last executing test programs: 6m21.137003864s ago: executing program 2 (id=811): close_range$auto(0x2, 0x8, 0x0) unlink$auto(&(0x7f0000000000)='./file0\x00') openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1c9802, 0x0) mmap$auto(0x0, 0x9, 0x400000072, 0x8b72, 0x1000000002, 0x8000) socket(0x2, 0xa, 0x106) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/vivid.0/video4linux/vbi28/index\x00', 0xc0002, 0x0) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) io_uring_setup$auto(0x85, 0x0) r1 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000400)='/dev/mtd0\x00', 0x2c082, 0x0) ioctl$auto(r1, 0x40104d13, r1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) rseq$auto(&(0x7f0000000340)={0xe, 0x401, 0x0, 0x806, 0xffffffff, 0x2}, 0x8000, 0x0, 0x8000006) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0x110c234000, 0x1, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000180)='/sys/devices/platform/i8042/serio0/id/proto\x00', 0x101600, 0x0) unshare$auto(0x200) prctl$auto(0x1000000001a, 0x1, 0x9, 0x7, 0x32) msgget$auto(0x0, 0x5) r2 = epoll_create$auto(0x7) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000380), r2) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYRESHEX=r0, @ANYRES16=r3, @ANYBLOB="01002dbd7000fcdbdf2501000000040007800c000200ffffffffffffffff"], 0x24}, 0x1, 0x0, 0x0, 0x40080}, 0x20040000) msgsnd$auto(0x0, &(0x7f0000000600)={0x7fc, 0x7}, 0x400, 0x2) msgrcv$auto(0x0, 0x0, 0x4bd, 0x200000000001, 0xf1) syslog$auto(0x3, 0x0, 0x5) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r4 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) read$auto_fake_panic_fops_(r4, 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, 0x0) 6m20.009175367s ago: executing program 2 (id=817): r0 = memfd_create$auto(&(0x7f0000000040)=':\x00', 0xcc) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x1ac}}, 0x40000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0xf34) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) bind$auto(0x4, 0x0, 0x0) write$auto(0x3, 0x0, 0xffd8) recvmmsg$auto(r1, &(0x7f0000000380)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x4, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000340)={r0, &(0x7f00000000c0)="ef93894e87ee4691756edb6471f7614ad355e04f94598736281680d20be835d8e70a8c7ef35d8dfa3895daa86670653638edb7643da68db9aa5c6562c45e77200b3a8fd3d1006c47a3bf710c934fab8a0e94a39251cfd7baffd7baeb15cdd87892061b010c8ceca2ac95558fe4208e7f054d57b42445e391b6ebc0dd74b510c692f32cb2b06b9c5b9c8d4f1af2c3fc3dd305458132d2f346f66226da5faddd8de55934c8416c686be3874f03a864aeabedcb4c22547b66f6c05f2c8da1dfd169d2496a37d5b43fce376b82b462c6ccc25238ac9682e3d82aa4710f1025a4ff8fcf6566be1c0fa24b4b528320fb9a7c5b", 0xff800000, &(0x7f0000000280)="d393d57d7e4e9da47798d1bb45ec02cb8e74dadd9840344a0da9077396f3f000d0c56dffc6cfbfb4c683cac5baa6ac9f47797e623bad9da854f9ca3bdfebcb20b52aca01233329e2590e6784", 0x6, &(0x7f00000003c0)="891513b4d2362e9f7b1dd922de850b7974a251b3602c6998a2b7be4aea9ca68ade21a7fe1d2bdea5e7a3bef86763e487f7187ae8af0d3a9c6d9ac3eba9b1c85bbf46530f2ae212389bc1fa5d30d5bd7d6172eff7f3f52f9b9dd976c540276925c88db95f3d50968f1c56f4c682bbc609c787f05b0e4caac3bf16dbd826661f88c7b4ea9ca15996ca847aa34c45ab3c7e0d749be202426b27b0750e575985928a748a2babbb05a1f0c6cae835e4a36c2b5f3e54f7f24c48bddc640a548571", &(0x7f00000001c0)=0x12c}) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/dummy_udc.4/udc/dummy_udc.4/function\x00', 0x0, 0x0) socket(0x11, 0x80003, 0x300) keyctl$auto(0x12, 0xf, 0x40000000c6e9, 0x81, 0xa472) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0xffffffff, 0x5, 0x8000000000000000, 0x0) request_key$auto(0x0, 0x0, 0x0, 0xfffffffd) keyctl$auto(0x12, 0x102000000010001, 0x7f, 0x200, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 6m18.769963603s ago: executing program 2 (id=821): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x54) sendmsg$auto_MACSEC_CMD_DEL_RXSC(0xffffffffffffffff, 0x0, 0x20000000) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/afs/sysname\x00', 0xaa102, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = memfd_create$auto(0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x2, 0x0) socket(0x23, 0x80805, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/phonet\x00', 0x101000, 0x0) read$auto(r1, 0x0, 0xef) listen$auto(r0, 0x2) write$auto(0x3, 0x0, 0xfdf3) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) ioctl$auto_IOCTL_VMCI_CTX_ADD_NOTIFICATION(0xffffffffffffffff, 0x7af, 0x0) 6m18.048660616s ago: executing program 2 (id=825): r0 = socket(0x2, 0x6, 0x88) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x0, 0xa, 0x2, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x0, 0x0, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x3, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffa, 0x3, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000]}, 0x1fe, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) lseek$auto(0x3, 0x7fffffffffffffff, 0x3) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x68, 0x6}, 0x9}, 0x7, 0x6, 0x0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r3], 0x1ac}}, 0x40000) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x0) unshare$auto(0x40000080) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) socket(0xa, 0x801, 0x84) setsockopt$auto(0x3, 0x10000000084, 0x14, 0x0, 0x1000008) sendmsg$auto_TIPC_NL_MON_GET(r4, &(0x7f00000083c0)={0x0, 0x0, &(0x7f0000008380)={&(0x7f0000003680)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x8080) 6m17.670443287s ago: executing program 2 (id=827): close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/keys\x00', 0x1c9802, 0x0) setresuid$auto(0xffffffffffffffff, 0x8, 0x8000) tkill$auto(0x80000000000001, 0x7) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) r1 = pidfd_open$auto(0x1, 0x0) setns(r1, 0x60020000) getcwd$auto(0x0, 0xffffffffffffffff) move_mount$auto(0xffffffffffffffff, 0x0, 0x4, 0x0, 0x176) pread64$auto(r0, &(0x7f0000000040)='/proc/scsi/sg/devices\x00', 0x100000001, 0x100) 6m16.925216383s ago: executing program 2 (id=829): r0 = memfd_create$auto(&(0x7f0000000040)=':\x00', 0xcc) socket(0x28, 0x5, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x1ac}}, 0x40000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0xf34) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) bind$auto(0x4, 0x0, 0x0) write$auto(0x3, 0x0, 0xffd8) recvmmsg$auto(r1, &(0x7f0000000380)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x4, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000340)={r0, &(0x7f00000000c0)="ef93894e87ee4691756edb6471f7614ad355e04f94598736281680d20be835d8e70a8c7ef35d8dfa3895daa86670653638edb7643da68db9aa5c6562c45e77200b3a8fd3d1006c47a3bf710c934fab8a0e94a39251cfd7baffd7baeb15cdd87892061b010c8ceca2ac95558fe4208e7f054d57b42445e391b6ebc0dd74b510c692f32cb2b06b9c5b9c8d4f1af2c3fc3dd305458132d2f346f66226da5faddd8de55934c8416c686be3874f03a864aeabedcb4c22547b66f6c05f2c8da1dfd169d2496a37d5b43fce376b82b462c6ccc25238ac9682e3d82aa4710f1025a4ff8fcf6566be1c0fa24b4b528320fb9a7c5b", 0xff800000, &(0x7f0000000280)="d393d57d7e4e9da47798d1bb45ec02cb8e74dadd9840344a0da9077396f3f000d0c56dffc6cfbfb4c683cac5baa6ac9f47797e623bad9da854f9ca3bdfebcb20b52aca01233329e2590e6784", 0x6, &(0x7f00000003c0)="891513b4d2362e9f7b1dd922de850b7974a251b3602c6998a2b7be4aea9ca68ade21a7fe1d2bdea5e7a3bef86763e487f7187ae8af0d3a9c6d9ac3eba9b1c85bbf46530f2ae212389bc1fa5d30d5bd7d6172eff7f3f52f9b9dd976c540276925c88db95f3d50968f1c56f4c682bbc609c787f05b0e4caac3bf16dbd826661f88c7b4ea9ca15996ca847aa34c45ab3c7e0d749be202426b27b0750e575985928a748a2babbb05a1f0c6cae835e4a36c2b5f3e54f7f24c48bddc640a548571", &(0x7f00000001c0)=0x12c}) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/dummy_udc.4/udc/dummy_udc.4/function\x00', 0x0, 0x0) socket(0x11, 0x80003, 0x300) keyctl$auto(0x12, 0xf, 0x40000000c6e9, 0x81, 0xa472) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0xffffffff, 0x5, 0x8000000000000000, 0x0) request_key$auto(0x0, 0x0, 0x0, 0xfffffffd) keyctl$auto(0x12, 0x102000000010001, 0x7f, 0x200, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 6m16.464132976s ago: executing program 32 (id=829): r0 = memfd_create$auto(&(0x7f0000000040)=':\x00', 0xcc) socket(0x28, 0x5, 0x0) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=0x0, @ANYBLOB], 0x1ac}}, 0x40000) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x3}, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(0x3, 0x0, 0xf34) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x1d, 0x0, 0x9) connect$auto(0x3, 0x0, 0x55) bind$auto(0x4, 0x0, 0x0) write$auto(0x3, 0x0, 0xffd8) recvmmsg$auto(r1, &(0x7f0000000380)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x400}, 0x4, 0x0, 0x200002, 0x8}, 0x803}, 0xfffffff9, 0x10, 0x0) setsockopt$auto(0x400000000000003, 0x28, 0x6, 0x0, 0x56d) ioctl$auto_XFS_IOC_PATH_TO_HANDLE(r0, 0xc0385869, &(0x7f0000000340)={r0, &(0x7f00000000c0)="ef93894e87ee4691756edb6471f7614ad355e04f94598736281680d20be835d8e70a8c7ef35d8dfa3895daa86670653638edb7643da68db9aa5c6562c45e77200b3a8fd3d1006c47a3bf710c934fab8a0e94a39251cfd7baffd7baeb15cdd87892061b010c8ceca2ac95558fe4208e7f054d57b42445e391b6ebc0dd74b510c692f32cb2b06b9c5b9c8d4f1af2c3fc3dd305458132d2f346f66226da5faddd8de55934c8416c686be3874f03a864aeabedcb4c22547b66f6c05f2c8da1dfd169d2496a37d5b43fce376b82b462c6ccc25238ac9682e3d82aa4710f1025a4ff8fcf6566be1c0fa24b4b528320fb9a7c5b", 0xff800000, &(0x7f0000000280)="d393d57d7e4e9da47798d1bb45ec02cb8e74dadd9840344a0da9077396f3f000d0c56dffc6cfbfb4c683cac5baa6ac9f47797e623bad9da854f9ca3bdfebcb20b52aca01233329e2590e6784", 0x6, &(0x7f00000003c0)="891513b4d2362e9f7b1dd922de850b7974a251b3602c6998a2b7be4aea9ca68ade21a7fe1d2bdea5e7a3bef86763e487f7187ae8af0d3a9c6d9ac3eba9b1c85bbf46530f2ae212389bc1fa5d30d5bd7d6172eff7f3f52f9b9dd976c540276925c88db95f3d50968f1c56f4c682bbc609c787f05b0e4caac3bf16dbd826661f88c7b4ea9ca15996ca847aa34c45ab3c7e0d749be202426b27b0750e575985928a748a2babbb05a1f0c6cae835e4a36c2b5f3e54f7f24c48bddc640a548571", &(0x7f00000001c0)=0x12c}) openat$auto_tracing_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/per_cpu/cpu1/trace\x00', 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000300)='/sys/devices/platform/dummy_udc.4/udc/dummy_udc.4/function\x00', 0x0, 0x0) socket(0x11, 0x80003, 0x300) keyctl$auto(0x12, 0xf, 0x40000000c6e9, 0x81, 0xa472) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0xffffffff, 0x5, 0x8000000000000000, 0x0) request_key$auto(0x0, 0x0, 0x0, 0xfffffffd) keyctl$auto(0x12, 0x102000000010001, 0x7f, 0x200, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) 4m48.870755718s ago: executing program 0 (id=1248): mmap$auto(0x0, 0x40009, 0xde, 0x9b72, 0x7, 0x28000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mbind$auto(0x2001, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) read$auto(r1, 0x0, 0x39b8) capset$auto(0x0, 0x0) capget$auto(0x0, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, 0x0, 0x1a9901, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/dev_mcast\x00', 0x101000, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') ioctl$auto_MON_IOCX_GETX(r2, 0x4018920a, &(0x7f0000000140)={&(0x7f0000000080)={0xfff, 0x9d, 0x0, 0xd, 0xc6, 0x8, 0x2, 0x5, 0x100000001, 0x4, 0x4d, 0x9, 0x2, @iso={0x3ff, 0x7f}, 0x9, 0xffffff81, 0x2, 0x6}, &(0x7f0000000180)="af6137feb4a816345b588822f37a151cf2b1671d8887b101d406f68c08a49cebe7649be3b0f38922bfde099a4b3069184210ac9d966abc4e690cf57500000000000000000000000000000000c7b38966301e51bf9e75fdd8249713b58523e280d91420774fa7edb9ed8e3ecb4bd56b8942d3b061f997ca8ac807f6e9661080740cfe582de7dc109b90af9d1ddbd2cf7875582dbf11e8495b3a96a61bf7e56baa980ed5f7f1091dc19050df6299326981f05d5df0a455c21fe8a0271b83ae2bc7f01a336d7afe1540d7737b1e7b5e3d5879e78c8b60fed546e63c9c8bc59dea23aa53657dc017abae1fb67bf9", 0xfff}) openat$auto_rb_simple_fops_trace(0xffffffffffffff9c, 0x0, 0x40001, 0x0) socket(0x15, 0x5, 0x0) sendmsg$auto_NL80211_CMD_STOP_AP(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0xc}, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/033/001\x00', 0x410002, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) r4 = socket(0x10, 0x2, 0x6) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_SET_MAX_CSMA_BACKOFFS(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)={0x14, r5, 0x1, 0x70bd28, 0x25dfdbfd, {0x11, 0x0, 0xfc}}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x8044) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) write$auto(0x3, 0x0, 0x100082) link$auto(&(0x7f0000003240)='./file0\x00', &(0x7f0000003280)='./file2\x00') 4m47.796877662s ago: executing program 0 (id=1253): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ramdisk_pages/ram4\x00', 0x101102, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0x4004550d, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mlock$auto(0xfbea, 0x7fffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) shmdt$auto(&(0x7f0000000000)='(\x00') mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/veth0_to_hsr/disable_xfrm\x00', 0x88042, 0x0) write$auto(r2, &(0x7f0000000000)=')\x00', 0x8) mq_open$auto(0xffffffffffffffff, 0x200, 0x663c5371, 0x0) madvise$auto(0x0, 0x22, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x2003f0, 0x11) madvise$auto(0x1, 0x1000, 0x10000) personality$auto(0xfffffffc) 4m47.397041438s ago: executing program 0 (id=1258): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) clock_nanosleep$auto(0xfffffff9, 0xe, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x40085511, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) socket(0x2, 0x2, 0x0) connect$auto(0x3, 0x0, 0x54) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) fsconfig$auto_SHMEM_HUGE_NEVER(0xffffffffffffffff, 0xc09, &(0x7f00000000c0)='/proc/self/oom_adj\x00', &(0x7f0000000080)="d95199599e86730000000000000000", 0x0) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002f40), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="ffff2b2c9e088fdbdf250b0000001800018014000200776731"], 0x14}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 4m46.353390333s ago: executing program 0 (id=1262): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0xffffffffffffffff, 0x0) clock_nanosleep$auto(0xfffffff9, 0xe, 0x0, 0x0) ioctl$auto(0xffffffffffffffff, 0x40085511, 0xffffffffffffffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x48402, 0x0) r0 = socket(0x2, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f0000000100), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_CQM(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x1c, r3, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40800) sendmsg$auto_NCSI_CMD_SET_INTERFACE(r0, &(0x7f0000000500)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000004c0)={&(0x7f0000000140)={0x344, r1, 0x0, 0x70bd2c, 0x25dfdbfc, {}, [@NCSI_ATTR_DATA={0x2f9, 0x5, "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"}, @NCSI_ATTR_IFINDEX={0x8, 0x1, r5}, @NCSI_ATTR_MULTI_FLAG={0x4}, @NCSI_ATTR_CHANNEL_ID={0x8, 0x4, 0x4}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0xd0}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x4}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x3ff}, @NCSI_ATTR_CHANNEL_MASK={0x8, 0x8, 0x1}]}, 0x344}, 0x1, 0x0, 0x0, 0x40400c1}, 0x4000) connect$auto(0x3, 0x0, 0x54) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) fsconfig$auto_SHMEM_HUGE_NEVER(0xffffffffffffffff, 0xc09, &(0x7f00000000c0)='/proc/self/oom_adj\x00', &(0x7f0000000080)="d95199599e86730000000000000000", 0x0) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002f40), 0xffffffffffffffff) r8 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000000c0), 0x20002, 0x0) ioctl$auto_KVM_GET_SUPPORTED_HV_CPUID(r8, 0xc008aec1, &(0x7f0000000100)={0xa}) sendmsg$auto_ETHTOOL_MSG_FEATURES_GET(r6, &(0x7f0000003080)={0x0, 0x0, &(0x7f0000003040)={&(0x7f0000001b00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="ffff2b2c9e088fdbdf250b0000001800018014000200776731"], 0x2c}, 0x1, 0x0, 0x0, 0x20004800}, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) 4m45.294071755s ago: executing program 0 (id=1266): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) openat$auto_fops_u64_ro_(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ramdisk_pages/ram4\x00', 0x101102, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0x4004550d, r0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) mlock$auto(0xfbea, 0x7fffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) shmget$auto(0x8, 0x10565, 0x7ff) shmat$auto(0x0, &(0x7f0000000580)='(\x00', 0xfffffffa) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) shmdt$auto(&(0x7f0000000000)='(\x00') mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/conf/veth0_to_hsr/disable_xfrm\x00', 0x88042, 0x0) write$auto(r2, &(0x7f0000000000)=')\x00', 0x8) mq_open$auto(0xffffffffffffffff, 0x200, 0x663c5371, 0x0) madvise$auto(0x0, 0x22, 0xa) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) madvise$auto(0x0, 0x2003f0, 0x11) madvise$auto(0x1, 0x1000, 0x10000) personality$auto(0xfffffffc) 4m44.597361251s ago: executing program 0 (id=1270): r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x40, 0x0) mmap$auto(0x0, 0x2020009, 0xffffffffffffffd0, 0x800000000000eb1, 0xfffffffffffffffa, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/mac80211_hwsim/hwsim1/ieee80211/phy1/rfkill3/state\x00', 0x102, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f0000000100)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0x10001, 0x0) pivot_root$auto(&(0x7f0000000200)='}[,&*}\x00\xe3~\xdc\xc2\xdf\xe6\xf9=&\xd6\xd6\x7f\x0f^\x97o\xb7\xcd\xba\x9c\xc5>\xe1\xea\x00\xa3\x18\x98,w\f9\x12\xaeh\x83xR\xc1\x15\rR\xb1\x1du/\xabA\xe7V\x96\n\xaa\xfe\xf5w\xe4Q\xcew\xa79R\xb6F\xb4>\xf1\xd5V\xac\x02@\xcfLF.\x85\\>0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) (async) write$auto(r1, &(0x7f0000000000)='@\x00', 0xfe) (async) write$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffffff, 0x0, 0x0) (async) io_uring_setup$auto(0x4bf15e08, 0x0) (async) socket(0x28, 0x1, 0x0) (async) mq_unlink$auto(&(0x7f0000000040)='#.]\x00') syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$auto(0xffffffffffffffff, 0x0, 0xc, 0xb21, 0x0, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf9779d790fb28"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) r4 = socket(0x10, 0x2, 0x4) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) 34.191634526s ago: executing program 4 (id=2329): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x5cb042, 0x0) write$auto(r0, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r2, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) keyctl$auto(0x14, 0x72510000000, 0x69c6, 0x0, 0x0) madvise$auto(0x7fff, 0xfffffffffffffffc, 0x67) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x697c, 0x1ffc0000002, 0xe0, 0x19, 0xffffffffffffffff, 0x28000) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$auto(0x3, 0x4018bc13, 0xffffffffffffffff) socketpair$auto(0xffffffff, 0x8, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/031/001\x00', 0x50d000, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0) write$auto(r5, 0x0, 0xef) 33.735953031s ago: executing program 4 (id=2332): unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0x3, 0x10000000084, 0x11, 0x0, 0x8) r0 = socket(0x10, 0x2, 0x7fffffff) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) mknod$auto(&(0x7f0000000080)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000100)=':,\x00', 0x0, 0x0) mknod$auto(&(0x7f0000000b00)='X))\x00', 0x63c1, 0x7ff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'dvmrp0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000140)=@bpf_attr_3={0xd, 0x8, 0x7ff, 0x3, 0x5093, 0x1e25, 0x3, 0x3, 0x392, "92fbbd5ff0bb27f1794de9ea776574fe", r2, 0x1, r1, 0x5, 0x23940, 0x1392, 0x20, 0x2, 0x3, 0x4, @attach_prog_fd=r1, 0x8, 0x7fff, 0xbe7e, 0x7, 0x7, r0}, 0x3) mknod$auto(&(0x7f0000000340)='\xe1\x9eHU\x00', 0x67c1, 0x7fc) socket(0x28, 0x1, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) unshare$auto(0xbf) ioctl$auto_SG_GET_PACK_ID(r3, 0x227c, &(0x7f0000000480)="d09e49e0b2f0e98a170681f9ecc99bcf8644a8a2efa4aa1d35759085f90bbced742dd4dbd3e7aab3e60dda7a7de93ffb0916c352aaaeec1cefe03409e13a1fd173c168a56572af270d989155964b92c71bb24ac04a3abcccdd6d323a679d") select$auto(0xe, 0x0, 0x0, &(0x7f0000000340)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4460, 0x15f4da0a, 0x1, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x0, 0x5, 0x2]}, 0x0) unshare$auto(0x40000080) prctl$auto(0x39, 0x1, 0x0, 0x0, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) io_uring_setup$auto(0x4bf15e08, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x40, r6, 0x1b, 0x74bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x10, 0x3, 0x0, 0x1, [@nested={0xc, 0x6, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x33}]}]}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) 33.495688787s ago: executing program 1 (id=2333): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRES32=r0, @ANYRES16=r0, @ANYBLOB="010029bd700001dcdf2503000000040006000c00018008001000040006"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x48010}, 0x800) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x0, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x6}, 0x3, 0x0) (async) r2 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) mmap$auto_vmwgfx_driver_fops_vmwgfx_drv(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x11, r2, 0x100000000) 32.521221551s ago: executing program 1 (id=2334): r0 = socket$nl_generic(0x10, 0x3, 0x10) prctl$auto(0x34, 0x1, 0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002580), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f0000002640)={0x0, 0x0, &(0x7f0000002600)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd2a, 0x25dfdbfd, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x2c}, @NFSD_A_SERVER_SCOPE={0x8, 0x4, ']#)\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x810) 31.706223232s ago: executing program 1 (id=2338): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x11, 0x80003, 0x0) setsockopt$auto(r0, 0x107, 0x12, 0x0, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) setresgid$auto(0x800, 0xee01, 0xffffffffffffffff) setregid$auto(0xee01, 0x0) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mbind$auto(0x0, 0x2, 0x2, 0x0, 0x7, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/011/001\x00', 0x121002, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, &(0x7f0000000000)='//\xf2\x00', 0x80000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) syz_clone3(&(0x7f0000000200)={0x182000080, 0x0, 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) kill$auto(0x0, 0x21) madvise$auto(0x0, 0x2003f0, 0x15) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D3\x00', 0x2841, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1d, 0x3, 0x1) mmap$auto(0x0, 0x400008, 0xde, 0x9b72, 0x2, 0x8000) readv$auto(r1, &(0x7f0000000a80)={0x0, 