last executing test programs: 45.283052826s ago: executing program 2 (id=836): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x121482, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r0, 0x8004510b, 0x3) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_TCSBRKP(0xffffffffffffffff, 0x5425, &(0x7f00000001c0)) r1 = socket(0xa, 0x6, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NET_SET(r2, 0x0, 0x2) r3 = socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001380)='/dev/bus/usb/032/001\x00', 0x8000, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(r4, 0x80045519, 0x0) syz_genetlink_get_family_id$auto_tcp_metrics(&(0x7f0000000140), r1) sendmsg$auto_TCP_METRICS_CMD_GET(r3, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x40004) r5 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r5, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_WIPHY(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2a130000", @ANYRES16=0x0, @ANYBLOB="010026bd7000fddbdf250200fd0008000300", @ANYRES32=0x0, @ANYBLOB="0c0002001400000000000000"], 0x28}, 0x1, 0x0, 0x0, 0x4004081}, 0x20000084) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000180), 0xffffffffffffffff) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x9, 0x4, 0x15f4da0b, 0x3, 0x3, 0xc, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xd]}, 0x0) 42.246641456s ago: executing program 2 (id=845): r0 = openat$auto_vsock_device_ops_af_vsock(0xffffffffffffff9c, &(0x7f0000001080), 0x80, 0x0) r1 = prctl$auto_PR_SET_FP_MODE(0x2d, 0x401, 0x0, 0x2, 0x10001) ioctl$auto_SNDCTL_DSP_PROFILE(r1, 0x40045017, &(0x7f00000002c0)="46a5244f666e4f51afe88d17b21d629383d61e8e02891f0d39e25ddf9fd01f49faef6345654506a795b0cb5701f889e98675171695d8281464ceeb764845998a6e821b5568f4e854a5f02fda0fb53cba6178a39135a85e3ee98eca9de03c8273e89c03a776ff3c2c26a21d543e9dccc77969ddeee03a8f18b7a55390ee8918741ec1c385e633536a1c8f2cc671fa0ec4b82a884698a81d52bfa39a63bb50b46d7fe1d42f165c800e096c9ba3843503cfabaebfa4bd2693ea5f511e5b430f74ab5b2f642eee63536d2c191452a28279115060d5f46110b624d0b96f1ddb149ee6f900abd396e6b37dd0fdfa06df736c4d0ad5ae8194c137c2") r2 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x2dc08f24db163610, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000a40)='/proc/sys/vm/nr_overcommit_hugepages\x00', 0x80001, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r3, 0x0, 0x0) r4 = fcntl$auto_F_UNLCK(r0, 0x7, 0x2) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/snd/controlC0\x00', 0x0, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, 0x0) waitid$auto_P_ALL(0x0, r4, &(0x7f0000000140)={@_si_pad}, 0x8001, &(0x7f00000001c0)={{0x9, 0x1}, {0x1, 0x5}, 0x5, 0x4, 0x8, 0x6d9b949a, 0x8, 0x5, 0xffffffffffffffff, 0x5402, 0x14, 0x7, 0x8000000000000001, 0x4, 0xff, 0x3}) r6 = gettid() futex_requeue$auto(&(0x7f00000000c0)={0x43198f9b, 0x7f, 0x4bec}, 0x0, 0x4010000, 0xfa) fcntl$auto_F_OFD_SETLKW(r2, 0x26, r6) preadv$auto(r2, &(0x7f00000000c0)={&(0x7f0000000040)="3670e4d28382c797cc3546085ede9baefa205d370fa743ee1547570b07dae9e3659845318ef94751e2ae98f4358ec138555c33452f992196491fc4761b5c392ffb48e1d00897486251c88717022b7e234aa200d01ed55f", 0x1}, 0x8, 0x8, 0xcb9) getsockopt$auto_SO_BSDCOMPAT(r3, 0x80, 0xe, &(0x7f0000000000)='/dev/vsock\x00', &(0x7f0000000280)=0x800) r7 = prctl$auto_PR_GET_PDEATHSIG(0x2, 0x6, r6, 0x8dbb, 0x5) mount_setattr$auto(r7, 0x0, 0x8, &(0x7f0000000100)={0x1000, 0x7e, 0x0, @raw=0x3}, 0x289) 41.672323348s ago: executing program 2 (id=847): prctl$auto_PR_SET_NAME(0xf, 0x5, 0x0, 0x8, 0xff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x801, 