422] ======================================================= [ 240.594523][ T8430] netlink: 110 bytes leftover after parsing attributes in process `syz.3.566'. [ 241.596182][ T5852] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 241.756333][ T30] audit: type=1800 audit(6037890507.046:11): pid=8454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.572" name="dbroot" dev="configfs" ino=20164 res=0 errno=0 [ 242.471642][ T8460] Invalid ELF header magic: != ELF [ 246.008158][ T8495] FAULT_INJECTION: forcing a failure. [ 246.008158][ T8495] name failslab, interval 1, probability 0, space 0, times 0 [ 246.028472][ T8495] CPU: 0 UID: 0 PID: 8495 Comm: syz.0.580 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 246.028517][ T8495] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 246.028547][ T8495] Call Trace: [ 246.028558][ T8495] <TASK> [ 246.028570][ T8495] dump_stack_lvl+0x16c/0x1f0 [ 246.028632][ T8495] should_fail_ex+0x50a/0x650 [ 246.028675][ T8495] ? fs_reclaim_acquire+0xae/0x150 [ 246.028719][ T8495] should_failslab+0xc2/0x120 [ 246.028752][ T8495] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 246.028799][ T8495] ? alloc_empty_file+0x55/0x1e0 [ 246.028838][ T8495] alloc_empty_file+0x55/0x1e0 [ 246.028872][ T8495] alloc_file_pseudo+0x13b/0x230 [ 246.028906][ T8495] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 246.028941][ T8495] ? hugetlbfs_get_inode+0x323/0x740 [ 246.028983][ T8495] hugetlb_file_setup+0x4cd/0x620 [ 246.029023][ T8495] ksys_mmap_pgoff+0x189/0x5c0 [ 246.029067][ T8495] __x64_sys_mmap+0x125/0x190 [ 246.029116][ T8495] do_syscall_64+0xcd/0x250 [ 246.029164][ T8495] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.029208][ T8495] RIP: 0033:0x7fd140f8d169 [ 246.029232][ T8495] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.029259][ T8495] RSP: 002b:00007fd141d2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 246.029287][ T8495] RAX: ffffffffffffffda RBX: 00007fd1411a5fa0 RCX: 00007fd140f8d169 [ 246.029305][ T8495] RDX: 0000000000000002 RSI: 0000000000000009 RDI: 0000000000000000 [ 246.029322][ T8495] RBP: 00007fd14100e2a0 R08: 0000000000000401 R09: 0000300000000000 [ 246.029340][ T8495] R10: 0000000000040eb2 R11: 0000000000000246 R12: 0000000000000000 [ 246.029357][ T8495] R13: 0000000000000000 R14: 00007fd1411a5fa0 R15: 00007fff59ed6528 [ 246.029392][ T8495] </TASK> [ 249.639526][ T8535] netlink: 16 bytes leftover after parsing attributes in process `syz.3.589'. [ 250.091954][ T8549] FAULT_INJECTION: forcing a failure. [ 250.091954][ T8549] name failslab, interval 1, probability 0, space 0, times 0 [ 250.115991][ T8549] CPU: 0 UID: 0 PID: 8549 Comm: syz.3.591 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 250.116029][ T8549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 250.116046][ T8549] Call Trace: [ 250.116059][ T8549] <TASK> [ 250.116071][ T8549] dump_stack_lvl+0x16c/0x1f0 [ 250.116117][ T8549] should_fail_ex+0x50a/0x650 [ 250.116160][ T8549] ? fs_reclaim_acquire+0xae/0x150 [ 250.116201][ T8549] ? ops_init+0x77/0x5f0 [ 250.116257][ T8549] should_failslab+0xc2/0x120 [ 250.116287][ T8549] __kmalloc_noprof+0xcb/0x510 [ 250.116342][ T8549] ops_init+0x77/0x5f0 [ 250.116408][ T8549] setup_net+0x21f/0x860 [ 250.116452][ T8549] ? __pfx_setup_net+0x10/0x10 [ 250.116493][ T8549] ? down_read_killable+0xcc/0x380 [ 250.116537][ T8549] ? __pfx_down_read_killable+0x10/0x10 [ 250.116579][ T8549] ? __raw_spin_lock_init+0x3a/0x110 [ 250.116630][ T8549] ? debug_mutex_init+0x37/0x70 [ 250.116664][ T8549] copy_net_ns+0x2a6/0x5f0 [ 250.116694][ T8549] create_new_namespaces+0x3ea/0xad0 [ 250.116752][ T8549] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 250.116802][ T8549] ksys_unshare+0x45d/0xa40 [ 250.116851][ T8549] ? __pfx_ksys_unshare+0x10/0x10 [ 250.116880][ T8549] ? xfd_validate_state+0x5d/0x180 [ 250.116935][ T8549] __x64_sys_unshare+0x31/0x40 [ 250.116966][ T8549] do_syscall_64+0xcd/0x250 [ 250.117014][ T8549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.117059][ T8549] RIP: 0033:0x7f52c178d169 [ 250.117083][ T8549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.117113][ T8549] RSP: 002b:00007f52c25e7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 250.117142][ T8549] RAX: ffffffffffffffda RBX: 00007f52c19a5fa0 RCX: 00007f52c178d169 [ 250.117162][ T8549] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 250.117180][ T8549] RBP: 00007f52c180e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 250.117197][ T8549] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 250.117215][ T8549] R13: 0000000000000000 R14: 00007f52c19a5fa0 R15: 00007ffd728fc438 [ 250.117253][ T8549] </TASK> [ 250.410638][ T8554] cougar: G6 mapped to space [ 250.627442][ T8559] syz.2.592 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 252.537876][ T8583] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 252.612615][ T8583] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 252.628397][ T8580] ICMPv6: process `syz.3.597' is using deprecated sysctl (syscall) net.ipv6.neigh.macsec0.base_reachable_time - use net.ipv6.neigh.macsec0.base_reachable_time_ms instead [ 254.596437][ T8603] Invalid ELF header magic: != ELF [ 256.287047][ T30] audit: type=1800 audit(6037890521.646:12): pid=8633 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.607" name="features" dev="configfs" ino=22559 res=0 errno=0 [ 257.982722][ T8656] FAULT_INJECTION: forcing a failure. [ 257.982722][ T8656] name failslab, interval 1, probability 0, space 0, times 0 [ 258.062321][ T8656] CPU: 0 UID: 0 PID: 8656 Comm: syz.2.614 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 258.062368][ T8656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 258.062387][ T8656] Call Trace: [ 258.062397][ T8656] <TASK> [ 258.062409][ T8656] dump_stack_lvl+0x16c/0x1f0 [ 258.062464][ T8656] should_fail_ex+0x50a/0x650 [ 258.062510][ T8656] ? fs_reclaim_acquire+0xae/0x150 [ 258.062563][ T8656] should_failslab+0xc2/0x120 [ 258.062609][ T8656] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 258.062672][ T8656] ? alloc_empty_file+0x55/0x1e0 [ 258.062709][ T8656] alloc_empty_file+0x55/0x1e0 [ 258.062741][ T8656] alloc_file_pseudo+0x13b/0x230 [ 258.062775][ T8656] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 258.062823][ T8656] ? bpf_lsm_socket_post_create+0x9/0x10 [ 258.062877][ T8656] sock_alloc_file+0x50/0x210 [ 258.062925][ T8656] __sys_socketpair+0x31d/0x5a0 [ 258.062961][ T8656] ? __pfx___sys_socketpair+0x10/0x10 [ 258.062997][ T8656] ? __pfx___x64_sys_futex+0x10/0x10 [ 258.063037][ T8656] ? getname_flags.part.0+0x1c2/0x540 [ 258.063081][ T8656] __x64_sys_socketpair+0x96/0x100 [ 258.063114][ T8656] ? lockdep_hardirqs_on+0x7c/0x110 [ 258.063155][ T8656] do_syscall_64+0xcd/0x250 [ 258.063201][ T8656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.063244][ T8656] RIP: 0033:0x7f0e7038d169 [ 258.063267][ T8656] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.063295][ T8656] RSP: 002b:00007f0e711f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 258.063324][ T8656] RAX: ffffffffffffffda RBX: 00007f0e705a5fa0 RCX: 00007f0e7038d169 [ 258.063342][ T8656] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 258.063360][ T8656] RBP: 00007f0e7040e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 258.063377][ T8656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 258.063394][ T8656] R13: 0000000000000000 R14: 00007f0e705a5fa0 R15: 00007ffee8de0458 [ 258.063429][ T8656] </TASK> [ 258.265046][ C0] vkms_vblank_simulate: vblank timer overrun [ 258.431803][ T8662] syz.3.615(8662): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 260.448911][ T8683] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 260.469384][ T8683] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 260.483903][ T8683] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 260.501038][ T8683] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 261.284139][ T8684] tipc: Started in network mode [ 261.324614][ T8684] tipc: Node identity ee00, cluster identity 4711 [ 261.346895][ T8684] tipc: Node number set to 60928 [ 261.360783][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.367460][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.686318][ T5852] Bluetooth: hci0: command 0x0c1a tx timeout [ 261.857567][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 261.869573][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 261.878079][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 261.888839][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 261.899510][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 