last executing test programs: 7.761546294s ago: executing program 1 (id=1893): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x2, 0x0) io_uring_setup$auto(0xd364, &(0x7f0000000000)={0x2000, 0x10002, 0x7f, 0x5, 0x6, 0x5bb6, r0, [], {0x2, 0x4, 0x9, 0x2, 0x400, 0x401, 0x7, 0x5, 0x80000000}, {0x7, 0x2, 0x6e68, 0x8, 0x6b, 0x9, 0x0, 0x4, 0xb1}}) 7.106545652s ago: executing program 1 (id=1899): socket(0x1d, 0x2, 0x6) r0 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r1, 0xfd}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x4}, 0x1, 0x0, 0x5, 0x9}, 0x2}, 0x5, 0xfff) 6.908094012s ago: executing program 1 (id=1901): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x40008000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x88) socket(0x2, 0x6, 0x0) statx$auto(0xffffff9c, 0x0, 0x1000, 0x803, 0x0) ioctl$auto(0x1, 0x890b, 0x8) 6.743954737s ago: executing program 1 (id=1902): select$auto(0xe, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) r0 = pidfd_open$auto(0x1, 0x0) setns(r0, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) mount_setattr$auto(0x5, 0x0, 0x0, &(0x7f0000000640)={0x1, 0x9, 0x80000}, 0x283) 5.786716257s ago: executing program 1 (id=1914): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) syncfs$auto(r0) 4.700421849s ago: executing program 0 (id=1919): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) sysfs$auto(0x2, 0x0, 0x0) epoll_create$auto(0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(0x5, 0x1, r0, 0x0) 4.498692261s ago: executing program 1 (id=1920): r0 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) read$auto(0x3, 0x0, 0x400000) 4.123299971s ago: executing program 0 (id=1929): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000bc0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendfile$auto(0x1, 0x3, 0x0, 0xc01) sendmsg$auto_BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={0x1c, r1, 0x305, 0x70bd23, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40008}, 0x4000040) 3.880441606s ago: executing program 0 (id=1922): syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getsockopt$auto(0x6, 0x1, 0x13, 0x0, 0x0) 3.559699256s ago: executing program 0 (id=1924): close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x6, 0x21, 0x0, 0x10) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0x400000000010003}, 0x1) 3.442325144s ago: executing program 3 (id=1925): mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000040)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) 2.995599157s ago: executing program 3 (id=1927): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x7f, 0x1, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f0000003b40)={0x0, 0x0, &(0x7f0000003b00)={&(0x7f0000000040)={0x18, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40080}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='Z'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x3, 0x0) 2.775479995s ago: executing program 3 (id=1928): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x400001d, 0x2, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x118) socket(0x2, 0x1, 0x0) ioctl$auto(0x3, 0x800005411, 0x38) 2.684524926s ago: executing program 3 (id=1930): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f000001f300), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYRES32=r1], 0x1ac}}, 0x40000) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x3c, 0xff, 0x2}}) 2.521599677s ago: executing program 0 (id=1931): mmap$auto(0x0, 0x2020007, 0xffffffffffffffff, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) dup2$auto(r0, r0) 2.408819207s ago: executing program 2 (id=1932): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r0, 0x0, 0x20) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f0000000280)=@bpf_attr_4={0x1e, 0x4, 0x7fffffff, 0x8}, 0x6f4) 2.262754802s ago: executing program 3 (id=1933): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ustat$auto(0x801, 0x0) r0 = socket(0xa, 0x1, 0x84) getsockopt$auto(r0, 0x84, 0x9, 0x0, 0x0) r1 = socket(0xa, 0x2, 0x0) setsockopt$auto(r1, 0x29, 0x30, 0x0, 0x20000) 1.614239557s ago: executing program 2 (id=1934): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x180800, 0x0) read$auto(r2, 0x0, 0x39b8) ioctl$auto(r1, 0xc0045520, r0) 1.289477885s ago: executing program 2 (id=1935): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xfffffffffffffffd, 0x40000008000) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0x18, 0x5, 0x1) getsockopt$auto(0x3, 0x200000000001, 0x52, 0x0, 0x0) 1.090270721s ago: executing program 2 (id=1936): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) ptrace$auto_PTRACE_SET_THREAD_AREA(0x1a, 0x0, 0x4, 0x8) 800.351604ms ago: executing program 3 (id=1937): r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/pid_for_children\x00') exit$auto(0x3) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) bpf$auto(0x5, &(0x7f0000000040)=@task_fd_query={0x0, r0, 0x8, 0x0, 0xd, 0x6, 0xffffffffffffffff, 0x6, 0x8001}, 0x3b) seccomp$auto(0x1, 0x8, &(0x7f00000002c0)="050008311950268bb1b2") 439.412365ms ago: executing program 2 (id=1938): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sysfs$auto(0x2, 0x0, 0x0) r0 = epoll_create$auto(0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$auto(r0, 0x1, r1, 0x0) 166.643833ms ago: executing program 2 (id=1939): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video3\x00', 0x80000, 0x0) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 0 (id=1940): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x5, 0x2, 0x7, 0x0) r0 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000c40)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r0, 0x0, 0xe) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. [ 59.191688][ T5821] cgroup: Unknown subsys name 'net' [ 59.347173][ T5821] cgroup: Unknown subsys name 'cpuset' [ 59.355535][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 60.713905][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.038040][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.057689][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.061700][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.069575][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.072446][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.080305][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.087267][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.093515][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.108025][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.109052][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.115678][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.123298][ T5845] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.130288][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.136826][ T5845] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.143340][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.151880][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.166312][ T5150] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.166638][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.184548][ T5150] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.185078][ T5845] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.195439][ T5150] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.199031][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.206967][ T5150] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.223061][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 63.586333][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 63.637798][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 63.676146][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 63.690674][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 63.793815][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.804187][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.811510][ T5832] bridge_slave_0: entered allmulticast mode [ 63.821131][ T5832] bridge_slave_0: entered promiscuous mode [ 63.844058][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.851306][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.858675][ T5832] bridge_slave_1: entered allmulticast mode [ 63.865714][ T5832] bridge_slave_1: entered promiscuous mode [ 63.872850][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.880145][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.887451][ T5833] bridge_slave_0: entered allmulticast mode [ 63.893943][ T5833] bridge_slave_0: entered promiscuous mode [ 63.925712][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.933215][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.941291][ T5833] bridge_slave_1: entered allmulticast mode [ 63.947948][ T5833] bridge_slave_1: entered promiscuous mode [ 63.974584][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.981653][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.988869][ T5834] bridge_slave_0: entered allmulticast mode [ 63.995912][ T5834] bridge_slave_0: entered promiscuous mode [ 64.013558][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.030909][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.038221][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.046291][ T5843] bridge_slave_0: entered allmulticast mode [ 64.052782][ T5843] bridge_slave_0: entered promiscuous mode [ 64.059808][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.067724][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.075486][ T5834] bridge_slave_1: entered allmulticast mode [ 64.082001][ T5834] bridge_slave_1: entered promiscuous mode [ 64.089889][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.101000][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.110880][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.121076][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.128456][ T5843] bridge_slave_1: entered allmulticast mode [ 64.137550][ T5843] bridge_slave_1: entered promiscuous mode [ 64.157571][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.208292][ T5833] team0: Port device team_slave_0 added [ 64.226438][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.238142][ T5832] team0: Port device team_slave_0 added [ 64.246184][ T5833] team0: Port device team_slave_1 added [ 64.253898][ T5832] team0: Port device team_slave_1 added [ 64.262220][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.275435][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.286673][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.352251][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.359379][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.385846][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.399617][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.406680][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.432735][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.445486][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.452438][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.478480][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.491652][ T5843] team0: Port device team_slave_0 added [ 64.500353][ T5834] team0: Port device team_slave_0 added [ 64.514896][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.521850][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.550985][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.563157][ T5843] team0: Port device team_slave_1 added [ 64.581341][ T5834] team0: Port device team_slave_1 added [ 64.651492][ T5832] hsr_slave_0: entered promiscuous mode [ 64.657730][ T5832] hsr_slave_1: entered promiscuous mode [ 64.665208][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.672169][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.701924][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.726214][ T5833] hsr_slave_0: entered promiscuous mode [ 64.732269][ T5833] hsr_slave_1: entered promiscuous mode [ 64.738566][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.746542][ T5833] Cannot create hsr debugfs directory [ 64.753205][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.760752][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.786831][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.798837][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.805896][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.832014][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.863298][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.870477][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.896606][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.984586][ T5843] hsr_slave_0: entered promiscuous mode [ 64.990734][ T5843] hsr_slave_1: entered promiscuous mode [ 64.997234][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.004864][ T5843] Cannot create hsr debugfs directory [ 65.056747][ T5834] hsr_slave_0: entered promiscuous mode [ 65.062832][ T5834] hsr_slave_1: entered promiscuous mode [ 65.070357][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.078192][ T5834] Cannot create hsr debugfs directory [ 65.245161][ T5846] Bluetooth: hci0: command tx timeout [ 65.245197][ T5845] Bluetooth: hci2: command tx timeout [ 65.245209][ T5150] Bluetooth: hci1: command tx timeout [ 65.271118][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.299357][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.317353][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.324626][ T5846] Bluetooth: hci3: command tx timeout [ 