0x10002}, 0x401) 30.50112831s ago: executing program 4 (id=2340): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x5cb042, 0x0) write$auto(r0, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r2, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) keyctl$auto(0x14, 0x72510000000, 0x69c6, 0x0, 0x0) madvise$auto(0x7fff, 0xfffffffffffffffc, 0x67) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x697c, 0x1ffc0000002, 0xe0, 0x19, 0xffffffffffffffff, 0x28000) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$auto(0x3, 0x4018bc13, 0xffffffffffffffff) socketpair$auto(0xffffffff, 0x8, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/031/001\x00', 0x50d000, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0) write$auto(r5, 0x0, 0xef) 30.233906867s ago: executing program 4 (id=2342): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000500)='/proc/sys/fs/xfs/stats_clear\x00', 0x1, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop10/removable\x00', 0x47ca03, 0x0) write$auto_ocfs2_control_fops_stack_user(0xffffffffffffffff, &(0x7f0000003900)='\t', 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000140), r1) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r2, @ANYBLOB="eb0226bda51be029f970c8a16a9f87a32e58"], 0x14}, 0x1, 0x0, 0x0, 0x20004041}, 0x4004040) r3 = openat$auto_dev_fops_plock(0xffffffffffffff9c, 0x0, 0x40, 0x0) read$auto(r3, 0x0, 0xff) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(0xffffffffffffffff, 0xc0405519, &(0x7f00000000c0)={@raw, 0x7, 0xd, 0xa4, "e3eabf11dce76a2eac9cb4682c339b3ce615a9b97386d4462bc6553245da56e4978f37368e84e0aa4e00", @inferred=0xffffffffffffffff}) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x48, 0x0) fsopen$auto(0x0, 0x1) fsopen$auto(0x0, 0x1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0xa, 0x2, 0x88) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'team0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r6, r5, 0x4, 0x1, r4, @relative_id=0x13, 0xe600}, 0xf) r7 = open(0x0, 0x221c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r7, 0x0, 0x3}, 0xc) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) 29.900616979s ago: executing program 4 (id=2343): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0xb2, 0x14, 0xffb, 0x8000000008015, r0, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nbd8\x00', 0x2400, 0x0) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) ioctl$auto_TUNSETOFFLOAD(0xffffffffffffffff, 0x400454d0, &(0x7f0000000040)=0x2a1) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) r2 = fcntl$auto_F_GETPIPE_SZ(r1, 0x408, 0x0) sendmsg$auto_NFC_CMD_DEV_UP(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x24, 0x0, 0x4, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_COMM_MODE={0x5, 0xa, 0x8}, @NFC_ATTR_LLC_PARAM_MIUX={0x6, 0x11, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4841}, 0x40010) ioctl$auto(0x1, 0x541e, r1) ioctl$auto(r1, 0xab04, r1) write$auto(r0, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) madvise$auto(0x0, 0x20499d, 0x9) mbind$auto(0x1, 0x100000004, 0x0, 0x0, 0x6, 0x2) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) io_uring_setup$auto(0x1, 0x0) socket(0x11, 0x80003, 0x300) 27.969796033s ago: executing program 4 (id=2350): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x5cb042, 0x0) write$auto(r0, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r2, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) keyctl$auto(0x14, 0x72510000000, 0x69c6, 0x0, 0x0) madvise$auto(0x7fff, 0xfffffffffffffffc, 0x67) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x697c, 0x1ffc0000002, 0xe0, 0x19, 0xffffffffffffffff, 0x28000) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$auto(0x3, 0x4018bc13, 0xffffffffffffffff) socketpair$auto(0xffffffff, 0x8, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/031/001\x00', 0x50d000, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0) write$auto(r5, 0x0, 0xef) 12.516477726s ago: executing program 34 (id=2350): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x5cb042, 0x0) write$auto(r0, &(0x7f0000000300)='*o\xd3\xa49\xaf\xa9\xe4\xe17\x12\xb3Z\x17I\x82\xdc\xbeiw\xc1\xd1\x8d\x9b\r\x9aR\xe7\x9f\xd8\xab\x16`f\nT\xaa\xfap \xe6\xdaV\xdeD\x8dR5\xd2\xe58\n\xff\x19+\xeb\xb3+\xf6\xc6\a\x00\x00\x00\xf1A\xa5\x95\x1fk\x1f\xff\x99gP\x9e\x88\x97]\x93\xf4\xdd<\xe7p\x0e\xd4C\xdc\x84\v\xafz\xfd\x81\xa3\xb2\xbb\xa4\xd9\xf2P\xa8\xe9\x8f\x13\xa7\x98\x85\xf8\v\aB\xfc\xfa\x14E\xb8y\x884<\xa7\xffyb\x8a\b\xbb\x1b\x13W\xe3\xf7\xd8\x83\xc9\xd7\x8c', 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000580)={0x1c, r2, 0x301, 0x70b52c, 0x25dfdbfb, {}, [@CTRL_ATTR_FAMILY_ID={0x6, 0x1, 0x17}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c01d}, 0x0) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000080), r1) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) keyctl$auto(0x14, 0x72510000000, 0x69c6, 0x0, 0x0) madvise$auto(0x7fff, 0xfffffffffffffffc, 0x67) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x697c, 0x1ffc0000002, 0xe0, 0x19, 0xffffffffffffffff, 0x28000) openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$auto(0x3, 0x4018bc13, 0xffffffffffffffff) socketpair$auto(0xffffffff, 0x8, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r3, 0x0, 0x20) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/031/001\x00', 0x50d000, 0x0) r4 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r4, &(0x7f0000000200)={0x0, 0x7}, 0x3) r5 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0) write$auto(r5, 0x0, 0xef) 2.685202997s ago: executing program 3 (id=2415): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)={0x38, r1, 0x1b, 0x70bd26, 0x25dfdbfe, {}, [@OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_KEY={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898035000000000000000000f0ff"}, @OVS_PACKET_ATTR_ACTIONS={0x8, 0x3, 0x0, 0x1, [@nested={0x4, 0x17}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4004040}, 0x4800) 2.429759107s ago: executing program 3 (id=2416): openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x22240, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x0, 0x5, 0xa) ioctl$auto_CEC_ADAP_G_LOG_ADDRS(0xffffffffffffffff, 0x805c6103, &(0x7f0000000180)={"48058ca6", 0x7, 0x1, 0x3, 0xfffffff8, 0x10000, "b4ce5a8b3712ac61ae13c05d5010ac", "71ce5f68", "9233c904", "ddae1ab8", ["8be5ee4f40200014c9f8ea15", "23bb1b4ef23a525bc7035e8a", "0a2dcd78e13c2eeb716b2580", "9cf0714e333b140254d2efb1"]}) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r3 = getsockopt$auto_SO_PEEK_OFF(r0, 0x2, 0x2a, &(0x7f0000000040)='/dev/nullb0\x00', &(0x7f00000000c0)=0xf61) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x3, 0x4, 0x3, 0x63, 0x400, 0x0, 0x1, 0x80f0c8, 0x0, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r2, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_btf_obj_fd, 0x6, 0xffff, 0x8000000000000000, 0x0, 0xfffffffe, r3}, 0x47) syz_open_procfs$namespace(0x0, &(0x7f0000000080)) ioctl$auto(0x3, 0x40081271, 0x38) write$auto(0x3, 0x0, 0xfdef) mmap$auto(0x0, 0x580f, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r4 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ttys2\x00', 0x60000, 0x0) write$auto_console_fops_tty_io(r4, &(0x7f0000000440)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b58995648d9dca26087ede284d956395831192b0b02d4db181bad67b751c2441b5d", 0x5a) io_uring_setup$auto(0x6, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0x4fffffdf2) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto(0x3, 0x541b, 0x10000000000402) 2.018448017s ago: executing program 5 (id=2418): unshare$auto(0x40000080) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xfffffffe, 0x1ff, 0x0, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x800000009, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x5, 0x0, 0x2, 0x7, 0x2000, 0x0, 0xe, 0x2d16, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x80001, 0x1, 0x10000000000, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x400000000005b8, 0x7f, 0x6, 0xfffffffffffffffd, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa3a, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x801, 0x106) r1 = getsockopt$auto(r0, 0x6, 0xd, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r3 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/hw_queues\x00', 0x0, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r3, 0x0, 0x0) getsockopt$auto(r2, 0x84, 0x81, 0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x40, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x4f20, 0x0, 0x5, 0x7) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r4, &(0x7f00000010c0)=""/4096, 0x1000) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) getpid() setsockopt$auto_SO_DOMAIN(r1, 0x8, 0x27, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='r'], 0x1ac}}, 0x4004) r5 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x0, 0x3, 0x0, 0x80, 0x101) close_range$auto(r5, r1, 0x5) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0x0) socketpair$auto(0x18a, 0x1ffffff, 0x40, 0x0) 1.759875349s ago: executing program 5 (id=2419): r0 = bpf$auto(0x5, 0x0, 0x171) ioctl$auto_XFS_IOC_FREESP64(r0, 0x40305825, &(0x7f0000000240)={0x6, 0x6, 0x101, 0x0, 0x5, 0x0}) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) fcntl$auto_F_SETOWN_EX(r2, 0xf, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000100)={{@inferred=r1, 0x8, 0x8, 0x3, "ede1ff4cbaf3fdb34efbd0b7efbced8a0baa1ec91ccd551938cd893a3ab71b3acb675d079cb930141968973e"}, 0xe, 0x42, 0xc96, @raw=0x5, @enumerated={0xffff7fff, 0x800005, "2513d627d0f701073c46df23e5cefa348a1bd943fc87a0aece8bcfb6990e4474d8c2a04f9467bbf634fcdea92cc4931a1d0527f6b9bf421579aa3a6942aa4b1e", 0x0, 0x2}, "dd63adca2cc65367e8faeced8b11ad3adf14def36a0498cac6fc70d422c7b895556276923b018188f182c277b7f112a6cfd3800544bc9e373c59fa6254743f9b"}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000500)='/sys/devices/virtual/block/ram12/queue/read_ahead_kb\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x20) unshare$auto(0x40000080) mmap$auto(0x400000000000, 0x2000b, 0x0, 0xeb2, 0x401, 0x8000) settimeofday$auto(0x0, &(0x7f0000000100)={0x82, 0x4}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0x2003f0, 0x17) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket(0x2, 0x1, 0x0) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r4, 0x0, 0x40000) r5 = socket(0x10, 0x2, 0x0) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000dc0)={0x30, r6, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_WOL_SOPASS={0x4}, @ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4040000}, 0x20049044) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x14f602, 0x0) syz_genetlink_get_family_id$auto_ioam6(0x0, r4) r7 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r7, &(0x7f0000000200)={0x0, 0x7}, 0x5) mmap$auto(0x0, 0x20009, 0x9, 0xeb1, 0x401, 0x8000) setrlimit$auto(0x10000686, 0x0) userfaultfd$auto(0x1) 1.459771487s ago: executing program 5 (id=2420): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/devices/platform/dummy_hcd.2/usb3/authorized\x00', 0x81, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x402, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/tunl0/threaded\x00', 0x1a1a42, 0x0) sendfile$auto(r1, r1, 0x0, 0xe00000000) unshare$auto(0x40000080) poll$auto(&(0x7f0000000040)={0x3, 0x1, 0xa}, 0x5, 0x106) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) socketpair$auto(0x800001e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @loopback}, 0x51) getsockopt$auto_SO_PROTOCOL(r2, 0x0, 0x26, &(0x7f0000000000)='@![-\x00', &(0x7f0000000040)=0x3) mmap$auto(0x0, 0x6, 0x6, 0x9b72, 0xffffffffffffffff, 0x8000) r3 = io_uring_setup$auto(0x100, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/module/pcie_aspm/parameters/policy\x00', 0x80000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r4, &(0x7f00000004c0)=""/206, 0xce) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, r3, 0x0) close_range$auto(0x2, 0x8, 0x0) madvise$auto(0xb, 0x6, 0x8) socket(0x10, 0x2, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mtdblock0\x00', 0x10d441, 0x0) write$auto(0x3, 0x0, 0xfffffdef) setsockopt$auto(r3, 0x3580, 0x22, 0x0, 0xc) write$auto(r0, &(0x7f0000000140)='1\x81=\"\xad\xff\x8d\xf9P\x18\xa4\xb0\xb4\xd9\x82=\xe1P\x05\x00\xfb&\xe8\xbf\x901\a2\xa2X`\a\xf1y\xb3\"=', 0xd4d0) 1.148314229s ago: executing program 5 (id=2421): r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x22240, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r1, &(0x7f00000010c0)=""/4096, 0x1000) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/midiC2D1\x00', 0x0, 0x0) sendmsg$auto_NL80211_CMD_PROBE_MESH_LINK(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1004c001}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="10002cbd7000ffdbdf25880000000400b80006003600030000000500190005000000040067009087c229acd8a12e80c2a345c2b9370d7a225341fe839c369296d4633461d6ceda96200236a408f12f59c2105797d7726af649afa29ad0ce9adae838f0b9c0b2efa8e04739133e50a3b192a3e663aad28de33891968b6ac38e8630c2df35edb1"], 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x40014) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f00000000c0)={0x800, 0x2, 0x3ff, 0x1, 0x9, "ddcff413d93702692ff91749"}) close_range$auto(r0, r1, 0x3) io_uring_setup$auto(0x6, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto(0x3, 0x0, 0x4fffffdf2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video23\x00', 0x80000, 0x0) r3 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents$auto(r3, 0x0, 0x400018) ioctl$auto(0x3, 0x4020565a, 0x38) close_range$auto(0x2, 0xa, 0x0) ioctl$auto(0x3, 0x402c542b, 0x38) ioctl$auto(0x3, 0x541b, 0x10000000000402) 1.093348494s ago: executing program 3 (id=2422): mmap$auto(0x0, 0x400008, 0x200, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0x2000040080000004, 0xe) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000001640)='/proc/self/mem\x00', 0x401, 0x0) write$auto_proc_mem_operations_base(r0, &(0x7f0000001680)="a7", 0x80000) (async) prctl$auto(0x4, 0x1, 0x3ff, 0x8000000000000001, 0x9) mmap$auto(0x0, 0x20009, 0x4001000000df, 0xeb1, 0x401, 0x8000) (async) syz_clone3(&(0x7f0000000080)={0x123060000, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0}, 0x58) (async) write$auto(0x3, 0x0, 0x100082) 953.22899ms ago: executing program 3 (id=2423): mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/adsp1\x00', 0x227041, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snd/controlC1\x00', 0x400, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f00000001c0)=0x5) ioctl$auto_SNDCTL_DSP_STEREO(r0, 0xc0045003, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/ip_vti0/ioam6_id\x00', 0x248180, 0x0) sendfile$auto(0x1, r0, 0x0, 0x5) r3 = prctl$auto_PR_TASK_PERF_EVENTS_ENABLE(0x20, 0xcbe, 0x0, 0x1, 0x6) ioctl$auto_FICLONERANGE(r2, 0x4020940d, r3) 938.439324ms ago: executing program 5 (id=2424): ioctl$auto_MON_IOCX_MFETCH(0xffffffffffffffff, 0xc0109207, &(0x7f00000001c0)={&(0x7f00000000c0)=0x8, 0x0, 0x1}) mmap$auto(0x0, 0x400008, 0xdf, 0xb2, 0x2, 0x8000) sendmsg$auto_OVS_DP_CMD_NEW(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x40000}, 0x80) mmap$auto(0xfffffffffffffffe, 0x8000, 0xdf, 0x10000009b71, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) ioctl$auto_IOCTL_VMCI_DATAGRAM_RECEIVE(0xffffffffffffffff, 0x7ac, 0x0) socket(0xa, 0x801, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0x1, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffd]}, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000080)={{0x0, 0xfffffffd, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b4b, 0x100000000000afcb) socket(0x29, 0x2, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/ip_mr_vif\x00', 0x2000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r3, &(0x7f0000000040)=""/229, 0xe5) 882.743436ms ago: executing program 3 (id=2425): sendmsg$auto_SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, 0x0, 0x204, 0x70bd2d, 0x25dfdbff, {}, [@SEG6_ATTR_DST={0x14, 0x1, @remote}, @SEG6_ATTR_ALGID={0x5, 0x6, 0xf}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x1}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x7}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0xef}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xd}]}, 0x60}, 0x1, 0x0, 0x0, 0x4040000}, 0x48000) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000140)='/proc/asound/card1/pcm1c/oss\x00', 0x80, 0x0) r1 = openat$auto_dma_buf_debug_fops_(0xffffffffffffff9c, &(0x7f0000000180), 0x400000, 0x0) bind$auto(r1, &(0x7f00000001c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfc, 0x10000000}, 0xac) r2 = semctl$auto_GETVAL(0x6, 0x30b8, 0xc, 0x9) r3 = prctl$auto_PR_SET_SPECULATION_CTRL(0x35, 0x7, r2, 0xffffffffffffffc0, 0x7fffffffffffffff) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000240), r3) sendmsg$auto_NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000002d40)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000002d00)={&(0x7f0000000280)={0x2a54, r4, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_STA_AID={0x6, 0x10, 0x2}, @NL80211_ATTR_NAN_MASTER_PREF={0x5, 0xee, 0x2}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, "5b9574dcea4559230d3fad82"}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x3}, @NL80211_ATTR_TDLS_SUPPORT={0x4}, @NL80211_ATTR_KEY={0x2295, 0x50, 0x0, 0x1, [@typed={0x8, 0xfa, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}, @typed={0x21, 0x86, 0x0, 0x0, @str='/proc/asound/card1/pcm1c/oss\x00'}, @generic="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", @nested={0x5d, 0x3a, 0x0, 0x1, [@generic="31955a954d02ac368be130eb004d3edf97b1743c89efc16d9bd95d58fd97f8438c5baf8c208e34e13fb7a2d6feecee097a6b97355358db0803659049b30d2e85da", @typed={0x14, 0x118, 0x0, 0x0, @ipv6=@empty}, @nested={0x4, 0x52}]}, @generic="3ad4d983412faa11aeaf0ac255bc3d02990e57d0002c87c7343d70cc7a89b8e5b2f1b58a259c97421c2cd5f5c308e0376418ccff190e02fc1d81153848c0c87ef83266cbf6f4463aec1149ff5fa945c899fc1eff2a29e0943338ebe32a999712aa8e7aa0e4932c7522b2762b7c4f8163b96656e1fbce4510198f4ed0b4a119bfd35ed9417e8f405e4188285930a0d00d16502afa0d4fd8c6f6b8504f285ded5b5d471890a35083691437be6f7981c76ff09c7c8b991c86d85bfdbfcf6d", @typed={0x4, 0x1b}, @nested={0x1047, 0x23, 0x0, 0x1, [@generic="7523527d1ec700a466bf5a62892ca9e3f8f905e01e677e93288a071a03bbe65503db5b6dc73275a9ad81014f533aa7df637300c337d1ad9116ea02e1fa2b02", @nested={0x4, 0xeb}, @generic="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"]}, @typed={0x8, 0xfd, 0x0, 0x0, @ipv4=@multicast1}, @generic="1914f2a46c6b7125b54819830b0df783bb92e6e118669f0fc5e24c7c41bff5c165f5154ebd79f958cba68ca2fc1612436448b921d260edec3c53fcff1de30aa4dc9bafd9dc99765c77416a4d309354e83535fb1a1b4124af6cebc49178ac186a35a923f48759691dfd677d36e7431ba480a8483acc88983e09def58d3416ad80cd634ddac487393bb7b70ab7d8f2401be768d22198736d0d2f0c399df8157a57ab6d002b71095a1578d8ddfa1736461f9ee2e1b3227f11353b910ba3f2c14615da5912fffd6e74577f86874729f40f6cbd86368d0d2436882a89013ad74532a4c4bd12c62fde3cf1710b005ec51fb313d7ba5e4e"]}, @NL80211_ATTR_PROBE_RESP={0x726, 0x91, "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"}, @NL80211_ATTR_SAE_PASSWORD={0x4c, 0x115, "10ccf0d574df586319a26f21c0a1652a50362d7181ca7fa51013b062c71689dfbbb165d0cccec9ad3120c5d5e5623a1163916f499c422302485ab3b0c9233a3e1411fe25cf35d02f"}]}, 0x2a54}, 0x1, 0x0, 0x0, 0x800}, 0x50) setsockopt$auto_SO_BUF_LOCK(r3, 0x401, 0x48, &(0x7f0000002d80)='\x00', 0x5) ioctl$auto_TIOCMBIS(r3, 0x5416, &(0x7f0000002dc0)="168a2cf092cd35da060298668e5f6125c162036521c2a75e61820cdf16b1253afe7c9c662531911e31caa203c6e54cc1e6535ee0ed6dc5e8060affeb5914d525972a8ca5a8f0356bce92a07ffdb6974407e189675b93ef0f87eaede8df2aed09dde94dbd158db81f") pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD(r0, 0x7fff, &(0x7f0000002e40)={@_si_pad}, 0x1) write$auto(r0, &(0x7f0000002ec0)=')p:$}](\x00', 0x5) ioctl$auto_FS_IOC_GET_ENCRYPTION_POLICY_EX2(r3, 0xc0096616, &(0x7f0000002f00)="bcabb07dc18a1df568") r5 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000002f80), r3) r6 = openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000002fc0)='/sys/kernel/debug/tracing/events/vmalloc/alloc_vmap_area/trigger\x00', 0xa00, 0x0) sendmsg$auto_CGROUPSTATS_CMD_GET(r3, &(0x7f0000003100)={&(0x7f0000002f40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000030c0)={&(0x7f0000003040)={0x4c, r5, 0x2, 0x70bd26, 0x25dfdbfc, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r3}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r6}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r1}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r1}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r0}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r3}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24040800}, 0x4080) epoll_ctl$auto_EPOLL_CTL_DEL(r1, 0x2, r3, &(0x7f0000003140)={0x800, 0x1}) ioctl$auto_SNDCTL_DSP_SETTRIGGER(r3, 0x40045010, &(0x7f0000003180)="603e05c813775b6466708cc1c7ff6a03ae98") r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r7, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x1c, r4, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x65696d74}]}, 0x1c}, 0x1, 0x0, 0x0, 0x44080}, 0x40000) r8 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000003300), r0) sendmsg$auto_L2TP_CMD_TUNNEL_MODIFY(r3, &(0x7f00000033c0)={&(0x7f00000032c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000003380)={&(0x7f0000003340)={0x2c, r8, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@L2TP_ATTR_ENCAP_TYPE={0x6, 0x2, 0x8}, @L2TP_ATTR_L2SPEC_LEN={0x5, 0x6, 0x17}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x8001}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$auto_NL80211_CMD_SET_HW_TIMESTAMP(r3, &(0x7f00000034c0)={&(0x7f0000003400)={0x10, 0x0, 0x0, 0x524abe59b2343714}, 0xc, &(0x7f0000003480)={&(0x7f0000003440)={0x1c, r4, 0x1, 0x70bd27, 0x25dfdbff, {}, [@NL80211_ATTR_DISABLE_HT={0x4}, @NL80211_ATTR_ASSOC_SPP_AMSDU={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4040000}, 0x8d0) syz_clone3(&(0x7f0000004700)={0x21000000, &(0x7f0000003500)=0xffffffffffffffff, &(0x7f0000003540)=0x0, &(0x7f0000003580), {0x2f}, &(0x7f00000035c0)=""/4096, 0x1000, &(0x7f00000045c0)=""/194, &(0x7f00000046c0)=[r2, r2], 0x2, {r3}}, 0x58) process_madvise$auto_MADV_REMOVE(r9, &(0x7f0000004800)={&(0x7f0000004780)="501e4bb919e9f82cbaf3b6454502b5d69db4336c81f7001df65a1d0520ff2e80c2b7e911aa81983f19f8307529004af86eb5630956d0cda60755914ffca0b23cf43078e529cb99b55e804da5fd235438ec356e1d71", 0x4}, 0x5, 0x9, 0x66) setsockopt$auto(r1, 0x6a03e11e, 0x0, &(0x7f0000004840)='l2tp\x00', 0xc7) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000004cc0)={&(0x7f0000004880)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004c80)={&(0x7f00000048c0)={0x3b0, r4, 0x4, 0x70bd28, 0x25dfdbfe, {}, [@NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0xfff6}, @NL80211_ATTR_SCAN_SUPP_RATES={0x393, 