last executing test programs: 1m32.289512297s ago: executing program 3 (id=1159): socket(0x29, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = epoll_create1$auto(0x8000000000000000) epoll_wait$auto(0x5, 0x0, 0x2, 0x100000000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/msg_next_id\x00', 0x40000, 0x0) keyctl$auto(0xc, 0x2, 0x7, 0xc23a, 0xa) socket(0x5, 0x80000, 0x100) r1 = socket(0x1d, 0x2, 0x7) r2 = socket(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) read$auto_vhost_vsock_fops_vsock(r0, &(0x7f0000000200)=""/166, 0xa6) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r3}, 0x6a) r4 = socket(0xa, 0x3, 0x3a) r5 = openat$auto_cpu_latency_qos_fops_qos(0xffffffffffffff9c, &(0x7f0000006640), 0x2, 0x0) read$auto(r5, &(0x7f0000000080)='/dev/cpu_dma_latency\x00', 0x86c1) sendmsg$auto_NL80211_CMD_ADD_TX_TS(r4, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x0, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@NL80211_ATTR_PBSS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getsockopt$auto(r4, 0x29, 0x37, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) connect$auto(0x3, &(0x7f00000000c0)=@can={0x1d, r6}, 0x18) unshare$auto(0x40000080) sendmmsg$auto(0x3, 0x0, 0x9a6, 0xa00) 1m31.933582098s ago: executing program 3 (id=1163): r0 = socket(0x2, 0x80002, 0x73) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r0, 0x7ff, 0x6, 0x0, 0x100000b, 0x5f, 0x2}, 0x10) bpf$auto(0x19, &(0x7f0000000380)=@link_update={0xffffffffffffffff, @new_prog_fd=r1, 0x7fffffff, @old_prog_fd=r0}, 0x92) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) (async) openat$auto_nsim_dev_max_vfs_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/max_vfs\x00', 0x48002, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket(0x28, 0x1, 0x0) (rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (rerun: 64) unshare$auto(0x40000080) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (rerun: 32) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c890}, 0x800) (async) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) (async) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x400c0}, 0x4040000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x9, &(0x7f0000000180)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0x4004}, 0x7}, 0x5, 0x0) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) (async) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (async) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xffffffffffff7fff, 0x1, 0x948b, 0x2, 0x15f4da0a, 0x400000006, 0x3, 0x300000000000000, 0x9, 0x5, 0x6d3c, 0x5, 0x80000000002]}, 0x0) (async, rerun: 32) r2 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) (rerun: 32) write$auto_seq_oss_f_ops_seq_oss(r2, &(0x7f0000000c80)="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", 0x300) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) r3 = socket(0xa, 0x3, 0x2f) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x11}, 0x24000802) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="5e0027b4839f3015398d3b61", @ANYRES32, @ANYRES32=r3], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) r4 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r4, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1m29.44987862s ago: executing program 3 (id=1175): mmap$auto(0x61d4, 0x400008, 0xdf, 0x9b72, 0x2, 0xffffffffffffc2a9) r0 = socket(0x2b, 0x1, 0x0) ioctl$auto(r0, 0x64c8, 0x1e2) r1 = bpf$auto(0x12, 0x0, 0xcf) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000000)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x1}, 0x800009}, 0x5, 0x20000000) unshare$auto(0x40000080) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/ip_forward_use_pmtu\x00', 0x242, 0x0) sendfile$auto(r2, r2, 0x0, 0x7fffe000) r3 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x8906, 0xd) r4 = io_uring_setup$auto(0x81c5, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_CLOSE(0xffffffffffffffff, 0x4004e502, &(0x7f0000000040)=0x926e) r5 = getsockopt$auto_SO_SNDTIMEO_NEW(0xffffffffffffffff, 0x6, 0x43, &(0x7f0000000080)='/dev/cuse\x00', &(0x7f00000000c0)=0x7) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r5, 0x4004af61, &(0x7f0000000100)=0x4) r6 = waitid$auto_P_ALL(0x0, r5, &(0x7f0000001180)={@siginfo_0_0={0x6, 0x6b, 0x3, @_timer={0x0, 0x8583, @sival_ptr=&(0x7f0000000180)="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"}}}, 0xdc9, &(0x7f0000001200)={{0x0, 0x8}, {0x1, 0x7}, 0x2, 0x10000, 0x81a, 0x6, 0xfff, 0x1, 0xd, 0x3, 0x959, 0x6, 0x8, 0x6, 0x7, 0x6}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f00000012c0)={@inferred=r6, 0x4, 0x5, 0x3, "934ada4a9440778cb77db6350ceefc60a5c3192279c03a9d6b2fb9cce4dedf74f8d86272d49f5a55f6c22607", @raw=0x1}) r8 = prctl$auto_PR_SET_MM_END_CODE(0x9, 0x2, r7, 0x2, 0x5) r9 = fcntl$auto_F_SETSIG(0xffffffffffffffff, 0xa, 0x0) ioctl$auto(r8, 0x9, r9) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001b80), r8) sendmsg$auto_NL80211_CMD_DEL_STATION(r10, &(0x7f0000001d80)={&(0x7f0000001b40)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001d40)={&(0x7f0000001300)={0x190, r11, 0x800, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_CNTDWN_OFFS_BEACON={0xd9, 0xba, "3c937671077ffef661234d23b15daacbb2130b243e367989f61b33d534b7979f59044ba195289282025177c96e33d8013abd00245d425ba3fea31d24a5d1338223dda30e425302a6f5cdf72607b80003d25ec4d39c96d27c7e8da812ea98cbf7d17aadeaaf9a5568aad53689304c40149163792bac27910f1e74ad21aa2a0bf5a85024af36c2848c5f838606aa6ad050fda2525f93c68e60e5d90486b4c1d84a7eeb652e2fe6c523a87ef4faaf709fb76cf954dcc4eda7538fe8c37afaf5fc2dec6c004f8b2185e5c8ba6284493c46de6d5cfeaad3"}, @NL80211_ATTR_DISABLE_EHT={0x4}, @NL80211_ATTR_SCAN_FREQUENCIES={0x48, 0x2c, 0x0, 0x1, [@nested={0x14, 0xb9, 0x0, 0x1, [@typed={0xc, 0x130, 0x0, 0x0, @u64=0xffffffffffffff7f}, @nested={0x4, 0x131}]}, @nested={0x2f, 0x131, 0x0, 0x1, [@generic="ee6e357b7cc585de40ff5909193e02828cd4d31a16eafc48363f282c4b2cb0", @typed={0xc, 0xa1, 0x0, 0x0, @u64=0x3}]}]}, @NL80211_ATTR_CNTDWN_OFFS_BEACON={0x4f, 0xba, "baa9ddbdb5d100d9a23fc287c8de57fdd2e8ee1b264015c40752228662593ae7aded7b955ad5ca255b0f8a0836e4de8c14eb463a226715d5c6c0847dda2faf2fd30b6519011f1f12cfae96"}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x190}, 0x1, 0x0, 0x0, 0x4004000}, 0x20000000) sendmsg$auto_NL80211_CMD_DISASSOCIATE(r3, &(0x7f0000000680)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0xb711ac006e8b40ca}, 0xc, &(0x7f0000000640)={&(0x7f0000000100)={0x514, r11, 0x4, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xf}, @NL80211_ATTR_BEACON_HEAD={0x4f4, 0xe, "cd04ff1b0c331a03c9ba0bfb34670e64d0663fead3de7be50efd2ed330ec954463f40d9e17cf7f63d34cbf9523867313090bfe7aaca54e04cc2619c1d186612b3cb2c4bbc228d4d8cc86239ccc2507da14e152646d89f0e509c0ba98a90867f7959ca43d723ecab865011f105363e1ff10a7dfc7818f6b47f59430bdf138c5cbdf496ea457a1579aaa9b0912470fd10cb0d7dd6956b17ac95e816ba1a87be01cdda0d99b256a78dbf0ef68660c48ef0273a660c593c80bd1b4be14dc8962e9f18bd1c79f1688c16508adf9241a4b26c1805b2cb1f3b6e94b00cdccdef47c5d055f42c65bcd2805a26ff0a29679f143e76d2ad0c4658c5000dc7abb6df53e47b98bd27d3f373661c42528f431967fdbc7b539306bdf4b2378320c0f34bd71b02e0f6c97e0885514a3e2e0aa7a88f6134d47a24b0662302d0c45de87ac26c646bee7079ed974b4ba7ea46caab9d60b29b7181770ca7bb7f81c6e24ca6a45453caea39aa214c1931fd2567c4b2ecbadc2a7575b9fed8f4c6750051e641cb5ce81080e0e187418d6b47e2f7907018dfc68388c96ac97ce9d536bef17f69dcba80e7098cfae47884b13e6d29c6e57711722f3282fd8ce02855ab2b22022377a5554c653d8ef75c0af4352bed9841e87a09b995055140c1264a601df37fd482147904239bfe8a32a62d28210ad37462d1fa7ef7c38bd3069d965089c29af24cda49330fea68c5e260fee8b846a23e636c1c7c9f545c50dc74fde78d6b5c8aa4dd9630cbf5fdae1c4ab85e3df85393e2eafc595b336da03553377dcb303ebc43cc39fca789ca60484140d6d14fb7ddb4338546738e52896509dd51c323c543e26ebc4f7bb17337cfe95bac2d7791ffed254aa0d15e28476f23c782ecf844f7c1b60f1269c64f9b6bd0eaf3a9dc4b388a328e18a140d89c41a67da80a5493ad888ee27a4ea50516ebfa37520f212b4c3c2d2822252eb331cd078311ca68c351760d90eb890cc6d4a0dcd3dbfb4d231759b5c54646e339f70042bf638e7ef9675564d6c7ae2bef96bae6afe509ce84a4558f253401a17283f54a42b31047c4ee0c10d3c849055d3e29ae2b556f80590bc6dbca607d75f6c202731e0a2499946ad4820b2539abde5dc9589b5e625d0d9e2f5739be367ec11ce97aef786b1ab642dbb8bb425d87a92a72c5ad6e6cd569a65b67faa0df548600b90d514e9e7cf6872198af1e03ab52460cdb261fa45266deabd02b37930eb8212c7220eedcfe6addd708283ba7aacc30ccc06df5a0e7afed7722fae39c9e76a5ce7eb1bf5192570d94eeae6c992b2e7fd78d4e67fed4f0211e4b2a540bc5a1bcd26b8c0e444bc7cf908ff8126bdf5fff4afef4b8798f1ba00c4228066132fbafc97741e43de18eee6431c65637387a7b846b8a925b2eff02371be85f9118f55c80901d5ee68938515ed6663ec10c95eb08a678afdce72d3bff7e40164b46924d667f49468761a3c0b11c183f9dfc6d42ccf6a849f7bceb7ce4ee4b902a9afc9f8413c8a941e2318fb2a85b5d5a2508f3c306a300733e8f2914d627b305d95aafb81926373107d7b670949b0a9b482a6871a7e6099530bb59f33e154e626ffc3ecb0ac2b38af0dd1bbc4210e73d90bcd47bd4d05ed730825db8c361736f054b0184043e3935efa3e3b9b12f926d56febef70f4582ff09600b311a2511eaeba49389a4ef119bb418e29fca9a96157efd61a62e17a985d64bb4e4eb30c9609416bf130281d1b0be86ed561b6491ccb0de6770b46aebb0791a0920e25a779"}]}, 0x514}, 0x1, 0x0, 0x0, 0x1}, 0x4004) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) write$auto(0x3, 0x0, 0xfffffdef) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xf90000, 0x0, 0xfffffffffffffffd) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r4) 1m25.619558375s ago: executing program 3 (id=1189): mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) mlockall$auto(0x7) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) madvise$auto(0x2000, 0x20499d, 0x9) init_module$auto(0x0, 0xffff9, 0x0) 1m23.692360395s ago: executing program 3 (id=1193): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop7/queue/rq_affinity\x00', 0xe3102, 0x0) sendfile$auto(r0, r0, 0x0, 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) sendmsg$auto_NL80211_CMD_GET_MPP(0xffffffffffffffff, 0x0, 0x880) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(0xffffffffffffffff, 0x0, 0x24004054) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/devices/platform/dummy_hcd.2/usb3/removable\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/17, 0x11) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000080)='/dev/input/mouse0\x00', 0x0, 0x0) sysfs$auto(0x2, 0x10000000000048, 0x0) 1m22.192054904s ago: executing program 3 (id=1199): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x180, 0x0) ioctl$auto(r1, 0xc0b45545, 0xffffffffffffffff) socket(0xa, 0x5, 0x0) open(0x0, 0x22240, 0x154) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8d1}, 0x4000050) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') 1m6.682299001s ago: executing program 32 (id=1199): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/controlC1\x00', 0x180, 0x0) ioctl$auto(r1, 0xc0b45545, 0xffffffffffffffff) socket(0xa, 0x5, 0x0) open(0x0, 0x22240, 0x154) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, 0x0, 0x80080, 0x0) sendmsg$auto_ILA_CMD_GET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8d1}, 0x4000050) mknod$auto(&(0x7f0000000180)=':,\x00', 0xc9, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, &(0x7f0000000200)=&(0x7f00000001c0)=':,\x00') 56.669499154s ago: executing program 2 (id=1283): openat$auto_minstrel_ht_stat_fops_rc80211_minstrel_ht_debugfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy5/netdev:wlan0/stations/08:02:11:00:00:01/rc_stats\x00', 0x8001, 0x0) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) r0 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000000c0), 0x20140, 0x0) mmap$auto(0xc000000000000000, 0x2020009, 0x6, 0xeb1, r0, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r1 = socket(0x29, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) rseq$auto(&(0x7f0000000100)={0xe, 0x401, 0x0, 0x6, 0xfffffffc, 0x2}, 0x8000, 0x0, 0x8) adjtimex$auto(0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmdt$auto(0x0) mkdir$auto(&(0x7f0000000180)='}[,&*}\x00', 0x6) statx$auto(0xffffffffffffff9c, &(0x7f0000000000)='}[,&*}\x00', 0x0, 0x45d9, 0x0) write$auto(0x3, 0x0, 0xfffffdef) openat$auto_nsim_dev_trap_fa_cookie_fops_dev(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/trap_flow_action_cookie\x00', 0x2202, 0x0) write$auto(0x3, 0x0, 0x81) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000440)={'netdevsim0\x00'}) sendmsg$auto_BATADV_CMD_GET_DAT_CACHE(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000700)={0x1c, 0x0, 0x99bc9625bdb7e757, 0x70bd2d, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) sendmsg$auto_BATADV_CMD_GET_ROUTING_ALGOS(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x2, 0x70bd28, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x10040) shmctl$auto_IPC_INFO(0x8, 0x3, &(0x7f0000000400)={{0x80000000, 0x0, 0xffffffffffffffff, 0x6, 0x2, 0x2, 0x4}, 0x3, 0x2, 0x7, 0x9, @inferred=0xffffffffffffffff, @raw=0x5, 0x9, 0x0, 0x0, &(0x7f0000000300)="14373caeb73a3efb35b643ecd9fa055ddacb96f9f3b12c8b75e2a1fa226a624bf703d16d1d0094679219bbaba9aee96a076810ff8f87f9337b46788ce565e7ce12b829685662"}) sendmsg$auto_NL80211_CMD_GET_REG(r2, 0x0, 0x20000090) bind$auto(0x3, 0x0, 0x68) sendmmsg$auto(r1, 0x0, 0x9a6, 0x3ec0) fcntl$auto(0x3, 0x4, 0xa553) semctl$auto(0x1ff, 0x2, 0x13, 0x1) sendmmsg$auto(0x3, 0x0, 0x2, 0x9) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) open(0x0, 0x261c2, 0x84) close_range$auto(0x2, 0x8000, 0x0) 55.769332883s ago: executing program 2 (id=1288): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xf6f6, 0x8000) (async, rerun: 64) setrlimit$auto(0x8, 0x0) (async, rerun: 64) close_range$auto(0x0, 0xffffffffffffffff, 0x2) (async) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async, rerun: 64) socket(0x22, 0x2, 0x1) (rerun: 64) r0 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r0, 0x107, 0x1, 0x0, 0x4) (async, rerun: 32) socketpair$auto(0xfffffffe, 0x8, 0x2, 0x0) (async, rerun: 32) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x141800, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) (async) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x101, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) (async) ioctl$auto(0x3, 0xae41, r2) (async) ioctl$auto_KVM_CREATE_VM(r1, 0x4048aecb, 0x0) 55.156159288s ago: executing program 2 (id=1292): mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x8000000401, 0x8000) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev5\x00', 0x280, 0x0) ioctl$auto(0x3, 0xc0585605, 0x38) connect$auto(0xffffffffffffffff, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$auto(0x3, 0x40a0ae49, 0x38) fcntl$auto(0x2, 0x11, 0x1000000000000000) 54.866323479s ago: executing program 2 (id=1295): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) symlink$auto(0x0, &(0x7f0000000100)='\xfb\x00') readlink$auto(&(0x7f0000000b00)='\xfb\x00', 0x0, 0x800) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) close_range$auto(0x0, 0x5, 0x0) 54.449281785s ago: executing program 2 (id=1296): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_timens_offsets_operations_base(0xffffffffffffff9c, &(0x7f0000002440), 0x80c02, 0x0) write$auto(0x3, 0x0, 0x5c8) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv6/conf/all/addr_gen_mode\x00', 0xa0202, 0x0) mmap$auto(0x0, 0x2020009, 0x7300, 0xeb1, r0, 0x8000) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/kallsyms\x00', 0x101000, 0x0) pread64$auto(r1, 0x0, 0x10000000000b, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x4000, 0x0) r2 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) ioprio_set$auto(0x3, 0x0, 0x4b34) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8081, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) open(0x0, 0xc0000, 0x1) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) fcntl$auto(0x0, 0x407, 0x100000) madvise$auto(0x4, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) mbind$auto(0x9, 0x3ff, 0x6, 0x0, 0xd, 0x3) read$auto_proc_pid_maps_operations_internal(r2, &(0x7f00000010c0)=""/4096, 0x1000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) futex_waitv$auto(&(0x7f0000000180)={0x3fb, 0x6, 0x2, 0xfff}, 0x3, 0xbffffffc, 0x0, 0x81) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000826bd7000fbdbdf2503000000cee5bb3e00020000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a00010000000000000000000a000100bbbbbbbbbbbb0000060007000500000008000300050000000a000100ffffffffffff0000"], 0x6c}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 53.775156017s ago: executing program 2 (id=1299): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000007b05b9b64d4eec27dfbbcc9136299ab5f5319b0fca3b84debe75f3a465804ff00d423d9035af61e26a7a6f747dfd792988e1b65f60b55b190cd1fabaaa61b5aa47ef9cbebbd25ecdb9a3dc", @ANYRES16=r1, @ANYBLOB="010326bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x28044004) read$auto(0x3, 0x0, 0x400000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000040), r2) sendmsg$auto_NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="918935a4718124000008", @ANYRES16=r3, @ANYBLOB="04002bbd7000fbdbdf250600000008000300080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x0) sendmsg$auto_NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00082bbd7000fddbdf25030000000800020080000008080002005300000008000300070000000b0001006e657464657600000f0001002f6465762f6164737031000008000200030000000800030001000000"], 0x58}}, 0x4044080) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @private=0xa010100}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0x80000541b, 0x38) write$auto(0x3, 0x0, 0xffd8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x28, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x2) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, 0x0) 38.642597484s ago: executing program 33 (id=1299): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001700), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000001840)={0x0, 0x0, &(0x7f0000001800)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000007b05b9b64d4eec27dfbbcc9136299ab5f5319b0fca3b84debe75f3a465804ff00d423d9035af61e26a7a6f747dfd792988e1b65f60b55b190cd1fabaaa61b5aa47ef9cbebbd25ecdb9a3dc", @ANYRES16=r1, @ANYBLOB="010326bd7000fedbdf2501000000"], 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x28044004) read$auto(0x3, 0x0, 0x400000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000040), r2) sendmsg$auto_NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10800000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="918935a4718124000008", @ANYRES16=r3, @ANYBLOB="04002bbd7000fbdbdf250600000008000300080000000800020007000000"], 0x24}, 0x1, 0x0, 0x0, 0x4050}, 0x0) sendmsg$auto_NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="00082bbd7000fddbdf25030000000800020080000008080002005300000008000300070000000b0001006e657464657600000f0001002f6465762f6164737031000008000200030000000800030001000000"], 0x58}}, 0x4044080) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0xffffffffffffffff, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @private=0xa010100}, 0x54) setsockopt$auto(0x3, 0x10000000084, 0x7b, 0x0, 0xd) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto(0x3, 0x80000541b, 0x38) write$auto(0x3, 0x0, 0xffd8) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x28, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x2) socket(0xa, 0x2, 0x73) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(0x3, 0x0, 0x100082) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r4, 0x40045010, 0x0) 15.325623714s ago: executing program 1 (id=1456): unshare$auto(0x40000080) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x11, 0xffffffffffffffff, 0x62) r0 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r1, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv6/conf/ip6gre0/ignore_routes_with_linkdown\x00', 0x202, 0x0) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x20342, 0x0) write$auto(0xca, &(0x7f00000000c0)='\x04>2\x04!\xe2\x00\x94\xf2\xa2\x00\x00', 0x7e) getresuid$auto(&(0x7f0000000080)=0x7, &(0x7f00000000c0)=0x8000, 0xfffffffffffffffc) mmap$auto(0x0, 0x2, 0x3, 0xffffffffffff8010, 0xfffffffffffffffa, 0x8000) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(r3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(r2, r2, 0x2) r4 = bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, r0, 0x7ff, 0xfd, 0x0, 0x3, r0, 0x8000000000000000, 0x3}, 0x6f5) r5 = socket(0xa, 0x2, 0x88) mmap$auto(0x0, 0x400008, 0xdf, 0x100000009b72, 0x2, 0x8000) mincore$auto(0x9, 0x8005, 0x0) setsockopt$auto(r4, 0x400, 0x21, 0x0, 0x28) getsockopt$auto(r5, 0x76e80000, 0x29, &(0x7f0000000280)='/proc/sys/net/ipv6/conf/ip6gre0/ignore_routes_with_linkdown\x00', &(0x7f0000000300)=0x8) mmap$auto(0x0, 0x20009, 0xe2, 0xeb2, 0x405, 0x8000) r6 = fcntl$auto_F_SETLK(r3, 0x6, 0xffffffffffffffff) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r6, 0x1, &(0x7f0000000140)="3bbf8f1447bd1f9d7ed189fb1185045c95ea902632d2d95b76f04cb3980d30318ea5f9c2f4777e2fb5ff82877ed1680c03cda2cb0ef89851f6f5996f00243a368e32027a031c76835c1be992901e076224f16f5c335ae25fa2c308025f568de71c14dc75f51ea77380469a743026cea357ea79d0ccc1facfe16e3001229302ab224173192478519b3d9ee7f77cbe57557590b7a81ba6b613950fbca82dc2bc1acb") r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/mm/lru_gen/min_ttl_ms\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, &(0x7f00000000c0)=""/97, 0x61) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) 12.657940157s ago: executing program 1 (id=1464): mmap$auto(0x0, 0x2020009, 0x3, 0x9000000eb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x1, 0x84) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) symlink$auto(&(0x7f0000000300)='\\\':.