65.343483][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.370765][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.395266][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.421976][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.431694][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.465497][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.483331][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.496337][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.507815][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.581983][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.592543][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.602997][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.613744][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.709980][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.731879][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.759578][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.775058][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.796472][ T1049] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.803682][ T1049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.825750][ T1049] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.832813][ T1049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.857011][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.868576][ T1049] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.875670][ T1049] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.899613][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.910999][ T1049] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.918119][ T1049] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.942338][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.953922][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.961125][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.983147][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.990303][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.021767][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.067426][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.074554][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.124679][ T3486] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.131788][ T3486] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.193671][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.323694][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.422051][ T5832] veth0_vlan: entered promiscuous mode [ 66.460138][ T5832] veth1_vlan: entered promiscuous mode [ 66.514084][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.557441][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.574070][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.583353][ T5832] veth0_macvtap: entered promiscuous mode [ 66.617882][ T5832] veth1_macvtap: entered promiscuous mode [ 66.644905][ T5833] veth0_vlan: entered promiscuous mode [ 66.670823][ T5833] veth1_vlan: entered promiscuous mode [ 66.683071][ T5843] veth0_vlan: entered promiscuous mode [ 66.692588][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.714655][ T5834] veth0_vlan: entered promiscuous mode [ 66.723829][ T5843] veth1_vlan: entered promiscuous mode [ 66.736779][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.753722][ T5834] veth1_vlan: entered promiscuous mode [ 66.773244][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.782443][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.791939][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.802278][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.848319][ T5833] veth0_macvtap: entered promiscuous mode [ 66.860246][ T5843] veth0_macvtap: entered promiscuous mode [ 66.870725][ T5833] veth1_macvtap: entered promiscuous mode [ 66.903967][ T5834] veth0_macvtap: entered promiscuous mode [ 66.912153][ T5843] veth1_macvtap: entered promiscuous mode [ 66.921549][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.943059][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.954962][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.966369][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.977201][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.988200][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.001011][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.014200][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.024285][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.034946][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.046257][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.068045][ T5834] veth1_macvtap: entered promiscuous mode [ 67.078515][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.089463][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.098593][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.107329][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.120415][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.131261][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.141382][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.152670][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.167118][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.193641][ T5843] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.203674][ T5843] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.212700][ T5843] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.221601][ T5843] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.246238][ T3054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.254193][ T3054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.304127][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.305325][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.319672][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.324696][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.331060][ T5846] Bluetooth: hci0: command tx timeout [ 67.340790][ T5845] Bluetooth: hci1: command tx timeout [ 67.349915][ T5846] Bluetooth: hci2: command tx timeout [ 67.350523][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.367763][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.377699][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.388326][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.399710][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.404775][ T5846] Bluetooth: hci3: command tx timeout [ 67.444137][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.459231][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.469741][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.480698][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.493234][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.504145][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.520988][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.534308][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 67.563101][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.572951][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.583797][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.592706][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.610177][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.610196][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.738268][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.757297][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.785255][ T1049] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.794582][ T1049] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.878160][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.878180][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.900050][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.915184][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.992374][ T3486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.028980][ T3486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.404663][ T5846] Bluetooth: hci2: command tx timeout [ 69.415966][ T5846] Bluetooth: hci1: command tx timeout [ 69.416008][ T5846] Bluetooth: hci0: command tx timeout [ 69.484770][ T5845] Bluetooth: hci3: command tx timeout [ 69.636988][ T5948] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 70.405576][ T5972] mmap: syz.3.30 (5972) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 70.893805][ T5982] nbd: socks must be embedded in a SOCK_ITEM attr [ 70.937122][ T5982] block nbd0: shutting down sockets [ 71.484397][ T5845] Bluetooth: hci0: command tx timeout [ 71.484633][ T5846] Bluetooth: hci1: command tx timeout [ 71.490285][ T5150] Bluetooth: hci2: command tx timeout [ 71.565039][ T5846] Bluetooth: hci3: command tx timeout [ 71.648747][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.655399][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.668769][ T5998] kexec: Could not allocate control_code_buffer [ 72.806823][ T6031] netlink: 342 bytes leftover after parsing attributes in process `syz.0.55'. [ 72.815414][ T6029] Zero length message leads to an empty skb [ 74.933521][ T6087] delete_channel: no stack [ 75.032784][ T6086] sctp: [Deprecated]: syz.3.75 (pid 6086) Use of struct sctp_assoc_value in delayed_ack socket option. [ 75.032784][ T6086] Use struct sctp_sack_info instead [ 75.294357][ T6101] netlink: 342 bytes leftover after parsing attributes in process `syz.1.82'. [ 76.144279][ T29] audit: type=1800 audit(1741301801.509:2): pid=6121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.90" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0 [ 81.892944][ T25] cfg80211: failed to load regulatory.db [ 83.236999][ T6297] tipc: Trying to set illegal importance in message [ 83.542209][ T6306] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 84.748396][ T6340] netlink: 342 bytes leftover after parsing attributes in process `syz.2.179'. [ 84.762623][ T6340] netlink: 342 bytes leftover after parsing attributes in process `syz.2.179'. [ 85.713825][ T6371] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 86.412941][ T6397] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 87.492414][ T6425] device-mapper: ioctl: Unable to rename non-existent device, to uuid [ 88.252056][ T6455] netlink: 342 bytes leftover after parsing attributes in process `syz.0.227'. [ 88.281433][ T6455] netlink: 342 bytes leftover after parsing attributes in process `syz.0.227'. [ 90.074414][ T6510] netlink: 28 bytes leftover after parsing attributes in process `syz.2.246'. [ 90.395411][ T6520] process 'syz.1.249' launched './file0' with NULL argv: empty string added [ 91.587328][ T6557] WARNING! power/level is deprecated; use power/control instead [ 92.281163][ T6582] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.324062][ T6584] netlink: 28 bytes leftover after parsing attributes in process `syz.3.280'. [ 95.567863][ T6668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.310'. [ 96.738648][ T6701] TCP: TCP_TX_DELAY enabled [ 97.580611][ T6717] netlink: 28 bytes leftover after parsing attributes in process `syz.1.333'. [ 97.606249][ T6717] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.615044][ T6717] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.695739][ T6717] bridge0: entered promiscuous mode [ 97.718114][ T6717] bridge0: entered allmulticast mode [ 98.903186][ T6750] netlink: 338 bytes leftover after parsing attributes in process `syz.2.348'. [ 98.992444][ T6755] netlink: 28 bytes leftover after parsing attributes in process `syz.1.347'. [ 102.383530][ T6833] netlink: 28 bytes leftover after parsing attributes in process `syz.3.383'. [ 102.423265][ T6833] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.430755][ T6833] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.446212][ T6833] bridge0: entered promiscuous mode [ 102.451662][ T6833] bridge0: entered allmulticast mode [ 102.859812][ T6849] netlink: 342 bytes leftover after parsing attributes in process `syz.3.390'. [ 103.799744][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz.0.398'. [ 104.173586][ T6885] netlink: 'syz.3.402': attribute type 9 has an invalid length. [ 104.185461][ T6885] netlink: 330 bytes leftover after parsing attributes in process `syz.3.402'. [ 104.418820][ T6892] netlink: 346 bytes leftover after parsing attributes in process `syz.0.405'. [ 105.743747][ T5846] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 105.743783][ T5846] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 105.763374][ T5846] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 105.763435][ T5846] Bluetooth: hci0: adv larger than maximum supported [ 105.770730][ T5846] Bluetooth: hci0: adv larger than maximum supported [ 105.779515][ T5846] Bluetooth: hci0: Unknown advertising packet type: 0x7f [ 105.787069][ T5846] Bluetooth: hci0: Malformed LE Event: 0x0d [ 106.727062][ T6957] syz.0.432 (6957): /proc/6956/oom_adj is deprecated, please use /proc/6956/oom_score_adj instead. [ 106.744607][ T6959] netlink: 342 bytes leftover after parsing attributes in process `syz.1.431'. [ 107.609370][ T6983] netlink: 4 bytes leftover after parsing attributes in process `syz.1.443'. [ 109.235123][ T7015] netlink: 'syz.1.454': attribute type 9 has an invalid length. [ 109.242809][ T7015] netlink: 330 bytes leftover after parsing attributes in process `syz.1.454'. [ 112.949305][ T7122] netlink: 4 bytes leftover after parsing attributes in process `syz.2.499'. [ 113.003745][ T7122] netlink: 354 bytes leftover after parsing attributes in process `syz.2.499'. [ 114.354128][ T7167] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 114.736490][ T7183] netlink: 346 bytes leftover after parsing attributes in process `syz.2.523'. [ 115.737837][ T7212] zram: Removed device: zram0 [ 116.545010][ T7244] tc_dump_action: action bad kind [ 116.860178][ T7254] netlink: 4 bytes leftover after parsing attributes in process `syz.1.554'. [ 116.896051][ T7254] netlink: 354 bytes leftover after parsing attributes in process `syz.1.554'. [ 116.928876][ T7256] netlink: 334 bytes leftover after parsing attributes in process `syz.3.555'. [ 117.972361][ T7288] netlink: 4 bytes leftover after parsing attributes in process `syz.0.566'. [ 118.004695][ T7288] netlink: 354 bytes leftover after parsing attributes in process `syz.0.566'. [ 118.032203][ T7290] netlink: 346 bytes