0x7d, 0x0, 0x1, [@typed={0x8, 0x70, 0x0, 0x0, @pid=r10}, @typed={0x8, 0x5, 0x0, 0x0, @pid=r10}, @typed={0x8, 0x85, 0x0, 0x0, @ipv4=@empty}, @generic="ac21aae293c2ff8b5711ee4dacee835546572c317307698c4c920aca2f3384a04bdda7a3399fcb2f6e10aab9b415017721addbdf9ec7786058b728780b8462791211e065dbde9000087acb4e7d9f60aa7105e595889699a76a22be4211839536b538074f1001748cc75cf6e237de88db683c06e152147e8a3eaefddf227aa340fdf16a84f3eb", @nested={0x190, 0x2f, 0x0, 0x1, [@generic="c34e3130045b27c950134657dd1a1caf4cb7584f11f40e879e791699d9d26c083ab10c856d43381f8296ac338715af4e70b5e491913343c405640a0ebc96b9e891ce90c2680439f64883e5be7848e2ee78d9107e8284fdbf05bec3223bfdbbd60d28cbc92f96acedc4f65d46cb76b644ca", @generic="a222859a5852f734812fad07cc2f003d8b3978252e76f2b14331e9e574e5bc74baa5e19568d7b171f4f4bfe1bc5ff90c8eed9e46237c18938ef66fd7c55d27334f34c4078c91c91d0cc7903d33d8a66ea1855278219f9cea1ac45afe114f7b4cdfed6cd795e0c5b602b8ac3924466a1f79acc7", @generic="eec79985ead445fa4a45f3b33ff8f64dd7deac96cebe108b497c31cc2b32a5f0f44cfdfca17f2622ce7ed5027f7c013d49b5754fe90cad7dc9d29225a8caec3eb2ac8b114331a9efc2c7aafcd29a9e25b3df56aa11b460c5d6a4ffff093ca70c829ab8dd93949b24a5fb3b3344273f29a559a8130392f7dd191920cc35b0a1746415b307392449305d48800fc4e461d7d33633b0ff345d1905147611a311105cfa3484ea", @nested={0x4, 0x13}]}, @generic="c1bab2d6b4ef629203789776fabe5db651dd18ea4e358e0e1b159145f5d11bded12cb98e9cfbc9142343b82eae50c92e7272d0f5d831c6b2749f240f23f13071f08c7118b9089971f83607c8646602df605072c4119a8e8a57803f8ca666e94761c9720c73ab9daadcb8047baf51f1be77339aef1c4985ab9879af44509fbd03e13607bcbb76e9f7c0c18d84d2806aad56381daff2569aee1b8b02cac78d14c8172483bd6e4c0558fab2bd19c8f3dd471495a7", @generic="2f7f6704007c2455719f4e56e3cd54a95662fd943b85808374c4c34f49502c2a0e2f53d42ab70d3ee81f1074d555b6cb8cb92e467b0d0b5a4be2ff70ea41aa9648b9d5a8761b6bb6ca3ed204f0ffbe11a0a8184e1afc27a9899ca23993c25536735f5108375a9936bc198d5f05e4b47ecc3afbdf0bef8bc148d1239c7585023f1d4eaf7c96b0632f7f77353ea1d133636b3fd8a31617c066221a5764712d8d73ad7b06600eb8", @nested={0x8, 0xca, 0x0, 0x1, [@nested={0x4, 0x1e}]}]}]}, 0x3b0}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) close_range$auto(r7, r6, 0x9) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000004d00)='/proc/thread-self/gid_map\x00', 0x100, 0x0) setsockopt$auto_SO_RCVBUF(r1, 0x0, 0x8, &(0x7f0000004d40)='\x00', 0xff) 113.199484ms ago: executing program 3 (id=2426): unshare$auto(0x40000080) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0xfffffffe, 0x1ff, 0x0, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x800000009, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x5, 0x0, 0x2, 0x7, 0x2000, 0x0, 0xe, 0x2d16, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x80001, 0x1, 0x10000000000, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0xfffffffffffffffd, 0x0, 0x0, 0x400000000005b8, 0x7f, 0x6, 0xfffffffffffffffd, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa3a, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) mmap$auto(0x0, 0x1, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x2, 0x801, 0x106) r1 = getsockopt$auto(r0, 0x6, 0xd, 0x0, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="1000"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0xf7374674b920089e) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r3 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ieee80211/phy1/netdev:wlan1/hw_queues\x00', 0x0, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r3, 0x0, 0x0) getsockopt$auto(r2, 0x84, 0x81, 0x0, 0x0) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x40, 0x0) fcntl$auto(0x3, 0x4, 0xa553) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xffffffffffffffff, 0x8000) prctl$auto_PR_GET_TID_ADDRESS(0x28, 0x4f20, 0x0, 0x5, 0x7) r4 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) read$auto_proc_pid_maps_operations_internal(r4, &(0x7f00000010c0)=""/4096, 0x1000) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) getpid() setsockopt$auto_SO_DOMAIN(r1, 0x8, 0x27, &(0x7f0000000000)='/dev/snd/pcmC1D0c\x00', 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB='r'], 0x1ac}}, 0x4004) r5 = prctl$auto_PR_SCHED_CORE_SHARE_FROM(0x0, 0x3, 0x0, 0x80, 0x101) close_range$auto(r5, r1, 0x5) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0x0) socketpair$auto(0x18a, 0x1ffffff, 0x40, 0x0) 0s ago: executing program 5 (id=2427): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x80140, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_urandom_fops_random(0xffffffffffffff9c, &(0x7f00000008c0), 0x400, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) readv$auto(0x3, &(0x7f0000000000)={0x0, 0x9c}, 0x1) socketpair$auto(0x10, 0x9, 0x4, &(0x7f0000000140)=0x3) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/pci0000:00/0000:00:01.1/ata1/host0/scsi_host/host0/cmd_per_lun\x00', 0x202a00, 0x0) open(0x0, 0x22240, 0x55) socket(0x2a, 0xa, 0xa) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ILA_CMD_ADD(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf2501"], 0x1c}}, 0x40000) sendmsg$auto_ILA_CMD_FLUSH(r0, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000540)={0x14, r2, 0x1, 0x2, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4000004}, 0x40844) kernel console output (not intermixed with test programs): y ""[13367] [ 497.224013][T13326] kexec: Could not allocate control_code_buffer [ 498.053453][T13380] FAULT_INJECTION: forcing a failure. [ 498.053453][T13380] name fail_futex, interval 1, probability 0, space 0, times 0 [ 498.083923][T13380] CPU: 0 UID: 0 PID: 13380 Comm: syz.5.1728 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 498.083978][T13380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 498.083997][T13380] Call Trace: [ 498.084007][T13380] [ 498.084019][T13380] dump_stack_lvl+0x16c/0x1f0 [ 498.084072][T13380] should_fail_ex+0x50a/0x650 [ 498.084109][T13380] get_futex_key+0x4a3/0x1000 [ 498.084144][T13380] ? mark_lock+0xb5/0xc60 [ 498.084193][T13380] ? __pfx_get_futex_key+0x10/0x10 [ 498.084227][T13380] ? __pfx_mark_lock+0x10/0x10 [ 498.084278][T13380] ? hlock_class+0x4e/0x130 [ 498.084316][T13380] futex_wait_setup+0x78/0x290 [ 498.084367][T13380] ? __pfx_mark_lock+0x10/0x10 [ 498.084415][T13380] __futex_wait+0x267/0x3c0 [ 498.084465][T13380] ? __pfx___futex_wait+0x10/0x10 [ 498.084520][T13380] ? __pfx_futex_wake_mark+0x10/0x10 [ 498.084585][T13380] futex_wait+0xe9/0x380 [ 498.084633][T13380] ? __pfx_futex_wait+0x10/0x10 [ 498.084680][T13380] ? exit_shm+0x695/0x8e0 [ 498.084732][T13380] ? __pfx_perf_event_namespaces+0x10/0x10 [ 498.084781][T13380] ? lock_acquire.part.0+0x11b/0x380 [ 498.084837][T13380] do_futex+0x22b/0x350 [ 498.084879][T13380] ? __pfx_do_futex+0x10/0x10 [ 498.084920][T13380] ? put_files_struct+0x3b/0x370 [ 498.084979][T13380] ? ksys_unshare+0x53c/0xa40 [ 498.085018][T13380] __x64_sys_futex+0x1e1/0x4c0 [ 498.085065][T13380] ? __pfx___x64_sys_futex+0x10/0x10 [ 498.085122][T13380] do_syscall_64+0xcd/0x250 [ 498.085172][T13380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 498.085219][T13380] RIP: 0033:0x7ff9dc78d169 [ 498.085246][T13380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 498.085279][T13380] RSP: 002b:00007ff9dd5fb0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 498.085309][T13380] RAX: ffffffffffffffda RBX: 00007ff9dc9a5fa8 RCX: 00007ff9dc78d169 [ 498.085332][T13380] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007ff9dc9a5fa8 [ 498.085353][T13380] RBP: 00007ff9dc9a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 498.085373][T13380] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ff9dc9a5fac [ 498.085394][T13380] R13: 0000000000000000 R14: 00007fff62cd00b0 R15: 00007fff62cd0198 [ 498.085434][T13380] [ 498.365336][T13382] openvswitch: netlink: Missing valid actions attribute. [ 498.914090][T13395] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1734'. [ 499.056708][T13395] netlink: 25 bytes leftover after parsing attributes in process `syz.1.1734'. [ 500.802713][T13430] FAULT_INJECTION: forcing a failure. [ 500.802713][T13430] name fail_futex, interval 1, probability 0, space 0, times 0 [ 500.819734][T13430] CPU: 0 UID: 0 PID: 13430 Comm: syz.4.1741 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 500.819782][T13430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 500.819803][T13430] Call Trace: [ 500.819813][T13430] [ 500.819826][T13430] dump_stack_lvl+0x16c/0x1f0 [ 500.819882][T13430] should_fail_ex+0x50a/0x650 [ 500.819919][T13430] get_futex_key+0x4a3/0x1000 [ 500.819959][T13430] ? mark_lock+0xb5/0xc60 [ 500.820007][T13430] ? __pfx_get_futex_key+0x10/0x10 [ 500.820053][T13430] ? __pfx_mark_lock+0x10/0x10 [ 500.820125][T13430] ? hlock_class+0x4e/0x130 [ 500.820169][T13430] futex_wait_setup+0x78/0x290 [ 500.820223][T13430] ? __pfx_mark_lock+0x10/0x10 [ 500.820277][T13430] __futex_wait+0x267/0x3c0 [ 500.820330][T13430] ? __pfx___futex_wait+0x10/0x10 [ 500.820389][T13430] ? __pfx_futex_wake_mark+0x10/0x10 [ 500.820459][T13430] futex_wait+0xe9/0x380 [ 500.820508][T13430] ? __pfx_futex_wait+0x10/0x10 [ 500.820559][T13430] ? exit_shm+0x695/0x8e0 [ 500.820612][T13430] ? __pfx_perf_event_namespaces+0x10/0x10 [ 500.820667][T13430] ? lock_acquire.part.0+0x11b/0x380 [ 500.820725][T13430] do_futex+0x22b/0x350 [ 500.820769][T13430] ? __pfx_do_futex+0x10/0x10 [ 500.820812][T13430] ? put_files_struct+0x3b/0x370 [ 500.820864][T13430] ? ksys_unshare+0x53c/0xa40 [ 500.820906][T13430] __x64_sys_futex+0x1e1/0x4c0 [ 500.820954][T13430] ? __pfx___x64_sys_futex+0x10/0x10 [ 500.821022][T13430] do_syscall_64+0xcd/0x250 [ 500.821078][T13430] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 500.821128][T13430] RIP: 0033:0x7f600638d169 [ 500.821156][T13430] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 500.821190][T13430] RSP: 002b:00007f60071a90e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 500.821226][T13430] RAX: ffffffffffffffda RBX: 00007f60065a5fa8 RCX: 00007f600638d169 [ 500.821250][T13430] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f60065a5fa8 [ 500.821271][T13430] RBP: 00007f60065a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 500.821293][T13430] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f60065a5fac [ 500.821315][T13430] R13: 0000000000000000 R14: 00007ffd3441a880 R15: 00007ffd3441a968 [ 500.821368][T13430] [ 501.745272][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1745'. [ 501.827670][T13444] netlink: zone id is out of range [ 501.845361][T13444] netlink: zone id is out of range [ 501.887399][T13444] netlink: zone id is out of range [ 501.908366][T13444] netlink: zone id is out of range [ 501.914548][T13444] netlink: zone id is out of range [ 501.962014][T13444] netlink: zone id is out of range [ 501.988446][T13444] netlink: zone id is out of range [ 501.995303][T13444] netlink: zone id is out of range [ 502.013430][T13444] netlink: zone id is out of range [ 502.043219][T13444] netlink: zone id is out of range [ 504.309394][T13487] snd_aloop snd_aloop.0: Parsing timer source 'ù¡Òa' failed with -22 [ 506.644652][T13523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1773'. [ 506.691523][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.700667][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 506.997515][T13540] net_ratelimit: 21 callbacks suppressed [ 506.997540][T13540] openvswitch: netlink: Missing valid actions attribute. [ 509.300385][T13579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1790'. [ 510.803081][T13611] snd_aloop snd_aloop.0: Parsing timer source 'ù¡Òa' failed with -22 [ 510.812641][T13613] FAULT_INJECTION: forcing a failure. [ 510.812641][T13613] name failslab, interval 1, probability 0, space 0, times 0 [ 510.838565][T13613] CPU: 0 UID: 0 PID: 13613 Comm: syz.4.1802 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 510.838607][T13613] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 510.838625][T13613] Call Trace: [ 510.838635][T13613] [ 510.838647][T13613] dump_stack_lvl+0x16c/0x1f0 [ 510.838696][T13613] should_fail_ex+0x50a/0x650 [ 510.838725][T13613] ? fs_reclaim_acquire+0xae/0x150 [ 510.838769][T13613] should_failslab+0xc2/0x120 [ 510.838800][T13613] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 510.838851][T13613] ? dup_fd+0x4d/0xb90 [ 510.838898][T13613] dup_fd+0x4d/0xb90 [ 510.838942][T13613] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 510.838994][T13613] ? __fget_files+0x206/0x3a0 [ 510.839044][T13613] ksys_unshare+0x833/0xa40 [ 510.839088][T13613] ? __pfx_ksys_unshare+0x10/0x10 [ 510.839122][T13613] ? ksys_write+0x1ba/0x250 [ 510.839175][T13613] __x64_sys_unshare+0x31/0x40 [ 510.839206][T13613] do_syscall_64+0xcd/0x250 [ 510.839253][T13613] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.839307][T13613] RIP: 0033:0x7f600638d169 [ 510.839330][T13613] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.839377][T13613] RSP: 002b:00007f60071a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 510.839417][T13613] RAX: ffffffffffffffda RBX: 00007f60065a5fa0 RCX: 00007f600638d169 [ 510.839436][T13613] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 510.839454][T13613] RBP: 00007f60071a9090 R08: 0000000000000000 R09: 0000000000000000 [ 510.839472][T13613] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.839490][T13613] R13: 0000000000000001 R14: 00007f60065a5fa0 R15: 00007ffd3441a968 [ 510.839527][T13613] [ 511.363323][T13616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1803'. [ 514.064216][T13647] warning: `syz.5.1813' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 514.257218][T13657] FAULT_INJECTION: forcing a failure. [ 514.257218][T13657] name failslab, interval 1, probability 0, space 0, times 0 [ 514.294413][T13657] CPU: 0 UID: 0 PID: 13657 Comm: syz.1.1815 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 514.294454][T13657] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 514.294472][T13657] Call Trace: [ 514.294481][T13657] [ 514.294504][T13657] dump_stack_lvl+0x16c/0x1f0 [ 514.294548][T13657] should_fail_ex+0x50a/0x650 [ 514.294574][T13657] ? fs_reclaim_acquire+0xae/0x150 [ 514.294611][T13657] ? alloc_fdtable+0xa0/0x2b0 [ 514.294648][T13657] should_failslab+0xc2/0x120 [ 514.294674][T13657] __kmalloc_cache_noprof+0x68/0x410 [ 514.294712][T13657] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 514.294744][T13657] alloc_fdtable+0xa0/0x2b0 [ 514.294782][T13657] dup_fd+0x83b/0xb90 [ 514.294826][T13657] ? __fget_files+0x206/0x3a0 [ 514.294870][T13657] ksys_unshare+0x833/0xa40 [ 514.294899][T13657] ? __pfx_ksys_unshare+0x10/0x10 [ 514.294928][T13657] ? ksys_write+0x1ba/0x250 [ 514.294993][T13657] __x64_sys_unshare+0x31/0x40 [ 514.295034][T13657] do_syscall_64+0xcd/0x250 [ 514.295082][T13657] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.295138][T13657] RIP: 0033:0x7f61d1b8d169 [ 514.295159][T13657] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.295187][T13657] RSP: 002b:00007f61d2a1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 514.295214][T13657] RAX: ffffffffffffffda RBX: 00007f61d1da5fa0 RCX: 00007f61d1b8d169 [ 514.295233][T13657] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 514.295250][T13657] RBP: 00007f61d2a1f090 R08: 0000000000000000 R09: 0000000000000000 [ 514.295267][T13657] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.295283][T13657] R13: 0000000000000001 R14: 00007f61d1da5fa0 R15: 00007ffc86d1d518 [ 514.295316][T13657] [ 514.295985][T13658] openvswitch: netlink: Missing valid actions attribute. [ 514.728087][T13662] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1816'. [ 517.296642][T13717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1830'. [ 517.775721][T13725] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1833'. [ 519.641863][T13756] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1841'. [ 521.879893][T13799] afs: Unknown parameter '¨êûO4Å"Í›xUÔýÐU“ÞZS1Úç'$' [ 522.649274][T13811] openvswitch: netlink: Missing valid actions attribute. [ 526.392299][T13854] openvswitch: netlink: Missing valid actions attribute. [ 527.013937][T13859] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1871'. [ 527.928567][T13881] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1875'. [ 528.026006][T13886] FAULT_INJECTION: forcing a failure. [ 528.026006][T13886] name failslab, interval 1, probability 0, space 0, times 0 [ 528.055675][T13886] CPU: 0 UID: 0 PID: 13886 Comm: syz.5.1877 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 528.055734][T13886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 528.055754][T13886] Call Trace: [ 528.055765][T13886] [ 528.055779][T13886] dump_stack_lvl+0x16c/0x1f0 [ 528.055828][T13886] should_fail_ex+0x50a/0x650 [ 528.055863][T13886] ? fs_reclaim_acquire+0xae/0x150 [ 528.055905][T13886] should_failslab+0xc2/0x120 [ 528.055936][T13886] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 528.055986][T13886] ? __d_alloc+0x31/0xaa0 [ 528.056016][T13886] ? __pfx_mqueue_fill_super+0x10/0x10 [ 528.056067][T13886] __d_alloc+0x31/0xaa0 [ 528.056094][T13886] ? mqueue_get_inode+0x285/0xd50 [ 528.056146][T13886] ? __pfx_mqueue_fill_super+0x10/0x10 [ 528.056197][T13886] d_make_root+0x3e/0x90 [ 528.056227][T13886] mqueue_fill_super+0x13a/0x210 [ 528.056279][T13886] get_tree_nodev+0xda/0x190 [ 528.056323][T13886] mqueue_get_tree+0xf1/0x130 [ 528.056374][T13886] vfs_get_tree+0x8b/0x340 [ 528.056411][T13886] fc_mount+0x16/0xc0 [ 528.056447][T13886] mq_init_ns+0x426/0x620 [ 528.056487][T13886] copy_ipcs+0x383/0x610 [ 528.056519][T13886] ? copy_utsname+0xab/0x470 [ 528.056568][T13886] create_new_namespaces+0x20a/0xad0 [ 528.056620][T13886] ? security_capable+0x7e/0x260 [ 528.056659][T13886] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 528.056720][T13886] ksys_unshare+0x45d/0xa40 [ 528.056753][T13886] ? __pfx_ksys_unshare+0x10/0x10 [ 528.056785][T13886] ? xfd_validate_state+0x5d/0x180 [ 528.056854][T13886] __x64_sys_unshare+0x31/0x40 [ 528.056888][T13886] do_syscall_64+0xcd/0x250 [ 528.056939][T13886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.056985][T13886] RIP: 0033:0x7ff9dc78d169 [ 528.057011][T13886] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.057043][T13886] RSP: 002b:00007ff9dd5fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 528.057075][T13886] RAX: ffffffffffffffda RBX: 00007ff9dc9a5fa0 RCX: 00007ff9dc78d169 [ 528.057097][T13886] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 528.057117][T13886] RBP: 00007ff9dc80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 528.057136][T13886] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 528.057155][T13886] R13: 0000000000000000 R14: 00007ff9dc9a5fa0 R15: 00007fff62cd0198 [ 528.057209][T13886] [ 528.593999][T13895] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1880'. [ 528.789729][T13900] FAULT_INJECTION: forcing a failure. [ 528.789729][T13900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 528.840097][T13900] CPU: 1 UID: 0 PID: 13900 Comm: syz.5.1879 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 528.840140][T13900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 528.840160][T13900] Call Trace: [ 528.840170][T13900] [ 528.840183][T13900] dump_stack_lvl+0x16c/0x1f0 [ 528.840233][T13900] should_fail_ex+0x50a/0x650 [ 528.840271][T13900] _copy_from_user+0x2e/0xd0 [ 528.840309][T13900] core_sys_select+0x361/0xb80 [ 528.840364][T13900] ? __pfx_core_sys_select+0x10/0x10 [ 528.840418][T13900] ? find_held_lock+0x2d/0x110 [ 528.840486][T13900] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 528.840545][T13900] kern_select+0x15e/0x1e0 [ 528.840590][T13900] ? __pfx_kern_select+0x10/0x10 [ 528.840643][T13900] ? __pfx_ksys_write+0x10/0x10 [ 528.840695][T13900] __x64_sys_select+0xbd/0x160 [ 528.840741][T13900] ? do_syscall_64+0x91/0x250 [ 528.840795][T13900] ? lockdep_hardirqs_on+0x7c/0x110 [ 528.840839][T13900] do_syscall_64+0xcd/0x250 [ 528.840891][T13900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 528.840938][T13900] RIP: 0033:0x7ff9dc78d169 [ 528.840963][T13900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 528.840996][T13900] RSP: 002b:00007ff9dd5da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 528.841027][T13900] RAX: ffffffffffffffda RBX: 00007ff9dc9a6080 RCX: 00007ff9dc78d169 [ 528.841051][T13900] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 528.841070][T13900] RBP: 00007ff9dd5da090 R08: 0000000000000000 R09: 0000000000000000 [ 528.841091][T13900] R10: 00004000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 528.841113][T13900] R13: 0000000000000001 R14: 00007ff9dc9a6080 R15: 00007fff62cd0198 [ 528.841154][T13900] [ 529.264844][T13902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1882'. [ 530.635316][T13932] svc: failed to register nfsdv3 RPC service (errno 111). [ 530.647265][T13932] svc: failed to register nfsaclv3 RPC service (errno 111). [ 531.167996][T13947] FAULT_INJECTION: forcing a failure. [ 531.167996][T13947] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 531.222114][T13947] CPU: 0 UID: 0 PID: 13947 Comm: syz.4.1895 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 531.222157][T13947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 531.222175][T13947] Call Trace: [ 531.222185][T13947] [ 531.222197][T13947] dump_stack_lvl+0x16c/0x1f0 [ 531.222258][T13947] should_fail_ex+0x50a/0x650 [ 531.222284][T13947] ? __pfx___might_resched+0x10/0x10 [ 531.222337][T13947] should_fail_alloc_page+0xe7/0x130 [ 531.222369][T13947] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 531.222416][T13947] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 531.222466][T13947] ? __pfx___lock_acquire+0x10/0x10 [ 531.222508][T13947] ? __pfx_mark_lock+0x10/0x10 [ 531.222554][T13947] ? hlock_class+0x4e/0x130 [ 531.222584][T13947] ? __lock_acquire+0x15a9/0x3c40 [ 531.222636][T13947] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 531.222706][T13947] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 531.222756][T13947] ? policy_nodemask+0xea/0x4e0 [ 531.222787][T13947] alloc_pages_mpol+0x1fc/0x540 [ 531.222818][T13947] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 531.222845][T13947] ? __pollwait+0x26d/0x4c0 [ 531.222883][T13947] ? __pfx_lock_release+0x10/0x10 [ 531.222922][T13947] ? lock_acquire+0x2f/0xb0 [ 531.222962][T13947] ? add_wait_queue+0x45/0x230 [ 531.223005][T13947] alloc_pages_noprof+0x131/0x390 [ 531.223034][T13947] ? __pfx___pollwait+0x10/0x10 [ 531.223071][T13947] get_free_pages_noprof+0xc/0x40 [ 531.223104][T13947] __pollwait+0x291/0x4c0 [ 531.223141][T13947] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 531.223182][T13947] ? __pfx___pollwait+0x10/0x10 [ 531.223220][T13947] snd_seq_pool_poll_wait+0x58/0x140 [ 531.223261][T13947] snd_seq_kernel_client_write_poll+0xf9/0x1a0 [ 531.223297][T13947] snd_seq_oss_poll+0x17d/0x1d0 [ 531.223337][T13947] ? __pfx_odev_poll+0x10/0x10 [ 