261.910812][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 262.486304][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 262.562208][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 262.568616][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 262.800918][ T8705] chnl_net:caif_netlink_parms(): no params data found [ 263.079876][ T8705] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.096360][ T8705] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.103644][ T8705] bridge_slave_0: entered allmulticast mode [ 263.127577][ T8705] bridge_slave_0: entered promiscuous mode [ 263.147820][ T8705] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.166292][ T8705] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.173648][ T8705] bridge_slave_1: entered allmulticast mode [ 263.181155][ T8705] bridge_slave_1: entered promiscuous mode [ 263.251530][ T8705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.284603][ T8705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.352298][ T8705] team0: Port device team_slave_0 added [ 263.367148][ T8705] team0: Port device team_slave_1 added [ 263.418141][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 263.438554][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.500287][ T8705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 263.520014][ T8705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 263.544860][ T8705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 263.573177][ T8705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 263.996217][ T5842] Bluetooth: hci4: command tx timeout [ 264.190024][ T8705] hsr_slave_0: entered promiscuous mode [ 264.213654][ T8705] hsr_slave_1: entered promiscuous mode [ 264.243826][ T8705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.276359][ T8705] Cannot create hsr debugfs directory [ 264.773031][ T8705] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 264.805366][ T8705] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 264.849823][ T8705] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 264.904625][ T8705] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.179196][ T8705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.222244][ T8705] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.316606][ T82] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.323818][ T82] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.355416][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.362667][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.966391][ T8752] bond0: option all_slaves_active: invalid value () [ 266.076774][ T5842] Bluetooth: hci4: command tx timeout [ 266.318554][ T8705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.812416][ T8761] FAULT_INJECTION: forcing a failure. [ 266.812416][ T8761] name failslab, interval 1, probability 0, space 0, times 0 [ 266.933155][ T8761] CPU: 1 UID: 0 PID: 8761 Comm: syz.0.631 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 266.933197][ T8761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 266.933215][ T8761] Call Trace: [ 266.933224][ T8761] <TASK> [ 266.933235][ T8761] dump_stack_lvl+0x16c/0x1f0 [ 266.933288][ T8761] should_fail_ex+0x50a/0x650 [ 266.933333][ T8761] ? fs_reclaim_acquire+0xae/0x150 [ 266.933376][ T8761] should_failslab+0xc2/0x120 [ 266.933406][ T8761] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 266.933450][ T8761] ? __xlate_proc_name+0x173/0x210 [ 266.933480][ T8761] ? __proc_create+0x2c0/0x8b0 [ 266.933516][ T8761] __proc_create+0x2c0/0x8b0 [ 266.933547][ T8761] ? __pfx___proc_create+0x10/0x10 [ 266.933577][ T8761] ? proc_register+0xa0/0x5f0 [ 266.933613][ T8761] ? _raw_write_unlock+0x28/0x50 [ 266.933654][ T8761] proc_create_reg+0x7d/0x180 [ 266.933690][ T8761] proc_create_data+0x87/0x110 [ 266.933723][ T8761] ? __pfx_proc_create_data+0x10/0x10 [ 266.933768][ T8761] cache_register_net+0x1e0/0x5e0 [ 266.933803][ T8761] gss_svc_init_net+0x98/0x660 [ 266.933868][ T8761] ? __pfx_canbcm_pernet_init+0x10/0x10 [ 266.933908][ T8761] ? __pfx_rpcsec_gss_init_net+0x10/0x10 [ 266.933956][ T8761] ops_init+0x1df/0x5f0 [ 266.934017][ T8761] setup_net+0x21f/0x860 [ 266.934071][ T8761] ? __pfx_setup_net+0x10/0x10 [ 266.934116][ T8761] ? down_read_killable+0xcc/0x380 [ 266.934165][ T8761] ? __pfx_down_read_killable+0x10/0x10 [ 266.934212][ T8761] ? __raw_spin_lock_init+0x3a/0x110 [ 266.934267][ T8761] ? debug_mutex_init+0x37/0x70 [ 266.934304][ T8761] copy_net_ns+0x2a6/0x5f0 [ 266.934337][ T8761] create_new_namespaces+0x3ea/0xad0 [ 266.934398][ T8761] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 266.934452][ T8761] ksys_unshare+0x45d/0xa40 [ 266.934486][ T8761] ? __pfx_ksys_unshare+0x10/0x10 [ 266.934517][ T8761] ? xfd_validate_state+0x5d/0x180 [ 266.934575][ T8761] __x64_sys_unshare+0x31/0x40 [ 266.934606][ T8761] do_syscall_64+0xcd/0x250 [ 266.934652][ T8761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.934698][ T8761] RIP: 0033:0x7fd140f8d169 [ 266.934723][ T8761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.934758][ T8761] RSP: 002b:00007fd141d2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 266.934802][ T8761] RAX: ffffffffffffffda RBX: 00007fd1411a5fa0 RCX: 00007fd140f8d169 [ 266.934821][ T8761] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 266.934838][ T8761] RBP: 00007fd14100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 266.934856][ T8761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.934872][ T8761] R13: 0000000000000000 R14: 00007fd1411a5fa0 R15: 00007fff59ed6528 [ 266.934906][ T8761] </TASK> [ 267.809773][ T8705] veth0_vlan: entered promiscuous mode [ 267.847129][ T8769] FAULT_INJECTION: forcing a failure. [ 267.847129][ T8769] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 267.852508][ T8705] veth1_vlan: entered promiscuous mode [ 267.908916][ T8769] CPU: 0 UID: 0 PID: 8769 Comm: syz.2.632 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 267.908963][ T8769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 267.908983][ T8769] Call Trace: [ 267.908993][ T8769] <TASK> [ 267.909006][ T8769] dump_stack_lvl+0x16c/0x1f0 [ 267.909063][ T8769] should_fail_ex+0x50a/0x650 [ 267.909123][ T8769] _copy_from_user+0x2e/0xd0 [ 267.909181][ T8769] uinput_dev_setup+0xe0/0x2f0 [ 267.909222][ T8769] ? dev_set_name+0xc8/0x100 [ 267.909269][ T8769] ? __pfx_uinput_dev_setup+0x10/0x10 [ 267.909334][ T8769] ? input_allocate_device+0x271/0x350 [ 267.909411][ T8769] uinput_ioctl_handler.isra.0+0x1475/0x1d90 [ 267.909457][ T8769] ? __pfx_uinput_ioctl_handler.isra.0+0x10/0x10 [ 267.909524][ T8769] ? __pfx_lock_release+0x10/0x10 [ 267.909570][ T8769] ? trace_lock_acquire+0x14e/0x1f0 [ 267.909623][ T8769] ? __fget_files+0x20e/0x3b0 [ 267.909686][ T8769] ? __pfx_uinput_ioctl+0x10/0x10 [ 267.909734][ T8769] __x64_sys_ioctl+0x190/0x200 [ 267.909782][ T8769] do_syscall_64+0xcd/0x250 [ 267.909836][ T8769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 267.909884][ T8769] RIP: 0033:0x7f0e7038d169 [ 267.909910][ T8769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 267.909942][ T8769] RSP: 002b:00007f0e711f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 267.909973][ T8769] RAX: ffffffffffffffda RBX: 00007f0e705a5fa0 RCX: 00007f0e7038d169 [ 267.909995][ T8769] RDX: 0000200000000440 RSI: 00000000405c5503 RDI: 0000000000000005 [ 267.910014][ T8769] RBP: 00007f0e7040e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 267.910033][ T8769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 267.910051][ T8769] R13: 0000000000000000 R14: 00007f0e705a5fa0 R15: 00007ffee8de0458 [ 267.910091][ T8769] </TASK> [ 268.208619][ T5842] Bluetooth: hci4: command tx timeout [ 268.265829][ T5842] Bluetooth: hci2: unexpected event 0x02 length: 726 > 260 [ 268.427915][ T8705] veth0_macvtap: entered promiscuous mode [ 268.508659][ T8705] veth1_macvtap: entered promiscuous mode [ 268.588649][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.626188][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.676251][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.696178][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.736147][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.747007][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.756927][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.769228][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.782784][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.805739][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.816917][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.837584][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.871489][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.882772][ T8705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.894814][ T8705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.925898][ T8705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 268.950101][ T8705] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.959446][ T8705] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.968342][ T8705] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 268.996292][ T8705] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.472499][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.494424][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.236271][ T5842] Bluetooth: hci4: command tx timeout [ 270.302780][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.355005][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.201701][ T8786] tipc: Started in network mode [ 273.239877][ T8786] tipc: Node identity ee00, cluster identity 4711 [ 273.294472][ T8786] tipc: Node number set to 60928 [ 273.617362][ T8820] bond0: option all_slaves_active: invalid value () [ 275.334789][ T3532] tipc: Left network mode [ 279.456767][ T8879] bond0: option all_slaves_active: invalid value () [ 280.147101][ T8878] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 280.176724][ T8878] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 280.189534][ T8878] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 280.195700][ T8878] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 280.266423][ T8878] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 280.272842][ T8878] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 280.348151][ T8878] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 281.839472][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 282.246277][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 282.252394][ T5852] Bluetooth: hci2: command 0x0c1a tx timeout [ 282.258841][ T5852] Bluetooth: hci1: command 0x0c1a tx timeout [ 282.326348][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 283.389919][ T8920] misc userio: Invalid payload size [ 284.396419][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 285.656940][ T8944] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 285.731691][ T8944] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 285.926557][ T8944] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 285.953408][ T8944] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 285.976558][ T8944] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 286.716509][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 287.677948][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 288.009051][ T5842] Bluetooth: hci4: command 0x0c1a tx timeout [ 288.009083][ T5852] Bluetooth: hci3: command 0x0c1a tx timeout [ 288.015124][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 288.067692][ T9003] netlink: 8 bytes leftover after parsing attributes in process `syz.3.685'. [ 288.106431][ T9001] svc: failed to register nfsdv3 RPC service (errno 111). [ 288.150126][ T9001] svc: failed to register nfsaclv3 RPC service (errno 111). [ 290.758638][ T9030] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 290.815400][ T9030] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 295.300065][ T9091] svc: failed to register nfsdv3 RPC service (errno 111). [ 295.324040][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz.4.703'. [ 295.359594][ T9091] svc: failed to register nfsaclv3 RPC service (errno 111). [ 295.933047][ T9093] netlink: 28 bytes leftover after parsing attributes in process `syz.3.704'. [ 297.488451][ T9119] netlink: 28 bytes leftover after parsing attributes in process `syz.3.709'. [ 297.761190][ T30] audit: type=1800 audit(4294968353.238:13): pid=9122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.711" name="version" dev="configfs" ino=24360 res=0 errno=0 [ 300.800639][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b66cc00: rx timeout, send abort [ 301.308991][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807b66cc00: abort rx timeout. Force session deactivation [ 301.574001][ T9152] netlink: 326 bytes leftover after parsing attributes in process `syz.2.718'. [ 301.634986][ T9152] random: crng reseeded on system resumption [ 304.677579][ T9183] random: crng reseeded on system resumption [ 308.055177][ T9234] netlink: 326 bytes leftover after parsing attributes in process `syz.4.736'. [ 308.078530][ T9234] random: crng reseeded on system resumption [ 308.178060][ T9235] svc: failed to register nfsdv3 RPC service (errno 111). [ 308.216923][ T9239] netlink: 8 bytes leftover after parsing attributes in process `syz.2.737'. [ 308.246009][ T9235] svc: failed to register nfsaclv3 RPC service (errno 111). [ 308.270354][ T9237] FAULT_INJECTION: forcing a failure. [ 308.270354][ T9237] name failslab, interval 1, probability 0, space 0, times 0 [ 308.296127][ T9237] CPU: 0 UID: 0 PID: 9237 Comm: syz.0.738 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 308.296173][ T9237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 308.296193][ T9237] Call Trace: [ 308.296204][ T9237] <TASK> [ 308.296217][ T9237] dump_stack_lvl+0x16c/0x1f0 [ 308.296279][ T9237] should_fail_ex+0x50a/0x650 [ 308.296337][ T9237] ? fs_reclaim_acquire+0xae/0x150 [ 308.296387][ T9237] ? xfrm_hash_alloc+0xd1/0x100 [ 308.296440][ T9237] should_failslab+0xc2/0x120 [ 308.296476][ T9237] __kmalloc_noprof+0xcb/0x510 [ 308.296529][ T9237] ? xfrm_nat_keepalive_net_init+0xb1/0x140 [ 308.296576][ T9237] xfrm_hash_alloc+0xd1/0x100 [ 308.296625][ T9237] xfrm_state_init+0x160/0x630 [ 308.296682][ T9237] ? __pfx_xfrm_net_init+0x10/0x10 [ 308.296734][ T9237] xfrm_net_init+0x211/0xcb0 [ 308.296794][ T9237] ? __pfx_xfrm_net_init+0x10/0x10 [ 308.296846][ T9237] ops_init+0x1df/0x5f0 [ 308.296901][ T9237] setup_net+0x21f/0x860 [ 308.296978][ T9237] ? __pfx_setup_net+0x10/0x10 [ 308.297029][ T9237] ? down_read_killable+0xcc/0x380 [ 308.297086][ T9237] ? __pfx_down_read_killable+0x10/0x10 [ 308.297134][ T9237] ? __raw_spin_lock_init+0x3a/0x110 [ 308.297191][ T9237] ? debug_mutex_init+0x37/0x70 [ 308.297230][ T9237] copy_net_ns+0x2a6/0x5f0 [ 308.297263][ T9237] create_new_namespaces+0x3ea/0xad0 [ 308.297332][ T9237] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 308.297391][ T9237] ksys_unshare+0x45d/0xa40 [ 308.297428][ T9237] ? __pfx_ksys_unshare+0x10/0x10 [ 308.297460][ T9237] ? xfd_validate_state+0x5d/0x180 [ 308.297519][ T9237] __x64_sys_unshare+0x31/0x40 [ 308.297552][ T9237] do_syscall_64+0xcd/0x250 [ 308.297601][ T9237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.297649][ T9237] RIP: 0033:0x7fd140f8d169 [ 308.297675][ T9237] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.297707][ T9237] RSP: 002b:00007fd141d2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 308.297740][ T9237] RAX: ffffffffffffffda RBX: 00007fd1411a5fa0 RCX: 00007fd140f8d169 [ 308.297763][ T9237] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 308.297783][ T9237] RBP: 00007fd14100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 308.297804][ T9237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 308.297823][ T9237] R13: 0000000000000000 R14: 00007fd1411a5fa0 R15: 00007fff59ed6528 [ 308.297865][ T9237] </TASK> [ 308.546664][ C0] vkms_vblank_simulate: vblank timer overrun [ 314.229154][ T9321] usb usb15: usbfs: process 9321 (syz.3.756) did not claim interface 0 before use [ 316.157529][ T9343] FAULT_INJECTION: forcing a failure. [ 316.157529][ T9343] name failslab, interval 1, probability 0, space 0, times 0 [ 316.198697][ T9343] CPU: 1 UID: 0 PID: 9343 Comm: syz.2.761 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 316.198747][ T9343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 316.198767][ T9343] Call Trace: [ 316.198777][ T9343] <TASK> [ 316.198791][ T9343] dump_stack_lvl+0x16c/0x1f0 [ 316.198847][ T9343] should_fail_ex+0x50a/0x650 [ 316.198898][ T9343] ? fs_reclaim_acquire+0xae/0x150 [ 316.198942][ T9343] ? ops_init+0x77/0x5f0 [ 316.198988][ T9343] should_failslab+0xc2/0x120 [ 316.199019][ T9343] __kmalloc_noprof+0xcb/0x510 [ 316.199063][ T9343] ? class_create_file_ns+0x4c/0x60 [ 316.199112][ T9343] ops_init+0x77/0x5f0 [ 316.199162][ T9343] setup_net+0x21f/0x860 [ 316.199215][ T9343] ? __pfx_setup_net+0x10/0x10 [ 316.199261][ T9343] ? down_read_killable+0xcc/0x380 [ 316.199314][ T9343] ? __pfx_down_read_killable+0x10/0x10 [ 316.199364][ T9343] ? __raw_spin_lock_init+0x3a/0x110 [ 316.199434][ T9343] ? debug_mutex_init+0x37/0x70 [ 316.199476][ T9343] copy_net_ns+0x2a6/0x5f0 [ 316.199511][ T9343] create_new_namespaces+0x3ea/0xad0 [ 316.199575][ T9343] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 316.199634][ T9343] ksys_unshare+0x45d/0xa40 [ 316.199669][ T9343] ? __pfx_ksys_unshare+0x10/0x10 [ 316.199702][ T9343] ? xfd_validate_state+0x5d/0x180 [ 316.199762][ T9343] __x64_sys_unshare+0x31/0x40 [ 316.199796][ T9343] do_syscall_64+0xcd/0x250 [ 316.199846][ T9343] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.199893][ T9343] RIP: 0033:0x7f0e7038d169 [ 316.199919][ T9343] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.199950][ T9343] RSP: 002b:00007f0e711f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 316.199984][ T9343] RAX: ffffffffffffffda RBX: 00007f0e705a5fa0 RCX: 00007f0e7038d169 [ 316.200004][ T9343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 316.200020][ T9343] RBP: 00007f0e7040e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 316.200038][ T9343] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.200055][ T9343] R13: 0000000000000000 R14: 00007f0e705a5fa0 R15: 00007ffee8de0458 [ 316.200089][ T9343] </TASK> [ 316.420894][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.407791][ T9349] FAULT_INJECTION: forcing a failure. [ 317.407791][ T9349] name failslab, interval 1, probability 0, space 0, times 0 [ 317.471557][ T9349] CPU: 1 UID: 0 PID: 9349 Comm: syz.2.762 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 317.471605][ T9349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 317.471626][ T9349] Call Trace: [ 317.471635][ T9349] <TASK> [ 317.471648][ T9349] dump_stack_lvl+0x16c/0x1f0 [ 317.471703][ T9349] should_fail_ex+0x50a/0x650 [ 317.471748][ T9349] ? fs_reclaim_acquire+0xae/0x150 [ 317.471791][ T9349] ? __register_sysctl_table+0xeaf/0x1910 [ 317.471827][ T9349] should_failslab+0xc2/0x120 [ 317.471857][ T9349] __kmalloc_noprof+0xcb/0x510 [ 317.471908][ T9349] __register_sysctl_table+0xeaf/0x1910 [ 317.471949][ T9349] ? __pfx___register_sysctl_table+0x10/0x10 [ 317.471987][ T9349] ? __asan_memcpy+0x3c/0x60 [ 317.472032][ T9349] register_pidns_sysctls+0x117/0x1b0 [ 317.472078][ T9349] copy_pid_ns+0x56a/0xcf0 [ 317.472116][ T9349] ? __pfx_copy_pid_ns+0x10/0x10 [ 317.472152][ T9349] ? copy_mnt_ns+0xab/0xa70 [ 317.472188][ T9349] ? copy_ipcs+0xb6/0x610 [ 317.472243][ T9349] create_new_namespaces+0x2aa/0xad0 [ 317.472302][ T9349] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 317.472376][ T9349] ksys_unshare+0x45d/0xa40 [ 317.472413][ T9349] ? __pfx_ksys_unshare+0x10/0x10 [ 317.472446][ T9349] ? xfd_validate_state+0x5d/0x180 [ 317.472505][ T9349] __x64_sys_unshare+0x31/0x40 [ 317.472548][ T9349] do_syscall_64+0xcd/0x250 [ 317.472595][ T9349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 317.472637][ T9349] RIP: 0033:0x7f0e7038d169 [ 317.472662][ T9349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 317.472690][ T9349] RSP: 002b:00007f0e711f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 317.472719][ T9349] RAX: ffffffffffffffda RBX: 00007f0e705a5fa0 RCX: 00007f0e7038d169 [ 317.472740][ T9349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000080 [ 317.472758][ T9349] RBP: 00007f0e7040e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 317.472776][ T9349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 317.472793][ T9349] R13: 0000000000000000 R14: 00007f0e705a5fa0 R15: 00007ffee8de0458 [ 317.472828][ T9349] </TASK> [ 317.472841][ T9349] sysctl could not get directory: [ 317.637722][ C1] vkms_vblank_simulate: vblank timer overrun [ 317.703486][ T9349] /kernel -12 [ 318.197561][ T9362] netlink: 28 bytes leftover after parsing attributes in process `syz.4.765'. [ 318.766256][ T9375] FAULT_INJECTION: forcing a failure. [ 318.766256][ T9375] name failslab, interval 1, probability 0, space 0, times 0 [ 318.766357][ T9375] CPU: 0 UID: 0 PID: 9375 Comm: syz.2.769 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 318.766389][ T9375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 318.766421][ T9375] Call Trace: [ 318.766429][ T9375] <TASK> [ 318.766451][ T9375] dump_stack_lvl+0x16c/0x1f0 [ 318.766496][ T9375] should_fail_ex+0x50a/0x650 [ 318.766535][ T9375] ? fs_reclaim_acquire+0xae/0x150 [ 318.766572][ T9375] ? kernfs_fop_write_iter+0x22f/0x510 [ 318.766605][ T9375] should_failslab+0xc2/0x120 [ 318.766633][ T9375] __kmalloc_noprof+0xcb/0x510 [ 318.766672][ T9375] ? rcu_is_watching+0x12/0xc0 [ 318.766709][ T9375] kernfs_fop_write_iter+0x22f/0x510 [ 318.766751][ T9375] vfs_write+0x5ae/0x1150 [ 318.766790][ T9375] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 318.766826][ T9375] ? __pfx___mutex_lock+0x10/0x10 [ 318.766865][ T9375] ? __pfx_vfs_write+0x10/0x10 [ 318.766925][ T9375] ksys_write+0x12b/0x250 [ 318.766962][ T9375] ? __pfx_ksys_write+0x10/0x10 [ 318.767028][ T9375] do_syscall_64+0xcd/0x250 [ 318.767072][ T9375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.767111][ T9375] RIP: 0033:0x7f0e7038d169 [ 318.767133][ T9375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.767160][ T9375] RSP: 002b:00007f0e711f4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 318.767187][ T9375] RAX: ffffffffffffffda RBX: 00007f0e705a5fa0 RCX: 00007f0e7038d169 [ 318.767204][ T9375] RDX: 0000000000000081 RSI: 0000200000000180 RDI: 0000000000000003 [ 318.767220][ T9375] RBP: 00007f0e711f4090 R08: 0000000000000000 R09: 0000000000000000 [ 318.767236][ T9375] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 318.767251][ T9375] R13: 0000000000000000 R14: 00007f0e705a5fa0 R15: 00007ffee8de0458 [ 318.767286][ T9375] </TASK> [ 319.566170][ T5852] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 319.618764][ T9385] netlink: 8 bytes leftover after parsing attributes in process `syz.3.771'. [ 321.883011][ T9403] netlink: 28 bytes leftover after parsing attributes in process `syz.4.775'. [ 322.077839][ T9413] FAULT_INJECTION: forcing a failure. [ 322.077839][ T9413] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 322.136210][ T9413] CPU: 0 UID: 0 PID: 9413 Comm: syz.0.778 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 322.136254][ T9413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 322.136272][ T9413] Call Trace: [ 322.136281][ T9413] <TASK> [ 322.136293][ T9413] dump_stack_lvl+0x16c/0x1f0 [ 322.136343][ T9413] should_fail_ex+0x50a/0x650 [ 322.136392][ T9413] _copy_from_iter+0x2a1/0x1560 [ 322.136442][ T9413] ? trace_lock_acquire+0x14e/0x1f0 [ 322.136484][ T9413] ? __pfx__copy_from_iter+0x10/0x10 [ 322.136527][ T9413] ? __virt_addr_valid+0x1a4/0x590 [ 322.136565][ T9413] ? __virt_addr_valid+0x5e/0x590 [ 322.136595][ T9413] ? __phys_addr_symbol+0x30/0x80 [ 322.136625][ T9413] ? __check_object_size+0x4c7/0x710 [ 322.136663][ T9413] kernfs_fop_write_iter+0x1a9/0x510 [ 322.136708][ T9413] vfs_write+0x5ae/0x1150 [ 322.136753][ T9413] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 322.136792][ T9413] ? __pfx___mutex_lock+0x10/0x10 [ 322.136835][ T9413] ? __pfx_vfs_write+0x10/0x10 [ 322.136903][ T9413] ksys_write+0x12b/0x250 [ 322.136956][ T9413] ? __pfx_ksys_write+0x10/0x10 [ 322.137009][ T9413] do_syscall_64+0xcd/0x250 [ 322.137059][ T9413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 322.137129][ T9413] RIP: 0033:0x7fd140f8d169 [ 322.137151][ T9413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 322.137176][ T9413] RSP: 002b:00007fd141d2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 322.137203][ T9413] RAX: ffffffffffffffda RBX: 00007fd1411a5fa0 RCX: 00007fd140f8d169 [ 322.137220][ T9413] RDX: 0000000000000081 RSI: 0000200000000180 RDI: 0000000000000003 [ 322.137236][ T9413] RBP: 00007fd141d2b090 R08: 0000000000000000 R09: 0000000000000000 [ 322.137251][ T9413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 322.137266][ T9413] R13: 0000000000000000 R14: 00007fd1411a5fa0 R15: 00007fff59ed6528 [ 322.137299][ T9413] </TASK> [ 322.381746][ T9415] queue_state_write: unsupported operation '' [ 322.496290][ T9415] queue_state_write: use 'run', 'start' or 'kick' [ 322.663600][ T9415] netlink: 28 bytes leftover after parsing attributes in process `syz.3.779'. [ 322.817438][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.823819][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.330655][ T9445] zswap: compressor not available [ 326.510881][ T9472] net_ratelimit: 78 callbacks suppressed [ 326.510907][ T9472] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 326.524165][ T9472] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 326.534632][ T9467] netlink: 28 bytes leftover after parsing attributes in process `syz.2.791'. [ 328.694199][ T9514] netlink: 452 bytes leftover after parsing attributes in process `syz.4.800'. [ 329.726676][ T9525] tipc: Started in network mode [ 329.731791][ T9525] tipc: Node identity ee00, cluster identity 4711 [ 329.751526][ T9525] tipc: Node number set to 60928 [ 330.116003][ T9534] netlink: 28 bytes leftover after parsing attributes in process `syz.3.805'. [ 330.914736][ T9543] blktrace: Concurrent blktraces are not allowed on nullb0 [ 334.175004][ T9593] blktrace: Concurrent blktraces are not allowed on nullb0 [ 334.900201][ T9603] KVM: debugfs: duplicate directory 9603-3 [ 336.650054][ T9619] FAULT_INJECTION: forcing a failure. [ 336.650054][ T9619] name fail_futex, interval 1, probability 0, space 0, times 0 [ 336.786531][ T9619] CPU: 0 UID: 0 PID: 9619 Comm: syz.4.826 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 336.786578][ T9619] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 336.786597][ T9619] Call Trace: [ 336.786606][ T9619] <TASK> [ 336.786618][ T9619] dump_stack_lvl+0x16c/0x1f0 [ 336.786676][ T9619] should_fail_ex+0x50a/0x650 [ 336.786727][ T9619] get_futex_key+0x4a3/0x1000 [ 336.786772][ T9619] ? __pfx_get_futex_key+0x10/0x10 [ 336.786842][ T9619] futex_wake+0xe8/0x4e0 [ 336.786892][ T9619] ? __pfx___lock_acquire+0x10/0x10 [ 336.786939][ T9619] ? lockdep_init_map_type+0x16d/0x7d0 [ 336.786989][ T9619] ? __pfx_futex_wake+0x10/0x10 [ 336.787041][ T9619] ? lock_acquire.part.0+0x11b/0x380 [ 336.787085][ T9619] ? find_held_lock+0x2d/0x110 [ 336.787127][ T9619] do_futex+0x1e5/0x350 [ 336.787166][ T9619] ? __pfx_do_futex+0x10/0x10 [ 336.787216][ T9619] __x64_sys_futex+0x1e1/0x4c0 [ 336.787258][ T9619] ? __sys_socket+0xad/0x260 [ 336.787294][ T9619] ? __pfx___x64_sys_futex+0x10/0x10 [ 336.787339][ T9619] ? rcu_is_watching+0x12/0xc0 [ 336.787387][ T9619] do_syscall_64+0xcd/0x250 [ 336.787438][ T9619] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 336.787500][ T9619] RIP: 0033:0x7f59eb58d169 [ 336.787528][ T9619] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 336.787562][ T9619] RSP: 002b:00007f59ec46f0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 336.787595][ T9619] RAX: ffffffffffffffda RBX: 00007f59eb7a5fa8 RCX: 00007f59eb58d169 [ 336.787645][ T9619] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f59eb7a5fac [ 336.787668][ T9619] RBP: 00007f59eb7a5fa0 R08: 00007f59ec470000 R09: 0000000000000000 [ 336.787694][ T9619] R10: 0000000000000005 R11: 0000000000000246 R12: 00007f59eb7a5fac [ 336.787722][ T9619] R13: 0000000000000000 R14: 00007fff2b2b0f20 R15: 00007fff2b2b1008 [ 336.787764][ T9619] </TASK> [ 337.620383][ T9635] can: request_module (can-proto-0) failed. [ 337.678572][ T9635] can: request_module (can-proto-0) failed. [ 337.719211][ T9635] can: request_module (can-proto-0) failed. [ 338.520336][ T9635] can: request_module (can-proto-0) failed. [ 338.861647][ T9635] can: request_module (can-proto-0) failed. [ 339.124871][ T9635] can: request_module (can-proto-0) failed. [ 339.264801][ T9635] can: request_module (can-proto-0) failed. [ 339.406938][ T9635] can: request_module (can-proto-0) failed. [ 339.652347][ T9653] delete_channel: no stack [ 340.796000][ T9686] netlink: 93 bytes leftover after parsing attributes in process `syz.2.840'. [ 343.107198][ T9720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.845'. [ 343.118364][ T9719] netlink: 28 bytes leftover after parsing attributes in process `syz.3.845'. [ 346.896936][ T9782] netlink: 123 bytes leftover after parsing attributes in process `syz.4.858'. [ 346.996974][ T9782] nbd: socks must be embedded in a SOCK_ITEM attr [ 347.029047][ T9782] block nbd0: shutting down sockets [ 350.842995][ T9846] input: jJǸ-���9�%v����l��Q� J86�� as /devices/virtual/input/input16 [ 353.434383][ T9875] netlink: 123 bytes leftover after parsing attributes in process `syz.3.872'. [ 353.576729][ T9875] nbd: socks must be embedded in a SOCK_ITEM attr [ 353.632961][ T9875] block nbd0: shutting down sockets [ 356.079258][ T9916] input: jJǸ-���9�%v����l��Q� J86�� as /devices/virtual/input/input17 [ 356.093042][ T9915] netlink: 28 bytes leftover after parsing attributes in process `syz.0.882'. [ 356.115802][ T5852] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 356.115848][ T5852] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 356.134942][ T5852] Bluetooth: hci0: adv larger than maximum supported [ 356.134975][ T5852] Bluetooth: hci0: adv larger than maximum supported [ 356.143304][ T5852] Bluetooth: hci0: adv larger than maximum supported [ 356.152500][ T5852] Bluetooth: hci0: Unknown advertising packet type: 0x20 [ 356.160931][ T5852] Bluetooth: hci0: adv larger than maximum supported [ 356.789611][ T9915] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 362.112423][ T9984] netlink: 28 bytes leftover after parsing attributes in process `syz.2.896'. [ 362.142341][ T9984] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 362.176126][ T9984] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 364.121101][T10006] netlink: 4 bytes leftover after parsing attributes in process `syz.4.900'. [ 365.414875][T10023] FAULT_INJECTION: forcing a failure. [ 365.414875][T10023] name failslab, interval 1, probability 0, space 0, times 0 [ 365.506282][T10023] CPU: 0 UID: 0 PID: 10023 Comm: syz.4.907 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 365.506329][T10023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 365.506349][T10023] Call Trace: [ 365.506361][T10023] <TASK> [ 365.506374][T10023] dump_stack_lvl+0x16c/0x1f0 [ 365.506438][T10023] should_fail_ex+0x50a/0x650 [ 365.506483][T10023] ? fs_reclaim_acquire+0xae/0x150 [ 365.506525][T10023] should_failslab+0xc2/0x120 [ 365.506556][T10023] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 365.506602][T10023] ? apparmor_capable+0x114/0x1d0 [ 365.506646][T10023] ? prepare_creds+0x2e/0x750 [ 365.506688][T10023] prepare_creds+0x2e/0x750 [ 365.506728][T10023] __sys_setresuid+0x46d/0x1160 [ 365.506782][T10023] do_syscall_64+0xcd/0x250 [ 365.506825][T10023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.506867][T10023] RIP: 0033:0x7f59eb58d169 [ 365.506890][T10023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.506919][T10023] RSP: 002b:00007f59ec46f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 365.506949][T10023] RAX: ffffffffffffffda RBX: 00007f59eb7a5fa0 RCX: 00007f59eb58d169 [ 365.506967][T10023] RDX: 0000000000000000 RSI: 0000000000000007 RDI: 0000000000000002 [ 365.506983][T10023] RBP: 00007f59eb60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 365.507000][T10023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.507017][T10023] R13: 0000000000000000 R14: 00007f59eb7a5fa0 R15: 00007fff2b2b1008 [ 365.507051][T10023] </TASK> [ 367.306677][T10044] random: crng reseeded on system resumption [ 374.314296][T10132] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 377.066691][T10157] kexec: Could not allocate control_code_buffer [ 377.710657][T10183] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 379.269376][T10205] FAULT_INJECTION: forcing a failure. [ 379.269376][T10205] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 379.423786][T10205] CPU: 1 UID: 0 PID: 10205 Comm: syz.4.952 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 379.423828][T10205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 379.423845][T10205] Call Trace: [ 379.423855][T10205] <TASK> [ 379.423867][T10205] dump_stack_lvl+0x16c/0x1f0 [ 379.423918][T10205] should_fail_ex+0x50a/0x650 [ 379.423962][T10205] ? __pfx___might_resched+0x10/0x10 [ 379.424016][T10205] should_fail_alloc_page+0xe7/0x130 [ 379.424051][T10205] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 379.424100][T10205] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 379.424167][T10205] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 379.424217][T10205] ? hlock_class+0x4e/0x130 [ 379.424248][T10205] ? __lock_acquire+0xcc5/0x3c40 [ 379.424307][T10205] ? __pfx___lock_acquire+0x10/0x10 [ 379.424345][T10205] ? __pfx_lock_release+0x10/0x10 [ 379.424388][T10205] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 379.424439][T10205] ? policy_nodemask+0xea/0x4e0 [ 379.424474][T10205] alloc_pages_mpol+0x1fc/0x540 [ 379.424505][T10205] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 379.424536][T10205] ? __fget_files+0x204/0x3b0 [ 379.424582][T10205] ? __pfx_lock_release+0x10/0x10 [ 379.424624][T10205] ? trace_lock_acquire+0x14e/0x1f0 [ 379.424674][T10205] alloc_pages_noprof+0x131/0x390 [ 379.424706][T10205] get_free_pages_noprof+0xc/0x40 [ 379.424739][T10205] __pollwait+0x298/0x4c0 [ 