leftover after parsing attributes in process `syz.1.568'. [ 118.257958][ T7301] netlink: 20 bytes leftover after parsing attributes in process `syz.0.571'. [ 118.734643][ T7320] netlink: 44 bytes leftover after parsing attributes in process `syz.1.576'. [ 118.758095][ T7319] netlink: 342 bytes leftover after parsing attributes in process `syz.0.583'. [ 119.040014][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.580'. [ 119.064636][ T7336] netlink: 354 bytes leftover after parsing attributes in process `syz.3.580'. [ 120.207144][ T7375] netlink: 330 bytes leftover after parsing attributes in process `syz.2.593'. [ 120.353539][ T7379] netlink: 334 bytes leftover after parsing attributes in process `syz.1.594'. [ 123.596597][ T7475] netlink: 'syz.3.628': attribute type 1 has an invalid length. [ 123.624483][ T7475] __nla_validate_parse: 1 callbacks suppressed [ 123.624501][ T7475] netlink: 32 bytes leftover after parsing attributes in process `syz.3.628'. [ 125.221125][ T7522] netlink: 334 bytes leftover after parsing attributes in process `syz.3.642'. [ 126.028349][ T7541] netlink: 346 bytes leftover after parsing attributes in process `syz.3.649'. [ 126.580945][ T7556] netlink: 4 bytes leftover after parsing attributes in process `syz.1.657'. [ 126.639856][ T7556] netlink: 354 bytes leftover after parsing attributes in process `syz.1.657'. [ 128.060212][ T7596] netlink: 346 bytes leftover after parsing attributes in process `syz.3.675'. [ 128.983796][ T7618] capability: warning: `syz.0.684' uses 32-bit capabilities (legacy support in use) [ 131.783517][ T7657] netlink: 'syz.0.696': attribute type 10 has an invalid length. [ 133.000723][ T7687] sd 0:0:1:0: device reset [ 133.108295][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.114965][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.000582][ T7705] netlink: 346 bytes leftover after parsing attributes in process `syz.0.715'. [ 134.423422][ T7717] sd 0:0:1:0: device reset [ 135.805093][ T7749] netlink: 334 bytes leftover after parsing attributes in process `syz.1.732'. [ 136.464983][ T7764] netlink: 342 bytes leftover after parsing attributes in process `syz.1.748'. [ 137.700494][ T7801] netlink: 60 bytes leftover after parsing attributes in process `syz.1.755'. [ 140.417932][ T7848] netlink: 'syz.0.772': attribute type 29 has an invalid length. [ 140.426960][ T7848] netlink: 334 bytes leftover after parsing attributes in process `syz.0.772'. [ 141.786904][ T7881] netlink: 342 bytes leftover after parsing attributes in process `syz.3.786'. [ 142.242836][ T7891] lo: entered promiscuous mode [ 142.254143][ T7891] lo: left promiscuous mode [ 142.859462][ T7908] netlink: 326 bytes leftover after parsing attributes in process `syz.1.794'. [ 143.066274][ T7912] netlink: 'syz.3.796': attribute type 4 has an invalid length. [ 145.360855][ T7958] lo: entered promiscuous mode [ 145.395535][ T7958] lo: left promiscuous mode [ 146.151589][ T7980] netlink: 326 bytes leftover after parsing attributes in process `syz.3.825'. [ 146.214678][ T7981] netlink: 'syz.0.824': attribute type 4 has an invalid length. [ 146.335960][ T7986] netlink: 350 bytes leftover after parsing attributes in process `syz.3.826'. [ 146.875091][ T7998] netlink: 342 bytes leftover after parsing attributes in process `syz.0.829'. [ 147.500641][ T8004] netlink: 'syz.3.833': attribute type 2 has an invalid length. [ 147.525848][ T8004] netlink: 'syz.3.833': attribute type 2 has an invalid length. [ 152.747713][ T8094] FAULT_INJECTION: forcing a failure. [ 152.747713][ T8094] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 152.831786][ T8094] CPU: 1 UID: 0 PID: 8094 Comm: syz.3.864 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 152.831824][ T8094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.831838][ T8094] Call Trace: [ 152.831846][ T8094] [ 152.831860][ T8094] dump_stack_lvl+0x16c/0x1f0 [ 152.831905][ T8094] should_fail_ex+0x50a/0x650 [ 152.831941][ T8094] ? __pfx___might_resched+0x10/0x10 [ 152.831983][ T8094] should_fail_alloc_page+0xe7/0x130 [ 152.832010][ T8094] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 152.832056][ T8094] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 152.832097][ T8094] ? mark_lock+0xb5/0xc60 [ 152.832136][ T8094] ? hlock_class+0x4e/0x130 [ 152.832161][ T8094] ? __lock_acquire+0xcc5/0x3c40 [ 152.832194][ T8094] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 152.832242][ T8094] ? __pfx___lock_acquire+0x10/0x10 [ 152.832282][ T8094] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 152.832321][ T8094] ? policy_nodemask+0xea/0x4e0 [ 152.832348][ T8094] alloc_pages_mpol+0x1fc/0x540 [ 152.832373][ T8094] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 152.832400][ T8094] ? xas_load+0x49/0x5b0 [ 152.832429][ T8094] ? filemap_get_entry+0xd0/0x3c0 [ 152.832465][ T8094] folio_alloc_noprof+0x20/0x2d0 [ 152.832493][ T8094] filemap_alloc_folio_noprof+0x39b/0x470 [ 152.832522][ T8094] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 152.832549][ T8094] ? rcu_is_watching+0x12/0xc0 [ 152.832579][ T8094] __filemap_get_folio+0x5e9/0xbd0 [ 152.832618][ T8094] ioctx_alloc+0x763/0x2010 [ 152.832654][ T8094] ? __might_fault+0x13b/0x190 [ 152.832687][ T8094] ? __pfx_ioctx_alloc+0x10/0x10 [ 152.832715][ T8094] ? lock_acquire+0x2f/0xb0 [ 152.832748][ T8094] ? __might_fault+0xe3/0x190 [ 152.832777][ T8094] __x64_sys_io_setup+0xc9/0x210 [ 152.832811][ T8094] do_syscall_64+0xcd/0x250 [ 152.832845][ T8094] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.832878][ T8094] RIP: 0033:0x7fe14d18d169 [ 152.832897][ T8094] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.832928][ T8094] RSP: 002b:00007fe14cff9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 152.832951][ T8094] RAX: ffffffffffffffda RBX: 00007fe14d3a5fa0 RCX: 00007fe14d18d169 [ 152.832968][ T8094] RDX: 0000000000000000 RSI: 0000400000000580 RDI: 000000000000ffff [ 152.832983][ T8094] RBP: 00007fe14d20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 152.832998][ T8094] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 152.833013][ T8094] R13: 0000000000000000 R14: 00007fe14d3a5fa0 R15: 00007ffcd1614378 [ 152.833053][ T8094] [ 154.304539][ T8120] netlink: 334 bytes leftover after parsing attributes in process `syz.3.876'. [ 155.066624][ T8143] netlink: 28 bytes leftover after parsing attributes in process `syz.1.882'. [ 156.065297][ T8168] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 156.809951][ T8177] netlink: 'syz.3.891': attribute type 19 has an invalid length. [ 156.809999][ T8177] netlink: 334 bytes leftover after parsing attributes in process `syz.3.891'. [ 157.225790][ T8186] netlink: 342 bytes leftover after parsing attributes in process `syz.1.894'. [ 159.618895][ T8254] netlink: 28 bytes leftover after parsing attributes in process `syz.3.911'. [ 159.938902][ T8263] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 161.350318][ T8313] netlink: 342 bytes leftover after parsing attributes in process `syz.3.931'. [ 162.999557][ T8371] FAULT_INJECTION: forcing a failure. [ 162.999557][ T8371] name failslab, interval 1, probability 0, space 0, times 1 [ 162.999638][ T8371] CPU: 0 UID: 0 PID: 8371 Comm: syz.2.947 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 162.999667][ T8371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 162.999682][ T8371] Call Trace: [ 162.999689][ T8371] [ 162.999699][ T8371] dump_stack_lvl+0x16c/0x1f0 [ 162.999735][ T8371] should_fail_ex+0x50a/0x650 [ 162.999772][ T8371] ? fs_reclaim_acquire+0xae/0x150 [ 162.999805][ T8371] should_failslab+0xc2/0x120 [ 162.999829][ T8371] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 162.999867][ T8371] ? __kernfs_new_node+0xd3/0x890 [ 162.999906][ T8371] __kernfs_new_node+0xd3/0x890 [ 162.999941][ T8371] ? __pfx___kernfs_new_node+0x10/0x10 [ 162.999972][ T8371] ? __pfx_lock_release+0x10/0x10 [ 163.000005][ T8371] ? kernfs_add_one+0x39d/0x520 [ 163.000052][ T8371] ? up_write+0x1b2/0x520 [ 163.000091][ T8371] kernfs_new_node+0x186/0x240 [ 163.000138][ T8371] __kernfs_create_file+0x53/0x350 [ 163.000170][ T8371] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 163.000211][ T8371] internal_create_group+0x56c/0xf10 [ 163.000255][ T8371] ? __pfx_internal_create_group+0x10/0x10 [ 163.000295][ T8371] ? kernfs_create_link+0x1bd/0x240 [ 163.000328][ T8371] internal_create_groups+0x9d/0x150 [ 163.000362][ T8371] device_add+0x6d3/0x1a70 [ 163.000407][ T8371] ? __pfx_device_add+0x10/0x10 [ 163.000446][ T8371] ? __init_waitqueue_head+0xca/0x150 [ 163.000483][ T8371] netdev_register_kobject+0x183/0x3a0 [ 163.000525][ T8371] register_netdevice+0x147b/0x1eb0 [ 163.000570][ T8371] ? __pfx_register_netdevice+0x10/0x10 [ 163.000618][ T8371] __ip_tunnel_create+0x4aa/0x690 [ 163.000652][ T8371] ? __pfx___ip_tunnel_create+0x10/0x10 [ 163.000685][ T8371] ? read_word_at_a_time+0xe/0x20 [ 163.000727][ T8371] ip_tunnel_init_net+0x22a/0x790 [ 163.000764][ T8371] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 163.000804][ T8371] ? __kmalloc_noprof+0x23b/0x510 [ 163.000845][ T8371] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 163.000872][ T8371] ops_init+0x1df/0x5f0 [ 163.000909][ T8371] setup_net+0x21f/0x860 [ 163.000947][ T8371] ? __pfx_setup_net+0x10/0x10 [ 163.000981][ T8371] ? down_read_killable+0xcc/0x380 [ 163.001017][ T8371] ? __pfx_down_read_killable+0x10/0x10 [ 163.001050][ T8371] ? __raw_spin_lock_init+0x3a/0x110 [ 163.001076][ T8371] ? debug_mutex_init+0x37/0x70 [ 163.001107][ T8371] copy_net_ns+0x2a6/0x5f0 [ 163.001135][ T8371] create_new_namespaces+0x3ea/0xad0 [ 163.001181][ T8371] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 163.001222][ T8371] ksys_unshare+0x45d/0xa40 [ 163.001249][ T8371] ? __pfx_ksys_unshare+0x10/0x10 [ 163.001289][ T8371] __x64_sys_unshare+0x31/0x40 [ 163.001314][ T8371] do_syscall_64+0xcd/0x250 [ 163.001349][ T8371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.001389][ T8371] RIP: 0033:0x7feb4a98d169 [ 163.001409][ T8371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.001432][ T8371] RSP: 002b:00007feb4b8a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 163.001454][ T8371] RAX: ffffffffffffffda RBX: 00007feb4aba5fa0 RCX: 00007feb4a98d169 [ 163.001469][ T8371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 163.001483][ T8371] RBP: 00007feb4aa0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 163.001497][ T8371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 163.001511][ T8371] R13: 0000000000000000 R14: 00007feb4aba5fa0 R15: 00007ffce1d93848 [ 163.001545][ T8371] [ 164.127685][ T8396] netlink: 'syz.3.958': attribute type 16 has an invalid length. [ 164.156117][ T8396] netlink: 330 bytes leftover after parsing attributes in process `syz.3.958'. [ 164.183502][ T8401] netlink: 28 bytes leftover after parsing attributes in process `syz.1.959'. [ 166.138626][ T8448] netlink: 'syz.2.978': attribute type 16 has an invalid length. [ 166.151316][ T8448] netlink: 330 bytes leftover after parsing attributes in process `syz.2.978'. [ 166.754483][ T8470] netlink: 342 bytes leftover after parsing attributes in process `syz.1.986'. [ 167.053844][ T8483] netlink: 'syz.0.992': attribute type 16 has an invalid length. [ 167.062907][ T8483] netlink: 330 bytes leftover after parsing attributes in process `syz.0.992'. [ 167.928782][ T29] audit: type=1800 audit(1741301893.299:3): pid=8504 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1000" name="set_event" dev="tracefs" ino=13 res=0 errno=0 [ 168.660090][ T8526] delete_channel: no stack [ 169.640434][ T8551] FAULT_INJECTION: forcing a failure. [ 169.640434][ T8551] name failslab, interval 1, probability 0, space 0, times 0 [ 169.696592][ T8551] CPU: 0 UID: 0 PID: 8551 Comm: syz.3.1019 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 169.696625][ T8551] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 169.696640][ T8551] Call Trace: [ 169.696648][ T8551] [ 169.696658][ T8551] dump_stack_lvl+0x16c/0x1f0 [ 169.696695][ T8551] should_fail_ex+0x50a/0x650 [ 169.696733][ T8551] ? fs_reclaim_acquire+0xae/0x150 [ 169.696768][ T8551] ? ops_init+0x77/0x5f0 [ 169.696803][ T8551] should_failslab+0xc2/0x120 [ 169.696828][ T8551] __kmalloc_noprof+0xcb/0x510 [ 169.696871][ T8551] ops_init+0x77/0x5f0 [ 169.696911][ T8551] setup_net+0x21f/0x860 [ 169.696957][ T8551] ? __pfx_setup_net+0x10/0x10 [ 169.696992][ T8551] ? down_read_killable+0xcc/0x380 [ 169.697028][ T8551] ? __pfx_down_read_killable+0x10/0x10 [ 169.697061][ T8551] ? __raw_spin_lock_init+0x3a/0x110 [ 169.697088][ T8551] ? debug_mutex_init+0x37/0x70 [ 169.697118][ T8551] copy_net_ns+0x2a6/0x5f0 [ 169.697146][ T8551] create_new_namespaces+0x3ea/0xad0 [ 169.697192][ T8551] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 169.697233][ T8551] ksys_unshare+0x45d/0xa40 [ 169.697259][ T8551] ? __pfx_ksys_unshare+0x10/0x10 [ 169.697283][ T8551] ? xfd_validate_state+0x5d/0x180 [ 169.697329][ T8551] __x64_sys_unshare+0x31/0x40 [ 169.697353][ T8551] do_syscall_64+0xcd/0x250 [ 169.697388][ T8551] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.697420][ T8551] RIP: 0033:0x7fe14d18d169 [ 169.697439][ T8551] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.697463][ T8551] RSP: 002b:00007fe14cff9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 169.697485][ T8551] RAX: ffffffffffffffda RBX: 00007fe14d3a5fa0 RCX: 00007fe14d18d169 [ 169.697501][ T8551] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 169.697515][ T8551] RBP: 00007fe14d20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 169.697530][ T8551] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 169.697544][ T8551] R13: 0000000000000000 R14: 00007fe14d3a5fa0 R15: 00007ffcd1614378 [ 169.697574][ T8551] [ 170.134829][ T8560] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1022'. [ 170.529918][ T29] audit: type=1800 