\x00', &(0x7f0000000100)='\xfb\x00') readlink$auto(0x0, 0x0, 0x800) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x28) sendto$auto(0x3, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) close_range$auto(0x0, 0x5, 0x0) 11.269455262s ago: executing program 1 (id=1468): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) setresgid$auto(0x800, 0xee01, 0xffffffffffffffff) setregid$auto(0xee01, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/nbd6/trace/enable\x00', 0xe3102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) write$auto(0x3, 0x0, 0xfdef) mbind$auto(0x0, 0x2, 0x2, 0x0, 0x7, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x2003f0, 0x15) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x2841, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x8000) readv$auto(r0, &(0x7f0000000a80)={0x0, 0x10002}, 0x401) 8.340157357s ago: executing program 5 (id=1475): unshare$auto(0x40000080) r0 = openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/block/nbd5/hctx0/cpu1/read_rq_list\x00', 0x2, 0x0) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r0, &(0x7f0000000340)=""/123, 0x7b) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x400c890}, 0x800) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_TASKSTATS_CMD_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x400c0}, 0x4040000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x9, &(0x7f0000000180)={0x0, 0xc4}, 0x3, 0x0, 0x0, 0x4004}, 0x7}, 0x5, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) sendfile$auto(r1, r1, 0x0, 0x3) 7.502490201s ago: executing program 4 (id=1477): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) socket(0x22, 0x2, 0x1) r1 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), r3) sendmsg$auto_L2TP_CMD_SESSION_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)={0x14, r4, 0xa8d6590ce5a32b59, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000010}, 0x24008000) close_range$auto(0x2, 0x8, 0x0) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000080), 0x10000, 0x0) r5 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x101, 0x0) ioctl$auto_KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r5) r6 = socket(0xa, 0x3, 0x3a) ioperm$auto(0x3, 0x5, 0x149) process_madvise$auto(0x1, 0xfffffffffffffffc, 0x0, 0x14, 0x4000) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/pressure/memory\x00', 0x48141, 0x0) poll$auto(&(0x7f0000000000)={r8, 0x8, 0x85}, 0x6, 0x2) ioctl$auto_SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000300)="35dfadec099478602795e88ade3fbaa7bb23d18af79ec5040350164bd38851a418bc0c0e912f9314bf184f5e1d367d0b8bd71f2434e46533e785d7c463a35ffef316b398ed7299917a9b5a4e20de9678c1c92a6ead11ee5280b5697c43a8f7cc9c5d462aff8e608695d29905a08b8042391da9c526ee95886ff384cd890e5fde2dc0e49d1604e7c181ac48eec7efa2f53ebaee7fc358587a13dc39760843f57a0029851441eba1533ea5865bf1e92da5f10812a5ef0cce2f5f5a5f70285caeb5025f1e6333541eb55df2cbd229500fbbcdea897ed8d8731d7e1b0aad001cd086cb1cbaf98172e40a") r10 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000000), r7) write$auto_drm_crtc_crc_control_fops_drm_debugfs_crc(r1, &(0x7f00000000c0)="65ccb112a6da94d0b843f547bbd22ed1bb0a6e776cd3b74bb64208bffd7df81a678180c4895a7a1a78eff71e1d5ba73939719a137d0b871ebf453e8582ea593fabdafe507d9ea98492f23d70f1e4f5bff5bd619970a94a1eb7478d65", 0x5c) sendmsg$auto_IOAM6_CMD_ADD_SCHEMA(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000007c0)={0x20, r10, 0x1, 0x70bd2a, 0x25dfdbfb, {0x4, 0x0, 0x900}, [@IOAM6_ATTR_SC_ID={0x8, 0x4, 0x4}, @IOAM6_ATTR_SC_DATA={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x8010) fstat$auto(r6, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0) ioctl$auto_KVM_CREATE_VM(r9, 0xae01, 0x0) mmap$auto(0xf000, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 6.890227047s ago: executing program 4 (id=1478): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x1, 0x8000) (async) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) ioctl$auto_TIOCSETD2(r0, 0x5423, &(0x7f0000000000)="8d22449fbae2e661138df4de6b4db8b1b7fc0579d53d6963ea2f4d4f895ed899d4a549a0f54f0a6187f179ea732240bbd002a14f1e77888157d3606258d149369e2bc10de901dbf5a434169a28f3825edbcbf4546fd19d3adb498267be484c2a2076c83781b5ee4d6b7b") (async, rerun: 64) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) getgroups$auto(0x6, 0x0) 6.609863218s ago: executing program 5 (id=1479): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cec10\x00', 0x400, 0x0) ioctl$auto_CEC_G_MODE(r0, 0x80046108, &(0x7f0000000240)=0x9) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0xa, 0x6, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) bpf$auto(0x3, 0xfffffffffffffffe, 0x7) (async) getsockopt$auto(0x100000006, 0x0, 0x33, 0xfffffffffffffffe, 0x0) (async) socket$auto(0x8, 0x9, 0x0) 6.224016197s ago: executing program 5 (id=1480): r0 = prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x6, 0x7) write$auto(r0, &(0x7f0000000000)='\'\x00', 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x108000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1fe, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r2 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r2, 0x8954, 0x0) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, 0x0, 0x40000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r4 = semctl$auto_SEM_INFO(0x3, 0xfffffff9, 0x13, 0x8) prctl$auto_PR_SET_MM_START_STACK(0x46, 0x5, r4, 0xcd8, 0x100) madvise$auto(0x0, 0x20499d, 0x9) ioctl$auto(0xffffffffffffffff, 0x40046205, 0x9) socket(0x10, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) keyctl$auto(0x1d, 0x725fffffffb, 0x69c9, 0x2, 0x6) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x1c, r6, 0x1, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_REG_CUSTOM_REG={0x8, 0xc, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4044820) ioctl$auto_AUTOFS_IOC_PROTOVER(r1, 0x80049363, &(0x7f00000000c0)=0x7) 5.858122242s ago: executing program 4 (id=1481): socket(0xa, 0x2, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) io_uring_setup$auto(0x6, 0x0) (async) setsockopt$auto(0x400000000000003, 0x29, 0x22, 0x0, 0x56b) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010031bd7000fddbff250c00000018000380140003800c09000000000221", @ANYRES32=0x0, @ANYBLOB="04001e801800018014000200776c616e3000"/28], 0x44}}, 0x24048084) 5.570256878s ago: executing program 1 (id=1482): syz_clone(0x80881000, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x11, 0x2, 0x1, 0x1000, 0x0, 0x0, 0x0, 0xfa98, 0xfffffffffffffffb, 0x7fffffffffffffff, 0x4, 0x1, 0x7fffffffffff7ffb, 0x5f3, 0x7, 0x4, 0x6}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20000800}, 0x4) socket(0x10, 0x2, 0x0) r0 = socket(0xa, 0x5, 0x84) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, 0x0, 0x101000, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) close_range$auto(0x0, 0xe903, 0x2) socket(0x1e, 0x4, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) setsockopt$auto(0x2, 0x1, 0x50, &(0x7f0000000000)='\x00', 0x2000040) sendto$auto(r0, 0x0, 0x2000f, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x4008004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) open(&(0x7f0000000000)='./file0\x00', 0x442100, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000ac0), 0xffffffffffffffff) sendmsg$auto_TCP_METRICS_CMD_GET(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000b00)={0x14, r3, 0x89c1beb01534ff9b, 0x70bd29, 0x25dfdbfb}, 0x14}}, 0x0) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x54, r3, 0x1, 0x70bd27, 0x25dfdbfb, {}, [@TCP_METRICS_ATTR_ADDR_IPV4={0x8, 0x1, @loopback}, @TCP_METRICS_ATTR_ADDR_IPV6={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, @TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @loopback}, @TCP_METRICS_ATTR_SADDR_IPV4={0x8, 0xb, @multicast1}, @TCP_METRICS_ATTR_SADDR_IPV6={0x14, 0xc, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x54}, 0x1, 0x0, 0x0, 0x14}, 0x20000000) 5.284308622s ago: executing program 4 (id=1483): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r1 = socket(0x2, 0x3, 0x2) (async, rerun: 32) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) (async) sendmmsg$auto(0x3, 0x0, 0x3, 0x7000000) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r1) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000001c0)={'veth1_macvtap\x00'}) r3 = socket(0x2, 0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r4, 0xfd}, 0x6a) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r5) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$auto_WG_CMD_GET_DEVICE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x14, r6, 0x703, 0x70bd27, 0x25dfd9fc}, 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x4) (async) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)={0x44, r2, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'erspan0\x00'}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x4010000) (async, rerun: 64) ioctl$auto(0x3, 0x541b, 0x10000000000402) (rerun: 64) 5.139165726s ago: executing program 0 (id=1484): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r0, 0x40045010, &(0x7f00000000c0)) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/v4l-subdev6\x00', 0x169000, 0x0) ioctl$auto(r1, 0x8008563f, 0xffffffffffffffff) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) socket(0xa, 0x1, 0x0) ioctl$auto(0x3, 0x894b, 0x38) landlock_add_rule$auto(r1, 0x1, &(0x7f0000000080)="5c4d0a5913538d42957f84ef1f59894a63a69cfbec99be3430937b076476f15c9ffd602a9c1be666253ed78e5c484a48eed9bc457ac23278c4605ede9d", 0xff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000600)='/sys/devices/platform/dummy_hcd.7/usb8/speed\x00', 0x101100, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89b1, &(0x7f0000000040)={'xfrm0\x00'}) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000640)=""/177, 0xb1) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000022c0)='/sys/devices/system/memory/memory10/removable\x00', 0x8500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/4096, 0x1000) 4.841845601s ago: executing program 0 (id=1485): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x100000000008000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty46\x00', 0x0, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/scsi/scsi\x00', 0x400, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/platform/reg-dummy/regulator/regulator.0/suspend_standby_state\x00', 0x700, 0x0) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/devices/platform/reg-dummy/regulator/regulator.0/suspend_standby_state\x00', 0x700, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000000c0)=""/4096, 0x1000) ioctl$auto(r0, 0x5600, 0x0) (async) ioctl$auto(r0, 0x5600, 0x0) 4.769291156s ago: executing program 1 (id=1486): unshare$auto(0x40000080) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) (async) r0 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) (async) fcntl$auto(r0, 0x400, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/i8042/serio0/force_release\x00', 0xc2082, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) (async) write$auto(0x3, 0x0, 0xfffffdef) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x3, 0x2000000400008, 0xdf, 0xdc, 0x2, 0x8000) munmap$auto(0x2, 0x1a525c0f) (async) munmap$auto(0x2, 0x1a525c0f) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/001/001\x00', 0x883, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x8, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0xc1, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/\x00'/12, 0xa3d9) (async) write$auto(r1, &(0x7f0000000400)='/\x00'/12, 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000140)={[0x1ff, 0x7, 0x11, 0x1, 0x948b, 0x4, 0x15f4da0c, 0x3, 0x403, 0x62, 0x1008000001f, 0x7, 0x6d3f, 0x9, 0x8, 0xfffffffffffffffd]}, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x2002, 0x0) sendfile$auto(r2, 0xffffffffffffffff, 0x0, 0x1) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r3, 0x0, 0x400018) (async) getdents$auto(r3, 0x0, 0x400018) timer_create$auto(0x2, 0x0, 0x0) (async) timer_create$auto(0x2, 0x0, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x3, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x29, 0x800, 0x100) (async) socket(0x29, 0x800, 0x100) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mmap$auto(0x6, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000002) move_pages$auto(0x1, 0xf54, 0x0, 0x0, 0x0, 0x8000000000000000) getpgid(0x0) (async) getpgid(0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x0) socket(0x26, 0x3, 0x6) 4.352109729s ago: executing program 4 (id=1487): socket(0x11, 0x2, 0x3a) (async) r0 = socket(0x2b, 0x1, 0x1) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x80000, 0x0) socket(0x1d, 0x3, 0x1) (async) r2 = ioctl$auto_dma_heap_fops_dma_heap(r1, 0xffffffffffdffe00, &(0x7f0000000140)=';') lseek$auto(r0, 0x7fffffffffffffff, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) (async, rerun: 32) ioctl$auto_BLKTRACESETUP(r2, 0xc0481273, &(0x7f0000000180)={"3349f550ffa0251bbec668b956274fee0b1ef10b96af9ebe50585d4e3eb86c95", 0xd8b3, 0x7, 0x4, 0x6, 0x9, 0xffffffffffffffff}) (rerun: 32) capget$auto(&(0x7f00000000c0)={0x8000, r4}, 0x0) (async) read$auto(r3, 0x0, 0x20) (async) ioctl$auto_SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, 0x0) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) openat$auto_clk_summary_fops_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/clk/clk_summary\x00', 0xe0400, 0x0) (async) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) (async) timerfd_create$auto(0x2, 0x0) (async, rerun: 64) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x0, 0x0) (rerun: 64) unshare$auto(0x40000080) 4.199601202s ago: executing program 0 (id=1488): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x48, 0x80000000fffffffd, 0xfbc, 0x0, 0x0, 0x0, 0x6, 0x6, 0x8, 0x5, 0x7fffffff, 0x0, 0xffffffff80000000, 0x5, 0x61, 0x9}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001180)={0x30, r2, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x7fffffffffffffff}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/pci0000:00/0000:00:01.0/subsystem_vendor\x00', 0x80, 0x0) r5 = openat$auto_nsim_nexthop_bucket_activity_fops_fib(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x1, 0x0) write$auto(r5, &(0x7f0000002c80)='/sys/kernel/debug/netdevsim/netdevsim2/fib/nexthop_bucket_activity\x00', 0x100) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000000c0)=""/255, 0xff) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) timerfd_settime$auto(r0, 0x9, 0x0, &(0x7f0000000040)={{0x7, 0x400}, {0xfff, 0x7f}}) 3.987493422s ago: executing program 5 (id=1489): syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000d80), 0xffffffffffffffff) r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0x60800, 0x0) write$auto(0xc8, 0x0, 0x4040f6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000001340), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002bbd7000fcdbdf25060000000400100008000c0001000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'wg0\x00', 0x0}) mmap$auto(0x0, 0x10000000400008, 0xdd, 0x9b72, 0xffffffffffffffff, 0x8000) rseq$auto(&(0x7f0000000000)={0xe, 0x400, 0x0, 0x20006, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xe1, 0x9b72, r0, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) brk$auto(0xffffffffffffff66) r6 = fanotify_init$auto(0x65, 0x2) sysfs$auto(0x2, 0x7, 0x0) fsopen$auto(0x0, 0x1) mount$auto(&(0x7f00000000c0)='wg2\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='[%&(+&!\x00', 0x3, &(0x7f0000000300)="380e8cd07d0a497f6227ba332eb50ca364110f616d75b2d708961883b7d2daa1698feb80ac94adb28263f32bb66cd083cdec93089118eccb28ad7c84cbc3109371f9a5b5bc2e73bb510704407c267a2147be2961e2a78ae08ee886ad9feecfe259a2370fcf0258258e8d9dc9c3e8d1e7503e04b5bc9b07e1348d6b8df5aa57a90ebaaf5181c60cb20186264c905670b4715197b69e139801cdaef4c6c1e6346e85eb627ad55f4c7e19d052cb789fca702dbc536f886002d2a65c1d1b02d8c6bac277c9350a9cf9687b7764eed5e8e47d0d015b154f9db036045300b8b6b7ced4249d04cc7961136ee5b48bc6c0066989f73781826632304e3978856a79363e936d47ab00fea808e1") kcmp$auto(0x1, 0x1, 0x0, 0x100000004, 0x100000001) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) syslog$auto(0x3, &(0x7f0000000080)='..\x00k\xac\x8c\x1d\x0e\x98\x80\xd2\xaf\xa1\xf2\x1e\xe1R1\xa2\x8e\xce\xa0\x17\bI3\'\xc5tw\xd7\x1d\xa6\xf4#+\xfa\xd7\x01\xb9j<\v\xf47\n\xa7\xd2\x8b\x11e1\xb3\xfdd\x04\xa9 1q\x97\xc4,\xa9^\xc1\xb6\xa1q\x0f\xd1\x013\x87l\xb9\x1e\x05\x90\xa2', 0xda) r7 = gettid() openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) read$auto(0x3, 0x0, 0x0) r8 = syz_open_procfs$namespace(r7, &(0x7f0000000080)) getdents$auto(r8, 0x0, 0x18) sendmsg$auto_WG_CMD_SET_DEVICE(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="d94929bd7000fbdbdf2501000000100008800c00fc8008002200", @ANYRESOCT=r6, @ANYBLOB="ec940100", @ANYRES32=r5, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20000811}, 0x4000010) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r0, 0xc4c85513, &(0x7f0000000840)={{@raw=0x8, 0x7, 0xba28, 0x0, "708c58271a7985a7f5ed0dd58af8d149fc53d81fd4a7553c2ff48b48a8a57689adcc1ca6d2cbfa93b50590c9", @raw=0xd}, 0x0, @bytes=@data="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", "fa491e08108961dd5708680f1134935851612a52d629535f54f3832490fc4e7f79daef312b3df3307044713a4801d409aefe3f932f78fc311771094e769c0095f94ee6d74f2517f34a0bbbf502bf3392ac4d93bde5f733ba936c0890312cf035bc44117db9b683eedc5e02a703fc82750d8d6ebac0c3019ef8e6c1eecea33a59"}) socket$nl_generic(0x10, 0x3, 0x10) 1.613919042s ago: executing program 5 (id=1490): mmap$auto(0x0, 0x400004, 0xe3, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram11\x00', 0x4eb02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_RTC_PARAM_GET(r2, 0x40187013, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, 0x0, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$auto(r1, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0x7fffffff) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, r0, 0x0) 1.040439079s ago: executing program 0 (id=1491): mmap$auto(0x0, 0x400004, 0xe3, 0x9b72, 0xffffffffffffffff, 0x0) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ram11\x00', 0x4eb02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$auto_RTC_PARAM_GET(r2, 0x40187013, 0x0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x54, 0x0, 0x1, 0x70bd2d, 0x25dfdbf9, {}, [@L2TP_ATTR_PROTO_VERSION={0x5, 0x7, 0x58}, @L2TP_ATTR_CONN_ID={0x8, 0x9, 0x8}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x3}, @L2TP_ATTR_IP6_SADDR={0x14}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @mcast1}]}, 0x54}, 0x1, 0x0, 0x0, 0x40000}, 0x0) write$auto(r1, &(0x7f0000000040)='S\x00\x00\x00\xfe\xff\xff\xff', 0x8587) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0x7fffffff) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r0, r0, 0x0) 871.569913ms ago: executing program 1 (id=1492): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) socketpair$auto(0x4, 0x1, 0x20002, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001400)={&(0x7f0000000080)=ANY=[@ANYBLOB="071300", @ANYBLOB="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"], 0x1354}}, 0x40001) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x0) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300"], 0x1ac}}, 0x4004) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) 458.819138ms ago: executing program 0 (id=1493): r0 = socket(0x2a, 0x2, 0x1) connect$auto(r0, 0x0, 0x55) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) (async) r1 = openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x8000, 0x0) r2 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000007480)='/dev/cec12\x00', 0x400, 0x0) ioctl$auto_CEC_S_MODE(r2, 0x40046109, &(0x7f0000000000)=0x22) r3 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC0\x00', 0x80100, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000080)={0x2}) (async) ioctl$auto_SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000080)={0x2}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) (async) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) write$auto(0x3, 0x0, 0x81) (async) write$auto(0x3, 0x0, 0x81) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000380)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4002) (async) sendmsg$auto_TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f00000079c0)={0x0, 0x0, &(0x7f0000007980)={&(0x7f0000000380)={0x20, r4, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @uid}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x40010}, 0x4002) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_DISABLE(r5, 0x40045506, 0x0) (async) ioctl$auto_USB_RAW_IOCTL_EP_DISABLE(r5, 0x40045506, 0x0) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x141f02, 0x0) r6 = openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f0000000000), 0x8080, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) close_range$auto(0x2, 0x8, 0x0) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r6, &(0x7f0000000040)=""/73, 0x49) (async) read$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(r6, &(0x7f0000000040)=""/73, 0x49) close_range$auto(0x2, 0x8, 0x0) read$auto(r1, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_drm_crtc_crc_data_fops_drm_debugfs_crc(0xffffffffffffff9c, &(0x7f00000000c0), 0x502800, 0x0) 180.655586ms ago: executing program 0 (id=1494): r0 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000540)='/dev/cpu/0/msr\x00', 0x0, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) r1 = socket(0xf, 0x6, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xb, 0x5, 0x1ffde, 0x3, 0x6, 0x2, 0x9, 0x8, 0x3, 0x3, 0x7fb104f1, 0x3, 0x2, 0x3, 0x5, 