379.424789][T10205] snd_rawmidi_poll+0x4b5/0x690 [ 379.424826][T10205] ? __pfx___pollwait+0x10/0x10 [ 379.424869][T10205] ? __pfx_snd_rawmidi_poll+0x10/0x10 [ 379.424904][T10205] do_select+0xd88/0x17e0 [ 379.424974][T10205] ? __pfx_do_select+0x10/0x10 [ 379.425016][T10205] ? __pfx_mark_lock+0x10/0x10 [ 379.425056][T10205] ? mark_lock+0xb5/0xc60 [ 379.425099][T10205] ? __pfx___pollwait+0x10/0x10 [ 379.425146][T10205] ? __pfx_pollwake+0x10/0x10 [ 379.425193][T10205] ? __pfx_pollwake+0x10/0x10 [ 379.425238][T10205] ? __pfx_pollwake+0x10/0x10 [ 379.425284][T10205] ? __pfx_pollwake+0x10/0x10 [ 379.425328][T10205] ? __pfx_pollwake+0x10/0x10 [ 379.425373][T10205] ? __pfx_pollwake+0x10/0x10 [ 379.425418][T10205] ? __pfx_pollwake+0x10/0x10 [ 379.425465][T10205] ? __pfx_pollwake+0x10/0x10 [ 379.425510][T10205] ? __pfx_pollwake+0x10/0x10 [ 379.425553][T10205] ? trace_lock_acquire+0x14e/0x1f0 [ 379.425592][T10205] ? lock_acquire+0x2f/0xb0 [ 379.425633][T10205] ? __might_fault+0xe3/0x190 [ 379.425673][T10205] ? __might_fault+0xe3/0x190 [ 379.425711][T10205] ? core_sys_select+0x47d/0xbc0 [ 379.425754][T10205] core_sys_select+0x47d/0xbc0 [ 379.425808][T10205] ? __pfx_core_sys_select+0x10/0x10 [ 379.425859][T10205] ? find_held_lock+0x2d/0x110 [ 379.425923][T10205] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 379.425979][T10205] kern_select+0x15e/0x1e0 [ 379.426042][T10205] ? __pfx_kern_select+0x10/0x10 [ 379.426091][T10205] ? __pfx_ksys_write+0x10/0x10 [ 379.426142][T10205] __x64_sys_select+0xbd/0x160 [ 379.426187][T10205] ? do_syscall_64+0x91/0x250 [ 379.426232][T10205] ? lockdep_hardirqs_on+0x7c/0x110 [ 379.426275][T10205] do_syscall_64+0xcd/0x250 [ 379.426324][T10205] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.426370][T10205] RIP: 0033:0x7f59eb58d169 [ 379.426395][T10205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.426425][T10205] RSP: 002b:00007f59ec44e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 379.426455][T10205] RAX: ffffffffffffffda RBX: 00007f59eb7a6080 RCX: 00007f59eb58d169 [ 379.426475][T10205] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 379.426491][T10205] RBP: 00007f59ec44e090 R08: 0000000000000000 R09: 0000000000000000 [ 379.426509][T10205] R10: 00002000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 379.426527][T10205] R13: 0000000000000000 R14: 00007f59eb7a6080 R15: 00007fff2b2b1008 [ 379.426564][T10205] </TASK> [ 382.357075][T10220] kexec: Could not allocate control_code_buffer [ 384.248582][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.256611][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.917356][T10273] nbd: must specify at least one socket [ 389.024758][T10312] HfR: entered promiscuous mode [ 389.282799][T10312] openvswitch: HfR: Dropping previously announced user features [ 389.956393][T10329] netlink: 28 bytes leftover after parsing attributes in process `syz.0.988'. [ 389.989513][T10329] veth1_macvtap: left promiscuous mode [ 393.628637][T10382] FAULT_INJECTION: forcing a failure. [ 393.628637][T10382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.651197][T10382] CPU: 0 UID: 0 PID: 10382 Comm: syz.2.993 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 393.651238][T10382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 393.651257][T10382] Call Trace: [ 393.651266][T10382] <TASK> [ 393.651278][T10382] dump_stack_lvl+0x16c/0x1f0 [ 393.651329][T10382] should_fail_ex+0x50a/0x650 [ 393.651379][T10382] _copy_from_user+0x2e/0xd0 [ 393.651438][T10382] move_addr_to_kernel+0x74/0x160 [ 393.651477][T10382] __sys_connect+0xb0/0x170 [ 393.651513][T10382] ? __pfx___sys_connect+0x10/0x10 [ 393.651549][T10382] ? __fget_files+0x20e/0x3b0 [ 393.651609][T10382] ? __pfx_ksys_write+0x10/0x10 [ 393.651662][T10382] __x64_sys_connect+0x72/0xb0 [ 393.651698][T10382] ? lockdep_hardirqs_on+0x7c/0x110 [ 393.651740][T10382] do_syscall_64+0xcd/0x250 [ 393.651787][T10382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.651832][T10382] RIP: 0033:0x7f0e7038d169 [ 393.651856][T10382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.651886][T10382] RSP: 002b:00007f0e711f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 393.651915][T10382] RAX: ffffffffffffffda RBX: 00007f0e705a5fa0 RCX: 00007f0e7038d169 [ 393.651934][T10382] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000003 [ 393.651953][T10382] RBP: 00007f0e711f4090 R08: 0000000000000000 R09: 0000000000000000 [ 393.651971][T10382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.651988][T10382] R13: 0000000000000000 R14: 00007f0e705a5fa0 R15: 00007ffee8de0458 [ 393.652025][T10382] </TASK> [ 395.997469][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.0.999'. [ 397.530402][T10420] Invalid ELF header magic: != ELF [ 399.281300][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1008'. [ 402.926261][T10484] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1018'. [ 403.683899][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1018'. [ 403.906522][ T5852] Bluetooth: hci4: unexpected subevent 0x01 length: 4 < 18 [ 404.051452][T10490] Invalid ELF header magic: != ELF [ 404.190288][ T30] audit: type=1800 audit(4294976196.068:14): pid=10496 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1027" name="dbroot" dev="configfs" ino=32826 res=0 errno=0 [ 409.124943][T10544] input: jJǸ-���9�%v����l��Q� J86�� as /devices/virtual/input/input18 [ 410.296292][ T5852] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 410.423779][ T30] audit: type=1800 audit(4294976210.272:15): pid=10559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1032" name="dbroot" dev="configfs" ino=32937 res=0 errno=0 [ 414.806784][T10593] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1040'. [ 414.913945][T10593] bridge_slave_1: left allmulticast mode [ 414.985402][T10593] bridge_slave_1: left promiscuous mode [ 415.016996][T10593] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.420604][T10593] bridge_slave_0: left allmulticast mode [ 415.526236][T10593] bridge_slave_0: left promiscuous mode [ 415.533177][T10593] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.088360][T10640] ptrace attach of "./syz-executor exec"[8705] was attempted by ""[10640] [ 422.109743][T10688] vivid-003: ================= START STATUS ================= [ 422.136301][T10688] vivid-003: Radio HW Seek Mode: Bounded [ 422.164053][T10688] vivid-003: Radio Programmable HW Seek: false [ 422.197515][T10688] vivid-003: RDS Rx I/O Mode: Block I/O [ 422.197585][T10688] vivid-003: Generate RBDS Instead of RDS: false [ 422.197625][T10688] vivid-003: RDS Reception: true [ 422.197660][T10688] vivid-003: RDS Program Type: 0 inactive [ 422.197706][T10688] vivid-003: RDS PS Name: inactive [ 422.197749][T10688] vivid-003: RDS Radio Text: inactive [ 422.197793][T10688] vivid-003: RDS Traffic Announcement: false inactive [ 422.197838][T10688] vivid-003: RDS Traffic Program: false inactive [ 422.197883][T10688] vivid-003: RDS Music: false inactive [ 422.197928][T10688] vivid-003: ================== END STATUS ================== [ 425.083322][T10731] FAULT_INJECTION: forcing a failure. [ 425.083322][T10731] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 425.175478][T10731] CPU: 0 UID: 0 PID: 10731 Comm: syz.0.1074 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 425.175524][T10731] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 425.175543][T10731] Call Trace: [ 425.175552][T10731] <TASK> [ 425.175564][T10731] dump_stack_lvl+0x16c/0x1f0 [ 425.175615][T10731] should_fail_ex+0x50a/0x650 [ 425.175667][T10731] ? __pfx___might_resched+0x10/0x10 [ 425.175720][T10731] should_fail_alloc_page+0xe7/0x130 [ 425.175756][T10731] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 425.175799][T10731] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 425.175841][T10731] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 425.175892][T10731] ? unwind_get_return_address+0x59/0xa0 [ 425.175952][T10731] ? arch_stack_walk+0xa7/0x100 [ 425.175995][T10731] ? hlock_class+0x4e/0x130 [ 425.176028][T10731] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 425.176106][T10731] ? __pfx___lock_acquire+0x10/0x10 [ 425.176146][T10731] ? kasan_save_stack+0x42/0x60 [ 425.176191][T10731] ? kasan_save_stack+0x33/0x60 [ 425.176235][T10731] ? kasan_save_track+0x14/0x30 [ 425.176281][T10731] ? __kasan_slab_alloc+0x89/0x90 [ 425.176347][T10731] ? kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 425.176395][T10731] ? alloc_vmap_area+0x636/0x2a60 [ 425.176430][T10731] ? __get_vm_area_node+0x19e/0x2f0 [ 425.176469][T10731] ? __vmalloc_node_range_noprof+0x26a/0x1530 [ 