last executing test programs: 7.668056104s ago: executing program 1 (id=595): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r1 = socket(0x23, 0x5, 0x0) connect$auto(r1, &(0x7f00000018c0)=@phonet={0x23, 0x65, 0xd3, 0x5}, 0x55) r2 = socket(0x2, 0x3, 0x100) bind$auto(r2, &(0x7f0000000080)=@in={0x2, 0x4e23, @multicast2}, 0x7b) r3 = openat$auto_proc_setgroups_operations_base(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/self/setgroups\x00', 0x183200, 0x0) pread64$auto(r3, &(0x7f0000000400)=']}%\x00', 0x4, 0x5) madvise$auto(0x0, 0x8000000000000000, 0x15) openat$auto_proc_gid_map_operations_base(0xffffffffffffff9c, &(0x7f0000001480)='/proc/thread-self/gid_map\x00', 0x0, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x5ff4, 0x1) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x142, 0x1c7) move_mount$auto(r4, 0x0, 0xffffffffffffffff, 0x0, 0x6) madvise$auto(0x0, 0xffffffffffff0005, 0x17) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/video2\x00', 0x80000, 0x0) mmap$auto(0x0, 0xff, 0x3, 0x8000000000018, r0, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x200000000101, 0x7fd, 0x200004) socket(0x1e, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000380)={0x8, 0x6, 0x1ff, 0x7, 0x8, 0x4909b6f8, 0x1ffdf, 0x9, 0x200003, 0x2, 0xa121, 0x3, 0x0, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0xfffffffffffffffd, 0x50100000000000, 0x6, 0x2000, 0x0, 0x6, 0x70624ce7, 0x0, 0x94cf, 0xfffffffffffffffd, 0x0, 0x80000, 0x5, 0x7ff, 0xffffffffffffbfff, 0xfffffffffffffffd, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff, 0x4, 0x5, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0xfffffffffffffffc, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0xc, 0xa38, 0x9, 0x3, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x8000], "0a5d23e26642a40691a58432f805dd2b8efa0b2972bba087ce06d30bd77b00bed80631cedfaff54298f5c1b2a367ca74eef2196309507e1da5a8bfae1fb6a6ef992854420892c7af3308702a269f3599728f6d326501d9d99b4bbc7845da6149463bb21b6fe386dbb883ddfd5b3e179d0439e0da1b46a276ea893935d0582a51e219b79309549e893871b9b5d94f62cf07a4f1df1c19bbc829ff44f82be5f0b5253f649f556d833465d8ab242c8076a57b9d0da565b77d7b0485c4"}, 0x1fe, 0xe) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000040)={0x0, 0xfc2}, 0x87, &(0x7f0000000100)="21840a80226d0f1e365d414501f75c98129d4f09cf4738506403000000750d345ff8753468ea8b8d6f6aba29983214b3b7fcd1e62400fe5c955d6a20da5e1916ed0b3d1016de0a36", 0xb, 0xa505}, 0x800}, 0x7, 0x4008) setdomainname$auto(0x0, 0x551) close_range$auto(0x2, 0x8, 0x0) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) 7.03473431s ago: executing program 3 (id=597): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) (fail_nth: 3) 5.857554558s ago: executing program 0 (id=598): r0 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x8000000000000001, 0x2, 0x1) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x804}, 0x3400c004) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x103, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) write$auto(r1, &(0x7f0000000000)='+@*#\x00', 0x1) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb0800) mmap$auto(0x0, 0x40009, 0xdf, 0x74, 0x7, 0x0) write$auto(0x3, 0x0, 0x7fffffff) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket(0x2b, 0x1, 0x1) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x27, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x11000000, 0x0, 0x7, 0x200000006d3c, 0x5, 0x10, 0xfffffffffffffffd]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 5.85720483s ago: executing program 3 (id=600): mmap$auto(0x0, 0xa846, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mtdblock0\x00', 0x10d441, 0x0) close_range$auto(0x2, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) getpeername$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103400, 0x0) preadv$auto(0x3, &(0x7f00000004c0)={0x0, 0x8000000}, 0x3, 0x10000, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x80}, @NETDEV_A_QUEUE_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 5.718898464s ago: executing program 1 (id=601): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x4, 0x8, 0x14, 0x401, 0x5efb) socket(0x6, 0x8080b, 0xfffffffd) select$auto(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000040)=ANY=[@ANYBLOB='J\x00\x00\x00', @ANYRES16, @ANYBLOB="010025bd7000fcdbdf25020000002c00018028003c8008001b"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x44) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_CTRL_CMD_GETPOLICY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x803, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000000140), r1) getpgrp(0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$auto(r2, 0x10f, 0x88, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4ea2, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x101}, 0x8}, 0x7, 0x20020000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) mmap$auto(0x0, 0x20000a, 0xffffffffffffffff, 0x20000040eb1, 0xffffffffffffffff, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) move_pages$auto(0x0, 0xd0, 0x0, &(0x7f0000001140), 0x0, 0x2) connect$auto(0x3, 0x0, 0x55) 5.320841541s ago: executing program 3 (id=603): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x802, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_ftrace_set_event_notrace_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_notrace_pid\x00', 0x40000, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/module/nvme/parameters/poll_queues\x00', 0x129001, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000040)='\t', 0x1) setrlimit$auto(0x1000000007, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/net/afs/cells\x00', 0x4a801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000040), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) socket(0x2, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) setsockopt$auto(0x3, 0x10000000084, 0x2, 0x0, 0x8) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1f, 0x3, 0x300000000000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2, 0x300000000000000]}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x1e, 0x1, 0x0) lseek$auto(0x3, 0x7fffffffffffffff, 0x0) 4.433402079s ago: executing program 0 (id=604): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x3, 0x0, 0xfffffffffffffffc, 0x696b}, 0xed7138c}, 0x2, 0x9) r0 = socket(0xa, 0x5, 0x84) sendto$auto(r0, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/sctp/assocs\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000001080)=""/4092, 0xffc) (fail_nth: 3) 3.25193369s ago: executing program 0 (id=606): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) r0 = open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xffffffffffffffff, 0x0) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) r1 = socket(0xa, 0x2, 0x73) write$auto_msr_fops_msr(r0, 0x0, 0x0) getsockname$auto(r1, &(0x7f0000000240), &(0x7f0000000280)=0xaea) fcntl$auto(0x0, 0x407, 0x100000) mlockall$auto(0x7) socket(0x2, 0x3, 0x5) keyctl$auto(0x1e, 0xfffffffffffffffc, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x1) r2 = socket(0x18, 0xa, 0x84) syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) socket(0x8, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) connect$auto(r2, 0x0, 0x52) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x48140, 0x0) ioctl$auto(0xffffffffffffffff, 0x545c, 0xffffffffffffffff) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) 3.250644951s ago: executing program 1 (id=607): mmap$auto(0x5, 0x2020009, 0x79, 0xeb1, 0xffffffffffffffff, 0x7ffd) r0 = prctl$auto(0x43f212bb, 0x3, 0x4, 0x3, 0x7) madvise$auto(0xffffffffffffffff, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x80000000, 0x15) r1 = open(&(0x7f0000000800)='./file0\x00', 0x1636c0, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r1, 0xa) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000140), 0x22180, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000180)={{0x3, 0x8, 0x9, 0x9, 0x1}, "0bcaf0d7be5ad64ce7a730bda993bc2372cc525b2ffb5d85cd8259cb37219246"}) pwrite64$auto(0xc8, &(0x7f00000003c0)='\vX\xb5n\x91p\xe6\x1eRN8\x99\b\x06e\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xb6\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xe5e\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#\x1c\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xaf\n1\x80\x1a\xbc_\xef\x8b\t\xcc\xa6\xf2\xc1\"\xact\xee\xc9\xc0\xad\xe2\x9cU\xfc\xdb%V\x99;I\xa9<\b\xc4\x04\x93\xeb\xc2}\xa4AR\x90\x9a~h\x1f\xf2}+\x0fFX', 0x2, 0x0) openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r3 = epoll_create$auto(0x3e) epoll_ctl$auto(r3, 0x1, 0x8000000000000000, 0x0) r4 = socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0xd42) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mlock$auto(0xfbe8, 0x4) mmap$auto(0x0, 0x400005, 0xdf, 0x1400000010, 0x2, 0x8000) r5 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0p\x00', 0x800000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x20004000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDRV_PCM_IOCTL_REWIND(r5, 0x40084146, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x3, 0x3a) sendto$auto(r2, 0x0, 0xf, 0xd, &(0x7f0000000080)=@sco={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x19) 3.000691961s ago: executing program 3 (id=608): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async) msgctl$auto(0x0, 0x3, 0x0) (async, rerun: 32) r0 = open(&(0x7f0000000140)='./file0/file0\x00', 0x0, 0x3) (rerun: 32) r1 = socket(0x10, 0x2, 0xf) bpf$auto(0x0, &(0x7f0000000080)=@bpf_attr_4={0x1e, r0, 0x9, r1}, 0x210) (async, rerun: 64) bpf$auto(0x1, &(0x7f0000000080)=@bpf_attr_3={0x5, 0x0, 0x702955be, 0x5c, 0x4, 0x9, 0x80, 0xe4, 0xfffff800, "0566c8ee7c78a925488276d7697a12bd", 0x0, 0x2, 0xffffffffffffffff, 0x7, 0x9, 0x4, 0x7, 0x10001, 0x0, 0x8001, @attach_prog_fd, 0x7e, 0x4, 0x1, 0x5}, 0x5) (async, rerun: 64) r2 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r2, 0x107, 0x12, 0x0, 0x4) (async) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x109903, 0x0) (async) setsockopt$auto(0x3, 0x107, 0x16, 0x0, 0x6) write$auto(0xffffffffffffffff, 0x0, 0xa3d9) (async) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) (async) unshare$auto(0x40000080) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) (async) r3 = open$auto(0x0, 0x49193, 0xff90) bind$auto(r1, &(0x7f0000000040)=@qipcrtr={0x2a, 0x0, 0xfffffffe}, 0x3) ioctl$auto_PPPIOCGFLAGS(r3, 0x8004745a, 0x0) (async) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) (async) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, 0x0, 0x40, 0x0) 2.914010316s ago: executing program 2 (id=609): write$auto(0xca, &(0x7f00000000c0)='\x04>2\x04!\xe2\x00\x94\xf2\xa2\x00\x00', 0x7e) getresuid$auto(0x0, 0x0, 0xfffffffffffffffc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x2009, 0x0, 0x5, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) sendmsg$auto_HANDSHAKE_CMD_DONE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x20048c10) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ffff"], 0x14}}, 0x4000808) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nbd15\x00', 0x14fc02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(r2, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) bpf$auto(0x0, 0x0, 0x6f3) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000080)={0x0, 0xfff}, 0x4800000001, &(0x7f0000000040)={&(0x7f0000000000), 0x200000004}, 0x59, 0x0) prctl$auto_PR_SET_MDWE(0x41, 0x8, r3, 0x5, 0xd) socket(0xa, 0x2, 0x88) mmap$auto(0xd, 0x400008, 0xdf, 0x80000010, 0xffffffffffffffff, 0x100) setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x28) r4 = fcntl$auto_F_SETLK(r2, 0x6, 0xffffffffffffffff) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r4, 0x1, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) 2.32687799s ago: executing program 1 (id=610): r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/lru_gen_full\x00', 0x48400, 0x0) writev$auto(r0, &(0x7f0000000100)={&(0x7f0000000140), 0x7111}, 0x400000000008) 1.947630564s ago: executing program 1 (id=611): mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) timer_create$auto(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_GET_STATION(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="00007788ea06f498c2772d00294d2486946127df5202a76ad680b101a6296a46cc00bd709918f37991c87c9eba6e41cdcb9270950ac14ec3aa89380e6a9c52b471af9ae06ff2935f7ce3f8eff36cfbe899506fbd65c2dbefec02117da848d13cca7b98e6df780e2bce86a0036491b822a57e1a43525fc5d68b5456088d6fc341b2900e237c89fd80e70b1aeb754c5bf30f996d2c465b1ff5533af4a6fce7cfe3e6ece6fff6a4788f793b0986291cfa85186fe55e92ec3e3be7126018739c15423cccaefd8e6e5c11190f3f8ebfc417e19dcc1b585dba6aa6568790dda61804c4b48fb8e49a3be965439dc01679fa1c65fc644cc9d1a145ab0f", @ANYRES16=0x0, @ANYBLOB="20002abd7000ffdbdf251100000005001e00f200000008000b0109000000"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x4c800) openat$auto_adf_ctl_ops_adf_ctl_drv(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) ioctl$auto(0x3, 0x80000541b, 0xffffffffffffffff) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040), 0x8001, 0x9}, 0x8}, 0x1, 0x9) close_range$auto(0x2, 0x8, 0x0) r1 = memfd_secret$auto(0x0) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) setresgid$auto(0x0, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$auto_MEMERASE(r1, 0x40084d02, &(0x7f0000000000)={0x9, 0x5}) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)={0x90, r3, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0xfffffffffffffd63, 0x3, 0xd4e}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x90}, 0x1, 0x0, 0x0, 0x24004840}, 0x4000000) shmctl$auto(0x756, 0x80000001, 0x0) r4 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r4, 0x0, 0x400c001) write$auto(r4, 0x0, 0x2fb) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0xa0600, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) 1.823156794s ago: executing program 2 (id=612): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)={0x34, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1c, 0x1, 0x0, 0x1, [@nested={0x18, 0x133, 0x0, 0x1, [@nested={0x4, 0x3b}, @typed={0x8, 0xb8, 0x0, 0x0, @uid}, @nested={0x8, 0x95, 0x0, 0x1, [@nested={0x4, 0xd2}]}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x200400d0) (fail_nth: 3) 1.659872858s ago: executing program 3 (id=613): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) socket(0x10, 0x80002, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x8000000000000001, 0x2, 0x1) sendmsg$auto_NL80211_CMD_GET_WIPHY(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="020000000000239e3f000004"], 0x18}, 0x1, 0x0, 0x0, 0x804}, 0x3400c004) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x103, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/rpc/auth.rpcsec.context/channel\x00', 0x101002, 0x0) write$auto(r1, &(0x7f0000000000)='+@*#\x00', 0x1) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x80006, 0x7, 0x20005) socket(0x2b, 0x1, 0x1) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400c7d2a2e1917949643de42b"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) recvmmsg$auto(0xffffffffffffffff, &(0x7f0000000580)={{0x0, 0x80000005, 0x0, 0xfffffffffffffffd, 0x0, 0x5, 0x80000001}}, 0x4, 0x6, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0xe0000, 0x0) read$auto(0x3, 0x0, 0x7d) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x27, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x11000000, 0x0, 0x7, 0x200000006d3c, 0x5, 0x10, 0xfffffffffffffffd]}, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.657250752s ago: executing program 2 (id=614): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x5, 0x8000) shmget$auto(0x8, 0x7ff, 0x1) r0 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f00000004c0), 0x2202, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_WRITE(r0, 0x40085503, &(0x7f0000000500)={0x8, 0xd745, 0x5}) r1 = openat$auto_xfs_dir_file_operations_xfs_file(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci1/rfkill6/power\x00', 0x10000, 0x0) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/ram8/inflight\x00', 0x22100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000003480)=""/247, 0xf7) r3 = fcntl$getown(0xffffffffffffffff, 0x9) dup2$auto(r0, r2) prctl$auto_PR_SET_MM_ENV_START(0x2, 0xa, r3, 0x62, 0x9) r4 = socket(0x21, 0x2, 0xa) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = socket(0x21, 0x2, 0xa) sendmsg$auto_MACSEC_CMD_ADD_TXSA(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={0x0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r6 = wait4$auto(r3, &(0x7f0000000200)=0x94, 0x1, &(0x7f0000000240)={{0x2, 0x1}, {0x40, 0x6}, 0x86ab, 0x7, 0x7, 0x4, 0x400, 0x9, 0x0, 0x0, 0xff, 0x2, 0x0, 0x3, 0x7688, 0xfffffffffffffffd}) pidfd_open$auto(r6, 0x9) getrusage$auto_RUSAGE_SELF(0x0, &(0x7f00000003c0)={{0x2, 0xb}, {0x1, 0x1}, 0x0, 0x200, 0x4, 0xfffffffffffffffd, 0xffffffffffffffff, 0xa, 0x696f, 0x0, 0x5, 0xf, 0x29d01118, 0x6, 0x24de, 0xd737}) ioctl$auto_XFS_IOC_FD_TO_HANDLE(r1, 0xc038586a, &(0x7f00000001c0)={r2, &(0x7f0000000040)="1abb155c95385c1dc8628148b5410ff22a64e1eb8c1b2c686816d8badce12764b4b6be0f9f6da3c1dcc8d962c1bd451f5bb2", 0x80000001, &(0x7f0000000080)="2ef3fd1d3b1e60bda365c6b3698e4beadcba329b9f4b09b4dd1fcc893c15759b431ae16093b87b143d38ff24955e88a9509a9ded3657354e2a7fc99668d8de42e093c4e18fdd19a1774f384daad67a410395b287e10db7ddb8a42f88173b9c3187ebf43b5e788f0b2debd6f1e93c2cdb1a9ef52f09f1dbc98481d5c95d68349893953a5c241e10b7c6d936", 0x1, &(0x7f0000000140)="24a55154017378ff17", &(0x7f0000000180)=0x80}) 1.575593923s ago: executing program 0 (id=615): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2020009, 0x3, 0x10eb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0xf000, 0x1, 0x1, 0x0, 0x7fff, 0x2) mmap$auto(0x0, 0x4, 0x6, 0xeb1, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x10, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = open(0x0, 0x163140, 0x2a) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000140), 0x382, 0x0) write$auto(0x3, 0x0, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000b80), 0xffffffffffffffff) r3 = geteuid() setreuid$auto(r3, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x144, r2, 0x1, 0x74bd29, 0x25dfdbfc, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x12c, 0x1, 0x0, 0x1, [@nested={0x125, 0x533, 0x0, 0x1, [@typed={0x8, 0xcb, 0x0, 0x0, @fd=r1}, @nested={0x91, 0xb4, 0x0, 0x1, [@generic="b1fdf262cd82bdac1da52751e695746de38eeaa7c8009c2dedf6533254d20e635a2aae1f21cc386ee6903966157faf451d30ef8779b8c70013f2795abcc34e85fec6ee3497c9827c241802985c51efed5d900afa48969722772e9a", @generic="dfd64ab322aed2905139947da5978249cf24ddccbb2bd2ec6731fd093b33d095c81e3197cdc40f8f81a5cd29b3e9", @typed={0x4, 0x102}]}, @generic="abdef113cebe5da61f756ff0da3bab7fd563e3a4f0ac462042e6cdca986562cd9360e63f82341e28b2c10d389baa8539aaf9ad6efb34e517a604f96c4bdb44924e5c035cfd4ddb8b6a9f2ca45a66ebfd71ba520c26789b16f4c73bb577e3e764671813c5225a2d64734b5d6fc783f6dad1ee7c8fa13f635738efb6b07cf36a73056d00ef30"]}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x20000000}, 0x200400d0) 1.308018866s ago: executing program 2 (id=616): write$auto(0xca, &(0x7f00000000c0)='\x04>2\x04!