531.223366][T13947] odev_poll+0x4a/0x90 [ 531.223396][T13947] do_select+0xd88/0x17e0 [ 531.223460][T13947] ? __pfx_do_select+0x10/0x10 [ 531.223499][T13947] ? __pfx_mark_lock+0x10/0x10 [ 531.223537][T13947] ? mark_lock+0xb5/0xc60 [ 531.223578][T13947] ? __pfx___pollwait+0x10/0x10 [ 531.223627][T13947] ? __pfx_pollwake+0x10/0x10 [ 531.223671][T13947] ? __pfx_pollwake+0x10/0x10 [ 531.223713][T13947] ? __pfx_pollwake+0x10/0x10 [ 531.223776][T13947] ? __pfx_pollwake+0x10/0x10 [ 531.223822][T13947] ? __pfx_pollwake+0x10/0x10 [ 531.223868][T13947] ? __pfx_pollwake+0x10/0x10 [ 531.223914][T13947] ? __pfx_pollwake+0x10/0x10 [ 531.223961][T13947] ? __pfx_pollwake+0x10/0x10 [ 531.224007][T13947] ? __pfx_pollwake+0x10/0x10 [ 531.224051][T13947] ? trace_lock_acquire+0x14e/0x1f0 [ 531.224093][T13947] ? lock_acquire+0x2f/0xb0 [ 531.224135][T13947] ? __might_fault+0xe3/0x190 [ 531.224168][T13947] ? __might_fault+0xe3/0x190 [ 531.224208][T13947] ? core_sys_select+0x459/0xb80 [ 531.224253][T13947] core_sys_select+0x459/0xb80 [ 531.224307][T13947] ? __pfx_core_sys_select+0x10/0x10 [ 531.224359][T13947] ? find_held_lock+0x2d/0x110 [ 531.224424][T13947] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 531.224480][T13947] kern_select+0x15e/0x1e0 [ 531.224525][T13947] ? __pfx_kern_select+0x10/0x10 [ 531.224575][T13947] ? __pfx_ksys_write+0x10/0x10 [ 531.224631][T13947] __x64_sys_select+0xbd/0x160 [ 531.224675][T13947] ? do_syscall_64+0x91/0x250 [ 531.224720][T13947] ? lockdep_hardirqs_on+0x7c/0x110 [ 531.224762][T13947] do_syscall_64+0xcd/0x250 [ 531.224810][T13947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 531.224854][T13947] RIP: 0033:0x7f600638d169 [ 531.224879][T13947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 531.224910][T13947] RSP: 002b:00007f6007188038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 531.224940][T13947] RAX: ffffffffffffffda RBX: 00007f60065a6080 RCX: 00007f600638d169 [ 531.224961][T13947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 531.224980][T13947] RBP: 00007f6007188090 R08: 0000000000000000 R09: 0000000000000000 [ 531.225000][T13947] R10: 00004000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 531.225020][T13947] R13: 0000000000000001 R14: 00007f60065a6080 R15: 00007ffd3441a968 [ 531.225059][T13947] [ 531.904159][T13946] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1894'. [ 533.619956][T13973] ima: policy update failed [ 533.647974][ T31] audit: type=1802 audit(4295003689.371:17): pid=13973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.5.1905" res=0 errno=0 [ 535.746970][T14020] FAULT_INJECTION: forcing a failure. [ 535.746970][T14020] name failslab, interval 1, probability 0, space 0, times 0 [ 535.839399][T14020] CPU: 0 UID: 0 PID: 14020 Comm: syz.1.1915 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 535.839449][T14020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 535.839472][T14020] Call Trace: [ 535.839484][T14020] [ 535.839498][T14020] dump_stack_lvl+0x16c/0x1f0 [ 535.839559][T14020] should_fail_ex+0x50a/0x650 [ 535.839593][T14020] ? fs_reclaim_acquire+0xae/0x150 [ 535.839643][T14020] should_failslab+0xc2/0x120 [ 535.839679][T14020] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 535.839730][T14020] ? lockdep_init_map_type+0x16d/0x7d0 [ 535.839782][T14020] ? security_inode_alloc+0x3b/0x2b0 [ 535.839828][T14020] security_inode_alloc+0x3b/0x2b0 [ 535.839870][T14020] inode_init_always_gfp+0xce4/0x1030 [ 535.839926][T14020] ? __pfx_mqueue_fill_super+0x10/0x10 [ 535.839981][T14020] alloc_inode+0x82/0x230 [ 535.840014][T14020] new_inode+0x22/0x210 [ 535.840048][T14020] ? __pfx_mqueue_fill_super+0x10/0x10 [ 535.840103][T14020] mqueue_get_inode+0x2e/0xd50 [ 535.840155][T14020] ? sget_fc+0x808/0xc20 [ 535.840204][T14020] ? __pfx_mqueue_fill_super+0x10/0x10 [ 535.840259][T14020] mqueue_fill_super+0x112/0x210 [ 535.840313][T14020] get_tree_nodev+0xda/0x190 [ 535.840363][T14020] mqueue_get_tree+0xf1/0x130 [ 535.840417][T14020] vfs_get_tree+0x8b/0x340 [ 535.840458][T14020] fc_mount+0x16/0xc0 [ 535.840498][T14020] mq_init_ns+0x426/0x620 [ 535.840545][T14020] copy_ipcs+0x383/0x610 [ 535.840582][T14020] ? copy_utsname+0xab/0x470 [ 535.840637][T14020] create_new_namespaces+0x20a/0xad0 [ 535.840694][T14020] ? security_capable+0x7e/0x260 [ 535.840734][T14020] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 535.840795][T14020] ksys_unshare+0x45d/0xa40 [ 535.840833][T14020] ? __pfx_ksys_unshare+0x10/0x10 [ 535.840866][T14020] ? xfd_validate_state+0x5d/0x180 [ 535.840928][T14020] __x64_sys_unshare+0x31/0x40 [ 535.840963][T14020] do_syscall_64+0xcd/0x250 [ 535.841015][T14020] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.841062][T14020] RIP: 0033:0x7f61d1b8d169 [ 535.841089][T14020] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.841122][T14020] RSP: 002b:00007f61d2a1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 535.841156][T14020] RAX: ffffffffffffffda RBX: 00007f61d1da5fa0 RCX: 00007f61d1b8d169 [ 535.841180][T14020] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 535.841215][T14020] RBP: 00007f61d1c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 535.841236][T14020] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 535.841265][T14020] R13: 0000000000000000 R14: 00007f61d1da5fa0 R15: 00007ffc86d1d518 [ 535.841302][T14020] [ 539.465540][T14076] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1930'. [ 539.505401][T14076] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1930'. [ 539.720176][T14078] openvswitch: netlink: Missing valid actions attribute. [ 541.378505][T14123] openvswitch: netlink: Missing valid actions attribute. [ 541.450567][T14121] svc: failed to register nfsdv3 RPC service (errno 111). [ 541.518799][T14121] svc: failed to register nfsaclv3 RPC service (errno 111). [ 541.830725][ T5851] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 541.830779][ T5851] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 541.830819][ T5851] Bluetooth: hci1: Dropping invalid advertising data [ 541.831116][ T5851] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 542.379381][T14143] FAULT_INJECTION: forcing a failure. [ 542.379381][T14143] name failslab, interval 1, probability 0, space 0, times 0 [ 542.434670][T14143] CPU: 1 UID: 0 PID: 14143 Comm: syz.4.1948 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 542.434710][T14143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 542.434727][T14143] Call Trace: [ 542.434736][T14143] [ 542.434747][T14143] dump_stack_lvl+0x16c/0x1f0 [ 542.434791][T14143] should_fail_ex+0x50a/0x650 [ 542.434818][T14143] ? fs_reclaim_acquire+0xae/0x150 [ 542.434856][T14143] should_failslab+0xc2/0x120 [ 542.434882][T14143] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 542.434928][T14143] ? setup_mq_sysctls+0x5d/0x230 [ 542.434964][T14143] kmemdup_noprof+0x29/0x60 [ 542.434996][T14143] setup_mq_sysctls+0x5d/0x230 [ 542.435030][T14143] copy_ipcs+0x479/0x610 [ 542.435065][T14143] ? copy_utsname+0xab/0x470 [ 542.435105][T14143] create_new_namespaces+0x20a/0xad0 [ 542.435148][T14143] ? security_capable+0x7e/0x260 [ 542.435178][T14143] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 542.435223][T14143] ksys_unshare+0x45d/0xa40 [ 542.435250][T14143] ? __pfx_ksys_unshare+0x10/0x10 [ 542.435275][T14143] ? xfd_validate_state+0x5d/0x180 [ 542.435321][T14143] __x64_sys_unshare+0x31/0x40 [ 542.435347][T14143] do_syscall_64+0xcd/0x250 [ 542.435384][T14143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 542.435420][T14143] RIP: 0033:0x7f600638d169 [ 542.435440][T14143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 542.435466][T14143] RSP: 002b:00007f60071a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 542.435490][T14143] RAX: ffffffffffffffda RBX: 00007f60065a5fa0 RCX: 00007f600638d169 [ 542.435508][T14143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 542.435524][T14143] RBP: 00007f600640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 542.435541][T14143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 542.435556][T14143] R13: 0000000000000000 R14: 00007f60065a5fa0 R15: 00007ffd3441a968 [ 542.435586][T14143] [ 543.356804][T14163] openvswitch: netlink: Missing valid actions attribute. [ 543.531290][T14169] svc: failed to register nfsdv3 RPC service (errno 111). [ 543.558497][T14169] svc: failed to register nfsaclv3 RPC service (errno 111). [ 544.700299][T14184] FAULT_INJECTION: forcing a failure. [ 544.700299][T14184] name failslab, interval 1, probability 0, space 0, times 0 [ 544.758015][T14184] CPU: 0 UID: 0 PID: 14184 Comm: syz.5.1961 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 544.758059][T14184] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 544.758079][T14184] Call Trace: [ 544.758088][T14184] [ 544.758100][T14184] dump_stack_lvl+0x16c/0x1f0 [ 544.758147][T14184] should_fail_ex+0x50a/0x650 [ 544.758175][T14184] ? fs_reclaim_acquire+0xae/0x150 [ 544.758216][T14184] ? __register_sysctl_table+0xb4/0x1910 [ 544.758265][T14184] should_failslab+0xc2/0x120 [ 544.758293][T14184] __kmalloc_noprof+0xcb/0x510 [ 544.758348][T14184] __register_sysctl_table+0xb4/0x1910 [ 544.758399][T14184] ? rcu_is_watching+0x12/0xc0 [ 544.758432][T14184] ? trace_kmalloc+0x2d/0xd0 [ 544.758465][T14184] ? __pfx___register_sysctl_table+0x10/0x10 [ 544.758514][T14184] ? setup_ipc_sysctls+0x5e/0x300 [ 544.758580][T14184] ? __asan_memcpy+0x3c/0x60 [ 544.758625][T14184] setup_ipc_sysctls+0x1aa/0x300 [ 544.758714][T14184] copy_ipcs+0x49b/0x610 [ 544.758768][T14184] ? copy_utsname+0xab/0x470 [ 544.758822][T14184] create_new_namespaces+0x20a/0xad0 [ 544.758877][T14184] ? security_capable+0x7e/0x260 [ 544.758923][T14184] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 544.758985][T14184] ksys_unshare+0x45d/0xa40 [ 544.759023][T14184] ? __pfx_ksys_unshare+0x10/0x10 [ 544.759058][T14184] ? xfd_validate_state+0x5d/0x180 [ 544.759119][T14184] __x64_sys_unshare+0x31/0x40 [ 544.759155][T14184] do_syscall_64+0xcd/0x250 [ 544.759207][T14184] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 544.759255][T14184] RIP: 0033:0x7ff9dc78d169 [ 544.759283][T14184] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 544.759320][T14184] RSP: 002b:00007ff9dd5fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 544.759352][T14184] RAX: ffffffffffffffda RBX: 00007ff9dc9a5fa0 RCX: 00007ff9dc78d169 [ 544.759376][T14184] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 544.759397][T14184] RBP: 00007ff9dc80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 544.759421][T14184] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 544.759443][T14184] R13: 0000000000000000 R14: 00007ff9dc9a5fa0 R15: 00007fff62cd0198 [ 544.759485][T14184] [ 545.531527][T14204] openvswitch: netlink: Missing valid actions attribute. [ 545.657831][T14201] Invalid ELF header magic: != ELF [ 546.767062][T14229] sg_read: process 965 (syz.4.1973) changed security contexts after opening file descriptor, this is not allowed. [ 546.918077][T14222] FAULT_INJECTION: forcing a failure. [ 546.918077][T14222] name failslab, interval 1, probability 0, space 0, times 0 [ 546.933598][T14222] CPU: 0 UID: 0 PID: 14222 Comm: syz.1.1969 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 546.933638][T14222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 546.933658][T14222] Call Trace: [ 546.933668][T14222] [ 546.933681][T14222] dump_stack_lvl+0x16c/0x1f0 [ 546.933741][T14222] should_fail_ex+0x50a/0x650 [ 546.933770][T14222] ? fs_reclaim_acquire+0xae/0x150 [ 546.933814][T14222] should_failslab+0xc2/0x120 [ 546.933844][T14222] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 546.933893][T14222] ? security_file_alloc+0x34/0x2b0 [ 546.933941][T14222] security_file_alloc+0x34/0x2b0 [ 546.933983][T14222] init_file+0x93/0x4c0 [ 546.934014][T14222] alloc_empty_file+0x91/0x1e0 [ 546.934048][T14222] path_openat+0xe1/0x2d80 [ 546.934089][T14222] ? hlock_class+0x4e/0x130 [ 546.934121][T14222] ? __lock_acquire+0x15a9/0x3c40 [ 546.934176][T14222] ? __pfx_path_openat+0x10/0x10 [ 546.934221][T14222] ? __pfx___lock_acquire+0x10/0x10 [ 546.934262][T14222] ? lock_acquire.part.0+0x11b/0x380 [ 546.934306][T14222] ? find_held_lock+0x2d/0x110 [ 546.934343][T14222] do_filp_open+0x20c/0x470 [ 546.934389][T14222] ? __pfx_do_filp_open+0x10/0x10 [ 546.934432][T14222] ? find_held_lock+0x2d/0x110 [ 546.934495][T14222] ? alloc_fd+0x41f/0x760 [ 546.934550][T14222] do_sys_openat2+0x17a/0x1e0 [ 546.934582][T14222] ? __pfx_do_sys_openat2+0x10/0x10 [ 546.934647][T14222] __x64_sys_openat+0x175/0x210 [ 546.934684][T14222] ? __pfx___x64_sys_openat+0x10/0x10 [ 546.934737][T14222] do_syscall_64+0xcd/0x250 [ 546.934786][T14222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.934833][T14222] RIP: 0033:0x7f61d1b8bad0 [ 546.934859][T14222] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 546.934891][T14222] RSP: 002b:00007f61d29fdf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 546.934922][T14222] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f61d1b8bad0 [ 546.934944][T14222] RDX: 0000000000000000 RSI: 00007f61d29fdfa0 RDI: 00000000ffffff9c [ 546.934966][T14222] RBP: 00007f61d29fdfa0 R08: 0000000000000000 R09: 0000000000000000 [ 546.934986][T14222] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000000 [ 546.935006][T14222] R13: 0000000000000000 R14: 00007f61d1da6080 R15: 00007ffc86d1d518 [ 546.935047][T14222] [ 548.998697][T14261] openvswitch: netlink: Missing valid actions attribute. [ 549.000842][T14256] FAULT_INJECTION: forcing a failure. [ 549.000842][T14256] name failslab, interval 1, probability 0, space 0, times 0 [ 549.027164][T14256] CPU: 0 UID: 0 PID: 14256 Comm: syz.5.1981 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 549.027207][T14256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 549.027227][T14256] Call Trace: [ 549.027237][T14256] [ 549.027249][T14256] dump_stack_lvl+0x16c/0x1f0 [ 549.027302][T14256] should_fail_ex+0x50a/0x650 [ 549.027331][T14256] ? fs_reclaim_acquire+0xae/0x150 [ 549.027374][T14256] ? __register_sysctl_table+0xb4/0x1910 [ 549.027423][T14256] should_failslab+0xc2/0x120 [ 549.027453][T14256] __kmalloc_noprof+0xcb/0x510 [ 549.027508][T14256] __register_sysctl_table+0xb4/0x1910 [ 549.027561][T14256] ? rcu_is_watching+0x12/0xc0 [ 549.027595][T14256] ? trace_kmalloc+0x2d/0xd0 [ 549.027629][T14256] ? __pfx___register_sysctl_table+0x10/0x10 [ 549.027680][T14256] ? setup_mq_sysctls+0x5d/0x230 [ 549.027729][T14256] ? __asan_memcpy+0x3c/0x60 [ 549.027774][T14256] setup_mq_sysctls+0x13d/0x230 [ 549.027826][T14256] copy_ipcs+0x479/0x610 [ 549.027855][T14256] ? copy_utsname+0xab/0x470 [ 549.027899][T14256] create_new_namespaces+0x20a/0xad0 [ 549.027946][T14256] ? security_capable+0x7e/0x260 [ 549.027979][T14256] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 549.028029][T14256] ksys_unshare+0x45d/0xa40 [ 549.028060][T14256] ? __pfx_ksys_unshare+0x10/0x10 [ 549.028089][T14256] ? xfd_validate_state+0x5d/0x180 [ 549.028140][T14256] __x64_sys_unshare+0x31/0x40 [ 549.028169][T14256] do_syscall_64+0xcd/0x250 [ 549.028213][T14256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.028253][T14256] RIP: 0033:0x7ff9dc78d169 [ 549.028275][T14256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.028304][T14256] RSP: 002b:00007ff9dd5fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 549.028331][T14256] RAX: ffffffffffffffda RBX: 00007ff9dc9a5fa0 RCX: 00007ff9dc78d169 [ 549.028351][T14256] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 549.028369][T14256] RBP: 00007ff9dc80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 549.028386][T14256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.028403][T14256] R13: 0000000000000000 R14: 00007ff9dc9a5fa0 R15: 00007fff62cd0198 [ 549.028437][T14256] [ 549.375988][T14268] FAULT_INJECTION: forcing a failure. [ 549.375988][T14268] name failslab, interval 1, probability 0, space 0, times 0 [ 549.412306][T14268] CPU: 1 UID: 0 PID: 14268 Comm: syz.4.1985 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 549.412344][T14268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 549.412362][T14268] Call Trace: [ 549.412372][T14268] [ 549.412384][T14268] dump_stack_lvl+0x16c/0x1f0 [ 549.412432][T14268] should_fail_ex+0x50a/0x650 [ 549.412460][T14268] ? fs_reclaim_acquire+0xae/0x150 [ 549.412501][T14268] should_failslab+0xc2/0x120 [ 549.412531][T14268] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 549.412588][T14268] ? __d_alloc+0x31/0xaa0 [ 549.412618][T14268] ? __pfx_mqueue_fill_super+0x10/0x10 [ 549.412667][T14268] __d_alloc+0x31/0xaa0 [ 549.412692][T14268] ? mqueue_get_inode+0x285/0xd50 [ 549.412740][T14268] ? __pfx_mqueue_fill_super+0x10/0x10 [ 549.412786][T14268] d_make_root+0x3e/0x90 [ 549.412814][T14268] mqueue_fill_super+0x13a/0x210 [ 549.412860][T14268] get_tree_nodev+0xda/0x190 [ 549.412901][T14268] mqueue_get_tree+0xf1/0x130 [ 549.412946][T14268] vfs_get_tree+0x8b/0x340 [ 549.412997][T14268] fc_mount+0x16/0xc0 [ 549.413032][T14268] mq_init_ns+0x426/0x620 [ 549.413071][T14268] copy_ipcs+0x383/0x610 [ 549.413104][T14268] ? copy_utsname+0xab/0x470 [ 549.413153][T14268] create_new_namespaces+0x20a/0xad0 [ 549.413203][T14268] ? security_capable+0x7e/0x260 [ 549.413240][T14268] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 549.413295][T14268] ksys_unshare+0x45d/0xa40 [ 549.413328][T14268] ? __pfx_ksys_unshare+0x10/0x10 [ 549.413358][T14268] ? xfd_validate_state+0x5d/0x180 [ 549.413414][T14268] __x64_sys_unshare+0x31/0x40 [ 549.413445][T14268] do_syscall_64+0xcd/0x250 [ 549.413490][T14268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.413532][T14268] RIP: 0033:0x7f600638d169 [ 549.413556][T14268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.413592][T14268] RSP: 002b:00007f60071a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 549.413621][T14268] RAX: ffffffffffffffda RBX: 00007f60065a5fa0 RCX: 00007f600638d169 [ 549.413641][T14268] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 549.413660][T14268] RBP: 00007f600640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 549.413678][T14268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 549.413697][T14268] R13: 0000000000000000 R14: 00007f60065a5fa0 R15: 00007ffd3441a968 [ 549.413735][T14268] [ 551.258759][T14307] FAULT_INJECTION: forcing a failure. [ 551.258759][T14307] name failslab, interval 1, probability 0, space 0, times 0 [ 551.258810][T14307] CPU: 1 UID: 0 PID: 14307 Comm: syz.1.1997 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 551.258848][T14307] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 551.258868][T14307] Call Trace: [ 551.258878][T14307] [ 551.258892][T14307] dump_stack_lvl+0x16c/0x1f0 [ 551.258943][T14307] should_fail_ex+0x50a/0x650 [ 551.258975][T14307] ? fs_reclaim_acquire+0xae/0x150 [ 551.259023][T14307] should_failslab+0xc2/0x120 [ 551.259056][T14307] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 551.259115][T14307] ? setup_mq_sysctls+0x5d/0x230 [ 551.259161][T14307] kmemdup_noprof+0x29/0x60 [ 551.259204][T14307] setup_mq_sysctls+0x5d/0x230 [ 551.259252][T14307] copy_ipcs+0x479/0x610 [ 551.259287][T14307] ? copy_utsname+0xab/0x470 [ 551.259339][T14307] create_new_namespaces+0x20a/0xad0 [ 551.259406][T14307] ? security_capable+0x7e/0x260 [ 551.259445][T14307] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 551.259501][T14307] ksys_unshare+0x45d/0xa40 [ 551.259547][T14307] ? __pfx_ksys_unshare+0x10/0x10 [ 551.259581][T14307] ? xfd_validate_state+0x5d/0x180 [ 551.259639][T14307] __x64_sys_unshare+0x31/0x40 [ 551.259673][T14307] do_syscall_64+0xcd/0x250 [ 551.259721][T14307] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 551.259768][T14307] RIP: 0033:0x7f61d1b8d169 [ 551.259793][T14307] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 551.259825][T14307] RSP: 002b:00007f61d2a1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 551.259854][T14307] RAX: ffffffffffffffda RBX: 00007f61d1da5fa0 RCX: 00007f61d1b8d169 [ 551.259876][T14307] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 551.259895][T14307] RBP: 00007f61d1c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 551.259915][T14307] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 551.259934][T14307] R13: 0000000000000000 R14: 00007f61d1da5fa0 R15: 00007ffc86d1d518 [ 551.259973][T14307] [ 552.099248][T14319] FAULT_INJECTION: forcing a failure. [ 552.099248][T14319] name failslab, interval 1, probability 0, space 0, times 0 [ 552.142612][T14319] CPU: 0 UID: 0 PID: 14319 Comm: syz.4.2000 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 552.142652][T14319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 552.142670][T14319] Call Trace: [ 552.142679][T14319] [ 552.142691][T14319] dump_stack_lvl+0x16c/0x1f0 [ 552.142741][T14319] should_fail_ex+0x50a/0x650 [ 552.142771][T14319] ? fs_reclaim_acquire+0xae/0x150 [ 552.142810][T14319] ? memcg_list_lru_alloc+0x29f/0x730 [ 552.142844][T14319] should_failslab+0xc2/0x120 [ 552.142873][T14319] __kmalloc_noprof+0xcb/0x510 [ 552.142920][T14319] ? copy_ipcs+0x383/0x610 [ 552.142965][T14319] memcg_list_lru_alloc+0x29f/0x730 [ 552.143007][T14319] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 552.143040][T14319] ? trace_lock_acquire+0x14e/0x1f0 [ 552.143081][T14319] ? lock_acquire+0x2f/0xb0 [ 552.143122][T14319] ? get_mem_cgroup_from_objcg+0xe1/0x210 [ 552.143171][T14319] __memcg_slab_post_alloc_hook+0x12c/0x9b0 [ 552.143207][T14319] ? kasan_save_track+0x14/0x30 [ 552.143255][T14319] kmem_cache_alloc_lru_noprof+0x363/0x3d0 [ 552.143303][T14319] ? __d_alloc+0x31/0xaa0 [ 552.143335][T14319] ? __pfx_mqueue_fill_super+0x10/0x10 [ 552.143391][T14319] __d_alloc+0x31/0xaa0 [ 552.143418][T14319] ? mqueue_get_inode+0x285/0xd50 [ 552.143468][T14319] ? __pfx_mqueue_fill_super+0x10/0x10 [ 552.143517][T14319] d_make_root+0x3e/0x90 [ 552.143547][T14319] mqueue_fill_super+0x13a/0x210 [ 552.143597][T14319] get_tree_nodev+0xda/0x190 [ 552.143644][T14319] mqueue_get_tree+0xf1/0x130 [ 552.143693][T14319] vfs_get_tree+0x8b/0x340 [ 552.143728][T14319] fc_mount+0x16/0xc0 [ 552.143763][T14319] mq_init_ns+0x426/0x620 [ 552.143800][T14319] copy_ipcs+0x383/0x610 [ 552.143831][T14319] ? copy_utsname+0xab/0x470 [ 552.143879][T14319] create_new_namespaces+0x20a/0xad0 [ 552.143930][T14319] ? security_capable+0x7e/0x260 [ 552.143967][T14319] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 552.144023][T14319] ksys_unshare+0x45d/0xa40 [ 552.144055][T14319] ? __pfx_ksys_unshare+0x10/0x10 [ 552.144087][T14319] ? xfd_validate_state+0x5d/0x180 [ 552.144143][T14319] __x64_sys_unshare+0x31/0x40 [ 552.144176][T14319] do_syscall_64+0xcd/0x250 [ 552.144222][T14319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.144265][T14319] RIP: 0033:0x7f600638d169 [ 552.144289][T14319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.144319][T14319] RSP: 