0x7, 0x0, 0x0, 0x9, 0x0, 0x0, 0xfffffffc, [0x0, 0x4, 0xfffffffffffffffc, 0x0, 0x0, 0x6, 0x0, 0x2, 0x0, 0x2, 0x200000000, 0x6a0c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcb2, 0xfffffffffffffffc, 0x1, 0x0, 0x3, 0x0, 0x0, 0x100000, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x0, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x208, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x2]}, 0x1fe, 0x81) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0xc20f0000, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa509}, 0x800}, 0x7, 0x8) ioctl$auto_X86_IOC_RDMSR_REGS(r0, 0xc02063a0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x4, 0x8000) process_vm_readv$auto(0x0, &(0x7f0000000500)={&(0x7f0000000580)="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", 0x5}, 0x80000001, &(0x7f0000001640)={&(0x7f0000001580)="439a097eb0b36273d3747674703f243d215e1c4a0a7999d3a6fc9b7a27b8b152e390ea9ca4fff379c8c6e4ee649c44269dbccb2673621d1e912f11027b35aeb6210464ffc13f8ceb11dfde9e98f397b0dad600ff5ce53458e786e3f2f645aca0c19192c71b2a275af894aefae772684be71a86bef9a937e855dbb8734e17b785c2bff7c172070bec7c4ce9e40607a9ad7de4a2baa3b9681913d02bd0da6c7bd1389402346ffcef20fe1f7f5ca7c31c78d798ddbaa9a69b631c26f7db3b36", 0x7}, 0x100000001, 0x7e97) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x402, 0x0, 0x1, 0x0) open(0x0, 0x608000, 0x1ab) r2 = socket(0x2a, 0x2, 0x1) connect$auto(r2, &(0x7f0000000140)=@qipcrtr={0x2a, 0x1}, 0x57) getsockopt$auto(r0, 0x0, 0x1c, 0x0, 0x0) openat$auto_proc_timers_operations_base(0xffffffffffffff9c, &(0x7f0000000000), 0x8800, 0x0) r3 = openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcsu\x00', 0x108002, 0x0) r4 = epoll_create$auto(0x5a5d) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) r5 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x1, 0x0) ioctl$auto_SNDCTL_DSP_POST(r5, 0x5008, 0xfffffffffffffffe) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) get_robust_list$auto(0xffffffffffffffff, &(0x7f0000000240)=&(0x7f0000000200)={{}, 0x40, &(0x7f00000001c0)={&(0x7f0000000180)={&(0x7f00000000c0)}}}, &(0x7f0000000280)=0x1ff) msgrcv$auto(0xffee, 0x0, 0x3ff, 0x6, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2080, 0x100000004, 0x2, 0x0, 0x5, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) epoll_ctl$auto(r4, 0x1, r3, 0x0) r6 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000080), r4) r7 = getpid() sendmsg$auto_NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000000140)={&(0x7f0000000000), 0xc, &(0x7f0000000100)={&(0x7f0000001680)=ANY=[@ANYBLOB="00000000d09e1ed4f5552d2cb804f1d430d5d0278299045f9c7120bd4bb1038c24ff839bb8705a4a76aed4523829890afff1d47b7fe8ea4f69bc6adaeb273ec950d2d76f87", @ANYRES16=r6, @ANYBLOB="000626bd7000fedbdf250c00000008002c00ffffff7f08002a000900000008001c00", @ANYRES32=r7, @ANYBLOB="08001d00", @ANYRES32=r4, @ANYBLOB="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"], 0x210}, 0x1, 0x0, 0x0, 0x24004800}, 0x20000801) 103.953507ms ago: executing program 5 (id=1495): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) r0 = io_uring_setup$auto(0x7, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mbind$auto(0x2000, 0x100000001, 0x2, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/fscaps\x00', 0x40000, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, r0, 0x4) read$auto(0xffffffffffffffff, 0x0, 0x3) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/system/machinecheck/machinecheck0/ignore_ce\x00', 0x121042, 0x0) read$auto(0x3, 0x0, 0x1f40) write$auto(r1, 0x0, 0xc70) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) mmap$auto(0x0, 0x40000b, 0xdf, 0x9b72, 0x2, 0x8000) gettid() mmap$auto(0xfffffffffffffffe, 0x2020009, 0x3, 0x12, 0xfffffffffffffffa, 0x40000008000) r2 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/events/vmalloc/purge_vmap_area_lazy/trigger\x00', 0x224241, 0x0) write$auto_event_trigger_fops_trace(r2, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8000, 0x0) r3 = io_uring_setup$auto(0x5, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x8000, 0x0) ioctl$auto(0x3, 0x2286, 0x7) write$auto(0x3, 0x0, 0x7fffffff) tkill$auto(0x0, 0x7) syz_clone3(&(0x7f0000000400)={0x9840100, 0x0, 0x0, 0x0, {0x32}, 0x0, 0x0, 0x0, 0x0, 0x0, {r3}}, 0x58) r4 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x204002, 0x0) read$auto(r4, 0x0, 0x8) 0s ago: executing program 4 (id=1496): openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x382, 0x0) socket(0x2, 0x3, 0x2) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x6, 0x0) mmap$auto(0x80000001, 0x8002, 0xb, 0x10, r0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r1 = socket(0x18, 0x2, 0xfffffffd) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) r2 = pidfd_open$auto(0x1, 0x0) r3 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000440)='/sys/kernel/debug/ieee80211/phy4/statistics/dot11RTSSuccessCount\x00', 0x0, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r3, 0x0, 0x0) setns(r0, 0x60020000) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x0, 0x0, 0x9, 0x0, 0x5, 0xe}, 0x800009}, 0x5, 0x20000000) select$auto(0x3ff, &(0x7f0000001980)={[0x5, 0x8, 0x5, 0x400, 0x7, 0x749d, 0x2, 0x755, 0x57, 0x9, 0x6, 0x889, 0x38bf, 0x4, 0xce93, 0x5]}, &(0x7f0000001a00)={[0xfffffffffffff7d4, 0xd660, 0x1, 0x7fffffff, 0x1, 0xf, 0x6, 0x9, 0x100000000, 0x1000, 0x747, 0x0, 0xb4, 0xf76, 0x7ff, 0x2]}, &(0x7f0000001a80)={[0x4, 0x7, 0x9, 0x8d, 0x1, 0x7f, 0x7, 0xf5e, 0x8000000000000000, 0x2, 0x2c9, 0x1, 0xcd48, 0x2, 0xfffffffffffffff7, 0xe8]}, &(0x7f0000001b00)={0x5, 0x5}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r0) msgctl$auto_IPC_INFO(0x4c, 0x3, &(0x7f0000000200)={{0x60, 0xffffffffffffffff, 0x0, 0x6, 0x7fff, 0xffffffff, 0x8}, &(0x7f0000000180)=0xf, &(0x7f00000001c0)=0xf, 0x7fffffff, 0x3, 0x6b9eec38, 0x80, 0x1, 0xff, 0xf5c2, 0x9, @raw=0x2}) r7 = setfsuid$auto(0xee01) mkdir$auto(&(0x7f0000000040)='./file0\x00', 0x2) r8 = openat$dir(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x8000, 0x70) mknodat$auto(r8, &(0x7f0000000400)='./file0\x00', 0xfff, 0xfffffff8) rmdir$auto(&(0x7f0000000000)='./file0\x00') setresuid$auto(0x0, r6, 0x0) r9 = waitid$auto_P_PIDFD(0x3, r2, &(0x7f0000000280)={@_si_pad}, 0x1, &(0x7f0000000300)={{0x1}, {0x5, 0x3ff}, 0x8160, 0x0, 0x6, 0x566, 0x3, 0x90b9, 0x7ff, 0x800, 0xce, 0x0, 0xa, 0x9, 0xffffffffffffffff, 0xf}) sendmsg$auto_NL80211_CMD_PROBE_CLIENT(r4, &(0x7f0000001940)={&(0x7f00000000c0), 0xc, &(0x7f0000001900)={&(0x7f0000001ec0)=ANY=[@ANYBLOB="30150000", @ANYRES16=r5, @ANYBLOB="000226bd7000fbdbdf25540000000a00fc00d3cd5c14b8cf0000d0143880400000800500d6008a00000008000300", @ANYRES32=0x0, @ANYBLOB="04004a010800dc00a00300001e009400ec4c5bad533f87d2d4709f8501f5765fa3829ea36a9de75bc8260000281400800800ef008008000006001201f7ff0000a4135a80b700a48093001a0098278ccaa8ff8c919849fdba42a8c4de4aec84571290b26a01768b4644a949023f7ba1224ca1e5d79cc2cbd634f38d1380f476fe14d222ec01bd1d15a68111c0f7ce5134ddad3bdd18d7c81d89d2e20a40353721ff0954c3b04733ae5f5e1c8cd6ba5b25b990198ecad3b90682ba4da32b25a88fbffd46603e4c3d3d3ead9198b995732c05eed16f43ca3de2b1c3bf0040c8156e794a940800e000", @ANYRES32=r7, @ANYBLOB="0400588004003e00040038800400c1800018001680040018800c009d0006000000000000000400be8008009700", @ANYRES32=r7, @ANYBLOB="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", @ANYRES32=r9, @ANYRES64=r9], 0x1530}, 0x1, 0x0, 0x0, 0x40}, 0x24040010) futex$auto(0x0, 0x6, 0x47, 0x0, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x41, 0x0, 0x86) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) creat$auto(&(0x7f0000000080)='./file0\x00', 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): hci1: command 0x0c1a tx timeout [ 125.761732][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 125.831855][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 126.801833][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 127.765177][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 127.843331][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.912147][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 128.882838][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 129.841650][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 129.911748][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 130.001801][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 130.459890][ T6822] netlink: 'syz.2.198': attribute type 2 has an invalid length. [ 131.521947][ T5145] Bluetooth: hci3: unexpected event 0x3d length: 726 > 14 [ 133.514836][ T6852] netlink: 342 bytes leftover after parsing attributes in process `syz.3.203'. [ 133.757490][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.764415][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.139710][ T6834] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 136.638244][ T6908] netlink: 342 bytes leftover after parsing attributes in process `syz.3.210'. [ 137.226714][ T6926] netlink: zone id is out of range [ 137.267459][ T6926] netlink: zone id is out of range [ 137.291425][ T6926] netlink: zone id is out of range [ 137.312775][ T6926] netlink: zone id is out of range [ 137.348918][ T6926] netlink: zone id is out of range [ 137.386098][ T6926] netlink: zone id is out of range [ 137.431114][ T6926] netlink: zone id is out of range [ 137.487751][ T6926] netlink: zone id is out of range [ 137.518421][ T6926] netlink: zone id is out of range [ 137.566208][ T6932] could not allocate digest TFM handle [ 137.811947][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.820681][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 137.917836][ T6923] could not allocate digest TFM handle [ 139.948100][ T6970] netlink: 194 bytes leftover after parsing attributes in process `syz.1.219'. [ 141.162112][ T6962] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.168373][ T6962] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.261806][ T6962] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.267969][ T6962] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 141.312263][ T6631] syz.1.155 (6631) used greatest stack depth: 19280 bytes left [ 141.511920][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 142.860288][ T7014] netlink: 93 bytes leftover after parsing attributes in process `syz.0.227'. [ 142.878245][ T7011] netlink: 93 bytes leftover after parsing attributes in process `syz.0.227'. [ 143.005700][ T6981] net_ratelimit: 333 callbacks suppressed [ 143.005727][ T6981] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 143.076676][ T6993] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 143.201812][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.271889][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.278253][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 144.835590][ T7048] netlink: 330 bytes leftover after parsing attributes in process `syz.3.236'. [ 145.232983][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz.2.237'. [ 146.644749][ T7087] netlink: 8 bytes leftover after parsing attributes in process `syz.1.244'. [ 148.260421][ T6742] syz.1.180 (6742) used greatest stack depth: 18848 bytes left [ 151.311535][ T7173] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 151.318458][ T7173] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 151.324816][ T7173] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 151.331192][ T7173] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 153.201247][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 153.351890][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.351911][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 153.351954][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.911696][ T7275] netlink: 'syz.3.283': attribute type 11 has an invalid length. [ 156.908471][ T7286] netlink: 28 bytes leftover after parsing attributes in process `syz.3.287'. [ 158.896823][ T7302] netlink: 28 bytes leftover after parsing attributes in process `syz.3.291'. [ 158.945095][ T7302] netlink: 338 bytes leftover after parsing attributes in process `syz.3.291'. [ 158.982887][ T7302] netlink: 338 bytes leftover after parsing attributes in process `syz.3.291'. [ 159.851225][ T7325] netlink: 4 bytes leftover after parsing attributes in process `syz.2.297'. [ 160.181409][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 160.446603][ T7329] Invalid ELF header magic: != ELF [ 160.647577][ T7350] warning: `syz.1.302' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 160.660997][ T0] NOHZ tick-stop error: local softirq work is pending, handler #208!!! [ 160.669971][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 160.678887][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 160.687814][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 161.221107][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 161.977772][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 163.714126][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 163.914122][ T7425] Invalid ELF header magic: != ELF [ 165.808649][ T29] audit: type=1807 audit(4294967359.816:4): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 165.815251][ T7457] ima: policy update failed [ 165.841670][ T29] audit: type=1802 audit(4294967359.816:5): pid=7457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.327" res=0 errno=0 [ 165.886844][ T29] audit: type=1802 audit(4294967359.846:6): pid=7457 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.327" res=0 errno=0 [ 165.928716][ T7460] Invalid ELF header magic: != ELF [ 168.432670][ T5145] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 168.451138][ T7511] netlink: 338 bytes leftover after parsing attributes in process `syz.2.337'. [ 168.513712][ T7520] netlink: 338 bytes leftover after parsing attributes in process `syz.2.337'. [ 170.563475][ T7514] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 170.611277][ T7514] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 170.672220][ T7514] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 170.732663][ T7514] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 171.216401][ T7563] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 171.254395][ T7563] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 171.315011][ T7565] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input13 [ 171.449226][ T7565] Invalid ELF header magic: != ELF [ 171.675085][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 172.631781][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 172.711721][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 172.803864][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 173.046564][ T7601] zram: Added device: zram1 [ 173.467326][ T5145] Bluetooth: hci3: unexpected subevent 0x06 length: 122 > 10 [ 173.471381][ T7609] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 173.477254][ T5145] Bluetooth: hci3: unexpected subevent 0x06 length: 122 > 10 [ 173.485665][ T7608] netlink: 4 bytes leftover after parsing attributes in process `syz.2.355'. [ 173.878909][ T7590] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 173.892031][ T7590] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 173.910125][ T7590] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 173.918775][ T7590] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 175.924031][ T5145] Bluetooth: hci0: command 0x0c1a tx timeout [ 175.930245][ T5848] Bluetooth: hci1: command 0x0c1a tx timeout [ 175.936609][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 175.991694][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 176.911297][ T7655] ceph: Failed to parse sending metrics switch value 'P^' [ 177.173198][ T29] audit: type=1800 audit(4294967371.176:7): pid=7644 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.364" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 178.081721][ T5848] Bluetooth: hci3: command 0x0c1a tx timeout [ 178.128080][ T29] audit: type=1800 audit(4294967372.136:8): pid=7667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.369" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 178.545993][ T7686] netlink: 8 bytes leftover after parsing attributes in process `syz.2.373'. [ 178.596197][ T7686] netlink: 28 bytes leftover after parsing attributes in process `syz.2.373'. [ 178.635046][ T7686] ipvlan1: entered promiscuous mode [ 179.954767][ T7713] ucma_write: process 338 (syz.1.379) changed security contexts after opening file descriptor, this is not allowed. [ 182.522633][ T7782] syz.2.395: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0x400cc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 182.543002][ T7782] CPU: 0 UID: 0 PID: 7782 Comm: syz.2.395 Not tainted 6.14.0-rc4-syzkaller #0 [ 182.543032][ T7782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.543050][ T7782] Call Trace: [ 182.543057][ T7782] [ 182.543071][ T7782] dump_stack_lvl+0x16c/0x1f0 [ 182.543107][ T7782] warn_alloc+0x24d/0x3a0 [ 182.543143][ T7782] ? __pfx_warn_alloc+0x10/0x10 [ 182.543186][ T7782] ? __get_vm_area_node+0x1b0/0x2f0 [ 182.543214][ T7782] ? __get_vm_area_node+0x1dc/0x2f0 [ 182.543246][ T7782] __vmalloc_node_range_noprof+0x1102/0x1530 [ 182.543285][ T7782] ? __do_sys_listmount+0x1bf/0xeb0 [ 182.543321][ T7782] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 182.543378][ T7782] ? rcu_is_watching+0x12/0xc0 [ 182.543402][ T7782] ? trace_kmalloc+0x2d/0xd0 [ 182.543426][ T7782] ? __kmalloc_node_noprof.cold+0x5a/0x5f [ 182.543453][ T7782] ? __do_sys_listmount+0x1bf/0xeb0 [ 182.543481][ T7782] __kvmalloc_node_noprof+0x14f/0x1a0 [ 182.543513][ T7782] ? __do_sys_listmount+0x1bf/0xeb0 [ 182.543542][ T7782] __do_sys_listmount+0x1bf/0xeb0 [ 182.543575][ T7782] ? __x64_sys_futex+0x1e1/0x4c0 [ 182.543601][ T7782] ? __x64_sys_futex+0x1ea/0x4c0 [ 182.543627][ T7782] ? __pfx___do_sys_listmount+0x10/0x10 [ 182.543655][ T7782] ? xfd_validate_state+0x5d/0x180 [ 182.543698][ T7782] do_syscall_64+0xcd/0x250 [ 182.543736][ T7782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.543767][ T7782] RIP: 0033:0x7fc20518d169 [ 182.543786][ T7782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 182.543807][ T7782] RSP: 002b:00007fc206035038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ca [ 182.543828][ T7782] RAX: ffffffffffffffda RBX: 00007fc2053a6160 RCX: 00007fc20518d169 [ 182.543843][ T7782] RDX: 00000000000f4240 RSI: 0000000000000000 RDI: 0000400000000100 [ 182.543854][ T7782] RBP: 00007fc20520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 182.543867][ T7782] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 182.543881][ T7782] R13: 0000000000000000 R14: 00007fc2053a6160 R15: 00007fffca9df478 [ 182.543911][ T7782] [ 182.543982][ T7782] Mem-Info: [ 182.761848][ T7782] active_anon:55283 inactive_anon:1717 isolated_anon:0 [ 182.761848][ T7782] active_file:10761 inactive_file:45642 isolated_file:0 [ 182.761848][ T7782] unevictable:768 dirty:313 writeback:9 [ 182.761848][ T7782] slab_reclaimable:10779 slab_unreclaimable:94590 [ 182.761848][ T7782] mapped:33086 shmem:44595 pagetables:923 [ 182.761848][ T7782] sec_pagetables:0 bounce:0 [ 182.761848][ T7782] kernel_misc_reclaimable:0 [ 182.761848][ T7782] free:1272539 free_pcp:14759 free_cma:0 [ 182.868516][ T7782] Node 0 active_anon:224996kB inactive_anon:6868kB active_file:43212kB inactive_file:182568kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:136052kB dirty:1352kB writeback:32kB shmem:180484kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10992kB pagetables:3712kB sec_pagetables:0kB all_unreclaimable? no [ 182.961773][ T7782] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 183.059687][ T7782] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.088804][ T7782] lowmem_reserve[]: 0 2487 2487 0 0 [ 183.094565][ T7782] Node 0 DMA32 free:1222556kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:225188kB inactive_anon:6868kB active_file:43212kB inactive_file:182472kB unevictable:1536kB writepending:1384kB present:3129332kB managed:2547540kB mlocked:0kB bounce:0kB free_pcp:1200kB local_pcp:992kB free_cma:0kB [ 183.177788][ T7782] lowmem_reserve[]: 0 0 0 0 0 [ 183.188780][ T7782] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 183.234148][ T7782] lowmem_reserve[]: 0 0 0 0 0 [ 183.238985][ T7782] Node 1 Normal free:3855776kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:4kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:50856kB local_pcp:24800kB free_cma:0kB [ 183.373344][ T7782] lowmem_reserve[]: 0 0 0 0 0 [ 183.378171][ T7782] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 183.471740][ T7782] Node 0 DMA32: 3476*4kB (UME) 3822*8kB (UME) 2646*16kB (UME) 1996*32kB (UME) 1132*64kB (UME) 436*128kB (UME) 240*256kB (UME) 95*512kB (UM) 32*1024kB (UME) 6*2048kB (UME) 191*4096kB (UM) = 1216416kB [ 183.540055][ T7782] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 183.575210][ T7782] Node 1 Normal: 304*4kB (UM) 18*8kB (UME) 7*16kB (UM) 151*32kB (UME) 90*64kB (UME) 37*128kB (UME) 16*256kB (UME) 6*512kB (UME) 8*1024kB (UM) 9*2048kB (UME) 929*4096kB (M) = 3855776kB [ 183.615851][ T7782] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.641639][ T7782] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.651009][ T7782] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.683191][ T7782] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.712980][ T7782] 104062 total pagecache pages [ 183.717825][ T7782] 336 pages in swap cache [ 183.722346][ T7782] Free swap = 94360kB [ 183.726455][ T7782] Total swap = 124996kB [ 183.730727][ T7782] 2097051 pages RAM [ 183.762561][ T7782] 0 pages HighMem/MovableOnly [ 183.767321][ T7782] 428508 pages reserved [ 183.771502][ T7782] 0 pages cma reserved [ 185.569012][ T7851] netlink: 28 bytes leftover after parsing attributes in process `syz.3.413'. [ 185.578554][ T7851] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.586867][ T7851] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.595331][ T7851] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.606919][ T7851] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.616675][ T7855] FAULT_INJECTION: forcing a failure. [ 185.616675][ T7855] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 185.633883][ T7855] CPU: 1 UID: 0 PID: 7855 Comm: syz.1.412 Not tainted 6.14.0-rc4-syzkaller #0 [ 185.633922][ T7855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 185.633938][ T7855] Call Trace: [ 185.633946][ T7855] [ 185.633957][ T7855] dump_stack_lvl+0x16c/0x1f0 [ 185.634001][ T7855] should_fail_ex+0x50a/0x650 [ 185.634042][ T7855] copy_fpstate_to_sigframe+0x894/0xb20 [ 185.634083][ T7855] ? __pfx_copy_fpstate_to_sigframe+0x10/0x10 [ 185.634119][ T7855] ? collect_signal+0x262/0x540 [ 185.634146][ T7855] ? find_held_lock+0x2d/0x110 [ 185.634185][ T7855] get_sigframe+0x4aa/0x9c0 [ 185.634220][ T7855] ? __pfx_get_sigframe+0x10/0x10 [ 185.634253][ T7855] ? _raw_spin_unlock_irq+0x23/0x50 [ 185.634279][ T7855] ? siginfo_layout+0x1d2/0x290 [ 185.634315][ T7855] x64_setup_rt_frame+0x129/0xcf0 [ 185.634350][ T7855] ? __pfx_x64_setup_rt_frame+0x10/0x10 [ 185.634376][ T7855] ? kill_pid_info_type+0x102/0x2a0 [ 185.634418][ T7855] arch_do_signal_or_restart+0x5e6/0x7e0 [ 185.634445][ T7855] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 185.634488][ T7855] syscall_exit_to_user_mode+0x150/0x2a0 [ 185.634518][ T7855] do_syscall_64+0xda/0x250 [ 185.634550][ T7855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.634582][ T7855] RIP: 0033:0x7f1f25f8d169 [ 185.634650][ T7855] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.634678][ T7855] RSP: 002b:00007f1f26d61038 EFLAGS: 00000246 ORIG_RAX: 000000000000003e [ 185.634702][ T7855] RAX: 0000000000000000 RBX: 00007f1f261a6160 RCX: 00007f1f25f8d169 [ 185.634720][ T7855] RDX: 0000000000000000 RSI: 0000000000000011 RDI: 000000000000016c [ 185.634735][ T7855] RBP: 00007f1f2600e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 185.634750][ T7855] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 185.634765][ T7855] R13: 0000000000000000 R14: 00007f1f261a6160 R15: 00007ffe85f206e8 [ 185.634795][ T7855] [ 186.605979][ T29] audit: type=1806 audit(4294967380.616:9): res=-14 [ 187.631375][ T7919] cougar: G6 mapped to space [ 187.846740][ T7923] netlink: 50 bytes leftover after parsing attributes in process `syz.1.427'. [ 188.876294][ T7959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.435'. [ 189.685985][ T7970] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 189.702222][ T7970] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 191.933217][ T8021] scsi_dev_info_list_add_str: bad dev info string '' '' '' [ 191.943579][ T8024] tipc: Started in network mode [ 191.948854][ T8024] tipc: Node identity 8e4e6f15, cluster identity 4711 [ 191.967116][ T8024] tipc: Node number set to 2387504917 [ 191.974100][ T8021] vhci_hcd: pdev 64 [ 192.800994][ T8038] Invalid ELF header magic: != ELF [ 194.564447][ T8071] raw_sendmsg: syz.2.465 forgot to set AF_INET. Fix it! [ 194.603674][ T8074] syz.0.467 uses obsolete (PF_INET,SOCK_PACKET) [ 195.223443][ C1] vcan0: j1939_xtp_rx_dpo: no connection found [ 195.230129][ C1] vcan0: j1939_xtp_rx_dat: no tx connection found [ 195.242483][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.248853][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.986719][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803579e000: rx timeout, send abort [ 196.496836][ C1] vcan0: j1939_tp_rxtimer: 0xffff88803579e000: abort rx timeout. Force session deactivation [ 197.167476][ T8134] FAULT_INJECTION: forcing a failure. [ 197.167476][ T8134] name failslab, interval 1, probability 0, space 0, times 0 [ 197.266278][ T8134] CPU: 1 UID: 0 PID: 8134 Comm: syz.1.478 Not tainted 6.14.0-rc4-syzkaller #0 [ 197.266319][ T8134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 197.266342][ T8134] Call Trace: [ 197.266351][ T8134] [ 197.266362][ T8134] dump_stack_lvl+0x16c/0x1f0 [ 197.266405][ T8134] should_fail_ex+0x50a/0x650 [ 197.266454][ T8134] ? fs_reclaim_acquire+0xae/0x150 [ 197.266493][ T8134] should_failslab+0xc2/0x120 [ 197.266519][ T8134] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 197.266558][ T8134] ? proc_create_reg+0xe3/0x180 [ 197.266581][ T8134] ? fib_notifier_ops_register+0x32/0x270 [ 197.266617][ T8134] ? __pfx_ipmr_net_init+0x10/0x10 [ 197.266645][ T8134] kmemdup_noprof+0x29/0x60 [ 197.266675][ T8134] fib_notifier_ops_register+0x32/0x270 [ 197.266707][ T8134] ? __pfx_ipmr_net_init+0x10/0x10 [ 197.266734][ T8134] ipmr_net_init+0x57/0x4e0 [ 197.266761][ T8134] ? __pfx_ipmr_net_init+0x10/0x10 [ 197.266788][ T8134] ops_init+0x1df/0x5f0 [ 197.266826][ T8134] setup_net+0x21f/0x860 [ 197.266862][ T8134] ? __pfx_setup_net+0x10/0x10 [ 197.266894][ T8134] ? down_read_killable+0xcc/0x380 [ 197.266928][ T8134] ? __pfx_down_read_killable+0x10/0x10 [ 197.266958][ T8134] ? __raw_spin_lock_init+0x3a/0x110 [ 197.266998][ T8134] ? debug_mutex_init+0x37/0x70 [ 197.267028][ T8134] copy_net_ns+0x2a6/0x5f0 [ 197.267056][ T8134] create_new_namespaces+0x3ea/0xad0 [ 197.267100][ T8134] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 197.267139][ T8134] ksys_unshare+0x45d/0xa40 [ 197.267160][ T8134] ? __pfx_ksys_unshare+0x10/0x10 [ 197.267180][ T8134] ? xfd_validate_state+0x5d/0x180 [ 197.267221][ T8134] __x64_sys_unshare+0x31/0x40 [ 197.267239][ T8134] do_syscall_64+0xcd/0x250 [ 197.267268][ T8134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.267301][ T8134] RIP: 0033:0x7f1f25f8d169 [ 197.267322][ T8134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.267354][ T8134] RSP: 002b:00007f1f26d82038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 197.267376][ T8134] RAX: ffffffffffffffda RBX: 00007f1f261a6080 RCX: 00007f1f25f8d169 [ 197.267390][ T8134] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 197.267403][ T8134] RBP: 00007f1f2600e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 197.267416][ T8134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 197.267429][ T8134] R13: 0000000000000000 R14: 00007f1f261a6080 R15: 00007ffe85f206e8 [ 197.267458][ T8134] [ 198.923459][ T8183] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 198.933914][ T8183] misc userio: The device must be registered before sending interrupts [ 198.979073][ T8176] can: request_module (can-proto-0) failed. [ 199.184280][ T8188] netlink: 'syz.0.490': attribute type 3 has an invalid length. [ 199.233824][ T8193] netlink: 28 bytes leftover after parsing attributes in process `syz.3.491'. [ 199.297950][ T8188] netlink: 'syz.0.490': attribute type 3 has an invalid length. [ 199.910452][ T8199] netlink: 342 bytes leftover after parsing attributes in process `syz.3.492'. [ 200.192580][ T8206] FAULT_INJECTION: forcing a failure. [ 200.192580][ T8206] name failslab, interval 1, probability 0, space 0, times 0 [ 200.220451][ T8206] CPU: 0 UID: 0 PID: 8206 Comm: syz.2.494 Not tainted 6.14.0-rc4-syzkaller #0 [ 200.220492][ T8206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 200.220508][ T8206] Call Trace: [ 200.220516][ T8206] [ 200.220526][ T8206] dump_stack_lvl+0x16c/0x1f0 [ 200.220567][ T8206] should_fail_ex+0x50a/0x650 [ 200.220604][ T8206] ? fs_reclaim_acquire+0xae/0x150 [ 200.220636][ T8206] should_failslab+0xc2/0x120 [ 200.220660][ T8206] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 200.220695][ T8206] ? security_file_alloc+0x34/0x2b0 [ 200.220727][ T8206] security_file_alloc+0x34/0x2b0 [ 200.220751][ T8206] init_file+0x93/0x4c0 [ 200.220772][ T8206] alloc_empty_file+0x91/0x1e0 [ 200.220816][ T8206] path_openat+0xe1/0x2d80 [ 200.220847][ T8206] ? hlock_class+0x4e/0x130 [ 200.220871][ T8206] ? __lock_acquire+0x15a9/0x3c40 [ 200.220903][ T8206] ? __pfx_path_openat+0x10/0x10 [ 200.220932][ T8206] ? __pfx___lock_acquire+0x10/0x10 [ 200.220955][ T8206] ? lock_acquire.part.0+0x11b/0x380 [ 200.220981][ T8206] ? find_held_lock+0x2d/0x110 [ 200.221008][ T8206] do_filp_open+0x20c/0x470 [ 200.221039][ T8206] ? __pfx_do_filp_open+0x10/0x10 [ 200.221068][ T8206] ? find_held_lock+0x2d/0x110 [ 200.221114][ T8206] ? alloc_fd+0x41f/0x760 [ 200.221155][ T8206] do_sys_openat2+0x17a/0x1e0 [ 200.221181][ T8206] ? __pfx_do_sys_openat2+0x10/0x10 [ 200.221217][ T8206] __x64_sys_openat+0x175/0x210 [ 200.221242][ T8206] ? __pfx___x64_sys_openat+0x10/0x10 [ 200.221281][ T8206] do_syscall_64+0xcd/0x250 [ 200.221315][ T8206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 200.221348][ T8206] RIP: 0033:0x7fc20518d169 [ 200.221369][ T8206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 200.221392][ T8206] RSP: 002b:00007fc206077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 200.221415][ T8206] RAX: ffffffffffffffda RBX: 00007fc2053a5fa0 RCX: 00007fc20518d169 [ 200.221431][ T8206] RDX: 0000000000088400 RSI: 0000400000000440 RDI: ffffffffffffff9c [ 200.221447][ T8206] RBP: 00007fc20520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 200.221463][ T8206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 200.221476][ T8206] R13: 0000000000000000 R14: 00007fc2053a5fa0 R15: 00007fffca9df478 [ 200.221506][ T8206] [ 202.760003][ T8256] netlink: 'syz.3.508': attribute type 1 has an invalid length. [ 204.306749][ T8267] netlink: 334 bytes leftover after parsing attributes in process `syz.3.509'. [ 205.393617][ T8284] netlink: 314 bytes leftover after parsing attributes in process `syz.0.514'. [ 206.410960][ T8315] netlink: 4 bytes leftover after parsing attributes in process `syz.1.521'. [ 207.620769][ T8354] FAULT_INJECTION: forcing a failure. [ 207.620769][ T8354] name failslab, interval 1, probability 0, space 0, times 0 [ 207.635872][ T8354] CPU: 0 UID: 0 PID: 8354 Comm: syz.1.527 Not tainted 6.14.0-rc4-syzkaller #0 [ 207.635912][ T8354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 207.635929][ T8354] Call Trace: [ 207.635937][ T8354] [ 207.635948][ T8354] dump_stack_lvl+0x16c/0x1f0 [ 207.635990][ T8354] should_fail_ex+0x50a/0x650 [ 207.636031][ T8354] ? fs_reclaim_acquire+0xae/0x150 [ 207.636074][ T8354] should_failslab+0xc2/0x120 [ 207.636101][ T8354] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 207.636140][ T8354] ? __kernfs_new_node+0xd3/0x890 [ 207.636177][ T8354] __kernfs_new_node+0xd3/0x890 [ 207.636217][ T8354] ? __pfx___kernfs_new_node+0x10/0x10 [ 207.636249][ T8354] ? __pfx_lock_release+0x10/0x10 [ 207.636284][ T8354] ? kernfs_add_one+0x24a/0x520 [ 207.636321][ T8354] ? down_write+0x14e/0x200 [ 207.636359][ T8354] ? up_write+0x1b2/0x520 [ 207.636402][ T8354] kernfs_new_node+0x186/0x240 [ 207.636444][ T8354] __kernfs_create_file+0x53/0x350 [ 207.636476][ T8354] cgroup_addrm_files+0x547/0xc20 [ 207.636529][ T8354] ? __pfx_cgroup_addrm_files+0x10/0x10 [ 207.636577][ T8354] ? css_next_child+0xcf/0x2d0 [ 207.636610][ T8354] ? css_next_descendant_pre+0x58/0x1a0 [ 207.636647][ T8354] css_populate_dir+0x386/0x530 [ 207.636679][ T8354] cgroup_mkdir+0x37c/0x1150 [ 207.636719][ T8354] ? __pfx_cgroup_mkdir+0x10/0x10 [ 207.636756][ T8354] kernfs_iop_mkdir+0x14a/0x1d0 [ 207.636787][ T8354] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 207.636823][ T8354] vfs_mkdir+0x57d/0x860 [ 207.636857][ T8354] do_mkdirat+0x301/0x3a0 [ 207.636893][ T8354] ? __pfx_do_mkdirat+0x10/0x10 [ 207.636932][ T8354] ? getname_flags.part.0+0x1c5/0x550 [ 207.636965][ T8354] __x64_sys_mkdir+0xef/0x140 [ 207.637001][ T8354] do_syscall_64+0xcd/0x250 [ 207.637035][ T8354] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.637077][ T8354] RIP: 0033:0x7f1f25f8d169 [ 207.637101][ T8354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.637128][ T8354] RSP: 002b:00007f1f26da3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000053 [ 207.637155][ T8354] RAX: ffffffffffffffda RBX: 00007f1f261a5fa0 RCX: 00007f1f25f8d169 [ 207.637172][ T8354] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00004000000002c0 [ 207.637190][ T8354] RBP: 00007f1f2600e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 207.637205][ T8354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 207.637219][ T8354] R13: 0000000000000000 R14: 00007f1f261a5fa0 R15: 00007ffe85f206e8 [ 207.637253][ T8354] [ 207.637285][ T8354] cgroup: cgroup_addrm_files: failed to add cgroup.kill, err=-12 [ 207.852817][ T8344] could not allocate digest TFM handle [ 208.341757][ T8344] could not allocate digest TFM handle [ 208.622001][ T5848] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 208.636801][ T8367] FAULT_INJECTION: forcing a failure. [ 208.636801][ T8367] name failslab, interval 1, probability 0, space 0, times 0 [ 208.727042][ T8367] CPU: 1 UID: 0 PID: 8367 Comm: syz.1.530 Not tainted 6.14.0-rc4-syzkaller #0 [ 208.727081][ T8367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 208.727096][ T8367] Call Trace: [ 208.727104][ T8367] [ 208.727115][ T8367] dump_stack_lvl+0x16c/0x1f0 [ 208.727157][ T8367] should_fail_ex+0x50a/0x650 [ 208.727194][ T8367] ? fs_reclaim_acquire+0xae/0x150 [ 208.727238][ T8367] should_failslab+0xc2/0x120 [ 208.727266][ T8367] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 208.727306][ T8367] ? __alloc_skb+0x2b1/0x380 [ 208.727345][ T8367] __alloc_skb+0x2b1/0x380 [ 208.727376][ T8367] ? __pfx___alloc_skb+0x10/0x10 [ 208.727406][ T8367] ? genl_rcv_msg+0x470/0x800 [ 208.727439][ T8367] ? genl_rcv_msg+0x4bd/0x800 [ 208.727482][ T8367] netlink_ack+0x15f/0xb80 [ 208.727524][ T8367] netlink_rcv_skb+0x348/0x440 [ 208.727555][ T8367] ? __pfx_genl_rcv_msg+0x10/0x10 [ 208.727592][ T8367] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 208.727635][ T8367] ? down_read+0xc9/0x330 [ 208.727666][ T8367] ? __pfx_down_read+0x10/0x10 [ 208.727698][ T8367] ? netlink_deliver_tap+0x1ae/0xd30 [ 208.727733][ T8367] genl_rcv+0x28/0x40 [ 208.727760][ T8367] netlink_unicast+0x53c/0x7f0 [ 208.727792][ T8367] ? __pfx_netlink_unicast+0x10/0x10 [ 208.727821][ T8367] ? __phys_addr_symbol+0x30/0x80 [ 208.727844][ T8367] ? __check_object_size+0x488/0x710 [ 208.727869][ T8367] netlink_sendmsg+0x8b8/0xd70 [ 208.727901][ T8367] ? __pfx_netlink_sendmsg+0x10/0x10 [ 208.727942][ T8367] ____sys_sendmsg+0xaaf/0xc90 [ 208.727968][ T8367] ? copy_msghdr_from_user+0x10b/0x160 [ 208.727999][ T8367] ? __pfx_____sys_sendmsg+0x10/0x10 [ 208.728040][ T8367] ___sys_sendmsg+0x135/0x1e0 [ 208.728075][ T8367] ? __pfx____sys_sendmsg+0x10/0x10 [ 208.728121][ T8367] ? __pfx_lock_release+0x10/0x10 [ 208.728147][ T8367] ? trace_lock_acquire+0x14e/0x1f0 [ 208.728182][ T8367] ? __fget_files+0x206/0x3a0 [ 208.728218][ T8367] __sys_sendmsg+0x16e/0x220 [ 208.728257][ T8367] ? __pfx___sys_sendmsg+0x10/0x10 [ 208.728288][ T8367] ? __x64_sys_futex+0x1e1/0x4c0 [ 208.728331][ T8367] do_syscall_64+0xcd/0x250 [ 208.728358][ T8367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 208.728387][ T8367] RIP: 0033:0x7f1f25f8d169 [ 208.728406][ T8367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 208.728427][ T8367] RSP: 002b:00007f1f26da3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 208.728451][ T8367] RAX: ffffffffffffffda RBX: 00007f1f261a5fa0 RCX: 00007f1f25f8d169 [ 208.728464][ T8367] RDX: 0000000000000000 RSI: 0000400000000100 RDI: 0000000000000007 [ 208.728478][ T8367] RBP: 00007f1f2600e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 208.728490][ T8367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 208.728503][ T8367] R13: 0000000000000000 R14: 00007f1f261a5fa0 R15: 00007ffe85f206e8 [ 208.728531][ T8367] [ 210.115642][ T8344] could not allocate digest TFM handle [ 211.235900][ T8402] netlink: 330 bytes leftover after parsing attributes in process `syz.3.538'. [ 213.009448][ T8445] netlink: 342 bytes leftover after parsing attributes in process `syz.0.545'. [ 213.175966][ T8452] netlink: 342 bytes leftover after parsing attributes in process `syz.0.545'. [ 213.223183][ T8455] netlink: 74 bytes leftover after parsing attributes in process `syz.1.548'. [ 213.830480][ T8477] Invalid ELF header magic: != ELF [ 216.125400][ T8500] netlink: 56 bytes leftover after parsing attributes in process `syz.0.558'. [ 216.189127][ T8502] netlink: del zone limit has 8 unknown bytes [ 216.203482][ T8502] netlink: del zone limit has 8 unknown bytes [ 216.239693][ T8502] netlink: del zone limit has 8 unknown bytes [ 216.246252][ T8502] netlink: del zone limit has 8 unknown bytes [ 216.254624][ T8502] netlink: del zone limit has 8 unknown bytes [ 216.281962][ T8502] netlink: del zone limit has 8 unknown bytes [ 216.308936][ T8502] netlink: del zone limit has 8 unknown bytes [ 216.428344][ T8523] netlink: 36 bytes leftover after parsing attributes in process `syz.1.564'. [ 217.631403][ T8557] netlink: 28 bytes leftover after parsing attributes in process `syz.3.571'. [ 218.911129][ T8586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.578'. [ 219.131991][ T8598] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 220.732113][ T5848] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 220.786185][ T8655] netlink: 338 bytes leftover after parsing attributes in process `syz.0.596'. [ 220.826259][ T8655] netlink: 338 bytes leftover after parsing attributes in process `syz.0.596'. [ 220.896263][ T8655] netlink: 134 bytes leftover after parsing attributes in process `syz.0.596'. [ 222.400915][ T8717] netlink: 28 bytes leftover after parsing attributes in process `syz.0.608'. [ 222.423026][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 223.915544][ T8760] HfR: entered promiscuous mode [ 226.072648][ T8821] netlink: 78 bytes leftover after parsing attributes in process `syz.3.630'. [ 227.213911][ T8839] Invalid ELF header magic: != ELF [ 227.788818][ T8861] netlink: 'syz.2.643': attribute type 1 has an invalid length. [ 231.490991][ T8906] netlink: 330 bytes leftover after parsing attributes in process `syz.3.653'. [ 232.387799][ T8915] Invalid ELF header magic: != ELF [ 232.483747][ T8917] netlink: 28 bytes leftover after parsing attributes in process `syz.0.659'. [ 234.940009][ T8974] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 234.983469][ T8974] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 236.078027][ T8996] Invalid ELF header magic: != ELF [ 236.489012][ T9007] netlink: 330 bytes leftover after parsing attributes in process `syz.2.678'. [ 236.498433][ T9007] : renamed from bond0 (while UP) [ 237.291103][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'. [ 237.316695][ T9033] netlink: 8 bytes leftover after parsing attributes in process `syz.0.686'. [ 237.845519][ T9063] netlink: 4 bytes leftover after parsing attributes in process `syz.3.693'. [ 238.649080][ T9084] [U] [ 238.652124][ T9084] [U] [ 238.654827][ T9084] [U] [ 238.657520][ T9084] [U] [ 238.686282][ T9084] [U] [ 238.689069][ T9084] [U] [ 238.691805][ T9084] [U] [ 238.694539][ T9084] [U] [ 238.723650][ T9084] [U] [ 238.726365][ T9084] [U] [ 238.729051][ T9084] [U] [ 238.731732][ T9084] [U] [ 238.785520][ T9084] [U] [ 238.788302][ T9084] [U] [ 238.791009][ T9084] [U] [ 238.793707][ T9084] [U] [ 238.796427][ T29] audit: type=1806 audit(4294967432.786:10): xattr="." res=0 [ 238.832378][ T9084] [U] [ 238.835164][ T9084] [U] [ 238.837903][ T9084] [U] [ 238.840638][ T9084] [U] [ 238.931804][ T9084] [U] [ 238.931891][ T9084] [U] [ 238.931931][ T9084] [U] [ 238.931969][ T9084] [U] [ 238.932276][ T9084] [U] [ 238.932311][ T9084] [U] [ 238.932341][ T9084] [U] [ 238.932373][ T9084] [U] [ 238.932550][ T9084] [U] [ 238.932589][ T9084] [U] [ 238.932627][ T9084] [U] [ 238.932665][ T9084] [U] [ 238.932935][ T9084] [U] [ 238.932979][ T9084] [U] [ 238.933017][ T9084] [U] [ 238.933058][ T9084] [U] [ 238.933258][ T9084] [U] [ 238.933296][ T9084] [U] [ 238.933327][ T9084] [U] [ 238.933361][ T9084] [U] [ 238.933598][ T9084] [U] [ 238.933634][ T9084] [U] [ 238.933671][ T9084] [U] [ 238.933708][ T9084] [U] [ 238.933886][ T9084] [U] [ 238.933922][ T9084] [U] [ 238.933961][ T9084] [U] [ 238.934000][ T9084] [U] [ 238.934274][ T9084] [U] [ 238.934308][ T9084] [U] [ 238.934342][ T9084] [U] [ 238.934376][ T9084] [U] [ 238.934540][ T9084] [U] [ 238.934574][ T9084] [U] [ 238.934608][ T9084] [U] [ 238.934639][ T9084] [U] [ 238.935005][ T9084] [U] [ 238.935044][ T9084] [U] [ 238.935080][ T9084] [U] [ 238.935126][ T9084] [U] [ 238.935295][ T9084] [U] [ 238.935330][ T9084] [U] [ 238.935364][ T9084] [U] [ 238.935403][ T9084] [U] [ 238.935667][ T9084] [U] [ 238.935705][ T9084] [U] [ 238.935742][ T9084] [U] [ 238.935779][ T9084] [U] [ 238.935960][ T9084] [U] [ 238.935996][ T9084] [U] [ 238.936031][ T9084] [U] [ 238.936066][ T9084] [U] [ 238.936338][ T9084] [U] [ 238.936374][ T9084] [U] [ 238.936411][ T9084] [U] [ 238.936448][ T9084] [U] [ 238.936609][ T9084] [U] [ 238.936642][ T9084] [U] [ 238.936673][ T9084] [U] [ 238.936704][ T9084] [U] [ 238.936962][ T9084] [U] [ 238.937005][ T9084] [U] [ 238.937047][ T9084] [U] [ 238.937081][ T9084] [U] [ 238.937274][ T9084] [U] [ 238.937314][ T9084] [U] [ 238.937356][ T9084] [U] [ 238.937396][ T9084] [U] [ 238.937673][ T9084] [U] [ 238.937713][ T9084] [U] [ 238.937754][ T9084] [U] [ 238.937798][ T9084] [U] [ 238.937939][ T9084] [U] [ 239.132797][ T9084] [U] [ 239.135516][ T9084] [U] [ 239.138225][ T9084] [U] [ 239.283210][ T9084] [U] [ 239.283242][ T9084] [U] [ 239.283262][ T9084] [U] [ 239.283284][ T9084] [U] [ 239.283384][ T9084] [U] [ 239.283407][ T9084] [U] [ 239.283428][ T9084] [U] [ 