\xe2\x00\x94\xf2\xa2\x00\x00', 0x7e) getresuid$auto(0x0, 0x0, 0xfffffffffffffffc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket(0x10, 0x2, 0x0) r1 = syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x0) recvmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x2009, 0x0, 0x5, 0x0, 0x1, 0x4}, 0x4}, 0x10000, 0x300, 0x0) (fail_nth: 3) sendmsg$auto_HANDSHAKE_CMD_DONE(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x20048c10) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="ffff"], 0x14}}, 0x4000808) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/nbd15\x00', 0x14fc02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(r2, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) bpf$auto(0x0, 0x0, 0x6f3) r3 = getpid() process_vm_readv$auto(r3, &(0x7f0000000080)={0x0, 0xfff}, 0x4800000001, &(0x7f0000000040)={&(0x7f0000000000), 0x200000004}, 0x59, 0x0) prctl$auto_PR_SET_MDWE(0x41, 0x8, r3, 0x5, 0xd) socket(0xa, 0x2, 0x88) mmap$auto(0xd, 0x400008, 0xdf, 0x80000010, 0xffffffffffffffff, 0x100) setsockopt$auto(0x3, 0x0, 0x20, 0x0, 0x28) r4 = fcntl$auto_F_SETLK(r2, 0x6, 0xffffffffffffffff) ioctl$auto_SCSI_IOCTL_SEND_COMMAND2(r4, 0x1, 0x0) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) 646.224174ms ago: executing program 0 (id=617): r0 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x2a00, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x110) ioctl$auto(r0, 0x216b, r1) r2 = timerfd_create$auto(0x3, 0x6) write$auto_vga_arb_device_fops_vgaarb(r2, &(0x7f0000000080)="a3df688e89d477270f455bb6059976648a0c1314771e0371af3662539f09cd83c220a21a8b68be53ee57b84ecc8b7bcd568f702e7a2199445d6badd6d765a4514474bfae3740fb7cc55877886aafb3b1a02484e09fa57f2a76343e10c497743a72f88e2506b3eabb04e311e581e3589372338d4a2c85a0c33533b1d0528e223e05a74f543b0c8414a34bb220f362b6c95d48120668613504185628813e8d33e7c7e534bbb1b445ef431368094bb21460273007", 0xb3) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socketpair$auto(0x4, 0x10000, 0x5000, &(0x7f0000000140)=0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = memfd_create$auto(&(0x7f0000000180)='\xdc%]\x00', 0x6) r7 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f00000001c0), 0x103000, 0x0) r8 = io_uring_setup$auto(0x0, &(0x7f0000000200)={0x1, 0x6, 0x3, 0x7, 0x8, 0x5, r7, [0x6, 0xd89f, 0x4], {0xd0, 0x1ff, 0x8, 0x3, 0x9, 0x8, 0x10000, 0x10, 0x10000}, {0x4c64, 0x6, 0xffff, 0x4, 0x86, 0x1, 0x920a, 0x8c7, 0x3}}) sendfile$auto(r5, r7, &(0x7f0000000280)=0x9, 0x7ff) ioctl$auto(r0, 0x2, r3) ioctl$auto_I2C_RDWR(r6, 0x707, &(0x7f00000002c0)="c957f4df40af931e95ba64a9f39aded21b2c48ae9db4e60fcf9301d41e88f6e943fba33dd941734b345ecaa05aecaa3064f4953c58ac8dc063e17fe26c49a7f18ceae9aad64f284bfb7e4317704d8b7b36e1b4964ec675c2037eea0bb6bdc3dd91bf2d90943bc5aad823e62011905a458e6d825f4b0d") r9 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000380), r4) shmctl$auto_SHM_INFO(0x9e, 0xe, &(0x7f00000004c0)={{0x80000001, 0xee01, 0xee00, 0x80000001, 0x4195f4a2, 0x827, 0x2}, 0xc, 0x1, 0x2, 0x7ff, @raw=0x5, @inferred=0xffffffffffffffff, 0x2, 0x0, &(0x7f00000003c0)="f60bd400c1f7f1108ac0f17227dec509a6f91e46761432d1309cb3a557c9a104ba767c5129e98b7228f6f41eea2b441eb28a88c31c0119bf5d31af28044b", &(0x7f0000000400)="9dc2a5670864fa875cbf077f003cb6b8e2096e22ed0fd6ad403f45c5290bd732c2f42e7db6631b33646e8ad0eac9c3b6fbd92676cad69eddc8677b7ddba7b7e978dce68e3ca3d2bc3fc6c6122a5bf89069fcf0f1dfc4759a68ce1240e3dcc3659ff0bba232689c458f7dcd59453f78b80e3a230a584d70c6c52b8a50e9ee290143f9d434e4f009450ae1abde6cbdd93072"}) capget$auto(&(0x7f0000000540)={0x2, 0xffffffffffffffff}, &(0x7f0000000580)={0xffffff93, 0x7, 0x1}) sendmsg$auto_NBD_CMD_STATUS(0xffffffffffffffff, &(0x7f0000000780)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000740)={&(0x7f00000005c0)={0x16c, r9, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@NBD_ATTR_DEVICE_LIST={0x156, 0x9, 0x0, 0x1, [@typed={0x7c, 0x7e, 0x0, 0x0, @binary="edf910b5eb34d34d86dc9b5b29e6d66ab6c0ec1721a5a1f0722e6a4e96cc9436c9e967f0c4a7dd8acfdf2cce899895cb2966294f335322c0783f8d25753a4d6830be9f892b733db21d065c772d08bef6dcc2968ca59d735c5ada3d76c3984206512304912e945d1305ccfd9b3dc0f2ecb61fe83ce0a29c9a"}, @typed={0x8, 0x12d, 0x0, 0x0, @uid=r10}, @nested={0x10, 0x96, 0x0, 0x1, [@nested={0x4, 0x5b}, @typed={0x8, 0xb4, 0x0, 0x0, @pid=r11}]}, @generic="b2813bbf0bf417bdc536b10e30713dd6c85fac17708e02897564ac157006ae307529ec3eccb335689c70242d0d066e7d1df4a719188c9ec8ec5493808dc488cda373c038f32f42def9d92cf3a09c7974b5e2abdb092c75237605bd16499397344f5ca040549eb57f9c237d982a17e22b7d5bd1d99ba5a6b78aba08e5c76f96cb798a74909f01911d4694", @nested={0x33, 0x8f, 0x0, 0x1, [@typed={0x8, 0xcd, 0x0, 0x0, @ipv4=@remote}, @typed={0x8, 0x63, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x107}, @typed={0x9, 0x8f, 0x0, 0x0, @str='!-(+\x00'}, @nested={0x4, 0xa0}, @generic="7763919feea9ab", @nested={0x4, 0xd4}]}]}]}, 0x16c}}, 0x41) ioctl$auto_USBDEVFS_CLEAR_HALT(0xffffffffffffffff, 0x80045515, &(0x7f00000007c0)=0x6) pidfd_send_signal$auto_PIDFD_SIGNAL_THREAD_GROUP(0xffffffffffffffff, 0x6, &(0x7f0000000800)={@_si_pad}, 0x2) r12 = syz_genetlink_get_family_id$auto_ncsi(&(0x7f00000008c0), r4) sendmsg$auto_NCSI_CMD_PKG_INFO(r3, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x24, r12, 0x200, 0x70bd26, 0x25dfdbfe, {}, [@NCSI_ATTR_IFINDEX={0x8}, @NCSI_ATTR_PACKAGE_MASK={0x8, 0x7, 0xfffffffc}]}, 0x24}, 0x1, 0x0, 0x0, 0x40040}, 0x4000010) r13 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000a00), r5) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000a40)={'erspan0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_SET(r3, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x5c, r13, 0x20, 0x70bd2c, 0x25dfdbff, {}, [@ETHTOOL_A_MODULE_POWER_MODE_POLICY={0x5, 0x2, 0x3}, @ETHTOOL_A_MODULE_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x64f}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x149b69b72e009968) sync_file_range$auto(r4, 0xffffffffffffffff, 0x4, 0x1) ioctl$auto_TIOCSETD2(r7, 0x5423, &(0x7f0000000b80)="e7d0aba1ebede12a49b7dead068896f7b9b7b9e1770490843d8f4213d3eee9") r15 = openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000bc0)='/proc/thread-self/mountinfo\x00', 0x800, 0x0) sendto$auto(r15, &(0x7f0000000c00)="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", 0x1, 0xd, &(0x7f0000001c00)=@isdn={0x22, 0x2, 0x3, 0x1, 0x4}, 0x5) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001c40)='/dev/ttyS0\x00', 0x684400, 0x0) 243.910009ms ago: executing program 2 (id=618): mmap$auto(0x0, 0xa846, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mtdblock0\x00', 0x10d441, 0x0) close_range$auto(0x2, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) getpeername$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd14/queue/atomic_write_unit_max_bytes\x00', 0x103400, 0x0) preadv$auto(0x3, 0x0, 0x3, 0x10000, 0x10) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)={0x24, 0x0, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0x80}, @NETDEV_A_QUEUE_IFINDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x20004080) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB='X'], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 176.246452ms ago: executing program 1 (id=619): mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) r0 = socketpair$auto(0x4d2cf812, 0x5, 0x8001, 0x0) ioctl$auto_AUTOFS_IOC_FAIL(r0, 0x9361, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x82001400, 0x0, 0x0, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0xd60) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2000b, 0x10000000000df, 0xeb2, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40146f2c, 0x0) capget$auto(0x0, &(0x7f0000000240)={0x0, 0x5, 0x180000}) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x68200, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D1\x00', 0x1, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000080)={[0x1ff, 0xd5b, 0xc, 0x37, 0x948a, 0x1000000000002, 0x15f4da0a, 0x1, 0x3, 0x300000000000600, 0x40080000001, 0x7, 0x6d38, 0x2, 0x9]}, 0x0) 106.913825ms ago: executing program 2 (id=620): mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x0) r0 = socketpair$auto(0x4d2cf812, 0x5, 0x8001, 0x0) ioctl$auto_AUTOFS_IOC_FAIL(r0, 0x9361, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22040, 0x75) socket(0x840000000002, 0x3, 0xff) connect$auto(0xffffffffffffffff, 0x0, 0x55) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone(0x82001400, 0x0, 0x0, 0x0, 0x0, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) setsockopt$auto(0x3, 0x1, 0x2f, 0x0, 0xd60) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) mmap$auto(0x0, 0x2000b, 0x10000000000df, 0xeb2, 0x401, 0x8000) lsm_list_modules$auto(0x0, 0x0, 0x0) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x80100, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x40146f2c, 0x0) capget$auto(0x0, &(0x7f0000000240)={0x0, 0x5, 0x180000}) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x68200, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video15\x00', 0x180, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D1\x00', 0x1, 0x0) openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, 0x0, 0x20401, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000080)={[0x1ff, 0xd5b, 0xc, 0x37, 0x948a, 0x1000000000002, 0x15f4da0a, 0x1, 0x3, 0x300000000000600, 0x40080000001, 0x7, 0x6d38, 0x2, 0x9]}, 0x0) 57.869245ms ago: executing program 3 (id=621): mmap$auto(0x0, 0x402000b, 0xdf, 0xeb2, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/v4l-subdev5\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) (fail_nth: 3) 0s ago: executing program 0 (id=622): openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, 0x0, 0xa0600, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0xffffffffffff0005, 0x19) eventfd2$auto(0x3, 0x1) (fail_nth: 3) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.4' (ED25519) to the list of known hosts. [ 63.774480][ T5822] cgroup: Unknown subsys name 'net' [ 63.888096][ T5822] cgroup: Unknown subsys name 'cpuset' [ 63.896568][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 65.208390][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 67.246880][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 67.257707][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 67.265886][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 67.274786][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 67.282841][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 67.290922][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 67.299089][ T5839] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 67.306718][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 67.314236][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 67.316258][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 67.322759][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 67.330552][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 67.338871][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 67.350269][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 67.351113][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 67.360227][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 67.371412][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 67.383542][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 67.391022][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 67.399929][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 67.407218][ T5845] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 67.414636][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.422998][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 67.430605][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 67.721482][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 67.785342][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 67.868108][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 67.885836][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 67.982590][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.990329][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.998110][ T5835] bridge_slave_0: entered allmulticast mode [ 68.005092][ T5835] bridge_slave_0: entered promiscuous mode [ 68.029030][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.036249][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.043413][ T5835] bridge_slave_1: entered allmulticast mode [ 68.050809][ T5835] bridge_slave_1: entered promiscuous mode [ 68.073994][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.081514][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.088849][ T5831] bridge_slave_0: entered allmulticast mode [ 68.095924][ T5831] bridge_slave_0: entered promiscuous mode [ 68.124686][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.131869][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.139233][ T5831] bridge_slave_1: entered allmulticast mode [ 68.146368][ T5831] bridge_slave_1: entered promiscuous mode [ 68.166928][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.174042][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.181272][ T5840] bridge_slave_0: entered allmulticast mode [ 68.188203][ T5840] bridge_slave_0: entered promiscuous mode [ 68.198349][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 68.205663][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.212787][ T5832] bridge_slave_0: entered allmulticast mode [ 68.222255][ T5832] bridge_slave_0: entered promiscuous mode [ 68.239638][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.248975][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.256182][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.263331][ T5840] bridge_slave_1: entered allmulticast mode [ 68.272101][ T5840] bridge_slave_1: entered promiscuous mode [ 68.279058][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.286511][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.293654][ T5832] bridge_slave_1: entered allmulticast mode [ 68.300983][ T5832] bridge_slave_1: entered promiscuous mode [ 68.325459][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.350591][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.376068][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.393104][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.405636][ T5835] team0: Port device team_slave_0 added [ 68.422348][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.433617][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.445986][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.456630][ T5835] team0: Port device team_slave_1 added [ 68.472605][ T5832] team0: Port device team_slave_0 added [ 68.508460][ T5831] team0: Port device team_slave_0 added [ 68.516308][ T5832] team0: Port device team_slave_1 added [ 68.544217][ T5831] team0: Port device team_slave_1 added [ 68.558686][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.566026][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.592274][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.608209][ T5840] team0: Port device team_slave_0 added [ 68.615289][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.622253][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.648253][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.668574][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.676214][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.702289][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.715038][ T5840] team0: Port device team_slave_1 added [ 68.721313][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.728455][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.754814][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.808337][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.817922][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.844421][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.857097][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.864057][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.890382][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.904096][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.911194][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.937671][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 68.963023][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 68.970064][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 68.996102][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.040981][ T5832] hsr_slave_0: entered promiscuous mode [ 69.047597][ T5832] hsr_slave_1: entered promiscuous mode [ 69.063199][ T5835] hsr_slave_0: entered promiscuous mode [ 69.069354][ T5835] hsr_slave_1: entered promiscuous mode [ 69.076269][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.084068][ T5835] Cannot create hsr debugfs directory [ 69.110732][ T5831] hsr_slave_0: entered promiscuous mode [ 69.117286][ T5831] hsr_slave_1: entered promiscuous mode [ 69.123189][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.131756][ T5831] Cannot create hsr debugfs directory [ 69.163651][ T5840] hsr_slave_0: entered promiscuous mode [ 69.169858][ T5840] hsr_slave_1: entered promiscuous mode [ 69.176294][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.183876][ T5840] Cannot create hsr debugfs directory [ 69.346345][ T5843] Bluetooth: hci0: command tx timeout [ 69.434701][ T5843] Bluetooth: hci2: command tx timeout [ 69.491647][ T5832] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 69.504998][ T5843] Bluetooth: hci3: command tx timeout [ 69.509070][ T54] Bluetooth: hci1: command tx timeout [ 69.520404][ T5832] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 69.535020][ T5832] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 69.549654][ T5832] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 69.559519][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.570864][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 69.581848][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 69.600245][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 69.652757][ T5831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 69.663482][ T5831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 69.688019][ T5831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 69.699628][ T5831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 69.764957][ T5840] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 69.774144][ T5840] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 69.787971][ T5840] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 69.813492][ T5840] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 69.901874][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.927864][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 69.959597][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.983086][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.990442][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.010020][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.017257][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.043311][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.064265][ T3015] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.071440][ T3015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.095182][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.127679][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.134838][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.164183][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.182948][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.215411][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 70.255953][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.263099][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.276270][ T2940] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.283451][ T2940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 70.296603][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.303690][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.313091][ T2940] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.320196][ T2940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 70.338333][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 70.528817][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.633928][ T5832] veth0_vlan: entered promiscuous mode [ 70.679486][ T5832] veth1_vlan: entered promiscuous mode [ 70.729755][ T5832] veth0_macvtap: entered promiscuous mode [ 70.752774][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.761495][ T5832] veth1_macvtap: entered promiscuous mode [ 70.794085][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.815482][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.826618][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 70.851191][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.880292][ T5832] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.891076][ T5832] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.900617][ T5832] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.909804][ T5832] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.950085][ T5831] veth0_vlan: entered promiscuous mode [ 70.981640][ T5831] veth1_vlan: entered promiscuous mode [ 71.039349][ T5835] veth0_vlan: entered promiscuous mode [ 71.060585][ T5835] veth1_vlan: entered promiscuous mode [ 71.087936][ T5840] veth0_vlan: entered promiscuous mode [ 71.109765][ T5831] veth0_macvtap: entered promiscuous mode [ 71.130368][ T5840] veth1_vlan: entered promiscuous mode [ 71.133859][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.144263][ T5835] veth0_macvtap: entered promiscuous mode [ 71.158739][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.168011][ T5831] veth1_macvtap: entered promiscuous mode [ 71.177561][ T5835] veth1_macvtap: entered promiscuous mode [ 71.202010][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.215126][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.226799][ T5840] veth0_macvtap: entered promiscuous mode [ 71.249203][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.264154][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.278135][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.297337][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.319699][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.332301][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.346195][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.358983][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.371029][ T5840] veth1_macvtap: entered promiscuous mode [ 71.375676][ T5832] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 71.390267][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.402967][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.414405][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.423849][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.435968][ T54] Bluetooth: hci0: command tx timeout [ 71.442083][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.452098][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.462689][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.475046][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.486851][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.499149][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.510520][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.519507][ T54] Bluetooth: hci2: command tx timeout [ 71.547646][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.574959][ T5831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.583698][ T5831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.584999][ T54] Bluetooth: hci1: command tx timeout [ 71.595976][ T5843] Bluetooth: hci3: command tx timeout [ 71.608397][ T5831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.619762][ T5831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.640050][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.656238][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.670858][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.685924][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.700344][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 71.712901][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.728249][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.748232][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.756199][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.806610][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.831123][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.848935][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.863516][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.878681][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 71.889525][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 71.906040][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.939353][ T5840] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.949516][ T5840] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.958948][ T5840] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.967718][ T5840] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 72.020760][ T2940] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.032936][ T2940] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.111113][ T3570] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.129196][ T3570] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.170135][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.181951][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.250226][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.270558][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.309792][ T2940] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.327802][ T2940] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.399925][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 72.430434][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 72.435476][ T5843] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 73.408596][ T5905] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.505994][ T5843] Bluetooth: hci0: command tx timeout [ 73.588852][ T5843] Bluetooth: hci2: command tx timeout [ 73.665668][ T5843] Bluetooth: hci3: command tx timeout [ 73.666019][ T54] Bluetooth: hci1: command tx timeout [ 74.280351][ T54] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 74.773551][ T5943] Zero length message leads to an empty skb [ 74.846851][ T5943] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 75.584743][ T54] Bluetooth: hci0: command tx timeout [ 75.675000][ T54] Bluetooth: hci2: command tx timeout [ 75.744695][ T5843] Bluetooth: hci1: command tx timeout [ 75.750181][ T54] Bluetooth: hci3: command tx timeout [ 77.012446][ T5965] netlink: 342 bytes leftover after parsing attributes in process `syz.3.16'. [ 78.063552][ T5987] can: request_module (can-proto-0) failed. [ 78.276097][ T5987] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 78.284912][ T5987] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 78.362962][ T5987] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 78.381919][ T5987] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 78.388348][ T5987] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 78.395800][ T5987] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 78.405162][ T5987] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 78.411446][ T5987] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 78.422704][ T5987] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 78.447326][ T5987] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 78.509465][ T5987] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 78.575731][ T5987] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 78.998223][ T46] cfg80211: failed to load regulatory.db [ 79.345411][ T6004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.26'. [ 79.550443][ T6003] netlink: zone id is out of range [ 79.570761][ T6003] netlink: zone id is out of range [ 79.587239][ T6003] netlink: zone id is out of range [ 79.624713][ T6003] netlink: zone id is out of range [ 79.653389][ T6003] netlink: zone id is out of range [ 79.724162][ T6003] netlink: zone id is out of range [ 79.788755][ T6003] netlink: zone id is out of range [ 79.793927][ T6003] netlink: zone id is out of range [ 79.934284][ T6003] netlink: zone id is out of range [ 80.019137][ T6003] netlink: zone id is out of range [ 80.304617][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 80.384737][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 80.464717][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 80.471090][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 80.610889][ T5843] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 81.954378][ T5843] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 82.232722][ T6038] netlink: 206 bytes leftover after parsing attributes in process `syz.1.34'. [ 82.384817][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 82.464739][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 82.544834][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 82.550914][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 84.475684][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 84.559158][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 84.625202][ T5843] Bluetooth: hci2: command 0x0c1a tx timeout [ 84.632547][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 86.344892][ T6082] netlink: 206 bytes leftover after parsing attributes in process `syz.2.45'. [ 86.577007][ T5843] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 86.744694][ T5843] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 89.080429][ T6122] netlink: 206 bytes leftover after parsing attributes in process `syz.1.55'. [ 90.491405][ T5843] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 94.263261][ T6161] netlink: 326 bytes leftover after parsing attributes in process `syz.3.64'. [ 94.763340][ T6172] netlink: 206 bytes leftover after parsing attributes in process `syz.1.66'. [ 94.850973][ T6176] capability: warning: `syz.2.68' uses 32-bit capabilities (legacy support in use) [ 97.014042][ T5843] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 98.531758][ T6224] netlink: 206 bytes leftover after parsing attributes in process `syz.2.79'. [ 101.541129][ T5843] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 102.952491][ T6267] netlink: 206 bytes leftover after parsing attributes in process `syz.0.91'. [ 106.132504][ T6313] netlink: 206 bytes leftover after parsing attributes in process `syz.2.102'. [ 106.804855][ T5843] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 108.691196][ T6356] netlink: 206 bytes leftover after parsing attributes in process `syz.2.114'. [ 110.958818][ T5843] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 112.407801][ T6405] netlink: 206 bytes leftover after parsing attributes in process `syz.2.128'. [ 113.074139][ T6410] ptrace attach of "./syz-executor exec"[5840] was attempted by "./syz-executor exec"[6410] [ 114.631456][ T5843] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 115.121688][ T6444] netlink: 206 bytes leftover after parsing attributes in process `syz.0.140'. [ 116.703281][ T6453] ptrace attach of "./syz-executor exec"[5831] was attempted by "./syz-executor exec"[6453] [ 121.315886][ T6508] netlink: 206 bytes leftover after parsing attributes in process `syz.3.153'. [ 123.689015][ T6540] netlink: 206 bytes leftover after parsing attributes in process `syz.0.166'. [ 123.915377][ T6532] netlink: 342 bytes leftover after parsing attributes in process `syz.2.163'. [ 126.278640][ T6576] netlink: 206 bytes leftover after parsing attributes in process `syz.1.177'. [ 127.237898][ T6593] netlink: 342 bytes leftover after parsing attributes in process `syz.1.179'. [ 129.355761][ T6620] netlink: 206 bytes leftover after parsing attributes in process `syz.3.188'. [ 129.549066][ T6622] can: request_module (can-proto-0) failed. [ 129.675129][ T6622] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 129.711138][ T6622] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 129.717839][ T6622] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 129.734219][ T6622] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 131.551960][ T6650] netlink: 206 bytes leftover after parsing attributes in process `syz.3.198'. [ 131.744749][ T5843] Bluetooth: hci3: command 0x0c1a tx timeout [ 131.744764][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 131.751202][ T5843] Bluetooth: hci1: command 0x0c1a tx timeout [ 131.751244][ T5843] Bluetooth: hci0: command 0x0c1a tx timeout [ 132.940524][ T6655] netlink: 342 bytes leftover after parsing attributes in process `syz.0.196'. [ 133.214964][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.221301][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.772181][ T6672] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 133.810836][ T6672] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 135.768678][ T6698] can: request_module (can-proto-0) failed. [ 135.866765][ T6702] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 135.924173][ T6702] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 136.362542][ T6702] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 136.425785][ T6702] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 136.794340][ T6716] netlink: 206 bytes leftover after parsing attributes in process `syz.0.209'. [ 137.022245][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.210'. [ 137.904843][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 137.990001][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 138.188479][ T6727] net_ratelimit: 16 callbacks suppressed [ 138.188499][ T6727] netlink: zone id is out of range [ 138.225951][ T6727] netlink: zone id is out of range [ 138.231120][ T6727] netlink: zone id is out of range [ 138.250106][ T6727] netlink: zone id is out of range [ 138.255355][ T6727] netlink: zone id is out of range [ 138.261212][ T6727] netlink: zone id is out of range [ 138.275749][ T6727] netlink: zone id is out of range [ 138.282095][ T6727] netlink: zone id is out of range [ 138.287584][ T6727] netlink: zone id is out of range [ 138.293207][ T6727] netlink: zone id is out of range [ 138.386159][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 138.406443][ T6739] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 138.431394][ T6739] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 138.464624][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 140.802068][ T6762] netlink: 206 bytes leftover after parsing attributes in process `syz.3.221'. [ 141.267362][ T6768] can: request_module (can-proto-0) failed. [ 141.320258][ T6770] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 141.334747][ T6770] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 141.359811][ T6770] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 141.367221][ T6770] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 142.036795][ T6784] netlink: 8 bytes leftover after parsing attributes in process `syz.0.227'. [ 143.344684][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 143.351344][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 143.425661][ T54] Bluetooth: hci3: command 0x0c1a tx timeout [ 143.425669][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 143.905267][ T6806] netlink: 206 bytes leftover after parsing attributes in process `syz.2.231'. [ 145.392859][ T6818] net_ratelimit: 16 callbacks suppressed [ 145.392880][ T6818] netlink: zone id is out of range [ 145.403831][ T6818] netlink: zone id is out of range [ 145.409020][ T6818] netlink: zone id is out of range [ 145.414210][ T6818] netlink: zone id is out of range [ 145.419461][ T6818] netlink: zone id is out of range [ 145.424623][ T6818] netlink: zone id is out of range [ 145.429757][ T6818] netlink: zone id is out of range [ 145.434925][ T6818] netlink: zone id is out of range [ 145.440042][ T6818] netlink: zone id is out of range [ 145.445196][ T6818] netlink: zone id is out of range [ 146.041146][ T5844] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 146.807873][ T6846] netlink: 8 bytes leftover after parsing attributes in process `syz.3.239'. [ 147.154075][ T5844] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 148.221209][ T6863] netlink: 206 bytes leftover after parsing attributes in process `syz.0.244'. [ 151.393998][ T5844] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 151.959842][ T6903] netlink: 206 bytes leftover after parsing attributes in process `syz.1.257'. [ 153.417343][ T5844] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 154.833949][ T6942] netlink: 206 bytes leftover after parsing attributes in process `syz.1.267'. [ 156.738454][ T6958] net_ratelimit: 16 callbacks suppressed [ 156.738474][ T6958] netlink: zone id is out of range [ 156.754620][ T6958] netlink: zone id is out of range [ 156.759785][ T6958] netlink: zone id is out of range [ 156.775493][ T6958] netlink: zone id is out of range [ 156.780659][ T6958] netlink: zone id is out of range [ 156.804861][ T6958] netlink: zone id is out of range [ 156.824663][ T6958] netlink: zone id is out of range [ 156.860744][ T6958] netlink: zone id is out of range [ 156.899414][ T6958] netlink: zone id is out of range [ 156.918133][ T6958] netlink: zone id is out of range [ 157.290961][ T6968] netlink: 334 bytes leftover after parsing attributes in process `syz.2.274'. [ 157.777445][ T6974] netlink: 206 bytes leftover after parsing attributes in process `syz.0.276'. [ 159.172799][ T5844] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 160.611025][ T7010] netlink: 334 bytes leftover after parsing attributes in process `syz.0.284'. [ 160.787902][ T7016] netlink: 206 bytes leftover after parsing attributes in process `syz.0.287'. [ 164.594667][ T7061] net_ratelimit: 56 callbacks suppressed [ 164.594691][ T7061] netlink: zone id is out of range [ 164.667619][ T7059] netlink: 334 bytes leftover after parsing attributes in process `syz.2.296'. [ 164.841893][ T7061] netlink: zone id is out of range [ 164.884573][ T7061] netlink: zone id is out of range [ 165.143065][ T7061] netlink: zone id is out of range [ 165.245497][ T7061] netlink: zone id is out of range [ 165.250677][ T7061] netlink: zone id is out of range [ 165.266949][ T7061] netlink: zone id is out of range [ 165.275290][ T7061] netlink: zone id is out of range [ 165.280455][ T7061] netlink: zone id is out of range [ 165.286206][ T7061] netlink: zone id is out of range [ 165.405156][ T7067] netlink: 206 bytes leftover after parsing attributes in process `syz.2.298'. [ 167.263880][ T7099] netlink: 334 bytes leftover after parsing attributes in process `syz.2.308'. [ 167.604894][ T5844] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 168.175543][ T5844] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 168.204146][ T7118] netlink: 206 bytes leftover after parsing attributes in process `syz.3.311'. [ 169.908709][ T7139] netlink: 334 bytes leftover after parsing attributes in process `syz.1.319'. [ 171.034283][ T7158] netlink: 206 bytes leftover after parsing attributes in process `syz.3.323'. [ 171.511458][ T7166] netlink: 206 bytes leftover after parsing attributes in process `syz.2.334'. [ 172.688826][ T5844] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 172.692591][ T54] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 173.907398][ T7193] netlink: 334 bytes leftover after parsing attributes in process `syz.1.331'. [ 175.751821][ T7208] netlink: 206 bytes leftover after parsing attributes in process `syz.2.336'. [ 177.082968][ T54] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 177.836630][ T54] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 178.487219][ T7246] netlink: 334 bytes leftover after parsing attributes in process `syz.1.344'. [ 179.470363][ T7260] netlink: 206 bytes leftover after parsing attributes in process `syz.3.348'. [ 181.270104][ T54] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 181.457702][ T7284] netlink: 334 bytes leftover after parsing attributes in process `syz.1.355'. [ 183.070443][ T7301] netlink: 206 bytes leftover after parsing attributes in process `syz.0.359'. [ 184.806982][ T7323] netlink: 334 bytes leftover after parsing attributes in process `syz.3.366'. [ 187.386358][ T7347] netlink: 206 bytes leftover after parsing attributes in process `syz.0.371'. [ 189.359366][ T7372] netlink: 334 bytes leftover after parsing attributes in process `syz.2.377'. [ 190.576226][ T7389] netlink: 206 bytes leftover after parsing attributes in process `syz.3.382'. [ 190.883992][ T54] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 193.574432][ T7419] netlink: 334 bytes leftover after parsing attributes in process `syz.2.388'. [ 194.631583][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.664652][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.471039][ T7444] netlink: 206 bytes leftover after parsing attributes in process `syz.1.393'. [ 197.565447][ T54] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 197.819899][ T54] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 198.458494][ T54] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 199.094604][ T54] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 200.072265][ T7510] net_ratelimit: 23 callbacks suppressed [ 200.072288][ T7510] netlink: zone id is out of range [ 200.113042][ T7510] netlink: zone id is out of range [ 200.133549][ T7510] netlink: zone id is out of range [ 200.160094][ T7510] netlink: zone id is out of range [ 200.194586][ T7510] netlink: zone id is out of range [ 200.226740][ T7510] netlink: zone id is out of range [ 200.260590][ T7510] netlink: zone id is out of range [ 200.292955][ T7510] netlink: zone id is out of range [ 200.339726][ T7510] netlink: zone id is out of range [ 200.369926][ T7510] netlink: zone id is out of range [ 200.408261][ T54] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 207.514609][ T54] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 207.551031][ T7589] netlink: 206 bytes leftover after parsing attributes in process `syz.2.426'. [ 208.916767][ T54] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 210.675066][ T7622] net_ratelimit: 14 callbacks suppressed [ 210.675088][ T7622] netlink: zone id is out of range [ 210.734736][ T7622] netlink: get zone limit has 4 unknown bytes [ 213.410631][ T54] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 213.565604][ T54] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 215.387639][ T54] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 215.972456][ T7677] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 216.676000][ T54] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 219.143044][ T54] Bluetooth: hci2: unexpected subevent 0x04 length: 122 > 11 [ 219.438170][ T7720] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 221.561367][ T54] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 222.694227][ T54] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 224.400410][ T7774] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 224.784765][ T54] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 225.402820][ T7796] FAULT_INJECTION: forcing a failure. [ 225.402820][ T7796] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 225.429345][ T7796] CPU: 1 UID: 0 PID: 7796 Comm: syz.2.471 Not tainted 6.14.0-rc2-syzkaller #0 [ 225.429376][ T7796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 225.429399][ T7796] Call Trace: [ 225.429405][ T7796] [ 225.429417][ T7796] dump_stack_lvl+0x16c/0x1f0 [ 225.429459][ T7796] should_fail_ex+0x50a/0x650 [ 225.429491][ T7796] _copy_from_user+0x2e/0xd0 [ 225.429521][ T7796] core_sys_select+0x34f/0xa10 [ 225.429549][ T7796] ? __pfx_core_sys_select+0x10/0x10 [ 225.429576][ T7796] ? find_held_lock+0x2d/0x110 [ 225.429634][ T7796] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 225.429675][ T7796] kern_select+0x15e/0x1e0 [ 225.429697][ T7796] ? __pfx_kern_select+0x10/0x10 [ 225.429722][ T7796] ? __pfx_ksys_write+0x10/0x10 [ 225.429749][ T7796] __x64_sys_select+0xbd/0x160 [ 225.429770][ T7796] ? do_syscall_64+0x91/0x250 [ 225.429789][ T7796] ? lockdep_hardirqs_on+0x7c/0x110 [ 225.429820][ T7796] do_syscall_64+0xcd/0x250 [ 225.429842][ T7796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.429871][ T7796] RIP: 0033:0x7f928d78cde9 [ 225.429889][ T7796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.429909][ T7796] RSP: 002b:00007f928e644038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 225.429929][ T7796] RAX: ffffffffffffffda RBX: 00007f928d9a6160 RCX: 00007f928d78cde9 [ 225.429943][ T7796] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 225.429956][ T7796] RBP: 00007f928e644090 R08: 0000000000000000 R09: 0000000000000000 [ 225.429968][ T7796] R10: 00004000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 225.429981][ T7796] R13: 0000000000000000 R14: 00007f928d9a6160 R15: 00007fff8e092728 [ 225.430009][ T7796] [ 228.667992][ T7843] netlink: 206 bytes leftover after parsing attributes in process `syz.3.482'. [ 228.778851][ T7852] FAULT_INJECTION: forcing a failure. [ 228.778851][ T7852] name failslab, interval 1, probability 0, space 0, times 1 [ 228.801843][ T7852] CPU: 0 UID: 0 PID: 7852 Comm: syz.3.485 Not tainted 6.14.0-rc2-syzkaller #0 [ 228.801872][ T7852] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 228.801884][ T7852] Call Trace: [ 228.801889][ T7852] [ 228.801898][ T7852] dump_stack_lvl+0x16c/0x1f0 [ 228.801936][ T7852] should_fail_ex+0x50a/0x650 [ 228.801961][ T7852] ? fs_reclaim_acquire+0xae/0x150 [ 228.801993][ T7852] should_failslab+0xc2/0x120 [ 228.802017][ T7852] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 228.802042][ T7852] ? __alloc_skb+0x2b3/0x380 [ 228.802067][ T7852] __alloc_skb+0x2b3/0x380 [ 228.802087][ T7852] ? __pfx___alloc_skb+0x10/0x10 [ 228.802107][ T7852] ? __pfx_lock_release+0x10/0x10 [ 228.802146][ T7852] ? hlock_class+0x4e/0x130 [ 228.802176][ T7852] ? __lock_acquire+0xcc5/0x3c40 [ 228.802204][ T7852] alloc_skb_with_frags+0xe4/0x850 [ 228.802228][ T7852] ? hlock_class+0x4e/0x130 [ 228.802258][ T7852] ? mark_lock+0xb5/0xc60 [ 228.802285][ T7852] sock_alloc_send_pskb+0x7f1/0x980 [ 228.802327][ T7852] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 228.802363][ T7852] ? hlock_class+0x4e/0x130 [ 228.802393][ T7852] ? __lock_acquire+0xcc5/0x3c40 [ 228.802425][ T7852] tun_get_user+0xd3b/0x3e40 [ 228.802464][ T7852] ? __pfx_tun_get_user+0x10/0x10 [ 228.802490][ T7852] ? find_held_lock+0x2d/0x110 [ 228.802526][ T7852] ? __pfx_lock_release+0x10/0x10 [ 228.802564][ T7852] tun_chr_write_iter+0xdc/0x210 [ 228.802593][ T7852] vfs_write+0x5ae/0x1150 [ 228.802615][ T7852] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 228.802642][ T7852] ? __pfx_lock_release+0x10/0x10 [ 228.802667][ T7852] ? __pfx_vfs_write+0x10/0x10 [ 228.802690][ T7852] ? lock_acquire+0x2f/0xb0 [ 228.802714][ T7852] ? __fget_files+0x40/0x3a0 [ 228.802752][ T7852] __x64_sys_pwrite64+0x1f6/0x250 [ 228.802777][ T7852] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 228.802810][ T7852] do_syscall_64+0xcd/0x250 [ 228.802834][ T7852] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.802863][ T7852] RIP: 0033:0x7f319c98cde9 [ 228.802880][ T7852] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.802900][ T7852] RSP: 002b:00007f319d7fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 228.802920][ T7852] RAX: ffffffffffffffda RBX: 00007f319cba5fa0 RCX: 00007f319c98cde9 [ 228.802934][ T7852] RDX: 000000000000fdef RSI: 0000400000000000 RDI: 00000000000000c8 [ 228.802947][ T7852] RBP: 00007f319d7fc090 R08: 0000000000000000 R09: 0000000000000000 [ 228.802959][ T7852] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 228.802969][ T7852] R13: 0000000000000000 R14: 00007f319cba5fa0 R15: 00007fff1eb88548 [ 228.802995][ T7852] [ 231.098386][ T7892] FAULT_INJECTION: forcing a failure. [ 231.098386][ T7892] name failslab, interval 1, probability 0, space 0, times 0 [ 231.153389][ T7892] CPU: 0 UID: 0 PID: 7892 Comm: syz.0.497 Not tainted 6.14.0-rc2-syzkaller #0 [ 231.153418][ T7892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 231.153429][ T7892] Call Trace: [ 231.153435][ T7892] [ 231.153443][ T7892] dump_stack_lvl+0x16c/0x1f0 [ 231.153480][ T7892] should_fail_ex+0x50a/0x650 [ 231.153505][ T7892] ? fs_reclaim_acquire+0xae/0x150 [ 231.153538][ T7892] should_failslab+0xc2/0x120 [ 231.153561][ T7892] __kmalloc_node_noprof+0xd1/0x520 [ 231.153580][ T7892] ? trace_contention_end+0xee/0x140 [ 231.153603][ T7892] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 231.153623][ T7892] ? find_held_lock+0x2d/0x110 [ 231.153652][ T7892] __kvmalloc_node_noprof+0xad/0x1a0 [ 231.153675][ T7892] traverse.part.0.constprop.0+0x392/0x640 [ 231.153706][ T7892] ? trace_lock_acquire+0x14e/0x1f0 [ 231.153736][ T7892] seq_lseek+0x2b4/0x440 [ 231.153773][ T7892] proc_reg_llseek+0x205/0x2f0 [ 231.153799][ T7892] ksys_lseek+0xf0/0x1b0 [ 231.153831][ T7892] do_syscall_64+0xcd/0x250 [ 231.153854][ T7892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.153892][ T7892] RIP: 0033:0x7f2f2f38cde9 [ 231.153909][ T7892] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.153929][ T7892] RSP: 002b:00007f2f30203038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 231.153948][ T7892] RAX: ffffffffffffffda RBX: 00007f2f2f5a5fa0 RCX: 00007f2f2f38cde9 [ 231.153962][ T7892] RDX: 0000000000000000 RSI: 7fffffffffffffff RDI: 0000000000000003 [ 231.153974][ T7892] RBP: 00007f2f30203090 R08: 0000000000000000 R09: 0000000000000000 [ 231.153987][ T7892] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.153999][ T7892] R13: 0000000000000000 R14: 00007f2f2f5a5fa0 R15: 00007fff8cd88428 [ 231.154026][ T7892] [ 231.493712][ T7899] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 