002b:00007f60071a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 552.144347][T14319] RAX: ffffffffffffffda RBX: 00007f60065a5fa0 RCX: 00007f600638d169 [ 552.144367][T14319] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 552.144393][T14319] RBP: 00007f600640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 552.144413][T14319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 552.144432][T14319] R13: 0000000000000000 R14: 00007f60065a5fa0 R15: 00007ffd3441a968 [ 552.144471][T14319] [ 554.983339][T14361] FAULT_INJECTION: forcing a failure. [ 554.983339][T14361] name failslab, interval 1, probability 0, space 0, times 0 [ 555.027672][T14361] CPU: 0 UID: 0 PID: 14361 Comm: syz.1.2012 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 555.027703][T14361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 555.027716][T14361] Call Trace: [ 555.027723][T14361] [ 555.027732][T14361] dump_stack_lvl+0x16c/0x1f0 [ 555.027765][T14361] should_fail_ex+0x50a/0x650 [ 555.027785][T14361] ? fs_reclaim_acquire+0xae/0x150 [ 555.027814][T14361] ? __register_sysctl_table+0xb4/0x1910 [ 555.027849][T14361] should_failslab+0xc2/0x120 [ 555.027870][T14361] __kmalloc_noprof+0xcb/0x510 [ 555.027906][T14361] __register_sysctl_table+0xb4/0x1910 [ 555.027944][T14361] ? rcu_is_watching+0x12/0xc0 [ 555.027967][T14361] ? trace_kmalloc+0x2d/0xd0 [ 555.027990][T14361] ? __pfx___register_sysctl_table+0x10/0x10 [ 555.028025][T14361] ? setup_mq_sysctls+0x5d/0x230 [ 555.028052][T14361] ? __asan_memcpy+0x3c/0x60 [ 555.028082][T14361] setup_mq_sysctls+0x13d/0x230 [ 555.028111][T14361] copy_ipcs+0x479/0x610 [ 555.028133][T14361] ? copy_utsname+0xab/0x470 [ 555.028166][T14361] create_new_namespaces+0x20a/0xad0 [ 555.028208][T14361] ? security_capable+0x7e/0x260 [ 555.028233][T14361] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 555.028271][T14361] ksys_unshare+0x45d/0xa40 [ 555.028293][T14361] ? __pfx_ksys_unshare+0x10/0x10 [ 555.028316][T14361] ? xfd_validate_state+0x5d/0x180 [ 555.028353][T14361] __x64_sys_unshare+0x31/0x40 [ 555.028375][T14361] do_syscall_64+0xcd/0x250 [ 555.028406][T14361] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 555.028436][T14361] RIP: 0033:0x7f61d1b8d169 [ 555.028452][T14361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 555.028473][T14361] RSP: 002b:00007f61d2a1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 555.028493][T14361] RAX: ffffffffffffffda RBX: 00007f61d1da5fa0 RCX: 00007f61d1b8d169 [ 555.028507][T14361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 555.028519][T14361] RBP: 00007f61d1c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 555.028532][T14361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 555.028545][T14361] R13: 0000000000000000 R14: 00007f61d1da5fa0 R15: 00007ffc86d1d518 [ 555.028570][T14361] [ 558.902248][T14422] FAULT_INJECTION: forcing a failure. [ 558.902248][T14422] name failslab, interval 1, probability 0, space 0, times 0 [ 559.027457][T14422] CPU: 0 UID: 0 PID: 14422 Comm: syz.1.2029 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 559.027498][T14422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 559.027516][T14422] Call Trace: [ 559.027526][T14422] [ 559.027539][T14422] dump_stack_lvl+0x16c/0x1f0 [ 559.027585][T14422] should_fail_ex+0x50a/0x650 [ 559.027615][T14422] ? fs_reclaim_acquire+0xae/0x150 [ 559.027655][T14422] should_failslab+0xc2/0x120 [ 559.027685][T14422] __kmalloc_node_track_caller_noprof+0xcf/0x510 [ 559.027737][T14422] ? setup_mq_sysctls+0x5d/0x230 [ 559.027778][T14422] kmemdup_noprof+0x29/0x60 [ 559.027815][T14422] setup_mq_sysctls+0x5d/0x230 [ 559.027855][T14422] copy_ipcs+0x479/0x610 [ 559.027886][T14422] ? copy_utsname+0xab/0x470 [ 559.027939][T14422] create_new_namespaces+0x20a/0xad0 [ 559.027989][T14422] ? security_capable+0x7e/0x260 [ 559.028024][T14422] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 559.028075][T14422] ksys_unshare+0x45d/0xa40 [ 559.028106][T14422] ? __pfx_ksys_unshare+0x10/0x10 [ 559.028136][T14422] ? xfd_validate_state+0x5d/0x180 [ 559.028189][T14422] __x64_sys_unshare+0x31/0x40 [ 559.028219][T14422] do_syscall_64+0xcd/0x250 [ 559.028262][T14422] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.028303][T14422] RIP: 0033:0x7f61d1b8d169 [ 559.028326][T14422] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.028354][T14422] RSP: 002b:00007f61d2a1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 559.028381][T14422] RAX: ffffffffffffffda RBX: 00007f61d1da5fa0 RCX: 00007f61d1b8d169 [ 559.028401][T14422] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 559.028420][T14422] RBP: 00007f61d1c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 559.028438][T14422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 559.028456][T14422] R13: 0000000000000000 R14: 00007f61d1da5fa0 R15: 00007ffc86d1d518 [ 559.028492][T14422] [ 559.302682][T14433] openvswitch: netlink: Missing valid actions attribute. [ 562.107951][T14480] FAULT_INJECTION: forcing a failure. [ 562.107951][T14480] name failslab, interval 1, probability 0, space 0, times 0 [ 562.234641][T14480] CPU: 1 UID: 0 PID: 14480 Comm: syz.4.2044 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 562.234681][T14480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 562.234699][T14480] Call Trace: [ 562.234708][T14480] [ 562.234720][T14480] dump_stack_lvl+0x16c/0x1f0 [ 562.234768][T14480] should_fail_ex+0x50a/0x650 [ 562.234797][T14480] ? fs_reclaim_acquire+0xae/0x150 [ 562.234839][T14480] should_failslab+0xc2/0x120 [ 562.234869][T14480] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 562.234918][T14480] ? __d_alloc+0x31/0xaa0 [ 562.234950][T14480] ? __pfx_mqueue_fill_super+0x10/0x10 [ 562.235002][T14480] __d_alloc+0x31/0xaa0 [ 562.235029][T14480] ? mqueue_get_inode+0x285/0xd50 [ 562.235081][T14480] ? __pfx_mqueue_fill_super+0x10/0x10 [ 562.235145][T14480] d_make_root+0x3e/0x90 [ 562.235173][T14480] mqueue_fill_super+0x13a/0x210 [ 562.235220][T14480] get_tree_nodev+0xda/0x190 [ 562.235264][T14480] mqueue_get_tree+0xf1/0x130 [ 562.235310][T14480] vfs_get_tree+0x8b/0x340 [ 562.235344][T14480] fc_mount+0x16/0xc0 [ 562.235378][T14480] mq_init_ns+0x426/0x620 [ 562.235422][T14480] copy_ipcs+0x383/0x610 [ 562.235453][T14480] ? copy_utsname+0xab/0x470 [ 562.235500][T14480] create_new_namespaces+0x20a/0xad0 [ 562.235549][T14480] ? security_capable+0x7e/0x260 [ 562.235584][T14480] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 562.235634][T14480] ksys_unshare+0x45d/0xa40 [ 562.235665][T14480] ? __pfx_ksys_unshare+0x10/0x10 [ 562.235694][T14480] ? xfd_validate_state+0x5d/0x180 [ 562.235746][T14480] __x64_sys_unshare+0x31/0x40 [ 562.235776][T14480] do_syscall_64+0xcd/0x250 [ 562.235820][T14480] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 562.235861][T14480] RIP: 0033:0x7f600638d169 [ 562.235885][T14480] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 562.235912][T14480] RSP: 002b:00007f60071a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 562.235939][T14480] RAX: ffffffffffffffda RBX: 00007f60065a5fa0 RCX: 00007f600638d169 [ 562.235959][T14480] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 562.235977][T14480] RBP: 00007f600640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 562.235995][T14480] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 562.236013][T14480] R13: 0000000000000000 R14: 00007f60065a5fa0 R15: 00007ffd3441a968 [ 562.236049][T14480] [ 563.827415][T14497] program syz.1.2049 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 565.333176][T14541] openvswitch: netlink: Missing valid actions attribute. [ 566.816521][T14573] openvswitch: netlink: Missing valid actions attribute. [ 568.131845][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.139507][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.790368][T14596] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 569.728320][T14598] FAULT_INJECTION: forcing a failure. [ 569.728320][T14598] name failslab, interval 1, probability 0, space 0, times 0 [ 569.787602][T14598] CPU: 0 UID: 0 PID: 14598 Comm: syz.5.2086 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 569.787643][T14598] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 569.787661][T14598] Call Trace: [ 569.787670][T14598] [ 569.787686][T14598] dump_stack_lvl+0x16c/0x1f0 [ 569.787732][T14598] should_fail_ex+0x50a/0x650 [ 569.787761][T14598] ? fs_reclaim_acquire+0xae/0x150 [ 569.787801][T14598] ? __register_sysctl_table+0xb4/0x1910 [ 569.787848][T14598] should_failslab+0xc2/0x120 [ 569.787884][T14598] __kmalloc_noprof+0xcb/0x510 [ 569.787936][T14598] __register_sysctl_table+0xb4/0x1910 [ 569.787986][T14598] ? rcu_is_watching+0x12/0xc0 [ 569.788018][T14598] ? trace_kmalloc+0x2d/0xd0 [ 569.788050][T14598] ? __pfx___register_sysctl_table+0x10/0x10 [ 569.788100][T14598] ? setup_ipc_sysctls+0x5e/0x300 [ 569.788146][T14598] ? __asan_memcpy+0x3c/0x60 [ 569.788188][T14598] setup_ipc_sysctls+0x1aa/0x300 [ 569.788238][T14598] copy_ipcs+0x49b/0x610 [ 569.788268][T14598] ? copy_utsname+0xab/0x470 [ 569.788313][T14598] create_new_namespaces+0x20a/0xad0 [ 569.788361][T14598] ? security_capable+0x7e/0x260 [ 569.788394][T14598] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 569.788445][T14598] ksys_unshare+0x45d/0xa40 [ 569.788476][T14598] ? __pfx_ksys_unshare+0x10/0x10 [ 569.788504][T14598] ? xfd_validate_state+0x5d/0x180 [ 569.788556][T14598] __x64_sys_unshare+0x31/0x40 [ 569.788586][T14598] do_syscall_64+0xcd/0x250 [ 569.788629][T14598] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 569.788670][T14598] RIP: 0033:0x7ff9dc78d169 [ 569.788692][T14598] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.788721][T14598] RSP: 002b:00007ff9dd5fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 569.788748][T14598] RAX: ffffffffffffffda RBX: 00007ff9dc9a5fa0 RCX: 00007ff9dc78d169 [ 569.788767][T14598] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 569.788785][T14598] RBP: 00007ff9dc80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 569.788803][T14598] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 569.788821][T14598] R13: 0000000000000000 R14: 00007ff9dc9a5fa0 R15: 00007fff62cd0198 [ 569.788856][T14598] [ 571.558321][T14624] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 572.328700][T14641] FAULT_INJECTION: forcing a failure. [ 572.328700][T14641] name failslab, interval 1, probability 0, space 0, times 0 [ 572.345217][T14641] CPU: 0 UID: 0 PID: 14641 Comm: syz.4.2091 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 572.345258][T14641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 572.345276][T14641] Call Trace: [ 572.345285][T14641] [ 572.345298][T14641] dump_stack_lvl+0x16c/0x1f0 [ 572.345346][T14641] should_fail_ex+0x50a/0x650 [ 572.345374][T14641] ? fs_reclaim_acquire+0xae/0x150 [ 572.345418][T14641] should_failslab+0xc2/0x120 [ 572.345448][T14641] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 572.345494][T14641] ? lockdep_init_map_type+0x16d/0x7d0 [ 572.345540][T14641] ? security_inode_alloc+0x3b/0x2b0 [ 572.345582][T14641] security_inode_alloc+0x3b/0x2b0 [ 572.345618][T14641] inode_init_always_gfp+0xce4/0x1030 [ 572.345669][T14641] ? __pfx_mqueue_fill_super+0x10/0x10 [ 572.345718][T14641] alloc_inode+0x82/0x230 [ 572.345747][T14641] new_inode+0x22/0x210 [ 572.345786][T14641] ? __pfx_mqueue_fill_super+0x10/0x10 [ 572.345835][T14641] mqueue_get_inode+0x2e/0xd50 [ 572.345883][T14641] ? sget_fc+0x808/0xc20 [ 572.345927][T14641] ? __pfx_mqueue_fill_super+0x10/0x10 [ 572.345976][T14641] mqueue_fill_super+0x112/0x210 [ 572.346026][T14641] get_tree_nodev+0xda/0x190 [ 572.346080][T14641] mqueue_get_tree+0xf1/0x130 [ 572.346126][T14641] vfs_get_tree+0x8b/0x340 [ 572.346160][T14641] fc_mount+0x16/0xc0 [ 572.346193][T14641] mq_init_ns+0x426/0x620 [ 572.346248][T14641] copy_ipcs+0x383/0x610 [ 572.346281][T14641] ? copy_utsname+0xab/0x470 [ 572.346328][T14641] create_new_namespaces+0x20a/0xad0 [ 572.346378][T14641] ? security_capable+0x7e/0x260 [ 572.346413][T14641] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 572.346467][T14641] ksys_unshare+0x45d/0xa40 [ 572.346496][T14641] ? __pfx_ksys_unshare+0x10/0x10 [ 572.346517][T14641] ? xfd_validate_state+0x5d/0x180 [ 572.346556][T14641] __x64_sys_unshare+0x31/0x40 [ 572.346578][T14641] do_syscall_64+0xcd/0x250 [ 572.346610][T14641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.346640][T14641] RIP: 0033:0x7f600638d169 [ 572.346656][T14641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.346678][T14641] RSP: 002b:00007f60071a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 572.346698][T14641] RAX: ffffffffffffffda RBX: 00007f60065a5fa0 RCX: 00007f600638d169 [ 572.346712][T14641] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 572.346725][T14641] RBP: 00007f600640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 572.346738][T14641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 572.346750][T14641] R13: 0000000000000000 R14: 00007f60065a5fa0 R15: 00007ffd3441a968 [ 572.346782][T14641] [ 573.263171][T14659] openvswitch: netlink: Missing valid actions attribute. [ 575.524426][T14704] openvswitch: netlink: Missing valid actions attribute. [ 575.999980][ T5851] Bluetooth: hci0: unexpected event 0x3e length: 508 > 260 [ 576.000025][ T5851] Bluetooth: hci0: unexpected subevent 0x02 length: 507 > 260 [ 576.018469][ T5851] Bluetooth: hci0: Dropping invalid advertising data [ 576.026928][ T5851] Bluetooth: hci0: unknown advertising packet type: 0xe9 [ 576.026988][ T5851] Bluetooth: hci0: Dropping invalid advertising data [ 576.047607][ T5851] Bluetooth: hci0: Malformed LE Event: 0x02 [ 577.463593][T14743] openvswitch: netlink: Missing valid actions attribute. [ 579.122761][T14769] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 579.154688][T14772] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 579.233208][T14775] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:22: corrupted in-inode xattr: bad magic number in in-inode xattr [ 579.274545][T14768] zswap: compressor not available [ 581.462457][T14810] FAULT_INJECTION: forcing a failure. [ 581.462457][T14810] name failslab, interval 1, probability 0, space 0, times 0 [ 581.482759][T14810] CPU: 1 UID: 0 PID: 14810 Comm: syz.4.2139 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 581.482804][T14810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 581.482824][T14810] Call Trace: [ 581.482835][T14810] [ 581.482848][T14810] dump_stack_lvl+0x16c/0x1f0 [ 581.482899][T14810] should_fail_ex+0x50a/0x650 [ 581.482932][T14810] ? fs_reclaim_acquire+0xae/0x150 [ 581.482978][T14810] ? __do_sys_fanotify_init+0x4b3/0xb50 [ 581.483014][T14810] should_failslab+0xc2/0x120 [ 581.483046][T14810] __kmalloc_cache_noprof+0x68/0x410 [ 581.483102][T14810] ? kasan_save_track+0x14/0x30 [ 581.483155][T14810] __do_sys_fanotify_init+0x4b3/0xb50 [ 581.483197][T14810] do_syscall_64+0xcd/0x250 [ 581.483247][T14810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 581.483293][T14810] RIP: 0033:0x7f600638d169 [ 581.483319][T14810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.483352][T14810] RSP: 002b:00007f60071a9038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 581.483395][T14810] RAX: ffffffffffffffda RBX: 00007f60065a5fa0 RCX: 00007f600638d169 [ 581.483416][T14810] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 581.483435][T14810] RBP: 00007f600640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 581.483454][T14810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 581.483472][T14810] R13: 0000000000000000 R14: 00007f60065a5fa0 R15: 00007ffd3441a968 [ 581.483509][T14810] [ 581.737163][T14814] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 582.469396][T14834] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr [ 583.104878][T14838] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr [ 585.520538][T14884] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr [ 587.058224][T14909] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 587.098640][T14912] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 587.178677][T14915] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 587.231936][T14906] zswap: compressor not available [ 587.277205][T14917] FAULT_INJECTION: forcing a failure. [ 587.277205][T14917] name failslab, interval 1, probability 0, space 0, times 0 [ 587.358633][T14917] CPU: 1 UID: 0 PID: 14917 Comm: syz.5.2171 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 587.358674][T14917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 587.358692][T14917] Call Trace: [ 587.358702][T14917] [ 587.358714][T14917] dump_stack_lvl+0x16c/0x1f0 [ 587.358764][T14917] should_fail_ex+0x50a/0x650 [ 587.358793][T14917] ? fs_reclaim_acquire+0xae/0x150 [ 587.358836][T14917] ? __do_sys_fanotify_init+0x4b3/0xb50 [ 587.358869][T14917] should_failslab+0xc2/0x120 [ 587.358899][T14917] __kmalloc_cache_noprof+0x68/0x410 [ 587.358945][T14917] ? kasan_save_track+0x14/0x30 [ 587.358993][T14917] __do_sys_fanotify_init+0x4b3/0xb50 [ 587.359032][T14917] do_syscall_64+0xcd/0x250 [ 587.359077][T14917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 587.359121][T14917] RIP: 0033:0x7ff9dc78d169 [ 587.359144][T14917] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 587.359174][T14917] RSP: 002b:00007ff9dd5fb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012c [ 587.359204][T14917] RAX: ffffffffffffffda RBX: 00007ff9dc9a5fa0 RCX: 00007ff9dc78d169 [ 587.359225][T14917] RDX: 0000000000000000 RSI: 0002000000000002 RDI: 0000000000000005 [ 587.359244][T14917] RBP: 00007ff9dc80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 587.359264][T14917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 587.359283][T14917] R13: 0000000000000000 R14: 00007ff9dc9a5fa0 R15: 00007fff62cd0198 [ 587.359320][T14917] [ 588.383249][T14953] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:22: corrupted in-inode xattr: bad magic number in in-inode xattr [ 590.378322][T14980] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:22: corrupted in-inode xattr: bad magic number in in-inode xattr [ 590.473739][T14985] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:22: corrupted in-inode xattr: bad magic number in in-inode xattr [ 592.190508][T15016] openvswitch: netlink: Missing valid actions attribute. [ 592.424280][T15022] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr [ 592.466901][T15023] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr [ 592.867243][T15027] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 596.349605][T15066] FAULT_INJECTION: forcing a failure. [ 596.349605][T15066] name failslab, interval 1, probability 0, space 0, times 0 [ 596.385418][T15066] CPU: 0 UID: 0 PID: 15066 Comm: syz.4.2215 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 596.385461][T15066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 596.385479][T15066] Call Trace: [ 596.385489][T15066] [ 596.385500][T15066] dump_stack_lvl+0x16c/0x1f0 [ 596.385547][T15066] should_fail_ex+0x50a/0x650 [ 596.385576][T15066] ? fs_reclaim_acquire+0xae/0x150 [ 596.385615][T15066] ? memcg_list_lru_alloc+0x29f/0x730 [ 596.385647][T15066] should_failslab+0xc2/0x120 [ 596.385675][T15066] __kmalloc_noprof+0xcb/0x510 [ 596.385718][T15066] ? copy_ipcs+0x383/0x610 [ 596.385757][T15066] memcg_list_lru_alloc+0x29f/0x730 [ 596.385796][T15066] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 596.385827][T15066] ? trace_lock_acquire+0x14e/0x1f0 [ 596.385864][T15066] ? lock_acquire+0x2f/0xb0 [ 596.385902][T15066] ? get_mem_cgroup_from_objcg+0xe1/0x210 [ 596.385949][T15066] __memcg_slab_post_alloc_hook+0x12c/0x9b0 [ 596.385982][T15066] ? kasan_save_track+0x14/0x30 [ 596.386038][T15066] kmem_cache_alloc_lru_noprof+0x363/0x3d0 [ 596.386084][T15066] ? __d_alloc+0x31/0xaa0 [ 596.386113][T15066] ? __pfx_mqueue_fill_super+0x10/0x10 [ 596.386159][T15066] __d_alloc+0x31/0xaa0 [ 596.386183][T15066] ? mqueue_get_inode+0x285/0xd50 [ 596.386230][T15066] ? __pfx_mqueue_fill_super+0x10/0x10 [ 596.386274][T15066] d_make_root+0x3e/0x90 [ 596.386302][T15066] mqueue_fill_super+0x13a/0x210 [ 596.386349][T15066] get_tree_nodev+0xda/0x190 [ 596.386391][T15066] mqueue_get_tree+0xf1/0x130 [ 596.386436][T15066] vfs_get_tree+0x8b/0x340 [ 596.386469][T15066] fc_mount+0x16/0xc0 [ 596.386502][T15066] mq_init_ns+0x426/0x620 [ 596.386537][T15066] copy_ipcs+0x383/0x610 [ 596.386567][T15066] ? copy_utsname+0xab/0x470 [ 596.386611][T15066] create_new_namespaces+0x20a/0xad0 [ 596.386658][T15066] ? security_capable+0x7e/0x260 [ 596.386692][T15066] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 596.386741][T15066] ksys_unshare+0x45d/0xa40 [ 596.386772][T15066] ? __pfx_ksys_unshare+0x10/0x10 [ 596.386800][T15066] ? xfd_validate_state+0x5d/0x180 [ 596.386854][T15066] __x64_sys_unshare+0x31/0x40 [ 596.386883][T15066] do_syscall_64+0xcd/0x250 [ 596.386926][T15066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.386966][T15066] RIP: 0033:0x7f600638d169 [ 596.386989][T15066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.387024][T15066] RSP: 002b:00007f60071a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 596.387052][T15066] RAX: ffffffffffffffda RBX: 00007f60065a5fa0 RCX: 00007f600638d169 [ 596.387071][T15066] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 596.387088][T15066] RBP: 00007f600640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 596.387106][T15066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 596.387142][T15066] R13: 0000000000000000 R14: 00007f60065a5fa0 R15: 00007ffd3441a968 [ 596.387180][T15066] [ 598.905262][T15089] openvswitch: netlink: Missing valid actions attribute. [ 598.916086][T15082] netlink: 326 bytes leftover after parsing attributes in process `syz.5.2219'. [ 599.008475][T15099] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 599.170486][T15107] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 599.243025][T15109] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 599.280897][T15108] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 599.458882][T15093] zswap: compressor not available [ 599.680536][T15101] netlink: 346 bytes leftover after parsing attributes in process `syz.3.2223'. [ 600.142308][T15119] FAULT_INJECTION: forcing a failure. [ 600.142308][T15119] name failslab, interval 1, probability 0, space 0, times 0 [ 600.237691][T15119] CPU: 0 UID: 0 PID: 15119 Comm: syz.5.2226 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 600.237741][T15119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 600.237761][T15119] Call Trace: [ 600.237772][T15119] [ 600.237785][T15119] dump_stack_lvl+0x16c/0x1f0 [ 600.237837][T15119] should_fail_ex+0x50a/0x650 [ 600.237869][T15119] ? fs_reclaim_acquire+0xae/0x150 [ 600.237915][T15119] should_failslab+0xc2/0x120 [ 600.237947][T15119] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 