audit(1741301895.899:4): pid=8575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1029" name="set_event" dev="tracefs" ino=13 res=0 errno=0 [ 170.580604][ T8578] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1032'. [ 170.668541][ T8583] FAULT_INJECTION: forcing a failure. [ 170.668541][ T8583] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 170.704342][ T8583] CPU: 0 UID: 0 PID: 8583 Comm: syz.3.1034 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 170.704375][ T8583] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.704389][ T8583] Call Trace: [ 170.704397][ T8583] [ 170.704406][ T8583] dump_stack_lvl+0x16c/0x1f0 [ 170.704442][ T8583] should_fail_ex+0x50a/0x650 [ 170.704486][ T8583] _copy_to_iter+0x2a1/0x1560 [ 170.704518][ T8583] ? chacha_block_generic+0x18a/0x270 [ 170.704557][ T8583] ? __pfx__copy_to_iter+0x10/0x10 [ 170.704591][ T8583] ? __pfx___might_resched+0x10/0x10 [ 170.704624][ T8583] ? crng_make_state+0x48e/0x6d0 [ 170.704665][ T8583] get_random_bytes_user+0x180/0x3c0 [ 170.704704][ T8583] ? __pfx_get_random_bytes_user+0x10/0x10 [ 170.704749][ T8583] ? do_futex+0x123/0x350 [ 170.704787][ T8583] ? import_ubuf+0x1b6/0x220 [ 170.704814][ T8583] __x64_sys_getrandom+0x184/0x290 [ 170.704838][ T8583] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 170.704871][ T8583] ? xfd_validate_state+0x5d/0x180 [ 170.704919][ T8583] do_syscall_64+0xcd/0x250 [ 170.704955][ T8583] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.704989][ T8583] RIP: 0033:0x7fe14d18d169 [ 170.705008][ T8583] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.705030][ T8583] RSP: 002b:00007fe14cff9038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 170.705053][ T8583] RAX: ffffffffffffffda RBX: 00007fe14d3a5fa0 RCX: 00007fe14d18d169 [ 170.705068][ T8583] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 170.705082][ T8583] RBP: 00007fe14d20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 170.705097][ T8583] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 170.705111][ T8583] R13: 0000000000000000 R14: 00007fe14d3a5fa0 R15: 00007ffcd1614378 [ 170.705141][ T8583] [ 171.065980][ T8589] FAULT_INJECTION: forcing a failure. [ 171.065980][ T8589] name failslab, interval 1, probability 0, space 0, times 0 [ 171.105680][ T8589] CPU: 1 UID: 0 PID: 8589 Comm: syz.1.1036 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 171.105714][ T8589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.105732][ T8589] Call Trace: [ 171.105740][ T8589] [ 171.105750][ T8589] dump_stack_lvl+0x16c/0x1f0 [ 171.105788][ T8589] should_fail_ex+0x50a/0x650 [ 171.105826][ T8589] ? fs_reclaim_acquire+0xae/0x150 [ 171.105868][ T8589] should_failslab+0xc2/0x120 [ 171.105893][ T8589] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 171.105936][ T8589] ? mpls_dev_sysctl_register+0xd4/0x2a0 [ 171.105971][ T8589] kmemdup_noprof+0x29/0x60 [ 171.106001][ T8589] mpls_dev_sysctl_register+0xd4/0x2a0 [ 171.106029][ T8589] ? pcpu_alloc_noprof+0x126/0x1680 [ 171.106057][ T8589] ? __pfx_mpls_dev_sysctl_register+0x10/0x10 [ 171.106099][ T8589] mpls_dev_notify+0x4ac/0xa20 [ 171.106131][ T8589] notifier_call_chain+0xb7/0x410 [ 171.106160][ T8589] ? __pfx_mpls_dev_notify+0x10/0x10 [ 171.106195][ T8589] call_netdevice_notifiers_info+0xbe/0x140 [ 171.106225][ T8589] register_netdevice+0x17c2/0x1eb0 [ 171.106271][ T8589] ? __pfx_register_netdevice+0x10/0x10 [ 171.106319][ T8589] __ip_tunnel_create+0x4aa/0x690 [ 171.106352][ T8589] ? __pfx___ip_tunnel_create+0x10/0x10 [ 171.106394][ T8589] ip_tunnel_init_net+0x22a/0x790 [ 171.106430][ T8589] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 171.106470][ T8589] ? __kmalloc_noprof+0x23b/0x510 [ 171.106510][ T8589] ? __pfx_ipgre_init_net+0x10/0x10 [ 171.106537][ T8589] ops_init+0x1df/0x5f0 [ 171.106576][ T8589] setup_net+0x21f/0x860 [ 171.106614][ T8589] ? __pfx_setup_net+0x10/0x10 [ 171.106647][ T8589] ? down_read_killable+0xcc/0x380 [ 171.106681][ T8589] ? __pfx_down_read_killable+0x10/0x10 [ 171.106713][ T8589] ? __raw_spin_lock_init+0x3a/0x110 [ 171.106739][ T8589] ? debug_mutex_init+0x37/0x70 [ 171.106769][ T8589] copy_net_ns+0x2a6/0x5f0 [ 171.106797][ T8589] create_new_namespaces+0x3ea/0xad0 [ 171.106847][ T8589] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 171.106890][ T8589] ksys_unshare+0x45d/0xa40 [ 171.106917][ T8589] ? __pfx_ksys_unshare+0x10/0x10 [ 171.106940][ T8589] ? xfd_validate_state+0x5d/0x180 [ 171.106985][ T8589] __x64_sys_unshare+0x31/0x40 [ 171.107010][ T8589] do_syscall_64+0xcd/0x250 [ 171.107044][ T8589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.107077][ T8589] RIP: 0033:0x7f9baef8d169 [ 171.107097][ T8589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.107119][ T8589] RSP: 002b:00007f9bafe8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 171.107141][ T8589] RAX: ffffffffffffffda RBX: 00007f9baf1a5fa0 RCX: 00007f9baef8d169 [ 171.107158][ T8589] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 171.107173][ T8589] RBP: 00007f9baf00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 171.107188][ T8589] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 171.107203][ T8589] R13: 0000000000000000 R14: 00007f9baf1a5fa0 R15: 00007ffd962371a8 [ 171.107237][ T8589] [ 171.452289][ T29] audit: type=1800 audit(1741301896.789:5): pid=8603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1043" name="set_event" dev="tracefs" ino=13 res=0 errno=0 [ 171.768511][ T8612] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1047'. [ 172.761640][ T8642] FAULT_INJECTION: forcing a failure. [ 172.761640][ T8642] name failslab, interval 1, probability 0, space 0, times 0 [ 172.777858][ T8642] CPU: 1 UID: 0 PID: 8642 Comm: syz.3.1058 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 172.777891][ T8642] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 172.777905][ T8642] Call Trace: [ 172.777912][ T8642] [ 172.777922][ T8642] dump_stack_lvl+0x16c/0x1f0 [ 172.777961][ T8642] should_fail_ex+0x50a/0x650 [ 172.777999][ T8642] ? fs_reclaim_acquire+0xae/0x150 [ 172.778032][ T8642] ? __register_sysctl_table+0xeaf/0x1910 [ 172.778070][ T8642] should_failslab+0xc2/0x120 [ 172.778096][ T8642] __kmalloc_noprof+0xcb/0x510 [ 172.778137][ T8642] __register_sysctl_table+0xeaf/0x1910 [ 172.778183][ T8642] ? __pfx___register_sysctl_table+0x10/0x10 [ 172.778217][ T8642] ? is_module_address+0x2a/0x50 [ 172.778250][ T8642] ? register_net_sysctl_sz+0x228/0x3e0 [ 172.778288][ T8642] mpls_dev_sysctl_register+0x186/0x2a0 [ 172.778316][ T8642] ? pcpu_alloc_noprof+0x126/0x1680 [ 172.778344][ T8642] ? __pfx_mpls_dev_sysctl_register+0x10/0x10 [ 172.778387][ T8642] mpls_dev_notify+0x4ac/0xa20 [ 172.778421][ T8642] notifier_call_chain+0xb7/0x410 [ 172.778449][ T8642] ? __pfx_mpls_dev_notify+0x10/0x10 [ 172.778491][ T8642] call_netdevice_notifiers_info+0xbe/0x140 [ 172.778521][ T8642] register_netdevice+0x17c2/0x1eb0 [ 172.778568][ T8642] ? __pfx_register_netdevice+0x10/0x10 [ 172.778617][ T8642] __ip_tunnel_create+0x4aa/0x690 [ 172.778650][ T8642] ? __pfx___ip_tunnel_create+0x10/0x10 [ 172.778692][ T8642] ip_tunnel_init_net+0x22a/0x790 [ 172.778727][ T8642] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 172.778766][ T8642] ? __kmalloc_noprof+0x23b/0x510 [ 172.778807][ T8642] ? __pfx_ipgre_init_net+0x10/0x10 [ 172.778834][ T8642] ops_init+0x1df/0x5f0 [ 172.778874][ T8642] setup_net+0x21f/0x860 [ 172.778915][ T8642] ? __pfx_setup_net+0x10/0x10 [ 172.778949][ T8642] ? down_read_killable+0xcc/0x380 [ 172.778983][ T8642] ? __pfx_down_read_killable+0x10/0x10 [ 172.779017][ T8642] ? __raw_spin_lock_init+0x3a/0x110 [ 172.779044][ T8642] ? debug_mutex_init+0x37/0x70 [ 172.779075][ T8642] copy_net_ns+0x2a6/0x5f0 [ 172.779103][ T8642] create_new_namespaces+0x3ea/0xad0 [ 172.779148][ T8642] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 172.779189][ T8642] ksys_unshare+0x45d/0xa40 [ 172.779215][ T8642] ? __pfx_ksys_unshare+0x10/0x10 [ 172.779239][ T8642] ? xfd_validate_state+0x5d/0x180 [ 172.779284][ T8642] __x64_sys_unshare+0x31/0x40 [ 172.779309][ T8642] do_syscall_64+0xcd/0x250 [ 172.779343][ T8642] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.779377][ T8642] RIP: 0033:0x7fe14d18d169 [ 172.779396][ T8642] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.779418][ T8642] RSP: 002b:00007fe14cff9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 172.779441][ T8642] RAX: ffffffffffffffda RBX: 00007fe14d3a5fa0 RCX: 00007fe14d18d169 [ 172.779458][ T8642] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 172.779472][ T8642] RBP: 00007fe14d20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 172.779493][ T8642] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 172.779507][ T8642] R13: 0000000000000000 R14: 00007fe14d3a5fa0 R15: 00007ffcd1614378 [ 172.779541][ T8642] [ 172.779621][ T8642] sysctl could not get directory: /net/mpls/conf/gre0 -12 [ 173.360645][ T8662] FAULT_INJECTION: forcing a failure. [ 173.360645][ T8662] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 173.386186][ T8662] CPU: 0 UID: 0 PID: 8662 Comm: syz.2.1066 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 173.386219][ T8662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 173.386233][ T8662] Call Trace: [ 173.386240][ T8662] [ 173.386250][ T8662] dump_stack_lvl+0x16c/0x1f0 [ 173.386288][ T8662] should_fail_ex+0x50a/0x650 [ 173.386331][ T8662] _copy_to_iter+0x2a1/0x1560 [ 173.386362][ T8662] ? chacha_block_generic+0x18a/0x270 [ 173.386400][ T8662] ? __pfx__copy_to_iter+0x10/0x10 [ 173.386433][ T8662] ? __pfx___might_resched+0x10/0x10 [ 173.386467][ T8662] ? crng_make_state+0x48e/0x6d0 [ 173.386507][ T8662] get_random_bytes_user+0x180/0x3c0 [ 173.386545][ T8662] ? __pfx_get_random_bytes_user+0x10/0x10 [ 173.386590][ T8662] ? do_futex+0x123/0x350 [ 173.386627][ T8662] ? import_ubuf+0x1b6/0x220 [ 173.386654][ T8662] __x64_sys_getrandom+0x184/0x290 [ 173.386678][ T8662] ? __pfx___x64_sys_getrandom+0x10/0x10 [ 173.386709][ T8662] ? xfd_validate_state+0x5d/0x180 [ 173.386756][ T8662] do_syscall_64+0xcd/0x250 [ 173.386791][ T8662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 173.386823][ T8662] RIP: 0033:0x7feb4a98d169 [ 173.386843][ T8662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 173.386865][ T8662] RSP: 002b:00007feb4b8a8038 EFLAGS: 00000246 ORIG_RAX: 000000000000013e [ 173.386888][ T8662] RAX: ffffffffffffffda RBX: 00007feb4aba5fa0 RCX: 00007feb4a98d169 [ 173.386904][ T8662] RDX: 0000000000000003 RSI: 0000000006000000 RDI: 0000000000000000 [ 173.386918][ T8662] RBP: 00007feb4aa0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 173.386933][ T8662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 173.386948][ T8662] R13: 0000000000000000 R14: 00007feb4aba5fa0 R15: 00007ffce1d93848 [ 173.386979][ T8662] [ 174.022986][ T8678] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1075'. [ 174.239911][ T8689] FAULT_INJECTION: forcing a failure. [ 174.239911][ T8689] name failslab, interval 1, probability 0, space 0, times 0 [ 174.269884][ T8689] CPU: 1 UID: 0 PID: 8689 Comm: syz.3.1078 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 174.269916][ T8689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 174.269931][ T8689] Call Trace: [ 174.269938][ T8689] [ 174.269948][ T8689] dump_stack_lvl+0x16c/0x1f0 [ 174.269986][ T8689] should_fail_ex+0x50a/0x650 [ 174.270024][ T8689] ? fs_reclaim_acquire+0xae/0x150 [ 174.270058][ T8689] should_failslab+0xc2/0x120 [ 174.270081][ T8689] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 174.270120][ T8689] ? mpls_dev_sysctl_register+0xd4/0x2a0 [ 174.270153][ T8689] kmemdup_noprof+0x29/0x60 [ 174.270183][ T8689] mpls_dev_sysctl_register+0xd4/0x2a0 [ 174.270207][ T8689] ? pcpu_alloc_noprof+0x126/0x1680 [ 174.270232][ T8689] ? __pfx_mpls_dev_sysctl_register+0x10/0x10 [ 174.270271][ T8689] mpls_dev_notify+0x4ac/0xa20 [ 174.270303][ T8689] notifier_call_chain+0xb7/0x410 [ 174.270331][ T8689] ? __pfx_mpls_dev_notify+0x10/0x10 [ 174.270364][ T8689] call_netdevice_notifiers_info+0xbe/0x140 [ 174.270393][ T8689] register_netdevice+0x17c2/0x1eb0 [ 174.270434][ T8689] ? __pfx_register_netdevice+0x10/0x10 [ 174.270479][ T8689] __ip_tunnel_create+0x4aa/0x690 [ 174.270510][ T8689] ? __pfx___ip_tunnel_create+0x10/0x10 [ 174.270550][ T8689] ip_tunnel_init_net+0x22a/0x790 [ 174.270585][ T8689] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 174.270619][ T8689] ? __kmalloc_noprof+0x23b/0x510 [ 174.270669][ T8689] ? __pfx_ipgre_init_net+0x10/0x10 [ 174.270696][ T8689] ops_init+0x1df/0x5f0 [ 174.270737][ T8689] setup_net+0x21f/0x860 [ 174.270775][ T8689] ? __pfx_setup_net+0x10/0x10 [ 174.270808][ T8689] ? down_read_killable+0xcc/0x380 [ 174.270843][ T8689] ? __pfx_down_read_killable+0x10/0x10 [ 174.270876][ T8689] ? __raw_spin_lock_init+0x3a/0x110 [ 174.270902][ T8689] ? debug_mutex_init+0x37/0x70 [ 174.270936][ T8689] copy_net_ns+0x2a6/0x5f0 [ 174.270965][ T8689] create_new_namespaces+0x3ea/0xad0 [ 174.271014][ T8689] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 174.271055][ T8689] ksys_unshare+0x45d/0xa40 [ 174.271081][ T8689] ? __pfx_ksys_unshare+0x10/0x10 [ 174.271104][ T8689] ? xfd_validate_state+0x5d/0x180 [ 174.271150][ T8689] __x64_sys_unshare+0x31/0x40 [ 174.271175][ T8689] do_syscall_64+0xcd/0x250 [ 174.271209][ T8689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.271241][ T8689] RIP: 0033:0x7fe14d18d169 [ 174.271261][ T8689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 174.271282][ T8689] RSP: 002b:00007fe14cff9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 174.271305][ T8689] RAX: ffffffffffffffda RBX: 00007fe14d3a5fa0 RCX: 00007fe14d18d169 [ 174.271321][ T8689] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 174.271336][ T8689] RBP: 00007fe14d20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 174.271351][ T8689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 174.271365][ T8689] R13: 0000000000000000 