last executing test programs: 1m5.814412994s ago: executing program 0 (id=847): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/ifb0/address\x00', 0x0, 0x0) writev$auto(r0, &(0x7f0000000080)={0x0, 0x3e9a000000}, 0x3) 1m5.420680536s ago: executing program 0 (id=850): r0 = fcntl$auto_F_GETLEASE(0xffffffffffffffff, 0x401, 0x0) recvfrom$auto(r0, &(0x7f0000000180)="189a78b46c37cd5fc9b66f20474577665bba7df064a66334784fa4f4ae2d9dc7d5b0003dc6ab413421f1c4d3a7b4c17f6cfbb41d3d68f4d265d15229b4c12dc5ec5818e2fa44a96ac7b0ec823c5737ea431db503f6b15a0454bb9639922220215a6dc0e5582b8b78cc9b76871070b19922c65eb069ff3c90441d98c68fae4e25f28ae9450d7dc3ba1daf47e0dbe5c6452240b91e91656d0d5b2e99eb9ba8", 0xf, 0x8, &(0x7f0000000240)=@ax25={0x3, @default, 0x6}, &(0x7f0000000280)=0x8) mmap$auto(0x0, 0x400108, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) r2 = socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev1\x00', 0x280, 0x0) ioctl$auto(r3, 0xc0905664, 0x38) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0x2, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0xffffff7f) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1a000}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) ioctl$auto_CEC_TRANSMIT(r1, 0xc0386105, &(0x7f0000000100)={0x4, 0x3, 0xc40, 0x2, 0x9, 0xe, "3e787575c28ac38152f10f93ee419ecd", 0x0, 0xb7, 0xd, 0x4, 0xf3, 0x2, 0x7f}) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f0000000000)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x1}, 0x2, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/uvcvideo/parameters/clock\x00', 0x80, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x7fffffff, 0x5) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socketpair$auto(0xfffffffd, 0x5, 0xffffffff, 0x0) unshare$auto(0x40000080) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) 1m4.662285997s ago: executing program 0 (id=851): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) shmat$auto(0x59, &(0x7f0000000580)='(\x04', 0xfffffffd) r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) socket(0x2, 0x80000, 0x7dffffff) epoll_create$auto(0x4) mq_open$auto(&(0x7f0000000000)='/dev/\x00'/16, 0x5, 0x3, &(0x7f0000000040)={0xe7a0, 0xf9, 0x1, 0xa}) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="200028bd7000fff2df277d03a5270500190077000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000840)='/proc/sys/vm/dirty_background_ratio\x00', 0x80000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) sendto$auto(0x3, 0x0, 0x18, 0x101, 0x0, 0x1c) sched_get_priority_min$auto(0x40) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x101002, 0x0) sendmmsg$auto(0x4, 0x0, 0xc, 0x206) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) gettimeofday$auto(&(0x7f0000000100)={0x8, 0x100000000000401}, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x800006, 0x7) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mounts\x00', 0x40800, 0x0) mkdir$auto(&(0x7f0000000180)='./file0\x00', 0xe34e) chroot$auto(&(0x7f0000000200)='./file0\x00') ioperm$auto(0x5, 0x9, 0xf) openat2$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280)={0x40, 0x10, 0xc}, 0x18) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000000c0), 0x40, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card1/pcm1c/sub6/status\x00', 0x8e80, 0x0) 1m3.450101391s ago: executing program 0 (id=854): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFC_CMD_STOP_POLL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1f000000", @ANYRES16=0x0, @ANYBLOB="00022abd7000fcdbdf2507000000080004000a00000007000200283a2d00080003000300000004001400"], 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x44084) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="000826bd7000fedbdf250300000008000200", @ANYRES32=0x0, @ANYBLOB="060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000100bbbbbbbbbbbb0000060006000d00000006000600070000000a00"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/netfilter/nfnetlink_queue\x00', 0x101000, 0x0) socket(0x10, 0x2, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0x8040ae9f, 0x0) socket(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x2, 0xa, 0xa) sendmmsg$auto(r2, &(0x7f0000000200)={{&(0x7f0000000140), 0x101, 0x0, 0x7, 0x0, 0x3, 0x1}, 0x7}, 0x8, 0x7fff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) timer_create$auto(0x9, 0x0, 0x0) timer_settime$auto(0x0, 0xffff8000, &(0x7f00000000c0)={{0xf, 0x10007}, {0x9}}, 0x0) timer_gettime$auto(0x0, 0x0) capset$auto(0x0, 0xfffffffffffffffe) r3 = socket(0xa, 0x5, 0x0) getsockopt$auto(r3, 0x84, 0x25, 0x0, 0x0) syz_clone3(&(0x7f00000004c0)={0xa0000, &(0x7f0000000040), &(0x7f0000000280), &(0x7f00000002c0), {0x2c}, &(0x7f0000000300)=""/219, 0xdb, &(0x7f0000000400)=""/69, &(0x7f0000000480)=[0x0, 0x0, 0xffffffffffffffff], 0x3}, 0x58) 1m3.095792398s ago: executing program 0 (id=856): bpf$auto(0x0, 0x0, 0x6f4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/icmp6\x00', 0x40101, 0x0) syz_genetlink_get_family_id$auto_macsec(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) times$auto(&(0x7f0000000000)={0x7, 0x80000000, 0xffffffffffffffef, 0xffffffff}) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0xd, 0x0) ppoll$auto(&(0x7f0000000000)={0xffffffffffffffff, 0x9b2, 0x1}, 0x2, 0x0, 0x0, 0x8) close_range$auto(0x2, 0x8000, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) madvise$auto(0x0, 0xffffffffffff0001, 0x15) unshare$auto(0x40000080) r0 = prctl$auto(0x43, 0x0, 0x0, 0x0, 0x0) ioctl$auto(r0, 0x541b, 0xffffffffffffffff) r1 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000540)='/dev/cpu/0/msr\x00', 0x0, 0x0) ioctl$auto_X86_IOC_RDMSR_REGS(r1, 0xc02063a0, 0x0) socket(0x2, 0x6, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto_MADV_GUARD_INSTALL(0x0, 0x7bc79a26, 0x66) close_range$auto(0x2, 0x8, 0x0) 59.705971886s ago: executing program 0 (id=873): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x482c0, 0x0) r1 = socket(0xa, 0x800, 0x8) poll$auto(0x0, 0x7, 0x7) (async) poll$auto(0x0, 0x7, 0x7) ioctl$auto_XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000040)={r1, 0x6}) r3 = syz_clone3(&(0x7f00000002c0)={0x5a811080, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x3e}, &(0x7f0000000140)=""/57, 0x39, &(0x7f0000000180)=""/241, &(0x7f0000000280)=[0xffffffffffffffff], 0x1, {r2}}, 0x58) prctl$auto_PR_GET_TIMING(0xd, 0x6, r3, 0xf, 0x100000000) prctl$auto(0x1000000001f, 0x5, 0x154, 0x200000000000009, 0xc311) (async) prctl$auto(0x1000000001f, 0x5, 0x154, 0x200000000000009, 0xc311) madvise$auto(0x0, 0x8000000000000000, 0x15) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x55) listen$auto(0x3, 0x83) (async) listen$auto(0x3, 0x83) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) (async) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0xc0403d08, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) r5 = memfd_secret$auto(0xffffffff) ioctl$auto(r1, 0xbd5a, r5) mmap$auto(0x0, 0x100000000, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0x1, 0x0) (async) io_uring_setup$auto(0x1, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) socket(0xa, 0x5, 0x0) (async) r6 = socket(0xa, 0x5, 0x0) getsockopt$auto(r6, 0x84, 0xc, 0x0, 0x0) madvise$auto(0x0, 0x2000000080000001, 0x3) 44.582010362s ago: executing program 32 (id=873): mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x482c0, 0x0) r1 = socket(0xa, 0x800, 0x8) poll$auto(0x0, 0x7, 0x7) (async) poll$auto(0x0, 0x7, 0x7) ioctl$auto_XFS_IOC_ERROR_INJECTION(r0, 0x40085874, &(0x7f0000000040)={r1, 0x6}) r3 = syz_clone3(&(0x7f00000002c0)={0x5a811080, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100), {0x3e}, &(0x7f0000000140)=""/57, 0x39, &(0x7f0000000180)=""/241, &(0x7f0000000280)=[0xffffffffffffffff], 0x1, {r2}}, 0x58) prctl$auto_PR_GET_TIMING(0xd, 0x6, r3, 0xf, 0x100000000) prctl$auto(0x1000000001f, 0x5, 0x154, 0x200000000000009, 0xc311) (async) prctl$auto(0x1000000001f, 0x5, 0x154, 0x200000000000009, 0xc311) madvise$auto(0x0, 0x8000000000000000, 0x15) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e20, @rand_addr=0xfffffffe}, 0x55) listen$auto(0x3, 0x83) (async) listen$auto(0x3, 0x83) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) (async) r4 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r4, 0xc0403d08, 0x0) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) r5 = memfd_secret$auto(0xffffffff) ioctl$auto(r1, 0xbd5a, r5) mmap$auto(0x0, 0x100000000, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0x1, 0x0) (async) io_uring_setup$auto(0x1, 0x0) openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000008040), 0x2, 0x0) socket(0xa, 0x5, 0x0) (async) r6 = socket(0xa, 0x5, 0x0) getsockopt$auto(r6, 0x84, 0xc, 0x0, 0x0) madvise$auto(0x0, 0x2000000080000001, 0x3) 8.920953353s ago: executing program 4 (id=1047): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="01002b8f7000fcdbdf2504"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4044820) r1 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f0000000180), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000001dc0)=""/195, 0xc3) read$auto(0x3, 0x0, 0x7) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x75, 0x0, 0x0) 8.348397825s ago: executing program 4 (id=1050): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x38aa8d941b8a4720, 0x0) mmap$auto(0x0, 0x2020009, 0x9, 0xeb1, 0xfffefffffffffffa, 0x8000) r1 = open(0x0, 0x149443, 0x14) fcntl$auto(r1, 0x409, 0x40003f) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'virt_wifi0\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r4}, @NL80211_ATTR_WIPHY_FRAG_THRESHOLD={0x8, 0x3f, 0x9}]}, 0x24}, 0x1, 0x0, 0x0, 0x20040810}, 0x20000084) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000300)=""/183, 0xb7) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) getsockopt$auto_SO_RCVTIMEO_NEW(r0, 0x5, 0x42, &(0x7f0000000040)='/dev/audio1\x00', &(0x7f0000000100)=0x5) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) migrate_pages$auto(0x0, 0x8, 0x0, &(0x7f00000001c0)=0x7b) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_CHANNELS(r5, 0xc0045006, &(0x7f00000001c0)) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) move_pages$auto(0x0, 0x1002, 0x0, &(0x7f0000001140), 0x0, 0x2) r6 = openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$auto_TUNSETIFF(r6, 0x400454ca, &(0x7f0000000080)=0x4) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/tty12\x00', 0x101840, 0x0) mmap$auto(0x20000000000005, 0x20009, 0x4000000000dc, 0xeb1, 0x401, 0x8000) r8 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, 0x0, 0x400, 0x0) ioctl$auto_CEC_RECEIVE(r8, 0xc0386106, 0x0) setreuid$auto(0x0, 0x20000000004) ioctl$auto(r7, 0x2, 0xffffffffffffffff) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x5) 7.177158851s ago: executing program 1 (id=1054): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) socket(0x25, 0x1, 0x3) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x8}, 0xed7138c}, 0x9a6, 0xe000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="1300250200000008000300000000000000007be490bbb16b4b66d0fb7aa55db19b9ad9d894f3056b29a3b2a42a10111db7c63bb1173ee13d69c04c40e659eec8d662942b2ab662d24a4922c93ce55ed4b5049f4a32bf0a65212ee40a6b5b2fa06a2e412b58544f9349f082", @ANYRES32=r2, @ANYBLOB="0400d1000500590008000000"], 0x28}, 0x1, 0x0, 0x0, 0x4c0d4}, 0x20040894) sendmsg$auto_NL80211_CMD_SET_REG(r1, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1a00002e", @ANYRES16=0x0, @ANYBLOB="000828bd7000ffdbdf251a0000000400e200"], 0x18}, 0x1, 0x0, 0x0, 0x50000}, 0x40008c0) r3 = fsopen$auto(0x0, 0x1) fsconfig$auto(r3, 0x6, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x2) socket(0x21, 0x2, 0xa) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x3, 0x5, 0x7, 0x0) getsockopt$auto(0x6, 0x110, 0x6, 0xffffffffffffffff, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/flags\x00', 0x101142, 0x0) mmap$auto(0x0, 0x3, 0xe0, 0x9b72, r0, 0x101) semctl$auto(0x1ff, 0x100000001, 0x13, 0x9) r5 = socket(0x2b, 0x1, 0x1) setsockopt$auto(r5, 0x29, 0x20, 0x0, 0x23) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000200), 0x20400, 0x0) write$auto_proc_mem_operations_base(r3, &(0x7f0000000040)="ca97a4147c4a563c108565dafc491e5c4fda791e0aab8daf18ad7ec0cb92999690a90e7f92ff1669cc15f9fe6341d0478a42e14da3bf1ff1796244a840319d057a6010bfa17291dc8d09fbe8d28795e080cc67d8f01ec0e6438d9344672a97dae7ceeffd515a13801e908c665bda935cfef17e19ca4ad6d606aabd620381921bc127ae4ddb871094945d5145a6f691c02af273da302b64f4796380d04ecda2c5101c23170f63574e100a3605", 0xac) write$auto(r4, &(0x7f0000000100)='0\x00\xa6\xcc\r\x91QU\x9dI\xda\x1b\xad\xb1\x9e\xc8Tt\xa8\x94\x9c\x8a\xe2\xc7cOM\xb6\xa3,!o\x9e\xb0\xadT\xfbR\xa1Y\x94V[8\x04c\xdf:]\xd9\x94\xf8F\xbb\xa2\xbb>\xade\x18\xbd\xe2\x1c\x89OO]e[\xbb\xf9\xcd\xc0\xc9\x00\xda\xac\xdd\x1a\xdd\xdd\xb9o\x1a\xab\xd5\xef\xc0\x04z\xd0I>\x8f\x00\xe5\x1c*\xed`\xfd\x15\x88\x0f\x9a\xd5\xa7\x14\f};\xabt\xd1ak\xe5\x98\xea\xe3}\x10\xab\f_\x19\x9b\x11\xb25VUK\x93\xcdd\x17\xe4\xcbA\xa5[\b\xb8;\x02tcf\x06\xfbD\x91\xcaG\xdaa:k[r\x06\xeb\xf0\xc4\xcb\x10\xae\xc8\xe9u\x9f\xdeK\xa5\x8e\xd6\x8f\xd0UV\x11\xcb\xdd\x81\xbe\xdeL/\x06(\x1d\xa5\xc5\x9b\xb2\x96\x05`\xe7\xd5Y\a\xc1\xe9(\x95\xdfH\xf4\v\xf3C', 0x4) 6.745241578s ago: executing program 4 (id=1056): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = fanotify_init$auto(0x401, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'team_slave_1\x00', 0x0}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r3, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r3) read$auto(r3, &(0x7f0000000100)='nl80211\x00', 0xbe62) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000500000000000000000008000200", @ANYRES32=r2, @ANYRES32=0x0, @ANYBLOB="08000300060000"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x300) pidfd_open$auto(0x1, 0x0) setns(r0, 0x2000000) mount$auto(0x0, &(0x7f00000000c0)='.\x00', 0x0, 0xdef, 0x0) mmap$auto(0x0, 0x8020009, 0x7ffffffc, 0xeb1, 0x401, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x981) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) socket(0x1f, 0x1, 0x4c0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x4, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) fanotify_mark$auto(0x0, 0xb5, 0x8, r0, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000300)='/dev/midi2\x00', 0x36b000, 0x0) 6.363591434s ago: executing program 3 (id=1058): socket(0x25, 0x1, 0x3) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfd, 0x0, 0xfffffffffffffffd) r0 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r0, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) recvmmsg$auto(0x3, 0x0, 0x4, 0x2, 0x0) r1 = prctl$auto(0x3, 0x0, 0x0, 0x4, 0x7ee9) ioctl$auto_EVIOCSREP(r1, 0x40084503, &(0x7f0000000000)=[0x3, 0x3]) shutdown$auto(0x200000003, 0x2) 6.041223094s ago: executing program 3 (id=1059): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'pim6reg\x00', 0x0}) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'syz_tun\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r1, 0x8, 0x70bd26, 0x25dfdbfb, {}, [@ETHTOOL_A_TSINFO_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_TSINFO_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f00000001c0)={0xbc, 0x8, 0xfffffffffffff682, 0x5, 0xffffffff, 0xffffffffffffffff}) r5 = prctl$auto_PR_PAC_SET_ENABLED_KEYS(0x3c, 0x6, r4, 0x190be67f, 0x7fff) read$auto(0xffffffffffffffff, &(0x7f0000000200)='\x00', 0xffffffffffffff7f) (async) ioctl$auto_USBDEVFS_SETINTERFACE(r5, 0x80085504, &(0x7f0000000240)={0x6, 0x81}) (async) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/virtual/tty/ttybe/power/autosuspend_delay_ms\x00', 0x6202, 0x0) r7 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000300), r5) sendmsg$auto_NL80211_CMD_START_P2P_DEVICE(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0x20, 0x70bd2b, 0x25dfdbfd, {}, [@NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24000010}, 0x4000040) (async) r8 = syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f0000000440), r0) sendmsg$auto_IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x38, r8, 0x800, 0x70bd27, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x7f}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000000}, 0x4004810) ioctl$auto_OSS_GETVERSION(r5, 0x80044d76, &(0x7f0000000540)="bcdd840fd979903049bf831d17f71451302a15a1d5a5b44991566ec6f45222bc180a8b9a1c0643b06f4df09523b2dd8578ab7b89b0bf02e0153c914b2cfc5bf32c515d8220767248183eedf3e66877a2bf98387509d134cd5c6527df3d7146e162f60f48938964012c57ae17770d994806d41241e406560dee14a24503f887f172ee6764b09fe3bbc744da594091eb8ac5") (async) ioctl$auto_XFS_IOC_SCRUB_METADATA(r5, 0xc040583c, &(0x7f0000000600)={0x3bbc3b29, 0x1, 0x40, 0x5, 0xc6a}) (async) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000640), r5) (async) setsockopt$auto_SO_MAX_PACING_RATE(r6, 0x0, 0x2f, &(0x7f0000000680)='/\x00', 0x1000) (async) r9 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000700), r5) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000740)={'pimreg0\x00', 0x0}) r11 = semctl$auto_SEM_INFO(0xd, 0xffffffff, 0x13, 0xd4ec) msgctl$auto_IPC_STAT(0x9, 0x2, &(0x7f0000000800)={{0x80, 0xee00, 0xee01, 0x7, 0x9, 0x7f, 0x4}, &(0x7f0000000780)=0x30, &(0x7f00000007c0)=0xa, 0x3, 0x2220a522, 0x0, 0x4, 0x1, 0x100, 0x589e, 0x0, @raw=0x7, @raw=0x5e}) sendmsg$auto_NCSI_CMD_PKG_INFO(0xffffffffffffffff, &(0x7f0000001e40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001e00)={&(0x7f0000000880)={0x1564, r9, 0x10, 0x70bd28, 0x25dfdbff, {}, [@NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x7}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r10}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x7ff}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x9}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0x4}, @NCSI_ATTR_PACKAGE_LIST={0x1518, 0x2, 0x0, 0x1, [@nested={0x4, 0xe9}, @nested={0xe3, 0xfd, 0x0, 0x1, [@nested={0x4, 0x13a}, @nested={0x4, 0x27}, @generic="e65827bcd4997f9f827a3cc6c6e23ef15efc86b1ee664c000517a2216b595abc307600343f4961ddc10333be9b2372c3125bd5b49530c4023680600de3d2163438e087bb1f6aae100f777e74a47d9bc913df958835e3cfd8396781dc6d2f9dad35bde9f6743b4d74843c48d23f5691e55f48362bcf786fab5c548c22b1a2e9847e74fa7dace54be29fced15d2ac3d9fd51eae6b49fee5edeff2ef6ef8a77ca8035425aa72c837938fb7e4a28916a9e79", @nested={0x4, 0xdb}, @generic="fc75cf86c57f9edc7690a348826f5178d2d9649f67e921", @nested={0x4, 0x95}, @nested={0x4, 0xea}, @typed={0x4, 0x51}]}, @nested={0x12f6, 0x12c, 0x0, 0x1, [@generic="09434e0b44c37a3307cf9a04ecd86d9269e2b468867b766767cdba7f4bcc74df4388e802cd4f6904c4ff65356ba10ff53910cc06a1f88504f7612bc1834467483a79e8ff55c07d99e97f6b77e7ae886a4f0969ff691579ac4633050f0be0ee4c360c16fb3423fcb72003bb27bf43adeb65121f3cdf1c8a88e9e51f2bfc17ffbcc944d30d6ec1729e02a77b4164a7cdf089be8630d2342d2e7072ed165e9ddd2f779d0d3c09efca1fa32fa33f5654d2075a647d3eac19cc4e621ae0f9c01c4e243a394d7841dc59865a94", @typed={0x8, 0x125, 0x0, 0x0, @ipv4=@local}, @generic="6cd1ec93ce63472149e250b94b74b3aaf43b1a2058178d149dddb2ba2921a5e5fe671cce51d94f4d3386b903f16f9312b02d0fd920a4e8d8e85a0e4ea00ac1a70d92226382b418c4a5f27a6f9daa6654acf12f25009ede95c79aad4c29769a4fbcdfbfae573cdc8c61eda7209fd8a4f78c500122ae3a52905a1c06a7d6c0a55405f6863103a615d04c3d5b", @generic="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", @typed={0x4, 0x9c}, @generic="1774a46ae4fdaa0ef42fde6e2078e81c3d1519c4e3713e00366d0189275248995af4c9ff556fd903878f1238e5673f1e6d6d40bf1067541caec31357fff8aac969d448bc4a694849498cebd18b1273beff518c08a6ed4e5d3b23dcc4e9b2a525197a69cd762f1181adccf9b874cdf51cbd88b962a9004b5306fbdb3e47c229b97713ea00e85eabca35046dce72dffe63c822", @typed={0x8, 0x40, 0x0, 0x0, @u32=0x2}, @generic="d61b03bb8ce9b7773686eab09b144f0330b983064c01a222224f87250ce5bd6830d7fd228b7169101f2475be9285fa373a02e7c890783d1efdcb24d7d3fa7764df0e343cfeac54d384fbc353d513b4a5bc83af653d30d0f1348c21006501a98ab5e73d5fcfa6253189e56cae3f288be4f5a1a96f71b554ad1fd75755b5422a8771972f5716c9774aee44c7b25c3f34999ac36a2b825663be93ef690b60aaae7d47ff279450341456e736858eb97cc4b40b380058afb7b16b1a8adcb71ef0587ad9ef27ac8679ceceb5dca4ad50f1e2e34135ad1bf368e41130d6cd387c3cb0f072079039fe550f68d0751562360d8d91cd2b3c33482a89"]}, @typed={0x8, 0xf3, 0x0, 0x0, @u32=0x7}, @nested={0x121, 0xbe, 0x0, 0x1, [@generic="d80570d38ec6f5e03235fddb1b196988a8dc76aae253edea2ec782586609122ce1dd5ef40ee89fc163144db2d7bd4afe920454f1ab1d3e4d3c06a69b3cc0ef220396fc54b48bdd14f47097", @nested={0x4, 0x117}, @generic="999cf80d43ea33f29e796637a64734fbec96a77021c06c85cd19759d56613dd7af86a95374baa0c0798ef1fe8cfac1cf9ac035a2da69c4b3515e076644af65201a8b63b9801fe7e24c88fb511a8238c771f4927a597941ccf4c784df6d4ef61e27c67c621679f420d3c298b5311486537871f6791b145a11d65252f0e6358d99eb7403c90789e3c8bfe3b18cbf7eaa7f571a7d9fb74fa60629db339eec0068422fb2760e08c8b7f7c623f7d1c368c8fd3e36642064dba0670860bfd27c8e", @typed={0x8, 0xe3, 0x0, 0x0, @ipv4=@multicast2}, @typed={0x8, 0xc, 0x0, 0x0, @pid=r11}]}, @typed={0x8, 0x64, 0x0, 0x0, @uid=r12}]}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_CHANNEL_ID={0x8}]}, 0x1564}}, 0x4000811) (async) utime$auto(&(0x7f0000001e80)='./file0\x00', &(0x7f0000001ec0)={0x7, 0xffffffffffffffff}) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001f00)='/dev/ptyva\x00', 0x450000, 0x0) (async) r13 = waitid$auto_P_ALL(0x0, 0xffffffffffffffff, &(0x7f0000001f40)={@_si_pad}, 0x2, &(0x7f0000001fc0)={{0xf1, 0x50ed}, {0x4, 0x7f}, 0x200000000000, 0x81, 0x2, 0x7, 0x8001, 0x351272d2, 0x9, 0xf32a, 0x80000000, 0x0, 0xfce, 0x0, 0x0, 0x6}) r14 = prctl$auto_PR_MPX_DISABLE_MANAGEMENT(0x2c, 0x3, r13, 0x6, 0x8) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000002080), r14) (async) r15 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000002100), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r14, &(0x7f0000002280)={&(0x7f00000020c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002240)={&(0x7f0000002140)={0xfc, r15, 0x2, 0x70bd27, 0x25dfdbfd, {}, [@HWSIM_ATTR_RX_RATE={0x8, 0x5, 0x972}, @HWSIM_ATTR_MLO_SUPPORT={0x4}, @HWSIM_ATTR_REG_STRICT_REG={0x4}, @HWSIM_ATTR_CIPHER_SUPPORT={0x1d, 0x18, "863a6ab918afae16495e3031b00568d21dd7f9872696681ad7"}, @HWSIM_ATTR_COOKIE={0xc, 0x8, 0x6}, @HWSIM_ATTR_REG_STRICT_REG={0x4}, @HWSIM_ATTR_FREQ={0x8, 0x13, 0x6}, @HWSIM_ATTR_ADDR_RECEIVER={0x9e, 0x1, "6d4f29364a3fc7f255dcc5d92631692795225fe6ae6c4af8436bcd660bf4081de46cdd8a38bf4317007352232278af043f03dee2baa41a449deefaed2106b8ee41af1f517cd86068e28be9792513213ba2bbe58cb85a4fbdaadd8c809b49262fa2a777578fe05c8e290f2896ec9826d7c074c24950bc8f8e141f990d84e6e844222455024e7c6289bef4e2116a35fff5c69389251f992836ce3d"}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20000800}, 0x4000081) 5.886223814s ago: executing program 4 (id=1061): prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x22, 0x1, 0x80000000) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/trace\x00', 0x600, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x74c) unshare$auto(0x40000080) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x3b87, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r1 = socket(0xa, 0x2, 0x88) setsockopt$auto(r1, 0x29, 0x10, 0x0, 0x1) syz_clone(0x40011, 0x0, 0x0, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x401, 0x6, 0x0, 0x5, 0x56eb86b9, 0x4, {0x100000000, 0x10000}, 0x1, 0x6, 0x9, 0x1008000, 0x0, 0x80000008, 0x81, 0xffffffffffff6290, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) close_range$auto(0x2, 0x8, 0x0) pidfd_open$auto(0x1, 0x0) pidfd_send_signal$auto(r0, 0x4, 0x0, 0x1) 5.707171881s ago: executing program 1 (id=1062): mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) read$auto_event_inject_fops_trace(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb0800) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fb, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x11000000, 0x0, 0x7, 0x200000006d3c, 0x7ff, 0x10, 0xfffffffffffffffd]}, 0x0) mmap$auto(0x0, 0x9, 0x3ff57697, 0x16, r0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$auto(0xffffffffffffffff, 0x6f2d, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) syslog$auto(0x4, &(0x7f0000000040)='..