0x106) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/fs/ext4/sda1/mb_stats\x00', 0x109100, 0x0) r1 = fcntl$auto_F_CREATED_QUERY(r0, 0x404, 0xffffffffffffffff) getsockopt$auto_SO_SNDBUF(r1, 0x7f, 0x7, &(0x7f0000000040)=')[\x00', &(0x7f0000000080)=0x7) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r3 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r2, 0x541c, r3) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400004, 0x8, 0x9b72, 0x2, 0x5) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x5, 0x0) ioctl$auto(0x3, 0x541b, 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[@ANYBLOB="40000000952ebcc2edf93539c54eabace4082fddc66c95536dbd72691557069f2fea126aa3197bb0aa3805e8bc45c62f0859b365944b14dbff340e1c878aad9df52bf8ae8007974c581842", @ANYRES16=r5, @ANYBLOB="1b0023bd7400fddbdf250300000004000800100003800c0019800800018004003380120001008987714800000000000000000000000004000280"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) unshare$auto(0x40000080) dup2$auto(r0, r4) lsm_list_modules$auto(0x0, 0x0, 0x0) sendmsg$auto_IPVS_CMD_ZERO(0xffffffffffffffff, 0x0, 0x4000004) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0xa, 0xb5, 0x10, 0x4, 0x4, 0xffffffffffffffff, 0xa, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) bpf$auto(0x1a, &(0x7f0000000380)=@link_create={@map_fd, @target_ifindex=r6, 0x3, 0x81, @uprobe_multi={0x81, 0x1ff, 0x3d7e, 0x0, 0x1, 0x4}}, 0x92) 36.420270496s ago: executing program 2 (id=862): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x403) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x1c, 0xa8b, 0x18c, 0x6a, 0x0, 0x3405, 0x3, 0x9, 0xfffffff5, "63ace816ef77cf00", 0x0, 0x549, 0x4, 0x7, 0x0, 0x1009, 0x4, 0xffffffffffffffff, 0xe, 0x2000005, @attach_btf_obj_fd=0x3, 0x166, 0x1, 0x4000000000006, 0x8, 0x48200003, 0xa7be}, 0x7) setresuid$auto(0x8000000000000001, 0x1, 0x200) mlockall$auto(0x7) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 34.786262426s ago: executing program 2 (id=868): socket(0xa, 0x2, 0x3a) mmap$auto(0x0, 0x20004, 0x1ff, 0xeb1, 0x8000000000000024, 0x8000) io_uring_setup$auto(0x52, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffff}, 0x1, 0x0, 0x3f, 0x9}, 0x100007}, 0x3, 0x0) 34.25613471s ago: executing program 2 (id=869): socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/bConfigurationValue\x00', 0x101142, 0x0) (async, rerun: 32) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x400000, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 32) r1 = socket(0x2b, 0x1, 0x1) (rerun: 32) getsockopt$auto(r1, 0x1, 0x1a, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r2 = semctl$auto_SEM_STAT_ANY(0x9, 0x10000000, 0x14, 0x8) process_vm_writev$auto(r2, &(0x7f0000000040)={&(0x7f0000000200)="8da442686a75deab2f50ca116df3ba31f0d433df1c37db23a4a8a625c733ec077bd4594596a198c00d2981f132c2528b9cad9a1881805b625064ff9e0c1a6d9f8824895711fcf9be813c51fb20a002e079fccdf847cb4ca1e9ede5264b87a5ef369f21d491a3f0d9c04335b05955469afc4caf691cde03f687dbbda6ba56c69224f110d1ec8df3d07ef9e8fd6fc38ffd17ee9947eb8ea7d8ff093025140b698658f7cff5ad4781b3eec1803c006a654df54fe85a76a6a5bc5536ff166a533d0ab5a8e585966aa5f9d5d596ab850d9d1eeafc6a2a4d2ebce9815d6bed46fb3d184f008c4b4cc36acc5c8e7cbc8cfd8741e5ee40", 0xd}, 0x3, &(0x7f0000000300)={&(0x7f0000000080)="210a9865402751f60e673a2bc8ec46aa7c281cc365b51a526a6877986b3aaee0faf749eb02b6aec56234f4", 0x6}, 0x7ff, 0x5) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socketpair$auto(0x1, 0xb, 0x8, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 64) socket(0x2, 0x1, 0x0) (async, rerun: 