600.238010][T15119] ? __d_alloc+0x31/0xaa0 [ 600.238043][T15119] ? __pfx_mqueue_fill_super+0x10/0x10 [ 600.238095][T15119] __d_alloc+0x31/0xaa0 [ 600.238123][T15119] ? mqueue_get_inode+0x285/0xd50 [ 600.238177][T15119] ? __pfx_mqueue_fill_super+0x10/0x10 [ 600.238244][T15119] d_make_root+0x3e/0x90 [ 600.238277][T15119] mqueue_fill_super+0x13a/0x210 [ 600.238330][T15119] get_tree_nodev+0xda/0x190 [ 600.238396][T15119] mqueue_get_tree+0xf1/0x130 [ 600.238449][T15119] vfs_get_tree+0x8b/0x340 [ 600.238488][T15119] fc_mount+0x16/0xc0 [ 600.238527][T15119] mq_init_ns+0x426/0x620 [ 600.238569][T15119] copy_ipcs+0x383/0x610 [ 600.238619][T15119] ? copy_utsname+0xab/0x470 [ 600.238687][T15119] create_new_namespaces+0x20a/0xad0 [ 600.238763][T15119] ? security_capable+0x7e/0x260 [ 600.238811][T15119] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 600.238874][T15119] ksys_unshare+0x45d/0xa40 [ 600.238918][T15119] ? __pfx_ksys_unshare+0x10/0x10 [ 600.238953][T15119] ? xfd_validate_state+0x5d/0x180 [ 600.239022][T15119] __x64_sys_unshare+0x31/0x40 [ 600.239058][T15119] do_syscall_64+0xcd/0x250 [ 600.239110][T15119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 600.239162][T15119] RIP: 0033:0x7ff9dc78d169 [ 600.239189][T15119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 600.239229][T15119] RSP: 002b:00007ff9dd5fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 600.239261][T15119] RAX: ffffffffffffffda RBX: 00007ff9dc9a5fa0 RCX: 00007ff9dc78d169 [ 600.239284][T15119] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 600.239303][T15119] RBP: 00007ff9dc80e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 600.239324][T15119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 600.239344][T15119] R13: 0000000000000000 R14: 00007ff9dc9a5fa0 R15: 00007fff62cd0198 [ 600.239386][T15119] [ 601.982877][T15148] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:22: corrupted in-inode xattr: bad magic number in in-inode xattr [ 602.059671][T15153] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 602.113955][T15154] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 602.153573][T15147] zswap: compressor not available [ 605.020591][T15190] netlink: 504 bytes leftover after parsing attributes in process `syz.4.2248'. [ 607.976042][T15231] openvswitch: netlink: Missing valid actions attribute. [ 611.218452][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 611.243796][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 611.263455][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 611.273934][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 611.286385][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 611.306874][T15269] FAULT_INJECTION: forcing a failure. [ 611.306874][T15269] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 611.323188][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 611.377445][T15269] CPU: 0 UID: 0 PID: 15269 Comm: syz.1.2269 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 611.377486][T15269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 611.377506][T15269] Call Trace: [ 611.377516][T15269] [ 611.377528][T15269] dump_stack_lvl+0x16c/0x1f0 [ 611.377576][T15269] should_fail_ex+0x50a/0x650 [ 611.377605][T15269] ? __pfx___might_resched+0x10/0x10 [ 611.377659][T15269] should_fail_alloc_page+0xe7/0x130 [ 611.377694][T15269] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 611.377743][T15269] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 611.377796][T15269] ? hlock_class+0x4e/0x130 [ 611.377828][T15269] ? mark_lock+0xb5/0xc60 [ 611.377883][T15269] ? __pfx_mark_lock+0x10/0x10 [ 611.377926][T15269] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 611.377985][T15269] ? hlock_class+0x4e/0x130 [ 611.378015][T15269] ? mark_lock+0xb5/0xc60 [ 611.378075][T15269] ? __pfx_mark_lock+0x10/0x10 [ 611.378120][T15269] ? hlock_class+0x4e/0x130 [ 611.378152][T15269] ? __lock_acquire+0xcc5/0x3c40 [ 611.378196][T15269] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 611.378249][T15269] ? policy_nodemask+0xea/0x4e0 [ 611.378282][T15269] alloc_pages_mpol+0x1fc/0x540 [ 611.378313][T15269] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 611.378343][T15269] ? hlock_class+0x4e/0x130 [ 611.378384][T15269] folio_alloc_mpol_noprof+0x36/0x2f0 [ 611.378422][T15269] vma_alloc_folio_noprof+0xee/0x1b0 [ 611.378459][T15269] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 611.378496][T15269] ? find_held_lock+0x2d/0x110 [ 611.378537][T15269] do_pte_missing+0x202f/0x3e10 [ 611.378594][T15269] __handle_mm_fault+0x103c/0x2a40 [ 611.378651][T15269] ? __pfx___handle_mm_fault+0x10/0x10 [ 611.378696][T15269] ? follow_page_pte+0x3ac/0x1490 [ 611.378740][T15269] ? __pfx_lock_release+0x10/0x10 [ 611.378811][T15269] handle_mm_fault+0x3fa/0xaa0 [ 611.378865][T15269] __get_user_pages+0x773/0x36f0 [ 611.378919][T15269] ? __pfx_mt_find+0x10/0x10 [ 611.378969][T15269] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 611.379013][T15269] ? __pfx___get_user_pages+0x10/0x10 [ 611.379060][T15269] ? __mm_populate+0x21d/0x380 [ 611.379113][T15269] populate_vma_page_range+0x27f/0x3a0 [ 611.379163][T15269] ? __pfx_populate_vma_page_range+0x10/0x10 [ 611.379209][T15269] ? __pfx_find_vma_intersection+0x10/0x10 [ 611.379252][T15269] ? vm_mmap_pgoff+0x31a/0x440 [ 611.379299][T15269] __mm_populate+0x1d6/0x380 [ 611.379348][T15269] ? __pfx___mm_populate+0x10/0x10 [ 611.379398][T15269] ? up_write+0x1b2/0x520 [ 611.379449][T15269] vm_mmap_pgoff+0x352/0x440 [ 611.379497][T15269] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 611.379550][T15269] ? __x64_sys_futex+0x1e1/0x4c0 [ 611.379586][T15269] ? __x64_sys_futex+0x1ea/0x4c0 [ 611.379630][T15269] ksys_mmap_pgoff+0x7d/0x5c0 [ 611.379670][T15269] ? syscall_user_dispatch+0x7a/0x130 [ 611.379723][T15269] __x64_sys_mmap+0x125/0x190 [ 611.379773][T15269] do_syscall_64+0xcd/0x250 [ 611.379819][T15269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 611.379863][T15269] RIP: 0033:0x7f61d1b8d169 [ 611.379887][T15269] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 611.379917][T15269] RSP: 002b:00007f61d2a1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 611.379953][T15269] RAX: ffffffffffffffda RBX: 00007f61d1da5fa0 RCX: 00007f61d1b8d169 [ 611.379974][T15269] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 611.379994][T15269] RBP: 00007f61d1c0e2a0 R08: 0000000000000007 R09: 0000000000028000 [ 611.380014][T15269] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 611.380034][T15269] R13: 0000000000000000 R14: 00007f61d1da5fa0 R15: 00007ffc86d1d518 [ 611.380073][T15269] [ 612.758731][T15281] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:2: corrupted in-inode xattr: bad magic number in in-inode xattr [ 612.805429][T15266] chnl_net:caif_netlink_parms(): no params data found [ 612.967110][T15285] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 613.031964][T10645] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.407538][ T5851] Bluetooth: hci4: command tx timeout [ 613.426183][T10645] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 613.679198][T15266] bridge0: port 1(bridge_slave_0) entered blocking state [ 613.717189][T15266] bridge0: port 1(bridge_slave_0) entered disabled state [ 613.767692][T15266] bridge_slave_0: entered allmulticast mode [ 613.799465][T15266] bridge_slave_0: entered promiscuous mode [ 613.945778][T10645] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.040654][T15266] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.076500][T15266] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.108489][T15266] bridge_slave_1: entered allmulticast mode [ 614.116794][T15266] bridge_slave_1: entered promiscuous mode [ 614.155778][T10645] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 614.159350][T15305] snd_aloop snd_aloop.0: Parsing timer source 'ù¡Òa' failed with -22 [ 614.403982][T15266] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 614.667607][T15266] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 614.868915][T15266] team0: Port device team_slave_0 added [ 614.925515][T15266] team0: Port device team_slave_1 added [ 615.019339][T15266] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 615.036502][T15266] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.075655][T15266] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 615.124165][T15266] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 615.136414][T15266] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 615.171251][T15266] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 615.186198][T10645] bridge_slave_1: left allmulticast mode [ 615.196515][T10645] bridge_slave_1: left promiscuous mode [ 615.209541][T10645] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.220038][T15315] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 615.240542][T10645] bridge_slave_0: left allmulticast mode [ 615.243669][T15317] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 615.262474][T10645] bridge_slave_0: left promiscuous mode [ 615.273290][T10645] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.491440][ T5851] Bluetooth: hci4: command tx timeout [ 615.581543][T10645] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.594199][T10645] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.607815][T10645] bond0 (unregistering): Released all slaves [ 615.685196][T15266] hsr_slave_0: entered promiscuous mode [ 615.705447][T15266] hsr_slave_1: entered promiscuous mode [ 615.831672][T15319] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 615.861088][T15320] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 615.989944][T15321] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 616.025672][T15322] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 616.045490][T10645] hsr_slave_0: left promiscuous mode [ 616.055018][T10645] hsr_slave_1: left promiscuous mode [ 616.062031][T10645] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.072311][T10645] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.083905][T10645] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.092905][T10645] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 616.114424][T10645] veth1_macvtap: left promiscuous mode [ 616.121546][T10645] veth1_vlan: left promiscuous mode [ 616.128259][T10645] veth0_vlan: left promiscuous mode [ 616.495559][T10645] team0 (unregistering): Port device team_slave_1 removed [ 616.536497][T10645] team0 (unregistering): Port device team_slave_0 removed [ 616.946340][T15323] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 617.133955][T15324] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #89: comm dhcpcd: corrupted in-inode xattr: bad magic number in in-inode xattr [ 617.204866][T15266] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 617.219084][T15266] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 617.240003][T15266] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 617.259412][T15266] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 617.333000][T15266] 8021q: adding VLAN 0 to HW filter on device bond0 [ 617.353836][T15266] 8021q: adding VLAN 0 to HW filter on device team0 [ 617.368673][ T9328] bridge0: port 1(bridge_slave_0) entered blocking state [ 617.377174][ T9328] bridge0: port 1(bridge_slave_0) entered forwarding state [ 617.394198][ T54] bridge0: port 2(bridge_slave_1) entered blocking state [ 617.402740][ T54] bridge0: port 2(bridge_slave_1) entered forwarding state [ 617.476590][T15266] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 617.516657][T15266] veth0_vlan: entered promiscuous mode [ 617.528449][T15266] veth1_vlan: entered promiscuous mode [ 617.555289][T15266] veth0_macvtap: entered promiscuous mode [ 617.564837][T15266] veth1_macvtap: entered promiscuous mode [ 617.572503][ T5851] Bluetooth: hci4: command tx timeout [ 617.587712][T15266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.600615][T15266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.613113][T15266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.625723][T15266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.637627][T15266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 617.650262][T15266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.663297][T15266] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 617.678650][T15266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.691793][T15266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.704008][T15266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.717217][T15266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.729373][T15266] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 617.742037][T15266] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 617.754905][T15266] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 617.769265][T15266] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.780153][T15266] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.790672][T15266] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.801239][T15266] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 617.880370][T10635] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.901071][T10635] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.927157][T10647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 617.936749][T10647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 617.960786][T15332] EXT4-fs error: 7 callbacks suppressed [ 617.960804][T15332] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 618.095818][T15340] snd_aloop snd_aloop.0: Parsing timer source 'ù¡Òa' failed with -22 [ 618.593486][T15349] snd_aloop snd_aloop.0: Parsing timer source 'ù¡Òa' failed with -22 [ 619.648322][ T5851] Bluetooth: hci4: command tx timeout [ 619.896535][T15366] openvswitch: netlink: Missing valid actions attribute. [ 620.645819][T15385] snd_aloop snd_aloop.0: Parsing timer source 'ù¡Òa' failed with -22 [ 620.700132][T15382] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2295'. [ 621.152973][T15395] openvswitch: netlink: Missing valid actions attribute. [ 621.322833][T15400] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 621.454149][T15404] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:16: corrupted in-inode xattr: bad magic number in in-inode xattr [ 622.195557][T15409] snd_aloop snd_aloop.0: Parsing timer source 'ù¡Òa' failed with -22 [ 622.287988][T15410] svc: failed to register nfsdv3 RPC service (errno 111). [ 622.316253][T15410] svc: failed to register nfsaclv3 RPC service (errno 111). [ 624.766348][T15447] netlink: 206 bytes leftover after parsing attributes in process `syz.3.2320'. [ 625.719925][T15466] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:16: corrupted in-inode xattr: bad magic number in in-inode xattr [ 625.755016][T15467] FAULT_INJECTION: forcing a failure. [ 625.755016][T15467] name failslab, interval 1, probability 0, space 0, times 0 [ 625.763445][T15469] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:16: corrupted in-inode xattr: bad magic number in in-inode xattr [ 625.774415][T15467] CPU: 1 UID: 0 PID: 15467 Comm: syz.4.2327 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 625.774455][T15467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 625.774476][T15467] Call Trace: [ 625.774487][T15467] [ 625.774500][T15467] dump_stack_lvl+0x16c/0x1f0 [ 625.774547][T15467] should_fail_ex+0x50a/0x650 [ 625.774576][T15467] ? fs_reclaim_acquire+0xae/0x150 [ 625.774619][T15467] ? memcg_list_lru_alloc+0x29f/0x730 [ 625.774653][T15467] should_failslab+0xc2/0x120 [ 625.774683][T15467] __kmalloc_noprof+0xcb/0x510 [ 625.774726][T15467] ? fc_mount+0x16/0xc0 [ 625.774769][T15467] memcg_list_lru_alloc+0x29f/0x730 [ 625.774810][T15467] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 625.774843][T15467] ? trace_lock_acquire+0x14e/0x1f0 [ 625.774901][T15467] ? lock_acquire+0x2f/0xb0 [ 625.775056][T15467] ? get_mem_cgroup_from_objcg+0xe1/0x210 [ 625.775128][T15467] __memcg_slab_post_alloc_hook+0x12c/0x9b0 [ 625.775171][T15467] ? kasan_save_track+0x14/0x30 [ 625.775226][T15467] kmem_cache_alloc_lru_noprof+0x363/0x3d0 [ 625.775283][T15467] ? mqueue_alloc_inode+0x25/0x50 [ 625.775343][T15467] ? __pfx_mqueue_fill_super+0x10/0x10 [ 625.775397][T15467] ? __pfx_mqueue_alloc_inode+0x10/0x10 [ 625.775459][T15467] mqueue_alloc_inode+0x25/0x50 [ 625.775515][T15467] alloc_inode+0x5d/0x230 [ 625.775547][T15467] new_inode+0x22/0x210 [ 625.775582][T15467] ? __pfx_mqueue_fill_super+0x10/0x10 [ 625.775636][T15467] mqueue_get_inode+0x2e/0xd50 [ 625.775689][T15467] ? sget_fc+0x808/0xc20 [ 625.775737][T15467] ? __pfx_mqueue_fill_super+0x10/0x10 [ 625.775793][T15467] mqueue_fill_super+0x112/0x210 [ 625.775848][T15467] get_tree_nodev+0xda/0x190 [ 625.775899][T15467] mqueue_get_tree+0xf1/0x130 [ 625.775962][T15467] vfs_get_tree+0x8b/0x340 [ 625.776003][T15467] fc_mount+0x16/0xc0 [ 625.776044][T15467] mq_init_ns+0x426/0x620 [ 625.776087][T15467] copy_ipcs+0x383/0x610 [ 625.776123][T15467] ? copy_utsname+0xab/0x470 [ 625.776188][T15467] create_new_namespaces+0x20a/0xad0 [ 625.776243][T15467] ? security_capable+0x7e/0x260 [ 625.776282][T15467] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 625.776339][T15467] ksys_unshare+0x45d/0xa40 [ 625.776374][T15467] ? __pfx_ksys_unshare+0x10/0x10 [ 625.776406][T15467] ? xfd_validate_state+0x5d/0x180 [ 625.776464][T15467] __x64_sys_unshare+0x31/0x40 [ 625.776496][T15467] do_syscall_64+0xcd/0x250 [ 625.776545][T15467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 625.776590][T15467] RIP: 0033:0x7f600638d169 [ 625.776616][T15467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 625.776649][T15467] RSP: 002b:00007f60071a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 625.776679][T15467] RAX: ffffffffffffffda RBX: 00007f60065a5fa0 RCX: 00007f600638d169 [ 625.776700][T15467] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000008000400 [ 625.776720][T15467] RBP: 00007f600640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 625.776741][T15467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 625.776761][T15467] R13: 0000000000000000 R14: 00007f60065a5fa0 R15: 00007ffd3441a968 [ 625.776799][T15467] [ 626.277972][T15482] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 627.262633][T15499] netlink: 25 bytes leftover after parsing attributes in process `syz.1.2333'. [ 627.280700][T15499] openvswitch: netlink: IP tunnel dst address not specified [ 627.882895][T15505] svc: failed to register nfsdv3 RPC service (errno 111). [ 627.919346][T15505] svc: failed to register nfsaclv3 RPC service (errno 111). [ 628.900327][T15519] FAULT_INJECTION: forcing a failure. [ 628.900327][T15519] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 628.936753][T15519] CPU: 1 UID: 0 PID: 15519 Comm: syz.5.2339 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 628.936798][T15519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 628.936818][T15519] Call Trace: [ 628.936828][T15519] [ 628.936842][T15519] dump_stack_lvl+0x16c/0x1f0 [ 628.936896][T15519] should_fail_ex+0x50a/0x650 [ 628.936928][T15519] ? __pfx___might_resched+0x10/0x10 [ 628.936988][T15519] should_fail_alloc_page+0xe7/0x130 [ 628.937024][T15519] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 628.937070][T15519] ? hlock_class+0x4e/0x130 [ 628.937111][T15519] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 628.937169][T15519] ? hlock_class+0x4e/0x130 [ 628.937204][T15519] ? mark_lock+0xb5/0xc60 [ 628.937258][T15519] ? __pfx_mark_lock+0x10/0x10 [ 628.937305][T15519] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 628.937362][T15519] ? hlock_class+0x4e/0x130 [ 628.937395][T15519] ? mark_lock+0xb5/0xc60 [ 628.937445][T15519] ? __pfx_mark_lock+0x10/0x10 [ 628.937493][T15519] ? hlock_class+0x4e/0x130 [ 628.937527][T15519] ? __lock_acquire+0xcc5/0x3c40 [ 628.937575][T15519] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 628.937629][T15519] ? policy_nodemask+0xea/0x4e0 [ 628.937665][T15519] alloc_pages_mpol+0x1fc/0x540 [ 628.937699][T15519] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 628.937740][T15519] ? hlock_class+0x4e/0x130 [ 628.937785][T15519] folio_alloc_mpol_noprof+0x36/0x2f0 [ 628.937827][T15519] vma_alloc_folio_noprof+0xee/0x1b0 [ 628.937876][T15519] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 628.937913][T15519] ? find_held_lock+0x2d/0x110 [ 628.937955][T15519] do_pte_missing+0x202f/0x3e10 [ 628.938015][T15519] __handle_mm_fault+0x103c/0x2a40 [ 628.938098][T15519] ? __pfx___handle_mm_fault+0x10/0x10 [ 628.938143][T15519] ? follow_page_pte+0x3ac/0x1490 [ 628.938186][T15519] ? __pfx_lock_release+0x10/0x10 [ 628.938258][T15519] handle_mm_fault+0x3fa/0xaa0 [ 628.938312][T15519] __get_user_pages+0x773/0x36f0 [ 628.938365][T15519] ? __pfx_mt_find+0x10/0x10 [ 628.938409][T15519] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 628.938454][T15519] ? __pfx___get_user_pages+0x10/0x10 [ 628.938502][T15519] ? __mm_populate+0x21d/0x380 [ 628.938555][T15519] populate_vma_page_range+0x27f/0x3a0 [ 628.938605][T15519] ? __pfx_populate_vma_page_range+0x10/0x10 [ 628.938651][T15519] ? __pfx_find_vma_intersection+0x10/0x10 [ 628.938693][T15519] ? vm_mmap_pgoff+0x31a/0x440 [ 628.938750][T15519] __mm_populate+0x1d6/0x380 [ 628.938800][T15519] ? __pfx___mm_populate+0x10/0x10 [ 628.938850][T15519] ? up_write+0x1b2/0x520 [ 628.938904][T15519] vm_mmap_pgoff+0x352/0x440 [ 628.938952][T15519] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 628.938999][T15519] ? fd_install+0x223/0x750 [ 628.939049][T15519] ? __x64_sys_futex+0x1e1/0x4c0 [ 628.939085][T15519] ? __x64_sys_futex+0x1ea/0x4c0 [ 628.939128][T15519] ksys_mmap_pgoff+0x7d/0x5c0 [ 628.939167][T15519] ? rcu_is_watching+0x12/0xc0 [ 628.939205][T15519] __x64_sys_mmap+0x125/0x190 [ 628.939255][T15519] do_syscall_64+0xcd/0x250 [ 628.939301][T15519] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.939345][T15519] RIP: 0033:0x7ff9dc78d169 [ 628.939369][T15519] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 628.939398][T15519] RSP: 002b:00007ff9dd5fb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 628.939427][T15519] RAX: ffffffffffffffda RBX: 00007ff9dc9a5fa0 RCX: 00007ff9dc78d169 [ 628.939448][T15519] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 628.939466][T15519] RBP: 00007ff9dc80e2a0 R08: 0000000000000007 R09: 0000000000028000 [ 628.939485][T15519] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 628.939510][T15519] R13: 0000000000000000 R14: 00007ff9dc9a5fa0 R15: 00007fff62cd0198 [ 628.939549][T15519] [ 629.593714][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.602937][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 630.508337][T15542] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr [ 630.559767][T15544] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 