239.283449][ T9084] [U] [ 239.283607][ T9084] [U] [ 239.283628][ T9084] [U] [ 239.283649][ T9084] [U] [ 239.283670][ T9084] [U] [ 239.283765][ T9084] [U] [ 239.283787][ T9084] [U] [ 239.283807][ T9084] [U] [ 239.283829][ T9084] [U] [ 239.284996][ T9084] [U] [ 239.285037][ T9084] [U] [ 239.285079][ T9084] [U] [ 239.285109][ T9084] [U] [ 239.285283][ T9084] [U] [ 239.285318][ T9084] [U] [ 239.285354][ T9084] [U] [ 239.285391][ T9084] [U] [ 239.285703][ T9084] [U] [ 239.285737][ T9084] [U] [ 239.285767][ T9084] [U] [ 239.285796][ T9084] [U] [ 239.285926][ T9084] [U] [ 239.285959][ T9084] [U] [ 239.285992][ T9084] [U] [ 239.293016][ T9083] [U] [ 239.545774][ T9091] FAULT_INJECTION: forcing a failure. [ 239.545774][ T9091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.596874][ T9091] CPU: 1 UID: 0 PID: 9091 Comm: syz.2.700 Not tainted 6.14.0-rc4-syzkaller #0 [ 239.596909][ T9091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 239.596922][ T9091] Call Trace: [ 239.596929][ T9091] [ 239.596938][ T9091] dump_stack_lvl+0x16c/0x1f0 [ 239.596976][ T9091] should_fail_ex+0x50a/0x650 [ 239.597016][ T9091] _copy_from_iter+0x2a1/0x1560 [ 239.597041][ T9091] ? trace_lock_acquire+0x14e/0x1f0 [ 239.597073][ T9091] ? __pfx__copy_from_iter+0x10/0x10 [ 239.597094][ T9091] ? __virt_addr_valid+0x1a4/0x590 [ 239.597123][ T9091] ? __virt_addr_valid+0x5e/0x590 [ 239.597145][ T9091] ? __phys_addr_symbol+0x30/0x80 [ 239.597167][ T9091] ? __check_object_size+0x488/0x710 [ 239.597196][ T9091] file_tty_write.constprop.0+0x48d/0x9a0 [ 239.597236][ T9091] vfs_write+0x5ae/0x1150 [ 239.597268][ T9091] ? __pfx_tty_write+0x10/0x10 [ 239.597311][ T9091] ? __pfx_vfs_write+0x10/0x10 [ 239.597337][ T9091] ? do_futex+0x123/0x350 [ 239.597367][ T9091] ? __fget_files+0x40/0x3a0 [ 239.597414][ T9091] ksys_write+0x12b/0x250 [ 239.597443][ T9091] ? __pfx_ksys_write+0x10/0x10 [ 239.597482][ T9091] do_syscall_64+0xcd/0x250 [ 239.597514][ T9091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.597544][ T9091] RIP: 0033:0x7fc20518d169 [ 239.597563][ T9091] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.597584][ T9091] RSP: 002b:00007fc206077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 239.597606][ T9091] RAX: ffffffffffffffda RBX: 00007fc2053a5fa0 RCX: 00007fc20518d169 [ 239.597621][ T9091] RDX: 00000000fffffdf2 RSI: 0000000000000000 RDI: 0000000000000003 [ 239.597634][ T9091] RBP: 00007fc20520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 239.597647][ T9091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 239.597660][ T9091] R13: 0000000000000000 R14: 00007fc2053a5fa0 R15: 00007fffca9df478 [ 239.597691][ T9091] [ 242.616158][ T9149] FAULT_INJECTION: forcing a failure. [ 242.616158][ T9149] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 242.727076][ T9149] CPU: 1 UID: 0 PID: 9149 Comm: syz.3.711 Not tainted 6.14.0-rc4-syzkaller #0 [ 242.727118][ T9149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 242.727134][ T9149] Call Trace: [ 242.727142][ T9149] [ 242.727153][ T9149] dump_stack_lvl+0x16c/0x1f0 [ 242.727195][ T9149] should_fail_ex+0x50a/0x650 [ 242.727232][ T9149] ? __pfx___might_resched+0x10/0x10 [ 242.727271][ T9149] should_fail_alloc_page+0xe7/0x130 [ 242.727298][ T9149] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 242.727337][ T9149] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 242.727374][ T9149] ? hlock_class+0x4e/0x130 [ 242.727399][ T9149] ? mark_lock+0xb5/0xc60 [ 242.727433][ T9149] ? __pfx_mark_lock+0x10/0x10 [ 242.727467][ T9149] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 242.727505][ T9149] ? hlock_class+0x4e/0x130 [ 242.727529][ T9149] ? mark_lock+0xb5/0xc60 [ 242.727559][ T9149] ? hlock_class+0x4e/0x130 [ 242.727591][ T9149] ? hlock_class+0x4e/0x130 [ 242.727615][ T9149] ? __lock_acquire+0xcc5/0x3c40 [ 242.727648][ T9149] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 242.727686][ T9149] ? policy_nodemask+0xea/0x4e0 [ 242.727727][ T9149] alloc_pages_mpol+0x1fc/0x540 [ 242.727752][ T9149] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 242.727775][ T9149] ? __lock_acquire+0x15a9/0x3c40 [ 242.727826][ T9149] folio_alloc_mpol_noprof+0x36/0x2f0 [ 242.727860][ T9149] vma_alloc_folio_noprof+0xee/0x1b0 [ 242.727890][ T9149] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 242.727921][ T9149] ? find_held_lock+0x2d/0x110 [ 242.727957][ T9149] do_pte_missing+0x202f/0x3e10 [ 242.728005][ T9149] __handle_mm_fault+0x1166/0x2c60 [ 242.728045][ T9149] ? __pfx___handle_mm_fault+0x10/0x10 [ 242.728077][ T9149] ? follow_page_pte+0x3ac/0x1490 [ 242.728109][ T9149] ? __pfx_lock_release+0x10/0x10 [ 242.728167][ T9149] handle_mm_fault+0x3fa/0xaa0 [ 242.728208][ T9149] __get_user_pages+0x773/0x36f0 [ 242.728249][ T9149] ? __pfx_mt_find+0x10/0x10 [ 242.728280][ T9149] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 242.728312][ T9149] ? __pfx___get_user_pages+0x10/0x10 [ 242.728347][ T9149] ? __mm_populate+0x21d/0x380 [ 242.728386][ T9149] populate_vma_page_range+0x27f/0x3a0 [ 242.728429][ T9149] ? __pfx_populate_vma_page_range+0x10/0x10 [ 242.728468][ T9149] ? __pfx_find_vma_intersection+0x10/0x10 [ 242.728503][ T9149] ? vm_mmap_pgoff+0x29b/0x3a0 [ 242.728535][ T9149] __mm_populate+0x1d6/0x380 [ 242.728567][ T9149] ? __pfx___mm_populate+0x10/0x10 [ 242.728602][ T9149] ? up_write+0x1b2/0x520 [ 242.728640][ T9149] vm_mmap_pgoff+0x2d3/0x3a0 [ 242.728676][ T9149] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 242.728712][ T9149] ? __x64_sys_futex+0x1e1/0x4c0 [ 242.728737][ T9149] ? __x64_sys_futex+0x1ea/0x4c0 [ 242.728770][ T9149] ksys_mmap_pgoff+0x7d/0x5c0 [ 242.728822][ T9149] ? rcu_is_watching+0x12/0xc0 [ 242.728855][ T9149] __x64_sys_mmap+0x125/0x190 [ 242.728893][ T9149] do_syscall_64+0xcd/0x250 [ 242.728926][ T9149] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.728958][ T9149] RIP: 0033:0x7f0c9338d169 [ 242.728978][ T9149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.729005][ T9149] RSP: 002b:00007f0c94171038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 242.729029][ T9149] RAX: ffffffffffffffda RBX: 00007f0c935a5fa0 RCX: 00007f0c9338d169 [ 242.729045][ T9149] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 242.729059][ T9149] RBP: 00007f0c9340e2a0 R08: 0000000000000007 R09: 0000000000028000 [ 242.729072][ T9149] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 242.729085][ T9149] R13: 0000000000000000 R14: 00007f0c935a5fa0 R15: 00007fff5a303368 [ 242.729117][ T9149] [ 243.089377][ C1] vkms_vblank_simulate: vblank timer overrun [ 245.430410][ T9216] netlink: 'syz.3.726': attribute type 1 has an invalid length. [ 246.854301][ T9258] FAULT_INJECTION: forcing a failure. [ 246.854301][ T9258] name failslab, interval 1, probability 0, space 0, times 0 [ 246.867406][ T9258] CPU: 1 UID: 0 PID: 9258 Comm: syz.1.737 Not tainted 6.14.0-rc4-syzkaller #0 [ 246.867438][ T9258] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 246.867452][ T9258] Call Trace: [ 246.867459][ T9258] [ 246.867469][ T9258] dump_stack_lvl+0x16c/0x1f0 [ 246.867510][ T9258] should_fail_ex+0x50a/0x650 [ 246.867548][ T9258] ? fs_reclaim_acquire+0xae/0x150 [ 246.867578][ T9258] should_failslab+0xc2/0x120 [ 246.867609][ T9258] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 246.867646][ T9258] ? security_inode_alloc+0x3b/0x2b0 [ 246.867673][ T9258] security_inode_alloc+0x3b/0x2b0 [ 246.867699][ T9258] inode_init_always_gfp+0xce4/0x1030 [ 246.867739][ T9258] alloc_inode+0x82/0x230 [ 246.867761][ T9258] sock_alloc+0x40/0x280 [ 246.867797][ T9258] __sock_create+0xc1/0x8d0 [ 246.867826][ T9258] __sys_socketpair+0x25d/0x5a0 [ 246.867851][ T9258] ? __pfx___sys_socketpair+0x10/0x10 [ 246.867879][ T9258] ? xfd_validate_state+0x5d/0x180 [ 246.867913][ T9258] ? rcu_is_watching+0x12/0xc0 [ 246.867945][ T9258] __x64_sys_socketpair+0x96/0x100 [ 246.867973][ T9258] ? lockdep_hardirqs_on+0x7c/0x110 [ 246.868002][ T9258] do_syscall_64+0xcd/0x250 [ 246.868034][ T9258] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.868067][ T9258] RIP: 0033:0x7f1f25f8d169 [ 246.868089][ T9258] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.868111][ T9258] RSP: 002b:00007f1f26da3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 246.868135][ T9258] RAX: ffffffffffffffda RBX: 00007f1f261a5fa0 RCX: 00007f1f25f8d169 [ 246.868150][ T9258] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 000000000000001e [ 246.868165][ T9258] RBP: 00007f1f2600e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 246.868180][ T9258] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 246.868196][ T9258] R13: 0000000000000000 R14: 00007f1f261a5fa0 R15: 00007ffe85f206e8 [ 246.868228][ T9258] [ 246.869576][ T9258] socket: no more sockets [ 248.905034][ T9330] FAULT_INJECTION: forcing a failure. [ 248.905034][ T9330] name failslab, interval 1, probability 0, space 0, times 0 [ 248.918330][ T9330] CPU: 1 UID: 0 PID: 9330 Comm: syz.3.754 Not tainted 6.14.0-rc4-syzkaller #0 [ 248.918359][ T9330] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 248.918372][ T9330] Call Trace: [ 248.918379][ T9330] [ 248.918388][ T9330] dump_stack_lvl+0x16c/0x1f0 [ 248.918424][ T9330] should_fail_ex+0x50a/0x650 [ 248.918459][ T9330] ? fs_reclaim_acquire+0xae/0x150 [ 248.918491][ T9330] ? sk_prot_alloc+0x1a8/0x2a0 [ 248.918513][ T9330] should_failslab+0xc2/0x120 [ 248.918537][ T9330] __kmalloc_noprof+0xcb/0x510 [ 248.918568][ T9330] ? evm_inode_alloc_security+0x49/0xc0 [ 248.918601][ T9330] ? security_inode_alloc+0xcf/0x2b0 [ 248.918638][ T9330] sk_prot_alloc+0x1a8/0x2a0 [ 248.918664][ T9330] sk_alloc+0x36/0xb90 [ 248.918694][ T9330] __netlink_create+0x5e/0x2c0 [ 248.918722][ T9330] __netlink_kernel_create+0xee/0x750 [ 248.918753][ T9330] ? __pfx___netlink_kernel_create+0x10/0x10 [ 248.918783][ T9330] ? find_held_lock+0x2d/0x110 [ 248.918815][ T9330] rtnetlink_net_init+0xba/0x140 [ 248.918842][ T9330] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 248.918871][ T9330] ? __pfx_rtnetlink_rcv+0x10/0x10 [ 248.918895][ T9330] ? __pfx_rtnetlink_bind+0x10/0x10 [ 248.918921][ T9330] ? __pfx_netlink_tap_init_net+0x10/0x10 [ 248.918948][ T9330] ? debug_mutex_init+0x37/0x70 [ 248.918975][ T9330] ? __pfx_rtnetlink_net_init+0x10/0x10 [ 248.919000][ T9330] ops_init+0x1df/0x5f0 [ 248.919031][ T9330] setup_net+0x21f/0x860 [ 248.919060][ T9330] ? __pfx_setup_net+0x10/0x10 [ 248.919085][ T9330] ? down_read_killable+0xcc/0x380 [ 248.919114][ T9330] ? __pfx_down_read_killable+0x10/0x10 [ 248.919145][ T9330] ? __raw_spin_lock_init+0x3a/0x110 [ 248.919181][ T9330] ? debug_mutex_init+0x37/0x70 [ 248.919216][ T9330] copy_net_ns+0x2a6/0x5f0 [ 248.919242][ T9330] create_new_namespaces+0x3ea/0xad0 [ 248.919286][ T9330] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 248.919323][ T9330] ksys_unshare+0x45d/0xa40 [ 248.919349][ T9330] ? __pfx_ksys_unshare+0x10/0x10 [ 248.919371][ T9330] ? xfd_validate_state+0x5d/0x180 [ 248.919414][ T9330] __x64_sys_unshare+0x31/0x40 [ 248.919438][ T9330] do_syscall_64+0xcd/0x250 [ 248.919469][ T9330] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.919500][ T9330] RIP: 0033:0x7f0c9338d169 [ 248.919519][ T9330] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.919541][ T9330] RSP: 002b:00007f0c94171038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 248.919563][ T9330] RAX: ffffffffffffffda RBX: 00007f0c935a5fa0 RCX: 00007f0c9338d169 [ 248.919579][ T9330] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 248.919592][ T9330] RBP: 00007f0c9340e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 248.919606][ T9330] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 248.919618][ T9330] R13: 0000000000000000 R14: 00007f0c935a5fa0 R15: 00007fff5a303368 [ 248.919650][ T9330] [ 251.506515][ T9412] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 251.531182][ T9412] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 251.591839][ T9412] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 251.597949][ T9412] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 251.853602][ T9432] sd 0:0:1:0: PR command failed: 1026 [ 251.859087][ T9432] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 251.892889][ T9432] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 251.958381][ T9440] sd 0:0:1:0: PR command failed: 1026 [ 251.965589][ T9440] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 251.990094][ T9440] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 252.343950][ T9451] synth uevent: /module/qat_c62x: unknown uevent action string [ 253.031773][ T5145] Bluetooth: hci2: command 0x0c1a tx timeout [ 253.591710][ T5145] Bluetooth: hci1: command 0x0c1a tx timeout [ 253.681695][ T5848] Bluetooth: hci0: command 0x0c1a tx timeout [ 253.687796][ T5145] Bluetooth: hci3: command 0x0c1a tx timeout [ 256.191872][ T9565] FAULT_INJECTION: forcing a failure. [ 256.191872][ T9565] name failslab, interval 1, probability 0, space 0, times 0 [ 256.227368][ T9565] CPU: 1 UID: 0 PID: 9565 Comm: syz.1.808 Not tainted 6.14.0-rc4-syzkaller #0 [ 256.227399][ T9565] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 256.227413][ T9565] Call Trace: [ 256.227420][ T9565] [ 256.227430][ T9565] dump_stack_lvl+0x16c/0x1f0 [ 256.227468][ T9565] should_fail_ex+0x50a/0x650 [ 256.227506][ T9565] ? fs_reclaim_acquire+0xae/0x150 [ 256.227541][ T9565] ? cache_create_net+0xa0/0x220 [ 256.227573][ T9565] should_failslab+0xc2/0x120 [ 256.227614][ T9565] __kmalloc_noprof+0xcb/0x510 [ 256.227657][ T9565] cache_create_net+0xa0/0x220 [ 256.227692][ T9565] ? __pfx_nfsd_net_init+0x10/0x10 [ 256.227723][ T9565] nfsd_idmap_init+0x62/0x250 [ 256.227759][ T9565] ? __pfx_nfsd_net_init+0x10/0x10 [ 256.227787][ T9565] nfsd_net_init+0x69/0x3a0 [ 256.227818][ T9565] ? __pfx_nfsd_net_init+0x10/0x10 [ 256.227847][ T9565] ops_init+0x1df/0x5f0 [ 256.227885][ T9565] setup_net+0x21f/0x860 [ 256.227920][ T9565] ? __pfx_setup_net+0x10/0x10 [ 256.227951][ T9565] ? down_read_killable+0xcc/0x380 [ 256.227983][ T9565] ? __pfx_down_read_killable+0x10/0x10 [ 256.228012][ T9565] ? __raw_spin_lock_init+0x3a/0x110 [ 256.228052][ T9565] ? debug_mutex_init+0x37/0x70 [ 256.228081][ T9565] copy_net_ns+0x2a6/0x5f0 [ 256.228107][ T9565] create_new_namespaces+0x3ea/0xad0 [ 256.228151][ T9565] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 256.228188][ T9565] ksys_unshare+0x45d/0xa40 [ 256.228214][ T9565] ? __pfx_ksys_unshare+0x10/0x10 [ 256.228237][ T9565] ? xfd_validate_state+0x5d/0x180 [ 256.228280][ T9565] __x64_sys_unshare+0x31/0x40 [ 256.228303][ T9565] do_syscall_64+0xcd/0x250 [ 256.228334][ T9565] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.228366][ T9565] RIP: 0033:0x7f1f25f8d169 [ 256.228384][ T9565] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.228410][ T9565] RSP: 002b:00007f1f26da3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 256.228432][ T9565] RAX: ffffffffffffffda RBX: 00007f1f261a5fa0 RCX: 00007f1f25f8d169 [ 256.228449][ T9565] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 256.228463][ T9565] RBP: 00007f1f2600e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 256.228477][ T9565] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 256.228491][ T9565] R13: 0000000000000000 R14: 00007f1f261a5fa0 R15: 00007ffe85f206e8 [ 256.228523][ T9565] [ 256.313469][ T9573] netlink: 4 bytes leftover after parsing attributes in process `syz.2.812'. [ 256.652366][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.658739][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.750691][ T9583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 257.785955][ T9602] openvswitch: netlink: Multiple metadata blocks provided [ 258.247940][ T9628] netlink: 4 bytes leftover after parsing attributes in process `syz.0.824'. [ 259.692429][ T9667] netlink: 28 bytes leftover after parsing attributes in process `syz.3.832'. [ 259.974078][ T5145] Bluetooth: hci0: Malformed LE Event: 0x1d [ 260.849718][ T9693] zswap: compressor not available [ 261.115941][ T9708] Invalid ELF header magic: != ELF [ 261.287464][ T9703] netlink: 334 bytes leftover after parsing attributes in process `syz.0.842'. [ 261.528760][ T9709] netlink: 28 bytes leftover after parsing attributes in process `syz.2.843'. [ 262.198196][ T9734] ima: policy update failed [ 262.205180][ T29] audit: type=1802 audit(4294967456.216:11): pid=9734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.848" res=0 errno=0 [ 263.616830][ T9755] FAULT_INJECTION: forcing a failure. [ 263.616830][ T9755] name failslab, interval 1, probability 0, space 0, times 0 [ 263.636879][ T9755] CPU: 0 UID: 0 PID: 9755 Comm: syz.2.853 Not tainted 6.14.0-rc4-syzkaller #0 [ 263.636912][ T9755] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 263.636926][ T9755] Call Trace: [ 263.636933][ T9755] [ 263.636943][ T9755] dump_stack_lvl+0x16c/0x1f0 [ 263.636979][ T9755] should_fail_ex+0x50a/0x650 [ 263.637016][ T9755] ? fs_reclaim_acquire+0xae/0x150 [ 263.637049][ T9755] ? police_init_net+0x56/0x270 [ 263.637072][ T9755] should_failslab+0xc2/0x120 [ 263.637095][ T9755] __kmalloc_cache_noprof+0x68/0x410 [ 263.637133][ T9755] ? __pfx_police_init_net+0x10/0x10 [ 263.637158][ T9755] police_init_net+0x56/0x270 [ 263.637184][ T9755] ops_init+0x1df/0x5f0 [ 263.637221][ T9755] setup_net+0x21f/0x860 [ 263.637256][ T9755] ? __pfx_setup_net+0x10/0x10 [ 263.637287][ T9755] ? down_read_killable+0xcc/0x380 [ 263.637318][ T9755] ? __pfx_down_read_killable+0x10/0x10 [ 263.637349][ T9755] ? __raw_spin_lock_init+0x3a/0x110 [ 263.637387][ T9755] ? debug_mutex_init+0x37/0x70 [ 263.637415][ T9755] copy_net_ns+0x2a6/0x5f0 [ 263.637441][ T9755] create_new_namespaces+0x3ea/0xad0 [ 263.637485][ T9755] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 263.637524][ T9755] ksys_unshare+0x45d/0xa40 [ 263.637549][ T9755] ? __pfx_ksys_unshare+0x10/0x10 [ 263.637572][ T9755] ? xfd_validate_state+0x5d/0x180 [ 263.637615][ T9755] __x64_sys_unshare+0x31/0x40 [ 263.637639][ T9755] do_syscall_64+0xcd/0x250 [ 263.637669][ T9755] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 263.637700][ T9755] RIP: 0033:0x7fc20518d169 [ 263.637727][ T9755] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 263.637751][ T9755] RSP: 002b:00007fc206077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 263.637773][ T9755] RAX: ffffffffffffffda RBX: 00007fc2053a5fa0 RCX: 00007fc20518d169 [ 263.637789][ T9755] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 263.637804][ T9755] RBP: 00007fc20520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 263.637818][ T9755] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 263.637832][ T9755] R13: 0000000000000000 R14: 00007fc2053a5fa0 R15: 00007fffca9df478 [ 263.637868][ T9755] [ 265.400894][ T9775] netlink: 12 bytes leftover after parsing attributes in process `syz.2.857'. [ 269.084068][ T9825] FAULT_INJECTION: forcing a failure. [ 269.084068][ T9825] name fail_futex, interval 1, probability 0, space 0, times 1 [ 269.133267][ T9825] CPU: 1 UID: 0 PID: 9825 Comm: syz.2.866 Not tainted 6.14.0-rc4-syzkaller #0 [ 269.133299][ T9825] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 269.133312][ T9825] Call Trace: [ 269.133319][ T9825] [ 269.133328][ T9825] dump_stack_lvl+0x16c/0x1f0 [ 269.133359][ T9825] should_fail_ex+0x50a/0x650 [ 269.133391][ T9825] ? __lock_acquire+0x15a9/0x3c40 [ 269.133423][ T9825] get_futex_key+0xac1/0x1000 [ 269.133453][ T9825] ? __pfx_get_futex_key+0x10/0x10 [ 269.133488][ T9825] futex_wake+0xe8/0x4e0 [ 269.133520][ T9825] ? __pfx_futex_wake+0x10/0x10 [ 269.133553][ T9825] ? find_held_lock+0x2d/0x110 [ 269.133585][ T9825] do_futex+0x1e5/0x350 [ 269.133611][ T9825] ? __pfx_do_futex+0x10/0x10 [ 269.133638][ T9825] ? __might_fault+0xe3/0x190 [ 269.133661][ T9825] ? __might_fault+0xe3/0x190 [ 269.133686][ T9825] mm_release+0x24e/0x300 [ 269.133717][ T9825] do_exit+0x886/0x2d70 [ 269.133742][ T9825] ? get_signal+0x8f7/0x26c0 [ 269.133773][ T9825] ? __pfx_do_exit+0x10/0x10 [ 269.133796][ T9825] ? do_raw_spin_lock+0x12d/0x2c0 [ 269.133818][ T9825] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 269.133844][ T9825] do_group_exit+0xd3/0x2a0 [ 269.133869][ T9825] get_signal+0x24ed/0x26c0 [ 269.133907][ T9825] ? _raw_spin_unlock_irq+0x2e/0x50 [ 269.133934][ T9825] ? __pfx_get_signal+0x10/0x10 [ 269.133968][ T9825] ? __pfx_do_futex+0x10/0x10 [ 269.133998][ T9825] arch_do_signal_or_restart+0x90/0x7e0 [ 269.134024][ T9825] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 269.134055][ T9825] ? rcu_is_watching+0x12/0xc0 [ 269.134085][ T9825] syscall_exit_to_user_mode+0x150/0x2a0 [ 269.134113][ T9825] do_syscall_64+0xda/0x250 [ 269.134146][ T9825] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.134176][ T9825] RIP: 0033:0x7fc20518d169 [ 269.134194][ T9825] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.134215][ T9825] RSP: 002b:00007fc2060770e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 269.134236][ T9825] RAX: fffffffffffffe00 RBX: 00007fc2053a5fa8 RCX: 00007fc20518d169 [ 269.134250][ T9825] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fc2053a5fa8 [ 269.134263][ T9825] RBP: 00007fc2053a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 269.134276][ T9825] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc2053a5fac [ 269.134290][ T9825] R13: 0000000000000000 R14: 00007fffca9df390 R15: 00007fffca9df478 [ 269.134319][ T9825] [ 271.448608][ T9858] FAULT_INJECTION: forcing a failure. [ 271.448608][ T9858] name failslab, interval 1, probability 0, space 0, times 0 [ 271.491726][ T9858] CPU: 0 UID: 0 PID: 9858 Comm: syz.2.875 Not tainted 6.14.0-rc4-syzkaller #0 [ 271.491764][ T9858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 271.491779][ T9858] Call Trace: [ 271.491786][ T9858] [ 271.491797][ T9858] dump_stack_lvl+0x16c/0x1f0 [ 271.491838][ T9858] should_fail_ex+0x50a/0x650 [ 271.491873][ T9858] ? fs_reclaim_acquire+0xae/0x150 [ 271.491907][ T9858] should_failslab+0xc2/0x120 [ 271.491930][ T9858] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 271.491960][ T9858] ? __kernfs_new_node+0xd3/0x890 [ 271.491993][ T9858] __kernfs_new_node+0xd3/0x890 [ 271.492012][ T9858] ? __kernel_text_address+0xd/0x40 [ 271.492036][ T9858] ? __pfx___kernfs_new_node+0x10/0x10 [ 271.492060][ T9858] ? stack_trace_save+0x95/0xd0 [ 271.492075][ T9858] ? __pfx_stack_trace_save+0x10/0x10 [ 271.492090][ T9858] ? stack_depot_save_flags+0x28/0x9c0 [ 271.492111][ T9858] kernfs_new_node+0x186/0x240 [ 271.492130][ T9858] ? kasan_save_stack+0x42/0x60 [ 271.492151][ T9858] kernfs_create_dir_ns+0x4c/0x150 [ 271.492172][ T9858] sysfs_create_dir_ns+0x13b/0x2b0 [ 271.492189][ T9858] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 271.492208][ T9858] ? kfree+0x260/0x4d0 [ 271.492237][ T9858] kobject_add_internal+0x2c8/0x990 [ 271.492263][ T9858] kobject_add+0x16f/0x240 [ 271.492283][ T9858] ? __pfx_kobject_add+0x10/0x10 [ 271.492315][ T9858] kobject_create_and_add+0x7e/0xf0 [ 271.492335][ T9858] add_disk_fwnode+0x7e0/0x1320 [ 271.492357][ T9858] zram_add+0x486/0x6b0 [ 271.492377][ T9858] ? __pfx_zram_add+0x10/0x10 [ 271.492405][ T9858] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 271.492427][ T9858] ? rcu_is_watching+0x12/0xc0 [ 271.492447][ T9858] ? __pfx_hot_add_show+0x10/0x10 [ 271.492464][ T9858] hot_add_show+0x21/0x80 [ 271.492482][ T9858] class_attr_show+0x6f/0xa0 [ 271.492500][ T9858] ? __pfx_class_attr_show+0x10/0x10 [ 271.492515][ T9858] sysfs_kf_seq_show+0x23e/0x410 [ 271.492533][ T9858] seq_read_iter+0x4f4/0x12b0 [ 271.492559][ T9858] kernfs_fop_read_iter+0x414/0x580 [ 271.492573][ T9858] ? rw_verify_area+0xcf/0x680 [ 271.492591][ T9858] vfs_read+0x886/0xbf0 [ 271.492611][ T9858] ? __pfx_vfs_read+0x10/0x10 [ 271.492641][ T9858] ksys_read+0x12b/0x250 [ 271.492657][ T9858] ? __pfx_ksys_read+0x10/0x10 [ 271.492680][ T9858] do_syscall_64+0xcd/0x250 [ 271.492698][ T9858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.492717][ T9858] RIP: 0033:0x7fc20518d169 [ 271.492730][ T9858] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.492742][ T9858] RSP: 002b:00007fc206077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 271.492755][ T9858] RAX: ffffffffffffffda RBX: 00007fc2053a5fa0 RCX: 00007fc20518d169 [ 271.492764][ T9858] RDX: 0000000000000ff0 RSI: 0000400000000ec0 RDI: 0000000000000007 [ 271.492772][ T9858] RBP: 00007fc20520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 271.492780][ T9858] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.492789][ T9858] R13: 0000000000000000 R14: 00007fc2053a5fa0 R15: 00007fffca9df478 [ 271.492808][ T9858] [ 271.492818][ T9858] kobject: kobject_add_internal failed for holders (error: -12 parent: zram2) [ 271.820108][ T9858] kobject: kobject_create_and_add: kobject_add error: -12 [ 272.663016][ T9882] openvswitch: netlink: Key type 29 is not supported [ 273.924263][ T9910] Invalid ELF header magic: != ELF [ 273.958902][ T9908] input: isc as /devices/virtual/input/input19 [ 276.461781][ T9956] netlink: 4 bytes leftover after parsing attributes in process `syz.0.896'. [ 277.265932][ T9980] netlink: Conntrack attr type has unexpected length (type=3, length=0, expected=8) [ 280.342362][T10049] FAULT_INJECTION: forcing a failure. [ 280.342362][T10049] name failslab, interval 1, probability 0, space 0, times 0 [ 280.355644][T10049] CPU: 0 UID: 0 PID: 10049 Comm: syz.2.916 Not tainted 6.14.0-rc4-syzkaller #0 [ 280.355678][T10049] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 280.355694][T10049] Call Trace: [ 280.355703][T10049] [ 280.355713][T10049] dump_stack_lvl+0x16c/0x1f0 [ 280.355753][T10049] should_fail_ex+0x50a/0x650 [ 280.355797][T10049] should_failslab+0xc2/0x120 [ 280.355824][T10049] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 280.355859][T10049] ? trace_lock_acquire+0x14e/0x1f0 [ 280.355891][T10049] ? skb_clone+0x190/0x3f0 [ 280.355930][T10049] skb_clone+0x190/0x3f0 [ 280.355965][T10049] dev_queue_xmit_nit+0x38f/0xbc0 [ 280.356002][T10049] ? netif_skb_features+0x3b0/0xd50 [ 280.356034][T10049] dev_hard_start_xmit+0x283/0x7b0 [ 280.356069][T10049] __dev_queue_xmit+0x7f0/0x43e0 [ 280.356113][T10049] ? __pfx___dev_queue_xmit+0x10/0x10 [ 280.356169][T10049] ? __asan_memcpy+0x3c/0x60 [ 280.356202][T10049] ? __asan_memcpy+0x3c/0x60 [ 280.356232][T10049] ? __skb_clone+0x570/0x760 [ 280.356271][T10049] netlink_deliver_tap+0xa87/0xd30 [ 280.356310][T10049] netlink_unicast+0x5e1/0x7f0 [ 280.356346][T10049] ? __pfx_netlink_unicast+0x10/0x10 [ 280.356378][T10049] ? __phys_addr_symbol+0x30/0x80 [ 280.356404][T10049] ? __check_object_size+0x488/0x710 [ 280.356433][T10049] netlink_sendmsg+0x8b8/0xd70 [ 280.356471][T10049] ? __pfx_netlink_sendmsg+0x10/0x10 [ 280.356529][T10049] __sys_sendto+0x488/0x4f0 [ 280.356565][T10049] ? __pfx___sys_sendto+0x10/0x10 [ 280.356598][T10049] ? reacquire_held_locks+0x20b/0x4c0 [ 280.356632][T10049] ? do_user_addr_fault+0xdc7/0x13f0 [ 280.356705][T10049] __x64_sys_sendto+0xe0/0x1c0 [ 280.356734][T10049] ? do_syscall_64+0x91/0x250 [ 280.356764][T10049] ? lockdep_hardirqs_on+0x7c/0x110 [ 280.356792][T10049] do_syscall_64+0xcd/0x250 [ 280.356824][T10049] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 280.356856][T10049] RIP: 0033:0x7fc20518effc [ 280.356877][T10049] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 280.356900][T10049] RSP: 002b:00007fc206075ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 280.356925][T10049] RAX: ffffffffffffffda RBX: 00007fc206075fc0 RCX: 00007fc20518effc [ 280.356943][T10049] RDX: 000000000000001c RSI: 00007fc206076010 RDI: 0000000000000005 [ 280.356959][T10049] RBP: 0000000000000000 R08: 00007fc206075f14 R09: 000000000000000c [ 280.356976][T10049] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000005 [ 280.356992][T10049] R13: 00007fc206075f68 R14: 00007fc206076010 R15: 0000000000000000 [ 280.357027][T10049] [ 281.525291][T10059] nbd: socks must be embedded in a SOCK_ITEM attr [ 283.517104][T10112] FAULT_INJECTION: forcing a failure. [ 283.517104][T10112] name failslab, interval 1, probability 0, space 0, times 0 [ 283.552800][T10112] CPU: 0 UID: 0 PID: 10112 Comm: syz.2.932 Not tainted 6.14.0-rc4-syzkaller #0 [ 283.552845][T10112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 283.552860][T10112] Call Trace: [ 283.552868][T10112] [ 283.552878][T10112] dump_stack_lvl+0x16c/0x1f0 [ 283.552920][T10112] should_fail_ex+0x50a/0x650 [ 283.552961][T10112] ? fs_reclaim_acquire+0xae/0x150 [ 283.553004][T10112] should_failslab+0xc2/0x120 [ 283.553031][T10112] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 283.553082][T10112] ? __kernfs_new_node+0xd3/0x890 [ 283.553118][T10112] __kernfs_new_node+0xd3/0x890 [ 283.553156][T10112] ? __pfx___kernfs_new_node+0x10/0x10 [ 283.553183][T10112] ? __pfx_lock_release+0x10/0x10 [ 283.553215][T10112] ? kernfs_add_one+0x39d/0x520 [ 283.553261][T10112] ? up_write+0x1b2/0x520 [ 283.553298][T10112] kernfs_new_node+0x186/0x240 [ 283.553333][T10112] __kernfs_create_file+0x53/0x350 [ 283.553361][T10112] sysfs_add_file_mode_ns+0x1ff/0x3b0 [ 283.553399][T10112] internal_create_group+0x56c/0xf10 [ 283.553435][T10112] ? __pfx_internal_create_group+0x10/0x10 [ 283.553469][T10112] ? kernfs_create_link+0x1bd/0x240 [ 283.553496][T10112] internal_create_groups+0x9d/0x150 [ 283.553527][T10112] device_add+0x6d3/0x1a70 [ 283.553564][T10112] ? __pfx_device_add+0x10/0x10 [ 283.553603][T10112] ? __init_waitqueue_head+0xca/0x150 [ 283.553638][T10112] netdev_register_kobject+0x183/0x3a0 [ 283.553677][T10112] register_netdevice+0x147b/0x1eb0 [ 283.553742][T10112] ? __pfx_register_netdevice+0x10/0x10 [ 283.553786][T10112] ? __pfx_loopback_net_init+0x10/0x10 [ 283.553814][T10112] register_netdev+0x34/0x50 [ 283.553841][T10112] loopback_net_init+0x7a/0x170 [ 283.553865][T10112] ? __pfx_loopback_net_init+0x10/0x10 [ 283.553893][T10112] ops_init+0x1df/0x5f0 [ 283.553938][T10112] setup_net+0x21f/0x860 [ 283.553976][T10112] ? __pfx_setup_net+0x10/0x10 [ 283.554009][T10112] ? down_read_killable+0xcc/0x380 [ 283.554046][T10112] ? __pfx_down_read_killable+0x10/0x10 [ 283.554138][T10112] ? __raw_spin_lock_init+0x3a/0x110 [ 283.554193][T10112] ? debug_mutex_init+0x37/0x70 [ 283.554228][T10112] copy_net_ns+0x2a6/0x5f0 [ 283.554257][T10112] create_new_namespaces+0x3ea/0xad0 [ 283.554307][T10112] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 283.554345][T10112] ksys_unshare+0x45d/0xa40 [ 283.554371][T10112] ? __pfx_ksys_unshare+0x10/0x10 [ 283.554393][T10112] ? xfd_validate_state+0x5d/0x180 [ 283.554437][T10112] __x64_sys_unshare+0x31/0x40 [ 283.554460][T10112] do_syscall_64+0xcd/0x250 [ 283.554492][T10112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 283.554524][T10112] RIP: 0033:0x7fc20518d169 [ 283.554547][T10112] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 283.554570][T10112] RSP: 002b:00007fc206077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 283.554594][T10112] RAX: ffffffffffffffda RBX: 00007fc2053a5fa0 RCX: 00007fc20518d169 [ 283.554610][T10112] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 283.554625][T10112] RBP: 00007fc20520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 283.554639][T10112] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 283.554652][T10112] R13: 0000000000000000 R14: 00007fc2053a5fa0 R15: 00007fffca9df478 [ 283.554685][T10112] [ 284.113308][T10126] netlink: 326 bytes leftover after parsing attributes in process `syz.3.936'. [ 284.279145][T10130] netlink: 342 bytes leftover after parsing attributes in process `syz.2.938'. [ 286.333132][T10185] netlink: del zone limit has 8 unknown bytes [ 286.575552][ T5145] Bluetooth: hci3: unexpected event 0x3e length: 726 > 260 [ 286.575591][ T5145] Bluetooth: hci3: unexpected subevent 0x0d length: 725 > 260 [ 286.590647][ T5145] Bluetooth: hci3: Unknown advertising packet type: 0x7f [ 286.590731][ T5145] Bluetooth: hci3: adv larger than maximum supported [ 286.598322][ T5145] Bluetooth: hci3: adv larger than maximum supported [ 286.605081][ T5145] Bluetooth: hci3: adv larger than maximum supported [ 286.612336][ T5145] Bluetooth: hci3: Malformed LE Event: 0x0d [ 287.051781][T10203] netlink: 'syz.1.957': attribute type 2 has an invalid length. [ 287.112744][T10205] netlink: 314 bytes leftover after parsing attributes in process `syz.3.958'. [ 287.915485][T10220] netlink: 4 bytes leftover after parsing attributes in process `syz.3.961'. [ 290.638829][T10289] usbip-vudc usbip-vudc.0: gadget not bound [ 290.703282][T10292] : renamed from gre0 (while UP) [ 291.423238][T10309] tipc: Started in network mode [ 291.445987][T10305] netlink: 4 bytes leftover after parsing attributes in process `syz.1.984'. [ 291.476201][T10309] tipc: Node identity ee00, cluster identity 4711 [ 291.511701][T10309] tipc: Node number set to 60928 [ 292.327477][T10298] bond0: option all_slaves_active: invalid value () [ 293.110084][T10344] syz.2.991 (10344) used obsolete PPPIOCDETACH ioctl [ 294.939600][T10391] FAULT_INJECTION: forcing a failure. [ 294.939600][T10391] name failslab, interval 1, probability 0, space 0, times 0 [ 295.051846][T10391] CPU: 1 UID: 0 PID: 10391 Comm: syz.2.1000 Not tainted 6.14.0-rc4-syzkaller #0 [ 295.051878][T10391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 295.051890][T10391] Call Trace: [ 295.051899][T10391] [ 295.051909][T10391] dump_stack_lvl+0x16c/0x1f0 [ 295.051953][T10391] should_fail_ex+0x50a/0x650 [ 295.051992][T10391] ? fs_reclaim_acquire+0xae/0x150 [ 295.052025][T10391] should_failslab+0xc2/0x120 [ 295.052047][T10391] __kmalloc_node_noprof+0xd1/0x510 [ 295.052081][T10391] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 295.052115][T10391] __kvmalloc_node_noprof+0xad/0x1a0 [ 295.052147][T10391] io_alloc_cache_init+0x33/0x170 [ 295.052178][T10391] io_uring_setup+0x58e/0x2200 [ 295.052206][T10391] ? __pfx_io_uring_setup+0x10/0x10 [ 295.052228][T10391] ? do_futex+0x123/0x350 [ 295.052255][T10391] ? __pfx_do_futex+0x10/0x10 [ 295.052281][T10391] ? __sys_connect+0xf2/0x170 [ 295.052321][T10391] ? rcu_is_watching+0x12/0xc0 [ 295.052353][T10391] __x64_sys_io_uring_setup+0x98/0x140 [ 295.052379][T10391] do_syscall_64+0xcd/0x250 [ 295.052416][T10391] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 295.052448][T10391] RIP: 0033:0x7fc20518d169 [ 295.052467][T10391] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 295.052489][T10391] RSP: 002b:00007fc206014038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 295.052513][T10391] RAX: ffffffffffffffda RBX: 00007fc2053a6240 RCX: 00007fc20518d169 [ 295.052529][T10391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 295.052543][T10391] RBP: 00007fc20520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 295.052558][T10391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 295.052572][T10391] R13: 0000000000000000 R14: 00007fc2053a6240 R15: 00007fffca9df478 [ 295.052623][T10391] [ 295.353140][T10398] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1005'. [ 295.553705][T10399] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1005'. [ 296.214046][ T5145] Bluetooth: hci2: unexpected subevent 0x04 length: 4 < 11 [ 296.252376][T10398] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.300867][T10398] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.356909][T10398] bond0 (unregistering): Released all slaves [ 297.951158][ T5145] Bluetooth: hci2: unexpected event 0x3e length: 508 > 260 [ 297.951198][ T5145] Bluetooth: hci2: unexpected subevent 0x02 length: 507 > 260 [ 297.966068][ T5145] Bluetooth: hci2: Dropping invalid advertising data [ 297.973291][ T5145] Bluetooth: hci2: unknown advertising packet type: 0xe9 [ 297.975902][ T29] audit: type=1800 audit(4294967491.986:12): pid=10447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1018" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0 [ 298.997136][ T29] audit: type=1804 audit(4294967492.986:13): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1027" name="/newroot/sys/kernel/tracing/buffer_percent" dev="tracefs" ino=1060 res=1 errno=0 [ 300.772927][T10522] FAULT_INJECTION: forcing a failure. [ 300.772927][T10522] name fail_futex, interval 1, probability 0, space 0, times 0 [ 300.808121][T10522] CPU: 1 UID: 0 PID: 10522 Comm: syz.1.1036 Not tainted 6.14.0-rc4-syzkaller #0 [ 300.808163][T10522] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 300.808177][T10522] Call Trace: [ 300.808185][T10522] [ 300.808197][T10522] dump_stack_lvl+0x16c/0x1f0 [ 300.808241][T10522] should_fail_ex+0x50a/0x650 [ 300.808281][T10522] get_futex_key+0x4a3/0x1000 [ 300.808310][T10522] ? kasan_save_stack+0x33/0x60 [ 300.808342][T10522] ? kasan_save_free_info+0x3b/0x60 [ 300.808373][T10522] ? loop_add+0x40d/0xb60 [ 300.808401][T10522] ? __pfx_get_futex_key+0x10/0x10 [ 300.808422][T10522] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.808473][T10522] futex_wait_setup+0x78/0x290 [ 300.808510][T10522] __futex_wait+0x267/0x3c0 [ 300.808544][T10522] ? __pfx___futex_wait+0x10/0x10 [ 300.808583][T10522] ? __pfx_futex_wake_mark+0x10/0x10 [ 300.808621][T10522] ? kfree+0x2c4/0x4d0 [ 300.808651][T10522] ? loop_add+0x40d/0xb60 [ 300.808683][T10522] futex_wait+0xe9/0x380 [ 300.808714][T10522] ? __pfx_futex_wait+0x10/0x10 [ 300.808760][T10522] do_futex+0x22b/0x350 [ 300.808790][T10522] ? __pfx_do_futex+0x10/0x10 [ 300.808817][T10522] ? __pfx_lock_release+0x10/0x10 [ 300.808849][T10522] ? trace_lock_acquire+0x14e/0x1f0 [ 300.808881][T10522] __x64_sys_futex+0x1e1/0x4c0 [ 300.808911][T10522] ? __pfx_loop_control_ioctl+0x10/0x10 [ 300.808943][T10522] ? __pfx___x64_sys_futex+0x10/0x10 [ 300.808983][T10522] do_syscall_64+0xcd/0x250 [ 300.809016][T10522] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.809048][T10522] RIP: 0033:0x7f1f25f8d169 [ 300.809068][T10522] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 300.809091][T10522] RSP: 002b:00007f1f26da30e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 300.809116][T10522] RAX: ffffffffffffffda RBX: 00007f1f261a5fa8 RCX: 00007f1f25f8d169 [ 300.809133][T10522] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f1f261a5fa8 [ 300.809146][T10522] RBP: 00007f1f261a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 300.809161][T10522] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f1f261a5fac [ 300.809174][T10522] R13: 0000000000000000 R14: 00007ffe85f20600 R15: 00007ffe85f206e8 [ 300.809204][T10522] [ 304.100451][ T29] audit: type=1800 audit(4294967498.106:14): pid=10574 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1049" name="features" dev="configfs" ino=30147 res=0 errno=0 [ 305.703218][T10624] FAULT_INJECTION: forcing a failure. [ 305.703218][T10624] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 305.727762][T10624] CPU: 1 UID: 0 PID: 10624 Comm: syz.2.1062 Not tainted 6.14.0-rc4-syzkaller #0 [ 305.727800][T10624] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 305.727817][T10624] Call Trace: [ 305.727824][T10624] [ 305.727835][T10624] dump_stack_lvl+0x16c/0x1f0 [ 305.727875][T10624] should_fail_ex+0x50a/0x650 [ 305.727913][T10624] ? __pfx___might_resched+0x10/0x10 [ 305.727956][T10624] should_fail_alloc_page+0xe7/0x130 [ 305.727980][T10624] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 305.728017][T10624] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 305.728066][T10624] ? kasan_save_track+0x14/0x30 [ 305.728101][T10624] ? __kasan_kmalloc+0xaa/0xb0 [ 305.728136][T10624] ? __kmalloc_node_noprof+0x21f/0x510 [ 305.728175][T10624] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 305.728211][T10624] ? relay_open_buf.part.0+0x197/0xb90 [ 305.728242][T10624] ? relay_open+0x653/0xad0 [ 305.728269][T10624] ? do_blk_trace_setup+0x503/0xb50 [ 305.728296][T10624] ? blk_trace_setup+0xee/0x1b0 [ 305.728318][T10624] ? blk_trace_ioctl+0x147/0x280 [ 305.728344][T10624] ? blkdev_ioctl+0x109/0x6d0 [ 305.728365][T10624] ? __x64_sys_ioctl+0x190/0x200 [ 305.728392][T10624] ? do_syscall_64+0xcd/0x250 [ 305.728420][T10624] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.728458][T10624] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 305.728516][T10624] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 305.728553][T10624] ? policy_nodemask+0xea/0x4e0 [ 305.728593][T10624] alloc_pages_mpol+0x1fc/0x540 [ 305.728617][T10624] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 305.728637][T10624] ? trace_kmalloc+0x2d/0xd0 [ 305.728663][T10624] ? __kmalloc_node_noprof+0x23d/0x510 [ 305.728695][T10624] ? trace_kmalloc+0x2d/0xd0 [ 305.728719][T10624] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 305.728751][T10624] alloc_pages_noprof+0x131/0x390 [ 305.728772][T10624] relay_open_buf.part.0+0x264/0xb90 [ 305.728810][T10624] relay_open+0x653/0xad0 [ 305.728838][T10624] ? debugfs_create_file_full+0x41/0x60 [ 305.728878][T10624] do_blk_trace_setup+0x503/0xb50 [ 305.728913][T10624] blk_trace_setup+0xee/0x1b0 [ 305.728942][T10624] ? __pfx_blk_trace_setup+0x10/0x10 [ 305.728967][T10624] ? __pfx_snprintf+0x10/0x10 [ 305.729008][T10624] blk_trace_ioctl+0x147/0x280 [ 305.729033][T10624] ? __pfx_blk_trace_ioctl+0x10/0x10 [ 305.729069][T10624] ? trace_lock_acquire+0x14e/0x1f0 [ 305.729106][T10624] ? __pfx___might_resched+0x10/0x10 [ 305.729154][T10624] blkdev_ioctl+0x109/0x6d0 [ 305.729183][T10624] ? __pfx_blkdev_ioctl+0x10/0x10 [ 305.729205][T10624] ? __fget_files+0x206/0x3a0 [ 305.729244][T10624] ? __pfx_blkdev_ioctl+0x10/0x10 [ 305.729270][T10624] __x64_sys_ioctl+0x190/0x200 [ 305.729303][T10624] do_syscall_64+0xcd/0x250 [ 305.729336][T10624] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.729371][T10624] RIP: 0033:0x7fc20518d169 [ 305.729393][T10624] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.729417][T10624] RSP: 002b:00007fc206077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 305.729443][T10624] RAX: ffffffffffffffda RBX: 00007fc2053a5fa0 RCX: 00007fc20518d169 [ 305.729459][T10624] RDX: 0000400000000440 RSI: 00000000c0481273 RDI: 000000000000000a [ 305.729473][T10624] RBP: 00007fc20520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 305.729488][T10624] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.729502][T10624] R13: 0000000000000000 R14: 00007fc2053a5fa0 R15: 00007fffca9df478 [ 305.729530][T10624] [ 306.644384][T10658] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1064'. [ 306.755107][T10658] ipvlan1: entered allmulticast mode [ 306.760769][T10658] veth0_vlan: entered allmulticast mode [ 307.523354][T10687] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1073'. [ 307.550175][T10687] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1073'. [ 309.325120][T10737] FAULT_INJECTION: forcing a failure. [ 309.325120][T10737] name failslab, interval 1, probability 0, space 0, times 0 [ 309.356014][T10737] CPU: 0 UID: 7 PID: 10737 Comm: syz.1.1086 Not tainted 6.14.0-rc4-syzkaller #0 [ 309.356044][T10737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.356057][T10737] Call Trace: [ 309.356064][T10737] [ 309.356072][T10737] dump_stack_lvl+0x16c/0x1f0 [ 309.356109][T10737] should_fail_ex+0x50a/0x650 [ 309.356144][T10737] ? fs_reclaim_acquire+0xae/0x150 [ 309.356176][T10737] should_failslab+0xc2/0x120 [ 309.356199][T10737] __kmalloc_node_noprof+0xd1/0x510 [ 309.356243][T10737] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 