64) epoll_create$auto(0x4) (async, rerun: 64) sched_get_priority_min$auto(0x40) (async, rerun: 64) socket(0x2, 0x2, 0x1) (async) io_uring_setup$auto(0x6, 0x0) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9) (async) exit$auto(0x7) (async) pidfd_getfd$auto(0x3, 0x1, 0x100000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) (async) r4 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0) write$auto_split_huge_pages_fops_huge_memory(r4, &(0x7f0000000100)='1', 0x1) (async, rerun: 64) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) (async, rerun: 64) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_4={0x2ce, r3, 0x3dde, r0}, 0x102) (async) io_uring_setup$auto(0x6, 0x0) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) 19.169779097s ago: executing program 32 (id=869): socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.1/usb2/bConfigurationValue\x00', 0x101142, 0x0) (async, rerun: 32) r0 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x400000, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) (async, rerun: 32) r1 = socket(0x2b, 0x1, 0x1) (rerun: 32) getsockopt$auto(r1, 0x1, 0x1a, 0x0, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) (async) r2 = semctl$auto_SEM_STAT_ANY(0x9, 0x10000000, 0x14, 0x8) process_vm_writev$auto(r2, &(0x7f0000000040)={&(0x7f0000000200)="8da442686a75deab2f50ca116df3ba31f0d433df1c37db23a4a8a625c733ec077bd4594596a198c00d2981f132c2528b9cad9a1881805b625064ff9e0c1a6d9f8824895711fcf9be813c51fb20a002e079fccdf847cb4ca1e9ede5264b87a5ef369f21d491a3f0d9c04335b05955469afc4caf691cde03f687dbbda6ba56c69224f110d1ec8df3d07ef9e8fd6fc38ffd17ee9947eb8ea7d8ff093025140b698658f7cff5ad4781b3eec1803c006a654df54fe85a76a6a5bc5536ff166a533d0ab5a8e585966aa5f9d5d596ab850d9d1eeafc6a2a4d2ebce9815d6bed46fb3d184f008c4b4cc36acc5c8e7cbc8cfd8741e5ee40", 0xd}, 0x3, &(0x7f0000000300)={&(0x7f0000000080)="210a9865402751f60e673a2bc8ec46aa7c281cc365b51a526a6877986b3aaee0faf749eb02b6aec56234f4", 0x6}, 0x7ff, 0x5) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r3 = socketpair$auto(0x1, 0xb, 0x8, 0x0) (async) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) (async, rerun: 64) socket(0x2, 0x1, 0x0) (async, rerun: 64) epoll_create$auto(0x4) (async, rerun: 64) sched_get_priority_min$auto(0x40) (async, rerun: 64) socket(0x2, 0x2, 0x1) (async) io_uring_setup$auto(0x6, 0x0) clone$auto(0x1ff00, 0x0, 0x0, 0x0, 0x9) (async) exit$auto(0x7) (async) pidfd_getfd$auto(0x3, 0x1, 0x100000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) (async) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) (async) r4 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f0000000040), 0x12a382, 0x0) write$auto_split_huge_pages_fops_huge_memory(r4, &(0x7f0000000100)='1', 0x1) (async, rerun: 64) openat$auto_console_fops_tty_io(0xffffffffffffff9c, 0x0, 0x102, 0x0) (async, rerun: 64) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_4={0x2ce, r3, 0x3dde, r0}, 0x102) (async) io_uring_setup$auto(0x6, 0x0) (async) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) 6.136520018s ago: executing program 3 (id=955): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_hcd.7/usb8/power/wakeup_active\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x4, 0xc) mmap$auto(0xfffffffffffffffe, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x5) init_module$auto(0x0, 0xffff9, 0x0) openat$nci(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x400, 0x0, 0x0, 0x0, 0x0, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 5.585970701s ago: executing program 3 (id=958): openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) getresgid$auto(0x0, 0x0, 0x0) getdents$auto(r0, 0x0, 0x101) socket(0x29, 0x5, 0x0) write$auto(0x3, 0x0, 0x5) r1 = prctl$auto(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mbind$auto(0xcae, 0xfffffffd, 0x100000000, 0x0, 0x6, 0x2) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000001040)='/sys/devices/virtual/tty/ptybd/power/runtime_status\x00', 0x4fc402, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)=""/4096, 0x1000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/loop11/events_poll_msecs\x00', 0x22002, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, 0x0, 0x0) unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) getpgid(0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, 0x0, 0x200, 0x0) socket(0x2b, 0x1, 0x1) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/set_event_pid\x00', 0xa0241, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_EXT4_IOC_CLEAR_ES_CACHE(r1, 0x6628, 0x0) 4.18603222s ago: executing program 1 (id=963): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) (fail_nth: 2) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r0, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x20, 0xf1, 0xb0, @raw=0xfffff038}}) 4.028713128s ago: executing program 0 (id=964): close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) listen$auto(0x3, 0x83) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 3.641735517s ago: executing program 1 (id=965): statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x401bf, 0x7352, 0x3f, 0x8000, 0x1ffde, 0x7, 0x2, 0x4, 0x9, 0x3, 0x5, 0x8, 0x3000, 0x9, 0x6, 0x10002, 0x80, 0x400, 0x0, 0x7, 0x1ffc, 0x203, 0x400, 0x84, [0xffffffffffffffff, 0x0, 0x0, 0xff, 0x4, 0x6, 0xfffffffffffffffd, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0x947, 0x3, 0x1, 0x4, 0x7, 0x16128f2c, 0x5, 0xff, 0x0, 0xffffffffefffffff, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x3, 0x400000000005b8, 0xe, 0x4000000000, 0x8, 0x4, 0x6, 0x6, 0x890, 0x800000000000a, 0x3, 0xffd, 0xa38, 0x0, 0x4, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x8, 0x0, 0x100000]}, 0x1fe, 0xd) (async, rerun: 64) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) (async, rerun: 64) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x24008000) r0 = fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket(0x26, 0x80805, 0x0) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) (async) mmap$auto(0x0, 0x8, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) syz_genetlink_get_family_id$auto_seg6(0x0, r0) (async) modify_ldt$auto(0xe, &(0x7f0000000380)="c74e1d2e8f91ba43cf5003d42e2dda94a595814731f5ac4c5382db1e5e00c31afc68933ba2c98161345153aed60b10b23a03d3f6c02fc661d0892347649028f4ee9c135166e60c8f55d753a82d9828b6bbd86c6d05b60883f08f4b11839c1aac8da93fddc4ef5c9a464ab34e53844d25d41a221e91aad552d4a2898495e443f232be99f62087a1142f1cd8d0851a94118228a48239fde7589c2090ae2bcaef62bb92f3d9dda344fa58cb24abe01f5956062120d547205da4177a94089723faed6d2358640dd125b5b45e50b8e46bdb324243a2", 0x7347) (async) r2 = socket(0x11, 0x80003, 0x307) setsockopt$auto(r2, 0x107, 0x5, 0x0, 0x24) sendmsg$auto_SEG6_CMD_SET_TUNSRC(r1, 0x0, 0x26004011) (async, rerun: 32) socket(0xa, 0x1, 0x0) (rerun: 32) socket(0x2, 0x80002, 0x73) (async, rerun: 64) socket(0xa, 0x1, 0x84) (async, rerun: 64) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000000c0), 0x101200, 0x0) (async, rerun: 64) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async, rerun: 64) r3 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0xfe, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 