425.176513][T10731] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 425.176566][T10731] ? policy_nodemask+0xea/0x4e0 [ 425.176601][T10731] alloc_pages_mpol+0x1fc/0x540 [ 425.176644][T10731] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 425.176674][T10731] ? __page_table_check_ptes_set+0x16b/0x3e0 [ 425.176725][T10731] ? do_raw_spin_lock+0x12d/0x2c0 [ 425.176757][T10731] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 425.176795][T10731] alloc_pages_noprof+0x131/0x390 [ 425.176826][T10731] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 425.176874][T10731] get_free_pages_noprof+0xc/0x40 [ 425.176908][T10731] kasan_populate_vmalloc_pte+0x2d/0x160 [ 425.176955][T10731] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 425.177001][T10731] __apply_to_page_range+0x5fd/0xd30 [ 425.177050][T10731] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 425.177103][T10731] ? __pfx___apply_to_page_range+0x10/0x10 [ 425.177149][T10731] ? insert_vmap_area+0x2ef/0x4d0 [ 425.177191][T10731] alloc_vmap_area+0x93e/0x2a60 [ 425.177246][T10731] ? __pfx_alloc_vmap_area+0x10/0x10 [ 425.177297][T10731] __get_vm_area_node+0x19e/0x2f0 [ 425.177344][T10731] __vmalloc_node_range_noprof+0x26a/0x1530 [ 425.177388][T10731] ? pcpu_mem_zalloc+0x54/0xb0 [ 425.177432][T10731] ? pcpu_mem_zalloc+0x54/0xb0 [ 425.177470][T10731] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 425.177521][T10731] ? rcu_is_watching+0x12/0xc0 [ 425.177556][T10731] ? trace_kmalloc+0x2d/0xd0 [ 425.177594][T10731] ? pcpu_mem_zalloc+0x54/0xb0 [ 425.177624][T10731] __vmalloc_noprof+0x6d/0x90 [ 425.177674][T10731] ? pcpu_mem_zalloc+0x54/0xb0 [ 425.177704][T10731] pcpu_mem_zalloc+0x54/0xb0 [ 425.177735][T10731] pcpu_create_chunk+0x432/0x730 [ 425.177774][T10731] pcpu_alloc_noprof+0x1304/0x1680 [ 425.177828][T10731] bpf_map_alloc_percpu+0x9a/0x4b0 [ 425.177878][T10731] htab_map_alloc+0x1231/0x17b0 [ 425.177936][T10731] ? ns_capable+0xd7/0x110 [ 425.177987][T10731] map_create+0x5c5/0x1d20 [ 425.178037][T10731] ? __pfx_lock_release+0x10/0x10 [ 425.178080][T10731] ? trace_lock_acquire+0x14e/0x1f0 [ 425.178125][T10731] ? __pfx_map_create+0x10/0x10 [ 425.178172][T10731] ? lock_acquire+0x2f/0xb0 [ 425.178215][T10731] ? __might_fault+0xe3/0x190 [ 425.178247][T10731] ? __might_fault+0xe3/0x190 [ 425.178289][T10731] __sys_bpf+0x43f9/0x49f0 [ 425.178336][T10731] ? __pfx_futex_wake+0x10/0x10 [ 425.178381][T10731] ? __pfx_lock_release+0x10/0x10 [ 425.178431][T10731] ? __pfx___sys_bpf+0x10/0x10 [ 425.178492][T10731] ? do_futex+0x123/0x350 [ 425.178531][T10731] ? __pfx_do_futex+0x10/0x10 [ 425.178591][T10731] ? xfd_validate_state+0x5d/0x180 [ 425.178645][T10731] ? rcu_is_watching+0x12/0xc0 [ 425.178687][T10731] __x64_sys_bpf+0x78/0xc0 [ 425.178715][T10731] ? lockdep_hardirqs_on+0x7c/0x110 [ 425.178759][T10731] do_syscall_64+0xcd/0x250 [ 425.178808][T10731] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.178853][T10731] RIP: 0033:0x7fd140f8d169 [ 425.178878][T10731] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 425.178911][T10731] RSP: 002b:00007fd141d2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 425.178942][T10731] RAX: ffffffffffffffda RBX: 00007fd1411a5fa0 RCX: 00007fd140f8d169 [ 425.178962][T10731] RDX: 00000000000000a3 RSI: 0000200000000780 RDI: 0000000000000000 [ 425.178981][T10731] RBP: 00007fd14100e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 425.178999][T10731] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 425.179016][T10731] R13: 0000000000000000 R14: 00007fd1411a5fa0 R15: 00007fff59ed6528 [ 425.179055][T10731] </TASK> [ 425.751236][ C0] vkms_vblank_simulate: vblank timer overrun [ 426.831317][ T8936] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 428.720108][T10778] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 428.765057][T10778] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 432.254895][T10803] netlink: 346 bytes leftover after parsing attributes in process `syz.2.1086'. [ 434.752535][T10841] FAULT_INJECTION: forcing a failure. [ 434.752535][T10841] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 434.793362][T10841] CPU: 1 UID: 0 PID: 10841 Comm: syz.0.1097 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 434.793411][T10841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 434.793431][T10841] Call Trace: [ 434.793440][T10841] <TASK> [ 434.793453][T10841] dump_stack_lvl+0x16c/0x1f0 [ 434.793503][T10841] should_fail_ex+0x50a/0x650 [ 434.793547][T10841] ? __pfx___might_resched+0x10/0x10 [ 434.793604][T10841] should_fail_alloc_page+0xe7/0x130 [ 434.793639][T10841] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 434.793688][T10841] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 434.793744][T10841] ? hlock_class+0x4e/0x130 [ 434.793777][T10841] ? mark_lock+0xb5/0xc60 [ 434.793825][T10841] ? __pfx_mark_lock+0x10/0x10 [ 434.793871][T10841] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 434.793924][T10841] ? hlock_class+0x4e/0x130 [ 434.793957][T10841] ? mark_lock+0xb5/0xc60 [ 434.794003][T10841] ? __pfx_mark_lock+0x10/0x10 [ 434.794060][T10841] ? hlock_class+0x4e/0x130 [ 434.794091][T10841] ? __lock_acquire+0xcc5/0x3c40 [ 434.794134][T10841] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 434.794185][T10841] ? policy_nodemask+0xea/0x4e0 [ 434.794219][T10841] alloc_pages_mpol+0x1fc/0x540 [ 434.794252][T10841] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 434.794282][T10841] ? hlock_class+0x4e/0x130 [ 434.794322][T10841] folio_alloc_mpol_noprof+0x36/0x2f0 [ 434.794360][T10841] vma_alloc_folio_noprof+0xee/0x1b0 [ 434.794395][T10841] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 434.794431][T10841] ? find_held_lock+0x2d/0x110 [ 434.794471][T10841] do_pte_missing+0x202f/0x3e10 [ 434.794529][T10841] __handle_mm_fault+0x103c/0x2a40 [ 434.794585][T10841] ? __pfx___handle_mm_fault+0x10/0x10 [ 434.794628][T10841] ? follow_page_pte+0x3ac/0x1490 [ 434.794669][T10841] ? __pfx_lock_release+0x10/0x10 [ 434.794738][T10841] handle_mm_fault+0x3fa/0xaa0 [ 434.794790][T10841] __get_user_pages+0x773/0x36f0 [ 434.794844][T10841] ? __pfx_mt_find+0x10/0x10 [ 434.794888][T10841] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 434.794932][T10841] ? __pfx___get_user_pages+0x10/0x10 [ 434.794978][T10841] ? __mm_populate+0x21d/0x380 [ 434.795031][T10841] populate_vma_page_range+0x27f/0x3a0 [ 434.795089][T10841] ? __pfx_populate_vma_page_range+0x10/0x10 [ 434.795138][T10841] ? __pfx_find_vma_intersection+0x10/0x10 [ 434.795183][T10841] ? vm_mmap_pgoff+0x31a/0x440 [ 434.795234][T10841] __mm_populate+0x1d6/0x380 [ 434.795283][T10841] ? __pfx___mm_populate+0x10/0x10 [ 434.795334][T10841] ? up_write+0x1b2/0x520 [ 434.795389][T10841] vm_mmap_pgoff+0x352/0x440 [ 434.795437][T10841] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 434.795497][T10841] ? __pfx_do_sys_openat2+0x10/0x10 [ 434.795542][T10841] ? __x64_sys_futex+0x1e1/0x4c0 [ 434.795579][T10841] ? __x64_sys_futex+0x1ea/0x4c0 [ 434.795625][T10841] ksys_mmap_pgoff+0x7d/0x5c0 [ 434.795664][T10841] ? rcu_is_watching+0x12/0xc0 [ 434.795700][T10841] __x64_sys_mmap+0x125/0x190 [ 434.795751][T10841] do_syscall_64+0xcd/0x250 [ 434.795798][T10841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.795872][T10841] RIP: 0033:0x7fd140f8d169 [ 434.795898][T10841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.795931][T10841] RSP: 002b:00007fd141d2b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 434.795963][T10841] RAX: ffffffffffffffda RBX: 00007fd1411a5fa0 RCX: 00007fd140f8d169 [ 434.795985][T10841] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 434.796004][T10841] RBP: 00007fd14100e2a0 R08: 0000000000000002 R09: 0000000000008000 [ 434.796024][T10841] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 434.796043][T10841] R13: 0000000000000000 R14: 00007fd1411a5fa0 R15: 00007fff59ed6528 [ 434.796089][T10841] </TASK> [ 435.564656][T10852] Invalid ELF header magic: != ELF [ 438.978331][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1108'. [ 439.841649][T10915] vivid-003: ================= START STATUS ================= [ 439.880798][T10915] vivid-003: Radio HW Seek Mode: Bounded [ 439.906207][T10915] vivid-003: Radio Programmable HW Seek: false [ 439.934154][T10915] vivid-003: RDS Rx I/O Mode: Block I/O [ 440.058162][T10915] vivid-003: Generate RBDS Instead of RDS: false [ 440.196123][T10915] vivid-003: RDS Reception: true [ 440.430162][T10915] vivid-003: RDS Program Type: 0 inactive [ 440.691230][T10915] vivid-003: RDS PS Name: inactive [ 440.746245][T10915] vivid-003: RDS Radio Text: inactive [ 440.794424][T10915] vivid-003: RDS Traffic Announcement: false