231.506327][ T7899] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 231.978449][ T54] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 231.991670][ T7910] netlink: 206 bytes leftover after parsing attributes in process `syz.2.502'. [ 232.320225][ T54] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 233.185363][ T7929] FAULT_INJECTION: forcing a failure. [ 233.185363][ T7929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.198715][ T7929] CPU: 1 UID: 0 PID: 7929 Comm: syz.2.506 Not tainted 6.14.0-rc2-syzkaller #0 [ 233.198743][ T7929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 233.198755][ T7929] Call Trace: [ 233.198763][ T7929] [ 233.198772][ T7929] dump_stack_lvl+0x16c/0x1f0 [ 233.198810][ T7929] should_fail_ex+0x50a/0x650 [ 233.198842][ T7929] _copy_from_user+0x2e/0xd0 [ 233.198874][ T7929] copy_msghdr_from_user+0x99/0x160 [ 233.198904][ T7929] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 233.198944][ T7929] ___sys_sendmsg+0xff/0x1e0 [ 233.198970][ T7929] ? __pfx____sys_sendmsg+0x10/0x10 [ 233.199007][ T7929] ? __pfx_lock_release+0x10/0x10 [ 233.199033][ T7929] ? trace_lock_acquire+0x14e/0x1f0 [ 233.199065][ T7929] ? __fget_files+0x206/0x3a0 [ 233.199097][ T7929] __sys_sendmsg+0x16e/0x220 [ 233.199122][ T7929] ? __pfx___sys_sendmsg+0x10/0x10 [ 233.199166][ T7929] do_syscall_64+0xcd/0x250 [ 233.199190][ T7929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.199221][ T7929] RIP: 0033:0x7f928d78cde9 [ 233.199239][ T7929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.199259][ T7929] RSP: 002b:00007f928e686038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 233.199280][ T7929] RAX: ffffffffffffffda RBX: 00007f928d9a5fa0 RCX: 00007f928d78cde9 [ 233.199295][ T7929] RDX: 00000000200400d0 RSI: 0000400000000140 RDI: 0000000000000003 [ 233.199309][ T7929] RBP: 00007f928e686090 R08: 0000000000000000 R09: 0000000000000000 [ 233.199322][ T7929] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.199334][ T7929] R13: 0000000000000000 R14: 00007f928d9a5fa0 R15: 00007fff8e092728 [ 233.199364][ T7929] [ 233.657324][ T7936] netlink: zone id is out of range [ 233.662503][ T7936] netlink: zone id is out of range [ 233.745443][ T7936] netlink: zone id is out of range [ 233.773357][ T7936] netlink: zone id is out of range [ 233.808223][ T7936] netlink: zone id is out of range [ 233.925734][ T7936] netlink: zone id is out of range [ 233.944659][ T7936] netlink: zone id is out of range [ 233.966662][ T7936] netlink: zone id is out of range [ 233.997393][ T7936] netlink: zone id is out of range [ 234.037638][ T7936] netlink: zone id is out of range [ 234.204357][ T7945] mmap: syz.0.511 (7945) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 234.363450][ T7950] FAULT_INJECTION: forcing a failure. [ 234.363450][ T7950] name failslab, interval 1, probability 0, space 0, times 0 [ 234.436774][ T7950] CPU: 0 UID: 0 PID: 7950 Comm: syz.2.512 Not tainted 6.14.0-rc2-syzkaller #0 [ 234.436806][ T7950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 234.436819][ T7950] Call Trace: [ 234.436826][ T7950] [ 234.436835][ T7950] dump_stack_lvl+0x16c/0x1f0 [ 234.436875][ T7950] should_fail_ex+0x50a/0x650 [ 234.436902][ T7950] ? fs_reclaim_acquire+0xae/0x150 [ 234.436937][ T7950] should_failslab+0xc2/0x120 [ 234.436965][ T7950] __kmalloc_node_noprof+0xd1/0x520 [ 234.436992][ T7950] ? aa_file_perm+0x4c6/0xfe0 [ 234.437017][ T7950] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 234.437043][ T7950] __kvmalloc_node_noprof+0xad/0x1a0 [ 234.437066][ T7950] seq_read_iter+0x82a/0x12b0 [ 234.437119][ T7950] ? aa_file_perm+0x4d5/0xfe0 [ 234.437154][ T7950] seq_read+0x39f/0x4e0 [ 234.437187][ T7950] ? __pfx_seq_read+0x10/0x10 [ 234.437241][ T7950] ? __pfx_seq_read+0x10/0x10 [ 234.437273][ T7950] proc_reg_read+0x23d/0x330 [ 234.437298][ T7950] ? __pfx_proc_reg_read+0x10/0x10 [ 234.437322][ T7950] vfs_read+0x1df/0xbf0 [ 234.437345][ T7950] ? __fget_files+0x1fc/0x3a0 [ 234.437369][ T7950] ? __pfx___mutex_lock+0x10/0x10 [ 234.437403][ T7950] ? __pfx_vfs_read+0x10/0x10 [ 234.437435][ T7950] ? __fget_files+0x206/0x3a0 [ 234.437468][ T7950] ksys_read+0x12b/0x250 [ 234.437489][ T7950] ? __pfx_ksys_read+0x10/0x10 [ 234.437522][ T7950] do_syscall_64+0xcd/0x250 [ 234.437546][ T7950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.437583][ T7950] RIP: 0033:0x7f928d78cde9 [ 234.437601][ T7950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.437621][ T7950] RSP: 002b:00007f928e686038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 234.437641][ T7950] RAX: ffffffffffffffda RBX: 00007f928d9a5fa0 RCX: 00007f928d78cde9 [ 234.437654][ T7950] RDX: 0000000000805644 RSI: 0000400000000300 RDI: 0000000000000003 [ 234.437666][ T7950] RBP: 00007f928e686090 R08: 0000000000000000 R09: 0000000000000000 [ 234.437678][ T7950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 234.437691][ T7950] R13: 0000000000000000 R14: 00007f928d9a5fa0 R15: 00007fff8e092728 [ 234.437726][ T7950] [ 234.861561][ T7958] netlink: 206 bytes leftover after parsing attributes in process `syz.2.513'. [ 235.106706][ T7965] netlink: 334 bytes leftover after parsing attributes in process `syz.0.517'. [ 235.880028][ T7976] FAULT_INJECTION: forcing a failure. [ 235.880028][ T7976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.954174][ T7976] CPU: 1 UID: 0 PID: 7976 Comm: syz.0.520 Not tainted 6.14.0-rc2-syzkaller #0 [ 235.954207][ T7976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 235.954220][ T7976] Call Trace: [ 235.954227][ T7976] [ 235.954237][ T7976] dump_stack_lvl+0x16c/0x1f0 [ 235.954276][ T7976] should_fail_ex+0x50a/0x650 [ 235.954313][ T7976] _copy_from_user+0x2e/0xd0 [ 235.954352][ T7976] clear_refs_write+0xeb/0xc10 [ 235.954386][ T7976] ? __pfx___lock_acquire+0x10/0x10 [ 235.954414][ T7976] ? __pfx___lock_acquire+0x10/0x10 [ 235.954436][ T7976] ? __pfx_aa_file_perm+0x10/0x10 [ 235.954459][ T7976] ? __pfx_clear_refs_write+0x10/0x10 [ 235.954499][ T7976] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 235.954527][ T7976] ? rcu_is_watching+0x12/0xc0 [ 235.954560][ T7976] ? trace_lock_acquire+0x14e/0x1f0 [ 235.954593][ T7976] ? __pfx_clear_refs_write+0x10/0x10 [ 235.954625][ T7976] vfs_write+0x24c/0x1150 [ 235.954651][ T7976] ? __fget_files+0x1fc/0x3a0 [ 235.954675][ T7976] ? __pfx___mutex_lock+0x10/0x10 [ 235.954709][ T7976] ? __pfx_vfs_write+0x10/0x10 [ 235.954742][ T7976] ? __fget_files+0x206/0x3a0 [ 235.954776][ T7976] ksys_write+0x12b/0x250 [ 235.954799][ T7976] ? __pfx_ksys_write+0x10/0x10 [ 235.954832][ T7976] do_syscall_64+0xcd/0x250 [ 235.954857][ T7976] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.954888][ T7976] RIP: 0033:0x7f2f2f38cde9 [ 235.954906][ T7976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.954926][ T7976] RSP: 002b:00007f2f30203038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 235.954946][ T7976] RAX: ffffffffffffffda RBX: 00007f2f2f5a5fa0 RCX: 00007f2f2f38cde9 [ 235.954961][ T7976] RDX: 00000000ffffff4b RSI: 0000000000000000 RDI: 0000000000000003 [ 235.954975][ T7976] RBP: 00007f2f30203090 R08: 0000000000000000 R09: 0000000000000000 [ 235.954988][ T7976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.955000][ T7976] R13: 0000000000000000 R14: 00007f2f2f5a5fa0 R15: 00007fff8cd88428 [ 235.955032][ T7976] [ 236.460360][ T7983] ima: policy update failed [ 236.473098][ T29] audit: type=1802 audit(6034207058.391:2): pid=7983 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.522" res=0 errno=0 [ 236.635798][ T7997] netlink: 206 bytes leftover after parsing attributes in process `syz.2.525'. [ 236.763914][ T7992] FAULT_INJECTION: forcing a failure. [ 236.763914][ T7992] name failslab, interval 1, probability 0, space 0, times 0 [ 236.818601][ T7992] CPU: 1 UID: 0 PID: 7992 Comm: syz.0.524 Not tainted 6.14.0-rc2-syzkaller #0 [ 236.818631][ T7992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 236.818644][ T7992] Call Trace: [ 236.818651][ T7992] [ 236.818659][ T7992] dump_stack_lvl+0x16c/0x1f0 [ 236.818698][ T7992] should_fail_ex+0x50a/0x650 [ 236.818725][ T7992] ? fs_reclaim_acquire+0xae/0x150 [ 236.818761][ T7992] ? do_eventfd+0x67/0x2f0 [ 236.818785][ T7992] should_failslab+0xc2/0x120 [ 236.818813][ T7992] __kmalloc_cache_noprof+0x68/0x420 [ 236.818836][ T7992] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 236.818871][ T7992] do_eventfd+0x67/0x2f0 [ 236.818898][ T7992] __x64_sys_eventfd2+0x53/0x80 [ 236.818925][ T7992] do_syscall_64+0xcd/0x250 [ 236.818946][ T7992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.818971][ T7992] RIP: 0033:0x7f2f2f38cde9 [ 236.818989][ T7992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.819008][ T7992] RSP: 002b:00007f2f30203038 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 236.819027][ T7992] RAX: ffffffffffffffda RBX: 00007f2f2f5a5fa0 RCX: 00007f2f2f38cde9 [ 236.819041][ T7992] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 236.819053][ T7992] RBP: 00007f2f30203090 R08: 0000000000000000 R09: 0000000000000000 [ 236.819065][ T7992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.819076][ T7992] R13: 0000000000000000 R14: 00007f2f2f5a5fa0 R15: 00007fff8cd88428 [ 236.819100][ T7992] [ 237.176678][ T8013] FAULT_INJECTION: forcing a failure. [ 237.176678][ T8013] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 237.314873][ T8013] CPU: 0 UID: 0 PID: 8013 Comm: syz.1.528 Not tainted 6.14.0-rc2-syzkaller #0 [ 237.314905][ T8013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 237.314917][ T8013] Call Trace: [ 237.314924][ T8013] [ 237.314933][ T8013] dump_stack_lvl+0x16c/0x1f0 [ 237.315035][ T8013] should_fail_ex+0x50a/0x650 [ 237.315062][ T8013] ? __pfx___might_resched+0x10/0x10 [ 237.315096][ T8013] should_fail_alloc_page+0xe7/0x130 [ 237.315126][ T8013] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 237.315160][ T8013] ? __pfx_mark_lock+0x10/0x10 [ 237.315189][ T8013] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 237.315227][ T8013] ? __pfx___lock_acquire+0x10/0x10 [ 237.315250][ T8013] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 237.315276][ T8013] ? __lock_acquire+0xcc5/0x3c40 [ 237.315313][ T8013] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 237.315340][ T8013] ? __pfx___lock_acquire+0x10/0x10 [ 237.315369][ T8013] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 237.315401][ T8013] ? policy_nodemask+0xea/0x4e0 [ 237.315431][ T8013] alloc_pages_mpol+0x1fc/0x540 [ 237.315460][ T8013] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 237.315488][ T8013] ? trace_lock_acquire+0x14e/0x1f0 [ 237.315516][ T8013] alloc_pages_noprof+0x131/0x390 [ 237.315543][ T8013] ? __pfx___pollwait+0x10/0x10 [ 237.315574][ T8013] get_free_pages_noprof+0xc/0x40 [ 237.315603][ T8013] __pollwait+0x291/0x4c0 [ 237.315638][ T8013] ? __pfx___pollwait+0x10/0x10 [ 237.315673][ T8013] ? __pfx_usbdev_poll+0x10/0x10 [ 237.315694][ T8013] usbdev_poll+0x7b/0x220 [ 237.315716][ T8013] do_select+0xd88/0x17e0 [ 237.315761][ T8013] ? __pfx_do_select+0x10/0x10 [ 237.315781][ T8013] ? __pfx_mark_lock+0x10/0x10 [ 237.315804][ T8013] ? mark_lock+0xb5/0xc60 [ 237.315829][ T8013] ? __pfx___pollwait+0x10/0x10 [ 237.315866][ T8013] ? __pfx_pollwake+0x10/0x10 [ 237.315890][ T8013] ? __pfx_pollwake+0x10/0x10 [ 237.315913][ T8013] ? __pfx_pollwake+0x10/0x10 [ 237.315937][ T8013] ? __pfx_pollwake+0x10/0x10 [ 237.315960][ T8013] ? __pfx_pollwake+0x10/0x10 [ 237.315990][ T8013] ? __pfx_pollwake+0x10/0x10 [ 237.316013][ T8013] ? __pfx_pollwake+0x10/0x10 [ 237.316036][ T8013] ? __pfx_pollwake+0x10/0x10 [ 237.316060][ T8013] ? __pfx_pollwake+0x10/0x10 [ 237.316081][ T8013] ? trace_lock_acquire+0x14e/0x1f0 [ 237.316106][ T8013] ? lock_acquire+0x2f/0xb0 [ 237.316130][ T8013] ? __might_fault+0xe3/0x190 [ 237.316158][ T8013] ? __might_fault+0xe3/0x190 [ 237.316193][ T8013] ? core_sys_select+0x3a6/0xa10 [ 237.316214][ T8013] core_sys_select+0x3a6/0xa10 [ 237.316242][ T8013] ? __pfx_core_sys_select+0x10/0x10 [ 237.316270][ T8013] ? find_held_lock+0x2d/0x110 [ 237.316330][ T8013] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 237.316372][ T8013] kern_select+0x15e/0x1e0 [ 237.316394][ T8013] ? __pfx_kern_select+0x10/0x10 [ 237.316421][ T8013] ? __pfx_ksys_write+0x10/0x10 [ 237.316449][ T8013] __x64_sys_select+0xbd/0x160 [ 237.316469][ T8013] ? do_syscall_64+0x91/0x250 [ 237.316489][ T8013] ? lockdep_hardirqs_on+0x7c/0x110 [ 237.316520][ T8013] do_syscall_64+0xcd/0x250 [ 237.316542][ T8013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.316572][ T8013] RIP: 0033:0x7fede138cde9 [ 237.316590][ T8013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.316610][ T8013] RSP: 002b:00007fede2289038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 237.316631][ T8013] RAX: ffffffffffffffda RBX: 00007fede15a6160 RCX: 00007fede138cde9 [ 237.316645][ T8013] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 237.316657][ T8013] RBP: 00007fede2289090 R08: 0000000000000000 R09: 0000000000000000 [ 237.316670][ T8013] R10: 00004000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 237.316684][ T8013] R13: 0000000000000000 R14: 00007fede15a6160 R15: 00007fff772cd6c8 [ 237.316713][ T8013] [ 239.162856][ T8041] netlink: 206 bytes leftover after parsing attributes in process `syz.3.536'. [ 239.224933][ T8043] FAULT_INJECTION: forcing a failure. [ 239.224933][ T8043] name failslab, interval 1, probability 0, space 0, times 0 [ 239.238565][ T8043] CPU: 1 UID: 0 PID: 8043 Comm: syz.1.538 Not tainted 6.14.0-rc2-syzkaller #0 [ 239.238594][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 239.238607][ T8043] Call Trace: [ 239.238613][ T8043] [ 239.238622][ T8043] dump_stack_lvl+0x16c/0x1f0 [ 239.238660][ T8043] should_fail_ex+0x50a/0x650 [ 239.238686][ T8043] ? fs_reclaim_acquire+0xae/0x150 [ 239.238722][ T8043] should_failslab+0xc2/0x120 [ 239.238749][ T8043] __kmalloc_cache_node_noprof+0x6f/0x3f0 [ 239.238772][ T8043] ? mark_lock+0xb5/0xc60 [ 239.238807][ T8043] ? __get_vm_area_node+0x101/0x2f0 [ 239.238845][ T8043] __get_vm_area_node+0x101/0x2f0 [ 239.238881][ T8043] __vmalloc_node_range_noprof+0x26a/0x1530 [ 239.238904][ T8043] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 239.238932][ T8043] ? mark_lock+0xb5/0xc60 [ 239.238960][ T8043] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 239.238990][ T8043] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 239.239016][ T8043] ? __pfx_aa_get_newest_label+0x10/0x10 [ 239.239048][ T8043] ? rcu_is_watching+0x12/0xc0 [ 239.239077][ T8043] ? trace_cap_capable+0x1a2/0x210 [ 239.239110][ T8043] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 239.239134][ T8043] __vmalloc_noprof+0x6d/0x90 [ 239.239156][ T8043] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 239.239180][ T8043] bpf_prog_alloc_no_stats+0x54/0x630 [ 239.239202][ T8043] ? security_capable+0x7e/0x260 [ 239.239236][ T8043] bpf_prog_alloc+0x3b/0x230 [ 239.239257][ T8043] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 239.239288][ T8043] bpf_prog_load+0x1a00/0x2480 [ 239.239322][ T8043] ? __pfx_bpf_prog_load+0x10/0x10 [ 239.239348][ T8043] ? find_held_lock+0x2d/0x110 [ 239.239382][ T8043] ? __might_fault+0x13b/0x190 [ 239.239421][ T8043] ? __might_fault+0xe3/0x190 [ 239.239457][ T8043] __sys_bpf+0x5677/0x57a0 [ 239.239493][ T8043] ? __pfx___sys_bpf+0x10/0x10 [ 239.239517][ T8043] ? vfs_write+0x306/0x1150 [ 239.239552][ T8043] ? __pfx_vfs_write+0x10/0x10 [ 239.239574][ T8043] ? do_sys_openat2+0xb1/0x1e0 [ 239.239618][ T8043] ? ksys_write+0x1ba/0x250 [ 239.239639][ T8043] ? __pfx_ksys_write+0x10/0x10 [ 239.239666][ T8043] __x64_sys_bpf+0x78/0xc0 [ 239.239694][ T8043] ? lockdep_hardirqs_on+0x7c/0x110 [ 239.239727][ T8043] do_syscall_64+0xcd/0x250 [ 239.239750][ T8043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.239779][ T8043] RIP: 0033:0x7fede138cde9 [ 239.239833][ T8043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.239853][ T8043] RSP: 002b:00007fede22cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 239.239874][ T8043] RAX: ffffffffffffffda RBX: 00007fede15a5fa0 RCX: 00007fede138cde9 [ 239.239889][ T8043] RDX: 0000000000000101 RSI: 0000400000000100 RDI: 0000000000000005 [ 239.239902][ T8043] RBP: 00007fede22cb090 R08: 0000000000000000 R09: 0000000000000000 [ 239.239915][ T8043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.239928][ T8043] R13: 0000000000000000 R14: 00007fede15a5fa0 R15: 00007fff772cd6c8 [ 239.239957][ T8043] [ 239.240157][ T8043] syz.1.538: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 239.573948][ T8043] CPU: 1 UID: 0 PID: 8043 Comm: syz.1.538 Not tainted 6.14.0-rc2-syzkaller #0 [ 239.573973][ T8043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 239.573984][ T8043] Call Trace: [ 239.573998][ T8043] [ 239.574006][ T8043] dump_stack_lvl+0x16c/0x1f0 [ 239.574042][ T8043] warn_alloc+0x24d/0x3a0 [ 239.574070][ T8043] ? __pfx_warn_alloc+0x10/0x10 [ 239.574092][ T8043] ? rcu_is_watching+0x12/0xc0 [ 239.574123][ T8043] ? __kmalloc_cache_node_noprof+0x245/0x3f0 [ 239.574149][ T8043] ? __kasan_kmalloc+0x8a/0xb0 [ 239.574172][ T8043] ? __get_vm_area_node+0x1dc/0x2f0 [ 239.574210][ T8043] __vmalloc_node_range_noprof+0xd24/0x1530 [ 239.574238][ T8043] ? mark_lock+0xb5/0xc60 [ 239.574263][ T8043] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 239.574291][ T8043] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 239.574315][ T8043] ? __pfx_aa_get_newest_label+0x10/0x10 [ 239.574345][ T8043] ? rcu_is_watching+0x12/0xc0 [ 239.574372][ T8043] ? trace_cap_capable+0x1a2/0x210 [ 239.574402][ T8043] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 239.574423][ T8043] __vmalloc_noprof+0x6d/0x90 [ 239.574443][ T8043] ? bpf_prog_alloc_no_stats+0x54/0x630 [ 239.574465][ T8043] bpf_prog_alloc_no_stats+0x54/0x630 [ 239.574485][ T8043] ? security_capable+0x7e/0x260 [ 239.574517][ T8043] bpf_prog_alloc+0x3b/0x230 [ 239.574536][ T8043] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 239.574566][ T8043] bpf_prog_load+0x1a00/0x2480 [ 239.574599][ T8043] ? __pfx_bpf_prog_load+0x10/0x10 [ 239.574623][ T8043] ? find_held_lock+0x2d/0x110 [ 239.574656][ T8043] ? __might_fault+0x13b/0x190 [ 239.574693][ T8043] ? __might_fault+0xe3/0x190 [ 239.574725][ T8043] __sys_bpf+0x5677/0x57a0 [ 239.574754][ T8043] ? __pfx___sys_bpf+0x10/0x10 [ 239.574779][ T8043] ? vfs_write+0x306/0x1150 [ 239.574807][ T8043] ? __pfx_vfs_write+0x10/0x10 [ 239.574830][ T8043] ? do_sys_openat2+0xb1/0x1e0 [ 239.574876][ T8043] ? ksys_write+0x1ba/0x250 [ 239.574898][ T8043] ? __pfx_ksys_write+0x10/0x10 [ 239.574923][ T8043] __x64_sys_bpf+0x78/0xc0 [ 239.574950][ T8043] ? lockdep_hardirqs_on+0x7c/0x110 [ 239.574982][ T8043] do_syscall_64+0xcd/0x250 [ 239.575011][ T8043] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.575041][ T8043] RIP: 0033:0x7fede138cde9 [ 239.575059][ T8043] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 239.575080][ T8043] RSP: 002b:00007fede22cb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 239.575101][ T8043] RAX: ffffffffffffffda RBX: 00007fede15a5fa0 RCX: 00007fede138cde9 [ 239.575115][ T8043] RDX: 0000000000000101 RSI: 0000400000000100 RDI: 0000000000000005 [ 239.575129][ T8043] RBP: 00007fede22cb090 R08: 0000000000000000 R09: 0000000000000000 [ 239.575142][ T8043] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 239.575155][ T8043] R13: 0000000000000000 R14: 00007fede15a5fa0 R15: 00007fff772cd6c8 [ 239.575188][ T8043] [ 239.894641][ T8043] Mem-Info: [ 239.898333][ T8043] active_anon:13138 inactive_anon:0 isolated_anon:0 [ 239.898333][ T8043] active_file:13873 inactive_file:38800 isolated_file:0 [ 239.898333][ T8043] unevictable:768 dirty:976 writeback:0 [ 239.898333][ T8043] slab_reclaimable:9804 slab_unreclaimable:93925 [ 239.898333][ T8043] mapped:24596 shmem:1441 pagetables:921 [ 239.898333][ T8043] sec_pagetables:0 bounce:0 [ 239.898333][ T8043] kernel_misc_reclaimable:0 [ 239.898333][ T8043] free:1341069 free_pcp:493 free_cma:0 [ 239.944647][ T8043] Node 0 active_anon:52652kB inactive_anon:0kB active_file:55492kB inactive_file:155124kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:98384kB dirty:3900kB writeback:0kB shmem:4228kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10732kB pagetables:3284kB sec_pagetables:0kB all_unreclaimable? no [ 239.978103][ T8043] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 240.009096][ T8043] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.036770][ T8043] lowmem_reserve[]: 0 2490 2491 0 0 [ 240.042048][ T8043] Node 0 DMA32 free:1447612kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:52712kB inactive_anon:0kB active_file:55492kB inactive_file:154804kB unevictable:1536kB writepending:3900kB present:3129332kB managed:2550584kB mlocked:0kB bounce:0kB free_pcp:2144kB local_pcp:1208kB free_cma:0kB [ 240.072906][ T8043] lowmem_reserve[]: 0 0 0 0 0 [ 240.077942][ T8043] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 240.105073][ T8043] lowmem_reserve[]: 0 0 0 0 0 [ 240.110128][ T8043] Node 1 Normal free:3902116kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 240.139340][ T8043] lowmem_reserve[]: 0 0 0 0 0 [ 240.144103][ T8043] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 240.157014][ T8043] Node 0 DMA32: 37*4kB (UME) 303*8kB (UME) 359*16kB (UME) 516*32kB (UME) 540*64kB (UME) 178*128kB (UME) 104*256kB (UME) 69*512kB (UM) 31*1024kB (UME) 13*2048kB (ME) 304*4096kB (M) = 1447676kB [ 240.183013][ T8043] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 240.195142][ T8043] Node 1 Normal: 173*4kB (UME) 56*8kB (UME) 41*16kB (UME) 213*32kB (UME) 98*64kB (UME) 33*128kB (UME) 22*256kB (UME) 11*512kB (UME) 7*1024kB (UME) 7*2048kB (UE) 940*4096kB (M) = 3902116kB [ 240.228470][ T8043] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.257314][ T8057] sysfs_service_op_show: Client not running :-5: [ 240.468219][ T8043] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 240.745958][ T8043] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.755598][ T8043] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 240.789189][ T8043] 54131 total pagecache pages [ 240.793930][ T8043] 0 pages in swap cache [ 240.802934][ T8043] Free swap = 124880kB [ 240.808259][ T8043] Total swap = 124996kB [ 240.812440][ T8043] 2097051 pages RAM [ 240.816566][ T8043] 0 pages HighMem/MovableOnly [ 240.821254][ T8043] 427683 pages reserved [ 240.825415][ T8043] 0 pages cma reserved [ 241.000314][ T8066] FAULT_INJECTION: forcing a failure. [ 241.000314][ T8066] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.060234][ T8066] CPU: 1 UID: 0 PID: 8066 Comm: syz.2.545 Not tainted 6.14.0-rc2-syzkaller #0 [ 241.060264][ T8066] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 241.060277][ T8066] Call Trace: [ 241.060284][ T8066] [ 241.060292][ T8066] dump_stack_lvl+0x16c/0x1f0 [ 241.060332][ T8066] should_fail_ex+0x50a/0x650 [ 241.060365][ T8066] _copy_from_user+0x2e/0xd0 [ 241.060397][ T8066] memdup_user_nul+0x72/0x110 [ 241.060421][ T8066] proc_simple_write+0xc7/0x1b0 [ 241.060449][ T8066] ? __pfx_proc_simple_write+0x10/0x10 [ 241.060478][ T8066] proc_reg_write+0x23d/0x330 [ 241.060510][ T8066] ? __pfx_proc_reg_write+0x10/0x10 [ 241.060533][ T8066] vfs_write+0x24c/0x1150 [ 241.060557][ T8066] ? __fget_files+0x1fc/0x3a0 [ 241.060580][ T8066] ? __pfx___mutex_lock+0x10/0x10 [ 241.060621][ T8066] ? __pfx_vfs_write+0x10/0x10 [ 241.060654][ T8066] ? __fget_files+0x206/0x3a0 [ 241.060687][ T8066] ksys_write+0x12b/0x250 [ 241.060709][ T8066] ? __pfx_ksys_write+0x10/0x10 [ 241.060742][ T8066] do_syscall_64+0xcd/0x250 [ 241.060767][ T8066] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.060797][ T8066] RIP: 0033:0x7f928d78cde9 [ 241.060815][ T8066] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.060833][ T8066] RSP: 002b:00007f928e665038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 241.060853][ T8066] RAX: ffffffffffffffda RBX: 00007f928d9a6080 RCX: 00007f928d78cde9 [ 241.060866][ T8066] RDX: 0000000000000006 RSI: 0000000000000000 RDI: 0000000000000003 [ 241.060878][ T8066] RBP: 00007f928e665090 R08: 0000000000000000 R09: 0000000000000000 [ 241.060890][ T8066] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 241.060901][ T8066] R13: 0000000000000000 R14: 00007f928d9a6080 R15: 00007fff8e092728 [ 241.060930][ T8066] [ 241.446083][ T8075] netlink: 206 bytes leftover after parsing attributes in process `syz.2.547'. [ 241.792720][ T8080] netlink: 334 bytes leftover after parsing attributes in process `syz.2.549'. [ 243.351940][ T8100] page: refcount:4 mapcount:3 mapping:0000000000000000 index:0x7f2f6e79e pfn:0x79c00 [ 243.365603][ T8100] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 243.377733][ T8100] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 243.400274][ T8100] raw: 00000007f2f6e79e 0000000000000000 0000000400000002 0000000000000000 [ 243.409457][ T8100] page dumped because: unmovable page [ 243.422721][ T8100] page_owner tracks the page as allocated [ 243.437520][ T8100] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 5830, tgid 5830 (syz-executor), ts 66768716728, free_ts 66611928253 [ 243.457317][ T8100] post_alloc_hook+0x181/0x1b0 [ 243.462221][ T8100] get_page_from_freelist+0xfce/0x2f80 [ 243.468337][ T8100] __alloc_frozen_pages_noprof+0x221/0x2470 [ 243.475574][ T8100] alloc_pages_mpol+0x1fc/0x540 [ 243.481070][ T8100] alloc_pages_noprof+0x131/0x390 [ 243.486326][ T8100] __vmalloc_node_range_noprof+0x721/0x1530 [ 243.502789][ T8100] vmalloc_user_noprof+0x6b/0x90 [ 243.507966][ T8100] kcov_ioctl+0x4c/0x730 [ 243.512783][ T8100] __x64_sys_ioctl+0x190/0x200 [ 243.523273][ T8100] do_syscall_64+0xcd/0x250 [ 243.528094][ T8100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.537242][ T8100] page last free pid 5822 tgid 5822 stack trace: [ 243.547434][ T54] Bluetooth: hci1: unexpected subevent 0x04 length: 122 > 11 [ 243.565758][ T8100] free_unref_folios+0xa7b/0x1500 [ 243.574689][ T8100] folios_put_refs+0x587/0x7b0 [ 243.582573][ T8100] free_pages_and_swap_cache+0x351/0x500 [ 243.596332][ T8100] __tlb_batch_free_encoded_pages+0xf9/0x290 [ 243.602521][ T8100] tlb_finish_mmu+0x168/0x7b0 [ 243.607513][ T8100] vms_clear_ptes+0x560/0x770 [ 243.612315][ T8100] vms_complete_munmap_vmas+0x1ca/0x970 [ 243.618078][ T8100] do_vmi_align_munmap+0x619/0x890 [ 243.623310][ T8100] do_vmi_munmap+0x208/0x3e0 [ 243.628234][ T8100] __vm_munmap+0x19b/0x390 [ 243.632783][ T8100] __x64_sys_munmap+0x59/0x80 [ 243.637595][ T8100] do_syscall_64+0xcd/0x250 [ 243.642249][ T8100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.828764][ T8126] FAULT_INJECTION: forcing a failure. [ 244.828764][ T8126] name failslab, interval 1, probability 0, space 0, times 0 [ 244.924460][ T8126] CPU: 0 UID: 0 PID: 8126 Comm: syz.0.559 Not tainted 6.14.0-rc2-syzkaller #0 [ 244.924493][ T8126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 244.924506][ T8126] Call Trace: [ 244.924513][ T8126] [ 244.924522][ T8126] dump_stack_lvl+0x16c/0x1f0 [ 244.924560][ T8126] should_fail_ex+0x50a/0x650 [ 244.924588][ T8126] ? fs_reclaim_acquire+0xae/0x150 [ 244.924624][ T8126] should_failslab+0xc2/0x120 [ 244.924652][ T8126] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 244.924679][ T8126] ? __alloc_skb+0x2b3/0x380 [ 244.924706][ T8126] __alloc_skb+0x2b3/0x380 [ 244.924728][ T8126] ? __pfx___alloc_skb+0x10/0x10 [ 244.924751][ T8126] ? lock_acquire+0x2f/0xb0 [ 244.924785][ T8126] netlink_alloc_large_skb+0x69/0x130 [ 244.924819][ T8126] netlink_sendmsg+0x689/0xd70 [ 244.924855][ T8126] ? __pfx_netlink_sendmsg+0x10/0x10 [ 244.924898][ T8126] ____sys_sendmsg+0x9ae/0xb40 [ 244.924927][ T8126] ? copy_msghdr_from_user+0x10b/0x160 [ 244.924951][ T8126] ? __pfx_____sys_sendmsg+0x10/0x10 [ 244.924995][ T8126] ___sys_sendmsg+0x135/0x1e0 [ 244.925021][ T8126] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.925058][ T8126] ? __pfx_lock_release+0x10/0x10 [ 244.925082][ T8126] ? trace_lock_acquire+0x14e/0x1f0 [ 244.925115][ T8126] ? __fget_files+0x206/0x3a0 [ 244.925146][ T8126] __sys_sendmsg+0x16e/0x220 [ 244.925171][ T8126] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.925221][ T8126] do_syscall_64+0xcd/0x250 [ 244.925245][ T8126] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.925275][ T8126] RIP: 0033:0x7f2f2f38cde9 [ 244.925292][ T8126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.925313][ T8126] RSP: 002b:00007f2f30203038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.925334][ T8126] RAX: ffffffffffffffda RBX: 00007f2f2f5a5fa0 RCX: 00007f2f2f38cde9 [ 244.925349][ T8126] RDX: 00000000200400d0 RSI: 0000400000000140 RDI: 0000000000000003 [ 244.925365][ T8126] RBP: 00007f2f30203090 R08: 0000000000000000 R09: 0000000000000000 [ 244.925378][ T8126] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.925391][ T8126] R13: 0000000000000000 R14: 00007f2f2f5a5fa0 R15: 00007fff8cd88428 [ 244.925420][ T8126] [ 245.162790][ T8114] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 245.168947][ T8114] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 245.175089][ T8114] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 245.181216][ T8114] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 245.222532][ T5844] Bluetooth: hci0: unexpected subevent 0x04 length: 122 > 11 [ 245.247572][ T8128] FAULT_INJECTION: forcing a failure. [ 245.247572][ T8128] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 245.261434][ T8128] CPU: 0 UID: 0 PID: 8128 Comm: syz.1.560 Not tainted 6.14.0-rc2-syzkaller #0 [ 245.261460][ T8128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 245.261473][ T8128] Call Trace: [ 245.261479][ T8128] [ 245.261488][ T8128] dump_stack_lvl+0x16c/0x1f0 [ 245.261529][ T8128] should_fail_ex+0x50a/0x650 [ 245.261555][ T8128] ? __pfx___might_resched+0x10/0x10 [ 245.261590][ T8128] should_fail_alloc_page+0xe7/0x130 [ 245.261629][ T8128] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 245.261672][ T8128] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 245.261702][ T8128] ? __pfx_mark_lock+0x10/0x10 [ 245.261739][ T8128] ? hlock_class+0x4e/0x130 [ 245.261770][ T8128] ? mark_lock+0xb5/0xc60 [ 245.261795][ T8128] ? hlock_class+0x4e/0x130 [ 245.261826][ T8128] ? __lock_acquire+0xcc5/0x3c40 [ 245.261855][ T8128] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 245.261892][ T8128] ? hlock_class+0x4e/0x130 [ 245.261939][ T8128] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 245.261971][ T8128] ? policy_nodemask+0xea/0x4e0 [ 245.262002][ T8128] alloc_pages_mpol+0x1fc/0x540 [ 245.262034][ T8128] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 245.262063][ T8128] ? find_held_lock+0x2d/0x110 [ 245.262101][ T8128] alloc_pages_noprof+0x131/0x390 [ 245.262133][ T8128] __pmd_alloc+0x3f/0x870 [ 245.262158][ T8128] __handle_mm_fault+0x9fb/0x2c60 [ 245.262203][ T8128] ? __pfx___handle_mm_fault+0x10/0x10 [ 245.262227][ T8128] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 245.262304][ T8128] ? find_vma+0xc0/0x140 [ 245.262341][ T8128] ? __pfx_find_vma+0x10/0x10 [ 245.262380][ T8128] handle_mm_fault+0x3fa/0xaa0 [ 245.262415][ T8128] do_user_addr_fault+0x7a3/0x13f0 [ 245.262450][ T8128] exc_page_fault+0x5c/0xc0 [ 245.262486][ T8128] asm_exc_page_fault+0x26/0x30 [ 245.262516][ T8128] RIP: 0010:copy_iovec_from_user+0x84/0x170 [ 245.262545][ T8128] Code: e8 c1 4f fe fc 4d 85 ff 0f 85 c6 00 00 00 e8 43 55 fe fc 0f 01 cb 0f ae e8 49 bf 00 00 00 00 00 fc ff df e8 2e 55 fe fc 31 db <48> 8b 45 08 31 ff 89 de 49 89 c6 e8 1c 50 fe fc 85 db 0f 85 b1 00 [ 245.262568][ T8128] RSP: 0018:ffffc9001934f948 EFLAGS: 00050246 [ 245.262587][ T8128] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff84ba993f [ 245.262600][ T8128] RDX: ffff888025849e00 RSI: ffffffff84ba9962 RDI: 0000000000000006 [ 245.262613][ T8128] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 245.262625][ T8128] R10: 0000000000000050 R11: 0000000000000000 R12: ffffc9001934fbd0 [ 245.262638][ T8128] R13: 0000000000000005 R14: 00007ffffffff000 R15: dffffc0000000000 [ 245.262664][ T8128] ? copy_iovec_from_user+0x5f/0x170 [ 245.262691][ T8128] ? copy_iovec_from_user+0x82/0x170 [ 245.262722][ T8128] ? copy_iovec_from_user+0x82/0x170 [ 245.262754][ T8128] iovec_from_user.part.0+0x65/0x130 [ 245.262786][ T8128] __import_iovec+0xd6/0x6d0 [ 245.262824][ T8128] import_iovec+0x108/0x140 [ 245.262858][ T8128] copy_msghdr_from_user+0xfa/0x160 [ 245.262884][ T8128] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 245.262912][ T8128] ? __pfx___lock_acquire+0x10/0x10 [ 245.262950][ T8128] ___sys_recvmsg+0xdc/0x1a0 [ 245.262974][ T8128] ? __pfx____sys_recvmsg+0x10/0x10 [ 245.262998][ T8128] ? __pfx_lock_release+0x10/0x10 [ 245.263026][ T8128] ? trace_lock_acquire+0x14e/0x1f0 [ 245.263070][ T8128] do_recvmmsg+0x2f8/0x740 [ 245.263101][ T8128] ? __pfx_do_recvmmsg+0x10/0x10 [ 245.263122][ T8128] ? vfs_write+0x306/0x1150 [ 245.263153][ T8128] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 245.263205][ T8128] ? __fget_files+0x206/0x3a0 [ 245.263239][ T8128] __x64_sys_recvmmsg+0x239/0x290 [ 245.263272][ T8128] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 245.263310][ T8128] do_syscall_64+0xcd/0x250 [ 245.263334][ T8128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.263363][ T8128] RIP: 0033:0x7fede138cde9 [ 245.263384][ T8128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.263404][ T8128] RSP: 002b:00007fede22cb038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 245.263422][ T8128] RAX: ffffffffffffffda RBX: 00007fede15a5fa0 RCX: 00007fede138cde9 [ 245.263436][ T8128] RDX: 0000000000010000 RSI: 0000400000000100 RDI: 0000000000000003 [ 245.263448][ T8128] RBP: 00007fede22cb090 R08: 0000000000000000 R09: 0000000000000000 [ 245.263464][ T8128] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 245.263477][ T8128] R13: 0000000000000000 R14: 00007fede15a5fa0 R15: 00007fff772cd6c8 [ 245.263511][ T8128] [ 245.802513][ T8133] net_ratelimit: 2 callbacks suppressed [ 245.802535][ T8133] netlink: zone id is out of range [ 245.896126][ T8135] QAT: Invalid ioctl 21531 [ 246.231947][ T8142] netlink: zone id is out of range [ 246.362236][ T8135] FAULT_INJECTION: forcing a failure. [ 246.362236][ T8135] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 246.442682][ T8135] CPU: 0 UID: 0 PID: 8135 Comm: syz.3.563 Not tainted 6.14.0-rc2-syzkaller #0 [ 246.442714][ T8135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 246.442727][ T8135] Call Trace: [ 246.442733][ T8135] [ 246.442742][ T8135] dump_stack_lvl+0x16c/0x1f0 [ 246.442781][ T8135] should_fail_ex+0x50a/0x650 [ 246.442807][ T8135] ? __pfx___might_resched+0x10/0x10 [ 246.442840][ T8135] should_fail_alloc_page+0xe7/0x130 [ 246.442871][ T8135] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 246.442912][ T8135] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 246.442941][ T8135] ? hlock_class+0x4e/0x130 [ 246.442973][ T8135] ? mark_lock+0xb5/0xc60 [ 246.443002][ T8135] ? __pfx_mark_lock+0x10/0x10 [ 246.443031][ T8135] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 246.443060][ T8135] ? hlock_class+0x4e/0x130 [ 246.443090][ T8135] ? mark_lock+0xb5/0xc60 [ 246.443114][ T8135] ? hlock_class+0x4e/0x130 [ 246.443153][ T8135] ? hlock_class+0x4e/0x130 [ 246.443184][ T8135] ? __lock_acquire+0xcc5/0x3c40 [ 246.443211][ T8135] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 246.443242][ T8135] ? policy_nodemask+0xea/0x4e0 [ 246.443273][ T8135] alloc_pages_mpol+0x1fc/0x540 [ 246.443302][ T8135] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 246.443339][ T8135] ? __lock_acquire+0x15a9/0x3c40 [ 246.443372][ T8135] folio_alloc_mpol_noprof+0x36/0x2f0 [ 246.443406][ T8135] vma_alloc_folio_noprof+0xee/0x1b0 [ 246.443437][ T8135] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 246.443468][ T8135] ? find_held_lock+0x2d/0x110 [ 246.443508][ T8135] do_pte_missing+0x202f/0x3e10 [ 246.443546][ T8135] __handle_mm_fault+0x1166/0x2c60 [ 246.443582][ T8135] ? __pfx___handle_mm_fault+0x10/0x10 [ 246.443605][ T8135] ? follow_page_pte+0x3ac/0x1490 [ 246.443629][ T8135] ? __pfx_lock_release+0x10/0x10 [ 246.443682][ T8135] handle_mm_fault+0x3fa/0xaa0 [ 246.443715][ T8135] __get_user_pages+0x773/0x36f0 [ 246.443748][ T8135] ? __pfx_mt_find+0x10/0x10 [ 246.443780][ T8135] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 246.443807][ T8135] ? __pfx___get_user_pages+0x10/0x10 [ 246.443835][ T8135] ? __mm_populate+0x21d/0x380 [ 246.443867][ T8135] populate_vma_page_range+0x27f/0x3a0 [ 246.443895][ T8135] ? __pfx_populate_vma_page_range+0x10/0x10 [ 246.443919][ T8135] ? __pfx_find_vma_intersection+0x10/0x10 [ 246.443955][ T8135] ? vm_mmap_pgoff+0x29b/0x3a0 [ 246.443985][ T8135] __mm_populate+0x1d6/0x380 [ 246.444012][ T8135] ? __pfx___mm_populate+0x10/0x10 [ 246.444040][ T8135] ? up_write+0x1b2/0x520 [ 246.444072][ T8135] vm_mmap_pgoff+0x2d3/0x3a0 [ 246.444100][ T8135] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 246.444129][ T8135] ? __x64_sys_futex+0x1e1/0x4c0 [ 246.444151][ T8135] ? __x64_sys_futex+0x1ea/0x4c0 [ 246.444179][ T8135] ksys_mmap_pgoff+0x7d/0x5c0 [ 246.444212][ T8135] ? rcu_is_watching+0x12/0xc0 [ 246.444248][ T8135] __x64_sys_mmap+0x125/0x190 [ 246.444282][ T8135] do_syscall_64+0xcd/0x250 [ 246.444306][ T8135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.444342][ T8135] RIP: 0033:0x7f319c98cde9 [ 246.444360][ T8135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 246.444381][ T8135] RSP: 002b:00007f319d7fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 246.444401][ T8135] RAX: ffffffffffffffda RBX: 00007f319cba5fa0 RCX: 00007f319c98cde9 [ 246.444416][ T8135] RDX: 00000000000000db RSI: 000000000020000a RDI: 0000000000000000 [ 246.444429][ T8135] RBP: 00007f319ca0e2a0 R08: 0000000000000005 R09: 0000000000008000 [ 246.444442][ T8135] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 246.444455][ T8135] R13: 0000000000000000 R14: 00007f319cba5fa0 R15: 00007fff1eb88548 [ 246.444487][ T8135] [ 246.940600][ T5844] Bluetooth: hci0: command 0x0c1a tx timeout [ 247.269221][ T5844] Bluetooth: hci3: command 0x0c1a tx timeout [ 247.275403][ T5844] Bluetooth: hci2: command 0x0c1a tx timeout [ 247.281729][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 248.238519][ T8166] FAULT_INJECTION: forcing a failure. [ 248.238519][ T8166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 248.318424][ T8166] CPU: 0 UID: 0 PID: 8166 Comm: syz.0.571 Not tainted 6.14.0-rc2-syzkaller #0 [ 248.318457][ T8166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 248.318469][ T8166] Call Trace: [ 248.318477][ T8166] [ 248.318487][ T8166] dump_stack_lvl+0x16c/0x1f0 [ 248.318526][ T8166] should_fail_ex+0x50a/0x650 [ 248.318559][ T8166] _copy_to_user+0x32/0xd0 [ 248.318592][ T8166] simple_read_from_buffer+0xd0/0x160 [ 248.318630][ T8166] proc_fail_nth_read+0x198/0x270 [ 248.318663][ T8166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.318697][ T8166] ? rw_verify_area+0xcf/0x680 [ 248.318729][ T8166] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 248.318760][ T8166] vfs_read+0x1df/0xbf0 [ 248.318782][ T8166] ? __fget_files+0x1fc/0x3a0 [ 248.318806][ T8166] ? __pfx___mutex_lock+0x10/0x10 [ 248.318840][ T8166] ? __pfx_vfs_read+0x10/0x10 [ 248.318872][ T8166] ? __fget_files+0x206/0x3a0 [ 248.318904][ T8166] ksys_read+0x12b/0x250 [ 248.318926][ T8166] ? __pfx_ksys_read+0x10/0x10 [ 248.318949][ T8166] ? do_user_addr_fault+0x83d/0x13f0 [ 248.318985][ T8166] do_syscall_64+0xcd/0x250 [ 248.319009][ T8166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.319039][ T8166] RIP: 0033:0x7f2f2f38b7fc [ 248.319057][ T8166] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 248.319077][ T8166] RSP: 002b:00007f2f301e2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 248.319099][ T8166] RAX: ffffffffffffffda RBX: 00007f2f2f5a6080 RCX: 00007f2f2f38b7fc [ 248.319114][ T8166] RDX: 000000000000000f RSI: 00007f2f301e20a0 RDI: 0000000000000005 [ 248.319127][ T8166] RBP: 00007f2f301e2090 R08: 0000000000000000 R09: 0000000000000000 [ 248.319148][ T8166] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.319160][ T8166] R13: 0000000000000000 R14: 00007f2f2f5a6080 R15: 00007fff8cd88428 [ 248.319191][ T8166] [ 248.968101][ T8178] FAULT_INJECTION: forcing a failure. [ 248.968101][ T8178] name failslab, interval 1, probability 0, space 0, times 0 [ 248.980813][ T8178] CPU: 0 UID: 0 PID: 8178 Comm: syz.1.574 Not tainted 6.14.0-rc2-syzkaller #0 [ 248.980839][ T8178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 248.980852][ T8178] Call Trace: [ 248.980858][ T8178] [ 248.980866][ T8178] dump_stack_lvl+0x16c/0x1f0 [ 248.980904][ T8178] should_fail_ex+0x50a/0x650 [ 248.980932][ T8178] ? fs_reclaim_acquire+0xae/0x150 [ 248.980968][ T8178] should_failslab+0xc2/0x120 [ 248.980996][ T8178] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 248.981024][ T8178] ? __d_alloc+0x35/0x8c0 [ 248.981054][ T8178] __d_alloc+0x35/0x8c0 [ 248.981084][ T8178] d_alloc_pseudo+0x1c/0xc0 [ 248.981114][ T8178] alloc_file_pseudo+0xc6/0x220 [ 248.981156][ T8178] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 248.981186][ T8178] ? do_raw_spin_unlock+0x172/0x230 [ 248.981223][ T8178] __anon_inode_getfile+0xf8/0x370 [ 248.981264][ T8178] do_eventfd+0x199/0x2f0 [ 248.981291][ T8178] __x64_sys_eventfd2+0x53/0x80 [ 248.981317][ T8178] do_syscall_64+0xcd/0x250 [ 248.981341][ T8178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.981370][ T8178] RIP: 0033:0x7fede138cde9 [ 248.981388][ T8178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.981408][ T8178] RSP: 002b:00007fede2289038 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 248.981429][ T8178] RAX: ffffffffffffffda RBX: 00007fede15a6160 RCX: 00007fede138cde9 [ 248.981443][ T8178] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 248.981456][ T8178] RBP: 00007fede2289090 R08: 0000000000000000 R09: 0000000000000000 [ 248.981469][ T8178] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 248.981482][ T8178] R13: 0000000000000001 R14: 00007fede15a6160 R15: 00007fff772cd6c8 [ 248.981511][ T8178] [ 249.461192][ T8186] netlink: 334 bytes leftover after parsing attributes in process `syz.1.578'. [ 250.044189][ T8196] netlink: 32 bytes leftover after parsing attributes in process `syz.2.581'. [ 250.297037][ T8202] Invalid ELF header magic: != ELF [ 250.411606][ T8206] FAULT_INJECTION: forcing a failure. [ 250.411606][ T8206] name fail_futex, interval 1, probability 0, space 0, times 1 [ 250.476044][ T8206] CPU: 1 UID: 0 PID: 8206 Comm: syz.1.580 Not tainted 6.14.0-rc2-syzkaller #0 [ 250.476075][ T8206] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 250.476087][ T8206] Call Trace: [ 250.476092][ T8206] [ 250.476100][ T8206] dump_stack_lvl+0x16c/0x1f0 [ 250.476135][ T8206] should_fail_ex+0x50a/0x650 [ 250.476160][ T8206] ? __lock_acquire+0x15a9/0x3c40 [ 250.476188][ T8206] get_futex_key+0x4a3/0x1000 [ 250.476225][ T8206] ? __pfx_get_futex_key+0x10/0x10 [ 250.476270][ T8206] futex_wake+0xe8/0x4e0 [ 250.476298][ T8206] ? __pfx_futex_wake+0x10/0x10 [ 250.476327][ T8206] ? find_held_lock+0x2d/0x110 [ 250.476368][ T8206] do_futex+0x1e5/0x350 [ 250.476390][ T8206] ? __pfx_do_futex+0x10/0x10 [ 250.476411][ T8206] ? __might_fault+0xe3/0x190 [ 250.476440][ T8206] ? __might_fault+0xe3/0x190 [ 250.476472][ T8206] mm_release+0x24e/0x300 [ 250.476500][ T8206] do_exit+0x886/0x2d70 [ 250.476523][ T8206] ? get_signal+0x8f7/0x2610 [ 250.476551][ T8206] ? __pfx_do_exit+0x10/0x10 [ 250.476571][ T8206] ? do_raw_spin_lock+0x12d/0x2c0 [ 250.476600][ T8206] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 250.476632][ T8206] do_group_exit+0xd3/0x2a0 [ 250.476655][ T8206] get_signal+0x2576/0x2610 [ 250.476697][ T8206] ? poll_select_finish+0x378/0x6b0 [ 250.476723][ T8206] ? __pfx_get_signal+0x10/0x10 [ 250.476760][ T8206] arch_do_signal_or_restart+0x90/0x7e0 [ 250.476786][ T8206] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 250.476819][ T8206] ? __pfx_ksys_write+0x10/0x10 [ 250.476848][ T8206] syscall_exit_to_user_mode+0x150/0x2a0 [ 250.476882][ T8206] do_syscall_64+0xda/0x250 [ 250.476905][ T8206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.476934][ T8206] RIP: 0033:0x7fede138cde9 [ 250.476952][ T8206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 250.476972][ T8206] RSP: 002b:00007fede2289038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 250.476992][ T8206] RAX: fffffffffffffdfe RBX: 00007fede15a6160 RCX: 00007fede138cde9 [ 250.477010][ T8206] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 250.477022][ T8206] RBP: 00007fede2289090 R08: 0000000000000000 R09: 0000000000000000 [ 250.477035][ T8206] R10: 00004000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 250.477047][ T8206] R13: 0000000000000000 R14: 00007fede15a6160 R15: 00007fff772cd6c8 [ 250.477076][ T8206] [ 251.459084][ T8225] sysfs_service_op_show: Client not running :-5: [ 252.455790][ T8236] netlink: 334 bytes leftover after parsing attributes in process `syz.3.589'. [ 252.761148][ T8242] kafs: addr_prefs: Invalid Command [ 253.624567][ T8259] netlink: 28 bytes leftover after parsing attributes in process `syz.0.596'. [ 254.094006][ T8269] FAULT_INJECTION: forcing a failure. [ 254.094006][ T8269] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.166370][ T8269] CPU: 0 UID: 0 PID: 8269 Comm: syz.3.597 Not tainted 6.14.0-rc2-syzkaller #0 [ 254.166399][ T8269] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 254.166412][ T8269] Call Trace: [ 254.166418][ T8269] [ 254.166427][ T8269] dump_stack_lvl+0x16c/0x1f0 [ 254.166465][ T8269] should_fail_ex+0x50a/0x650 [ 254.166497][ T8269] _copy_from_user+0x2e/0xd0 [ 254.166535][ T8269] kstrtouint_from_user+0xd7/0x1c0 [ 254.166558][ T8269] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 254.166591][ T8269] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 254.166622][ T8269] proc_fail_nth_write+0x84/0x250 [ 254.166653][ T8269] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 254.166681][ T8269] ? ksys_write+0x12b/0x250 [ 254.166711][ T8269] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 254.166740][ T8269] vfs_write+0x24c/0x1150 [ 254.166762][ T8269] ? __fget_files+0x1fc/0x3a0 [ 254.166786][ T8269] ? __pfx___mutex_lock+0x10/0x10 [ 254.166819][ T8269] ? __pfx_vfs_write+0x10/0x10 [ 254.166850][ T8269] ? __fget_files+0x206/0x3a0 [ 254.166883][ T8269] ksys_write+0x12b/0x250 [ 254.166904][ T8269] ? __pfx_ksys_write+0x10/0x10 [ 254.166936][ T8269] do_syscall_64+0xcd/0x250 [ 254.166960][ T8269] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.166989][ T8269] RIP: 0033:0x7f319c98b89f [ 254.167005][ T8269] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 254.167025][ T8269] RSP: 002b:00007f319d7fc030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 254.167045][ T8269] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f319c98b89f [ 254.167059][ T8269] RDX: 0000000000000001 RSI: 00007f319d7fc0a0 RDI: 0000000000000004 [ 254.167072][ T8269] RBP: 00007f319d7fc090 R08: 0000000000000000 R09: 0000000000000000 [ 254.167085][ T8269] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 254.167097][ T8269] R13: 0000000000000000 R14: 00007f319cba5fa0 R15: 00007fff1eb88548 [ 254.167128][ T8269] [ 254.723155][ T8259] bond0: (slave bond_slave_0): Releasing backup interface [ 255.084621][ T8275] netlink: 334 bytes leftover after parsing attributes in process `syz.3.600'. [ 256.087073][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.093424][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.604695][ T8296] FAULT_INJECTION: forcing a failure. [ 256.604695][ T8296] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 256.623568][ T5844] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 256.683259][ T8296] CPU: 1 UID: 0 PID: 8296 Comm: syz.0.604 Not tainted 6.14.0-rc2-syzkaller #0 [ 256.683293][ T8296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 256.683306][ T8296] Call Trace: [ 256.683312][ T8296] [ 256.683321][ T8296] dump_stack_lvl+0x16c/0x1f0 [ 256.683367][ T8296] should_fail_ex+0x50a/0x650 [ 256.683393][ T8296] ? __pfx___might_resched+0x10/0x10 [ 256.683427][ T8296] should_fail_alloc_page+0xe7/0x130 [ 256.683457][ T8296] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 256.683492][ T8296] ? find_held_lock+0x2d/0x110 [ 256.683528][ T8296] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 256.683559][ T8296] ? hlock_class+0x4e/0x130 [ 256.683589][ T8296] ? mark_lock+0xb5/0xc60 [ 256.683619][ T8296] ? __pfx_mark_lock+0x10/0x10 [ 256.683641][ T8296] ? __pfx_lock_release+0x10/0x10 [ 256.683669][ T8296] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 256.683699][ T8296] ? hlock_class+0x4e/0x130 [ 256.683733][ T8296] ? __pfx_mark_lock+0x10/0x10 [ 256.683763][ T8296] ? hlock_class+0x4e/0x130 [ 256.683791][ T8296] ? __lock_acquire+0xcc5/0x3c40 [ 256.683818][ T8296] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 256.683849][ T8296] ? policy_nodemask+0xea/0x4e0 [ 256.683879][ T8296] alloc_pages_mpol+0x1fc/0x540 [ 256.683909][ T8296] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 256.683946][ T8296] folio_alloc_mpol_noprof+0x36/0x2f0 [ 256.683979][ T8296] vma_alloc_folio_noprof+0xee/0x1b0 [ 256.684010][ T8296] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 256.684039][ T8296] ? find_held_lock+0x2d/0x110 [ 256.684077][ T8296] do_pte_missing+0x202f/0x3e10 [ 256.684115][ T8296] __handle_mm_fault+0x1166/0x2c60 [ 256.684149][ T8296] ? __pfx___handle_mm_fault+0x10/0x10 [ 256.684172][ T8296] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 256.684220][ T8296] ? find_vma+0xc0/0x140 [ 256.684251][ T8296] ? __pfx_find_vma+0x10/0x10 [ 256.684288][ T8296] handle_mm_fault+0x3fa/0xaa0 [ 256.684321][ T8296] do_user_addr_fault+0x7a3/0x13f0 [ 256.684368][ T8296] exc_page_fault+0x5c/0xc0 [ 256.684401][ T8296] asm_exc_page_fault+0x26/0x30 [ 256.684429][ T8296] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 256.684457][ T8296] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 256.684478][ T8296] RSP: 0018:ffffc90018f679c8 EFLAGS: 00050202 [ 256.684495][ T8296] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 00000000000000a1 [ 256.684508][ T8296] RDX: ffffed10091bf815 RSI: ffff888048dfc000 RDI: 0000400000001080 [ 256.684522][ T8296] RBP: ffffc90018f67bd8 R08: 0000000000000000 R09: ffffed10091bf814 [ 256.684534][ T8296] R10: ffff888048dfc0a0 R11: 0000000000000000 R12: 00000000000000a1 [ 256.684547][ T8296] R13: ffff888048dfc000 R14: 0000400000001080 R15: 00000000000000a1 [ 256.684579][ T8296] _copy_to_iter+0x52f/0x1400 [ 256.684617][ T8296] ? __pfx__copy_to_iter+0x10/0x10 [ 256.684643][ T8296] ? __virt_addr_valid+0x1a4/0x590 [ 256.684669][ T8296] ? __virt_addr_valid+0x5e/0x590 [ 256.684689][ T8296] ? __phys_addr_symbol+0x30/0x80 [ 256.684721][ T8296] ? __check_object_size+0x488/0x710 [ 256.684754][ T8296] seq_read_iter+0xd00/0x12b0 [ 256.684800][ T8296] seq_read+0x39f/0x4e0 [ 256.684830][ T8296] ? __pfx_seq_read+0x10/0x10 [ 256.684882][ T8296] ? __pfx_seq_read+0x10/0x10 [ 256.684913][ T8296] proc_reg_read+0x23d/0x330 [ 256.684958][ T8296] ? __pfx_proc_reg_read+0x10/0x10 [ 256.684982][ T8296] vfs_read+0x1df/0xbf0 [ 256.685005][ T8296] ? __fget_files+0x1fc/0x3a0 [ 256.685028][ T8296] ? __pfx___mutex_lock+0x10/0x10 [ 256.685060][ T8296] ? __pfx_vfs_read+0x10/0x10 [ 256.685092][ T8296] ? __fget_files+0x206/0x3a0 [ 256.685125][ T8296] ksys_read+0x12b/0x250 [ 256.685147][ T8296] ? __pfx_ksys_read+0x10/0x10 [ 256.685179][ T8296] do_syscall_64+0xcd/0x250 [ 256.685203][ T8296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.685231][ T8296] RIP: 0033:0x7f2f2f38cde9 [ 256.685248][ T8296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.685268][ T8296] RSP: 002b:00007f2f30203038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 256.685287][ T8296] RAX: ffffffffffffffda RBX: 00007f2f2f5a5fa0 RCX: 