3.612319722s ago: executing program 0 (id=966): r0 = fanotify_init$auto(0x1f53, 0x2000000000002) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x2, 0x2, 0x1) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @local}, 0x55) sendmmsg$auto(0x3, &(0x7f0000000100)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xffeb}, 0x1, 0x0, 0x1, 0x9}, 0x7}, 0x3, 0xb00) fcntl$auto(r0, 0x403, 0x3) open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r1 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r1, &(0x7f0000000480)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000380)='C_', 0x49}, 0x8, &(0x7f0000000300), 0x6, 0x1000}, 0x5}, 0x2, 0xfd) close_range$auto(0x2, r0, 0x0) socket(0x2, 0x1, 0x106) socket(0xa, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) listen$auto(0x3, 0x83) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) 3.469867463s ago: executing program 3 (id=967): socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) clone$auto(0x2, 0x2, 0x0, 0x0, 0x2) r0 = socket(0xa, 0x5, 0x0) getsockopt$auto(r0, 0x84, 0x20, 0x0, 0x0) (fail_nth: 2) 3.324719578s ago: executing program 0 (id=968): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x101}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x44805}, 0x20004000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/macaddress\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000200)=""/206, 0xce) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x66) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r5, 0x80085665, r4) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/snd_aloop.0/sound/card1/pcmC1D0c/pcm_class\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000180)=""/89, 0x59) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r8 = timerfd_create$auto(0x9, 0x0) timerfd_gettime$auto(r8, &(0x7f0000000080)={{0x1, 0xc8}, {0x7, 0x1}}) 2.317118996s ago: executing program 3 (id=969): r0 = socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r0, 0x8000) bind$auto(0x3, &(0x7f0000000100)=@in={0x2, 0x3, @empty}, 0x6a) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose11/tx_queue_len\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/pcmC1D1c\x00', 0x101102, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_WRITEI_FRAMES2(r2, 0x40184150, 0x0) recvmmsg$auto(r2, &(0x7f0000000340)={{&(0x7f0000000240)="35f8adba2834bed87b04b500996e9203d16081fb0b62e27d229f321e9c9767e650d3189f62a8f30819da0df5b48ce9560446938aa3afee35dd33fa87e2d885e6667eac0fd9e54a7af242262cc382120daac5eca387e6c42ccc3ef248710233925c49153777de31fa66b8fe7bbf5cf0889e65d585cfbb32100d4e49f3e5397cbeceacade2effebe61434c8eca051f87710b5ac008ca2b3a6d01eb538f6d7786c8acc038df54b95819b0477949fc80cc5a605c9671eaf3ba60d9bd56e4351772244abc4e92431d0b96c5658247171467bfddc2dd68", 0x80, &(0x7f00000000c0)={&(0x7f0000000000)="781d3bd44342774d69ee2b40ac444e658445392c6232", 0x100000001}, 0x4, &(0x7f0000000140)="a186060cb62db76355a2d6a6a12fd683ad3e348f83a828770844ea8c3d7ee42435dd8fcaf1d946773d65e08190cbc6028189f3880a365299a26fb89370a429d2e3f230c980573801106f40a633304abb7f0e1ca55a58a6a083a2c50e5ab9b38c78a2d89c49e6001d6e82897f50a8b64759eb86e860821cf3d32f853fa7346c3c5771aa88235421b5c755422619438982c5071c6b0732f0ef5bc53f4ce1bb724a20f09c15d3294f052e53f08ed54382683c56695d628797c0d23310", 0x5f3c, 0x7f}, 0x2}, 0x0, 0x7ff, &(0x7f0000000380)={0xc}) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) syz_clone3(&(0x7f0000000680)={0x280, &(0x7f00000003c0)=0xffffffffffffffff, &(0x7f0000000400), &(0x7f0000000440), {0x11}, &(0x7f0000000480)=""/204, 