R14: 00007fe14d3a5fa0 R15: 00007ffcd1614378 [ 174.271395][ T8689] [ 174.773013][ T8704] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1086'. [ 174.910923][ T8709] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1088'. [ 175.779113][ T8744] FAULT_INJECTION: forcing a failure. [ 175.779113][ T8744] name failslab, interval 1, probability 0, space 0, times 0 [ 175.814053][ T8744] CPU: 1 UID: 0 PID: 8744 Comm: syz.1.1101 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 175.814087][ T8744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.814101][ T8744] Call Trace: [ 175.814108][ T8744] [ 175.814118][ T8744] dump_stack_lvl+0x16c/0x1f0 [ 175.814155][ T8744] should_fail_ex+0x50a/0x650 [ 175.814192][ T8744] ? fs_reclaim_acquire+0xae/0x150 [ 175.814232][ T8744] ? register_netdevice+0x504/0x1eb0 [ 175.814267][ T8744] should_failslab+0xc2/0x120 [ 175.814290][ T8744] __kmalloc_cache_noprof+0x68/0x410 [ 175.814331][ T8744] register_netdevice+0x504/0x1eb0 [ 175.814367][ T8744] ? sized_strscpy+0xae/0x2e0 [ 175.814403][ T8744] ? __pfx_register_netdevice+0x10/0x10 [ 175.814437][ T8744] ? alloc_netdev_mqs+0xed5/0x15d0 [ 175.814472][ T8744] __ip_tunnel_create+0x4aa/0x690 [ 175.814497][ T8744] ? __pfx___ip_tunnel_create+0x10/0x10 [ 175.814522][ T8744] ? read_word_at_a_time+0xe/0x20 [ 175.814562][ T8744] ip_tunnel_init_net+0x22a/0x790 [ 175.814592][ T8744] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 175.814624][ T8744] ? __kmalloc_noprof+0x23b/0x510 [ 175.814657][ T8744] ? __pfx_ipgre_tap_init_net+0x10/0x10 [ 175.814678][ T8744] ops_init+0x1df/0x5f0 [ 175.814708][ T8744] setup_net+0x21f/0x860 [ 175.814737][ T8744] ? __pfx_setup_net+0x10/0x10 [ 175.814763][ T8744] ? down_read_killable+0xcc/0x380 [ 175.814790][ T8744] ? __pfx_down_read_killable+0x10/0x10 [ 175.814815][ T8744] ? __raw_spin_lock_init+0x3a/0x110 [ 175.814835][ T8744] ? debug_mutex_init+0x37/0x70 [ 175.814859][ T8744] copy_net_ns+0x2a6/0x5f0 [ 175.814881][ T8744] create_new_namespaces+0x3ea/0xad0 [ 175.814916][ T8744] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 175.814947][ T8744] ksys_unshare+0x45d/0xa40 [ 175.814967][ T8744] ? __pfx_ksys_unshare+0x10/0x10 [ 175.814985][ T8744] ? xfd_validate_state+0x5d/0x180 [ 175.815020][ T8744] __x64_sys_unshare+0x31/0x40 [ 175.815038][ T8744] do_syscall_64+0xcd/0x250 [ 175.815064][ T8744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.815090][ T8744] RIP: 0033:0x7f9baef8d169 [ 175.815105][ T8744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.815122][ T8744] RSP: 002b:00007f9bafe8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 175.815140][ T8744] RAX: ffffffffffffffda RBX: 00007f9baf1a5fa0 RCX: 00007f9baef8d169 [ 175.815153][ T8744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 175.815163][ T8744] RBP: 00007f9baf00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 175.815175][ T8744] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 175.815187][ T8744] R13: 0000000000000000 R14: 00007f9baf1a5fa0 R15: 00007ffd962371a8 [ 175.815213][ T8744] [ 177.570208][ T8796] FAULT_INJECTION: forcing a failure. [ 177.570208][ T8796] name failslab, interval 1, probability 0, space 0, times 0 [ 177.591445][ T8796] CPU: 1 UID: 0 PID: 8796 Comm: syz.0.1122 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 177.591477][ T8796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 177.591491][ T8796] Call Trace: [ 177.591497][ T8796] [ 177.591506][ T8796] dump_stack_lvl+0x16c/0x1f0 [ 177.591542][ T8796] should_fail_ex+0x50a/0x650 [ 177.591581][ T8796] ? fs_reclaim_acquire+0xae/0x150 [ 177.591614][ T8796] should_failslab+0xc2/0x120 [ 177.591636][ T8796] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 177.591670][ T8796] ? mpls_dev_sysctl_register+0xd4/0x2a0 [ 177.591701][ T8796] kmemdup_noprof+0x29/0x60 [ 177.591728][ T8796] mpls_dev_sysctl_register+0xd4/0x2a0 [ 177.591753][ T8796] ? pcpu_alloc_noprof+0x126/0x1680 [ 177.591776][ T8796] ? __pfx_mpls_dev_sysctl_register+0x10/0x10 [ 177.591815][ T8796] mpls_dev_notify+0x4ac/0xa20 [ 177.591846][ T8796] notifier_call_chain+0xb7/0x410 [ 177.591874][ T8796] ? __pfx_mpls_dev_notify+0x10/0x10 [ 177.591905][ T8796] call_netdevice_notifiers_info+0xbe/0x140 [ 177.591931][ T8796] register_netdevice+0x17c2/0x1eb0 [ 177.591969][ T8796] ? __pfx_register_netdevice+0x10/0x10 [ 177.592010][ T8796] __ip_tunnel_create+0x4aa/0x690 [ 177.592039][ T8796] ? __pfx___ip_tunnel_create+0x10/0x10 [ 177.592077][ T8796] ip_tunnel_init_net+0x22a/0x790 [ 177.592109][ T8796] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 177.592147][ T8796] ? __kmalloc_noprof+0x23b/0x510 [ 177.592185][ T8796] ? __pfx_ipgre_init_net+0x10/0x10 [ 177.592212][ T8796] ops_init+0x1df/0x5f0 [ 177.592247][ T8796] setup_net+0x21f/0x860 [ 177.592291][ T8796] ? __pfx_setup_net+0x10/0x10 [ 177.592322][ T8796] ? down_read_killable+0xcc/0x380 [ 177.592355][ T8796] ? __pfx_down_read_killable+0x10/0x10 [ 177.592386][ T8796] ? __raw_spin_lock_init+0x3a/0x110 [ 177.592412][ T8796] ? debug_mutex_init+0x37/0x70 [ 177.592441][ T8796] copy_net_ns+0x2a6/0x5f0 [ 177.592468][ T8796] create_new_namespaces+0x3ea/0xad0 [ 177.592513][ T8796] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 177.592551][ T8796] ksys_unshare+0x45d/0xa40 [ 177.592576][ T8796] ? __pfx_ksys_unshare+0x10/0x10 [ 177.592600][ T8796] ? xfd_validate_state+0x5d/0x180 [ 177.592644][ T8796] __x64_sys_unshare+0x31/0x40 [ 177.592666][ T8796] do_syscall_64+0xcd/0x250 [ 177.592700][ T8796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 177.592731][ T8796] RIP: 0033:0x7f97c398d169 [ 177.592750][ T8796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 177.592771][ T8796] RSP: 002b:00007f97c47e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 177.592793][ T8796] RAX: ffffffffffffffda RBX: 00007f97c3ba5fa0 RCX: 00007f97c398d169 [ 177.592808][ T8796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 177.592821][ T8796] RBP: 00007f97c3a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 177.592833][ T8796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 177.592846][ T8796] R13: 0000000000000000 R14: 00007f97c3ba5fa0 R15: 00007ffea8a1d058 [ 177.592876][ T8796] [ 178.074407][ T29] audit: type=1326 audit(1741301903.429:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8808 comm="syz.1.1129" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f9baef8d169 code=0x0 [ 178.423011][ T8819] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1133'. [ 180.136701][ T8885] snd_aloop snd_aloop.0: control 772:1:8:1Յ:-4095 is already present [ 180.772239][ T8903] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1167'. [ 180.958227][ T8909] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1169'. [ 181.888688][ T8920] snd_aloop snd_aloop.0: control 772:1:8:1Յ:-4095 is already present [ 183.115396][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1185'. [ 186.369281][ T5837] Bluetooth: hci0: command 0x0406 tx timeout [ 186.369565][ T5841] Bluetooth: hci3: command 0x0406 tx timeout [ 186.375408][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 186.394261][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 187.074121][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1215'. [ 187.129161][ T9041] netlink: 354 bytes leftover after parsing attributes in process `syz.1.1215'. [ 188.179293][ T9063] netlink: zone id is out of range [ 189.772399][ T9092] netlink: 504 bytes leftover after parsing attributes in process `syz.2.1235'. [ 191.361995][ T9132] netlink: zone id is out of range [ 191.381962][ T9134] mtrr: base(0x400000000000000) is not aligned on a size(0x0000) boundary [ 192.269212][ T9166] mtrr: base(0x400000000000000) is not aligned on a size(0x0000) boundary [ 193.944168][ T9219] FAULT_INJECTION: forcing a failure. [ 193.944168][ T9219] name failslab, interval 1, probability 0, space 0, times 0 [ 194.024435][ T9219] CPU: 0 UID: 0 PID: 9219 Comm: syz.0.1284 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 194.024468][ T9219] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 194.024482][ T9219] Call Trace: [ 194.024489][ T9219] [ 194.024499][ T9219] dump_stack_lvl+0x16c/0x1f0 [ 194.024537][ T9219] should_fail_ex+0x50a/0x650 [ 194.024576][ T9219] ? fs_reclaim_acquire+0xae/0x150 [ 194.024609][ T9219] ? sk_prot_alloc+0x1a8/0x2a0 [ 194.024633][ T9219] should_failslab+0xc2/0x120 [ 194.024656][ T9219] __kmalloc_noprof+0xcb/0x510 [ 194.024692][ T9219] ? trace_cap_capable+0x1a2/0x210 [ 194.024724][ T9219] sk_prot_alloc+0x1a8/0x2a0 [ 194.024751][ T9219] sk_alloc+0x36/0xc20 [ 194.024784][ T9219] pfkey_create+0x105/0x600 [ 194.024813][ T9219] __sock_create+0x335/0x8d0 [ 194.024847][ T9219] __sys_socket+0x14f/0x260 [ 194.024875][ T9219] ? __pfx___sys_socket+0x10/0x10 [ 194.024904][ T9219] ? rcu_is_watching+0x12/0xc0 [ 194.024936][ T9219] __x64_sys_socket+0x72/0xb0 [ 194.024962][ T9219] ? lockdep_hardirqs_on+0x7c/0x110 [ 194.024992][ T9219] do_syscall_64+0xcd/0x250 [ 194.025025][ T9219] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.025057][ T9219] RIP: 0033:0x7f97c398d169 [ 194.025076][ T9219] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.025106][ T9219] RSP: 002b:00007f97c47e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 194.025129][ T9219] RAX: ffffffffffffffda RBX: 00007f97c3ba5fa0 RCX: 00007f97c398d169 [ 194.025145][ T9219] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 194.025159][ T9219] RBP: 00007f97c3a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 194.025174][ T9219] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.025189][ T9219] R13: 0000000000000000 R14: 00007f97c3ba5fa0 R15: 00007ffea8a1d058 [ 194.025220][ T9219] [ 194.538092][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.545647][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.752704][ T9245] FAULT_INJECTION: forcing a failure. [ 194.752704][ T9245] name failslab, interval 1, probability 0, space 0, times 0 [ 194.785743][ T9245] CPU: 1 UID: 0 PID: 9245 Comm: syz.3.1298 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 194.785774][ T9245] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 194.785787][ T9245] Call Trace: [ 194.785794][ T9245] [ 194.785802][ T9245] dump_stack_lvl+0x16c/0x1f0 [ 194.785838][ T9245] should_fail_ex+0x50a/0x650 [ 194.785874][ T9245] ? fs_reclaim_acquire+0xae/0x150 [ 194.785906][ T9245] ? sk_prot_alloc+0x1a8/0x2a0 [ 194.785929][ T9245] should_failslab+0xc2/0x120 [ 194.785952][ T9245] __kmalloc_noprof+0xcb/0x510 [ 194.785984][ T9245] ? trace_cap_capable+0x1a2/0x210 [ 194.786014][ T9245] sk_prot_alloc+0x1a8/0x2a0 [ 194.786061][ T9245] sk_alloc+0x36/0xc20 [ 194.786093][ T9245] pfkey_create+0x105/0x600 [ 194.786121][ T9245] __sock_create+0x335/0x8d0 [ 194.786153][ T9245] __sys_socket+0x14f/0x260 [ 194.786180][ T9245] ? __pfx___sys_socket+0x10/0x10 [ 194.786207][ T9245] ? rcu_is_watching+0x12/0xc0 [ 194.786237][ T9245] __x64_sys_socket+0x72/0xb0 [ 194.786263][ T9245] ? lockdep_hardirqs_on+0x7c/0x110 [ 194.786293][ T9245] do_syscall_64+0xcd/0x250 [ 194.786325][ T9245] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.786357][ T9245] RIP: 0033:0x7fe14d18d169 [ 194.786376][ T9245] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 194.786397][ T9245] RSP: 002b:00007fe14cff9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 194.786420][ T9245] RAX: ffffffffffffffda RBX: 00007fe14d3a5fa0 RCX: 00007fe14d18d169 [ 194.786436][ T9245] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 194.786451][ T9245] RBP: 00007fe14d20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 194.786466][ T9245] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 194.786480][ T9245] R13: 0000000000000000 R14: 00007fe14d3a5fa0 R15: 00007ffcd1614378 [ 194.786508][ T9245] [ 195.124003][ T9252] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1309'. [ 195.497206][ T9270] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1307'. [ 195.727272][ T9276] FAULT_INJECTION: forcing a failure. [ 195.727272][ T9276] name failslab, interval 1, probability 0, space 0, times 0 [ 195.743765][ T9276] CPU: 1 UID: 0 PID: 9276 Comm: syz.1.1310 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 195.743795][ T9276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.743808][ T9276] Call Trace: [ 195.743815][ T9276] [ 195.743825][ T9276] dump_stack_lvl+0x16c/0x1f0 [ 195.743861][ T9276] should_fail_ex+0x50a/0x650 [ 195.743897][ T9276] ? fs_reclaim_acquire+0xae/0x150 [ 195.743930][ T9276] ? sk_prot_alloc+0x1a8/0x2a0 [ 195.743953][ T9276] should_failslab+0xc2/0x120 [ 195.743976][ T9276] __kmalloc_noprof+0xcb/0x510 [ 195.744015][ T9276] ? trace_cap_capable+0x1a2/0x210 [ 195.744046][ T9276] sk_prot_alloc+0x1a8/0x2a0 [ 195.744075][ T9276] sk_alloc+0x36/0xc20 [ 195.744105][ T9276] pfkey_create+0x105/0x600 [ 195.744134][ T9276] __sock_create+0x335/0x8d0 [ 195.744168][ T9276] __sys_socket+0x14f/0x260 [ 195.744195][ T9276] ? __pfx___sys_socket+0x10/0x10 [ 195.744226][ T9276] ? rcu_is_watching+0x12/0xc0 [ 195.744257][ T9276] __x64_sys_socket+0x72/0xb0 [ 195.744283][ T9276] ? lockdep_hardirqs_on+0x7c/0x110 [ 195.744310][ T9276] do_syscall_64+0xcd/0x250 [ 195.744342][ T9276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.744374][ T9276] RIP: 0033:0x7f9baef8d169 [ 195.744393][ T9276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.744415][ T9276] RSP: 002b:00007f9bafe8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 195.744438][ T9276] RAX: ffffffffffffffda RBX: 00007f9baf1a5fa0 RCX: 00007f9baef8d169 [ 195.744454][ T9276] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 195.744468][ T9276] RBP: 00007f9baf00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 195.744482][ T9276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.744495][ T9276] R13: 0000000000000000 R14: 00007f9baf1a5fa0 R15: 00007ffd962371a8 [ 195.744526][ T9276] [ 195.801108][ T9278] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1311'. [ 