309.356278][T10737] __kvmalloc_node_noprof+0xad/0x1a0 [ 309.356309][T10737] io_alloc_cache_init+0x33/0x170 [ 309.356341][T10737] io_uring_setup+0x5a7/0x2200 [ 309.356368][T10737] ? __pfx_io_uring_setup+0x10/0x10 [ 309.356391][T10737] ? do_futex+0x123/0x350 [ 309.356419][T10737] ? __pfx_do_futex+0x10/0x10 [ 309.356445][T10737] ? __pfx_lock_release+0x10/0x10 [ 309.356476][T10737] ? trace_lock_acquire+0x14e/0x1f0 [ 309.356517][T10737] ? syscall_user_dispatch+0x7a/0x130 [ 309.356557][T10737] __x64_sys_io_uring_setup+0x98/0x140 [ 309.356582][T10737] do_syscall_64+0xcd/0x250 [ 309.356614][T10737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.356645][T10737] RIP: 0033:0x7f1f25f8d169 [ 309.356663][T10737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.356684][T10737] RSP: 002b:00007f1f26da3038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 309.356705][T10737] RAX: ffffffffffffffda RBX: 00007f1f261a5fa0 RCX: 00007f1f25f8d169 [ 309.356719][T10737] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000048 [ 309.356732][T10737] RBP: 00007f1f2600e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 309.356745][T10737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.356758][T10737] R13: 0000000000000000 R14: 00007f1f261a5fa0 R15: 00007ffe85f206e8 [ 309.356787][T10737] [ 310.964048][T10775] netlink: 306 bytes leftover after parsing attributes in process `syz.3.1094'. [ 310.975660][T10777] netlink: 350 bytes leftover after parsing attributes in process `syz.3.1094'. [ 312.015584][T10798] netlink: 346 bytes leftover after parsing attributes in process `syz.1.1099'. [ 312.440896][T10813] netlink: set zone limit has 8 unknown bytes [ 313.463087][ T5145] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 316.173363][T10911] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1129'. [ 316.352481][T10911] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 316.824546][T10934] cifs: Unknown parameter '@' [ 318.081774][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.088148][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.353651][ T5145] Bluetooth: hci0: Malformed Event: 0x02 [ 324.520676][ T29] audit: type=1800 audit(4294967518.526:15): pid=11103 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1169" name="SYSV0000000a" dev="hugetlbfs" ino=0 res=0 errno=0 syzkaller syzkaller login: [ 330.125773][T11192] Invalid ELF header magic: != ELF [ 330.600642][T11211] netlink: 'syz.1.1192': attribute type 21 has an invalid length. [ 330.624204][T11211] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1192'. [ 330.720313][T11211] netlink: 'syz.1.1192': attribute type 21 has an invalid length. [ 330.731020][T11211] netlink: 326 bytes leftover after parsing attributes in process `syz.1.1192'. [ 331.395870][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1196'. [ 333.838207][T11272] FAULT_INJECTION: forcing a failure. [ 333.838207][T11272] name failslab, interval 1, probability 0, space 0, times 0 [ 333.881711][T11272] CPU: 0 UID: 0 PID: 11272 Comm: syz.2.1206 Not tainted 6.14.0-rc4-syzkaller #0 [ 333.881743][T11272] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 333.881755][T11272] Call Trace: [ 333.881762][T11272] [ 333.881771][T11272] dump_stack_lvl+0x16c/0x1f0 [ 333.881806][T11272] should_fail_ex+0x50a/0x650 [ 333.881839][T11272] ? fs_reclaim_acquire+0xae/0x150 [ 333.881872][T11272] should_failslab+0xc2/0x120 [ 333.881892][T11272] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 333.881925][T11272] ? sk_prot_alloc+0x60/0x2a0 [ 333.881951][T11272] sk_prot_alloc+0x60/0x2a0 [ 333.881974][T11272] sk_alloc+0x36/0xb90 [ 333.882005][T11272] tipc_sk_create+0xcd/0x21a0 [ 333.882038][T11272] ? __sock_create+0x2f2/0x8d0 [ 333.882059][T11272] ? __pfx_lock_release+0x10/0x10 [ 333.882090][T11272] ? trace_lock_acquire+0x14e/0x1f0 [ 333.882120][T11272] __sock_create+0x335/0x8d0 [ 333.882145][T11272] __sys_socketpair+0x1d9/0x5a0 [ 333.882169][T11272] ? __pfx___sys_socketpair+0x10/0x10 [ 333.882193][T11272] ? xfd_validate_state+0x5d/0x180 [ 333.882237][T11272] ? rcu_is_watching+0x12/0xc0 [ 333.882267][T11272] __x64_sys_socketpair+0x96/0x100 [ 333.882293][T11272] ? lockdep_hardirqs_on+0x7c/0x110 [ 333.882321][T11272] do_syscall_64+0xcd/0x250 [ 333.882353][T11272] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 333.882387][T11272] RIP: 0033:0x7fc20518d169 [ 333.882406][T11272] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 333.882428][T11272] RSP: 002b:00007fc206077038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 333.882449][T11272] RAX: ffffffffffffffda RBX: 00007fc2053a5fa0 RCX: 00007fc20518d169 [ 333.882465][T11272] RDX: 8000000000000000 RSI: 0000000000000004 RDI: 000000000000001e [ 333.882480][T11272] RBP: 00007fc20520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 333.882495][T11272] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 333.882508][T11272] R13: 0000000000000000 R14: 00007fc2053a5fa0 R15: 00007fffca9df478 [ 333.882538][T11272] [ 334.914527][T11292] netlink: zone id is out of range [ 334.919719][T11292] netlink: zone id is out of range [ 334.936130][T11292] netlink: zone id is out of range [ 334.941327][T11292] netlink: zone id is out of range [ 335.001753][T11292] netlink: zone id is out of range [ 335.006949][T11292] netlink: zone id is out of range [ 335.061794][T11292] netlink: zone id is out of range [ 335.097657][T11292] netlink: zone id is out of range [ 335.141725][T11292] netlink: zone id is out of range [ 335.147307][T11292] netlink: zone id is out of range [ 337.309972][T11350] Invalid ELF header magic: != ELF [ 337.447951][T11321] cgroup: fork rejected by pids controller in /syz2 [ 337.590336][T11359] HfR: entered promiscuous mode [ 341.956701][ T8553] bridge0: port 3(syz_tun) entered disabled state [ 342.124638][ T8553] syz_tun (unregistering): left allmulticast mode [ 342.131117][ T8553] syz_tun (unregistering): left promiscuous mode [ 342.221895][ T8553] bridge0: port 3(syz_tun) entered disabled state [ 342.903839][T11423] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 0, inode_bitmap = 137 [ 342.936791][T11423] EXT4-fs error (device sda1): ext4_validate_inode_bitmap:104: comm syz-executor: Corrupt inode bitmap - block_group = 1, inode_bitmap = 138 [ 343.035350][T11423] EXT4-fs error (device sda1): ext4_validate_block_bitmap:423: comm syz-executor: bg 0: bad block bitmap checksum [ 343.760230][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 343.772476][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 343.790596][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 343.806684][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 343.815190][ T5848] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 343.824301][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 344.457473][T11444] chnl_net:caif_netlink_parms(): no params data found [ 344.997574][T11444] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.031497][T11444] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.038740][T11444] bridge_slave_0: entered allmulticast mode [ 345.068618][T11444] bridge_slave_0: entered promiscuous mode [ 345.107983][T11444] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.121132][T11444] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.138550][T11444] bridge_slave_1: entered allmulticast mode [ 345.149448][T11444] bridge_slave_1: entered promiscuous mode [ 345.205746][T11444] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 345.263770][T11444] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 345.775087][T11444] team0: Port device team_slave_0 added [ 345.837681][T11444] team0: Port device team_slave_1 added [ 345.911686][ T5848] Bluetooth: hci3: command tx timeout [ 346.057266][T11444] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 346.067365][T11444] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.133281][T11444] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 346.162603][T11444] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 346.170777][T11444] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 346.227346][T11444] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 346.346678][T11444] hsr_slave_0: entered promiscuous mode [ 346.353465][T11444] hsr_slave_1: entered promiscuous mode [ 346.359653][T11444] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.367833][T11444] Cannot create hsr debugfs directory [ 346.646069][T11444] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.852864][T11444] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.979899][T11444] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.107769][T11444] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 347.432053][T11444] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 347.474035][T11444] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 347.506639][T11444] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 347.531039][T11444] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 347.759491][T11444] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.818675][T11444] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.865548][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.872757][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.964996][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.972188][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.992334][ T5145] Bluetooth: hci3: command tx timeout [ 348.011992][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 348.032102][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 348.051257][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 348.066501][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 348.075357][ T5842] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 348.083340][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 348.119879][T11444] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 348.139353][T11444] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 348.641876][T11444] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.696059][T11488] chnl_net:caif_netlink_parms(): no params data found [ 348.987269][T11488] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.995608][T11488] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.003111][T11488] bridge_slave_0: entered allmulticast mode [ 349.012674][T11488] bridge_slave_0: entered promiscuous mode [ 349.021203][T11488] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.028342][T11488] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.051165][T11488] bridge_slave_1: entered allmulticast mode [ 349.066012][T11488] bridge_slave_1: entered promiscuous mode [ 349.087496][T11444] veth0_vlan: entered promiscuous mode [ 349.256327][T11488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.292887][T11444] veth1_vlan: entered promiscuous mode [ 349.318016][T11488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.466525][T11488] team0: Port device team_slave_0 added [ 349.499260][T11488] team0: Port device team_slave_1 added [ 349.643702][T11488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.671034][T11488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.744434][T11532] netlink: 146 bytes leftover after parsing attributes in process `syz.1.1252'. [ 349.756786][T11488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.771002][T11488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.777995][T11488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.848367][T11488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.969694][T11444] veth0_macvtap: entered promiscuous mode [ 350.010978][T11444] veth1_macvtap: entered promiscuous mode [ 350.050214][T11488] hsr_slave_0: entered promiscuous mode [ 350.069913][T11488] hsr_slave_1: entered promiscuous mode [ 350.075852][ T5842] Bluetooth: hci3: command tx timeout [ 350.092042][T11488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.100433][T11488] Cannot create hsr debugfs directory [ 350.143375][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.162614][ T5842] Bluetooth: hci4: command tx timeout [ 350.169923][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.214371][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.255498][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.287834][T11444] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 350.408128][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.428485][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.454596][T11444] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 350.471744][T11444] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.495201][T11444] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 350.576208][T11551] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1258'. [ 350.604431][T11444] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.625598][T11444] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.654376][T11444] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.665040][T11444] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.696855][T11551] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1258'. [ 350.728674][T11552] netlink: 286 bytes leftover after parsing attributes in process `syz.0.1258'. [ 350.770660][T11552] bridge: RTM_NEWNEIGH with unconfigured vlan 704 on bridge_slave_1 [ 351.240652][T10646] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.248549][T10646] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.438333][ T8316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.454932][ T8316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.506876][T11488] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 351.549404][T11488] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 351.584517][T11488] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 351.717623][T11488] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.150722][ T5842] Bluetooth: hci3: command tx timeout [ 352.231058][ T5842] Bluetooth: hci4: command tx timeout [ 353.054360][T11576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1261'. [ 353.467435][T11569] kexec: Could not allocate control_code_buffer [ 353.726820][T11488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.758907][T11488] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.788855][T10647] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.796108][T10647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.824234][T10647] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.831491][T10647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.319055][ T5842] Bluetooth: hci4: command tx timeout [ 354.424729][T11488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.919440][T11488] veth0_vlan: entered promiscuous mode [ 354.982804][T11488] veth1_vlan: entered promiscuous mode [ 355.103284][T11488] veth0_macvtap: entered promiscuous mode [ 355.242973][T11488] veth1_macvtap: entered promiscuous mode [ 355.271954][ T29] audit: type=1800 audit(4294967577.285:16): pid=11639 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1274" name=03 dev="tmpfs" ino=1940 res=0 errno=0 [ 355.539462][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.576427][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.603925][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.632896][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.661221][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.680823][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.707450][T11488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.748560][T11646] Invalid ELF header magic: != ELF [ 355.796496][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.810666][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.824149][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.838314][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.851946][T11488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.866050][T11488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.881208][T11488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.921983][T11488] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.940366][T11488] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.949349][T11488] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.958237][T11488] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.229607][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.250239][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.391536][ T5842] Bluetooth: hci4: command tx timeout [ 356.491688][T11654] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000000006 [ 356.514523][ T8316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 356.522825][ T8316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 357.251179][T11668] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 357.265957][T11668] vhci_hcd: invalid port number 110 [ 357.299876][T11668] vhci_hcd: default hub control req: 2020 v7574 i006e l8240 [ 361.978689][T11750] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(2) [ 364.987882][T11785] Invalid ELF header magic: != ELF [ 367.998092][T11823] net_ratelimit: 19 callbacks suppressed [ 367.998118][T11823] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 370.148991][T11860] FAULT_INJECTION: forcing a failure. [ 370.148991][T11860] name fail_futex, interval 1, probability 0, space 0, times 0 [ 370.178491][T11860] CPU: 1 UID: 0 PID: 11860 Comm: syz.4.1330 Not tainted 6.14.0-rc4-syzkaller #0 [ 370.178525][T11860] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 370.178539][T11860] Call Trace: [ 370.178546][T11860] [ 370.178556][T11860] dump_stack_lvl+0x16c/0x1f0 [ 370.178592][T11860] should_fail_ex+0x50a/0x650 [ 370.178626][T11860] ? kmem_cache_free+0x2e2/0x4d0 [ 370.178656][T11860] ? putname+0x13c/0x180 [ 370.178680][T11860] get_futex_key+0x4a3/0x1000 [ 370.178709][T11860] ? __pfx_get_futex_key+0x10/0x10 [ 370.178756][T11860] futex_wake+0xe8/0x4e0 [ 370.178793][T11860] ? __pfx_futex_wake+0x10/0x10 [ 370.178835][T11860] ? kasan_quarantine_put+0x10a/0x240 [ 370.178869][T11860] ? lockdep_hardirqs_on+0x7c/0x110 [ 370.178901][T11860] do_futex+0x1e5/0x350 [ 370.178930][T11860] ? __pfx_do_futex+0x10/0x10 [ 370.178966][T11860] __x64_sys_futex+0x1e1/0x4c0 [ 370.179000][T11860] ? __pfx___x64_sys_futex+0x10/0x10 [ 370.179030][T11860] ? getname_flags.part.0+0x1c5/0x550 [ 370.179066][T11860] do_syscall_64+0xcd/0x250 [ 370.179099][T11860] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.179131][T11860] RIP: 0033:0x7f791738d169 [ 370.179152][T11860] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.179176][T11860] RSP: 002b:00007f79181500e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 370.179199][T11860] RAX: ffffffffffffffda RBX: 00007f79175a5fa8 RCX: 00007f791738d169 [ 370.179216][T11860] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f79175a5fac [ 370.179232][T11860] RBP: 00007f79175a5fa0 R08: 00007f7918151000 R09: 0000000000000000 [ 370.179248][T11860] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f79175a5fac [ 370.179263][T11860] R13: 0000000000000000 R14: 00007fff9f5ca2d0 R15: 00007fff9f5ca3b8 [ 370.179294][T11860] [ 370.426526][T11866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1331'. [ 370.539912][T11867] Invalid ELF header magic: != ELF [ 370.653925][T11866] team0: Port device team_slave_1 removed [ 370.929592][T11873] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1332'. [ 371.674464][T11917] netlink: 186 bytes leftover after parsing attributes in process `syz.0.1342'. [ 372.167878][ T29] audit: type=1800 audit(4294967594.175:17): pid=11940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1346" name="lu_gp_id" dev="configfs" ino=37455 res=0 errno=0 [ 372.794111][T11954] Invalid ELF header magic: != ELF [ 374.131151][T11984] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1359'. [ 374.402822][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1364'. [ 376.014969][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 376.027600][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 376.035950][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 376.046890][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 376.054650][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 376.067157][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 376.372107][T12029] chnl_net:caif_netlink_parms(): no params data found [ 376.500876][T12029] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.508169][T12029] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.516080][T12029] bridge_slave_0: entered allmulticast mode [ 376.523849][T12029] bridge_slave_0: entered promiscuous mode [ 376.533618][T12029] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.540880][T12029] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.551088][T12029] bridge_slave_1: entered allmulticast mode [ 376.572090][T12029] bridge_slave_1: entered promiscuous mode [ 376.656671][T12040] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1371'. [ 376.693122][T12029] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 376.723388][T12029] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 376.827124][T12044] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1373'. [ 376.839493][T12029] team0: Port device team_slave_0 added [ 376.856684][T12029] team0: Port device team_slave_1 added [ 376.971544][T12029] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 376.978692][T12029] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.051622][T12029] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.075702][T12029] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.098022][T12049] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 