630.628196][T15545] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 630.689994][T15540] zswap: compressor not available [ 631.566353][T15556] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 631.700377][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 631.723240][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 631.733132][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 631.748018][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 631.757177][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 631.766193][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 632.099382][T10645] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.269467][T10645] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.415585][T10645] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.662182][T10645] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.907960][T15581] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 632.983021][T15555] chnl_net:caif_netlink_parms(): no params data found [ 633.288055][T15555] bridge0: port 1(bridge_slave_0) entered blocking state [ 633.288143][T15555] bridge0: port 1(bridge_slave_0) entered disabled state [ 633.288282][T15555] bridge_slave_0: entered allmulticast mode [ 633.289499][T15555] bridge_slave_0: entered promiscuous mode [ 633.291521][T15555] bridge0: port 2(bridge_slave_1) entered blocking state [ 633.334362][T15555] bridge0: port 2(bridge_slave_1) entered disabled state [ 633.334525][T15555] bridge_slave_1: entered allmulticast mode [ 633.337082][T15555] bridge_slave_1: entered promiscuous mode [ 633.401002][T15555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.403807][T15555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.460999][T15555] team0: Port device team_slave_0 added [ 633.485139][T15555] team0: Port device team_slave_1 added [ 633.595325][T15555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.607740][T15555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.653357][T15555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.690534][T15555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 633.703874][T15555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 633.744502][T15555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 633.754474][T15593] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 633.807826][ T5840] Bluetooth: hci2: command tx timeout [ 633.832804][T15555] hsr_slave_0: entered promiscuous mode [ 633.848022][T15555] hsr_slave_1: entered promiscuous mode [ 633.855447][T15555] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 633.866412][T15555] Cannot create hsr debugfs directory [ 634.502163][ T31] audit: type=1800 audit(4295003790.221:18): pid=15599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2356" name="members" dev="configfs" ino=49078 res=0 errno=0 [ 634.710037][T15605] FAULT_INJECTION: forcing a failure. [ 634.710037][T15605] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 634.733755][T15605] CPU: 0 UID: 0 PID: 15605 Comm: syz.3.2358 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 634.733792][T15605] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 634.733809][T15605] Call Trace: [ 634.733818][T15605] [ 634.733829][T15605] dump_stack_lvl+0x16c/0x1f0 [ 634.733876][T15605] should_fail_ex+0x50a/0x650 [ 634.733902][T15605] ? __pfx___might_resched+0x10/0x10 [ 634.733955][T15605] should_fail_alloc_page+0xe7/0x130 [ 634.733987][T15605] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 634.734032][T15605] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 634.734082][T15605] ? hlock_class+0x4e/0x130 [ 634.734111][T15605] ? mark_lock+0xb5/0xc60 [ 634.734153][T15605] ? __pfx_mark_lock+0x10/0x10 [ 634.734195][T15605] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 634.734264][T15605] ? hlock_class+0x4e/0x130 [ 634.734296][T15605] ? mark_lock+0xb5/0xc60 [ 634.734341][T15605] ? __pfx_mark_lock+0x10/0x10 [ 634.734385][T15605] ? hlock_class+0x4e/0x130 [ 634.734417][T15605] ? __lock_acquire+0xcc5/0x3c40 [ 634.734462][T15605] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 634.734514][T15605] ? policy_nodemask+0xea/0x4e0 [ 634.734553][T15605] alloc_pages_mpol+0x1fc/0x540 [ 634.734585][T15605] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 634.734615][T15605] ? hlock_class+0x4e/0x130 [ 634.734657][T15605] folio_alloc_mpol_noprof+0x36/0x2f0 [ 634.734695][T15605] vma_alloc_folio_noprof+0xee/0x1b0 [ 634.734731][T15605] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 634.734767][T15605] ? find_held_lock+0x2d/0x110 [ 634.734808][T15605] do_pte_missing+0x202f/0x3e10 [ 634.734867][T15605] __handle_mm_fault+0x103c/0x2a40 [ 634.734924][T15605] ? __pfx___handle_mm_fault+0x10/0x10 [ 634.734969][T15605] ? follow_page_pte+0x3ac/0x1490 [ 634.735013][T15605] ? __pfx_lock_release+0x10/0x10 [ 634.735084][T15605] handle_mm_fault+0x3fa/0xaa0 [ 634.735137][T15605] __get_user_pages+0x773/0x36f0 [ 634.735191][T15605] ? __pfx_mt_find+0x10/0x10 [ 634.735236][T15605] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 634.735283][T15605] ? __pfx___get_user_pages+0x10/0x10 [ 634.735341][T15605] ? __mm_populate+0x21d/0x380 [ 634.735390][T15605] populate_vma_page_range+0x27f/0x3a0 [ 634.735437][T15605] ? __pfx_populate_vma_page_range+0x10/0x10 [ 634.735481][T15605] ? __pfx_find_vma_intersection+0x10/0x10 [ 634.735524][T15605] ? vm_mmap_pgoff+0x31a/0x440 [ 634.735570][T15605] __mm_populate+0x1d6/0x380 [ 634.735615][T15605] ? __pfx___mm_populate+0x10/0x10 [ 634.735662][T15605] ? up_write+0x1b2/0x520 [ 634.735710][T15605] vm_mmap_pgoff+0x352/0x440 [ 634.735774][T15605] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 634.735819][T15605] ? fd_install+0x223/0x750 [ 634.735868][T15605] ? __x64_sys_futex+0x1e1/0x4c0 [ 634.735905][T15605] ? __x64_sys_futex+0x1ea/0x4c0 [ 634.735948][T15605] ksys_mmap_pgoff+0x7d/0x5c0 [ 634.735987][T15605] ? rcu_is_watching+0x12/0xc0 [ 634.736024][T15605] __x64_sys_mmap+0x125/0x190 [ 634.736073][T15605] do_syscall_64+0xcd/0x250 [ 634.736119][T15605] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 634.736163][T15605] RIP: 0033:0x7fa22298d169 [ 634.736186][T15605] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.736216][T15605] RSP: 002b:00007fa22383e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 634.736244][T15605] RAX: ffffffffffffffda RBX: 00007fa222ba5fa0 RCX: 00007fa22298d169 [ 634.736265][T15605] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 634.736284][T15605] RBP: 00007fa222a0e2a0 R08: 0000000000000007 R09: 0000000000028000 [ 634.736304][T15605] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 634.736322][T15605] R13: 0000000000000000 R14: 00007fa222ba5fa0 R15: 00007ffd62d787d8 [ 634.736359][T15605] [ 635.631984][T15614] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 635.653859][T15615] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 635.681180][T15616] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:18: corrupted in-inode xattr: bad magic number in in-inode xattr [ 635.701565][T15613] zswap: compressor not available [ 635.904008][ T5840] Bluetooth: hci2: command tx timeout [ 637.798571][T15636] nvme_fcloop: unknown parameter or missing value '' [ 637.977615][ T5840] Bluetooth: hci2: command tx timeout [ 640.057516][ T5840] Bluetooth: hci2: command tx timeout [ 648.106777][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 648.117870][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 648.129060][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 648.140318][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 648.141298][ T5851] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 648.141803][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 648.620406][T15667] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr [ 648.629723][T15654] chnl_net:caif_netlink_parms(): no params data found [ 649.442439][T15677] openvswitch: netlink: Missing valid actions attribute. [ 649.530311][T15654] bridge0: port 1(bridge_slave_0) entered blocking state [ 649.538975][T15654] bridge0: port 1(bridge_slave_0) entered disabled state [ 649.547977][T15654] bridge_slave_0: entered allmulticast mode [ 649.556763][T15654] bridge_slave_0: entered promiscuous mode [ 649.566249][T15654] bridge0: port 2(bridge_slave_1) entered blocking state [ 649.574948][T15654] bridge0: port 2(bridge_slave_1) entered disabled state [ 649.583708][T15654] bridge_slave_1: entered allmulticast mode [ 649.592035][T15654] bridge_slave_1: entered promiscuous mode [ 649.630207][T15654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 649.643936][T15654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 649.708615][T15654] team0: Port device team_slave_0 added [ 649.735188][T15654] team0: Port device team_slave_1 added [ 649.794656][T15654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 649.803211][T15654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.835016][T15654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 649.861742][T15654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 649.878076][T15654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 649.990200][T15654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 650.007103][T15686] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:18: corrupted in-inode xattr: bad magic number in in-inode xattr [ 650.046135][T15654] hsr_slave_0: entered promiscuous mode [ 650.058722][T15654] hsr_slave_1: entered promiscuous mode [ 650.075113][T15654] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 650.086943][T15654] Cannot create hsr debugfs directory [ 650.208160][ T5851] Bluetooth: hci3: command tx timeout [ 650.660405][T15689] snd_aloop snd_aloop.0: Parsing timer source 'ù¡Òa' failed with -22 [ 650.822520][T15699] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:16: corrupted in-inode xattr: bad magic number in in-inode xattr [ 650.855348][T15700] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:16: corrupted in-inode xattr: bad magic number in in-inode xattr [ 650.876811][T15702] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:16: corrupted in-inode xattr: bad magic number in in-inode xattr [ 650.896468][T15696] zswap: compressor not available [ 650.996456][T15704] openvswitch: netlink: Missing valid actions attribute. [ 651.258172][T15708] FAULT_INJECTION: forcing a failure. [ 651.258172][T15708] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 651.279045][T15708] CPU: 0 UID: 0 PID: 15708 Comm: syz.5.2386 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 651.279083][T15708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 651.279101][T15708] Call Trace: [ 651.279110][T15708] [ 651.279121][T15708] dump_stack_lvl+0x16c/0x1f0 [ 651.279164][T15708] should_fail_ex+0x50a/0x650 [ 651.279196][T15708] core_sys_select+0x4cf/0xb80 [ 651.279243][T15708] ? __pfx_core_sys_select+0x10/0x10 [ 651.279309][T15708] ? find_held_lock+0x2d/0x110 [ 651.279377][T15708] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 651.279430][T15708] kern_select+0x15e/0x1e0 [ 651.279472][T15708] ? __pfx_kern_select+0x10/0x10 [ 651.279519][T15708] ? __pfx_ksys_write+0x10/0x10 [ 651.279568][T15708] __x64_sys_select+0xbd/0x160 [ 651.279640][T15708] ? do_syscall_64+0x91/0x250 [ 651.279682][T15708] ? lockdep_hardirqs_on+0x7c/0x110 [ 651.279722][T15708] do_syscall_64+0xcd/0x250 [ 651.279767][T15708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.279810][T15708] RIP: 0033:0x7ff9dc78d169 [ 651.279833][T15708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.279862][T15708] RSP: 002b:00007ff9dd5da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 651.279890][T15708] RAX: ffffffffffffffda RBX: 00007ff9dc9a6080 RCX: 00007ff9dc78d169 [ 651.279911][T15708] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000011 [ 651.279929][T15708] RBP: 00007ff9dd5da090 R08: 0000000000000000 R09: 0000000000000000 [ 651.279948][T15708] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.279967][T15708] R13: 0000000000000000 R14: 00007ff9dc9a6080 R15: 00007fff62cd0198 [ 651.280002][T15708] [ 651.561383][T15709] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 651.865528][T15715] snd_aloop snd_aloop.0: Parsing timer source 'ù¡Òa' failed with -22 [ 652.232967][T15722] FAULT_INJECTION: forcing a failure. [ 652.232967][T15722] name failslab, interval 1, probability 0, space 0, times 0 [ 652.249234][T15722] CPU: 1 UID: 0 PID: 15722 Comm: syz.3.2391 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 652.249278][T15722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 652.249299][T15722] Call Trace: [ 652.249310][T15722] [ 652.249324][T15722] dump_stack_lvl+0x16c/0x1f0 [ 652.249379][T15722] should_fail_ex+0x50a/0x650 [ 652.249412][T15722] ? fs_reclaim_acquire+0xae/0x150 [ 652.249459][T15722] ? trace_pid_list_alloc+0x1b0/0x3f0 [ 652.249502][T15722] should_failslab+0xc2/0x120 [ 652.249535][T15722] __kmalloc_cache_noprof+0x68/0x410 [ 652.249605][T15722] trace_pid_list_alloc+0x1b0/0x3f0 [ 652.249654][T15722] trace_pid_write+0x10f/0x460 [ 652.249714][T15722] ? __pfx_trace_pid_write+0x10/0x10 [ 652.249768][T15722] ? __pfx___mutex_lock+0x10/0x10 [ 652.249860][T15722] event_pid_write.isra.0+0x3b3/0x7a0 [ 652.249913][T15722] ? __pfx_event_pid_write.isra.0+0x10/0x10 [ 652.249974][T15722] ? __pfx_ftrace_event_pid_write+0x10/0x10 [ 652.250021][T15722] vfs_write+0x24c/0x1150 [ 652.250070][T15722] ? __fget_files+0x1fc/0x3a0 [ 652.250131][T15722] ? __pfx___mutex_lock+0x10/0x10 [ 652.250180][T15722] ? __pfx_vfs_write+0x10/0x10 [ 652.250240][T15722] ? __fget_files+0x206/0x3a0 [ 652.250309][T15722] ksys_write+0x12b/0x250 [ 652.250356][T15722] ? __pfx_ksys_write+0x10/0x10 [ 652.250418][T15722] do_syscall_64+0xcd/0x250 [ 652.250470][T15722] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 652.250518][T15722] RIP: 0033:0x7fa22298d169 [ 652.250546][T15722] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 652.250580][T15722] RSP: 002b:00007fa22383e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 652.250612][T15722] RAX: ffffffffffffffda RBX: 00007fa222ba5fa0 RCX: 00007fa22298d169 [ 652.250634][T15722] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 652.250656][T15722] RBP: 00007fa222a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 652.250677][T15722] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 652.250698][T15722] R13: 0000000000000000 R14: 00007fa222ba5fa0 R15: 00007ffd62d787d8 [ 652.250742][T15722] [ 652.298479][ T5851] Bluetooth: hci3: command tx timeout [ 652.616286][T15728] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 652.657580][T15729] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:16: corrupted in-inode xattr: bad magic number in in-inode xattr [ 652.682826][T15731] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:16: corrupted in-inode xattr: bad magic number in in-inode xattr [ 652.702195][T15727] zswap: compressor not available [ 652.749252][T15733] openvswitch: netlink: Missing valid actions attribute. [ 654.367760][ T5851] Bluetooth: hci3: command tx timeout [ 655.903263][T15781] kafs: addr_prefs: Too many elements in string [ 656.457517][ T5851] Bluetooth: hci3: command tx timeout [ 656.626946][T15798] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:15: corrupted in-inode xattr: bad magic number in in-inode xattr [ 657.648015][T15804] openvswitch: netlink: Missing valid actions attribute. [ 658.320343][T15811] snd_aloop snd_aloop.0: Parsing timer source 'ù¡Òa' failed with -22 [ 658.404048][T15814] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:9: corrupted in-inode xattr: bad magic number in in-inode xattr [ 660.239759][T15844] snd_aloop snd_aloop.0: Parsing timer source 'ù¡Òa' failed with -22 [ 691.009765][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 691.017491][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 691.953901][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 691.970893][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 691.981697][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 691.992747][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 692.005528][ T5840] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 692.017123][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 692.141389][T15857] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:16: corrupted in-inode xattr: bad magic number in in-inode xattr [ 692.165823][T15851] chnl_net:caif_netlink_parms(): no params data found [ 692.230951][T15851] bridge0: port 1(bridge_slave_0) entered blocking state [ 692.240357][T15851] bridge0: port 1(bridge_slave_0) entered disabled state [ 692.249225][T15851] bridge_slave_0: entered allmulticast mode [ 692.258284][T15851] bridge_slave_0: entered promiscuous mode [ 692.267158][T15851] bridge0: port 2(bridge_slave_1) entered blocking state [ 692.275848][T15851] bridge0: port 2(bridge_slave_1) entered disabled state [ 692.284820][T15851] bridge_slave_1: entered allmulticast mode [ 692.294481][T15851] bridge_slave_1: entered promiscuous mode [ 692.324547][T15851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.338509][T15851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 692.383036][T15851] team0: Port device team_slave_0 added [ 692.393683][T15851] team0: Port device team_slave_1 added [ 692.422337][T15851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 692.431446][T15851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.463471][T15851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 692.478193][T15851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 692.486534][T15851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 692.518236][T15851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 692.557846][T15851] hsr_slave_0: entered promiscuous mode [ 692.566792][T15851] hsr_slave_1: entered promiscuous mode [ 692.574233][T15851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 692.583514][T15851] Cannot create hsr debugfs directory [ 694.057535][ T5840] Bluetooth: hci5: command tx timeout [ 696.128358][ T5840] Bluetooth: hci5: command tx timeout [ 698.207618][ T5840] Bluetooth: hci5: command tx timeout [ 700.287362][ T5840] Bluetooth: hci5: command tx timeout [ 708.002950][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 708.016972][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 708.028077][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 708.041772][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 708.051524][ T5851] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 708.061573][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 708.189849][T15867] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 708.213421][T15862] chnl_net:caif_netlink_parms(): no params data found [ 708.277038][T15862] bridge0: port 1(bridge_slave_0) entered blocking state [ 708.285800][T15862] bridge0: port 1(bridge_slave_0) entered disabled state [ 708.296262][T15862] bridge_slave_0: entered allmulticast mode [ 708.304828][T15862] bridge_slave_0: entered promiscuous mode [ 708.314826][T15862] bridge0: port 2(bridge_slave_1) entered blocking state [ 708.323582][T15862] bridge0: port 2(bridge_slave_1) entered disabled state [ 708.333046][T15862] bridge_slave_1: entered allmulticast mode [ 708.341661][T15862] bridge_slave_1: entered promiscuous mode [ 708.373170][T15862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 708.387540][T15862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 708.420284][T15862] team0: Port device team_slave_0 added [ 708.431614][T15862] team0: Port device team_slave_1 added [ 708.460852][T15862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 708.470986][T15862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.502343][T15862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 708.517157][T15862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 708.525575][T15862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 708.558103][T15862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 708.602273][T15862] hsr_slave_0: entered promiscuous mode [ 708.610467][T15862] hsr_slave_1: entered promiscuous mode [ 708.618394][T15862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 708.628230][T15862] Cannot create hsr debugfs directory [ 710.128332][ T5851] Bluetooth: hci6: command tx timeout [ 712.207507][ T5851] Bluetooth: hci6: command tx timeout [ 714.287529][ T5851] Bluetooth: hci6: command tx timeout [ 716.368320][ T5851] Bluetooth: hci6: command tx timeout [ 734.047444][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 752.040483][ T5840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 752.051602][ T5840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 752.061871][ T5840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 752.072812][ T5840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 752.085025][ T5840] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 752.094302][ T5840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 752.214870][T15882] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:3: corrupted in-inode xattr: bad magic number in in-inode xattr [ 752.240026][T15877] chnl_net:caif_netlink_parms(): no params data found [ 752.311209][T15877] bridge0: port 1(bridge_slave_0) entered blocking state [ 752.320294][T15877] bridge0: port 1(bridge_slave_0) entered disabled state [ 752.329977][T15877] bridge_slave_0: entered allmulticast mode [ 752.338316][T15877] bridge_slave_0: entered promiscuous mode [ 752.348734][T15877] bridge0: port 2(bridge_slave_1) entered blocking state [ 752.357428][T15877] bridge0: port 2(bridge_slave_1) entered disabled state [ 752.366297][T15877] bridge_slave_1: entered allmulticast mode [ 752.374896][T15877] bridge_slave_1: entered promiscuous mode [ 752.403573][T15877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 752.416928][T15877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 752.454834][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.460677][T15877] team0: Port device team_slave_0 added [ 752.464398][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 752.474621][T15877] team0: Port device team_slave_1 added [ 752.503972][T15877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 752.512484][T15877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.544475][T15877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 752.563335][T15877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 752.572668][T15877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 752.604084][T15877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 752.646809][T15877] hsr_slave_0: entered promiscuous mode [ 752.654338][T15877] hsr_slave_1: entered promiscuous mode [ 752.661829][T15877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 752.671851][T15877] Cannot create hsr debugfs directory [ 