\x00', 0x7) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r2, 0xc0404d1a, r2) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) 5.382358542s ago: executing program 3 (id=1063): mmap$auto(0x0, 0x2020009, 0xa, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1c, 0x0, 0x1) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptywd\x00', 0x0, 0x0) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/mounts\x00', 0x121080, 0x0) openat$auto_stat_fops_(0xffffffffffffff9c, &(0x7f0000000140)='/proc/stat\x00', 0x2000, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) socket(0x10, 0x80002, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1, 0x3, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) mount$auto(0x0, &(0x7f0000000040)='}[,&*}\x00', &(0x7f0000000080)='nfsd\x00', 0x3, 0x0) 5.37753445s ago: executing program 2 (id=1064): mmap$auto(0x0, 0x6, 0x200, 0x14, 0x2, 0x8000) mremap$auto(0x1ff000, 0xfee0, 0x3fd6, 0x10003, 0xfffff000) (async, rerun: 64) mmap$auto(0xfffe, 0x2020009, 0x40000003, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) r0 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r0, 0x0, 0x2000400) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) (async) r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) open(0x0, 0x149443, 0x0) (async, rerun: 64) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8000, 0x0) (rerun: 64) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC2\x00', 0x80, 0x0) ioctl$auto(r3, 0xc10c5541, r2) (async) r4 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) mremap$auto(0x7, 0x1, 0x6, 0x7b, 0x9) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0xc2481, 0x0) (async) recvmmsg$auto(r4, 0x0, 0x0, 0x3, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) (async) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) (async, rerun: 32) mremap$auto(0x9, 0x2, 0x1, 0x24e7, 0x7) (async, rerun: 32) unshare$auto(0x40000080) (async, rerun: 32) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r5 = clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9) (async) exit$auto(0x7fff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto(r1, 0x26, r5) fcntl$auto(0x8000000000000001, 0x24, 0x4) getrandom$auto(0x0, 0x800000006, 0x7) 5.070072351s ago: executing program 2 (id=1065): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030000020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a0001000000000000000000080004001000000008000200", @ANYRES32=0x0, @ANYBLOB="0a0018"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(r0, r0, 0x8) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000380)={0x24, r1, 0x1, 0x70bd2c, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x4a}, @NFSD_A_SERVER_LEASETIME={0x8, 0x3, 0x11}]}, 0x24}}, 0x4000) 5.024819914s ago: executing program 3 (id=1066): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) setpriority$auto(0x4000000001, 0x100000001, 0x6) mmap$auto(0x2000000, 0x400008, 0xdf, 0x9b72, 0x100000000002, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc9302, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) rseq$auto(0x0, 0x47fffd, 0x0, 0x6) madvise$auto(0xfffffffffffffffb, 0xffffffffffff0005, 0x19) setgroups$auto(0xe32, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000040)='./file0\x00', 0x22240, 0x154) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x7, 0xdf, 0x9b73, 0xffffffffffffffff, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r1 = socket(0x2b, 0x1, 0x1) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) mmap$auto(0x1, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x2000000000008000) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r1, 0x0, 0x20000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) 4.139892806s ago: executing program 1 (id=1067): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_CHANNEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000780)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010800000000000000254500000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x4000895}, 0x24000004) r1 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x8a403, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/bus/usb/drivers/rtl8150/remove_id\x00', 0x509b00, 0x0) read$auto_proc_mountstats_operations_mnt_namespace(0xffffffffffffffff, &(0x7f0000001140)=""/228, 0xe4) sendfile$auto(r2, r2, 0x0, 0x1000200) getsockopt$auto_SO_PASSPIDFD(r1, 0x3, 0x4c, &(0x7f00000010c0)='&#{]J+)\x00', &(0x7f0000001100)=0x5) pwrite64$auto(0xc8, &(0x7f0000000080)='\vX\xb5\x85\x91p\xe6\x1eRN8\x90\x86\xdde\x1cJ\x99\x00\x11\x89\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\x00'/232, 0xfdef, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ptyz3\x00', 0x0, 0x0) r4 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r4, &(0x7f0000000040)=""/4096, 0xfffffe82) pread64$auto(r3, &(0x7f0000001080)='/$!*\xc8]%`%+:&#}.\x00', 0x8000000000000000, 0x4) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 4.033757136s ago: executing program 2 (id=1068): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty17\x00', 0x1, 0x0) write$auto_tty_fops_tty_io(r0, &(0x7f0000002200)="972e51fe7285a86f3fe36136c8535f593331280bb0b4ba01dd7932ab185cca064833fda24d0f81d1b16c3cca5b2611827c2f1ca88bb01e672131ac62d346b5601f538ccf28", 0x45) io_uring_setup$auto(0x6, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), r1) sendmsg$auto_SMC_NETLINK_REMOVE_UEID(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="92ebc4c049a5d1f50000e2f77935f3c34db9a80584b3a5ccdec9206ca9a66416aee4a20c0ba59b804111c0e96a69cdec64776010a2194dcded3d", @ANYRES16=r2, @ANYBLOB="01002abd7000fcdbdf250b0000000c0001006e6c383032313100"], 0x20}, 0x1, 0x0, 0x0, 0x8004}, 0x0) madvise$auto(0x0, 0x200007, 0x19) getegid() close_range$auto(0x2, 0x8, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) select$auto(0xffffffff, &(0x7f0000000040)={[0x54, 0x10, 0x800000c8be, 0x8, 0x273a, 0x0, 0xb, 0x5, 0x5, 0x330, 0x7, 0x200cf, 0x45, 0xc, 0x5, 0xb98]}, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bluetooth/hci1/hci1:201\x00', 0x20c640, 0x0) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x200, 0x46) ioctl$auto_XFS_IOC_ALLOCSP64(r3, 0x40305824, 0x0) prctl$auto_PR_SET_MDWE(0x41, 0x8, 0x0, 0x5, 0xffff) pread64$auto(0xffffffffffffffff, 0x0, 0x100000001, 0x400000000000100) 3.353300546s ago: executing program 2 (id=1069): mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) read$auto_event_inject_fops_trace(0xffffffffffffffff, &(0x7f00000007c0)=""/4096, 0x1000) mmap$auto(0x80000000, 0x4, 0xffffffffffffffff, 0x13, r0, 0x4) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb0800) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) shmat$auto(0x0, &(0x7f0000000000)='(\x00', 0xfffffffe) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000000c0), 0x80600, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fb, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x11000000, 0x0, 0x7, 0x200000006d3c, 0x7ff, 0x10, 0xfffffffffffffffd]}, 0x0) mmap$auto(0x0, 0x9, 0x3ff57697, 0x16, r1, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r4 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$auto(r4, 0x6f2d, r4) splice$auto(r2, 0x0, r4, 0x0, 0x80000001, 0x46) close_range$auto(0x2, 0x8, 0x0) syslog$auto(0x4, &(0x7f0000000040)='..\x00', 0x7) ioctl$auto(0xffffffffffffffff, 0xc0404d1a, 0xffffffffffffffff) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) 3.262041219s ago: executing program 1 (id=1070): mmap$auto(0xffffffffffffffff, 0x400008, 0xdf, 0x195, 0xffffffffffffffff, 0x6) setresgid$auto(0x800, 0xee01, 0xffffffffffffffff) setregid$auto(0xee01, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) mbind$auto(0x0, 0x2, 0x2, 0x0, 0x7, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'ipvlan1\x00'}) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) r1 = socket(0x2, 0xa, 0xa) sendmmsg$auto(r1, &(0x7f0000000200)={{&(0x7f0000000140), 0x101, 0x0, 0x7, 0x0, 0x3, 0x1}, 0x7}, 0x8, 0x7fff) (async) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0004, 0x19) syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x24, 0x0, 0x1, 0x70bd28, 0x25dfdbf9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}]}, 0x24}, 0x1, 0x0, 0x0, 0x44010}, 0x0) (async) sendmsg$auto_BATADV_CMD_TP_METER(r1, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x2c, 0x0, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MCAST_FLAGS={0x8, 0x26, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4010}, 0x8) r4 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000080), r1) sendmsg$auto_OVS_VPORT_CMD_DEL(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000000c0)={&(0x7f0000000ac0)={0x22d4, r4, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@OVS_VPORT_ATTR_UPCALL_PID={0x1004, 0x5, "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"}, @OVS_VPORT_ATTR_UPCALL_STATS={0x12bb, 0xa, 0x0, 0x1, [@nested={0x83, 0x72, 0x0, 0x1, [@nested={0x4, 0x13e}, @nested={0x4, 0xa2}, @generic="856062327c503f1d40c7369af16dbd8645468326e2516a4e9bcfc3004e6bcdd9d84bd5a82a4e8a90068957b835073fcc39315345e9ff1075f060cd91da9d1c41c5e964afdb4316c413d69e464cfc52babe0f9db1630f07cf9e70aec982b73726caa353032342266fdfe1d7b9b11300e74a1f3400908c6c"]}, @nested={0xc7, 0x13, 0x0, 0x1, [@generic="57ae55387c6b0c1007d01ad232bbea456d28fc9e8b93df6100226b9ed2e26927548fc0bdcb8383567467c21222c0ed2c996b4a64268783abc23d60acb85295c652209a0002449c45b342cc2be14d24f9185617b577b2aa2c525b7b6ffee7de956d4130412841b4822a07349a7ac0975e401f07511ead547a7331abedcb81bd9022eed9c2187f7265d039fa4ea758ea65e22f6ce58a723af7", @typed={0x9, 0x107, 0x0, 0x0, @str='-^++\x00'}, @typed={0xc, 0x88, 0x0, 0x0, @u64=0x4}, @generic="316bcc0a6e4c42", @typed={0xc, 0x9f, 0x0, 0x0, @u64=0xfff}]}, @generic="d091d4f3c9eb9ebddae32bed521beedbff3c7dec7badd3", @typed={0x42, 0x4e, 0x0, 0x0, @binary="daaff32c126b6044c9354ff3a8c539c7ab45a2df72e50da0c3bdf316dcf005f97bb91c9934e3d3dc592c2777d32e76530593f5af2660dcf02dbdaaaa3dc5"}, @generic="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", @nested={0x8, 0x7f, 0x0, 0x1, [@nested={0x4, 0xa1}]}, @generic="32371fbeb246a6eb8df38a33e51813408ca283d9e955004fa00975bdde4bc9e5d9d90c80a3fac068b4d129653f5b3715773018e0888854d724706010b9f86b5d4d5fb1fc2dd2cb84bf03108baec70ac86474c4d4a0318b2792ff9e57bf9166ca944119c5639c2342536376271e07be4362671eb1446cb137d77198355d43e47932629ceb8b5c143170ee8d4f5b23fe7e0d9cedea4251ac69b6215d61473ccddba52058eaa788749cee087f001e487b85d06aa0a7273c5bf0f3e6", @generic="957580abc811db61512eeb3fe9dc9e90823232dfaf99d1ebca97e80e3f0c84845915ef932d92d3e37bbe5b5735ff1d653a265f51bd302c950506b00af128767fa6b0ad2e8d06ece1b7256072a3c1d6"]}]}, 0x22d4}, 0x1, 0x0, 0x0, 0x11}, 0x80) (async) kill$auto(0x0, 0x21) (async) madvise$auto(0x0, 0x2003f0, 0x15) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x2841, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) (async) socket(0x1d, 0x3, 0x1) (async) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x8000) (async) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x10002}, 0x401) 2.809250279s ago: executing program 3 (id=1071): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/fs/orangefs/perf_counters/ncache\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000000)='72\xa1\x84\xbd0\x00f\x19\x1c\xc7k\x00\x00\x00\x00', 0x7) close_range$auto(0x2, 0x8, 0x0) seccomp$auto(0x7, 0x4, &(0x7f00000000c0)="ba7f02bbc123e164c104bd4c16db14e8210c5ca57e586aee069a5edd96577a3b5841293ec55c4de1cb268c5d0ef1a578c9cc99fd024bb77d7bd1") r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) acct$auto(&(0x7f0000000080)='/dev/input/event1\x00') ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) mlockall$auto(0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) setreuid$auto(0x0, 0x20000000004) mlock$auto(0x1a7b, 0x2) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) listmount$auto(&(0x7f0000000100)={0xba, @raw, 0xffffffffffffffff, 0xfffffffffffffff7}, 0x0, 0xf4240, 0x1) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0xffffffffffffffff, 0x1275, 0xffffffffffffffff) 2.168880046s ago: executing program 4 (id=1072): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x4, 0x7, 0x8}) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001b80), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x24, r2, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@HWSIM_ATTR_RADIO_NAME={0xa, 0x11, '+--$+,'}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20000000) sendmsg$auto_HWSIM_CMD_REPORT_PMSR(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r2, 0x4, 0x70bd26, 0x25dfdbfb, {}, [@HWSIM_ATTR_RX_RATE={0x8, 0x5, 0xffffffff}, @HWSIM_ATTR_MLO_SUPPORT={0x4}, @HWSIM_ATTR_IFTYPE_SUPPORT={0x8, 0x17, 0x3}, @HWSIM_ATTR_MLO_SUPPORT={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0x800) 1.367685582s ago: executing program 2 (id=1073): mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x2000000000000000) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) r1 = socket(0x11, 0xa, 0x1000) ioctl$auto(r1, 0x2, 0x2) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) setsockopt$auto(r0, 0x1, 0x12, 0x0, 0xeb66) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb0800) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fb, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x11000000, 0x0, 0x7, 0x200000006d3c, 0x7ff, 0x10, 0xfffffffffffffffd]}, 0x0) 610.999857ms ago: executing program 1 (id=1074): read$auto_dfs_global_fops_debug(0xffffffffffffffff, &(0x7f0000000000)=""/44, 0x2c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000080)={0x14, r1, 0x1, 0x870bd2b, 0x25dfdbfc}, 0xb}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) (async) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000000080)={0x14, r1, 0x1, 0x870bd2b, 0x25dfdbfc}, 0xb}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 240.642488ms ago: executing program 1 (id=1075): mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) read$auto_event_inject_fops_trace(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101002, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb0800) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x1f, &(0x7f0000000000), 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1fb, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x11000000, 0x0, 0x7, 0x200000006d3c, 0x7ff, 0x10, 0xfffffffffffffffd]}, 0x0) mmap$auto(0x0, 0x9, 0x3ff57697, 0x16, r0, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000080), 0x400000, 0x0) ioctl$auto(0xffffffffffffffff, 0x6f2d, 0xffffffffffffffff) close_range$auto(0x2, 0x8, 0x0) syslog$auto(0x4, &(0x7f0000000040)='..\x00', 0x7) r2 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x28082, 0x0) ioctl$auto(r2, 0xc0404d1a, r2) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) 183.343142ms ago: executing program 3 (id=1076): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async, rerun: 64) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) (async) setsockopt$auto(0x3, 0x6, 0x15, 0x0, 0xfb3) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async, rerun: 32) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') (async, rerun: 64) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (rerun: 64) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async, rerun: 64) madvise$auto(0x0, 0x8000000000000000, 0x15) (async, rerun: 64) madvise$auto(0x0, 0x2000000080000001, 0x3) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 32) capget$auto(0x0, 0xfffffffffffffffe) (async) ioctl$auto_EXT4_IOC_CLEAR_ES_CACHE(r0, 0x6628, 0x0) (async, rerun: 32) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) (async, rerun: 32) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x17) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) madvise$auto(0x30, 0x80000006, 0x4) (async) socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x408, 0x7, 0x1ff, 0x7, 0x42, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x6, 0x2000, 0x0, 0x6, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0xffffffffffffbfff, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd) 159.293263ms ago: executing program 4 (id=1077): mmap$auto(0x0, 0x101, 0x4000000000df, 0xeb1, 0x200000401, 0x8000) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = socket(0xa, 0x1, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x1d, 0x2, 0x2) connect$auto(0x3, 0x0, 0x55) r1 = socket(0x10, 0x3, 0x6) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) close_range$auto(r1, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x5, 0x0) socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x6, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x5c8) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x20b42, 0x0) r3 = socket(0x25, 0x5, 0x0) sendmsg$auto_OVS_METER_CMD_SET(r3, &(0x7f0000003240)={0x0, 0x0, &(0x7f0000003200)={0x0, 0x24}, 0x1, 0x0, 0x0, 0xc0}, 0x40) ioctl$auto_SNDCTL_DSP_SPEED(r2, 0xc0045002, 0x0) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r2, 0xc004500a, &(0x7f00000003c0)="80e08ca631b90e5e9a4997a0a2f075172c2529fea5d2b4b06119e7cc493e3c68f5e114fe74f6ec1d4e94daec10b05cb281b0922bcba475cea32ccf0eda11471e9c15d15fbcc3bebe4bc005053b7459c5ecbae956634304a2b3c20d024a0df7b468626e493968743cc5ed35ab320b6ffd85d87720f947e83e96c03fca21e0c585095bf40d010cd4fba6c371232889fd43cb084df47b56ff93efb0f707d371175d4dcd1c13802f7a4550e4ef765842dadd3e2bc2df160655b78b5a9438f2f8be466e2b3782469b16c9310ff6307403770f5c225820d582ab93c7ca472e799fe10d61abbfc87ea3846f44cb04eef9ed7c16b24835") setsockopt$auto(0x400000000000003, 0x29, 0x1c, 0x0, 0x56b) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002) setsockopt$auto_SO_MAX_PACING_RATE(r0, 0x3, 0x2f, &(0x7f0000000300)='\xba\xf13\xa4o\xd3\xd2\xe0v\x95\xe6mAk\x90\xa1\xfd\xb0\xe1\xa6W\x85py\x91Q\xe7\xc9\x05\xce\x17\xe6<0e\x12\xe8/\x16\xf0\xd2\xe5\x06[\vFb\xd6\xc0sTv*\xa6\x97\xb4\xcf\xc8d^\xb1\x7f\xeeH\xd2\xa8\xeb\xad\xdfw\xad\x1e\xcf\x13\xd2\xbbh\xb7\xb1\xa2\x14\xbe=Q\xf3\xd6\x85\x8as\x04\x93\x8c3\n\x9e\xcc\xbdP\x89\xee\xa8\x82\x03\x97\xe6^\x85#\x11T\x8dE\xba\nF\xc2\xe2\x06k\xf0~\xa3\x86h\xc2\xb8\xcfk\x1f', 0x4) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x6) 0s ago: executing program 2 (id=1078): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000004000)='/dev/audio\x00', 0x102, 0x0) ioctl$auto_SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000004040)) (async) ioctl$auto_SNDCTL_DSP_GETOSPACE(r0, 0x8010500c, &(0x7f0000004040)) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000) (async) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, r1, 0x8000) write$auto(0x3, 0x0, 0xffffedef) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x2b, 0x1, 0x1) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0xf3, 0x0, 0x20, 0x3}, 0x5b3}, 0x200, 0x100) (async) sendmmsg$auto(r3, &(0x7f0000000080)={{0x0, 0xc, 0x0, 0xf3, 0x0, 0x20, 0x3}, 0x5b3}, 0x200, 0x100) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x8000}, 0x44) recvmmsg$auto(r3, &(0x7f0000000140)={{0x0, 0x4, &(0x7f0000000080)={0x0, 0x803}, 0x5, 0x0, 0x3, 0x8}, 0x800}, 0x80000000, 0x8, 0x0) setsockopt$auto(r2, 0x29, 0x20, 0x0, 0x20) (async) setsockopt$auto(r2, 0x29, 0x20, 0x0, 0x20) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(r3, 0x0, 0x9a6, 0x6) (async) sendmmsg$auto(r3, 0x0, 0x9a6, 0x6) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000040), r4) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket(0x8, 0x1, 0x5) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0xffffffffffffffff, 0x0) sched_get_priority_min$auto(0x40) (async) sched_get_priority_min$auto(0x40) openat$auto_proc_projid_map_operations_base(0xffffffffffffff9c, 0x0, 0x101002, 0x0) kernel console output (not intermixed with test programs): ELF [ 111.599819][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 111.935318][ T6028] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 112.400950][ T6030] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 112.440412][ T6030] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 112.483887][ T6030] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 112.639885][ T6030] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 113.317614][ T6039] netlink: 28 bytes leftover after parsing attributes in process `syz.1.38'. [ 113.401474][ T6039] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.405154][ T6042] netlink: 8 bytes leftover after parsing attributes in process `syz.3.30'. [ 113.493835][ T6039] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 114.479717][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 114.485964][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.559704][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 114.722128][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 115.357131][ T6059] serio: Serial port ptm0 [ 116.460307][ T6072] FAULT_INJECTION: forcing a failure. [ 116.460307][ T6072] name failslab, interval 1, probability 0, space 0, times 0 [ 116.473247][ T6072] CPU: 0 UID: 0 PID: 6072 Comm: syz.2.35 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 116.473286][ T6072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 116.473302][ T6072] Call Trace: [ 116.473312][ T6072] [ 116.473322][ T6072] dump_stack_lvl+0x16c/0x1f0 [ 116.473363][ T6072] should_fail_ex+0x512/0x640 [ 116.473391][ T6072] ? fs_reclaim_acquire+0xae/0x150 [ 116.473427][ T6072] ? tomoyo_encode2+0x100/0x3e0 [ 116.473463][ T6072] should_failslab+0xc2/0x120 [ 116.473488][ T6072] __kmalloc_noprof+0xd2/0x510 [ 116.473534][ T6072] tomoyo_encode2+0x100/0x3e0 [ 116.473574][ T6072] tomoyo_encode+0x29/0x50 [ 116.473610][ T6072] tomoyo_realpath_from_path+0x18f/0x6e0 [ 116.473664][ T6072] tomoyo_check_open_permission+0x2ab/0x3c0 [ 116.473703][ T6072] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 116.473780][ T6072] ? do_raw_spin_lock+0x12c/0x2b0 [ 116.473822][ T6072] tomoyo_file_open+0x6b/0x90 [ 116.473867][ T6072] security_file_open+0x84/0x1e0 [ 116.473902][ T6072] do_dentry_open+0x596/0x1c10 [ 116.473950][ T6072] vfs_open+0x82/0x3f0 [ 116.473983][ T6072] path_openat+0x1e5e/0x2d40 [ 116.474036][ T6072] ? __pfx_path_openat+0x10/0x10 [ 116.474083][ T6072] do_filp_open+0x20b/0x470 [ 116.474122][ T6072] ? __pfx_do_filp_open+0x10/0x10 [ 116.474187][ T6072] ? alloc_fd+0x471/0x7d0 [ 116.474234][ T6072] do_sys_openat2+0x11b/0x1d0 [ 116.474261][ T6072] ? __pfx_do_sys_openat2+0x10/0x10 [ 116.474302][ T6072] __x64_sys_openat+0x174/0x210 [ 116.474331][ T6072] ? __pfx___x64_sys_openat+0x10/0x10 [ 116.474362][ T6072] ? rcu_is_watching+0x12/0xc0 [ 116.474405][ T6072] do_syscall_64+0xcd/0x260 [ 116.474443][ T6072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.474470][ T6072] RIP: 0033:0x7f3fd9b8d169 [ 116.474492][ T6072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 116.474520][ T6072] RSP: 002b:00007f3fda967038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 116.474548][ T6072] RAX: ffffffffffffffda RBX: 00007f3fd9da6160 RCX: 00007f3fd9b8d169 [ 116.474568][ T6072] RDX: 0000000000000000 RSI: 0000200000000100 RDI: ffffffffffffff9c [ 116.474587][ T6072] RBP: 00007f3fd9c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 116.474605][ T6072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 116.474623][ T6072] R13: 0000000000000000 R14: 00007f3fd9da6160 R15: 00007ffe66fa6a78 [ 116.474662][ T6072] [ 116.476609][ T6072] ERROR: Out of memory at tomoyo_realpath_from_path. [ 117.136456][ T6062] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 117.143193][ T6062] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 117.156705][ T6062] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 117.172657][ T6062] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 118.405671][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 118.770658][ T6101] FAULT_INJECTION: forcing a failure. [ 118.770658][ T6101] name fail_futex, interval 1, probability 0, space 0, times 1 [ 118.830087][ T6101] CPU: 0 UID: 0 PID: 6101 Comm: syz.3.41 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 118.830137][ T6101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 118.830161][ T6101] Call Trace: [ 118.830172][ T6101] [ 118.830184][ T6101] dump_stack_lvl+0x16c/0x1f0 [ 118.830234][ T6101] should_fail_ex+0x512/0x640 [ 118.830278][ T6101] get_futex_key+0x49e/0x1000 [ 118.830330][ T6101] ? __pfx_get_futex_key+0x10/0x10 [ 118.830395][ T6101] ? do_raw_spin_lock+0x12c/0x2b0 [ 118.830439][ T6101] futex_wake+0xe7/0x4e0 [ 118.830476][ T6101] ? __pfx_futex_wake+0x10/0x10 [ 118.830510][ T6101] ? kmem_cache_free+0x2d4/0x4d0 [ 118.830560][ T6101] ? fd_install+0x225/0x750 [ 118.830603][ T6101] ? putname+0x154/0x1a0 [ 118.830643][ T6101] do_futex+0x1e3/0x350 [ 118.830691][ T6101] ? __pfx_do_futex+0x10/0x10 [ 118.830740][ T6101] ? __pfx___might_resched+0x10/0x10 [ 118.830813][ T6101] __x64_sys_futex+0x1e0/0x4c0 [ 118.830865][ T6101] ? __x64_sys_openat+0x174/0x210 [ 118.830901][ T6101] ? __pfx___x64_sys_futex+0x10/0x10 [ 118.830952][ T6101] ? rcu_is_watching+0x12/0xc0 [ 118.831005][ T6101] do_syscall_64+0xcd/0x260 [ 118.831052][ T6101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.831085][ T6101] RIP: 0033:0x7f8cea38d169 [ 118.831111][ T6101] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 118.831142][ T6101] RSP: 002b:00007f8ceb16c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 118.831172][ T6101] RAX: ffffffffffffffda RBX: 00007f8cea5a5fa8 RCX: 00007f8cea38d169 [ 118.831194][ T6101] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8cea5a5fac [ 118.831215][ T6101] RBP: 00007f8cea5a5fa0 R08: 00007f8ceb16d000 R09: 0000000000000000 [ 118.831234][ T6101] R10: 0000000000000007 R11: 0000000000000246 R12: 00007f8cea5a5fac [ 118.831250][ T6101] R13: 0000000000000000 R14: 00007ffe73154710 R15: 00007ffe731547f8 [ 118.831288][ T6101] [ 119.215352][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 119.215418][ T5838] Bluetooth: hci2: command 0x0c1a tx timeout [ 119.221852][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 120.347297][ T6120] syz.2.44 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 121.100482][ T6134] tipc: Started in network mode [ 121.105435][ T6134] tipc: Node identity 55a00f5e, cluster identity 4711 [ 121.134640][ T6134] tipc: Node number set to 1436553054 [ 121.679899][ T6143] vivid-003: ================= START STATUS ================= [ 121.734142][ T6143] vivid-003: Radio HW Seek Mode: Bounded [ 121.783706][ T6143] vivid-003: Radio Programmable HW Seek: false [ 121.828320][ T6143] vivid-003: RDS Rx I/O Mode: Block I/O [ 121.864469][ T6143] vivid-003: Generate RBDS Instead of RDS: false [ 121.890132][ T6143] vivid-003: RDS Reception: true [ 121.917774][ T6143] vivid-003: RDS Program Type: 0 inactive [ 121.948510][ T6143] vivid-003: RDS PS Name: inactive [ 122.036774][ T6143] vivid-003: RDS Radio Text: inactive [ 122.062206][ T6143] vivid-003: RDS Traffic Announcement: false inactive [ 122.095207][ T6143] vivid-003: RDS Traffic Program: false inactive [ 122.149412][ T6143] vivid-003: RDS Music: false inactive [ 122.197030][ T6143] vivid-003: ================== END STATUS ================== [ 122.485859][ T6147] Invalid ELF header magic: != ELF [ 122.769869][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 123.154065][ T6158] mmap: syz.1.55 (6158) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 124.014276][ T6170] netlink: 544 bytes leftover after parsing attributes in process `syz.1.59'. [ 124.063581][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 124.370788][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 125.095890][ T6186] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 125.126353][ T6186] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 125.173391][ T6186] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 125.197002][ T6186] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 125.610360][ T6201] Invalid ELF header magic: != ELF [ 127.119693][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.211345][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 127.217500][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.223665][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.530267][ T6213] netlink: 544 bytes leftover after parsing attributes in process `syz.2.70'. [ 128.024954][ T6223] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78c00 [ 128.042242][ T6223] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 128.079628][ T6223] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 128.118002][ T6223] page_type: f5(slab) [ 128.149730][ T6223] raw: 00fff00000000040 ffff8881404088c0 dead000000000122 0000000000000000 [ 128.158399][ T6223] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 128.159612][ T0] NOHZ tick-stop error: local softirq work is pending, handler #142!!! [ 128.175754][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 128.238995][ T6223] head: 00fff00000000040 ffff8881404088c0 dead000000000122 0000000000000000 [ 128.269183][ T6223] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 128.300521][ T6223] head: 00fff00000000002 ffffea0001e30001 00000000ffffffff 00000000ffffffff [ 128.395969][ T6223] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 128.443172][ T6223] page dumped because: unmovable page [ 128.461795][ T6223] page_owner tracks the page as allocated [ 128.498411][ T6223] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5828, tgid 5828 (syz-executor), ts 89854665261, free_ts 36033793033 [ 128.509815][ T6227] could not allocate digest TFM handle binfmt_misc [ 128.632424][ T6223] post_alloc_hook+0x181/0x1b0 [ 128.676842][ T6223] get_page_from_freelist+0x1193/0x39b0 [ 128.728043][ T6223] __alloc_frozen_pages_noprof+0x263/0x2370 [ 128.787670][ T6223] alloc_pages_mpol+0x1fb/0x550 [ 128.829234][ T6223] new_slab+0x23c/0x330 [ 128.897846][ T6223] ___slab_alloc+0xd9c/0x1940 [ 128.945459][ T6223] __slab_alloc.constprop.0+0x56/0xb0 [ 128.982632][ T6223] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 129.018158][ T6223] alloc_inode+0xc3/0x240 [ 129.085852][ T6223] iget_locked+0x2e4/0x830 [ 129.122127][ T6223] kernfs_get_inode+0x48/0x460 [ 129.135606][ T6223] kernfs_iop_lookup+0x1a7/0x2d0 [ 129.179280][ T6223] __lookup_slow+0x24e/0x460 [ 129.198202][ T6223] walk_component+0x353/0x5b0 [ 129.215962][ T6223] path_lookupat+0x17e/0x780 [ 129.233058][ T6223] filename_lookup+0x224/0x5f0 [ 129.237954][ T6223] page last free pid 1 tgid 1 stack trace: [ 129.267473][ T6223] __free_frozen_pages+0x69d/0xff0 [ 129.273532][ T6223] free_contig_range+0x135/0x3f0 [ 129.278696][ T6223] destroy_args+0x66f/0x830 [ 129.310620][ T6223] debug_vm_pgtable+0x130e/0x2d50 [ 129.315792][ T6223] do_one_initcall+0x120/0x6e0 [ 129.372435][ T6223] kernel_init_freeable+0x5c2/0x900 [ 129.377779][ T6223] kernel_init+0x1c/0x2b0 [ 129.419780][ T6223] ret_from_fork+0x45/0x80 [ 129.449618][ T6223] ret_from_fork_asm+0x1a/0x30 [ 130.493259][ T5843] Bluetooth: hci0: unexpected event 0x17 length: 123 > 6 [ 130.923772][ T6275] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 131.038847][ T6275] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 132.842419][ T6296] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 135.009726][ T5843] Bluetooth: hci3: unexpected subevent 0x01 length: 4 < 18 [ 135.111434][ T30] audit: type=1800 audit(6038696923.403:2): pid=6335 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.96" name="dbroot" dev="configfs" ino=8762 res=0 errno=0 [ 137.037261][ T6364] FAULT_INJECTION: forcing a failure. [ 137.037261][ T6364] name fail_futex, interval 1, probability 0, space 0, times 0 [ 137.062439][ T6364] CPU: 1 UID: 0 PID: 6364 Comm: syz.0.104 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 137.062486][ T6364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 137.062506][ T6364] Call Trace: [ 137.062517][ T6364] [ 137.062529][ T6364] dump_stack_lvl+0x16c/0x1f0 [ 137.062580][ T6364] should_fail_ex+0x512/0x640 [ 137.062624][ T6364] get_futex_key+0x49e/0x1000 [ 137.062677][ T6364] ? __pfx_get_futex_key+0x10/0x10 [ 137.062740][ T6364] futex_wake+0xe7/0x4e0 [ 137.062770][ T6364] ? rcu_is_watching+0x12/0xc0 [ 137.062818][ T6364] ? __pfx_futex_wake+0x10/0x10 [ 137.062871][ T6364] do_futex+0x1e3/0x350 [ 137.062920][ T6364] ? __pfx_do_futex+0x10/0x10 [ 137.062966][ T6364] ? __might_fault+0xe3/0x190 [ 137.063032][ T6364] mm_release+0x24e/0x300 [ 137.063078][ T6364] do_exit+0x898/0x2c30 [ 137.063106][ T6364] ? __pfx_futex_wake_mark+0x10/0x10 [ 137.063147][ T6364] ? __pfx_do_exit+0x10/0x10 [ 137.063177][ T6364] ? do_raw_spin_lock+0x12c/0x2b0 [ 137.063215][ T6364] ? find_held_lock+0x2b/0x80 [ 137.063266][ T6364] do_group_exit+0xd3/0x2a0 [ 137.063300][ T6364] get_signal+0x2673/0x26d0 [ 137.063360][ T6364] ? __pfx_perf_event_namespaces+0x10/0x10 [ 137.063412][ T6364] ? __pfx_get_signal+0x10/0x10 [ 137.063458][ T6364] ? do_futex+0x122/0x350 [ 137.063507][ T6364] ? __pfx_do_futex+0x10/0x10 [ 137.063561][ T6364] arch_do_signal_or_restart+0x8f/0x7d0 [ 137.063616][ T6364] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 137.063688][ T6364] ? rcu_is_watching+0x12/0xc0 [ 137.063740][ T6364] syscall_exit_to_user_mode+0x150/0x2a0 [ 137.063790][ T6364] do_syscall_64+0xda/0x260 [ 137.063840][ T6364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 137.063874][ T6364] RIP: 0033:0x7f402d98d169 [ 137.063901][ T6364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 137.063933][ T6364] RSP: 002b:00007f402e7640e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 137.063965][ T6364] RAX: fffffffffffffe00 RBX: 00007f402dba6088 RCX: 00007f402d98d169 [ 137.063986][ T6364] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f402dba6088 [ 137.064008][ T6364] RBP: 00007f402dba6080 R08: 0000000000000000 R09: 0000000000000000 [ 137.064028][ T6364] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f402dba608c [ 137.064048][ T6364] R13: 0000000000000000 R14: 00007ffde6686170 R15: 00007ffde6686258 [ 137.064092][ T6364] [ 138.089173][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.102615][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.705402][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'. [ 141.251372][ T6413] FAULT_INJECTION: forcing a failure. [ 141.251372][ T6413] name fail_futex, interval 1, probability 0, space 0, times 0 [ 141.287560][ T6413] CPU: 0 UID: 0 PID: 6413 Comm: syz.2.117 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 141.287601][ T6413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.287618][ T6413] Call Trace: [ 141.287628][ T6413] [ 141.287640][ T6413] dump_stack_lvl+0x16c/0x1f0 [ 141.287686][ T6413] should_fail_ex+0x512/0x640 [ 141.287726][ T6413] get_futex_key+0x49e/0x1000 [ 141.287773][ T6413] ? __pfx_get_futex_key+0x10/0x10 [ 141.287827][ T6413] futex_wake+0xe7/0x4e0 [ 141.287853][ T6413] ? rcu_is_watching+0x12/0xc0 [ 141.287893][ T6413] ? __pfx_futex_wake+0x10/0x10 [ 141.287955][ T6413] do_futex+0x1e3/0x350 [ 141.287999][ T6413] ? __pfx_do_futex+0x10/0x10 [ 141.288040][ T6413] ? __might_fault+0xe3/0x190 [ 141.288099][ T6413] mm_release+0x24e/0x300 [ 141.288141][ T6413] do_exit+0x898/0x2c30 [ 141.288165][ T6413] ? __pfx_futex_wake_mark+0x10/0x10 [ 141.288203][ T6413] ? __pfx_do_exit+0x10/0x10 [ 141.288228][ T6413] ? do_raw_spin_lock+0x12c/0x2b0 [ 141.288259][ T6413] ? find_held_lock+0x2b/0x80 [ 141.288303][ T6413] do_group_exit+0xd3/0x2a0 [ 141.288331][ T6413] get_signal+0x2673/0x26d0 [ 141.288375][ T6413] ? __pfx_perf_event_namespaces+0x10/0x10 [ 141.288422][ T6413] ? __pfx_get_signal+0x10/0x10 [ 141.288464][ T6413] ? do_futex+0x122/0x350 [ 141.288509][ T6413] ? __pfx_do_futex+0x10/0x10 [ 141.288558][ T6413] arch_do_signal_or_restart+0x8f/0x7d0 [ 141.288608][ T6413] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 141.288669][ T6413] ? rcu_is_watching+0x12/0xc0 [ 141.288716][ T6413] syscall_exit_to_user_mode+0x150/0x2a0 [ 141.288762][ T6413] do_syscall_64+0xda/0x260 [ 141.288807][ T6413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.288839][ T6413] RIP: 0033:0x7f3fd9b8d169 [ 141.288864][ T6413] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 141.288893][ T6413] RSP: 002b:00007f3fda9880e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 141.288930][ T6413] RAX: fffffffffffffe00 RBX: 00007f3fd9da6088 RCX: 00007f3fd9b8d169 [ 141.288950][ T6413] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f3fd9da6088 [ 141.288968][ T6413] RBP: 00007f3fd9da6080 R08: 0000000000000000 R09: 0000000000000000 [ 141.288986][ T6413] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f3fd9da608c [ 141.289005][ T6413] R13: 0000000000000000 R14: 00007ffe66fa6990 R15: 00007ffe66fa6a78 [ 141.289044][ T6413] [ 142.034759][ T6417] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78c00 [ 142.161884][ T6417] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 142.233690][ T6417] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 142.302960][ T6417] page_type: f5(slab) [ 142.318661][ T6419] could not allocate digest TFM handle binfmt_misc [ 142.333302][ T6417] raw: 00fff00000000040 ffff8881404088c0 dead000000000122 0000000000000000 [ 142.397115][ T6417] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 142.432428][ T6417] head: 00fff00000000040 ffff8881404088c0 dead000000000122 0000000000000000 [ 142.521143][ T6417] head: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 142.560283][ T6417] head: 00fff00000000002 ffffea0001e30001 00000000ffffffff 00000000ffffffff [ 142.611199][ T6417] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 142.635761][ T6417] page dumped because: unmovable page [ 142.651314][ T6417] page_owner tracks the page as allocated [ 142.658570][ T6417] page last allocated via order 2, migratetype Reclaimable, gfp_mask 0xd20d0(__GFP_RECLAIMABLE|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5828, tgid 5828 (syz-executor), ts 89854665261, free_ts 36033793033 [ 142.703135][ T6417] post_alloc_hook+0x181/0x1b0 [ 142.708142][ T6417] get_page_from_freelist+0x1193/0x39b0 [ 142.716007][ T6417] __alloc_frozen_pages_noprof+0x263/0x2370 [ 142.722678][ T6417] alloc_pages_mpol+0x1fb/0x550 [ 142.729420][ T6417] new_slab+0x23c/0x330 [ 142.734370][ T6417] ___slab_alloc+0xd9c/0x1940 [ 142.739278][ T6417] __slab_alloc.constprop.0+0x56/0xb0 [ 142.745649][ T6417] kmem_cache_alloc_lru_noprof+0xf4/0x3b0 [ 142.752020][ T6417] alloc_inode+0xc3/0x240 [ 142.757538][ T6417] iget_locked+0x2e4/0x830 [ 142.794210][ T6417] kernfs_get_inode+0x48/0x460 [ 142.851730][ T6417] kernfs_iop_lookup+0x1a7/0x2d0 [ 142.858040][ T6417] __lookup_slow+0x24e/0x460 [ 142.947586][ T6417] walk_component+0x353/0x5b0 [ 142.996223][ T6417] path_lookupat+0x17e/0x780 [ 143.016043][ T6417] filename_lookup+0x224/0x5f0 [ 143.030487][ T6417] page last free pid 1 tgid 1 stack trace: [ 143.062281][ T6417] __free_frozen_pages+0x69d/0xff0 [ 143.068626][ T6417] free_contig_range+0x135/0x3f0 [ 143.099582][ T6417] destroy_args+0x66f/0x830 [ 143.130605][ T6417] debug_vm_pgtable+0x130e/0x2d50 [ 143.159570][ T6417] do_one_initcall+0x120/0x6e0 [ 143.182266][ T6417] kernel_init_freeable+0x5c2/0x900 [ 143.199857][ T6417] kernel_init+0x1c/0x2b0 [ 143.225278][ T6417] ret_from_fork+0x45/0x80 [ 143.243963][ T6417] ret_from_fork_asm+0x1a/0x30 [ 145.204522][ T6477] netlink: 4 bytes leftover after parsing attributes in process `syz.3.129'. [ 146.732551][ T6497] FAULT_INJECTION: forcing a failure. [ 146.732551][ T6497] name failslab, interval 1, probability 0, space 0, times 0 [ 146.820888][ T6497] CPU: 1 UID: 0 PID: 6497 Comm: syz.1.134 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 146.820936][ T6497] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.820956][ T6497] Call Trace: [ 146.820967][ T6497] [ 146.820980][ T6497] dump_stack_lvl+0x16c/0x1f0 [ 146.821044][ T6497] should_fail_ex+0x512/0x640 [ 146.821083][ T6497] ? __kmalloc_noprof+0xbf/0x510 [ 146.821137][ T6497] ? lsm_blob_alloc+0x68/0x90 [ 146.821187][ T6497] should_failslab+0xc2/0x120 [ 146.821220][ T6497] __kmalloc_noprof+0xd2/0x510 [ 146.821291][ T6497] lsm_blob_alloc+0x68/0x90 [ 146.821345][ T6497] security_sk_alloc+0x30/0x270 [ 146.821384][ T6497] sk_prot_alloc+0x1c7/0x2a0 [ 146.821440][ T6497] sk_alloc+0x36/0xc20 [ 146.821481][ T6497] __netlink_create+0x5e/0x2c0 [ 146.821517][ T6497] ? __wake_up+0x3f/0x60 [ 146.821567][ T6497] netlink_create+0x39e/0x620 [ 146.821606][ T6497] ? __pfx_genl_bind+0x10/0x10 [ 146.821652][ T6497] ? __pfx_genl_unbind+0x10/0x10 [ 146.821697][ T6497] ? __pfx_genl_release+0x10/0x10 [ 146.821752][ T6497] __sock_create+0x335/0x8d0 [ 146.821813][ T6497] __sys_socket+0x14d/0x260 [ 146.821846][ T6497] ? __pfx___sys_socket+0x10/0x10 [ 146.821878][ T6497] ? rcu_is_watching+0x12/0xc0 [ 146.821928][ T6497] __x64_sys_socket+0x72/0xb0 [ 146.821958][ T6497] ? lockdep_hardirqs_on+0x7c/0x110 [ 146.822001][ T6497] do_syscall_64+0xcd/0x260 [ 146.822050][ T6497] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.822084][ T6497] RIP: 0033:0x7fe7cb78d169 [ 146.822111][ T6497] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.822143][ T6497] RSP: 002b:00007fe7cc603038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 146.822175][ T6497] RAX: ffffffffffffffda RBX: 00007fe7cb9a6080 RCX: 00007fe7cb78d169 [ 146.822198][ T6497] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 146.822219][ T6497] RBP: 00007fe7cb80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 146.822248][ T6497] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.822268][ T6497] R13: 0000000000000000 R14: 00007fe7cb9a6080 R15: 00007ffeb67d66b8 [ 146.822310][ T6497] [ 147.069026][ C1] vkms_vblank_simulate: vblank timer overrun [ 147.189930][ T6494] openvswitch: netlink: Key type 11779 is out of range max 32 [ 148.409654][ T30] audit: type=1800 audit(6038696936.622:3): pid=6524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.140" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 151.452089][ T6575] Invalid ELF header magic: != ELF [ 155.829017][ T6615] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 158.331406][ T6648] capability: warning: `syz.1.166' uses 32-bit capabilities (legacy support in use) [ 161.938228][ T6674] Invalid ELF header magic: != ELF [ 163.198636][ T6692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.172'. [ 164.301488][ T6699] netlink: 342 bytes leftover after parsing attributes in process `syz.3.174'. [ 164.326040][ T6699] netlink: 342 bytes leftover after parsing attributes in process `syz.3.174'. [ 173.410535][ T6791] netlink: 8 bytes leftover after parsing attributes in process `syz.3.194'. [ 175.514547][ T6818] FAULT_INJECTION: forcing a failure. [ 175.514547][ T6818] name fail_futex, interval 1, probability 0, space 0, times 0 [ 175.549380][ T6818] CPU: 0 UID: 0 PID: 6818 Comm: syz.0.201 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 175.549433][ T6818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.549453][ T6818] Call Trace: [ 175.549465][ T6818] [ 175.549478][ T6818] dump_stack_lvl+0x16c/0x1f0 [ 175.549530][ T6818] should_fail_ex+0x512/0x640 [ 175.549576][ T6818] get_futex_key+0x49e/0x1000 [ 175.549625][ T6818] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 175.549667][ T6818] ? __pfx_get_futex_key+0x10/0x10 [ 175.549715][ T6818] ? __lock_acquire+0xaa4/0x1ba0 [ 175.549752][ T6818] futex_wake+0xe7/0x4e0 [ 175.549785][ T6818] ? __pfx_futex_wake+0x10/0x10 [ 175.549816][ T6818] ? __pfx_perf_event_namespaces+0x10/0x10 [ 175.549861][ T6818] do_futex+0x1e3/0x350 [ 175.549913][ T6818] ? __pfx_do_futex+0x10/0x10 [ 175.549960][ T6818] ? ksys_unshare+0x687/0xa40 [ 175.550014][ T6818] __x64_sys_futex+0x1e0/0x4c0 [ 175.550062][ T6818] ? __pfx___x64_sys_futex+0x10/0x10 [ 175.550105][ T6818] ? rcu_is_watching+0x12/0xc0 [ 175.550150][ T6818] do_syscall_64+0xcd/0x260 [ 175.550193][ T6818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.550222][ T6818] RIP: 0033:0x7f402d98d169 [ 175.550245][ T6818] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.550274][ T6818] RSP: 002b:00007f402e7640e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 175.550302][ T6818] RAX: ffffffffffffffda RBX: 00007f402dba6088 RCX: 00007f402d98d169 [ 175.550321][ T6818] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f402dba608c [ 175.550339][ T6818] RBP: 00007f402dba6080 R08: 00007f402e786000 R09: 0000000000000000 [ 175.550356][ T6818] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f402dba608c [ 175.550373][ T6818] R13: 0000000000000000 R14: 00007ffde6686170 R15: 00007ffde6686258 [ 175.550409][ T6818] [ 179.432252][ T6845] FAULT_INJECTION: forcing a failure. [ 179.432252][ T6845] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 179.453671][ T6845] CPU: 0 UID: 0 PID: 6845 Comm: syz.3.208 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 179.453717][ T6845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 179.453738][ T6845] Call Trace: [ 179.453749][ T6845] [ 179.453768][ T6845] dump_stack_lvl+0x16c/0x1f0 [ 179.453822][ T6845] should_fail_ex+0x512/0x640 [ 179.453868][ T6845] should_fail_alloc_page+0xe7/0x130 [ 179.453905][ T6845] prepare_alloc_pages+0x3c2/0x610 [ 179.453949][ T6845] ? rcu_is_watching+0x12/0xc0 [ 179.453998][ T6845] __alloc_frozen_pages_noprof+0x18d/0x2370 [ 179.454067][ T6845] ? __lock_acquire+0x5ca/0x1ba0 [ 179.454105][ T6845] ? xas_create+0x1d7/0x1460 [ 179.454157][ T6845] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 179.454239][ T6845] ? __lock_acquire+0x5ca/0x1ba0 [ 179.454271][ T6845] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 179.454311][ T6845] ? policy_nodemask+0xea/0x4e0 [ 179.454348][ T6845] alloc_pages_mpol+0x1fb/0x550 [ 179.454385][ T6845] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 179.454423][ T6845] ? filemap_get_entry+0x1a7/0x3b0 [ 179.454477][ T6845] folio_alloc_noprof+0x20/0x2d0 [ 179.454517][ T6845] filemap_alloc_folio_noprof+0x3a1/0x470 [ 179.454574][ T6845] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 179.454641][ T6845] __filemap_get_folio+0x5e9/0xc10 [ 179.454691][ T6845] ioctx_alloc+0x761/0x2060 [ 179.454759][ T6845] ? __pfx_ioctx_alloc+0x10/0x10 [ 179.454806][ T6845] ? __might_fault+0x13b/0x190 [ 179.454875][ T6845] __x64_sys_io_setup+0xc9/0x210 [ 179.454930][ T6845] do_syscall_64+0xcd/0x260 [ 179.454981][ T6845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 179.455017][ T6845] RIP: 0033:0x7f8cea38d169 [ 179.455046][ T6845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 179.455079][ T6845] RSP: 002b:00007f8ceb16c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 179.455113][ T6845] RAX: ffffffffffffffda RBX: 00007f8cea5a5fa0 RCX: 00007f8cea38d169 [ 179.455136][ T6845] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000ff3e [ 179.455158][ T6845] RBP: 00007f8cea40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 179.455180][ T6845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 179.455201][ T6845] R13: 0000000000000000 R14: 00007f8cea5a5fa0 R15: 00007ffe731547f8 [ 179.455247][ T6845] [ 180.686710][ T6862] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'. [ 182.180883][ T6881] FAULT_INJECTION: forcing a failure. [ 182.180883][ T6881] name failslab, interval 1, probability 0, space 0, times 0 [ 182.311680][ T6881] CPU: 1 UID: 0 PID: 6881 Comm: syz.1.215 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 182.311734][ T6881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.311756][ T6881] Call Trace: [ 182.311767][ T6881] [ 182.311781][ T6881] dump_stack_lvl+0x16c/0x1f0 [ 182.311837][ T6881] should_fail_ex+0x512/0x640 [ 182.311879][ T6881] ? __kvmalloc_node_noprof+0x122/0x600 [ 182.311940][ T6881] should_failslab+0xc2/0x120 [ 182.311996][ T6881] __kvmalloc_node_noprof+0x135/0x600 [ 182.312052][ T6881] ? bucket_table_alloc.isra.0+0x83/0x460 [ 182.312101][ T6881] ? bucket_table_alloc.isra.0+0x83/0x460 [ 182.312137][ T6881] bucket_table_alloc.isra.0+0x83/0x460 [ 182.312190][ T6881] rhashtable_init_noprof+0x41a/0x7e0 [ 182.312236][ T6881] ipc_init_ids+0x92/0x280 [ 182.312281][ T6881] copy_ipcs+0x4e5/0x610 [ 182.312318][ T6881] ? copy_utsname+0xab/0x470 [ 182.312356][ T6881] create_new_namespaces+0x20a/0xad0 [ 182.312409][ T6881] ? security_capable+0x7e/0x260 [ 182.312475][ T6881] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 182.312535][ T6881] ksys_unshare+0x45b/0xa40 [ 182.312595][ T6881] ? __pfx_ksys_unshare+0x10/0x10 [ 182.312649][ T6881] ? xfd_validate_state+0x5d/0x180 [ 182.312693][ T6881] ? rcu_is_watching+0x12/0xc0 [ 182.312750][ T6881] __x64_sys_unshare+0x31/0x40 [ 182.312806][ T6881] do_syscall_64+0xcd/0x260 [ 182.312858][ T6881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.312895][ T6881] RIP: 0033:0x7fe7cb78d169 [ 182.312924][ T6881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.312959][ T6881] RSP: 002b:00007fe7cc603038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 182.312992][ T6881] RAX: ffffffffffffffda RBX: 00007fe7cb9a6080 RCX: 00007fe7cb78d169 [ 182.313015][ T6881] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 182.313037][ T6881] RBP: 00007fe7cb80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 182.313060][ T6881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 182.313082][ T6881] R13: 0000000000000000 R14: 00007fe7cb9a6080 R15: 00007ffeb67d66b8 [ 182.313130][ T6881] [ 182.911068][ T6890] vivid-003: ================= START STATUS ================= [ 182.949638][ T6890] vivid-003: Radio HW Seek Mode: Bounded [ 182.955399][ T6890] vivid-003: Radio Programmable HW Seek: false [ 182.979551][ T6890] vivid-003: RDS Rx I/O Mode: Block I/O [ 182.986279][ T6890] vivid-003: Generate RBDS Instead of RDS: false [ 183.018476][ T6890] vivid-003: RDS Reception: true [ 183.045147][ T6890] vivid-003: RDS Program Type: 0 inactive [ 183.063895][ T6891] FAULT_INJECTION: forcing a failure. [ 183.063895][ T6891] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 183.113861][ T6890] vivid-003: RDS PS Name: inactive [ 183.130051][ T6890] vivid-003: RDS Radio Text: inactive [ 183.142322][ T6890] vivid-003: RDS Traffic Announcement: false inactive [ 183.210790][ T6891] CPU: 1 UID: 0 PID: 6891 Comm: syz.2.221 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 183.210840][ T6891] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.210861][ T6891] Call Trace: [ 183.210873][ T6891] [ 183.210887][ T6891] dump_stack_lvl+0x16c/0x1f0 [ 183.210942][ T6891] should_fail_ex+0x512/0x640 [ 183.210991][ T6891] should_fail_alloc_page+0xe7/0x130 [ 183.211031][ T6891] prepare_alloc_pages+0x3c2/0x610 [ 183.211077][ T6891] ? stack_depot_save_flags+0x28/0xa50 [ 183.211125][ T6891] __alloc_frozen_pages_noprof+0x18d/0x2370 [ 183.211182][ T6891] ? kasan_save_stack+0x42/0x60 [ 183.211231][ T6891] ? kasan_save_stack+0x33/0x60 [ 183.211287][ T6891] ? kasan_save_track+0x14/0x30 [ 183.211335][ T6891] ? kmem_cache_alloc_noprof+0x1cb/0x3b0 [ 183.211395][ T6891] ? __lock_acquire+0x5ca/0x1ba0 [ 183.211435][ T6891] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 183.211491][ T6891] ? __lock_acquire+0x5ca/0x1ba0 [ 183.211541][ T6891] ? __lock_acquire+0x5ca/0x1ba0 [ 183.211577][ T6891] ? __lock_acquire+0xaa4/0x1ba0 [ 183.211608][ T6891] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 183.211649][ T6891] ? policy_nodemask+0xea/0x4e0 [ 183.211686][ T6891] alloc_pages_mpol+0x1fb/0x550 [ 183.211722][ T6891] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 183.211751][ T6891] ? page_table_check_set+0x96f/0xb50 [ 183.211820][ T6891] alloc_pages_noprof+0x131/0x390 [ 183.211877][ T6891] pte_alloc_one+0x19/0x380 [ 183.211926][ T6891] __pte_alloc+0x6d/0x3c0 [ 183.211964][ T6891] ? __pfx___pte_alloc+0x10/0x10 [ 183.212021][ T6891] ? __pfx___might_resched+0x10/0x10 [ 183.212068][ T6891] ? copy_page_range+0x1943/0x5ec0 [ 183.212118][ T6891] copy_page_range+0x39a7/0x5ec0 [ 183.212215][ T6891] ? __pfx_copy_page_range+0x10/0x10 [ 183.212290][ T6891] ? __pfx___might_resched+0x10/0x10 [ 183.212337][ T6891] ? __pfx_mas_store+0x10/0x10 [ 183.212394][ T6891] ? __vma_enter_locked+0x163/0x3f0 [ 183.212451][ T6891] ? copy_process+0x85dd/0x91a0 [ 183.212519][ T6891] ? down_write+0x14d/0x200 [ 183.212588][ T6891] ? up_write+0x1b2/0x520 [ 183.212632][ T6891] copy_process+0x862b/0x91a0 [ 183.212720][ T6891] ? __pfx_copy_process+0x10/0x10 [ 183.212770][ T6891] ? __pfx___futex_wait+0x10/0x10 [ 183.212848][ T6891] kernel_clone+0xfc/0x960 [ 183.212902][ T6891] ? __pfx_kernel_clone+0x10/0x10 [ 183.212983][ T6891] __do_sys_clone+0xce/0x120 [ 183.213078][ T6891] ? __pfx___do_sys_clone+0x10/0x10 [ 183.213158][ T6891] ? rcu_is_watching+0x12/0xc0 [ 183.213230][ T6891] do_syscall_64+0xcd/0x260 [ 183.213292][ T6891] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.213327][ T6891] RIP: 0033:0x7f3fd9b8d169 [ 183.213357][ T6891] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.213391][ T6891] RSP: 002b:00007f3fda987fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 183.213421][ T6891] RAX: ffffffffffffffda RBX: 00007f3fd9da6080 RCX: 00007f3fd9b8d169 [ 183.213442][ T6891] RDX: 0000000000000000 RSI: 0000000000000020 RDI: 0000000000800011 [ 183.213461][ T6891] RBP: 00007f3fd9c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 183.213480][ T6891] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 183.213498][ T6891] R13: 0000000000000000 R14: 00007f3fd9da6080 R15: 00007ffe66fa6a78 [ 183.213543][ T6891] [ 183.629555][ T6890] vivid-003: RDS Traffic Program: false inactive [ 183.638327][ T6890] vivid-003: RDS Music: false inactive [ 183.715552][ T6890] vivid-003: ================== END STATUS ================== [ 187.189172][ T6947] netlink: 338 bytes leftover after parsing attributes in process `syz.3.233'. [ 187.260228][ T6951] FAULT_INJECTION: forcing a failure. [ 187.260228][ T6951] name failslab, interval 1, probability 0, space 0, times 0 [ 187.378721][ T6951] CPU: 1 UID: 0 PID: 6951 Comm: syz.0.235 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 187.378774][ T6951] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 187.378795][ T6951] Call Trace: [ 187.378808][ T6951] [ 187.378833][ T6951] dump_stack_lvl+0x16c/0x1f0 [ 187.378886][ T6951] should_fail_ex+0x512/0x640 [ 187.378926][ T6951] ? __kmalloc_noprof+0xbf/0x510 [ 187.378984][ T6951] ? __register_sysctl_table+0xb3/0x1900 [ 187.379025][ T6951] should_failslab+0xc2/0x120 [ 187.379060][ T6951] __kmalloc_noprof+0xd2/0x510 [ 187.379125][ T6951] __register_sysctl_table+0xb3/0x1900 [ 187.379176][ T6951] ? __pfx___register_sysctl_table+0x10/0x10 [ 187.379216][ T6951] ? setup_ipc_sysctls+0x5e/0x300 [ 187.379271][ T6951] ? __asan_memcpy+0x3c/0x60 [ 187.379331][ T6951] setup_ipc_sysctls+0x1aa/0x300 [ 187.379390][ T6951] copy_ipcs+0x49b/0x610 [ 187.379426][ T6951] ? copy_utsname+0xab/0x470 [ 187.379461][ T6951] create_new_namespaces+0x20a/0xad0 [ 187.379515][ T6951] ? security_capable+0x7e/0x260 [ 187.379672][ T6951] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 187.379802][ T6951] ksys_unshare+0x45b/0xa40 [ 187.379861][ T6951] ? __pfx_ksys_unshare+0x10/0x10 [ 187.379910][ T6951] ? xfd_validate_state+0x5d/0x180 [ 187.379953][ T6951] ? rcu_is_watching+0x12/0xc0 [ 187.380008][ T6951] __x64_sys_unshare+0x31/0x40 [ 187.380060][ T6951] do_syscall_64+0xcd/0x260 [ 187.380114][ T6951] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 187.380149][ T6951] RIP: 0033:0x7f402d98d169 [ 187.380181][ T6951] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 187.380214][ T6951] RSP: 002b:00007f402e764038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 187.380247][ T6951] RAX: ffffffffffffffda RBX: 00007f402dba6080 RCX: 00007f402d98d169 [ 187.380270][ T6951] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 187.380292][ T6951] RBP: 00007f402da0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 187.380314][ T6951] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 187.380336][ T6951] R13: 0000000000000000 R14: 00007f402dba6080 R15: 00007ffde6686258 [ 187.380380][ T6951] [ 188.586393][ T6964] FAULT_INJECTION: forcing a failure. [ 188.586393][ T6964] name failslab, interval 1, probability 0, space 0, times 0 [ 188.670488][ T6964] CPU: 0 UID: 0 PID: 6964 Comm: syz.2.239 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 188.670541][ T6964] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 188.670563][ T6964] Call Trace: [ 188.670575][ T6964] [ 188.670589][ T6964] dump_stack_lvl+0x16c/0x1f0 [ 188.670725][ T6964] should_fail_ex+0x512/0x640 [ 188.670769][ T6964] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 188.670825][ T6964] should_failslab+0xc2/0x120 [ 188.670868][ T6964] __kmalloc_cache_noprof+0x6a/0x3e0 [ 188.670916][ T6964] ? vhost_net_open+0x28/0x8a0 [ 188.670962][ T6964] ? vhost_net_open+0x6e/0x8a0 [ 188.671014][ T6964] ? __pfx_vhost_net_open+0x10/0x10 [ 188.671059][ T6964] vhost_net_open+0x6e/0x8a0 [ 188.671104][ T6964] ? __pfx_vhost_net_open+0x10/0x10 [ 188.671152][ T6964] misc_open+0x35a/0x420 [ 188.671197][ T6964] ? __pfx_misc_open+0x10/0x10 [ 188.671254][ T6964] chrdev_open+0x231/0x6a0 [ 188.671309][ T6964] ? __pfx_apparmor_file_open+0x10/0x10 [ 188.671354][ T6964] ? __pfx_chrdev_open+0x10/0x10 [ 188.671422][ T6964] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 188.671483][ T6964] do_dentry_open+0x741/0x1c10 [ 188.671536][ T6964] ? __pfx_chrdev_open+0x10/0x10 [ 188.671600][ T6964] vfs_open+0x82/0x3f0 [ 188.671642][ T6964] path_openat+0x1e5e/0x2d40 [ 188.671711][ T6964] ? __pfx_path_openat+0x10/0x10 [ 188.671778][ T6964] do_filp_open+0x20b/0x470 [ 188.671833][ T6964] ? __pfx_do_filp_open+0x10/0x10 [ 188.671917][ T6964] ? alloc_fd+0x471/0x7d0 [ 188.671981][ T6964] do_sys_openat2+0x11b/0x1d0 [ 188.672020][ T6964] ? __pfx_do_sys_openat2+0x10/0x10 [ 188.672061][ T6964] ? do_fcntl+0x1eb/0x1590 [ 188.672122][ T6964] __x64_sys_openat+0x174/0x210 [ 188.672163][ T6964] ? __pfx___x64_sys_openat+0x10/0x10 [ 188.672207][ T6964] ? rcu_is_watching+0x12/0xc0 [ 188.672267][ T6964] do_syscall_64+0xcd/0x260 [ 188.672320][ T6964] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.672357][ T6964] RIP: 0033:0x7f3fd9b8d169 [ 188.672550][ T6964] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.672593][ T6964] RSP: 002b:00007f3fda9a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 188.672629][ T6964] RAX: ffffffffffffffda RBX: 00007f3fd9da5fa0 RCX: 00007f3fd9b8d169 [ 188.672651][ T6964] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 188.672672][ T6964] RBP: 00007f3fd9c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 188.672694][ T6964] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 188.672715][ T6964] R13: 0000000000000000 R14: 00007f3fd9da5fa0 R15: 00007ffe66fa6a78 [ 188.672762][ T6964] [ 190.062601][ T6980] netlink: zone id is out of range [ 190.151983][ T6980] netlink: zone id is out of range [ 190.165598][ T6980] netlink: zone id is out of range [ 190.173382][ T6980] netlink: zone id is out of range [ 190.179146][ T6980] netlink: zone id is out of range [ 190.196878][ T6980] netlink: zone id is out of range [ 190.203122][ T6980] netlink: zone id is out of range [ 190.209075][ T6980] netlink: zone id is out of range [ 190.217182][ T6980] netlink: zone id is out of range [ 190.224612][ T6980] netlink: zone id is out of range [ 192.750123][ T7008] netlink: 'syz.1.250': attribute type 1 has an invalid length. [ 194.439087][ T7021] process 'syz.2.254' launched './file0' with NULL argv: empty string added [ 199.525466][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.548876][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 203.056605][ T7141] netlink: 'syz.1.282': attribute type 4 has an invalid length. [ 203.076866][ T7141] netlink: 314 bytes leftover after parsing attributes in process `syz.1.282'. [ 203.118602][ T7141] IPv6: NLM_F_CREATE should be specified when creating new route [ 203.173947][ T7141] IPv6: Can't replace route, no match found [ 203.203659][ T7151] netlink: 'syz.1.282': attribute type 4 has an invalid length. [ 203.246389][ T7151] netlink: 314 bytes leftover after parsing attributes in process `syz.1.282'. [ 203.288106][ T7151] IPv6: Can't replace route, no match found [ 203.333912][ T7143] mkiss: ax0: crc mode is auto. [ 206.922865][ T30] audit: type=1806 audit(6038699041.226:4): xattr=03 res=-22 [ 208.113244][ T7221] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 208.131360][ T7221] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 208.139609][ T7221] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 208.152500][ T7221] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 208.445804][ T7246] netlink: 'syz.1.304': attribute type 4 has an invalid length. [ 209.372840][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout syzkaller syzkaller login: [ 210.163145][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 210.165427][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 210.177062][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 213.312836][ T7314] netlink: 4 bytes leftover after parsing attributes in process `syz.1.318'. [ 214.338166][ T7332] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR [ 214.339970][ T7320] workqueue: Failed to create a rescuer kthread for wq "nfc6_nci_cmd_wq": -EINTR [ 217.120175][ T7396] warning: `syz.3.331' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 221.079758][ T7427] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 221.113258][ T7427] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 221.186513][ T7427] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 221.386447][ T7427] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 222.089356][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 223.131283][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 223.210437][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 223.337158][ T7467] net_ratelimit: 77 callbacks suppressed [ 223.337188][ T7467] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 223.450012][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 223.551360][ T7472] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 223.583343][ T7472] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 223.617232][ T7477] Device name cannot be null; rc = [-22] [ 223.625054][ T7472] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 223.631750][ T7472] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 225.610511][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 225.617883][ T5845] Bluetooth: hci0: command 0x0c1a tx timeout [ 225.691047][ T5845] Bluetooth: hci3: command 0x0c1a tx timeout [ 225.691087][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 226.032395][ T7524] netlink: 28 bytes leftover after parsing attributes in process `syz.1.358'. [ 226.454951][ T7524] bond0: (slave bond_slave_0): Releasing backup interface [ 227.428786][ T7547] netlink: 28 bytes leftover after parsing attributes in process `syz.3.363'. [ 227.774284][ T7561] netlink: 544 bytes leftover after parsing attributes in process `syz.1.365'. [ 233.875406][ T5843] Bluetooth: hci1: unexpected subevent 0x1b length: 4 < 18 [ 234.737399][ T5843] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 234.737450][ T5843] Bluetooth: hci1: unexpected subevent 0x0a length: 725 > 30 [ 236.981782][ T7703] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 237.413452][ T7711] ptm ptm11: ldisc open failed (-12), clearing slot 11 [ 238.078171][ T7718] netlink: 186 bytes leftover after parsing attributes in process `syz.0.399'. [ 238.190518][ T30] audit: type=1804 audit(4294968345.367:5): pid=7727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.398" name="/newroot/sys/kernel/tracing/error_log" dev="tracefs" ino=1296 res=1 errno=0 [ 238.800590][ T7738] Debayer A: ================= START STATUS ================= [ 238.808345][ T7738] Debayer A: Debayer Mean Window Size: 3 [ 238.861354][ T7738] Debayer A: ================== END STATUS ================== [ 241.849403][ T7795] FAULT_INJECTION: forcing a failure. [ 241.849403][ T7795] name failslab, interval 1, probability 0, space 0, times 0 [ 241.941540][ T7795] CPU: 0 UID: 0 PID: 7795 Comm: syz.3.416 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 241.941584][ T7795] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 241.941605][ T7795] Call Trace: [ 241.941612][ T7795] [ 241.941621][ T7795] dump_stack_lvl+0x16c/0x1f0 [ 241.941657][ T7795] should_fail_ex+0x512/0x640 [ 241.941683][ T7795] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 241.941721][ T7795] should_failslab+0xc2/0x120 [ 241.941743][ T7795] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 241.941787][ T7795] ? __pfx_acct_collect+0x10/0x10 [ 241.941810][ T7795] ? taskstats_exit+0x654/0xbe0 [ 241.941838][ T7795] taskstats_exit+0x654/0xbe0 [ 241.941863][ T7795] ? __pfx_taskstats_exit+0x10/0x10 [ 241.941906][ T7795] do_exit+0x85f/0x2c30 [ 241.941925][ T7795] ? __pfx_futex_wake_mark+0x10/0x10 [ 241.941951][ T7795] ? __pfx_do_exit+0x10/0x10 [ 241.941970][ T7795] ? do_raw_spin_lock+0x12c/0x2b0 [ 241.941995][ T7795] ? find_held_lock+0x2b/0x80 [ 241.942027][ T7795] do_group_exit+0xd3/0x2a0 [ 241.942049][ T7795] get_signal+0x2673/0x26d0 [ 241.942081][ T7795] ? __pfx_perf_event_namespaces+0x10/0x10 [ 241.942114][ T7795] ? __pfx_get_signal+0x10/0x10 [ 241.942143][ T7795] ? do_futex+0x122/0x350 [ 241.942176][ T7795] ? __pfx_do_futex+0x10/0x10 [ 241.942210][ T7795] arch_do_signal_or_restart+0x8f/0x7d0 [ 241.942247][ T7795] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 241.942290][ T7795] ? rcu_is_watching+0x12/0xc0 [ 241.942325][ T7795] syscall_exit_to_user_mode+0x150/0x2a0 [ 241.942357][ T7795] do_syscall_64+0xda/0x260 [ 241.942389][ T7795] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.942412][ T7795] RIP: 0033:0x7f8cea38d169 [ 241.942429][ T7795] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.942450][ T7795] RSP: 002b:00007f8ceb14b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 241.942471][ T7795] RAX: fffffffffffffe00 RBX: 00007f8cea5a6088 RCX: 00007f8cea38d169 [ 241.942486][ T7795] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8cea5a6088 [ 241.942499][ T7795] RBP: 00007f8cea5a6080 R08: 0000000000000000 R09: 0000000000000000 [ 241.942512][ T7795] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8cea5a608c [ 241.942526][ T7795] R13: 0000000000000000 R14: 00007ffe73154710 R15: 00007ffe731547f8 [ 241.942562][ T7795] [ 244.422717][ T7819] netlink: 4 bytes leftover after parsing attributes in process `syz.0.421'. [ 247.554319][ T7867] netlink: 640 bytes leftover after parsing attributes in process `syz.2.434'. [ 248.318624][ T7881] Invalid ELF header magic: != ELF [ 249.866402][ T7898] cgroup: fork rejected by pids controller in /syz0 [ 249.910805][ T7902] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 251.043292][ T7963] input: f as /devices/virtual/input/input9 [ 251.070752][ T7961] random: crng reseeded on system resumption [ 253.650138][ T7990] Invalid ELF header magic: != ELF [ 254.483696][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.455'. [ 255.339870][ T8006] Invalid ELF header magic: != ELF [ 260.710970][ T8066] ======================================================= [ 260.710970][ T8066] WARNING: The mand mount option has been deprecated and [ 260.710970][ T8066] and is ignored by this kernel. Remove the mand [ 260.710970][ T8066] option from the mount to silence this warning. [ 260.710970][ T8066] ======================================================= [ 260.976119][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.988354][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 264.211093][ T8111] netlink: 28 bytes leftover after parsing attributes in process `syz.3.475'. [ 265.379065][ T8113] netlink: 'syz.3.477': attribute type 1 has an invalid length. [ 265.541420][ T8113] openvswitch: netlink: Flow key attr not present in new flow. [ 267.563793][ T8130] delete_channel: no stack [ 274.322811][ T8192] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 274.329203][ T8192] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 274.360665][ T8192] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 274.377143][ T8192] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 275.080158][ T8212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.498'. [ 275.127364][ T8215] Invalid ELF header magic: != ELF [ 275.149920][ T8217] netlink: 330 bytes leftover after parsing attributes in process `syz.1.499'. [ 275.930380][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 276.330472][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 276.410417][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 276.410426][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 276.923943][ T8245] could not allocate digest TFM handle binfmt_misc [ 277.001726][ T8252] netlink: 'syz.2.507': attribute type 1 has an invalid length. [ 278.148065][ T8216] syz.0.490 (8216) used greatest stack depth: 20888 bytes left [ 279.608486][ T8302] FAULT_INJECTION: forcing a failure. [ 279.608486][ T8302] name failslab, interval 1, probability 0, space 0, times 0 [ 279.758067][ T8302] CPU: 1 UID: 0 PID: 8302 Comm: syz.2.518 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 279.758120][ T8302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 279.758141][ T8302] Call Trace: [ 279.758151][ T8302] [ 279.758165][ T8302] dump_stack_lvl+0x16c/0x1f0 [ 279.758228][ T8302] should_fail_ex+0x512/0x640 [ 279.758266][ T8302] ? __kvmalloc_node_noprof+0x122/0x600 [ 279.758322][ T8302] should_failslab+0xc2/0x120 [ 279.758355][ T8302] __kvmalloc_node_noprof+0x135/0x600 [ 279.758407][ T8302] ? bucket_table_alloc.isra.0+0x83/0x460 [ 279.758452][ T8302] ? bucket_table_alloc.isra.0+0x83/0x460 [ 279.758485][ T8302] bucket_table_alloc.isra.0+0x83/0x460 [ 279.758525][ T8302] rhashtable_init_noprof+0x41a/0x7e0 [ 279.758567][ T8302] ipc_init_ids+0x92/0x280 [ 279.758608][ T8302] copy_ipcs+0x4dd/0x610 [ 279.758641][ T8302] ? copy_utsname+0xab/0x470 [ 279.758676][ T8302] create_new_namespaces+0x20a/0xad0 [ 279.758726][ T8302] ? security_capable+0x7e/0x260 [ 279.758786][ T8302] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 279.758839][ T8302] ksys_unshare+0x45b/0xa40 [ 279.758894][ T8302] ? __pfx_ksys_unshare+0x10/0x10 [ 279.758944][ T8302] ? xfd_validate_state+0x5d/0x180 [ 279.758984][ T8302] ? rcu_is_watching+0x12/0xc0 [ 279.759036][ T8302] __x64_sys_unshare+0x31/0x40 [ 279.759093][ T8302] do_syscall_64+0xcd/0x260 [ 279.759142][ T8302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.759174][ T8302] RIP: 0033:0x7f3fd9b8d169 [ 279.759207][ T8302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.759238][ T8302] RSP: 002b:00007f3fda988038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 279.759270][ T8302] RAX: ffffffffffffffda RBX: 00007f3fd9da6080 RCX: 00007f3fd9b8d169 [ 279.759292][ T8302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 279.759312][ T8302] RBP: 00007f3fd9c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 279.759331][ T8302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.759351][ T8302] R13: 0000000000000000 R14: 00007f3fd9da6080 R15: 00007ffe66fa6a78 [ 279.759393][ T8302] [ 279.981702][ C1] vkms_vblank_simulate: vblank timer overrun [ 281.809048][ T8326] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'. [ 282.169964][ T8329] netlink: 28 bytes leftover after parsing attributes in process `syz.1.526'. [ 282.516971][ T8329] bond0: (slave bond_slave_1): Releasing backup interface [ 282.570613][ T8303] syz.0.519 (8303) used greatest stack depth: 20056 bytes left [ 285.900003][ T8348] netlink: 266 bytes leftover after parsing attributes in process `syz.2.531'. [ 285.991466][ T8348] IPv6: NLM_F_CREATE should be specified when creating new route [ 286.415364][ T7906] syz.0.438 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 286.693382][ T8359] netlink: zone id is out of range [ 286.802637][ T7906] CPU: 1 UID: 0 PID: 7906 Comm: syz.0.438 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 286.802681][ T7906] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 286.802700][ T7906] Call Trace: [ 286.802710][ T7906] [ 286.802723][ T7906] dump_stack_lvl+0x16c/0x1f0 [ 286.802771][ T7906] dump_header+0x101/0x930 [ 286.802810][ T7906] oom_kill_process+0x270/0xa60 [ 286.802840][ T7906] ? mem_cgroup_out_of_memory+0x8c/0x270 [ 286.802887][ T7906] out_of_memory+0x350/0x1700 [ 286.802921][ T7906] ? __lock_acquire+0xaa4/0x1ba0 [ 286.802957][ T7906] ? __pfx_out_of_memory+0x10/0x10 [ 286.803004][ T7906] mem_cgroup_out_of_memory+0x205/0x270 [ 286.803046][ T7906] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 286.803118][ T7906] ? do_raw_spin_unlock+0x172/0x230 [ 286.803164][ T7906] try_charge_memcg+0x8ca/0xfa0 [ 286.803205][ T7906] ? __pfx_try_charge_memcg+0x10/0x10 [ 286.803237][ T7906] ? __print_lock_name+0x51/0xe0 [ 286.803280][ T7906] ? rcu_read_unlock+0x17/0x60 [ 286.803325][ T7906] charge_memcg+0x8a/0x230 [ 286.803357][ T7906] __mem_cgroup_charge+0x2b/0x1e0 [ 286.803390][ T7906] shmem_alloc_and_add_folio+0x514/0xc20 [ 286.803455][ T7906] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 286.803512][ T7906] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 286.803573][ T7906] shmem_get_folio_gfp+0x687/0x1530 [ 286.803631][ T7906] ? __lock_acquire+0xaa4/0x1ba0 [ 286.803661][ T7906] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 286.803715][ T7906] ? __pte_offset_map_lock+0x155/0x2f0 [ 286.803759][ T7906] shmem_write_begin+0x160/0x300 [ 286.803817][ T7906] ? __pfx_shmem_write_begin+0x10/0x10 [ 286.803873][ T7906] ? balance_dirty_pages_ratelimited_flags+0x92/0x1260 [ 286.803917][ T7906] ? __pfx_timestamp_truncate+0x10/0x10 [ 286.803978][ T7906] generic_perform_write+0x3cd/0x930 [ 286.804044][ T7906] ? __pfx_generic_perform_write+0x10/0x10 [ 286.804099][ T7906] ? inode_needs_update_time.part.0+0x191/0x270 [ 286.804153][ T7906] shmem_file_write_iter+0x10e/0x140 [ 286.804194][ T7906] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 286.804230][ T7906] __kernel_write_iter+0x317/0xa90 [ 286.804281][ T7906] ? __pfx___kernel_write_iter+0x10/0x10 [ 286.804330][ T7906] ? __up_read+0x1f8/0x750 [ 286.804372][ T7906] ? dump_user_range+0x73d/0xb30 [ 286.804415][ T7906] ? copy_mc_enhanced_fast_string+0x6/0xf [ 286.804458][ T7906] dump_user_range+0x418/0xb30 [ 286.804514][ T7906] ? __pfx_dump_user_range+0x10/0x10 [ 286.804562][ T7906] ? elf_coredump_extra_notes_write+0xbd/0x430 [ 286.804612][ T7906] ? __pfx_writenote+0x10/0x10 [ 286.804673][ T7906] elf_core_dump+0x288a/0x3a90 [ 286.804746][ T7906] ? __pfx_elf_core_dump+0x10/0x10 [ 286.804793][ T7906] ? kasan_save_stack+0x42/0x60 [ 286.804839][ T7906] ? kasan_save_stack+0x33/0x60 [ 286.804885][ T7906] ? kasan_save_track+0x14/0x30 [ 286.804945][ T7906] ? find_held_lock+0x2b/0x80 [ 286.804986][ T7906] ? 0xffffffffff600000 [ 286.805013][ T7906] ? rcu_is_watching+0x12/0xc0 [ 286.805053][ T7906] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 286.805092][ T7906] ? lockdep_hardirqs_on+0x7c/0x110 [ 286.805211][ T7906] ? do_coredump+0x3183/0x4480 [ 286.805251][ T7906] do_coredump+0x3183/0x4480 [ 286.805312][ T7906] ? __pfx_do_coredump+0x10/0x10 [ 286.805359][ T7906] ? stack_trace_save+0x8e/0xc0 [ 286.805404][ T7906] ? __pfx_stack_trace_save+0x10/0x10 [ 286.805447][ T7906] ? stack_depot_save_flags+0x28/0xa50 [ 286.805487][ T7906] ? __lock_acquire+0xaa4/0x1ba0 [ 286.805528][ T7906] ? __kasan_slab_free+0x51/0x70 [ 286.805576][ T7906] ? kmem_cache_free+0x2d4/0x4d0 [ 286.805640][ T7906] ? __sigqueue_free+0xba/0x2a0 [ 286.805669][ T7906] ? get_signal+0xcba/0x26d0 [ 286.805712][ T7906] ? arch_do_signal_or_restart+0x8f/0x7d0 [ 286.805830][ T7906] ? proc_coredump_connector+0x2d1/0x4f0 [ 286.805871][ T7906] ? __pfx_proc_coredump_connector+0x10/0x10 [ 286.805925][ T7906] ? rcu_is_watching+0x12/0xc0 [ 286.805974][ T7906] get_signal+0x22e3/0x26d0 [ 286.806031][ T7906] ? force_sig_fault+0xc4/0x100 [ 286.806079][ T7906] ? __pfx_get_signal+0x10/0x10 [ 286.806147][ T7906] arch_do_signal_or_restart+0x8f/0x7d0 [ 286.806199][ T7906] ? trace_irq_disable.constprop.0+0xd4/0x120 [ 286.806238][ T7906] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 286.806320][ T7906] irqentry_exit_to_user_mode+0x13f/0x280 [ 286.806369][ T7906] asm_exc_page_fault+0x26/0x30 [ 286.806402][ T7906] RIP: 0033:0x7f402d98d171 [ 286.806429][ T7906] Code: 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 48 3d 01 f0 ff ff 73 01 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f [ 286.806461][ T7906] RSP: 002b:0000000100000001 EFLAGS: 00010217 [ 286.806488][ T7906] RAX: 0000000000000000 RBX: 00007f402dba6320 RCX: 00007f402d98d169 [ 286.806509][ T7906] RDX: 0000000000000000 RSI: 0000000100000001 RDI: 0000000020003b46 [ 286.806530][ T7906] RBP: 00007f402da0e2a0 R08: 0000000000000002 R09: 0000000000000000 [ 286.806550][ T7906] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 286.806570][ T7906] R13: 0000000000000000 R14: 00007f402dba6320 R15: 00007ffde6686258 [ 286.806616][ T7906] [ 287.400558][ T7906] memory: usage 307200kB, limit 307200kB, failcnt 22503 [ 287.408529][ T7906] memory+swap: usage 432192kB, limit 9007199254740988kB, failcnt 0 [ 287.486841][ T7906] kmem: usage 3652kB, limit 9007199254740988kB, failcnt 0 [ 287.496404][ T7906] Memory cgroup stats for /syz0: [ 287.496675][ T7906] cache 310738944 [ 287.508971][ T7906] rss 57344 [ 287.512725][ T7906] rss_huge 0 [ 287.516224][ T7906] shmem 310738944 [ 287.519959][ T7906] mapped_file 0 [ 287.523520][ T7906] dirty 0 [ 287.526514][ T7906] writeback 0 [ 287.529896][ T7906] workingset_refault_anon 536 [ 287.534731][ T7906] workingset_refault_file 645 [ 287.539502][ T7906] swap 127991808 [ 287.543212][ T7906] swapcached 4096 [ 287.546913][ T7906] pgpgin 283938 [ 287.555969][ T7906] pgpgout 213680 [ 287.559747][ T7906] pgfault 106608 [ 287.563383][ T7906] pgmajfault 59 [ 287.567068][ T7906] inactive_anon 276647936 [ 287.571702][ T7906] active_anon 34152448 [ 287.576269][ T7906] inactive_file 0 [ 287.580156][ T7906] active_file 0 [ 287.584279][ T7906] unevictable 0 [ 287.587955][ T7906] hierarchical_memory_limit 314572800 [ 287.593636][ T7906] hierarchical_memsw_limit 9223372036854771712 [ 287.599946][ T7906] total_cache 310738944 [ 287.604483][ T7906] total_rss 57344 [ 287.611665][ T7906] total_rss_huge 0 [ 287.615455][ T7906] total_shmem 310738944 [ 287.619652][ T7906] total_mapped_file 0 [ 287.624899][ T7906] total_dirty 0 [ 287.628676][ T7906] total_writeback 0 [ 287.632785][ T7906] total_workingset_refault_anon 536 [ 287.638117][ T7906] total_workingset_refault_file 645 [ 287.643554][ T7906] total_swap 127991808 [ 287.647765][ T7906] total_swapcached 4096 [ 287.652504][ T7906] total_pgpgin 283938 [ 287.656630][ T7906] total_pgpgout 213680 [ 287.661030][ T7906] total_pgfault 106608 [ 287.665261][ T7906] total_pgmajfault 59 [ 287.669381][ T7906] total_inactive_anon 276647936 [ 287.674816][ T7906] total_active_anon 34152448 [ 287.679642][ T7906] total_inactive_file 0 [ 287.684058][ T7906] total_active_file 0 [ 287.688282][ T7906] total_unevictable 0 [ 287.692723][ T7906] anon_cost 0 [ 287.696092][ T7906] file_cost 0 [ 287.699592][ T7906] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.438,pid=7933,uid=0 [ 287.720376][ T7906] Memory cgroup out of memory: Killed process 7933 (syz.0.438) total-vm:131696kB, anon-rss:1048kB, file-rss:27112kB, shmem-rss:0kB, UID:0 pgtables:184kB oom_score_adj:1000 [ 287.906239][ T8367] FAULT_INJECTION: forcing a failure. [ 287.906239][ T8367] name failslab, interval 1, probability 0, space 0, times 0 [ 288.020446][ T8367] CPU: 1 UID: 0 PID: 8367 Comm: syz.1.536 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 288.020497][ T8367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 288.020517][ T8367] Call Trace: [ 288.020529][ T8367] [ 288.020541][ T8367] dump_stack_lvl+0x16c/0x1f0 [ 288.020593][ T8367] should_fail_ex+0x512/0x640 [ 288.020630][ T8367] ? __kvmalloc_node_noprof+0x122/0x600 [ 288.020684][ T8367] should_failslab+0xc2/0x120 [ 288.020721][ T8367] __kvmalloc_node_noprof+0x135/0x600 [ 288.020774][ T8367] ? bucket_table_alloc.isra.0+0x83/0x460 [ 288.020819][ T8367] ? bucket_table_alloc.isra.0+0x83/0x460 [ 288.020852][ T8367] bucket_table_alloc.isra.0+0x83/0x460 [ 288.020903][ T8367] rhashtable_init_noprof+0x41a/0x7e0 [ 288.020945][ T8367] ipc_init_ids+0x92/0x280 [ 288.020986][ T8367] copy_ipcs+0x4e5/0x610 [ 288.021020][ T8367] ? copy_utsname+0xab/0x470 [ 288.021055][ T8367] create_new_namespaces+0x20a/0xad0 [ 288.021104][ T8367] ? security_capable+0x7e/0x260 [ 288.021162][ T8367] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 288.021214][ T8367] ksys_unshare+0x45b/0xa40 [ 288.021268][ T8367] ? __pfx_ksys_unshare+0x10/0x10 [ 288.021319][ T8367] ? xfd_validate_state+0x5d/0x180 [ 288.021359][ T8367] ? rcu_is_watching+0x12/0xc0 [ 288.021411][ T8367] __x64_sys_unshare+0x31/0x40 [ 288.021462][ T8367] do_syscall_64+0xcd/0x260 [ 288.021511][ T8367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.021558][ T8367] RIP: 0033:0x7fe7cb78d169 [ 288.021586][ T8367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 288.021618][ T8367] RSP: 002b:00007fe7cc603038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 288.021650][ T8367] RAX: ffffffffffffffda RBX: 00007fe7cb9a6080 RCX: 00007fe7cb78d169 [ 288.021671][ T8367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 288.021691][ T8367] RBP: 00007fe7cb80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 288.021711][ T8367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 288.021730][ T8367] R13: 0000000000000000 R14: 00007fe7cb9a6080 R15: 00007ffeb67d66b8 [ 288.021772][ T8367] [ 289.736941][ T7906] syz.0.438 (7906) used greatest stack depth: 19624 bytes left [ 290.076146][ T32] oom_reaper: reaped process 7933 (syz.0.438), now anon-rss:40kB, file-rss:25940kB, shmem-rss:0kB [ 290.458296][ T7929] syz.0.438 (7929) used greatest stack depth: 19256 bytes left [ 290.921891][ T8424] FAULT_INJECTION: forcing a failure. [ 290.921891][ T8424] name failslab, interval 1, probability 0, space 0, times 0 [ 290.964345][ T8424] CPU: 0 UID: 0 PID: 8424 Comm: syz.1.549 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 290.964401][ T8424] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 290.964423][ T8424] Call Trace: [ 290.964435][ T8424] [ 290.964449][ T8424] dump_stack_lvl+0x16c/0x1f0 [ 290.964505][ T8424] should_fail_ex+0x512/0x640 [ 290.964546][ T8424] ? __kvmalloc_node_noprof+0x122/0x600 [ 290.964607][ T8424] should_failslab+0xc2/0x120 [ 290.964643][ T8424] __kvmalloc_node_noprof+0x135/0x600 [ 290.964699][ T8424] ? bucket_table_alloc.isra.0+0x83/0x460 [ 290.964748][ T8424] ? bucket_table_alloc.isra.0+0x83/0x460 [ 290.964784][ T8424] bucket_table_alloc.isra.0+0x83/0x460 [ 290.964827][ T8424] rhashtable_init_noprof+0x41a/0x7e0 [ 290.964880][ T8424] ipc_init_ids+0x92/0x280 [ 290.964926][ T8424] copy_ipcs+0x4e5/0x610 [ 290.964962][ T8424] ? copy_utsname+0xab/0x470 [ 290.965000][ T8424] create_new_namespaces+0x20a/0xad0 [ 290.965053][ T8424] ? security_capable+0x7e/0x260 [ 290.965119][ T8424] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 290.965177][ T8424] ksys_unshare+0x45b/0xa40 [ 290.965236][ T8424] ? __pfx_ksys_unshare+0x10/0x10 [ 290.965290][ T8424] ? xfd_validate_state+0x5d/0x180 [ 290.965334][ T8424] ? rcu_is_watching+0x12/0xc0 [ 290.965398][ T8424] __x64_sys_unshare+0x31/0x40 [ 290.965454][ T8424] do_syscall_64+0xcd/0x260 [ 290.965509][ T8424] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.965546][ T8424] RIP: 0033:0x7fe7cb78d169 [ 290.965574][ T8424] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 290.965609][ T8424] RSP: 002b:00007fe7cc603038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 290.965645][ T8424] RAX: ffffffffffffffda RBX: 00007fe7cb9a6080 RCX: 00007fe7cb78d169 [ 290.965669][ T8424] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 290.965692][ T8424] RBP: 00007fe7cb80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 290.965714][ T8424] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 290.965735][ T8424] R13: 0000000000000000 R14: 00007fe7cb9a6080 R15: 00007ffeb67d66b8 [ 290.965781][ T8424] [ 293.467255][ T7925] syz.0.438 (7925) used greatest stack depth: 18024 bytes left syzkaller syzkaller login: [ 297.971382][ T8514] FAULT_INJECTION: forcing a failure. [ 297.971382][ T8514] name failslab, interval 1, probability 0, space 0, times 0 [ 298.042117][ T8514] CPU: 1 UID: 0 PID: 8514 Comm: syz.0.569 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 298.042166][ T8514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 298.042187][ T8514] Call Trace: [ 298.042198][ T8514] [ 298.042211][ T8514] dump_stack_lvl+0x16c/0x1f0 [ 298.042264][ T8514] should_fail_ex+0x512/0x640 [ 298.042304][ T8514] ? __kvmalloc_node_noprof+0x122/0x600 [ 298.042357][ T8514] should_failslab+0xc2/0x120 [ 298.042381][ T8514] __kvmalloc_node_noprof+0x135/0x600 [ 298.042418][ T8514] ? bucket_table_alloc.isra.0+0x83/0x460 [ 298.042450][ T8514] ? bucket_table_alloc.isra.0+0x83/0x460 [ 298.042474][ T8514] bucket_table_alloc.isra.0+0x83/0x460 [ 298.042502][ T8514] rhashtable_init_noprof+0x41a/0x7e0 [ 298.042532][ T8514] ipc_init_ids+0x92/0x280 [ 298.042562][ T8514] copy_ipcs+0x4e5/0x610 [ 298.042585][ T8514] ? copy_utsname+0xab/0x470 [ 298.042611][ T8514] create_new_namespaces+0x20a/0xad0 [ 298.042646][ T8514] ? security_capable+0x7e/0x260 [ 298.042690][ T8514] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 298.042729][ T8514] ksys_unshare+0x45b/0xa40 [ 298.042768][ T8514] ? __pfx_ksys_unshare+0x10/0x10 [ 298.042807][ T8514] ? xfd_validate_state+0x5d/0x180 [ 298.042835][ T8514] ? rcu_is_watching+0x12/0xc0 [ 298.042873][ T8514] __x64_sys_unshare+0x31/0x40 [ 298.042911][ T8514] do_syscall_64+0xcd/0x260 [ 298.042946][ T8514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.042971][ T8514] RIP: 0033:0x7f402d98d169 [ 298.042990][ T8514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 298.043013][ T8514] RSP: 002b:00007f402e764038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 298.043046][ T8514] RAX: ffffffffffffffda RBX: 00007f402dba6080 RCX: 00007f402d98d169 [ 298.043062][ T8514] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 298.043077][ T8514] RBP: 00007f402da0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 298.043092][ T8514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.043107][ T8514] R13: 0000000000000000 R14: 00007f402dba6080 R15: 00007ffde6686258 [ 298.043141][ T8514] [ 301.062821][ T8542] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 301.773309][ T8531] netlink: 334 bytes leftover after parsing attributes in process `syz.3.574'. [ 303.093032][ T8567] FAULT_INJECTION: forcing a failure. [ 303.093032][ T8567] name failslab, interval 1, probability 0, space 0, times 0 [ 303.206086][ T8567] CPU: 0 UID: 0 PID: 8567 Comm: syz.2.582 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 303.206135][ T8567] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 303.206154][ T8567] Call Trace: [ 303.206230][ T8567] [ 303.206242][ T8567] dump_stack_lvl+0x16c/0x1f0 [ 303.206293][ T8567] should_fail_ex+0x512/0x640 [ 303.206330][ T8567] ? __kvmalloc_node_noprof+0x122/0x600 [ 303.206383][ T8567] should_failslab+0xc2/0x120 [ 303.206417][ T8567] __kvmalloc_node_noprof+0x135/0x600 [ 303.206478][ T8567] ? bucket_table_alloc.isra.0+0x83/0x460 [ 303.206568][ T8567] ? bucket_table_alloc.isra.0+0x83/0x460 [ 303.206602][ T8567] bucket_table_alloc.isra.0+0x83/0x460 [ 303.206644][ T8567] rhashtable_init_noprof+0x41a/0x7e0 [ 303.206692][ T8567] ipc_init_ids+0x92/0x280 [ 303.206740][ T8567] copy_ipcs+0x4dd/0x610 [ 303.206774][ T8567] ? copy_utsname+0xab/0x470 [ 303.206812][ T8567] create_new_namespaces+0x20a/0xad0 [ 303.206861][ T8567] ? security_capable+0x7e/0x260 [ 303.206923][ T8567] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 303.206978][ T8567] ksys_unshare+0x45b/0xa40 [ 303.207034][ T8567] ? __pfx_ksys_unshare+0x10/0x10 [ 303.207083][ T8567] ? xfd_validate_state+0x5d/0x180 [ 303.207124][ T8567] ? rcu_is_watching+0x12/0xc0 [ 303.207176][ T8567] __x64_sys_unshare+0x31/0x40 [ 303.207230][ T8567] do_syscall_64+0xcd/0x260 [ 303.207294][ T8567] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.207331][ T8567] RIP: 0033:0x7f3fd9b8d169 [ 303.207360][ T8567] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.207392][ T8567] RSP: 002b:00007f3fda988038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 303.207425][ T8567] RAX: ffffffffffffffda RBX: 00007f3fd9da6080 RCX: 00007f3fd9b8d169 [ 303.207447][ T8567] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 303.207468][ T8567] RBP: 00007f3fd9c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 303.207495][ T8567] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 303.207515][ T8567] R13: 0000000000000000 R14: 00007f3fd9da6080 R15: 00007ffe66fa6a78 [ 303.207561][ T8567] [ 303.719773][ T8575] Malformed UNC in devname [ 303.719773][ T8575] [ 303.800743][ T8575] CIFS: VFS: Malformed UNC in devname [ 306.527473][ T8615] could not allocate digest TFM handle [ 307.589817][ T8646] netlink: 544 bytes leftover after parsing attributes in process `syz.3.600'. [ 308.368873][ T8661] netlink: set zone limit has 8 unknown bytes [ 308.821540][ T8677] random: crng reseeded on system resumption [ 311.654038][ T8702] netlink: 342 bytes leftover after parsing attributes in process `syz.3.610'. [ 312.718908][ T8724] sp0: Synchronizing with TNC [ 313.928360][ T8747] FAULT_INJECTION: forcing a failure. [ 313.928360][ T8747] name fail_futex, interval 1, probability 0, space 0, times 0 [ 313.969590][ T8747] CPU: 0 UID: 0 PID: 8747 Comm: syz.2.625 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 313.969637][ T8747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 313.969657][ T8747] Call Trace: [ 313.969667][ T8747] [ 313.969680][ T8747] dump_stack_lvl+0x16c/0x1f0 [ 313.969731][ T8747] should_fail_ex+0x512/0x640 [ 313.969774][ T8747] get_futex_key+0x49e/0x1000 [ 313.969828][ T8747] ? __pfx_get_futex_key+0x10/0x10 [ 313.969878][ T8747] ? __pfx___might_resched+0x10/0x10 [ 313.969933][ T8747] futex_wake+0xe7/0x4e0 [ 313.969969][ T8747] ? __pfx_futex_wake+0x10/0x10 [ 313.970028][ T8747] do_futex+0x1e3/0x350 [ 313.970077][ T8747] ? __pfx_do_futex+0x10/0x10 [ 313.970122][ T8747] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 313.970171][ T8747] ? file_check_and_advance_wb_err+0xc2/0x340 [ 313.970232][ T8747] __x64_sys_futex+0x1e0/0x4c0 [ 313.970284][ T8747] ? __pfx___x64_sys_futex+0x10/0x10 [ 313.970330][ T8747] ? __sys_getsockopt+0x12f/0x260 [ 313.970368][ T8747] ? __sys_getsockopt+0x15d/0x260 [ 313.970420][ T8747] do_syscall_64+0xcd/0x260 [ 313.970468][ T8747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 313.970501][ T8747] RIP: 0033:0x7f3fd9b8d169 [ 313.970527][ T8747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 313.970558][ T8747] RSP: 002b:00007f3fda9a90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 313.970589][ T8747] RAX: ffffffffffffffda RBX: 00007f3fd9da5fa8 RCX: 00007f3fd9b8d169 [ 313.970611][ T8747] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f3fd9da5fac [ 313.970631][ T8747] RBP: 00007f3fd9da5fa0 R08: 00007f3fda9aa000 R09: 0000000000000000 [ 313.970652][ T8747] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f3fd9da5fac [ 313.970673][ T8747] R13: 0000000000000000 R14: 00007ffe66fa6990 R15: 00007ffe66fa6a78 [ 313.970714][ T8747] [ 314.192353][ T8757] ptrace attach of "./syz-executor exec"[5846] was attempted by "./syz-executor exec"[8757] [ 315.414470][ T8790] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 317.203281][ T8816] netlink: 44 bytes leftover after parsing attributes in process `syz.0.636'. [ 318.721123][ T8832] input: f as /devices/virtual/input/input11 [ 318.804470][ T8835] FAULT_INJECTION: forcing a failure. [ 318.804470][ T8835] name failslab, interval 1, probability 0, space 0, times 0 [ 318.844557][ T8835] CPU: 1 UID: 0 PID: 8835 Comm: syz.2.642 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 318.844603][ T8835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 318.844622][ T8835] Call Trace: [ 318.844632][ T8835] [ 318.844644][ T8835] dump_stack_lvl+0x16c/0x1f0 [ 318.844700][ T8835] should_fail_ex+0x512/0x640 [ 318.844735][ T8835] ? __kvmalloc_node_noprof+0x122/0x600 [ 318.844788][ T8835] should_failslab+0xc2/0x120 [ 318.844819][ T8835] __kvmalloc_node_noprof+0x135/0x600 [ 318.844870][ T8835] ? bucket_table_alloc.isra.0+0x83/0x460 [ 318.844911][ T8835] ? bucket_table_alloc.isra.0+0x83/0x460 [ 318.844944][ T8835] bucket_table_alloc.isra.0+0x83/0x460 [ 318.844982][ T8835] rhashtable_init_noprof+0x41a/0x7e0 [ 318.845020][ T8835] ipc_init_ids+0x92/0x280 [ 318.845058][ T8835] copy_ipcs+0x4e5/0x610 [ 318.845087][ T8835] ? copy_utsname+0xab/0x470 [ 318.845120][ T8835] create_new_namespaces+0x20a/0xad0 [ 318.845168][ T8835] ? security_capable+0x7e/0x260 [ 318.845225][ T8835] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 318.845274][ T8835] ksys_unshare+0x45b/0xa40 [ 318.845326][ T8835] ? __pfx_ksys_unshare+0x10/0x10 [ 318.845374][ T8835] ? xfd_validate_state+0x5d/0x180 [ 318.845412][ T8835] ? rcu_is_watching+0x12/0xc0 [ 318.845462][ T8835] __x64_sys_unshare+0x31/0x40 [ 318.845512][ T8835] do_syscall_64+0xcd/0x260 [ 318.845558][ T8835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 318.845590][ T8835] RIP: 0033:0x7f3fd9b8d169 [ 318.845616][ T8835] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 318.845647][ T8835] RSP: 002b:00007f3fda988038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 318.845686][ T8835] RAX: ffffffffffffffda RBX: 00007f3fd9da6080 RCX: 00007f3fd9b8d169 [ 318.845707][ T8835] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 318.845726][ T8835] RBP: 00007f3fd9c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 318.845746][ T8835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 318.845766][ T8835] R13: 0000000000000000 R14: 00007f3fd9da6080 R15: 00007ffe66fa6a78 [ 318.845807][ T8835] [ 320.204444][ T8858] netlink: 544 bytes leftover after parsing attributes in process `syz.2.647'. [ 321.087098][ T8874] FAULT_INJECTION: forcing a failure. [ 321.087098][ T8874] name failslab, interval 1, probability 0, space 0, times 0 [ 321.140297][ T8874] CPU: 0 UID: 0 PID: 8874 Comm: syz.0.653 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 321.140350][ T8874] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 321.140383][ T8874] Call Trace: [ 321.140394][ T8874] [ 321.140413][ T8874] dump_stack_lvl+0x16c/0x1f0 [ 321.140496][ T8874] should_fail_ex+0x512/0x640 [ 321.140552][ T8874] ? __kvmalloc_node_noprof+0x122/0x600 [ 321.140612][ T8874] should_failslab+0xc2/0x120 [ 321.140644][ T8874] __kvmalloc_node_noprof+0x135/0x600 [ 321.140694][ T8874] ? bucket_table_alloc.isra.0+0x83/0x460 [ 321.140737][ T8874] ? bucket_table_alloc.isra.0+0x83/0x460 [ 321.140769][ T8874] bucket_table_alloc.isra.0+0x83/0x460 [ 321.140812][ T8874] rhashtable_init_noprof+0x41a/0x7e0 [ 321.140852][ T8874] ipc_init_ids+0x92/0x280 [ 321.140901][ T8874] msg_init_ns+0x13d/0x190 [ 321.140958][ T8874] copy_ipcs+0x4bd/0x610 [ 321.140996][ T8874] ? copy_utsname+0xab/0x470 [ 321.141029][ T8874] create_new_namespaces+0x20a/0xad0 [ 321.141075][ T8874] ? security_capable+0x7e/0x260 [ 321.141154][ T8874] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 321.141202][ T8874] ksys_unshare+0x45b/0xa40 [ 321.141252][ T8874] ? __pfx_ksys_unshare+0x10/0x10 [ 321.141302][ T8874] ? xfd_validate_state+0x5d/0x180 [ 321.141340][ T8874] ? rcu_is_watching+0x12/0xc0 [ 321.141402][ T8874] __x64_sys_unshare+0x31/0x40 [ 321.141453][ T8874] do_syscall_64+0xcd/0x260 [ 321.141500][ T8874] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.141534][ T8874] RIP: 0033:0x7f402d98d169 [ 321.141560][ T8874] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.141590][ T8874] RSP: 002b:00007f402e764038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 321.141621][ T8874] RAX: ffffffffffffffda RBX: 00007f402dba6080 RCX: 00007f402d98d169 [ 321.141642][ T8874] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 321.141662][ T8874] RBP: 00007f402da0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 321.141682][ T8874] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 321.141701][ T8874] R13: 0000000000000000 R14: 00007f402dba6080 R15: 00007ffde6686258 [ 321.141743][ T8874] [ 321.824403][ T8878] Invalid ELF header magic: != ELF [ 322.420216][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.428466][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.863072][ T8907] can: request_module (can-proto-0) failed. [ 327.761006][ T8968] FAULT_INJECTION: forcing a failure. [ 327.761006][ T8968] name failslab, interval 1, probability 0, space 0, times 0 [ 327.774340][ T8968] CPU: 1 UID: 0 PID: 8968 Comm: syz.2.683 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 327.774378][ T8968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 327.774395][ T8968] Call Trace: [ 327.774405][ T8968] [ 327.774416][ T8968] dump_stack_lvl+0x16c/0x1f0 [ 327.774470][ T8968] should_fail_ex+0x512/0x640 [ 327.774503][ T8968] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 327.774556][ T8968] should_failslab+0xc2/0x120 [ 327.774586][ T8968] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 327.774632][ T8968] ? __proc_create+0xc3/0x8c0 [ 327.774664][ T8968] ? __proc_create+0x2ce/0x8c0 [ 327.774703][ T8968] __proc_create+0x2ce/0x8c0 [ 327.774738][ T8968] ? __pfx___proc_create+0x10/0x10 [ 327.774789][ T8968] _proc_mkdir+0xb9/0x200 [ 327.774824][ T8968] ? __pfx__proc_mkdir+0x10/0x10 [ 327.774857][ T8968] ? trace_kmem_cache_alloc+0x28/0xc0 [ 327.774892][ T8968] ? crng_make_state+0x48e/0x6d0 [ 327.774936][ T8968] proc_net_ns_init+0x265/0x410 [ 327.774974][ T8968] ? __pfx_proc_net_ns_init+0x10/0x10 [ 327.775009][ T8968] ops_init+0x1df/0x5f0 [ 327.775055][ T8968] setup_net+0x21e/0x850 [ 327.775100][ T8968] ? __pfx_setup_net+0x10/0x10 [ 327.775139][ T8968] ? lockdep_init_map_type+0x5c/0x280 [ 327.775170][ T8968] ? __pfx_down_read_killable+0x10/0x10 [ 327.775241][ T8968] ? debug_mutex_init+0x37/0x70 [ 327.775286][ T8968] copy_net_ns+0x2a6/0x5f0 [ 327.775336][ T8968] create_new_namespaces+0x3ea/0xad0 [ 327.775392][ T8968] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 327.775447][ T8968] ksys_unshare+0x45b/0xa40 [ 327.775496][ T8968] ? __pfx_ksys_unshare+0x10/0x10 [ 327.775542][ T8968] ? xfd_validate_state+0x5d/0x180 [ 327.775580][ T8968] ? rcu_is_watching+0x12/0xc0 [ 327.775630][ T8968] __x64_sys_unshare+0x31/0x40 [ 327.775676][ T8968] do_syscall_64+0xcd/0x260 [ 327.775720][ T8968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 327.775752][ T8968] RIP: 0033:0x7f3fd9b8d169 [ 327.775777][ T8968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 327.775806][ T8968] RSP: 002b:00007f3fda9a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 327.775834][ T8968] RAX: ffffffffffffffda RBX: 00007f3fd9da5fa0 RCX: 00007f3fd9b8d169 [ 327.775855][ T8968] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 327.775873][ T8968] RBP: 00007f3fd9c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 327.775891][ T8968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 327.775909][ T8968] R13: 0000000000000000 R14: 00007f3fd9da5fa0 R15: 00007ffe66fa6a78 [ 327.775950][ T8968] [ 328.701509][ T8998] random: crng reseeded on system resumption [ 330.844469][ T9006] netlink: 334 bytes leftover after parsing attributes in process `syz.0.686'. [ 332.722211][ T9043] netlink: 28 bytes leftover after parsing attributes in process `syz.2.692'. [ 332.754065][ T9043] macsec0: entered promiscuous mode [ 332.759658][ T9043] macsec0: entered allmulticast mode [ 332.784383][ T9043] veth1_macvtap: entered allmulticast mode [ 335.784087][ T9094] netlink: 28 bytes leftover after parsing attributes in process `syz.1.703'. [ 335.856918][ T9100] vivid-003: ================= START STATUS ================= [ 335.872137][ T9100] vivid-003: Radio HW Seek Mode: Bounded [ 335.877886][ T9100] vivid-003: Radio Programmable HW Seek: false [ 335.913682][ T9100] vivid-003: RDS Rx I/O Mode: Block I/O [ 335.919336][ T9100] vivid-003: Generate RBDS Instead of RDS: false [ 335.974171][ T9100] vivid-003: RDS Reception: true [ 335.979256][ T9100] vivid-003: RDS Program Type: 0 inactive [ 336.071400][ T9100] vivid-003: RDS PS Name: inactive [ 336.076730][ T9100] vivid-003: RDS Radio Text: inactive [ 336.222597][ T9100] vivid-003: RDS Traffic Announcement: false inactive [ 336.275160][ T9100] vivid-003: RDS Traffic Program: false inactive [ 336.312630][ T9100] vivid-003: RDS Music: false inactive [ 336.318282][ T9100] vivid-003: ================== END STATUS ================== [ 336.932201][ T9110] FAULT_INJECTION: forcing a failure. [ 336.932201][ T9110] name failslab, interval 1, probability 0, space 0, times 0 [ 337.090432][ T9110] CPU: 1 UID: 0 PID: 9110 Comm: syz.0.709 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 337.090478][ T9110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 337.090498][ T9110] Call Trace: [ 337.090509][ T9110] [ 337.090529][ T9110] dump_stack_lvl+0x16c/0x1f0 [ 337.090580][ T9110] should_fail_ex+0x512/0x640 [ 337.090617][ T9110] ? __kvmalloc_node_noprof+0x122/0x600 [ 337.090670][ T9110] should_failslab+0xc2/0x120 [ 337.090702][ T9110] __kvmalloc_node_noprof+0x135/0x600 [ 337.090752][ T9110] ? bucket_table_alloc.isra.0+0x83/0x460 [ 337.090795][ T9110] ? bucket_table_alloc.isra.0+0x83/0x460 [ 337.090828][ T9110] bucket_table_alloc.isra.0+0x83/0x460 [ 337.090867][ T9110] rhashtable_init_noprof+0x41a/0x7e0 [ 337.090909][ T9110] ipc_init_ids+0x92/0x280 [ 337.090947][ T9110] copy_ipcs+0x4dd/0x610 [ 337.090980][ T9110] ? copy_utsname+0xab/0x470 [ 337.091014][ T9110] create_new_namespaces+0x20a/0xad0 [ 337.091061][ T9110] ? security_capable+0x7e/0x260 [ 337.091119][ T9110] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 337.091171][ T9110] ksys_unshare+0x45b/0xa40 [ 337.091223][ T9110] ? __pfx_ksys_unshare+0x10/0x10 [ 337.091272][ T9110] ? xfd_validate_state+0x5d/0x180 [ 337.091311][ T9110] ? rcu_is_watching+0x12/0xc0 [ 337.091361][ T9110] __x64_sys_unshare+0x31/0x40 [ 337.091412][ T9110] do_syscall_64+0xcd/0x260 [ 337.091465][ T9110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 337.091498][ T9110] RIP: 0033:0x7f402d98d169 [ 337.091539][ T9110] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 