377.100704][T12029] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.160618][T12029] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.432251][T12029] hsr_slave_0: entered promiscuous mode [ 377.449166][T12029] hsr_slave_1: entered promiscuous mode [ 377.469607][T12029] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.504256][T12029] Cannot create hsr debugfs directory [ 378.004305][T12031] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 378.029908][T12031] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 378.050304][T12031] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 378.059285][T12031] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 378.109988][T12031] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 378.135327][T12031] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 378.165436][T12029] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 378.194762][T12031] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 378.223626][T12029] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 378.249535][T12029] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 378.261217][T12029] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 378.266952][T12031] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 378.456976][T12029] 8021q: adding VLAN 0 to HW filter on device bond0 [ 378.589884][T12029] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.623296][ T8326] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.630423][ T8326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 378.897907][ T8326] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.905118][ T8326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 379.047047][T12029] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 379.098186][T12029] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 379.517936][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.538082][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.834306][T12029] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 380.071710][ T5848] Bluetooth: hci4: command 0x0c1a tx timeout [ 380.076365][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 380.077771][ T5848] Bluetooth: hci2: command 0x0c1a tx timeout [ 380.151351][ T5145] Bluetooth: hci1: command 0x041b tx timeout [ 380.461919][T12029] veth0_vlan: entered promiscuous mode [ 380.543154][T12029] veth1_vlan: entered promiscuous mode [ 380.789658][T12096] Invalid logical block size (-2130706432) [ 380.826066][T12029] veth0_macvtap: entered promiscuous mode [ 380.877191][T12029] veth1_macvtap: entered promiscuous mode [ 381.055297][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.096509][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.137074][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.165158][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.178509][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.197924][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.220674][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 381.240582][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.269099][T12029] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 381.298554][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.315844][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.336384][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.359303][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.381198][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.427341][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.458992][T12029] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 381.511204][T12029] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 381.552005][T12029] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 381.818678][T12029] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.860674][T12029] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.869540][T12029] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 381.898252][T12029] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.151086][ T5145] Bluetooth: hci4: command 0x0c1a tx timeout [ 382.203603][T10647] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.209650][T12115] program syz.4.1387 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 382.230791][ T5145] Bluetooth: hci1: command 0x041b tx timeout [ 382.243840][T10647] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.290695][ T8316] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.344890][T12117] cougar: G6 mapped to space [ 382.761477][ T8316] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.391644][T12125] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1389'. [ 384.009008][T12129] Invalid ELF header magic: != ELF [ 384.231017][ T5145] Bluetooth: hci4: command 0x0c1a tx timeout [ 384.313901][ T5145] Bluetooth: hci1: command 0x041b tx timeout [ 386.076970][T12161] Invalid ELF header magic: != ELF [ 386.390734][ T5145] Bluetooth: hci1: command 0x041b tx timeout [ 386.608581][T12161] netlink: 'syz.5.1394': attribute type 1 has an invalid length. [ 386.619036][T12161] netlink: 'syz.5.1394': attribute type 1 has an invalid length. [ 386.644550][T12161] netlink: 33 bytes leftover after parsing attributes in process `syz.5.1394'. [ 387.862763][T12193] FAULT_INJECTION: forcing a failure. [ 387.862763][T12193] name failslab, interval 1, probability 0, space 0, times 0 [ 388.092887][T12193] CPU: 1 UID: 0 PID: 12193 Comm: syz.4.1401 Not tainted 6.14.0-rc4-syzkaller #0 [ 388.092924][T12193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 388.092940][T12193] Call Trace: [ 388.092948][T12193] [ 388.092958][T12193] dump_stack_lvl+0x16c/0x1f0 [ 388.092998][T12193] should_fail_ex+0x50a/0x650 [ 388.093038][T12193] ? fs_reclaim_acquire+0xae/0x150 [ 388.093073][T12193] should_failslab+0xc2/0x120 [ 388.093098][T12193] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 388.093142][T12193] ? __xlate_proc_name+0x173/0x210 [ 388.093180][T12193] ? __proc_create+0x2c0/0x8b0 [ 388.093214][T12193] __proc_create+0x2c0/0x8b0 [ 388.093248][T12193] ? __pfx___proc_create+0x10/0x10 [ 388.093287][T12193] ? find_held_lock+0x2d/0x110 [ 388.093319][T12193] proc_create_reg+0x7d/0x180 [ 388.093342][T12193] ? __pfx_psched_show+0x10/0x10 [ 388.093382][T12193] proc_create_single_data+0x87/0x130 [ 388.093410][T12193] ? __pfx_proc_create_single_data+0x10/0x10 [ 388.093433][T12193] ? lockdep_init_map_type+0x16d/0x7d0 [ 388.093474][T12193] ? __pfx_psched_net_init+0x10/0x10 [ 388.093504][T12193] psched_net_init+0x4a/0x70 [ 388.093534][T12193] ops_init+0x1df/0x5f0 [ 388.093572][T12193] setup_net+0x21f/0x860 [ 388.093609][T12193] ? __pfx_setup_net+0x10/0x10 [ 388.093641][T12193] ? down_read_killable+0xcc/0x380 [ 388.093673][T12193] ? __pfx_down_read_killable+0x10/0x10 [ 388.093704][T12193] ? __raw_spin_lock_init+0x3a/0x110 [ 388.093743][T12193] ? debug_mutex_init+0x37/0x70 [ 388.093773][T12193] copy_net_ns+0x2a6/0x5f0 [ 388.093800][T12193] create_new_namespaces+0x3ea/0xad0 [ 388.093847][T12193] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 388.093886][T12193] ksys_unshare+0x45d/0xa40 [ 388.093913][T12193] ? __pfx_ksys_unshare+0x10/0x10 [ 388.093936][T12193] ? xfd_validate_state+0x5d/0x180 [ 388.093982][T12193] __x64_sys_unshare+0x31/0x40 [ 388.094006][T12193] do_syscall_64+0xcd/0x250 [ 388.094039][T12193] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 388.094072][T12193] RIP: 0033:0x7f791738d169 [ 388.094100][T12193] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 388.094138][T12193] RSP: 002b:00007f7918150038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 388.094163][T12193] RAX: ffffffffffffffda RBX: 00007f79175a5fa0 RCX: 00007f791738d169 [ 388.094180][T12193] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 388.094195][T12193] RBP: 00007f791740e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 388.094209][T12193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 388.094224][T12193] R13: 0000000000000000 R14: 00007f79175a5fa0 R15: 00007fff9f5ca3b8 [ 388.094257][T12193] [ 388.475989][ T5145] Bluetooth: hci1: command 0x041b tx timeout [ 390.560841][ T5848] Bluetooth: hci1: command 0x041b tx timeout [ 391.264003][T12272] bridge0: port 3(team0) entered blocking state [ 391.319223][T12272] bridge0: port 3(team0) entered disabled state [ 391.340849][T12272] team0: entered allmulticast mode [ 391.346024][T12272] team_slave_0: entered allmulticast mode [ 391.428441][T12272] team_slave_1: entered allmulticast mode [ 391.462248][T12272] team0: entered promiscuous mode [ 391.467382][T12272] team_slave_0: entered promiscuous mode [ 391.541020][T12272] team_slave_1: entered promiscuous mode [ 391.547484][T12272] bridge0: port 3(team0) entered blocking state [ 391.553948][T12272] bridge0: port 3(team0) entered forwarding state [ 393.010390][T12315] FAULT_INJECTION: forcing a failure. [ 393.010390][T12315] name fail_futex, interval 1, probability 0, space 0, times 0 [ 393.046547][T12315] CPU: 1 UID: 0 PID: 12315 Comm: syz.5.1429 Not tainted 6.14.0-rc4-syzkaller #0 [ 393.046584][T12315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 393.046601][T12315] Call Trace: [ 393.046609][T12315] [ 393.046619][T12315] dump_stack_lvl+0x16c/0x1f0 [ 393.046676][T12315] should_fail_ex+0x50a/0x650 [ 393.046722][T12315] get_futex_key+0x4a3/0x1000 [ 393.046745][T12315] ? __pfx_lock_release+0x10/0x10 [ 393.046779][T12315] ? __pfx_get_futex_key+0x10/0x10 [ 393.046806][T12315] ? find_held_lock+0x2d/0x110 [ 393.046835][T12315] futex_wake+0xe8/0x4e0 [ 393.046867][T12315] ? __pfx_futex_wake+0x10/0x10 [ 393.046903][T12315] ? mmput+0x49/0x70 [ 393.046939][T12315] do_futex+0x1e5/0x350 [ 393.046965][T12315] ? __pfx_do_futex+0x10/0x10 [ 393.046993][T12315] ? __pfx_kernel_move_pages+0x10/0x10 [ 393.047021][T12315] __x64_sys_futex+0x1e1/0x4c0 [ 393.047052][T12315] ? __pfx___x64_sys_futex+0x10/0x10 [ 393.047080][T12315] ? rcu_is_watching+0x12/0xc0 [ 393.047110][T12315] do_syscall_64+0xcd/0x250 [ 393.047139][T12315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.047168][T12315] RIP: 0033:0x7f9a2218d169 [ 393.047186][T12315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 393.047212][T12315] RSP: 002b:00007f9a230030e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 393.047235][T12315] RAX: ffffffffffffffda RBX: 00007f9a223a5fa8 RCX: 00007f9a2218d169 [ 393.047248][T12315] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f9a223a5fac [ 393.047263][T12315] RBP: 00007f9a223a5fa0 R08: 00007f9a23004000 R09: 0000000000000000 [ 393.047278][T12315] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f9a223a5fac [ 393.047293][T12315] R13: 0000000000000000 R14: 00007ffc2ab69b80 R15: 00007ffc2ab69c68 [ 393.047323][T12315] [ 395.240703][ T5848] Bluetooth: hci4: unexpected subevent 0x04 length: 122 > 11 [ 396.433736][T12385] netlink: 354 bytes leftover after parsing attributes in process `syz.0.1445'. [ 397.357590][T12394] bridge0: port 3(hsr0) entered blocking state [ 397.364691][T12394] bridge0: port 3(hsr0) entered disabled state [ 397.371244][T12394] hsr0: entered allmulticast mode [ 397.376329][T12394] hsr_slave_0: entered allmulticast mode [ 397.410832][T12394] hsr_slave_1: entered allmulticast mode [ 397.438188][T12394] hsr0: entered promiscuous mode [ 397.464915][T12394] bridge0: port 3(hsr0) entered blocking state [ 397.471323][T12394] bridge0: port 3(hsr0) entered forwarding state [ 399.033666][ T5848] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 399.906222][T12439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1459'. [ 400.011559][T12441] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1459'. [ 401.207566][ T8326] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.889187][ T8326] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.211193][T12474] smc: net device syz_tun applied user defined pnetid ETHTOOL [ 402.734111][ T8326] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.105756][ T8326] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 403.790977][ T8326] bridge_slave_1: left allmulticast mode [ 403.791151][ T8326] bridge_slave_1: left promiscuous mode [ 403.794462][ T8326] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.865835][ T8326] bridge_slave_0: left allmulticast mode [ 403.865873][ T8326] bridge_slave_0: left promiscuous mode [ 403.866080][ T8326] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.692282][T12505] Setting dangerous option i915.mitigations - tainting kernel [ 404.711326][T12505] Bad "i915.mitigations=!}", '}' is unknown [ 406.891592][ T8326] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 406.971302][ T8326] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 407.001997][ T8326] bond0 (unregistering): Released all slaves [ 407.216766][ T8326] HfR: left promiscuous mode [ 409.851370][ T8326] hsr_slave_0: left promiscuous mode [ 409.930953][ T8326] hsr_slave_1: left promiscuous mode [ 410.031032][ T8326] veth1_macvtap: left promiscuous mode [ 410.037979][ T8326] veth0_macvtap: left promiscuous mode [ 410.082279][ T8326] veth1_vlan: left promiscuous mode [ 410.087995][ T8326] veth0_vlan: left promiscuous mode [ 411.796922][ T8326] team0 (unregistering): Port device team_slave_1 removed [ 411.897550][ T8326] team0 (unregistering): Port device team_slave_0 removed [ 413.487457][T12630] mkiss: ax0: crc mode is auto. [ 413.613522][T12625] netlink: 186 bytes leftover after parsing attributes in process `syz.1.1492'. [ 413.892430][ T8326] ref_tracker: net notrefcnt@ffff8880620ca020 has 1/2 users at [ 413.892430][ T8326] sk_alloc+0xa93/0xb90 [ 413.892430][ T8326] inet6_create+0x380/0x1320 [ 413.892430][ T8326] __sock_create+0x335/0x8d0 [ 413.892430][ T8326] udp_sock_create6+0xc8/0x6a0 [ 413.892430][ T8326] sctp_udp_sock_start+0x280/0x4b0 [ 413.892430][ T8326] proc_sctp_do_udp_port+0x380/0x450 [ 413.892430][ T8326] proc_sys_call_handler+0x3c6/0x5a0 [ 413.892430][ T8326] iter_file_splice_write+0x90f/0x10b0 [ 413.892430][ T8326] direct_splice_actor+0x18f/0x6c0 [ 413.892430][ T8326] splice_direct_to_actor+0x346/0xa40 [ 413.892430][ T8326] do_splice_direct+0x178/0x250 [ 413.892430][ T8326] do_sendfile+0xafb/0xe40 [ 413.892430][ T8326] __x64_sys_sendfile64+0x1da/0x220 [ 413.892430][ T8326] do_syscall_64+0xcd/0x250 [ 413.892430][ T8326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.892430][ T8326] [ 413.980488][ T8326] ref_tracker: net notrefcnt@ffff8880620ca020 has 1/2 users at [ 413.980488][ T8326] sk_alloc+0xa93/0xb90 [ 413.980488][ T8326] inet_create+0x3a1/0x10a0 [ 413.980488][ T8326] __sock_create+0x335/0x8d0 [ 413.980488][ T8326] udp_sock_create4+0xa7/0x450 [ 413.980488][ T8326] sctp_udp_sock_start+0x10b/0x4b0 [ 413.980488][ T8326] proc_sctp_do_udp_port+0x380/0x450 [ 413.980488][ T8326] proc_sys_call_handler+0x3c6/0x5a0 [ 413.980488][ T8326] iter_file_splice_write+0x90f/0x10b0 [ 413.980488][ T8326] direct_splice_actor+0x18f/0x6c0 [ 413.980488][ T8326] splice_direct_to_actor+0x346/0xa40 [ 413.980488][ T8326] do_splice_direct+0x178/0x250 [ 413.980488][ T8326] do_sendfile+0xafb/0xe40 [ 413.980488][ T8326] __x64_sys_sendfile64+0x1da/0x220 [ 413.980488][ T8326] do_syscall_64+0xcd/0x250 [ 413.980488][ T8326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.980488][ T8326] [ 414.108909][ T8326] ------------[ cut here ]------------ [ 414.115287][ T8326] WARNING: CPU: 0 PID: 8326 at lib/ref_tracker.c:179 ref_tracker_dir_exit+0x3e3/0x680 [ 414.125066][ T8326] Modules linked in: [ 414.129007][ T8326] CPU: 0 UID: 0 PID: 8326 Comm: kworker/u8:12 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 414.140136][ T8326] Tainted: [U]=USER [ 414.144177][ T8326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 414.154801][ T8326] Workqueue: netns cleanup_net [ 414.159640][ T8326] RIP: 0010:ref_tracker_dir_exit+0x3e3/0x680 [ 414.166265][ T8326] Code: 11 02 00 00 4d 39 f5 49 8b 06 4d 89 f7 0f 85 0e ff ff ff 48 8b 2c 24 e8 ab 12 c8 fc 48 8b 74 24 18 48 89 ef e8 ae d8 65 06 90 <0f> 0b 90 e8 95 12 c8 fc 48 8d 5d 44 be 04 00 00 00 48 89 df e8 64 [ 414.186061][ T8326] RSP: 0018:ffffc90003b6fab0 EFLAGS: 00010246 [ 414.192337][ T8326] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 414.200350][ T8326] RDX: 0000000000000001 RSI: ffffffff8b6cec80 RDI: 0000000000000001 SYZFAIL: failed to send rpc fd=3 want=56 sent=0 n=-1 (errno 32: Broken pipe) [ 414.208543][ T8326] RBP: ffff8880620ca020 R08: 0000000000000001 R09: fffffbfff2dd7db9 [ 414.216628][ T8326] R10: ffffffff96ebedcf R11: 0000000000002ba2 R12: ffff8880620ca070 [ 414.224812][ T8326] R13: ffff8880620ca070 R14: ffff8880620ca070 R15: ffff8880620ca070 [ 414.233136][ T8326] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 414.242575][ T8326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 414.249218][ T8326] CR2: 000055a91b79b950 CR3: 0000000063582000 CR4: 00000000003526f0 [ 414.257925][ T8326] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 414.266466][ T8326] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 414.274656][ T8326] Call Trace: [ 414.277975][ T8326] [ 414.280986][ T8326] ? __warn+0xea/0x3c0 [ 414.285101][ T8326] ? ref_tracker_dir_exit+0x3e3/0x680 [ 414.290675][ T8326] ? report_bug+0x3c0/0x580 [ 414.295234][ T8326] ? handle_bug+0x54/0xa0 [ 414.299623][ T8326] ? exc_invalid_op+0x17/0x50 [ 414.304669][ T8326] ? asm_exc_invalid_op+0x1a/0x20 [ 414.309759][ T8326] ? ref_tracker_dir_exit+0x3e3/0x680 [ 414.315637][ T8326] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 414.321567][ T8326] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 414.327437][ T8326] ? net_passive_dec+0x7d/0xd0 [ 414.332295][ T8326] net_passive_dec+0x89/0xd0 [ 414.337180][ T8326] cleanup_net+0x8ac/0xb30 [ 414.341877][ T8326] ? __pfx_cleanup_net+0x10/0x10 [ 414.346871][ T8326] ? lock_acquire+0x2f/0xb0 [ 414.351486][ T8326] ? process_one_work+0x921/0x1ba0 [ 414.356664][ T8326] process_one_work+0x9c5/0x1ba0 [ 414.362228][ T8326] ? __pfx_cleanup_net+0x10/0x10 [ 414.367224][ T8326] ? __pfx_process_one_work+0x10/0x10 [ 414.373173][ T8326] ? assign_work+0x1a0/0x250 [ 414.377838][ T8326] worker_thread+0x6c8/0xf00 [ 414.382569][ T8326] ? __pfx_worker_thread+0x10/0x10 [ 414.387736][ T8326] kthread+0x3af/0x750 [ 414.391937][ T8326] ? __pfx_kthread+0x10/0x10 [ 414.396575][ T8326] ? lock_acquire+0x2f/0xb0 [ 414.401248][ T8326] ? __pfx_kthread+0x10/0x10 [ 414.405880][ T8326] ret_from_fork+0x45/0x80 [ 414.410342][ T8326] ? __pfx_kthread+0x10/0x10 [ 414.415081][ T8326] ret_from_fork_asm+0x1a/0x30 [ 414.419937][ T8326] [ 414.423078][ T8326] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 414.430396][ T8326] CPU: 0 UID: 0 PID: 8326 Comm: kworker/u8:12 Tainted: G U 6.14.0-rc4-syzkaller #0 [ 414.441112][ T8326] Tainted: [U]=USER [ 414.444911][ T8326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 414.454984][ T8326] Workqueue: netns cleanup_net [ 414.459765][ T8326] Call Trace: [ 414.463045][ T8326] [ 414.465976][ T8326] dump_stack_lvl+0x3d/0x1f0 [ 414.470579][ T8326] panic+0x71d/0x800 [ 414.474491][ T8326] ? __pfx_panic+0x10/0x10 [ 414.478905][ T8326] ? show_trace_log_lvl+0x29d/0x3d0 [ 414.484196][ T8326] ? check_panic_on_warn+0x1f/0xb0 [ 414.489562][ T8326] ? ref_tracker_dir_exit+0x3e3/0x680 [ 414.494970][ T8326] check_panic_on_warn+0xab/0xb0 [ 414.499933][ T8326] __warn+0xf6/0x3c0 [ 414.503837][ T8326] ? ref_tracker_dir_exit+0x3e3/0x680 [ 414.509229][ T8326] report_bug+0x3c0/0x580 [ 414.513564][ T8326] handle_bug+0x54/0xa0 [ 414.517722][ T8326] exc_invalid_op+0x17/0x50 [ 414.522239][ T8326] asm_exc_invalid_op+0x1a/0x20 [ 414.527106][ T8326] RIP: 0010:ref_tracker_dir_exit+0x3e3/0x680 [ 414.533217][ T8326] Code: 11 02 00 00 4d 39 f5 49 8b 06 4d 89 f7 0f 85 0e ff ff ff 48 8b 2c 24 e8 ab 12 c8 fc 48 8b 74 24 18 48 89 ef e8 ae d8 65 06 90 <0f> 0b 90 e8 95 12 c8 fc 48 8d 5d 44 be 04 00 00 00 48 89 df e8 64 [ 414.553043][ T8326] RSP: 0018:ffffc90003b6fab0 EFLAGS: 00010246 [ 414.559133][ T8326] RAX: 0000000000000000 RBX: dffffc0000000000 RCX: 0000000000000000 [ 414.567113][ T8326] RDX: 0000000000000001 RSI: ffffffff8b6cec80 RDI: 0000000000000001 [ 414.575091][ T8326] RBP: ffff8880620ca020 R08: 0000000000000001 R09: fffffbfff2dd7db9 [ 414.583067][ T8326] R10: ffffffff96ebedcf R11: 0000000000002ba2 R12: ffff8880620ca070 [ 414.591050][ T8326] R13: ffff8880620ca070 R14: ffff8880620ca070 R15: ffff8880620ca070 [ 414.599058][ T8326] ? __pfx_ref_tracker_dir_exit+0x10/0x10 [ 414.604799][ T8326] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 414.610613][ T8326] ? net_passive_dec+0x7d/0xd0 [ 414.615394][ T8326] net_passive_dec+0x89/0xd0 [ 414.620012][ T8326] cleanup_net+0x8ac/0xb30 [ 414.624440][ T8326] ? __pfx_cleanup_net+0x10/0x10 [ 414.629380][ T8326] ? lock_acquire+0x2f/0xb0 [ 414.633893][ T8326] ? process_one_work+0x921/0x1ba0 [ 414.639020][ T8326] process_one_work+0x9c5/0x1ba0 [ 414.643970][ T8326] ? __pfx_cleanup_net+0x10/0x10 [ 414.648946][ T8326] ? __pfx_process_one_work+0x10/0x10 [ 414.654356][ T8326] ? assign_work+0x1a0/0x250 [ 414.658957][ T8326] worker_thread+0x6c8/0xf00 [ 414.663569][ T8326] ? __pfx_worker_thread+0x10/0x10 [ 414.668688][ T8326] kthread+0x3af/0x750 [ 414.672767][ T8326] ? __pfx_kthread+0x10/0x10 [ 414.677359][ T8326] ? lock_acquire+0x2f/0xb0 [ 414.681882][ T8326] ? __pfx_kthread+0x10/0x10 [ 414.686477][ T8326] ret_from_fork+0x45/0x80 [ 414.690900][ T8326] ? __pfx_kthread+0x10/0x10 [ 414.695502][ T8326] ret_from_fork_asm+0x1a/0x30 [ 414.700303][ T8326] [ 414.703714][ T8326] Kernel Offset: disabled [ 414.708175][ T8326] Rebooting in 86400 seconds..