inactive [ 440.843422][T10915] vivid-003: RDS Traffic Program: false inactive [ 440.896211][T10915] vivid-003: RDS Music: false inactive [ 440.953949][T10915] vivid-003: ================== END STATUS ================== [ 443.647448][T10962] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1118'. [ 445.683599][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.683751][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 456.482525][T11180] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1153'. [ 457.059592][T11192] FAULT_INJECTION: forcing a failure. [ 457.059592][T11192] name failslab, interval 1, probability 0, space 0, times 0 [ 457.096112][T11192] CPU: 0 UID: 0 PID: 11192 Comm: syz.3.1156 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 457.096158][T11192] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 457.096176][T11192] Call Trace: [ 457.096185][T11192] <TASK> [ 457.096197][T11192] dump_stack_lvl+0x16c/0x1f0 [ 457.096246][T11192] should_fail_ex+0x50a/0x650 [ 457.096291][T11192] ? fs_reclaim_acquire+0xae/0x150 [ 457.096337][T11192] ? newseg+0x25b/0xe60 [ 457.096368][T11192] should_failslab+0xc2/0x120 [ 457.096400][T11192] __kmalloc_cache_noprof+0x68/0x410 [ 457.096444][T11192] ? rcu_is_watching+0x12/0xc0 [ 457.096486][T11192] newseg+0x25b/0xe60 [ 457.096528][T11192] ? __pfx_newseg+0x10/0x10 [ 457.096559][T11192] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 457.096607][T11192] ipcget+0xf7/0xdc0 [ 457.096642][T11192] ? __pfx_do_futex+0x10/0x10 [ 457.096676][T11192] ? __might_fault+0xe3/0x190 [ 457.096706][T11192] ? __pfx_ipcget+0x10/0x10 [ 457.096737][T11192] ? __x64_sys_futex+0x1e1/0x4c0 [ 457.096770][T11192] ? __x64_sys_futex+0x1ea/0x4c0 [ 457.096855][T11192] __x64_sys_shmget+0x13f/0x1b0 [ 457.096888][T11192] ? __pfx___x64_sys_shmget+0x10/0x10 [ 457.096931][T11192] do_syscall_64+0xcd/0x250 [ 457.096975][T11192] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.097015][T11192] RIP: 0033:0x7f52c178d169 [ 457.097037][T11192] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.097066][T11192] RSP: 002b:00007f52c25e7038 EFLAGS: 00000246 ORIG_RAX: 000000000000001d [ 457.097094][T11192] RAX: ffffffffffffffda RBX: 00007f52c19a5fa0 RCX: 00007f52c178d169 [ 457.097114][T11192] RDX: 0000000079e56dc9 RSI: 0000000000000003 RDI: 0000000100000000 [ 457.097132][T11192] RBP: 00007f52c180e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 457.097149][T11192] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 457.097165][T11192] R13: 0000000000000000 R14: 00007f52c19a5fa0 R15: 00007ffd728fc438 [ 457.097199][T11192] </TASK> [ 457.526314][T11194] Invalid ELF header magic: != ELF [ 457.860467][ T976] [ 457.863307][ T976] ====================================================== [ 457.871757][ T976] WARNING: possible circular locking dependency detected [ 457.880241][ T976] 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 Not tainted [ 457.888369][ T976] ------------------------------------------------------ [ 457.896805][ T976] kworker/0:2/976 is trying to acquire lock: [ 457.904207][ T976] ffffffff8fef8b68 (rtnl_mutex){+.+.}-{4:4}, at: smc_vlan_by_tcpsk+0x251/0x620 [ 457.915038][ T976] [ 457.915038][ T976] but task is already holding lock: [ 457.923893][ T976] ffff88805b97bbd8 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x53c/0xae0 [ 457.935121][ T976] [ 457.935121][ T976] which lock already depends on the new lock. [ 457.935121][ T976] [ 457.947614][ T976] [ 457.947614][ T976] the existing dependency chain (in reverse order) is: [ 457.958429][ T976] [ 457.958429][ T976] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 457.967622][ T976] lock_sock_nested+0x3a/0xf0 [ 457.973879][ T976] sockopt_lock_sock+0x54/0x70 [ 457.980240][ T976] do_ip_setsockopt+0xff/0x3280 [ 457.986705][ T976] ip_setsockopt+0x59/0xf0 [ 457.992656][ T976] raw_setsockopt+0xb8/0x2a0 [ 457.998813][ T976] do_sock_setsockopt+0x222/0x480 [ 458.005484][ T976] __sys_setsockopt+0x1a0/0x230 [ 458.011937][ T976] __x64_sys_setsockopt+0xbd/0x160 [ 458.018737][ T976] do_syscall_64+0xcd/0x250 [ 458.024788][ T976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 458.032519][ T976] [ 458.032519][ T976] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 458.041186][ T976] __lock_acquire+0x249e/0x3c40 [ 458.047648][ T976] lock_acquire.part.0+0x11b/0x380 [ 458.054426][ T976] __mutex_lock+0x19b/0xb10 [ 458.060466][ T976] smc_vlan_by_tcpsk+0x251/0x620 [ 458.067019][ T976] __smc_connect+0x44d/0x4890 [ 458.073275][ T976] smc_connect_work+0x54f/0xae0 [ 458.079723][ T976] process_one_work+0x9c5/0x1ba0 [ 458.086291][ T976] worker_thread+0x6c8/0xf00 [ 458.092435][ T976] kthread+0x3af/0x750 [ 458.097948][ T976] ret_from_fork+0x45/0x80 [ 458.103911][ T976] ret_from_fork_asm+0x1a/0x30 [ 458.110260][ T976] [ 458.110260][ T976] other info that might help us debug this: [ 458.110260][ T976] [ 458.122532][ T976] Possible unsafe locking scenario: [ 458.122532][ T976] [ 458.131469][ T976] CPU0 CPU1 [ 458.137921][ T976] ---- ---- [ 458.144356][ T976] lock(sk_lock-AF_INET); [ 458.149659][ T976] lock(rtnl_mutex); [ 458.157468][ T976] lock(sk_lock-AF_INET); [ 458.165793][ T976] lock(rtnl_mutex); [ 458.170572][ T976] [ 458.170572][ T976] *** DEADLOCK *** [ 458.170572][ T976] [ 458.180338][ T976] 3 locks held by kworker/0:2/976: [ 458.186465][ T976] #0: ffff88803203d148 ((wq_completion)smc_hs_wq){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 458.199343][ T976] #1: ffffc90003c17d18 ((work_completion)(&smc->connect_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 458.213476][ T976] #2: ffff88805b97bbd8 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x53c/0xae0 [ 458.225200][ T976] [ 458.225200][ T976] stack backtrace: [ 458.232269][ T976] CPU: 0 UID: 0 PID: 976 Comm: kworker/0:2 Not tainted 6.14.0-syzkaller-00685-g3ba7dfb8da62 #0 [ 458.232300][ T976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 458.232319][ T976] Workqueue: smc_hs_wq smc_connect_work [ 458.232345][ T976] Call Trace: [ 458.232353][ T976] <TASK> [ 458.232362][ T976] dump_stack_lvl+0x116/0x1f0 [ 458.232400][ T976] print_circular_bug+0x490/0x760 [ 458.232439][ T976] check_noncircular+0x31a/0x400 [ 458.232474][ T976] ? __pfx_check_noncircular+0x10/0x10 [ 458.232507][ T976] ? __lock_acquire+0x2077/0x3c40 [ 458.232546][ T976] ? lockdep_lock+0xc6/0x200 [ 458.232573][ T976] ? __pfx_lockdep_lock+0x10/0x10 [ 458.232603][ T976] __lock_acquire+0x249e/0x3c40 [ 458.232644][ T976] ? __pfx___lock_acquire+0x10/0x10 [ 458.232680][ T976] ? __pfx_lock_release+0x10/0x10 [ 458.232725][ T976] lock_acquire.part.0+0x11b/0x380 [ 458.232762][ T976] ? smc_vlan_by_tcpsk+0x251/0x620 [ 458.232790][ T976] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 458.232827][ T976] ? rcu_is_watching+0x12/0xc0 [ 458.232854][ T976] ? trace_lock_acquire+0x14e/0x1f0 [ 458.232884][ T976] ? smc_vlan_by_tcpsk+0x251/0x620 [ 458.232910][ T976] ? lock_acquire+0x2f/0xb0 [ 458.232946][ T976] ? smc_vlan_by_tcpsk+0x251/0x620 [ 458.232974][ T976] __mutex_lock+0x19b/0xb10 [ 458.233009][ T976] ? smc_vlan_by_tcpsk+0x251/0x620 [ 458.233036][ T976] ? smc_vlan_by_tcpsk+0x251/0x620 [ 458.233062][ T976] ? __pfx___mutex_lock+0x10/0x10 [ 458.233099][ T976] ? smc_vlan_by_tcpsk+0x32e/0x620 [ 458.233131][ T976] ? smc_vlan_by_tcpsk+0x251/0x620 [ 458.233156][ T976] smc_vlan_by_tcpsk+0x251/0x620 [ 458.233182][ T976] ? __pfx_smc_vlan_by_tcpsk+0x10/0x10 [ 458.233212][ T976] __smc_connect+0x44d/0x4890 [ 458.233259][ T976] ? __pfx___smc_connect+0x10/0x10 [ 458.233300][ T976] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 458.233326][ T976] ? mark_held_locks+0x9f/0xe0 [ 458.233361][ T976] ? __local_bh_enable_ip+0xa4/0x120 [ 458.233403][ T976] smc_connect_work+0x54f/0xae0 [ 458.233427][ T976] ? __pfx_smc_connect_work+0x10/0x10 [ 458.233452][ T976] ? lock_acquire+0x2f/0xb0 [ 458.233486][ T976] ? process_one_work+0x921/0x1ba0 [ 458.233523][ T976] process_one_work+0x9c5/0x1ba0 [ 458.233560][ T976] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 458.233598][ T976] ? __pfx_process_one_work+0x10/0x10 [ 458.233637][ T976] ? assign_work+0x1a0/0x250 [ 458.233669][ T976] worker_thread+0x6c8/0xf00 [ 458.233723][ T976] ? __kthread_parkme+0x148/0x220 [ 458.233748][ T976] ? __pfx_worker_thread+0x10/0x10 [ 458.233782][ T976] kthread+0x3af/0x750 [ 458.233812][ T976] ? __pfx_kthread+0x10/0x10 [ 458.233840][ T976] ? lock_acquire+0x2f/0xb0 [ 458.233876][ T976] ? __pfx_kthread+0x10/0x10 [ 458.233905][ T976] ret_from_fork+0x45/0x80 [ 458.233940][ T976] ? __pfx_kthread+0x10/0x10 [ 458.233969][ T976] ret_from_fork_asm+0x1a/0x30 [ 458.234003][ T976] </TASK>