754.127569][T15886] Bluetooth: hci7: command tx timeout [ 754.527412][T15886] Bluetooth: hci2: command 0x0406 tx timeout [ 756.217501][ T5851] Bluetooth: hci7: command tx timeout [ 758.287609][ T5851] Bluetooth: hci7: command tx timeout [ 760.367364][ T5851] Bluetooth: hci7: command tx timeout [ 768.547809][T15886] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 768.558901][T15886] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 768.569165][T15886] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 768.580935][T15886] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 768.592768][T15886] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 768.602157][T15886] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 768.737304][T15901] EXT4-fs error (device sda1): ext4_xattr_ibody_get:653: inode #1251: comm kworker/u8:23: corrupted in-inode xattr: bad magic number in in-inode xattr [ 768.762261][T15896] chnl_net:caif_netlink_parms(): no params data found [ 768.834755][T15896] bridge0: port 1(bridge_slave_0) entered blocking state [ 768.843409][T15896] bridge0: port 1(bridge_slave_0) entered disabled state [ 768.853578][T15896] bridge_slave_0: entered allmulticast mode [ 768.863258][T15896] bridge_slave_0: entered promiscuous mode [ 768.872599][T15896] bridge0: port 2(bridge_slave_1) entered blocking state [ 768.881468][T15896] bridge0: port 2(bridge_slave_1) entered disabled state [ 768.890202][T15896] bridge_slave_1: entered allmulticast mode [ 768.898585][T15896] bridge_slave_1: entered promiscuous mode [ 768.927607][T15896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 768.941689][T15896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 768.979209][T15896] team0: Port device team_slave_0 added [ 768.989402][T15896] team0: Port device team_slave_1 added [ 769.017154][T15896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 769.026119][T15896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.058550][T15896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 769.073309][T15896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 769.082063][T15896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 769.113561][T15896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 769.155548][T15896] hsr_slave_0: entered promiscuous mode [ 769.163591][T15896] hsr_slave_1: entered promiscuous mode [ 769.171351][T15896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 769.181006][T15896] Cannot create hsr debugfs directory [ 770.687634][ T5851] Bluetooth: hci8: command tx timeout [ 772.767498][ T5851] Bluetooth: hci8: command tx timeout [ 774.847472][T15886] Bluetooth: hci8: command tx timeout [ 775.007418][T15886] Bluetooth: hci3: command 0x0406 tx timeout [ 776.937517][ T5851] Bluetooth: hci8: command tx timeout [ 778.048364][ T32] INFO: task kworker/u8:22:10645 blocked for more than 143 seconds. [ 778.058180][ T32] Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 778.068903][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 778.079672][ T32] task:kworker/u8:22 state:D stack:23680 pid:10645 tgid:10645 ppid:2 task_flags:0x4208160 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 778.094332][ T32] Workqueue: netns cleanup_net [ 778.107510][ T32] Call Trace: [ 778.111488][ T32] [ 778.115037][ T32] __schedule+0xf43/0x5890 [ 778.126549][ T32] ? __pfx___lock_acquire+0x10/0x10 [ 778.135852][ T32] ? __switch_to+0x749/0x1190 [ 778.155121][ T32] ? __pfx___schedule+0x10/0x10 [ 778.161932][ T32] ? schedule+0x298/0x350 [ 778.167173][ T32] ? __pfx_lock_release+0x10/0x10 [ 778.183469][ T32] ? lock_acquire+0x2f/0xb0 [ 778.197283][ T32] ? schedule+0x1fd/0x350 [ 778.202545][ T32] schedule+0xe7/0x350 [ 778.222514][ T32] schedule_timeout+0x244/0x280 [ 778.236170][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 778.242902][ T32] ? preempt_schedule_thunk+0x1a/0x30 [ 778.257299][ T32] __wait_for_common+0x3e1/0x600 [ 778.263292][ T32] ? __pfx_schedule_timeout+0x10/0x10 [ 778.271436][ T32] ? __pfx___wait_for_common+0x10/0x10 [ 778.278271][ T32] remove_one+0x30f/0x420 [ 778.283618][ T32] ? __pfx_remove_one+0x10/0x10 [ 778.289576][ T32] simple_recursive_removal+0x4e2/0x8e0 [ 778.296265][ T32] ? __pfx_remove_one+0x10/0x10 [ 778.302367][ T32] debugfs_remove+0x5d/0x80 [ 778.307872][ T32] nsim_dev_health_exit+0x3b/0xe0 [ 778.313930][ T32] nsim_dev_reload_destroy+0x143/0x4d0 [ 778.320645][ T32] nsim_dev_reload_down+0x6e/0xd0 [ 778.326762][ T32] devlink_reload+0x19a/0x7c0 [ 778.332518][ T32] ? __pfx_devlink_reload+0x10/0x10 [ 778.383938][ T32] ? devlinks_xa_find_get+0x39/0x260 [ 778.409621][ T32] devlink_pernet_pre_exit+0x1a1/0x2b0 [ 778.416252][ T32] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 778.448546][ T32] ? up_write+0x1b2/0x520 [ 778.453840][ T32] ? kobject_put+0xab/0x5a0 [ 778.475264][ T32] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 778.499327][ T32] cleanup_net+0x497/0xb30 [ 778.504789][ T32] ? __pfx_cleanup_net+0x10/0x10 [ 778.527239][ T32] ? lock_acquire+0x2f/0xb0 [ 778.532706][ T32] ? process_one_work+0x921/0x1ba0 [ 778.567263][ T32] process_one_work+0x9c5/0x1ba0 [ 778.573279][ T32] ? __pfx_batadv_nc_worker+0x10/0x10 [ 778.607238][ T32] ? __pfx_process_one_work+0x10/0x10 [ 778.613785][ T32] ? assign_work+0x1a0/0x250 [ 778.647293][ T32] worker_thread+0x6c8/0xf00 [ 778.653014][ T32] ? __pfx_worker_thread+0x10/0x10 [ 778.673115][ T32] kthread+0x3af/0x750 [ 778.693269][ T32] ? __pfx_kthread+0x10/0x10 [ 778.699074][ T32] ? lock_acquire+0x2f/0xb0 [ 778.704527][ T32] ? __pfx_kthread+0x10/0x10 [ 778.710255][ T32] ret_from_fork+0x45/0x80 [ 778.715596][ T32] ? __pfx_kthread+0x10/0x10 [ 778.721210][ T32] ret_from_fork_asm+0x1a/0x30 [ 778.726980][ T32] [ 778.735370][ T32] INFO: task syz-executor:15555 blocked for more than 144 seconds. [ 778.745188][ T32] Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 778.754457][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 778.764943][ T32] task:syz-executor state:D stack:23840 pid:15555 tgid:15555 ppid:1 task_flags:0x400140 flags:0x00000004 [ 778.779940][ T32] Call Trace: [ 778.784421][ T32] [ 778.788359][ T32] __schedule+0xf43/0x5890 [ 778.793694][ T32] ? __pfx___lock_acquire+0x10/0x10 [ 778.800423][ T32] ? __pfx___lock_acquire+0x10/0x10 [ 778.806729][ T32] ? __pfx___schedule+0x10/0x10 [ 778.813046][ T32] ? schedule+0x298/0x350 [ 778.818622][ T32] ? __pfx_lock_release+0x10/0x10 [ 778.824699][ T32] ? __mutex_trylock_common+0x78/0x250 [ 778.831779][ T32] ? lock_acquire+0x2f/0xb0 [ 778.847728][ T32] ? schedule+0x1fd/0x350 [ 778.852978][ T32] schedule+0xe7/0x350 [ 778.867303][ T32] schedule_preempt_disabled+0x13/0x30 [ 778.873920][ T32] __mutex_lock+0x6bd/0xb10 [ 778.894731][ T32] ? device_del+0xa1/0x9f0 [ 778.908050][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 778.914232][ T32] ? __pfx_lock_release+0x10/0x10 [ 778.927505][ T32] ? mark_held_locks+0x9f/0xe0 [ 778.933285][ T32] ? device_del+0xa1/0x9f0 [ 778.955883][ T32] ? ida_free+0x204/0x2f0 [ 778.962136][ T32] device_del+0xa1/0x9f0 [ 778.967402][ T32] ? __pfx_ida_free+0x10/0x10 [ 778.973052][ T32] ? __pfx_device_del+0x10/0x10 [ 778.978978][ T32] device_unregister+0x1d/0xc0 [ 778.984714][ T32] del_device_store+0x346/0x4b0 [ 778.991420][ T32] ? __pfx_del_device_store+0x10/0x10 [ 778.997976][ T32] ? rcu_is_watching+0x12/0xc0 [ 779.003725][ T32] ? __pfx_del_device_store+0x10/0x10 [ 779.010524][ T32] bus_attr_store+0x71/0xb0 [ 779.016066][ T32] ? __pfx_bus_attr_store+0x10/0x10 [ 779.027047][ T32] sysfs_kf_write+0x117/0x170 [ 779.036679][ T32] kernfs_fop_write_iter+0x33d/0x500 [ 779.043438][ T32] ? __pfx_sysfs_kf_write+0x10/0x10 [ 779.050451][ T32] vfs_write+0x5ae/0x1150 [ 779.055702][ T32] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 779.062775][ T32] ? __pfx_vfs_write+0x10/0x10 [ 779.069480][ T32] ? __pfx_do_sys_openat2+0x10/0x10 [ 779.075753][ T32] ? __pfx_lock_release+0x10/0x10 [ 779.081847][ T32] ksys_write+0x12b/0x250 [ 779.087040][ T32] ? __pfx_ksys_write+0x10/0x10 [ 779.093770][ T32] do_syscall_64+0xcd/0x250 [ 779.099268][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.106374][ T32] RIP: 0033:0x7f127b98bc1f [ 779.111748][ T32] RSP: 002b:00007ffdb0a514a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 779.122054][ T32] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f127b98bc1f [ 779.131737][ T32] RDX: 0000000000000001 RSI: 00007ffdb0a514f0 RDI: 0000000000000005 [ 779.141366][ T32] RBP: 00007f127ba0f4fd R08: 0000000000000000 R09: 00007ffdb0a512f7 [ 779.151035][ T32] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 779.160710][ T32] R13: 00007ffdb0a514f0 R14: 00007f127c6d4620 R15: 0000000000000003 [ 779.170672][ T32] [ 779.176820][ T32] INFO: task syz.4.2350:15573 blocked for more than 144 seconds. [ 779.187458][ T32] Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 779.208659][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 779.230569][ T32] task:syz.4.2350 state:D stack:25360 pid:15573 tgid:15571 ppid:9159 task_flags:0x400140 flags:0x00000004 [ 779.254648][ T32] Call Trace: [ 779.258781][ T32] [ 779.262334][ T32] __schedule+0xf43/0x5890 [ 779.267828][ T32] ? __pfx___lock_acquire+0x10/0x10 [ 779.274134][ T32] ? __pfx___lock_acquire+0x10/0x10 [ 779.280528][ T32] ? __pfx___schedule+0x10/0x10 [ 779.286409][ T32] ? schedule+0x298/0x350 [ 779.291891][ T32] ? __pfx_lock_release+0x10/0x10 [ 779.299095][ T32] ? __mutex_trylock_common+0x78/0x250 [ 779.305725][ T32] ? lock_acquire+0x2f/0xb0 [ 779.311301][ T32] ? schedule+0x1fd/0x350 [ 779.316563][ T32] schedule+0xe7/0x350 [ 779.321822][ T32] schedule_preempt_disabled+0x13/0x30 [ 779.328890][ T32] __mutex_lock+0x6bd/0xb10 [ 779.334354][ T32] ? devlink_health_report+0x3c5/0x9d0 [ 779.341450][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 779.347859][ T32] ? find_held_lock+0x2d/0x110 [ 779.353616][ T32] ? __might_fault+0x13b/0x190 [ 779.359749][ T32] ? __pfx_lock_release+0x10/0x10 [ 779.365871][ T32] ? devlink_health_report+0x3c5/0x9d0 [ 779.372601][ T32] devlink_health_report+0x3c5/0x9d0 [ 779.379071][ T32] ? __pfx_devlink_health_report+0x10/0x10 [ 779.386314][ T32] ? _copy_from_user+0x59/0xd0 [ 779.392897][ T32] nsim_dev_health_break_write+0x167/0x210 [ 779.400366][ T32] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 779.408341][ T32] ? rcu_is_watching+0x12/0xc0 [ 779.414177][ T32] ? trace_lock_acquire+0x14e/0x1f0 [ 779.420589][ T32] full_proxy_write+0x13c/0x200 [ 779.426471][ T32] ? __pfx_full_proxy_write+0x10/0x10 [ 779.433019][ T32] vfs_write+0x24c/0x1150 [ 779.438391][ T32] ? __fget_files+0x1fc/0x3a0 [ 779.444083][ T32] ? __pfx___mutex_lock+0x10/0x10 [ 779.450292][ T32] ? __pfx_vfs_write+0x10/0x10 [ 779.456072][ T32] ? __fget_files+0x206/0x3a0 [ 779.461857][ T32] ksys_write+0x12b/0x250 [ 779.467106][ T32] ? __pfx_ksys_write+0x10/0x10 [ 779.473109][ T32] do_syscall_64+0xcd/0x250 [ 779.478744][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 779.485872][ T32] RIP: 0033:0x7f600638d169 [ 779.491488][ T32] RSP: 002b:00007f60071a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 779.501969][ T32] RAX: ffffffffffffffda RBX: 00007f60065a5fa0 RCX: 00007f600638d169 [ 779.511691][ T32] RDX: 00000000000000ef RSI: 0000000000000000 RDI: 0000000000000008 [ 779.521377][ T32] RBP: 00007f600640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 779.531067][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 779.540799][ T32] R13: 0000000000000000 R14: 00007f60065a5fa0 R15: 00007ffd3441a968 [ 779.550534][ T32] [ 779.554215][ T32] [ 779.554215][ T32] Showing all locks held in the system: [ 779.564814][ T32] 1 lock held by khungtaskd/32: [ 779.571194][ T32] #0: ffffffff8e1bd140 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 779.583469][ T32] 2 locks held by kworker/u8:3/54: [ 779.595580][ T32] 3 locks held by kworker/u8:16/10636: [ 779.603243][ T32] #0: ffff88801b089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 779.616975][ T32] #1: ffffc900040e7d18 ((linkwatch_work).work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 779.629519][ T32] #2: ffffffff8fefa268 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0x51/0xc0 [ 779.640514][ T32] 6 locks held by kworker/u8:22/10645: [ 779.647092][ T32] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 779.660530][ T32] #1: ffffc90003d3fd18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 779.672591][ T32] #2: ffffffff8fee4550 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xb30 [ 779.683852][ T32] #3: ffff88807b1320e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12d/0x2b0 [ 779.695964][ T32] #4: ffff88807b133250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x137/0x2b0 [ 779.709209][ T32] #5: ffff8880781ca4f0 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: simple_recursive_removal+0x2f5/0x8e0 [ 779.723197][ T32] 2 locks held by syz-executor/11247: [ 779.737233][ T32] #0: ffffffff8fefa268 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 779.749275][ T32] #1: ffffffff8e1c85b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 779.761506][ T32] 2 locks held by getty/12988: [ 779.768105][ T32] #0: ffff8880354820a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 779.779917][ T32] #1: ffffc9000fcdb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 779.792183][ T32] 1 lock held by syz-executor/15266: [ 779.798644][ T32] #0: ffffffff8fefa268 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x38/0x230 [ 779.811754][ T32] 5 locks held by syz-executor/15555: [ 779.818412][ T32] #0: ffff888035986420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 779.829419][ T32] #1: ffff888027311c88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 779.841275][ T32] #2: ffff88814477a878 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 779.853413][ T32] #3: ffffffff8f4a4a48 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd2/0x4b0 [ 779.865850][ T32] #4: ffff88807b1320e8 (&dev->mutex){....}-{4:4}, at: device_del+0xa1/0x9f0 [ 779.876524][ T32] 3 locks held by syz.4.2350/15573: [ 779.883611][ T32] #0: ffff888032aef438 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 779.895440][ T32] #1: ffff88801ead0420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 779.906760][ T32] #2: ffff88807b133250 (&devlink->lock_key#4){+.+.}-{4:4}, at: devlink_health_report+0x3c5/0x9d0 [ 779.920779][ T32] 4 locks held by syz-executor/15654: [ 779.927343][ T32] #0: ffff888035986420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 779.939280][ T32] #1: ffff88805d88fc88 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 779.951131][ T32] #2: ffff88814477a878 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 779.963911][ T32] #3: ffffffff8f4a4a48 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd2/0x4b0 [ 779.976731][ T32] 4 locks held by syz-executor/15851: [ 779.983398][ T32] #0: ffff888035986420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 779.994408][ T32] #1: ffff888143329888 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 780.006239][ T32] #2: ffff88814477a878 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 780.019158][ T32] #3: ffffffff8f4a4a48 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd2/0x4b0 [ 780.031824][ T32] 4 locks held by syz-executor/15862: [ 780.038388][ T32] #0: ffff888035986420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 780.049492][ T32] #1: ffff88807d947088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 780.061431][ T32] #2: ffff88814477a878 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 780.073612][ T32] #3: ffffffff8f4a4a48 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd2/0x4b0 [ 780.086156][ T32] 4 locks held by syz-executor/15877: [ 780.092636][ T32] #0: ffff888035986420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 780.103526][ T32] #1: ffff88807c4b2088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 780.115503][ T32] #2: ffff88814477a878 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 780.127916][ T32] #3: ffffffff8f4a4a48 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd2/0x4b0 [ 780.140406][ T32] 4 locks held by syz-executor/15896: [ 780.146878][ T32] #0: ffff888035986420 (sb_writers#8){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 780.157795][ T32] #1: ffff888049bd8088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x27b/0x500 [ 780.169616][ T32] #2: ffff88814477a878 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x29e/0x500 [ 780.181753][ T32] #3: ffffffff8f4a4a48 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd2/0x4b0 [ 780.194273][ T32] [ 780.197229][ T32] ============================================= [ 780.197229][ T32] [ 780.207888][ T32] NMI backtrace for cpu 1 [ 780.207905][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 780.207935][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 780.207952][ T32] Call Trace: [ 780.207960][ T32] [ 780.207971][ T32] dump_stack_lvl+0x116/0x1f0 [ 780.208024][ T32] nmi_cpu_backtrace+0x27b/0x390 [ 780.208057][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 780.208098][ T32] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 780.208134][ T32] watchdog+0xf62/0x12b0 [ 780.208183][ T32] ? __pfx_watchdog+0x10/0x10 [ 780.208224][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 780.208265][ T32] ? __kthread_parkme+0x148/0x220 [ 780.208296][ T32] ? __pfx_watchdog+0x10/0x10 [ 780.208343][ T32] kthread+0x3af/0x750 [ 780.208379][ T32] ? __pfx_kthread+0x10/0x10 [ 780.208417][ T32] ? __pfx_kthread+0x10/0x10 [ 780.208450][ T32] ret_from_fork+0x45/0x80 [ 780.208486][ T32] ? __pfx_kthread+0x10/0x10 [ 780.208520][ T32] ret_from_fork_asm+0x1a/0x30 [ 780.208566][ T32] [ 780.208578][ T32] Sending NMI from CPU 1 to CPUs 0: [ 780.345741][ C0] NMI backtrace for cpu 0 [ 780.345756][ C0] CPU: 0 UID: 0 PID: 10638 Comm: kworker/u8:18 Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 780.345782][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 780.345797][ C0] Workqueue: bat_events batadv_nc_worker [ 780.345834][ C0] RIP: 0010:__lock_acquire+0x263/0x3c40 [ 780.345867][ C0] Code: 41 0f b7 56 20 8b 7c 24 20 81 e2 ff 1f 00 00 39 fa 75 0c 48 83 7c 24 10 00 0f 85 36 0d 00 00 48 8b 44 24 28 44 0f b7 74 24 20 <49> 01 c7 49 8d 47 20 66 41 81 e6 ff 1f 48 89 c2 48 89 44 24 38 48 [ 780.345887][ C0] RSP: 0018:ffffc90003ed7868 EFLAGS: 00000093 [ 780.345903][ C0] RAX: ffff88807a22c6f0 RBX: 0000000000000000 RCX: 0000000000000000 [ 780.345917][ C0] RDX: 0000000000000754 RSI: 1ffff1100f4458e7 RDI: 0000000000000756 [ 780.345931][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 780.345944][ C0] R10: 000000000000000a R11: 0000000000000002 R12: ffff8880662f9598 [ 780.345959][ C0] R13: ffff88807a22bc00 R14: 0000000000000756 R15: 0000000000000050 [ 780.345973][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 780.345993][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 780.346007][ C0] CR2: 00007fffe3e2aff8 CR3: 00000000324c8000 CR4: 00000000003526f0 [ 780.346022][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 780.346034][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 780.346048][ C0] Call Trace: [ 780.346055][ C0] [ 780.346062][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 780.346104][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 780.346135][ C0] ? nmi_handle+0x1ac/0x5d0 [ 780.346168][ C0] ? __lock_acquire+0x263/0x3c40 [ 780.346205][ C0] ? default_do_nmi+0x6a/0x160 [ 780.346228][ C0] ? exc_nmi+0x170/0x1e0 [ 780.346250][ C0] ? end_repeat_nmi+0xf/0x53 [ 780.346287][ C0] ? __lock_acquire+0x263/0x3c40 [ 780.346319][ C0] ? __lock_acquire+0x263/0x3c40 [ 780.346350][ C0] ? __lock_acquire+0x263/0x3c40 [ 780.346381][ C0] [ 780.346389][ C0] [ 780.346400][ C0] ? hlock_class+0x4e/0x130 [ 780.346423][ C0] ? mark_lock+0xb5/0xc60 [ 780.346453][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 780.346485][ C0] ? __pfx_mark_lock+0x10/0x10 [ 780.346517][ C0] lock_acquire.part.0+0x11b/0x380 [ 780.346549][ C0] ? batadv_nc_purge_paths+0xca/0x390 [ 780.346585][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 780.346617][ C0] ? rcu_is_watching+0x12/0xc0 [ 780.346641][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 780.346667][ C0] ? batadv_nc_purge_paths+0xca/0x390 [ 780.346705][ C0] ? lock_acquire+0x2f/0xb0 [ 780.346735][ C0] ? batadv_nc_purge_paths+0xca/0x390 [ 780.346770][ C0] ? __pfx_batadv_nc_to_purge_nc_path_decoding+0x10/0x10 [ 780.346808][ C0] _raw_spin_lock_bh+0x33/0x40 [ 780.346833][ C0] ? batadv_nc_purge_paths+0xca/0x390 [ 780.346867][ C0] batadv_nc_purge_paths+0xca/0x390 [ 780.346905][ C0] batadv_nc_worker+0x94a/0x1060 [ 780.346943][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 780.346979][ C0] ? rcu_is_watching+0x12/0xc0 [ 780.347002][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 780.347028][ C0] ? process_one_work+0x921/0x1ba0 [ 780.347060][ C0] ? lock_acquire+0x2f/0xb0 [ 780.347090][ C0] ? process_one_work+0x921/0x1ba0 [ 780.347122][ C0] process_one_work+0x9c5/0x1ba0 [ 780.347156][ C0] ? __pfx_batadv_nc_worker+0x10/0x10 [ 780.347193][ C0] ? __pfx_process_one_work+0x10/0x10 [ 780.347239][ C0] ? assign_work+0x1a0/0x250 [ 780.347274][ C0] worker_thread+0x6c8/0xf00 [ 780.347316][ C0] ? __pfx_worker_thread+0x10/0x10 [ 780.347354][ C0] kthread+0x3af/0x750 [ 780.347396][ C0] ? __pfx_kthread+0x10/0x10 [ 780.347422][ C0] ? lock_acquire+0x2f/0xb0 [ 780.347453][ C0] ? __pfx_kthread+0x10/0x10 [ 780.347478][ C0] ret_from_fork+0x45/0x80 [ 780.347507][ C0] ? __pfx_kthread+0x10/0x10 [ 780.347532][ C0] ret_from_fork_asm+0x1a/0x30 [ 780.347562][ C0] [ 780.348647][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 780.348667][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted 6.14.0-rc6-syzkaller-00253-gcb82ca153949 #0 [ 780.348702][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 780.348720][ T32] Call Trace: [ 780.348730][ T32] [ 780.348742][ T32] dump_stack_lvl+0x3d/0x1f0 [ 780.348787][ T32] panic+0x71d/0x800 [ 780.348821][ T32] ? __pfx_panic+0x10/0x10 [ 780.348854][ T32] ? preempt_schedule_thunk+0x1a/0x30 [ 780.348898][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 780.348939][ T32] ? preempt_schedule_thunk+0x1a/0x30 [ 780.348987][ T32] ? watchdog+0xdcc/0x12b0 [ 780.349033][ T32] ? watchdog+0xdbf/0x12b0 [ 780.349082][ T32] watchdog+0xddd/0x12b0 [ 780.349132][ T32] ? __pfx_watchdog+0x10/0x10 [ 780.349176][ T32] ? lockdep_hardirqs_on+0x7c/0x110 [ 780.349217][ T32] ? __kthread_parkme+0x148/0x220 [ 780.349249][ T32] ? __pfx_watchdog+0x10/0x10 [ 780.349295][ T32] kthread+0x3af/0x750 [ 780.349334][ T32] ? __pfx_kthread+0x10/0x10 [ 780.349378][ T32] ? __pfx_kthread+0x10/0x10 [ 780.349416][ T32] ret_from_fork+0x45/0x80 [ 780.349455][ T32] ? __pfx_kthread+0x10/0x10 [ 780.349490][ T32] ret_from_fork_asm+0x1a/0x30 [ 780.349536][ T32] [ 780.956980][ T32] Kernel Offset: disabled [ 780.962160][ T32] Rebooting in 86400 seconds..