337.091582][ T9110] RSP: 002b:00007f402e764038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 337.091613][ T9110] RAX: ffffffffffffffda RBX: 00007f402dba6080 RCX: 00007f402d98d169 [ 337.091634][ T9110] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 337.091654][ T9110] RBP: 00007f402da0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 337.091674][ T9110] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 337.091693][ T9110] R13: 0000000000000000 R14: 00007f402dba6080 R15: 00007ffde6686258 [ 337.091736][ T9110] [ 338.181130][ T9137] FAULT_INJECTION: forcing a failure. [ 338.181130][ T9137] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 338.240537][ T9137] CPU: 1 UID: 0 PID: 9137 Comm: syz.2.717 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 338.240583][ T9137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 338.240602][ T9137] Call Trace: [ 338.240611][ T9137] [ 338.240622][ T9137] dump_stack_lvl+0x16c/0x1f0 [ 338.240670][ T9137] should_fail_ex+0x512/0x640 [ 338.240713][ T9137] should_fail_alloc_page+0xe7/0x130 [ 338.240746][ T9137] prepare_alloc_pages+0x3c2/0x610 [ 338.240787][ T9137] ? rcu_is_watching+0x12/0xc0 [ 338.240832][ T9137] __alloc_frozen_pages_noprof+0x18d/0x2370 [ 338.240897][ T9137] ? stack_trace_save+0x8e/0xc0 [ 338.240940][ T9137] ? __pfx_stack_trace_save+0x10/0x10 [ 338.240984][ T9137] ? stack_depot_save_flags+0x28/0xa50 [ 338.241025][ T9137] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 338.241080][ T9137] ? kasan_save_stack+0x42/0x60 [ 338.241125][ T9137] ? kasan_save_stack+0x33/0x60 [ 338.241180][ T9137] ? kasan_save_track+0x14/0x30 [ 338.241226][ T9137] ? __kasan_kmalloc+0xaa/0xb0 [ 338.241270][ T9137] ? mon_bin_open+0x1a8/0x4a0 [ 338.241309][ T9137] ? chrdev_open+0x231/0x6a0 [ 338.241363][ T9137] ? __x64_sys_openat+0x174/0x210 [ 338.241398][ T9137] ? do_syscall_64+0xcd/0x260 [ 338.241439][ T9137] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.241481][ T9137] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 338.241519][ T9137] ? policy_nodemask+0xea/0x4e0 [ 338.241553][ T9137] alloc_pages_mpol+0x1fb/0x550 [ 338.241586][ T9137] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 338.241630][ T9137] alloc_pages_noprof+0x131/0x390 [ 338.241663][ T9137] get_zeroed_page_noprof+0x14/0x50 [ 338.241700][ T9137] mon_alloc_buff+0xbc/0x180 [ 338.241739][ T9137] ? kasan_save_track+0x14/0x30 [ 338.241788][ T9137] mon_bin_open+0x207/0x4a0 [ 338.241829][ T9137] ? __pfx_mon_bin_open+0x10/0x10 [ 338.241870][ T9137] chrdev_open+0x231/0x6a0 [ 338.241923][ T9137] ? __pfx_chrdev_open+0x10/0x10 [ 338.241977][ T9137] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 338.242032][ T9137] do_dentry_open+0x741/0x1c10 [ 338.242079][ T9137] ? __pfx_chrdev_open+0x10/0x10 [ 338.242145][ T9137] vfs_open+0x82/0x3f0 [ 338.242189][ T9137] path_openat+0x1e5e/0x2d40 [ 338.242255][ T9137] ? __pfx_path_openat+0x10/0x10 [ 338.242313][ T9137] do_filp_open+0x20b/0x470 [ 338.242361][ T9137] ? __pfx_do_filp_open+0x10/0x10 [ 338.242440][ T9137] ? alloc_fd+0x471/0x7d0 [ 338.242498][ T9137] do_sys_openat2+0x11b/0x1d0 [ 338.242533][ T9137] ? __pfx_do_sys_openat2+0x10/0x10 [ 338.242583][ T9137] __x64_sys_openat+0x174/0x210 [ 338.242618][ T9137] ? __pfx___x64_sys_openat+0x10/0x10 [ 338.242657][ T9137] ? rcu_is_watching+0x12/0xc0 [ 338.242710][ T9137] do_syscall_64+0xcd/0x260 [ 338.242756][ T9137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.242789][ T9137] RIP: 0033:0x7f3fd9b8d169 [ 338.242815][ T9137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.242846][ T9137] RSP: 002b:00007f3fda9a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 338.242877][ T9137] RAX: ffffffffffffffda RBX: 00007f3fd9da5fa0 RCX: 00007f3fd9b8d169 [ 338.242898][ T9137] RDX: 0000000000080000 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 338.242919][ T9137] RBP: 00007f3fd9c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 338.242938][ T9137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 338.242958][ T9137] R13: 0000000000000000 R14: 00007f3fd9da5fa0 R15: 00007ffe66fa6a78 [ 338.242999][ T9137] [ 339.415034][ T9151] QAT: Invalid ioctl 1074028799 [ 342.124537][ T9183] random: crng reseeded on system resumption [ 343.177501][ T9220] netlink: 342 bytes leftover after parsing attributes in process `syz.3.737'. [ 344.749593][ T9271] random: crng reseeded on system resumption [ 348.473105][ T9318] could not allocate digest TFM handle [ 349.774314][ T9348] FAULT_INJECTION: forcing a failure. [ 349.774314][ T9348] name failslab, interval 1, probability 0, space 0, times 0 [ 349.827160][ T9348] CPU: 0 UID: 0 PID: 9348 Comm: syz.1.767 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 349.827205][ T9348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 349.827225][ T9348] Call Trace: [ 349.827236][ T9348] [ 349.827248][ T9348] dump_stack_lvl+0x16c/0x1f0 [ 349.827297][ T9348] should_fail_ex+0x512/0x640 [ 349.827331][ T9348] ? __kvmalloc_node_noprof+0x122/0x600 [ 349.827382][ T9348] should_failslab+0xc2/0x120 [ 349.827413][ T9348] __kvmalloc_node_noprof+0x135/0x600 [ 349.827462][ T9348] ? bucket_table_alloc.isra.0+0x83/0x460 [ 349.827504][ T9348] ? bucket_table_alloc.isra.0+0x83/0x460 [ 349.827535][ T9348] bucket_table_alloc.isra.0+0x83/0x460 [ 349.827573][ T9348] rhashtable_init_noprof+0x41a/0x7e0 [ 349.827613][ T9348] ipc_init_ids+0x92/0x280 [ 349.827653][ T9348] copy_ipcs+0x4dd/0x610 [ 349.827684][ T9348] ? copy_utsname+0xab/0x470 [ 349.827719][ T9348] create_new_namespaces+0x20a/0xad0 [ 349.827766][ T9348] ? security_capable+0x7e/0x260 [ 349.827843][ T9348] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 349.827895][ T9348] ksys_unshare+0x45b/0xa40 [ 349.827948][ T9348] ? __pfx_ksys_unshare+0x10/0x10 [ 349.827998][ T9348] ? xfd_validate_state+0x5d/0x180 [ 349.828036][ T9348] ? rcu_is_watching+0x12/0xc0 [ 349.828087][ T9348] __x64_sys_unshare+0x31/0x40 [ 349.828138][ T9348] do_syscall_64+0xcd/0x260 [ 349.828190][ T9348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.828223][ T9348] RIP: 0033:0x7fe7cb78d169 [ 349.828249][ T9348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.828288][ T9348] RSP: 002b:00007fe7cc603038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 349.828318][ T9348] RAX: ffffffffffffffda RBX: 00007fe7cb9a6080 RCX: 00007fe7cb78d169 [ 349.828340][ T9348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 349.828359][ T9348] RBP: 00007fe7cb80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 349.828380][ T9348] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 349.828400][ T9348] R13: 0000000000000000 R14: 00007fe7cb9a6080 R15: 00007ffeb67d66b8 [ 349.828441][ T9348] [ 351.450129][ T9367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.773'. [ 351.655830][ T9367] veth1_macvtap (unregistering): left allmulticast mode [ 352.186064][ T5843] Bluetooth: hci1: unexpected event 0x1d length: 1 < 5 [ 352.532853][ T9385] __vm_enough_memory: pid: 9385, comm: syz.3.776, bytes: 4503599627366400 not enough memory for the allocation [ 352.738792][ T9400] Invalid ELF header magic: != ELF [ 353.057138][ T9407] FAULT_INJECTION: forcing a failure. [ 353.057138][ T9407] name failslab, interval 1, probability 0, space 0, times 0 [ 353.106814][ T9407] CPU: 0 UID: 0 PID: 9407 Comm: syz.0.780 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 353.106861][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 353.106885][ T9407] Call Trace: [ 353.106896][ T9407] [ 353.106909][ T9407] dump_stack_lvl+0x16c/0x1f0 [ 353.106959][ T9407] should_fail_ex+0x512/0x640 [ 353.106994][ T9407] ? __kvmalloc_node_noprof+0x122/0x600 [ 353.107048][ T9407] should_failslab+0xc2/0x120 [ 353.107079][ T9407] __kvmalloc_node_noprof+0x135/0x600 [ 353.107131][ T9407] ? bucket_table_alloc.isra.0+0x83/0x460 [ 353.107173][ T9407] ? bucket_table_alloc.isra.0+0x83/0x460 [ 353.107206][ T9407] bucket_table_alloc.isra.0+0x83/0x460 [ 353.107245][ T9407] rhashtable_init_noprof+0x41a/0x7e0 [ 353.107287][ T9407] ipc_init_ids+0x92/0x280 [ 353.107328][ T9407] msg_init_ns+0x13d/0x190 [ 353.107376][ T9407] copy_ipcs+0x4bd/0x610 [ 353.107407][ T9407] ? copy_utsname+0xab/0x470 [ 353.107441][ T9407] create_new_namespaces+0x20a/0xad0 [ 353.107488][ T9407] ? security_capable+0x7e/0x260 [ 353.107546][ T9407] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 353.107597][ T9407] ksys_unshare+0x45b/0xa40 [ 353.107647][ T9407] ? __pfx_ksys_unshare+0x10/0x10 [ 353.107704][ T9407] ? xfd_validate_state+0x5d/0x180 [ 353.107744][ T9407] ? rcu_is_watching+0x12/0xc0 [ 353.107796][ T9407] __x64_sys_unshare+0x31/0x40 [ 353.107846][ T9407] do_syscall_64+0xcd/0x260 [ 353.107896][ T9407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.107929][ T9407] RIP: 0033:0x7f402d98d169 [ 353.107956][ T9407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.107988][ T9407] RSP: 002b:00007f402e764038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 353.108018][ T9407] RAX: ffffffffffffffda RBX: 00007f402dba6080 RCX: 00007f402d98d169 [ 353.108040][ T9407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 353.108059][ T9407] RBP: 00007f402da0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 353.108080][ T9407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 353.108099][ T9407] R13: 0000000000000000 R14: 00007f402dba6080 R15: 00007ffde6686258 [ 353.108141][ T9407] [ 354.693950][ T9431] netlink: 4 bytes leftover after parsing attributes in process `syz.1.785'. [ 354.877582][ T5898] Process accounting resumed [ 354.920839][ T9417] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 354.929060][ T9417] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 354.935741][ T9417] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 354.942387][ T9417] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 355.347264][ T5843] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 355.559173][ T9451] netlink: zone id is out of range [ 355.623796][ T9451] netlink: zone id is out of range [ 355.680563][ T9451] netlink: zone id is out of range [ 355.685763][ T9451] netlink: zone id is out of range [ 355.700505][ T9451] netlink: zone id is out of range [ 355.707887][ T9451] netlink: zone id is out of range [ 355.749834][ T9433] Process accounting resumed [ 355.755711][ T9451] netlink: zone id is out of range [ 355.800843][ T9451] netlink: zone id is out of range [ 355.829363][ T9451] netlink: zone id is out of range [ 355.881282][ T9451] netlink: zone id is out of range [ 356.090527][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 356.225182][ T9465] netlink: 28 bytes leftover after parsing attributes in process `syz.0.792'. [ 356.349819][ T9465] bond0: (slave bond_slave_0): Releasing backup interface [ 356.971603][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 356.971625][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 356.971675][ T5845] Bluetooth: hci1: command 0x0c1a tx timeout [ 358.591888][ T9518] netlink: 28 bytes leftover after parsing attributes in process `syz.1.805'. [ 358.701569][ T9518] team0: Port device team_slave_0 removed [ 359.140978][ T9533] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 360.541401][ T9563] afs: Unknown parameter '' [ 360.549486][ T9563] afs: Unknown parameter '' [ 360.560317][ T9563] afs: Unknown parameter '' [ 360.570650][ T9563] afs: Unknown parameter '' [ 360.583838][ T9563] afs: Unknown parameter '' [ 360.602073][ T9563] afs: Unknown parameter '' [ 360.612807][ T9563] afs: Unknown parameter '' [ 360.630909][ T9563] afs: Unknown parameter '' [ 360.636118][ T9563] afs: Unknown parameter '' [ 360.650910][ T9563] afs: Unknown parameter '' [ 360.660704][ T9563] afs: Unknown parameter '' [ 360.677387][ T9563] afs: Unknown parameter '' [ 360.682591][ T9563] afs: Unknown parameter '' [ 360.688769][ T9563] afs: Unknown parameter '' [ 360.712029][ T9563] afs: Unknown parameter '' [ 360.731424][ T9563] afs: Unknown parameter '' [ 360.742925][ T9563] afs: Unknown parameter '' [ 360.750707][ T9563] afs: Unknown parameter '' [ 360.763892][ T9563] afs: Unknown parameter '' [ 360.769295][ T9563] afs: Unknown parameter '' [ 360.820791][ T9563] afs: Unknown parameter '' [ 360.839508][ T9563] afs: Unknown parameter '' [ 360.869319][ T9563] afs: Unknown parameter '' [ 360.888267][ T9563] afs: Unknown parameter '' [ 360.915187][ T9563] afs: Unknown parameter '' [ 360.935373][ T9563] afs: Unknown parameter '' [ 360.949334][ T9563] afs: Unknown parameter '' [ 360.980722][ T9563] afs: Unknown parameter '' [ 360.986001][ T9563] afs: Unknown parameter '' [ 361.095966][ T9563] afs: Unknown parameter '' [ 361.109552][ T9563] afs: Unknown parameter '' [ 361.141889][ T9563] afs: Unknown parameter '' [ 361.150751][ T9563] afs: Unknown parameter '' [ 364.007724][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.827'. [ 364.588653][ T9644] FAULT_INJECTION: forcing a failure. [ 364.588653][ T9644] name failslab, interval 1, probability 0, space 0, times 0 [ 364.602064][ T9644] CPU: 0 UID: 0 PID: 9644 Comm: syz.2.834 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 364.602103][ T9644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 364.602117][ T9644] Call Trace: [ 364.602124][ T9644] [ 364.602133][ T9644] dump_stack_lvl+0x16c/0x1f0 [ 364.602168][ T9644] should_fail_ex+0x512/0x640 [ 364.602193][ T9644] ? __kmalloc_noprof+0xbf/0x510 [ 364.602230][ T9644] ? kernfs_fop_write_iter+0x237/0x510 [ 364.602258][ T9644] should_failslab+0xc2/0x120 [ 364.602279][ T9644] __kmalloc_noprof+0xd2/0x510 [ 364.602328][ T9644] kernfs_fop_write_iter+0x237/0x510 [ 364.602363][ T9644] vfs_write+0x5ba/0x1180 [ 364.602397][ T9644] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 364.602429][ T9644] ? __pfx___mutex_lock+0x10/0x10 [ 364.602461][ T9644] ? __pfx_vfs_write+0x10/0x10 [ 364.602514][ T9644] ksys_write+0x12a/0x240 [ 364.602547][ T9644] ? __pfx_ksys_write+0x10/0x10 [ 364.602584][ T9644] ? rcu_is_watching+0x12/0xc0 [ 364.602623][ T9644] do_syscall_64+0xcd/0x260 [ 364.602657][ T9644] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.602680][ T9644] RIP: 0033:0x7f3fd9b8d169 [ 364.602699][ T9644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.602722][ T9644] RSP: 002b:00007f3fda9a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 364.602743][ T9644] RAX: ffffffffffffffda RBX: 00007f3fd9da5fa0 RCX: 00007f3fd9b8d169 [ 364.602758][ T9644] RDX: 000000000000cd04 RSI: 0000000000000000 RDI: 0000000000000006 [ 364.602772][ T9644] RBP: 00007f3fd9c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 364.602786][ T9644] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 364.602800][ T9644] R13: 0000000000000000 R14: 00007f3fd9da5fa0 R15: 00007ffe66fa6a78 [ 364.602829][ T9644] [ 366.490189][ T30] audit: type=1800 audit(4294968481.677:6): pid=9666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.840" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 370.778369][ T9759] net_ratelimit: 137 callbacks suppressed [ 370.778404][ T9759] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 373.866237][ T9816] netlink: 20 bytes leftover after parsing attributes in process `syz.3.876'. [ 374.213306][ T9807] Invalid ELF header magic: != ELF [ 374.591205][ T9833] netlink: 16 bytes leftover after parsing attributes in process `syz.2.878'. [ 375.029678][ T9841] Invalid ELF header magic: != ELF [ 376.130830][ T9867] netlink: 334 bytes leftover after parsing attributes in process `syz.2.885'. [ 377.420005][ T30] audit: type=1800 audit(4294968492.607:7): pid=9884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.888" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 377.703586][ T9890] FAULT_INJECTION: forcing a failure. [ 377.703586][ T9890] name failslab, interval 1, probability 0, space 0, times 0 [ 377.736892][ T9890] CPU: 1 UID: 0 PID: 9890 Comm: syz.1.890 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 377.736938][ T9890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 377.736956][ T9890] Call Trace: [ 377.736966][ T9890] [ 377.736978][ T9890] dump_stack_lvl+0x16c/0x1f0 [ 377.737025][ T9890] should_fail_ex+0x512/0x640 [ 377.737066][ T9890] should_failslab+0xc2/0x120 [ 377.737096][ T9890] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 377.737145][ T9890] ? __alloc_skb+0x2b2/0x380 [ 377.737181][ T9890] ? __lock_acquire+0x5ca/0x1ba0 [ 377.737213][ T9890] __alloc_skb+0x2b2/0x380 [ 377.737249][ T9890] ? __pfx___alloc_skb+0x10/0x10 [ 377.737283][ T9890] ? find_held_lock+0x2b/0x80 [ 377.737329][ T9890] ? __lock_acquire+0x5ca/0x1ba0 [ 377.737362][ T9890] sctp_packet_transmit+0x1ca/0x3040 [ 377.737412][ T9890] ? find_held_lock+0x2b/0x80 [ 377.737452][ T9890] ? sctp_outq_flush+0xb4e/0x3350 [ 377.737489][ T9890] sctp_outq_flush+0xb68/0x3350 [ 377.737531][ T9890] ? __pfx_sctp_outq_flush+0x10/0x10 [ 377.737559][ T9890] ? sctp_auth_send_cid+0xa9/0xd0 [ 377.737614][ T9890] ? sctp_outq_tail+0x671/0xa30 [ 377.737657][ T9890] sctp_do_sm+0x1792/0x5c80 [ 377.737704][ T9890] ? __pfx_sctp_do_sm+0x10/0x10 [ 377.737787][ T9890] ? ktime_get+0x200/0x310 [ 377.737831][ T9890] ? lockdep_hardirqs_on+0x7c/0x110 [ 377.737884][ T9890] sctp_assoc_bh_rcv+0x392/0x6f0 [ 377.737945][ T9890] sctp_inq_push+0x1d8/0x270 [ 377.737975][ T9890] sctp_backlog_rcv+0x169/0x590 [ 377.738016][ T9890] ? __pfx_sctp_backlog_rcv+0x10/0x10 [ 377.738052][ T9890] __release_sock+0x35f/0x400 [ 377.738090][ T9890] ? sctp_endpoint_lookup_assoc+0x15c/0x2a0 [ 377.738144][ T9890] release_sock+0x5a/0x220 [ 377.738183][ T9890] sctp_sendmsg+0xf17/0x1ee0 [ 377.738226][ T9890] ? __pfx_sctp_sendmsg+0x10/0x10 [ 377.738260][ T9890] ? __pfx___might_resched+0x10/0x10 [ 377.738326][ T9890] ? __pfx_aa_sk_perm+0x10/0x10 [ 377.738367][ T9890] ? __pfx_sctp_sendmsg+0x10/0x10 [ 377.738399][ T9890] inet_sendmsg+0x119/0x140 [ 377.738449][ T9890] ____sys_sendmsg+0x973/0xc70 [ 377.738500][ T9890] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.738544][ T9890] ? __pfx___schedule+0x10/0x10 [ 377.738598][ T9890] ___sys_sendmsg+0x134/0x1d0 [ 377.738640][ T9890] ? __pfx____sys_sendmsg+0x10/0x10 [ 377.738697][ T9890] ? find_held_lock+0x2b/0x80 [ 377.738761][ T9890] __sys_sendmmsg+0x200/0x420 [ 377.738804][ T9890] ? __pfx___sys_sendmmsg+0x10/0x10 [ 377.738847][ T9890] ? __pfx_inet_bind_sk+0x10/0x10 [ 377.738906][ T9890] ? __pfx_do_futex+0x10/0x10 [ 377.738969][ T9890] ? xfd_validate_state+0x5d/0x180 [ 377.739006][ T9890] ? rcu_is_watching+0x12/0xc0 [ 377.739052][ T9890] __x64_sys_sendmmsg+0x9c/0x100 [ 377.739090][ T9890] ? lockdep_hardirqs_on+0x7c/0x110 [ 377.739129][ T9890] do_syscall_64+0xcd/0x260 [ 377.739173][ T9890] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.739205][ T9890] RIP: 0033:0x7fe7cb78d169 [ 377.739230][ T9890] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 377.739260][ T9890] RSP: 002b:00007fe7cc624038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 377.739289][ T9890] RAX: ffffffffffffffda RBX: 00007fe7cb9a5fa0 RCX: 00007fe7cb78d169 [ 377.739310][ T9890] RDX: 0000000000000005 RSI: 0000200000000100 RDI: 0000000000000003 [ 377.739330][ T9890] RBP: 00007fe7cb80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 377.739349][ T9890] R10: 000000007fffffff R11: 0000000000000246 R12: 0000000000000000 [ 377.739367][ T9890] R13: 0000000000000000 R14: 00007fe7cb9a5fa0 R15: 00007ffeb67d66b8 [ 377.739407][ T9890] [ 378.109000][ T9896] netlink: 'syz.2.891': attribute type 1 has an invalid length. [ 378.116950][ T9896] netlink: 32 bytes leftover after parsing attributes in process `syz.2.891'. [ 378.126048][ T9896] netlink: 'syz.2.891': attribute type 1 has an invalid length. [ 378.308740][ T9900] netlink: 4 bytes leftover after parsing attributes in process `syz.3.892'. [ 381.402736][ T9940] FAULT_INJECTION: forcing a failure. [ 381.402736][ T9940] name failslab, interval 1, probability 0, space 0, times 0 [ 381.485317][ T9940] CPU: 0 UID: 0 PID: 9940 Comm: syz.1.900 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 381.485364][ T9940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 381.485386][ T9940] Call Trace: [ 381.485397][ T9940] [ 381.485409][ T9940] dump_stack_lvl+0x16c/0x1f0 [ 381.485460][ T9940] should_fail_ex+0x512/0x640 [ 381.485497][ T9940] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 381.485559][ T9940] should_failslab+0xc2/0x120 [ 381.485592][ T9940] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 381.485639][ T9940] ? rcu_is_watching+0x12/0xc0 [ 381.485679][ T9940] ? prepare_creds+0x2c/0x7d0 [ 381.485720][ T9940] prepare_creds+0x2c/0x7d0 [ 381.485760][ T9940] copy_creds+0xa7/0xa50 [ 381.485800][ T9940] copy_process+0x10b1/0x91a0 [ 381.485860][ T9940] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 381.485898][ T9940] ? preempt_schedule_thunk+0x16/0x30 [ 381.485943][ T9940] ? __pfx_copy_process+0x10/0x10 [ 381.485996][ T9940] ? try_to_wake_up+0xa2f/0x1680 [ 381.486042][ T9940] ? __pfx_try_to_wake_up+0x10/0x10 [ 381.486084][ T9940] ? plist_check_head+0xa3/0x150 [ 381.486120][ T9940] ? find_held_lock+0x2b/0x80 [ 381.486183][ T9940] ? wake_up_q+0xb0/0x160 [ 381.486220][ T9940] ? do_raw_spin_unlock+0x172/0x230 [ 381.486266][ T9940] kernel_clone+0xfc/0x960 [ 381.486314][ T9940] ? __pfx_futex_wake+0x10/0x10 [ 381.486347][ T9940] ? __pfx_kernel_clone+0x10/0x10 [ 381.486393][ T9940] ? __pfx_vfs_writev+0x10/0x10 [ 381.486457][ T9940] __do_sys_clone+0xce/0x120 [ 381.486506][ T9940] ? __pfx___do_sys_clone+0x10/0x10 [ 381.486576][ T9940] ? rcu_is_watching+0x12/0xc0 [ 381.486628][ T9940] do_syscall_64+0xcd/0x260 [ 381.486675][ T9940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 381.486708][ T9940] RIP: 0033:0x7fe7cb78d169 [ 381.486734][ T9940] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 381.486766][ T9940] RSP: 002b:00007fe7cc623fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 381.486797][ T9940] RAX: ffffffffffffffda RBX: 00007fe7cb9a5fa0 RCX: 00007fe7cb78d169 [ 381.486819][ T9940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 381.486839][ T9940] RBP: 00007fe7cb80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 381.486858][ T9940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 381.486877][ T9940] R13: 0000000000000000 R14: 00007fe7cb9a5fa0 R15: 00007ffeb67d66b8 [ 381.486918][ T9940] [ 381.733361][ C0] vkms_vblank_simulate: vblank timer overrun [ 382.178945][ T9950] random: crng reseeded on system resumption [ 383.861138][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.869215][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.672707][ T9991] : Can't lookup blockdev [ 385.102395][ T9998] input: jJǸ-9%vlQ J86 as /devices/virtual/input/input12 [ 385.434723][ T9995] svc: failed to register nfsdv3 RPC service (errno 111). [ 385.470458][ T9995] svc: failed to register nfsaclv3 RPC service (errno 111). [ 386.294320][T10010] block nbd8: NBD_DISCONNECT [ 387.306475][T10023] netlink: 4 bytes leftover after parsing attributes in process `syz.1.916'. [ 388.049646][T10041] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 388.140454][T10041] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 388.191619][T10041] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 389.047499][ T5845] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 389.183830][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 389.194536][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 389.207548][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 389.260510][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 389.270939][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 390.867605][T10087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.929'. [ 391.066513][T10064] chnl_net:caif_netlink_parms(): no params data found [ 391.370348][ T5838] Bluetooth: hci4: command tx timeout [ 391.541718][T10064] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.557134][T10064] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.566627][T10064] bridge_slave_0: entered allmulticast mode [ 391.579002][T10064] bridge_slave_0: entered promiscuous mode [ 391.613706][T10064] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.644598][T10064] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.702335][T10064] bridge_slave_1: entered allmulticast mode [ 391.732356][T10064] bridge_slave_1: entered promiscuous mode [ 391.734124][T10099] can: request_module (can-proto-4) failed. [ 391.864305][T10064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.006819][T10064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.158644][T10064] team0: Port device team_slave_0 added [ 392.169567][T10064] team0: Port device team_slave_1 added [ 392.199416][T10099] netlink: 20 bytes leftover after parsing attributes in process `syz.1.932'. [ 392.345050][T10064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.369552][T10064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.437258][T10064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.483387][T10064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.530019][T10064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.600265][T10064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 392.793460][T10064] hsr_slave_0: entered promiscuous mode [ 392.803160][T10064] hsr_slave_1: entered promiscuous mode [ 392.809624][T10064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 392.838877][T10064] Cannot create hsr debugfs directory [ 393.406038][T10064] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 393.450547][ T5838] Bluetooth: hci4: command tx timeout [ 393.627097][T10064] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 393.686923][T10064] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 393.765733][T10064] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 394.667221][T10064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.826569][T10064] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.878095][ T6541] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.885326][ T6541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.009063][ T6541] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.016354][ T6541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.188380][T10064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 395.540463][ T5838] Bluetooth: hci4: command tx timeout [ 395.713018][T10177] sctp: [Deprecated]: syz.3.949 (pid 10177) Use of int in max_burst socket option deprecated. [ 395.713018][T10177] Use struct sctp_assoc_value instead [ 395.807762][T10179] sctp: [Deprecated]: syz.3.949 (pid 10179) Use of int in max_burst socket option deprecated. [ 395.807762][T10179] Use struct sctp_assoc_value instead [ 395.976731][T10064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 396.213381][T10195] HSR: entered promiscuous mode [ 396.839264][T10064] veth0_vlan: entered promiscuous mode [ 396.899100][T10064] veth1_vlan: entered promiscuous mode [ 397.202656][T10064] veth0_macvtap: entered promiscuous mode [ 397.425570][T10064] veth1_macvtap: entered promiscuous mode [ 397.563487][T10064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.574904][T10064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.587092][T10064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.598210][T10064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.610498][ T5838] Bluetooth: hci4: command tx timeout [ 397.636649][T10064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.647848][T10064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.668530][T10064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 397.680061][T10064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 397.713981][T10064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 397.836140][T10064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 397.930645][T10064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.002273][T10064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.086143][T10064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.165773][T10064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.221927][T10064] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.289305][T10064] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.330017][T10064] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.351523][T10064] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.650754][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.671263][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 398.804213][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 398.834096][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.631067][T10230] lo: entered allmulticast mode [ 399.808344][T10229] lo: left allmulticast mode [ 401.152383][T10280] program syz.1.970 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 402.244874][T10301] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(3) [ 403.210871][T10322] netlink: 'syz.1.975': attribute type 4 has an invalid length. [ 404.649920][T10350] netlink: 146 bytes leftover after parsing attributes in process `syz.3.981'. [ 406.674844][T10366] netlink: 12 bytes leftover after parsing attributes in process `syz.3.986'. [ 410.958136][T10438] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 411.082347][T10438] CIFS mount error: No usable UNC path provided in device string! [ 411.082347][T10438] [ 411.116557][T10446] openvswitch: netlink: Message has 94 unknown bytes. [ 411.173574][T10447] openvswitch: netlink: Message has 94 unknown bytes. [ 411.297857][T10438] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 412.194799][T10471] FAULT_INJECTION: forcing a failure. [ 412.194799][T10471] name failslab, interval 1, probability 0, space 0, times 0 [ 412.448061][T10471] CPU: 1 UID: 0 PID: 10471 Comm: syz.1.1006 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 412.448114][T10471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 412.448133][T10471] Call Trace: [ 412.448144][T10471] [ 412.448157][T10471] dump_stack_lvl+0x16c/0x1f0 [ 412.448208][T10471] should_fail_ex+0x512/0x640 [ 412.448244][T10471] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 412.448304][T10471] should_failslab+0xc2/0x120 [ 412.448330][T10471] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 412.448391][T10471] ? proc_create_reg+0xe3/0x180 [ 412.448432][T10471] ? fib_notifier_ops_register+0x32/0x270 [ 412.448479][T10471] ? __pfx_ipmr_net_init+0x10/0x10 [ 412.448521][T10471] kmemdup_noprof+0x29/0x60 [ 412.448555][T10471] fib_notifier_ops_register+0x32/0x270 [ 412.448613][T10471] ? __pfx_ipmr_net_init+0x10/0x10 [ 412.448657][T10471] ipmr_net_init+0x57/0x4e0 [ 412.448698][T10471] ? __pfx_ipmr_net_init+0x10/0x10 [ 412.448739][T10471] ops_init+0x1df/0x5f0 [ 412.448788][T10471] setup_net+0x21e/0x850 [ 412.448835][T10471] ? __pfx_setup_net+0x10/0x10 [ 412.448877][T10471] ? lockdep_init_map_type+0x5c/0x280 [ 412.448913][T10471] ? __pfx_down_read_killable+0x10/0x10 [ 412.448972][T10471] ? debug_mutex_init+0x37/0x70 [ 412.449024][T10471] copy_net_ns+0x2a6/0x5f0 [ 412.449082][T10471] create_new_namespaces+0x3ea/0xad0 [ 412.449142][T10471] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 412.449199][T10471] ksys_unshare+0x45b/0xa40 [ 412.449255][T10471] ? __pfx_ksys_unshare+0x10/0x10 [ 412.449307][T10471] ? xfd_validate_state+0x5d/0x180 [ 412.449346][T10471] ? rcu_is_watching+0x12/0xc0 [ 412.449395][T10471] __x64_sys_unshare+0x31/0x40 [ 412.449445][T10471] do_syscall_64+0xcd/0x260 [ 412.449491][T10471] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.449524][T10471] RIP: 0033:0x7fe7cb78d169 [ 412.449550][T10471] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.449582][T10471] RSP: 002b:00007fe7cc624038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 412.449623][T10471] RAX: ffffffffffffffda RBX: 00007fe7cb9a5fa0 RCX: 00007fe7cb78d169 [ 412.449645][T10471] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 412.449664][T10471] RBP: 00007fe7cb80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 412.449684][T10471] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 412.449704][T10471] R13: 0000000000000000 R14: 00007fe7cb9a5fa0 R15: 00007ffeb67d66b8 [ 412.449746][T10471] [ 414.708442][T10494] Invalid ELF header magic: != ELF [ 416.535201][T10494] netlink: 186 bytes leftover after parsing attributes in process `syz.2.1010'. [ 418.689194][T10568] FAULT_INJECTION: forcing a failure. [ 418.689194][T10568] name failslab, interval 1, probability 0, space 0, times 0 [ 418.720423][T10568] CPU: 1 UID: 0 PID: 10568 Comm: syz.4.1028 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 418.720470][T10568] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 418.720487][T10568] Call Trace: [ 418.720498][T10568] [ 418.720509][T10568] dump_stack_lvl+0x16c/0x1f0 [ 418.720560][T10568] should_fail_ex+0x512/0x640 [ 418.720597][T10568] ? __kvmalloc_node_noprof+0x122/0x600 [ 418.720652][T10568] should_failslab+0xc2/0x120 [ 418.720684][T10568] __kvmalloc_node_noprof+0x135/0x600 [ 418.720763][T10568] ? bucket_table_alloc.isra.0+0x83/0x460 [ 418.720836][T10568] ? bucket_table_alloc.isra.0+0x83/0x460 [ 418.720871][T10568] bucket_table_alloc.isra.0+0x83/0x460 [ 418.720910][T10568] rhashtable_init_noprof+0x41a/0x7e0 [ 418.720951][T10568] ipc_init_ids+0x92/0x280 [ 418.720992][T10568] copy_ipcs+0x4dd/0x610 [ 418.721024][T10568] ? copy_utsname+0xab/0x470 [ 418.721057][T10568] create_new_namespaces+0x20a/0xad0 [ 418.721105][T10568] ? security_capable+0x7e/0x260 [ 418.721173][T10568] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 418.721252][T10568] ksys_unshare+0x45b/0xa40 [ 418.721306][T10568] ? __pfx_ksys_unshare+0x10/0x10 [ 418.721357][T10568] ? xfd_validate_state+0x5d/0x180 [ 418.721396][T10568] ? rcu_is_watching+0x12/0xc0 [ 418.721447][T10568] __x64_sys_unshare+0x31/0x40 [ 418.721496][T10568] do_syscall_64+0xcd/0x260 [ 418.721543][T10568] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.721576][T10568] RIP: 0033:0x7efcfdb8d169 [ 418.721600][T10568] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.721632][T10568] RSP: 002b:00007efcfea03038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 418.721663][T10568] RAX: ffffffffffffffda RBX: 00007efcfdda6080 RCX: 00007efcfdb8d169 [ 418.721684][T10568] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 418.721705][T10568] RBP: 00007efcfdc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 418.721724][T10568] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 418.721742][T10568] R13: 0000000000000000 R14: 00007efcfdda6080 R15: 00007fff58fd7318 [ 418.721783][T10568] [ 423.377038][T10644] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1045'. [ 424.980131][T10671] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1053'. [ 425.921426][T10685] netlink: 'syz.4.1056': attribute type 10 has an invalid length. [ 425.931611][T10685] netlink: 230 bytes leftover after parsing attributes in process `syz.4.1056'. [ 426.304379][T10685] team0: Port device team_slave_1 removed [ 426.848243][T10706] netlink: ct family unspecified [ 427.776314][T10728] svc: failed to register nfsdv3 RPC service (errno 111). [ 427.818539][T10728] svc: failed to register nfsaclv3 RPC service (errno 111). [ 428.853072][T10747] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 428.859905][T10747] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 428.892544][T10747] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 428.921583][T10747] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 428.945160][T10747] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 428.962874][T10747] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 429.008353][T10747] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 430.814309][ T5838] Bluetooth: hci0: command 0x0c1a tx timeout [ 430.895089][ T5838] Bluetooth: hci1: command 0x0c1a tx timeout [ 430.980335][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 430.986483][ T5838] Bluetooth: hci3: command 0x0c1a tx timeout [ 430.993099][ T5845] Bluetooth: hci2: command 0x0c1a tx timeout [ 432.861164][T10807] [ 432.863565][T10807] ====================================================== [ 432.870619][T10807] WARNING: possible circular locking dependency detected [ 432.877670][T10807] 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 Not tainted [ 432.884465][T10807] ------------------------------------------------------ [ 432.891513][T10807] syz.4.1077/10807 is trying to acquire lock: [ 432.897607][T10807] ffffffff9012c228 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0x2042/0x4420 [ 432.906920][T10807] [ 432.906920][T10807] but task is already holding lock: [ 432.914315][T10807] ffff88803134baa0 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 432.924487][T10807] [ 432.924487][T10807] which lock already depends on the new lock. [ 432.924487][T10807] [ 432.934930][T10807] [ 432.934930][T10807] the existing dependency chain (in reverse order) is: [ 432.944236][T10807] [ 432.944236][T10807] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 432.953008][T10807] __mutex_lock+0x199/0xb90 [ 432.958104][T10807] smc_switch_to_fallback+0x2d/0x9f0 [ 432.963970][T10807] smc_sendmsg+0x13d/0x520 [ 432.968968][T10807] ____sys_sendmsg+0xa95/0xc70 [ 432.974332][T10807] ___sys_sendmsg+0x134/0x1d0 [ 432.979666][T10807] __sys_sendmsg+0x16d/0x220 [ 432.984826][T10807] do_syscall_64+0xcd/0x260 [ 432.989906][T10807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.996366][T10807] [ 432.996366][T10807] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 433.004069][T10807] lock_sock_nested+0x41/0xf0 [ 433.009316][T10807] sockopt_lock_sock+0x54/0x70 [ 433.014755][T10807] do_ip_setsockopt+0xfe/0x3240 [ 433.020185][T10807] ip_setsockopt+0x59/0xf0 [ 433.025176][T10807] dccp_setsockopt+0xfa/0x970 [ 433.030426][T10807] do_sock_setsockopt+0x221/0x470 [ 433.036025][T10807] __sys_setsockopt+0x1a0/0x230 [ 433.041429][T10807] __x64_sys_setsockopt+0xbd/0x160 [ 433.047095][T10807] do_syscall_64+0xcd/0x260 [ 433.052155][T10807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.058674][T10807] [ 433.058674][T10807] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 433.065915][T10807] __lock_acquire+0x1173/0x1ba0 [ 433.071317][T10807] lock_acquire+0x179/0x350 [ 433.076361][T10807] __mutex_lock+0x199/0xb90 [ 433.081414][T10807] do_ipv6_setsockopt+0x2042/0x4420 [ 433.087166][T10807] ipv6_setsockopt+0xcb/0x170 [ 433.092415][T10807] tcp_setsockopt+0xa4/0x100 [ 433.097547][T10807] smc_setsockopt+0x1b3/0xa00 [ 433.102776][T10807] do_sock_setsockopt+0x221/0x470 [ 433.108364][T10807] __sys_setsockopt+0x1a0/0x230 [ 433.113781][T10807] __x64_sys_setsockopt+0xbd/0x160 [ 433.119452][T10807] do_syscall_64+0xcd/0x260 [ 433.124514][T10807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.130973][T10807] [ 433.130973][T10807] other info that might help us debug this: [ 433.130973][T10807] [ 433.141222][T10807] Chain exists of: [ 433.141222][T10807] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 433.141222][T10807] [ 433.154834][T10807] Possible unsafe locking scenario: [ 433.154834][T10807] [ 433.162300][T10807] CPU0 CPU1 [ 433.167677][T10807] ---- ---- [ 433.173064][T10807] lock(&smc->clcsock_release_lock); [ 433.178470][T10807] lock(sk_lock-AF_INET); [ 433.185433][T10807] lock(&smc->clcsock_release_lock); [ 433.193353][T10807] lock(rtnl_mutex); [ 433.197354][T10807] [ 433.197354][T10807] *** DEADLOCK *** [ 433.197354][T10807] [ 433.205501][T10807] 1 lock held by syz.4.1077/10807: [ 433.210627][T10807] #0: ffff88803134baa0 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x100/0xa00 [ 433.221206][T10807] [ 433.221206][T10807] stack backtrace: [ 433.227106][T10807] CPU: 0 UID: 0 PID: 10807 Comm: syz.4.1077 Not tainted 6.14.0-syzkaller-12966-ga2cc6ff5ec8f #0 PREEMPT(full) [ 433.227140][T10807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 433.227155][T10807] Call Trace: [ 433.227163][T10807] [ 433.227173][T10807] dump_stack_lvl+0x116/0x1f0 [ 433.227212][T10807] print_circular_bug+0x275/0x350 [ 433.227256][T10807] check_noncircular+0x14c/0x170 [ 433.227300][T10807] __lock_acquire+0x1173/0x1ba0 [ 433.227330][T10807] lock_acquire+0x179/0x350 [ 433.227352][T10807] ? do_ipv6_setsockopt+0x2042/0x4420 [ 433.227388][T10807] ? __pfx___might_resched+0x10/0x10 [ 433.227426][T10807] ? find_held_lock+0x2b/0x80 [ 433.227466][T10807] __mutex_lock+0x199/0xb90 [ 433.227500][T10807] ? do_ipv6_setsockopt+0x2042/0x4420 [ 433.227534][T10807] ? lock_acquire+0x179/0x350 [ 433.227556][T10807] ? do_ipv6_setsockopt+0x2042/0x4420 [ 433.227591][T10807] ? __pfx___mutex_lock+0x10/0x10 [ 433.227626][T10807] ? finish_task_switch.isra.0+0x221/0xc10 [ 433.227663][T10807] ? rcu_is_watching+0x12/0xc0 [ 433.227695][T10807] ? trace_sched_exit_tp+0xde/0x130 [ 433.227736][T10807] ? do_ipv6_setsockopt+0x2042/0x4420 [ 433.227769][T10807] ? rtnl_lock+0x9/0x20 [ 433.227808][T10807] do_ipv6_setsockopt+0x2042/0x4420 [ 433.227845][T10807] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 433.227881][T10807] ? __lock_acquire+0xaa4/0x1ba0 [ 433.227908][T10807] ? __mutex_trylock_common+0xe9/0x250 [ 433.227934][T10807] ? __pfx___mutex_trylock_common+0x10/0x10 [ 433.227960][T10807] ? __pfx___might_resched+0x10/0x10 [ 433.227997][T10807] ? rcu_is_watching+0x12/0xc0 [ 433.228028][T10807] ? trace_contention_end+0xdd/0x130 [ 433.228053][T10807] ? __mutex_lock+0x1ca/0xb90 [ 433.228087][T10807] ? smc_setsockopt+0x100/0xa00 [ 433.228111][T10807] ? __pfx___mutex_lock+0x10/0x10 [ 433.228147][T10807] ? ipv6_setsockopt+0xcb/0x170 [ 433.228179][T10807] ipv6_setsockopt+0xcb/0x170 [ 433.228215][T10807] tcp_setsockopt+0xa4/0x100 [ 433.228244][T10807] smc_setsockopt+0x1b3/0xa00 [ 433.228265][T10807] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 433.228311][T10807] ? __pfx_smc_setsockopt+0x10/0x10 [ 433.228335][T10807] ? errseq_sample+0x53/0x70 [ 433.228368][T10807] ? __pfx_smc_setsockopt+0x10/0x10 [ 433.228391][T10807] do_sock_setsockopt+0x221/0x470 [ 433.228430][T10807] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 433.228482][T10807] __sys_setsockopt+0x1a0/0x230 [ 433.228514][T10807] __x64_sys_setsockopt+0xbd/0x160 [