00007f2f2f38cde9 [ 256.685301][ T8296] RDX: 0000000000000ffc RSI: 0000400000001080 RDI: 0000000000000004 [ 256.685315][ T8296] RBP: 00007f2f30203090 R08: 0000000000000000 R09: 0000000000000000 [ 256.685328][ T8296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.685340][ T8296] R13: 0000000000000000 R14: 00007f2f2f5a5fa0 R15: 00007fff8cd88428 [ 256.685377][ T8296] [ 257.980779][ T5844] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 259.150259][ T8335] netlink: 32 bytes leftover after parsing attributes in process `syz.1.611'. [ 259.555627][ T5844] Bluetooth: hci3: unexpected subevent 0x04 length: 122 > 11 [ 259.566137][ T8348] FAULT_INJECTION: forcing a failure. [ 259.566137][ T8348] name failslab, interval 1, probability 0, space 0, times 0 [ 259.599961][ T8348] CPU: 0 UID: 0 PID: 8348 Comm: syz.2.616 Not tainted 6.14.0-rc2-syzkaller #0 [ 259.599994][ T8348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 259.600007][ T8348] Call Trace: [ 259.600013][ T8348] [ 259.600022][ T8348] dump_stack_lvl+0x16c/0x1f0 [ 259.600061][ T8348] should_fail_ex+0x50a/0x650 [ 259.600087][ T8348] ? fs_reclaim_acquire+0xae/0x150 [ 259.600130][ T8348] should_failslab+0xc2/0x120 [ 259.600158][ T8348] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 259.600185][ T8348] ? __pmd_alloc+0xc3/0x870 [ 259.600212][ T8348] __pmd_alloc+0xc3/0x870 [ 259.600237][ T8348] __handle_mm_fault+0x9fb/0x2c60 [ 259.600272][ T8348] ? __pfx___handle_mm_fault+0x10/0x10 [ 259.600296][ T8348] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 259.600344][ T8348] ? find_vma+0xc0/0x140 [ 259.600375][ T8348] ? __pfx_find_vma+0x10/0x10 [ 259.600412][ T8348] handle_mm_fault+0x3fa/0xaa0 [ 259.600444][ T8348] do_user_addr_fault+0x7a3/0x13f0 [ 259.600481][ T8348] exc_page_fault+0x5c/0xc0 [ 259.600514][ T8348] asm_exc_page_fault+0x26/0x30 [ 259.600543][ T8348] RIP: 0010:copy_iovec_from_user+0x84/0x170 [ 259.600573][ T8348] Code: e8 c1 4f fe fc 4d 85 ff 0f 85 c6 00 00 00 e8 43 55 fe fc 0f 01 cb 0f ae e8 49 bf 00 00 00 00 00 fc ff df e8 2e 55 fe fc 31 db <48> 8b 45 08 31 ff 89 de 49 89 c6 e8 1c 50 fe fc 85 db 0f 85 b1 00 [ 259.600593][ T8348] RSP: 0018:ffffc90018fd7948 EFLAGS: 00050246 [ 259.600611][ T8348] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff84ba993f [ 259.600625][ T8348] RDX: ffff888064885a00 RSI: ffffffff84ba9962 RDI: 0000000000000006 [ 259.600639][ T8348] RBP: 0000000000000000 R08: 0000000000000006 R09: 0000000000000000 [ 259.600651][ T8348] R10: 0000000000000050 R11: 0000000000000000 R12: ffffc90018fd7bd0 [ 259.600664][ T8348] R13: 0000000000000005 R14: 00007ffffffff000 R15: dffffc0000000000 [ 259.600687][ T8348] ? copy_iovec_from_user+0x5f/0x170 [ 259.600715][ T8348] ? copy_iovec_from_user+0x82/0x170 [ 259.600753][ T8348] ? copy_iovec_from_user+0x82/0x170 [ 259.600786][ T8348] iovec_from_user.part.0+0x65/0x130 [ 259.600820][ T8348] __import_iovec+0xd6/0x6d0 [ 259.600859][ T8348] import_iovec+0x108/0x140 [ 259.600895][ T8348] copy_msghdr_from_user+0xfa/0x160 [ 259.600919][ T8348] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 259.600948][ T8348] ? __pfx___lock_acquire+0x10/0x10 [ 259.600987][ T8348] ___sys_recvmsg+0xdc/0x1a0 [ 259.601012][ T8348] ? __pfx____sys_recvmsg+0x10/0x10 [ 259.601036][ T8348] ? __pfx_lock_release+0x10/0x10 [ 259.601060][ T8348] ? trace_lock_acquire+0x14e/0x1f0 [ 259.601098][ T8348] do_recvmmsg+0x2f8/0x740 [ 259.601135][ T8348] ? __pfx_do_recvmmsg+0x10/0x10 [ 259.601158][ T8348] ? vfs_write+0x306/0x1150 [ 259.601187][ T8348] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 259.601233][ T8348] ? __fget_files+0x206/0x3a0 [ 259.601262][ T8348] __x64_sys_recvmmsg+0x239/0x290 [ 259.601288][ T8348] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 259.601322][ T8348] do_syscall_64+0xcd/0x250 [ 259.601346][ T8348] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.601374][ T8348] RIP: 0033:0x7f928d78cde9 [ 259.601391][ T8348] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.601411][ T8348] RSP: 002b:00007f928e686038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 259.601431][ T8348] RAX: ffffffffffffffda RBX: 00007f928d9a5fa0 RCX: 00007f928d78cde9 [ 259.601445][ T8348] RDX: 0000000000010000 RSI: 0000400000000100 RDI: 0000000000000003 [ 259.601458][ T8348] RBP: 00007f928e686090 R08: 0000000000000000 R09: 0000000000000000 [ 259.601471][ T8348] R10: 0000000000000300 R11: 0000000000000246 R12: 0000000000000001 [ 259.601484][ T8348] R13: 0000000000000000 R14: 00007f928d9a5fa0 R15: 00007fff8e092728 [ 259.601514][ T8348] [ 260.548360][ T8354] netlink: 334 bytes leftover after parsing attributes in process `syz.2.618'. [ 260.978551][ T8363] FAULT_INJECTION: forcing a failure. [ 260.978551][ T8363] name failslab, interval 1, probability 0, space 0, times 0 [ 261.042729][ T8363] CPU: 1 UID: 0 PID: 8363 Comm: syz.3.621 Not tainted 6.14.0-rc2-syzkaller #0 [ 261.042764][ T8363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 261.042777][ T8363] Call Trace: [ 261.042783][ T8363] [ 261.042791][ T8363] dump_stack_lvl+0x16c/0x1f0 [ 261.042830][ T8363] should_fail_ex+0x50a/0x650 [ 261.042858][ T8363] ? fs_reclaim_acquire+0xae/0x150 [ 261.042913][ T8363] should_failslab+0xc2/0x120 [ 261.042939][ T8363] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 261.042964][ T8363] ? mas_alloc_nodes+0x18b/0x880 [ 261.042997][ T8363] mas_alloc_nodes+0x18b/0x880 [ 261.043029][ T8363] mas_node_count_gfp+0x105/0x130 [ 261.043059][ T8363] mas_preallocate+0x53f/0xce0 [ 261.043086][ T8363] ? __pfx_mas_preallocate+0x10/0x10 [ 261.043128][ T8363] vma_link+0x131/0x4a0 [ 261.043156][ T8363] ? __pfx_vma_link+0x10/0x10 [ 261.043181][ T8363] ? __pfx_lock_release+0x10/0x10 [ 261.043206][ T8363] ? trace_lock_acquire+0x14e/0x1f0 [ 261.043243][ T8363] ? __pfx_hugetlb_vm_op_open+0x10/0x10 [ 261.043276][ T8363] copy_vma+0x6c3/0xa90 [ 261.043306][ T8363] ? __pfx_copy_vma+0x10/0x10 [ 261.043343][ T8363] ? move_vma+0x5c7/0x1c50 [ 261.043385][ T8363] ? up_write+0x1b2/0x520 [ 261.043417][ T8363] move_vma+0x640/0x1c50 [ 261.043453][ T8363] ? __pfx_move_vma+0x10/0x10 [ 261.043479][ T8363] ? mtree_load+0x260/0xa40 [ 261.043513][ T8363] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 261.043545][ T8363] ? cap_mmap_addr+0x4b/0x120 [ 261.043577][ T8363] ? bpf_lsm_mmap_addr+0x9/0x10 [ 261.043602][ T8363] ? security_mmap_addr+0x6c/0x1e0 [ 261.043632][ T8363] __do_sys_mremap+0x1007/0x1630 [ 261.043668][ T8363] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 261.043703][ T8363] ? __pfx___do_sys_mremap+0x10/0x10 [ 261.043731][ T8363] ? __fget_files+0x206/0x3a0 [ 261.043760][ T8363] ? fput+0x67/0x440 [ 261.043788][ T8363] ? ksys_write+0x1ba/0x250 [ 261.043809][ T8363] ? __pfx_ksys_write+0x10/0x10 [ 261.043842][ T8363] do_syscall_64+0xcd/0x250 [ 261.043866][ T8363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.043903][ T8363] RIP: 0033:0x7f319c98cde9 [ 261.043921][ T8363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.043941][ T8363] RSP: 002b:00007f319d7fc038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 261.043961][ T8363] RAX: ffffffffffffffda RBX: 00007f319cba5fa0 RCX: 00007f319c98cde9 [ 261.043976][ T8363] RDX: 0000000000003fd6 RSI: 0000000000000007 RDI: 0000000000000000 [ 261.043988][ T8363] RBP: 00007f319d7fc090 R08: 0000000020000000 R09: 0000000000000000 [ 261.044001][ T8363] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 261.044014][ T8363] R13: 0000000000000000 R14: 00007f319cba5fa0 R15: 00007fff1eb88548 [ 261.044044][ T8363] [ 261.338059][ T8363] ------------[ cut here ]------------ [ 261.343573][ T8363] page_counter underflow: -512 nr_pages=512 [ 261.349732][ T8363] WARNING: CPU: 1 PID: 8363 at mm/page_counter.c:60 page_counter_cancel+0x110/0x170 [ 261.359245][ T8363] Modules linked in: [ 261.363167][ T8363] CPU: 1 UID: 0 PID: 8363 Comm: syz.3.621 Not tainted 6.14.0-rc2-syzkaller #0 [ 261.372134][ T8363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 261.382290][ T8363] RIP: 0010:page_counter_cancel+0x110/0x170 [ 261.388273][ T8363] Code: e8 a5 82 96 ff 45 84 ed 75 24 e8 fb 87 96 ff c6 05 29 04 26 0e 01 90 48 c7 c7 80 35 7d 8b 4c 89 e2 48 89 ee e8 41 60 57 ff 90 <0f> 0b 90 90 e8 d7 87 96 ff be 08 00 00 00 48 89 df e8 0a 71 f9 ff [ 261.408660][ T8363] RSP: 0018:ffffc9000ec778c0 EFLAGS: 00010286 [ 261.414769][ T8363] RAX: 0000000000000000 RBX: ffff88814e21b440 RCX: ffffffff8179c889 [ 261.420723][ T8365] FAULT_INJECTION: forcing a failure. [ 261.420723][ T8365] name failslab, interval 1, probability 0, space 0, times 0 [ 261.422817][ T8363] RDX: ffff888031a78000 RSI: ffffffff8179c896 RDI: 0000000000000001 [ 261.443457][ T8363] RBP: fffffffffffffe00 R08: 0000000000000001 R09: 0000000000000000 [ 261.451533][ T8363] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000200 [ 261.459799][ T8363] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88807bf46b20 [ 261.467921][ T8363] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 261.476955][ T8363] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 261.483578][ T8363] CR2: 0000001b30706ff8 CR3: 000000000df80000 CR4: 00000000003526f0 [ 261.491664][ T8363] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 261.499703][ T8363] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 261.508320][ T8363] Call Trace: [ 261.511809][ T8363] [ 261.514764][ T8363] ? __warn+0xea/0x3c0 [ 261.518935][ T8363] ? page_counter_cancel+0x110/0x170 [ 261.524261][ T8363] ? report_bug+0x3c0/0x580 [ 261.528902][ T8363] ? handle_bug+0x54/0xa0 [ 261.533270][ T8363] ? exc_invalid_op+0x17/0x50 [ 261.535873][ T8365] CPU: 0 UID: 0 PID: 8365 Comm: syz.0.622 Not tainted 6.14.0-rc2-syzkaller #0 [ 261.535899][ T8365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 261.535912][ T8365] Call Trace: [ 261.535918][ T8365] [ 261.535926][ T8365] dump_stack_lvl+0x16c/0x1f0 [ 261.535962][ T8365] should_fail_ex+0x50a/0x650 [ 261.535988][ T8365] ? fs_reclaim_acquire+0xae/0x150 [ 261.536023][ T8365] should_failslab+0xc2/0x120 [ 261.536050][ T8365] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 261.536075][ T8365] ? alloc_empty_file+0x73/0x1e0 [ 261.536107][ T8365] alloc_empty_file+0x73/0x1e0 [ 261.536135][ T8365] alloc_file_pseudo+0x131/0x220 [ 261.536167][ T8365] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 261.536197][ T8365] ? do_raw_spin_unlock+0x172/0x230 [ 261.536232][ T8365] __anon_inode_getfile+0xf8/0x370 [ 261.536270][ T8365] do_eventfd+0x199/0x2f0 [ 261.536296][ T8365] __x64_sys_eventfd2+0x53/0x80 [ 261.536321][ T8365] do_syscall_64+0xcd/0x250 [ 261.536344][ T8365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.536372][ T8365] RIP: 0033:0x7f2f2f38cde9 [ 261.536389][ T8365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.536408][ T8365] RSP: 002b:00007f2f30203038 EFLAGS: 00000246 ORIG_RAX: 0000000000000122 [ 261.536427][ T8365] RAX: ffffffffffffffda RBX: 00007f2f2f5a5fa0 RCX: 00007f2f2f38cde9 [ 261.536441][ T8365] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000003 [ 261.536453][ T8365] RBP: 00007f2f30203090 R08: 0000000000000000 R09: 0000000000000000 [ 261.536465][ T8365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.536477][ T8365] R13: 0000000000000000 R14: 00007f2f2f5a5fa0 R15: 00007fff8cd88428 [ 261.536504][ T8365] [ 261.715230][ T8363] ? asm_exc_invalid_op+0x1a/0x20 [ 261.720707][ T8363] ? __warn_printk+0x199/0x350 [ 261.725527][ T8363] ? __warn_printk+0x1a6/0x350 [ 261.730386][ T8363] ? page_counter_cancel+0x110/0x170 [ 261.735711][ T8363] page_counter_uncharge+0x32/0x70 [ 261.740932][ T8363] hugetlb_cgroup_uncharge_counter+0xd6/0x410 [ 261.747079][ T8363] hugetlb_vm_op_close+0x3fe/0x5b0 [ 261.752241][ T8363] ? __pfx_hugetlb_vm_op_close+0x10/0x10 [ 261.758079][ T8363] remove_vma+0x91/0x1b0 [ 261.762355][ T8363] exit_mmap+0x511/0xba0 [ 261.766700][ T8363] ? __pfx_exit_mmap+0x10/0x10 [ 261.771501][ T8363] ? __pfx_mark_lock+0x10/0x10 [ 261.776532][ T8363] __mmput+0x12a/0x410 [ 261.780646][ T8363] mmput+0x62/0x70 [ 261.784393][ T8363] do_exit+0x9ba/0x2d70 [ 261.788629][ T8363] ? get_signal+0x8f7/0x2610 [ 261.793243][ T8363] ? __pfx_do_exit+0x10/0x10 [ 261.797927][ T8363] ? do_raw_spin_lock+0x12d/0x2c0 [ 261.802984][ T8363] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 261.808797][ T8363] do_group_exit+0xd3/0x2a0 [ 261.813325][ T8363] get_signal+0x2576/0x2610 [ 261.818221][ T8363] ? __pfx_get_signal+0x10/0x10 [ 261.823107][ T8363] ? __pfx_do_futex+0x10/0x10 [ 261.827879][ T8363] arch_do_signal_or_restart+0x90/0x7e0 [ 261.833467][ T8363] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 261.839749][ T8363] syscall_exit_to_user_mode+0x150/0x2a0 [ 261.845431][ T8363] do_syscall_64+0xda/0x250 [ 261.850012][ T8363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.855946][ T8363] RIP: 0033:0x7f319c98cde9 [ 261.860655][ T8363] Code: Unable to access opcode bytes at 0x7f319c98cdbf. [ 261.867937][ T8363] RSP: 002b:00007f319d7fc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 261.876465][ T8363] RAX: fffffffffffffe00 RBX: 00007f319cba5fa8 RCX: 00007f319c98cde9 [ 261.884469][ T8363] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f319cba5fa8 [ 261.892556][ T8363] RBP: 00007f319cba5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 261.900642][ T8363] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f319cba5fac [ 261.908681][ T8363] R13: 0000000000000000 R14: 00007fff1eb88460 R15: 00007fff1eb88548 [ 261.917041][ T8363] [ 261.920092][ T8363] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 261.927407][ T8363] CPU: 1 UID: 0 PID: 8363 Comm: syz.3.621 Not tainted 6.14.0-rc2-syzkaller #0 [ 261.936278][ T8363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 261.946356][ T8363] Call Trace: [ 261.949668][ T8363] [ 261.952625][ T8363] dump_stack_lvl+0x3d/0x1f0 [ 261.957300][ T8363] panic+0x71d/0x800 [ 261.961229][ T8363] ? __pfx_panic+0x10/0x10 [ 261.965686][ T8363] ? show_trace_log_lvl+0x29d/0x3d0 [ 261.970929][ T8363] ? check_panic_on_warn+0x1f/0xb0 [ 261.976068][ T8363] ? page_counter_cancel+0x110/0x170 [ 261.981482][ T8363] check_panic_on_warn+0xab/0xb0 [ 261.986430][ T8363] __warn+0xf6/0x3c0 [ 261.990325][ T8363] ? page_counter_cancel+0x110/0x170 [ 261.995621][ T8363] report_bug+0x3c0/0x580 [ 261.999972][ T8363] handle_bug+0x54/0xa0 [ 262.004126][ T8363] exc_invalid_op+0x17/0x50 [ 262.008628][ T8363] asm_exc_invalid_op+0x1a/0x20 [ 262.013514][ T8363] RIP: 0010:page_counter_cancel+0x110/0x170 [ 262.019435][ T8363] Code: e8 a5 82 96 ff 45 84 ed 75 24 e8 fb 87 96 ff c6 05 29 04 26 0e 01 90 48 c7 c7 80 35 7d 8b 4c 89 e2 48 89 ee e8 41 60 57 ff 90 <0f> 0b 90 90 e8 d7 87 96 ff be 08 00 00 00 48 89 df e8 0a 71 f9 ff [ 262.039062][ T8363] RSP: 0018:ffffc9000ec778c0 EFLAGS: 00010286 [ 262.045136][ T8363] RAX: 0000000000000000 RBX: ffff88814e21b440 RCX: ffffffff8179c889 [ 262.053108][ T8363] RDX: ffff888031a78000 RSI: ffffffff8179c896 RDI: 0000000000000001 [ 262.061079][ T8363] RBP: fffffffffffffe00 R08: 0000000000000001 R09: 0000000000000000 [ 262.069047][ T8363] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000200 [ 262.077017][ T8363] R13: 0000000000000000 R14: 0000000000000001 R15: ffff88807bf46b20 [ 262.085012][ T8363] ? __warn_printk+0x199/0x350 [ 262.089792][ T8363] ? __warn_printk+0x1a6/0x350 [ 262.094580][ T8363] page_counter_uncharge+0x32/0x70 [ 262.099706][ T8363] hugetlb_cgroup_uncharge_counter+0xd6/0x410 [ 262.105781][ T8363] hugetlb_vm_op_close+0x3fe/0x5b0 [ 262.110913][ T8363] ? __pfx_hugetlb_vm_op_close+0x10/0x10 [ 262.116560][ T8363] remove_vma+0x91/0x1b0 [ 262.120814][ T8363] exit_mmap+0x511/0xba0 [ 262.125068][ T8363] ? __pfx_exit_mmap+0x10/0x10 [ 262.129846][ T8363] ? __pfx_mark_lock+0x10/0x10 [ 262.134631][ T8363] __mmput+0x12a/0x410 [ 262.139142][ T8363] mmput+0x62/0x70 [ 262.142866][ T8363] do_exit+0x9ba/0x2d70 [ 262.147025][ T8363] ? get_signal+0x8f7/0x2610 [ 262.151620][ T8363] ? __pfx_do_exit+0x10/0x10 [ 262.156203][ T8363] ? do_raw_spin_lock+0x12d/0x2c0 [ 262.161404][ T8363] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 262.166784][ T8363] do_group_exit+0xd3/0x2a0 [ 262.171285][ T8363] get_signal+0x2576/0x2610 [ 262.175829][ T8363] ? __pfx_get_signal+0x10/0x10 [ 262.180705][ T8363] ? __pfx_do_futex+0x10/0x10 [ 262.185404][ T8363] arch_do_signal_or_restart+0x90/0x7e0 [ 262.190961][ T8363] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 262.197136][ T8363] syscall_exit_to_user_mode+0x150/0x2a0 [ 262.202790][ T8363] do_syscall_64+0xda/0x250 [ 262.207319][ T8363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.213240][ T8363] RIP: 0033:0x7f319c98cde9 [ 262.217664][ T8363] Code: Unable to access opcode bytes at 0x7f319c98cdbf. [ 262.224685][ T8363] RSP: 002b:00007f319d7fc0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 262.233110][ T8363] RAX: fffffffffffffe00 RBX: 00007f319cba5fa8 RCX: 00007f319c98cde9 [ 262.241086][ T8363] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f319cba5fa8 [ 262.249057][ T8363] RBP: 00007f319cba5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 262.257111][ T8363] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f319cba5fac [ 262.265078][ T8363] R13: 0000000000000000 R14: 00007fff1eb88460 R15: 00007fff1eb88548 [ 262.273063][ T8363] [ 262.276294][ T8363] Kernel Offset: disabled [ 262.281324][ T8363] Rebooting in 86400 seconds..