195.968504][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1313'. [ 195.978650][ T9282] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1313'. [ 196.489886][ T9302] FAULT_INJECTION: forcing a failure. [ 196.489886][ T9302] name failslab, interval 1, probability 0, space 0, times 0 [ 196.508162][ T9302] CPU: 1 UID: 0 PID: 9302 Comm: syz.2.1321 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 196.508191][ T9302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.508204][ T9302] Call Trace: [ 196.508211][ T9302] [ 196.508220][ T9302] dump_stack_lvl+0x16c/0x1f0 [ 196.508256][ T9302] should_fail_ex+0x50a/0x650 [ 196.508293][ T9302] ? fs_reclaim_acquire+0xae/0x150 [ 196.508325][ T9302] ? sk_prot_alloc+0x1a8/0x2a0 [ 196.508349][ T9302] should_failslab+0xc2/0x120 [ 196.508373][ T9302] __kmalloc_noprof+0xcb/0x510 [ 196.508407][ T9302] ? trace_cap_capable+0x1a2/0x210 [ 196.508440][ T9302] sk_prot_alloc+0x1a8/0x2a0 [ 196.508467][ T9302] sk_alloc+0x36/0xc20 [ 196.508500][ T9302] pfkey_create+0x105/0x600 [ 196.508529][ T9302] __sock_create+0x335/0x8d0 [ 196.508562][ T9302] __sys_socket+0x14f/0x260 [ 196.508590][ T9302] ? __pfx___sys_socket+0x10/0x10 [ 196.508618][ T9302] ? rcu_is_watching+0x12/0xc0 [ 196.508651][ T9302] __x64_sys_socket+0x72/0xb0 [ 196.508678][ T9302] ? lockdep_hardirqs_on+0x7c/0x110 [ 196.508708][ T9302] do_syscall_64+0xcd/0x250 [ 196.508741][ T9302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.508775][ T9302] RIP: 0033:0x7feb4a98d169 [ 196.508793][ T9302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.508815][ T9302] RSP: 002b:00007feb4b8a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 196.508838][ T9302] RAX: ffffffffffffffda RBX: 00007feb4aba5fa0 RCX: 00007feb4a98d169 [ 196.508854][ T9302] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 196.508868][ T9302] RBP: 00007feb4aa0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 196.508883][ T9302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 196.508896][ T9302] R13: 0000000000000000 R14: 00007feb4aba5fa0 R15: 00007ffce1d93848 [ 196.508927][ T9302] [ 196.521479][ T9305] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1323'. [ 197.163225][ T9325] netlink: 326 bytes leftover after parsing attributes in process `syz.2.1331'. [ 197.302714][ T9330] FAULT_INJECTION: forcing a failure. [ 197.302714][ T9330] name failslab, interval 1, probability 0, space 0, times 0 [ 197.324560][ T9330] CPU: 1 UID: 0 PID: 9330 Comm: syz.1.1334 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 197.324590][ T9330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 197.324603][ T9330] Call Trace: [ 197.324611][ T9330] [ 197.324620][ T9330] dump_stack_lvl+0x16c/0x1f0 [ 197.324657][ T9330] should_fail_ex+0x50a/0x650 [ 197.324694][ T9330] ? fs_reclaim_acquire+0xae/0x150 [ 197.324728][ T9330] ? sk_prot_alloc+0x1a8/0x2a0 [ 197.324752][ T9330] should_failslab+0xc2/0x120 [ 197.324776][ T9330] __kmalloc_noprof+0xcb/0x510 [ 197.324810][ T9330] ? trace_cap_capable+0x1a2/0x210 [ 197.324841][ T9330] sk_prot_alloc+0x1a8/0x2a0 [ 197.324869][ T9330] sk_alloc+0x36/0xc20 [ 197.324911][ T9330] pfkey_create+0x105/0x600 [ 197.324941][ T9330] __sock_create+0x335/0x8d0 [ 197.324975][ T9330] __sys_socket+0x14f/0x260 [ 197.325003][ T9330] ? __pfx___sys_socket+0x10/0x10 [ 197.325035][ T9330] ? rcu_is_watching+0x12/0xc0 [ 197.325068][ T9330] __x64_sys_socket+0x72/0xb0 [ 197.325094][ T9330] ? lockdep_hardirqs_on+0x7c/0x110 [ 197.325124][ T9330] do_syscall_64+0xcd/0x250 [ 197.325158][ T9330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.325190][ T9330] RIP: 0033:0x7f9baef8d169 [ 197.325210][ T9330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.325232][ T9330] RSP: 002b:00007f9bafe8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 197.325255][ T9330] RAX: ffffffffffffffda RBX: 00007f9baf1a5fa0 RCX: 00007f9baef8d169 [ 197.325271][ T9330] RDX: 0000000000000002 RSI: 0000000000000003 RDI: 000000000000000f [ 197.325286][ T9330] RBP: 00007f9baf00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 197.325301][ T9330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.325316][ T9330] R13: 0000000000000000 R14: 00007f9baf1a5fa0 R15: 00007ffd962371a8 [ 197.325348][ T9330] [ 197.572115][ T9336] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1337'. [ 197.705342][ T9338] netlink: 'syz.1.1338': attribute type 16 has an invalid length. [ 197.713208][ T9338] netlink: 322 bytes leftover after parsing attributes in process `syz.1.1338'. [ 197.987830][ T9351] netlink: 504 bytes leftover after parsing attributes in process `syz.0.1343'. [ 200.931287][ T9487] __nla_validate_parse: 3 callbacks suppressed [ 200.931305][ T9487] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1378'. [ 206.803234][ T9505] netlink: 'syz.0.1383': attribute type 16 has an invalid length. [ 206.817542][ T9505] netlink: 322 bytes leftover after parsing attributes in process `syz.0.1383'. [ 207.344987][ T9526] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1393'. [ 209.057164][ T9598] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 209.082126][ T9598] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 209.600126][ T9616] Invalid ELF header magic: != ELF [ 209.679591][ T9626] ======================================================= [ 209.679591][ T9626] WARNING: The mand mount option has been deprecated and [ 209.679591][ T9626] and is ignored by this kernel. Remove the mand [ 209.679591][ T9626] option from the mount to silence this warning. [ 209.679591][ T9626] ======================================================= [ 210.895651][ T9665] netlink: 346 bytes leftover after parsing attributes in process `syz.1.1438'. [ 211.300746][ T9661] Invalid ELF header magic: != ELF [ 211.713106][ T9685] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1448'. [ 213.684752][ T9724] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1471'. [ 214.122559][ T9732] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 214.170866][ T9732] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 214.193443][ T9708] kexec: Could not allocate control_code_buffer [ 215.540047][ T9767] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 215.560101][ T9767] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 216.020071][ T9780] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1486'. [ 216.058971][ T9780] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1486'. [ 216.672268][ T9814] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1504'. [ 217.056148][ T9830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1511'. [ 217.159303][ T9834] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1513'. [ 217.766662][ T9854] netlink: 74 bytes leftover after parsing attributes in process `syz.2.1521'. [ 218.394619][ T9868] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1526'. [ 218.965132][ T9898] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1538'. [ 219.036120][ T9902] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1540'. [ 219.958366][ T9939] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1556'. [ 220.563493][ T9955] zswap: compressor not available [ 220.747778][ T9974] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1570'. [ 221.326623][T10002] hugetlbfs: syz.2.1593 (10002): Using mlock ulimits for SHM_HUGETLB is obsolete [ 222.212205][T10019] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 222.782991][T10043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1604'. [ 222.904624][T10043] hsr_slave_1 (unregistering): left promiscuous mode [ 224.944495][T10100] zswap: compressor not available [ 225.318916][T10113] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 225.931824][T10135] netlink: 74 bytes leftover after parsing attributes in process `syz.1.1637'. [ 226.262553][T10142] zswap: compressor not available [ 226.337282][T10148] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1641'. [ 226.456582][T10155] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1644'. [ 227.923587][T10197] netlink: 326 bytes leftover after parsing attributes in process `syz.0.1661'. [ 228.508869][ T5846] Bluetooth: hci0: ISO packet too small [ 229.320353][T10230] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 229.358145][T10230] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 229.777874][T10245] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1679'. [ 232.282431][T10308] FAULT_INJECTION: forcing a failure. [ 232.282431][T10308] name failslab, interval 1, probability 0, space 0, times 0 [ 232.314328][T10308] CPU: 1 UID: 0 PID: 10308 Comm: syz.0.1705 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 232.314362][T10308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 232.314377][T10308] Call Trace: [ 232.314384][T10308] [ 232.314394][T10308] dump_stack_lvl+0x16c/0x1f0 [ 232.314433][T10308] should_fail_ex+0x50a/0x650 [ 232.314472][T10308] ? fs_reclaim_acquire+0xae/0x150 [ 232.314506][T10308] ? snd_pcm_open+0x2e8/0x700 [ 232.314536][T10308] should_failslab+0xc2/0x120 [ 232.314561][T10308] __kmalloc_cache_noprof+0x68/0x410 [ 232.314609][T10308] snd_pcm_open+0x2e8/0x700 [ 232.314646][T10308] ? __pfx_snd_pcm_open+0x10/0x10 [ 232.314683][T10308] ? __pfx_default_wake_function+0x10/0x10 [ 232.314725][T10308] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 232.314755][T10308] snd_pcm_capture_open+0x89/0xe0 [ 232.314787][T10308] snd_open+0x1fe/0x450 [ 232.314811][T10308] ? __pfx_snd_open+0x10/0x10 [ 232.314834][T10308] chrdev_open+0x237/0x6a0 [ 232.314868][T10308] ? __pfx_chrdev_open+0x10/0x10 [ 232.314906][T10308] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 232.314944][T10308] do_dentry_open+0x735/0x1c40 [ 232.314977][T10308] ? __pfx_chrdev_open+0x10/0x10 [ 232.315013][T10308] ? inode_permission+0xdd/0x5f0 [ 232.315042][T10308] vfs_open+0x82/0x3f0 [ 232.315065][T10308] ? may_open+0x1f2/0x400 [ 232.315095][T10308] path_openat+0x1e88/0x2d80 [ 232.315142][T10308] ? __pfx_path_openat+0x10/0x10 [ 232.315176][T10308] ? __pfx___lock_acquire+0x10/0x10 [ 232.315208][T10308] ? lock_acquire.part.0+0x11b/0x380 [ 232.315240][T10308] ? find_held_lock+0x2d/0x110 [ 232.315271][T10308] do_filp_open+0x20c/0x470 [ 232.315305][T10308] ? __pfx_do_filp_open+0x10/0x10 [ 232.315337][T10308] ? find_held_lock+0x2d/0x110 [ 232.315387][T10308] ? alloc_fd+0x41f/0x760 [ 232.315429][T10308] do_sys_openat2+0x17a/0x1e0 [ 232.315455][T10308] ? __pfx_do_sys_openat2+0x10/0x10 [ 232.315494][T10308] __x64_sys_openat+0x175/0x210 [ 232.315520][T10308] ? __pfx___x64_sys_openat+0x10/0x10 [ 232.315560][T10308] do_syscall_64+0xcd/0x250 [ 232.315594][T10308] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 232.315635][T10308] RIP: 0033:0x7f97c398d169 [ 232.315655][T10308] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 232.315677][T10308] RSP: 002b:00007f97c47e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 232.315701][T10308] RAX: ffffffffffffffda RBX: 00007f97c3ba5fa0 RCX: 00007f97c398d169 [ 232.315717][T10308] RDX: 0000000000000000 RSI: 0000400000000000 RDI: ffffffffffffff9c [ 232.315734][T10308] RBP: 00007f97c3a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 232.315748][T10308] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 232.315762][T10308] R13: 0000000000000000 R14: 00007f97c3ba5fa0 R15: 00007ffea8a1d058 [ 232.315795][T10308] [ 233.335522][ T5846] Bluetooth: hci3: ISO packet too small [ 233.975740][T10356] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1719'. [ 234.640074][ T5846] Bluetooth: hci1: ISO packet too small [ 234.816889][T10370] netlink: 74 bytes leftover after parsing attributes in process `syz.2.1725'. [ 235.120891][T10386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1730'. [ 235.705029][T10401] netlink: 330 bytes leftover after parsing attributes in process `syz.2.1734'. [ 235.764999][T10405] FAULT_INJECTION: forcing a failure. [ 235.764999][T10405] name failslab, interval 1, probability 0, space 0, times 0 [ 235.803644][T10405] CPU: 0 UID: 0 PID: 10405 Comm: syz.1.1735 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 235.803676][T10405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 235.803690][T10405] Call Trace: [ 235.803697][T10405] [ 235.803706][T10405] dump_stack_lvl+0x16c/0x1f0 [ 235.803742][T10405] should_fail_ex+0x50a/0x650 [ 235.803779][T10405] ? fs_reclaim_acquire+0xae/0x150 [ 235.803813][T10405] ? dummy_hrtimer_create+0x45/0x170 [ 235.803843][T10405] should_failslab+0xc2/0x120 [ 235.803867][T10405] __kmalloc_cache_noprof+0x68/0x410 [ 235.803907][T10405] dummy_hrtimer_create+0x45/0x170 [ 235.803936][T10405] ? __pfx_dummy_hrtimer_create+0x10/0x10 [ 235.803965][T10405] dummy_pcm_open+0xd1/0x5b0 [ 235.803995][T10405] snd_pcm_open_substream+0xa50/0x17c0 [ 235.804030][T10405] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 235.804074][T10405] snd_pcm_open+0x29b/0x700 [ 235.804109][T10405] ? __pfx_snd_pcm_open+0x10/0x10 [ 235.804146][T10405] ? __pfx_default_wake_function+0x10/0x10 [ 235.804190][T10405] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 235.804227][T10405] snd_pcm_capture_open+0x89/0xe0 [ 235.804259][T10405] snd_open+0x1fe/0x450 [ 235.804282][T10405] ? __pfx_snd_open+0x10/0x10 [ 235.804305][T10405] chrdev_open+0x237/0x6a0 [ 235.804339][T10405] ? __pfx_apparmor_file_open+0x10/0x10 [ 235.804369][T10405] ? __pfx_chrdev_open+0x10/0x10 [ 235.804405][T10405] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 235.804452][T10405] do_dentry_open+0x735/0x1c40 [ 235.804485][T10405] ? __pfx_chrdev_open+0x10/0x10 [ 235.804517][T10405] ? inode_permission+0xdd/0x5f0 [ 235.804543][T10405] vfs_open+0x82/0x3f0 [ 235.804564][T10405] ? may_open+0x1f2/0x400 [ 235.804590][T10405] path_openat+0x1e88/0x2d80 [ 235.804630][T10405] ? __pfx_path_openat+0x10/0x10 [ 235.804659][T10405] ? __pfx___lock_acquire+0x10/0x10 [ 235.804688][T10405] ? lock_acquire.part.0+0x11b/0x380 [ 235.804717][T10405] ? find_held_lock+0x2d/0x110 [ 235.804745][T10405] do_filp_open+0x20c/0x470 [ 235.804777][T10405] ? __pfx_do_filp_open+0x10/0x10 [ 235.804805][T10405] ? find_held_lock+0x2d/0x110 [ 235.804852][T10405] ? alloc_fd+0x41f/0x760 [ 235.804894][T10405] do_sys_openat2+0x17a/0x1e0 [ 235.804919][T10405] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.804958][T10405] __x64_sys_openat+0x175/0x210 [ 235.804985][T10405] ? __pfx___x64_sys_openat+0x10/0x10 [ 235.805026][T10405] do_syscall_64+0xcd/0x250 [ 235.805061][T10405] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.805094][T10405] RIP: 0033:0x7f9baef8d169 [ 235.805114][T10405] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.805136][T10405] RSP: 002b:00007f9bafe8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 235.805158][T10405] RAX: ffffffffffffffda RBX: 00007f9baf1a5fa0 RCX: 00007f9baef8d169 [ 235.805174][T10405] RDX: 0000000000000000 RSI: 0000400000000000 RDI: ffffffffffffff9c [ 235.805189][T10405] RBP: 00007f9baf00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 235.805204][T10405] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 235.805219][T10405] R13: 0000000000000000 R14: 00007f9baf1a5fa0 R15: 00007ffd962371a8 [ 235.805251][T10405] [ 236.478215][T10414] netlink: 130 bytes leftover after parsing attributes in process `syz.1.1740'. [ 237.574603][T10431] netlink: 74 bytes leftover after parsing attributes in process `syz.1.1755'. [ 239.061541][T10470] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1761'. [ 239.111644][T10470] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1761'. [ 239.420951][T10481] netlink: 74 bytes leftover after parsing attributes in process `syz.3.1763'. [ 240.879657][T10507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1774'. [ 241.946217][T10526] netlink: 'syz.1.1780': attribute type 11 has an invalid length. [ 242.144306][T10528] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1781'. [ 243.622712][T10563] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1794'. [ 244.702592][T10606] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1807'. [ 245.871497][T10657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1825'. [ 246.839819][T10683] FAULT_INJECTION: forcing a failure. [ 246.839819][T10683] name failslab, interval 1, probability 0, space 0, times 0 [ 246.858857][T10683] CPU: 0 UID: 0 PID: 10683 Comm: syz.1.1835 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 246.858889][T10683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 246.858907][T10683] Call Trace: [ 246.858913][T10683] [ 246.858926][T10683] dump_stack_lvl+0x16c/0x1f0 [ 246.858965][T10683] should_fail_ex+0x50a/0x650 [ 246.859002][T10683] ? fs_reclaim_acquire+0xae/0x150 [ 246.859037][T10683] ? loopback_open+0x145/0x13a0 [ 246.859070][T10683] should_failslab+0xc2/0x120 [ 246.859095][T10683] __kmalloc_cache_noprof+0x68/0x410 [ 246.859137][T10683] loopback_open+0x145/0x13a0 [ 246.859179][T10683] snd_pcm_open_substream+0xa50/0x17c0 [ 246.859213][T10683] ? __pfx_snd_pcm_open_substream+0x10/0x10 [ 246.859257][T10683] snd_pcm_open+0x29b/0x700 [ 246.859294][T10683] ? __pfx_snd_pcm_open+0x10/0x10 [ 246.859331][T10683] ? __pfx_default_wake_function+0x10/0x10 [ 246.859375][T10683] ? __pfx_snd_pcm_capture_open+0x10/0x10 [ 246.859408][T10683] snd_pcm_capture_open+0x89/0xe0 [ 246.859442][T10683] snd_open+0x1fe/0x450 [ 246.859470][T10683] ? __pfx_snd_open+0x10/0x10 [ 246.859494][T10683] chrdev_open+0x237/0x6a0 [ 246.859532][T10683] ? __pfx_chrdev_open+0x10/0x10 [ 246.859573][T10683] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 246.859612][T10683] do_dentry_open+0x735/0x1c40 [ 246.859642][T10683] ? __pfx_chrdev_open+0x10/0x10 [ 246.859688][T10683] ? inode_permission+0xdd/0x5f0 [ 246.859717][T10683] vfs_open+0x82/0x3f0 [ 246.859739][T10683] ? may_open+0x1f2/0x400 [ 246.859768][T10683] path_openat+0x1e88/0x2d80 [ 246.859816][T10683] ? __pfx_path_openat+0x10/0x10 [ 246.859850][T10683] ? __pfx___lock_acquire+0x10/0x10 [ 246.859881][T10683] ? lock_acquire.part.0+0x11b/0x380 [ 246.859913][T10683] ? find_held_lock+0x2d/0x110 [ 246.859942][T10683] do_filp_open+0x20c/0x470 [ 246.859977][T10683] ? __pfx_do_filp_open+0x10/0x10 [ 246.860008][T10683] ? find_held_lock+0x2d/0x110 [ 246.860059][T10683] ? alloc_fd+0x41f/0x760 [ 246.860103][T10683] do_sys_openat2+0x17a/0x1e0 [ 246.860128][T10683] ? __pfx_do_sys_openat2+0x10/0x10 [ 246.860168][T10683] __x64_sys_openat+0x175/0x210 [ 246.860195][T10683] ? __pfx___x64_sys_openat+0x10/0x10 [ 246.860236][T10683] do_syscall_64+0xcd/0x250 [ 246.860269][T10683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.860301][T10683] RIP: 0033:0x7f9baef8d169 [ 246.860321][T10683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.860344][T10683] RSP: 002b:00007f9bafe8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 246.860367][T10683] RAX: ffffffffffffffda RBX: 00007f9baf1a5fa0 RCX: 00007f9baef8d169 [ 246.860383][T10683] RDX: 0000000000000000 RSI: 0000400000000100 RDI: ffffffffffffff9c [ 246.860398][T10683] RBP: 00007f9baf00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 246.860412][T10683] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.860426][T10683] R13: 0000000000000000 R14: 00007f9baf1a5fa0 R15: 00007ffd962371a8 [ 246.860459][T10683] [ 249.371935][T10744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1859'. [ 249.642600][T10754] netlink: 342 bytes leftover after parsing attributes in process `syz.2.1862'. [ 250.431534][T10772] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input8 [ 250.635634][T10781] : entered promiscuous mode [ 250.675298][T10787] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1880'. [ 251.039603][T10801] FAULT_INJECTION: forcing a failure. [ 251.039603][T10801] name failslab, interval 1, probability 0, space 0, times 0 [ 251.064404][T10801] CPU: 0 UID: 0 PID: 10801 Comm: syz.2.1884 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 251.064436][T10801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 251.064448][T10801] Call Trace: [ 251.064455][T10801] [ 251.064464][T10801] dump_stack_lvl+0x16c/0x1f0 [ 251.064504][T10801] should_fail_ex+0x50a/0x650 [ 251.064538][T10801] ? fs_reclaim_acquire+0xae/0x150 [ 251.064569][T10801] ? xfrm_hash_alloc+0xd1/0x100 [ 251.064603][T10801] should_failslab+0xc2/0x120 [ 251.064627][T10801] __kmalloc_noprof+0xcb/0x510 [ 251.064668][T10801] ? xfrm_nat_keepalive_net_fini+0x1/0x30 [ 251.064701][T10801] xfrm_hash_alloc+0xd1/0x100 [ 251.064737][T10801] xfrm_state_init+0x160/0x630 [ 251.064778][T10801] ? __pfx_xfrm_net_init+0x10/0x10 [ 251.064814][T10801] xfrm_net_init+0x211/0xcb0 [ 251.064857][T10801] ? __pfx_xfrm_net_init+0x10/0x10 [ 251.064894][T10801] ops_init+0x1df/0x5f0 [ 251.064934][T10801] setup_net+0x21f/0x860 [ 251.064972][T10801] ? __pfx_setup_net+0x10/0x10 [ 251.065006][T10801] ? down_read_killable+0xcc/0x380 [ 251.065041][T10801] ? __pfx_down_read_killable+0x10/0x10 [ 251.065074][T10801] ? __raw_spin_lock_init+0x3a/0x110 [ 251.065100][T10801] ? debug_mutex_init+0x37/0x70 [ 251.065131][T10801] copy_net_ns+0x2a6/0x5f0 [ 251.065160][T10801] create_new_namespaces+0x3ea/0xad0 [ 251.065205][T10801] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 251.065246][T10801] ksys_unshare+0x45d/0xa40 [ 251.065273][T10801] ? __pfx_ksys_unshare+0x10/0x10 [ 251.065296][T10801] ? xfd_validate_state+0x5d/0x180 [ 251.065342][T10801] __x64_sys_unshare+0x31/0x40 [ 251.065367][T10801] do_syscall_64+0xcd/0x250 [ 251.065400][T10801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.065433][T10801] RIP: 0033:0x7feb4a98d169 [ 251.065453][T10801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.065476][T10801] RSP: 002b:00007feb4b8a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 251.065499][T10801] RAX: ffffffffffffffda RBX: 00007feb4aba5fa0 RCX: 00007feb4a98d169 [ 251.065516][T10801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 251.065531][T10801] RBP: 00007feb4aa0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 251.065546][T10801] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.065561][T10801] R13: 0000000000000000 R14: 00007feb4aba5fa0 R15: 00007ffce1d93848 [ 251.065594][T10801] [ 251.528471][T10812] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1891'. [ 251.707356][T10816] netlink: 'syz.3.1900': attribute type 3 has an invalid length. [ 251.830790][T10818] : entered promiscuous mode [ 252.662102][T10839] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1909'. [ 252.900594][T10844] netlink: 'syz.3.1903': attribute type 15 has an invalid length. [ 252.915979][T10844] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1903'. [ 253.594413][T10863] sd 0:0:1:0: PR command failed: 1026 [ 253.613067][T10863] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 253.623143][T10863] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 253.676673][T10865] FAULT_INJECTION: forcing a failure. [ 253.676673][T10865] name failslab, interval 1, probability 0, space 0, times 0 [ 253.774849][T10865] CPU: 1 UID: 0 PID: 10865 Comm: syz.0.1912 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 253.774883][T10865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 253.774897][T10865] Call Trace: [ 253.774905][T10865] [ 253.774915][T10865] dump_stack_lvl+0x16c/0x1f0 [ 253.774954][T10865] should_fail_ex+0x50a/0x650 [ 253.774992][T10865] ? fs_reclaim_acquire+0xae/0x150 [ 253.775027][T10865] ? xfrm_hash_alloc+0xd1/0x100 [ 253.775062][T10865] should_failslab+0xc2/0x120 [ 253.775086][T10865] __kmalloc_noprof+0xcb/0x510 [ 253.775121][T10865] ? xfrm_nat_keepalive_net_fini+0x1/0x30 [ 253.775155][T10865] xfrm_hash_alloc+0xd1/0x100 [ 253.775190][T10865] xfrm_state_init+0x160/0x630 [ 253.775228][T10865] ? __pfx_xfrm_net_init+0x10/0x10 [ 253.775263][T10865] xfrm_net_init+0x211/0xcb0 [ 253.775306][T10865] ? __pfx_xfrm_net_init+0x10/0x10 [ 253.775342][T10865] ops_init+0x1df/0x5f0 [ 253.775382][T10865] setup_net+0x21f/0x860 [ 253.775420][T10865] ? __pfx_setup_net+0x10/0x10 [ 253.775454][T10865] ? down_read_killable+0xcc/0x380 [ 253.775496][T10865] ? __pfx_down_read_killable+0x10/0x10 [ 253.775529][T10865] ? __raw_spin_lock_init+0x3a/0x110 [ 253.775553][T10865] ? debug_mutex_init+0x37/0x70 [ 253.775580][T10865] copy_net_ns+0x2a6/0x5f0 [ 253.775607][T10865] create_new_namespaces+0x3ea/0xad0 [ 253.775652][T10865] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 253.775693][T10865] ksys_unshare+0x45d/0xa40 [ 253.775719][T10865] ? __pfx_ksys_unshare+0x10/0x10 [ 253.775743][T10865] ? xfd_validate_state+0x5d/0x180 [ 253.775788][T10865] __x64_sys_unshare+0x31/0x40 [ 253.775813][T10865] do_syscall_64+0xcd/0x250 [ 253.775847][T10865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.775880][T10865] RIP: 0033:0x7f97c398d169 [ 253.775899][T10865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.775921][T10865] RSP: 002b:00007f97c47e8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 253.775944][T10865] RAX: ffffffffffffffda RBX: 00007f97c3ba5fa0 RCX: 00007f97c398d169 [ 253.775960][T10865] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 253.775975][T10865] RBP: 00007f97c3a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 253.775990][T10865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 253.776004][T10865] R13: 0000000000000000 R14: 00007f97c3ba5fa0 R15: 00007ffea8a1d058 [ 253.776038][T10865] [ 255.010132][ T3662] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.208150][ T3662] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.252414][T10878] sctp: [Deprecated]: syz.3.1917 (pid 10878) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.252414][T10878] Use struct sctp_sack_info instead [ 255.328234][ T3662] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.574059][ T3662] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.889174][ T3662] bridge_slave_1: left allmulticast mode [ 255.931832][ T3662] bridge_slave_1: left promiscuous mode [ 255.939027][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.954611][ T3662] bridge0: port 2(bridge_slave_1) entered disabled state [ 255.963858][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.974630][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.980942][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.993384][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.007435][ T3662] bridge_slave_0: left allmulticast mode [ 256.013544][ T3662] bridge_slave_0: left promiscuous mode [ 256.034407][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.041541][ T3662] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.051291][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 256.064413][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.227869][T10906] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1925'. [ 256.551070][T10919] netlink: 'syz.3.1927': attribute type 3 has an invalid length. [ 256.833904][ T3662] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.866323][ T3662] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.877004][ T3662] bond0 (unregistering): Released all slaves [ 257.105638][T10930] FAULT_INJECTION: forcing a failure. [ 257.105638][T10930] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 257.140800][T10930] CPU: 1 UID: 0 PID: 10930 Comm: syz.2.1932 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 257.140832][T10930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 257.140845][T10930] Call Trace: [ 257.140851][T10930] [ 257.140860][T10930] dump_stack_lvl+0x16c/0x1f0 [ 257.140895][T10930] should_fail_ex+0x50a/0x650 [ 257.140930][T10930] ? __pfx___might_resched+0x10/0x10 [ 257.140968][T10930] should_fail_alloc_page+0xe7/0x130 [ 257.140992][T10930] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 257.141027][T10930] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 257.141064][T10930] ? stack_depot_save_flags+0x38f/0x9c0 [ 257.141098][T10930] ? __pfx_lock_release+0x10/0x10 [ 257.141135][T10930] ? hlock_class+0x4e/0x130 [ 257.141157][T10930] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 257.141205][T10930] ? __pfx___lock_acquire+0x10/0x10 [ 257.141235][T10930] ? kasan_save_stack+0x42/0x60 [ 257.141262][T10930] ? kasan_save_stack+0x33/0x60 [ 257.141303][T10930] ? kasan_save_track+0x14/0x30 [ 257.141332][T10930] ? __kasan_slab_alloc+0x89/0x90 [ 257.141361][T10930] ? kmem_cache_alloc_node_noprof+0x223/0x3c0 [ 257.141392][T10930] ? alloc_vmap_area+0x636/0x2a60 [ 257.141417][T10930] ? __get_vm_area_node+0x19e/0x2f0 [ 257.141444][T10930] ? __vmalloc_node_range_noprof+0x26a/0x1530 [ 257.141477][T10930] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 257.141515][T10930] ? policy_nodemask+0xea/0x4e0 [ 257.141542][T10930] alloc_pages_mpol+0x1fc/0x540 [ 257.141567][T10930] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 257.141588][T10930] ? __page_table_check_ptes_set+0x16b/0x3e0 [ 257.141622][T10930] ? do_raw_spin_lock+0x12d/0x2c0 [ 257.141646][T10930] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 257.141673][T10930] alloc_pages_noprof+0x131/0x390 [ 257.141693][T10930] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 257.141723][T10930] get_free_pages_noprof+0xc/0x40 [ 257.141745][T10930] kasan_populate_vmalloc_pte+0x2d/0x160 [ 257.141775][T10930] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 257.141807][T10930] __apply_to_page_range+0x5fd/0xd30 [ 257.141841][T10930] ? __pfx_kasan_populate_vmalloc_pte+0x10/0x10 [ 257.141878][T10930] ? __pfx___apply_to_page_range+0x10/0x10 [ 257.141912][T10930] ? insert_vmap_area+0x2ef/0x4d0 [ 257.141944][T10930] alloc_vmap_area+0x93e/0x2a60 [ 257.142000][T10930] ? __pfx_alloc_vmap_area+0x10/0x10 [ 257.142039][T10930] __get_vm_area_node+0x19e/0x2f0 [ 257.142076][T10930] __vmalloc_node_range_noprof+0x26a/0x1530 [ 257.142107][T10930] ? bloom_map_alloc+0x306/0x4d0 [ 257.142146][T10930] ? bloom_map_alloc+0x306/0x4d0 [ 257.142182][T10930] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 257.142216][T10930] ? rcu_is_watching+0x12/0xc0 [ 257.142247][T10930] ? trace_cap_capable+0x1a2/0x210 [ 257.142282][T10930] ? bloom_map_alloc+0x306/0x4d0 [ 257.142311][T10930] __bpf_map_area_alloc+0xea/0x190 [ 257.142332][T10930] ? bloom_map_alloc+0x306/0x4d0 [ 257.142364][T10930] bloom_map_alloc+0x306/0x4d0 [ 257.142396][T10930] map_create+0x5c5/0x1d20 [ 257.142428][T10930] ? __pfx_lock_release+0x10/0x10 [ 257.142454][T10930] ? trace_lock_acquire+0x14e/0x1f0 [ 257.142476][T10930] ? __pfx_map_create+0x10/0x10 [ 257.142504][T10930] ? lock_acquire+0x2f/0xb0 [ 257.142529][T10930] ? __might_fault+0xe3/0x190 [ 257.142549][T10930] ? __might_fault+0xe3/0x190 [ 257.142575][T10930] __sys_bpf+0x4391/0x49c0 [ 257.142607][T10930] ? __pfx___sys_bpf+0x10/0x10 [ 257.142642][T10930] ? do_futex+0x123/0x350 [ 257.142666][T10930] ? __pfx_do_futex+0x10/0x10 [ 257.142700][T10930] ? xfd_validate_state+0x5d/0x180 [ 257.142728][T10930] ? rcu_is_watching+0x12/0xc0 [ 257.142753][T10930] __x64_sys_bpf+0x78/0xc0 [ 257.142771][T10930] ? lockdep_hardirqs_on+0x7c/0x110 [ 257.142796][T10930] do_syscall_64+0xcd/0x250 [ 257.142823][T10930] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.142851][T10930] RIP: 0033:0x7feb4a98d169 [ 257.142868][T10930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.142887][T10930] RSP: 002b:00007feb4b8a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 257.142906][T10930] RAX: ffffffffffffffda RBX: 00007feb4aba5fa0 RCX: 00007feb4a98d169 [ 257.142919][T10930] RDX: 00000000000006f4 RSI: 0000400000000280 RDI: 0000000000000000 [ 257.142932][T10930] RBP: 00007feb4aa0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 257.142944][T10930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 257.142956][T10930] R13: 0000000000000000 R14: 00007feb4aba5fa0 R15: 00007ffce1d93848 [ 257.142982][T10930] [ 258.130940][ T5846] Bluetooth: hci4: command tx timeout [ 258.407854][T10895] chnl_net:caif_netlink_parms(): no params data found [ 258.554683][ T3662] hsr_slave_0: left promiscuous mode [ 258.662299][ T3662] hsr_slave_1: left promiscuous mode [ 258.685269][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.692763][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.755647][ T3662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.763089][ T3662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.834759][ T3662] veth1_macvtap: left promiscuous mode [ 258.840976][ T3662] veth0_macvtap: left promiscuous mode [ 258.864525][ T3662] veth1_vlan: left promiscuous mode [ 258.875255][ T3662] veth0_vlan: left promiscuous mode [ 259.512743][T10968] ================================================================== [ 259.520850][T10968] BUG: KASAN: slab-use-after-free in force_devcd_write+0x317/0x330 [ 259.528771][T10968] Read of size 8 at addr ffff888022ab2800 by task syz.0.1940/10968 [ 259.536671][T10968] [ 259.539000][T10968] CPU: 1 UID: 0 PID: 10968 Comm: syz.0.1940 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 259.539030][T10968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 259.539044][T10968] Call Trace: [ 259.539052][T10968] [ 259.539062][T10968] dump_stack_lvl+0x116/0x1f0 [ 259.539102][T10968] print_report+0xc3/0x670 [ 259.539125][T10968] ? __virt_addr_valid+0x5e/0x590 [ 259.539150][T10968] ? __phys_addr+0xc6/0x150 [ 259.539176][T10968] kasan_report+0xd9/0x110 [ 259.539199][T10968] ? force_devcd_write+0x317/0x330 [ 259.539231][T10968] ? force_devcd_write+0x317/0x330 [ 259.539264][T10968] force_devcd_write+0x317/0x330 [ 259.539297][T10968] ? __pfx_force_devcd_write+0x10/0x10 [ 259.539328][T10968] ? __debugfs_file_get+0x1ff/0x850 [ 259.539358][T10968] ? __pfx___debugfs_file_get+0x10/0x10 [ 259.539388][T10968] ? rcu_is_watching+0x12/0xc0 [ 259.539414][T10968] ? trace_lock_acquire+0x14e/0x1f0 [ 259.539443][T10968] full_proxy_write+0x13c/0x200 [ 259.539474][T10968] ? __pfx_full_proxy_write+0x10/0x10 [ 259.539504][T10968] vfs_write+0x24c/0x1150 [ 259.539536][T10968] ? __fget_files+0x1fc/0x3a0 [ 259.539570][T10968] ? __pfx___mutex_lock+0x10/0x10 [ 259.539601][T10968] ? __pfx_vfs_write+0x10/0x10 [ 259.539636][T10968] ? __fget_files+0x206/0x3a0 [ 259.539673][T10968] ksys_write+0x12b/0x250 [ 259.539704][T10968] ? __pfx_ksys_write+0x10/0x10 [ 259.539741][T10968] do_syscall_64+0xcd/0x250 [ 259.539773][T10968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.539806][T10968] RIP: 0033:0x7f97c398d169 [ 259.539824][T10968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.539847][T10968] RSP: 002b:00007f97c47c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 259.539869][T10968] RAX: ffffffffffffffda RBX: 00007f97c3ba6080 RCX: 00007f97c398d169 [ 259.539886][T10968] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000006 [ 259.539900][T10968] RBP: 00007f97c3a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 259.539914][T10968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 259.539929][T10968] R13: 0000000000000000 R14: 00007f97c3ba6080 R15: 00007ffea8a1d058 [ 259.539951][T10968] [ 259.539959][T10968] [ 259.761355][T10968] Allocated by task 5833: [ 259.765674][T10968] kasan_save_stack+0x33/0x60 [ 259.770360][T10968] kasan_save_track+0x14/0x30 [ 259.775041][T10968] __kasan_kmalloc+0xaa/0xb0 [ 259.779636][T10968] vhci_open+0x4c/0x430 [ 259.783790][T10968] misc_open+0x35a/0x420 [ 259.788029][T10968] chrdev_open+0x237/0x6a0 [ 259.792455][T10968] do_dentry_open+0x735/0x1c40 [ 259.797220][T10968] vfs_open+0x82/0x3f0 [ 259.801286][T10968] path_openat+0x1e88/0x2d80 [ 259.805884][T10968] do_filp_open+0x20c/0x470 [ 259.810391][T10968] do_sys_openat2+0x17a/0x1e0 [ 259.815073][T10968] __x64_sys_openat+0x175/0x210 [ 259.819921][T10968] do_syscall_64+0xcd/0x250 [ 259.824600][T10968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.830495][T10968] [ 259.832808][T10968] Freed by task 9368: [ 259.836777][T10968] kasan_save_stack+0x33/0x60 [ 259.841459][T10968] kasan_save_track+0x14/0x30 [ 259.846138][T10968] kasan_save_free_info+0x3b/0x60 [ 259.851163][T10968] __kasan_slab_free+0x51/0x70 [ 259.855930][T10968] kfree+0x2c4/0x4d0 [ 259.859827][T10968] vhci_release+0xbb/0xf0 [ 259.864153][T10968] __fput+0x3ff/0xb70 [ 259.868132][T10968] task_work_run+0x14e/0x250 [ 259.872721][T10968] do_exit+0xad8/0x2d70 [ 259.876873][T10968] do_group_exit+0xd3/0x2a0 [ 259.881370][T10968] get_signal+0x24ed/0x26c0 [ 259.885878][T10968] arch_do_signal_or_restart+0x90/0x7e0 [ 259.891419][T10968] syscall_exit_to_user_mode+0x150/0x2a0 [ 259.897063][T10968] do_syscall_64+0xda/0x250 [ 259.901568][T10968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.907465][T10968] [ 259.909781][T10968] The buggy address belongs to the object at ffff888022ab2800 [ 259.909781][T10968] which belongs to the cache kmalloc-1k of size 1024 [ 259.923826][T10968] The buggy address is located 0 bytes inside of [ 259.923826][T10968] freed 1024-byte region [ffff888022ab2800, ffff888022ab2c00) [ 259.937531][T10968] [ 259.939846][T10968] The buggy address belongs to the physical page: [ 259.946254][T10968] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22ab0 [ 259.955010][T10968] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 259.963505][T10968] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 259.971047][T10968] page_type: f5(slab) [ 259.975033][T10968] raw: 00fff00000000040 ffff88801b041dc0 ffffea0000c1f400 dead000000000002 [ 259.983613][T10968] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 259.992188][T10968] head: 00fff00000000040 ffff88801b041dc0 ffffea0000c1f400 dead000000000002 [ 260.000851][T10968] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 260.009517][T10968] head: 00fff00000000003 ffffea00008aac01 ffffffffffffffff 0000000000000000 [ 260.018179][T10968] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 260.026838][T10968] page dumped because: kasan: bad access detected [ 260.033244][T10968] page_owner tracks the page as allocated [ 260.038943][T10968] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 3411576414, free_ts 0 [ 260.058564][T10968] post_alloc_hook+0x181/0x1b0 [ 260.063333][T10968] get_page_from_freelist+0xfce/0x2f80 [ 260.068794][T10968] __alloc_frozen_pages_noprof+0x221/0x2470 [ 260.074690][T10968] alloc_pages_mpol+0x1fc/0x540 [ 260.079530][T10968] new_slab+0x23d/0x330 [ 260.083690][T10968] ___slab_alloc+0xc5d/0x1720 [ 260.088363][T10968] __slab_alloc.constprop.0+0x56/0xb0 [ 260.093733][T10968] __kmalloc_cache_noprof+0xfa/0x410 [ 260.099016][T10968] class_register+0xb5/0x460 [ 260.103612][T10968] atm_init+0x80/0x150 [ 260.107681][T10968] do_one_initcall+0x128/0x700 [ 260.112442][T10968] kernel_init_freeable+0x5c7/0x900 [ 260.117649][T10968] kernel_init+0x1c/0x2b0 [ 260.121982][T10968] ret_from_fork+0x45/0x80 [ 260.126398][T10968] ret_from_fork_asm+0x1a/0x30 [ 260.131158][T10968] page_owner free stack trace missing [ 260.136511][T10968] [ 260.138821][T10968] Memory state around the buggy address: [ 260.144437][T10968] ffff888022ab2700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 260.152488][T10968] ffff888022ab2780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 260.160543][T10968] >ffff888022ab2800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.168590][T10968] ^ [ 260.172643][T10968] ffff888022ab2880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.180691][T10968] ffff888022ab2900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 260.188742][T10968] ================================================================== [ 260.265787][T10968] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 260.273032][T10968] CPU: 0 UID: 0 PID: 10968 Comm: syz.0.1940 Not tainted 6.14.0-rc5-syzkaller-00105-gf315296c92fd #0 [ 260.283810][T10968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 260.293881][T10968] Call Trace: [ 260.297164][T10968] [ 260.300099][T10968] dump_stack_lvl+0x3d/0x1f0 [ 260.304722][T10968] panic+0x71d/0x800 [ 260.308635][T10968] ? __pfx_panic+0x10/0x10 [ 260.313073][T10968] ? preempt_schedule_thunk+0x1a/0x30 [ 260.318469][T10968] ? preempt_schedule_common+0x44/0xc0 [ 260.323955][T10968] check_panic_on_warn+0xab/0xb0 [ 260.328920][T10968] end_report+0x117/0x180 [ 260.333263][T10968] kasan_report+0xe9/0x110 [ 260.337692][T10968] ? force_devcd_write+0x317/0x330 [ 260.342834][T10968] ? force_devcd_write+0x317/0x330 [ 260.347972][T10968] force_devcd_write+0x317/0x330 [ 260.352932][T10968] ? __pfx_force_devcd_write+0x10/0x10 [ 260.358413][T10968] ? __debugfs_file_get+0x1ff/0x850 [ 260.363633][T10968] ? __pfx___debugfs_file_get+0x10/0x10 [ 260.369197][T10968] ? rcu_is_watching+0x12/0xc0 [ 260.373967][T10968] ? trace_lock_acquire+0x14e/0x1f0 [ 260.379170][T10968] full_proxy_write+0x13c/0x200 [ 260.384023][T10968] ? __pfx_full_proxy_write+0x10/0x10 [ 260.389397][T10968] vfs_write+0x24c/0x1150 [ 260.393728][T10968] ? __fget_files+0x1fc/0x3a0 [ 260.398410][T10968] ? __pfx___mutex_lock+0x10/0x10 [ 260.403439][T10968] ? __pfx_vfs_write+0x10/0x10 [ 260.408206][T10968] ? __fget_files+0x206/0x3a0 [ 260.412889][T10968] ksys_write+0x12b/0x250 [ 260.417225][T10968] ? __pfx_ksys_write+0x10/0x10 [ 260.422082][T10968] do_syscall_64+0xcd/0x250 [ 260.426589][T10968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.432487][T10968] RIP: 0033:0x7f97c398d169 [ 260.436895][T10968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.456499][T10968] RSP: 002b:00007f97c47c7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 260.464913][T10968] RAX: ffffffffffffffda RBX: 00007f97c3ba6080 RCX: 00007f97c398d169 [ 260.472877][T10968] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000006 [ 260.480840][T10968] RBP: 00007f97c3a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 260.488811][T10968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 260.496773][T10968] R13: 0000000000000000 R14: 00007f97c3ba6080 R15: 00007ffea8a1d058 [ 260.504748][T10968] [ 260.507997][T10968] Kernel Offset: disabled [ 260.512308][T10968] Rebooting in 86400 seconds..