0xcc, &(0x7f0000000580)=""/150, &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0], 0x7}, 0x58) process_madvise$auto_MADV_DONTFORK(r4, &(0x7f00000007c0)={&(0x7f0000000700)="388c0e6ba3f685882fb10eea96c11283d774f0cbbd5a0d2bc8cdc3fb81ffa35aea051808a1076543693936516332d3ab56843b34a05e8b130e73ae3a7ec6089f508c1e21e637f98a60f84e2edc699bf701c9e31228fd38b2d0e1145976593154af4f371babffa9072ed4e001b5822532168889c25eee653737c47782da00f68df876c4f2c167a0cc7e74ce488f5cee4fbf4ef2", 0xd50}, 0x6, 0xa, 0x1) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) 2.245915105s ago: executing program 1 (id=970): r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) r1 = prctl$auto_PR_PPC_GET_DEXCR(0x48, 0x14, 0x0, 0x500000000000000, 0x5) r2 = syz_genetlink_get_family_id$auto_nlbl_cipsov4(&(0x7f0000000080), 0xffffffffffffffff) io_uring_setup$auto(0x6, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa101, 0x0) setitimer$auto(0x1f5b, 0x0, 0x0) mmap$auto(0x0, 0x3, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) bind$auto(0x3, 0x0, 0x6a) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x5, 0x311) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, 0x0, 0x129800, 0x0) ioctl$auto(r3, 0x901064ae, 0x4) shutdown$auto(0x200000003, 0x2) io_uring_setup$auto(0x1, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r2, 0x10, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x8001}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x24048010) read$auto(r0, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x2a, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x4, 0x28000) setrlimit$auto(0x1000000007, 0x0) getsockopt$auto(0x6, 0x1, 0x4d, 0xfffffffffffffffe, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_REFINE_OLD(r1, 0xc1004110, &(0x7f00000001c0)={0x6, [0x0, 0x1, 0x7], [{0x5, 0xffff, 0x0, 0x0, 0x1}, {0xfffffffb, 0x6139, 0x0, 0x1}, {0x2, 0x8, 0x1, 0x1}, {0x1ff, 0x2, 0x1, 0x0, 0x0, 0x1}, {0xcd05, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x9e, 0x8, 0x0, 0x0, 0x0, 0x1}, {0xe1bb, 0x7ff, 0x0, 0x0, 0x1}, {0x4, 0xff, 0x0, 0x0, 0x0, 0x1}, {0x8e, 0x2, 0x1, 0x1, 0x1}, {0x3, 0x2, 0x0, 0x1, 0x0, 0x1}, {0x2, 0x4, 0x1}, {0x5, 0x4, 0x1, 0x1, 0x1, 0x1}], 0x7, 0x101, 0x8, 0x3, 0x53b04648, 0x2, 0x1, "2e05855a7a586ca2e6bdb3b6510525383b78836aa54a7a6a37bffccc98906c3c7755204e15c1e14aff2efd771ba57a6f34285e995c553f004bfaba7561f42d56"}) 1.822940549s ago: executing program 0 (id=971): mmap$auto(0x0, 0x2020009, 0x2, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={0x0, 0xfc2}, 0x2, 0x0, 0x4000000000007, 0xa505}, 0x800}, 0x4, 0x4008) r0 = socket(0x29, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) r2 = wait4$auto(0xffffffffffffffff, &(0x7f00000001c0)=0x4, 0x1, &(0x7f0000000380)={{0x8, 0x597a}, {0x8d50, 0xd0}, 0x8b, 0xbc, 0x81, 0x2f0, 0xc22, 0x1a9, 0x3, 0x2, 0x101, 0x8000000000000000, 0x30a, 0x3, 0xc, 0x101}) get_robust_list$auto(r2, &(0x7f0000000540)=&(0x7f0000000500)={{}, 0x1, &(0x7f00000004c0)={&(0x7f0000000480)={&(0x7f0000000440)}}}, &(0x7f0000000580)=0x3) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) select$auto(0x2, &(0x7f0000000080)={[0xd, 0x1, 0xfffffffffffffffb, 0xffffffffffffff18, 0x7, 0x9840, 0x3, 0x7, 0x200, 0x1ff, 0x2, 0x100000000, 0x401, 0x1, 0xcf2, 0xa8]}, &(0x7f0000000280)={[0x6, 0x4, 0x4, 0x7fffffff, 0x7, 0x5, 0x4, 0x8000, 0x5, 0x622, 0x2, 0x6, 0x0, 0x1, 0xe, 0x4]}, &(0x7f0000000300)={[0x9, 0x8, 0x4e, 0x8000000000000000, 0x7, 0x9, 0x5, 0x0, 0x7, 0x4e5a, 0x8, 0x200, 0xbb, 0xa5cc, 0x3c5, 0xf0]}, &(0x7f0000000140)={0x6}) recvmmsg$auto(r1, &(0x7f0000000040)={{0x0, 0x5, 0x0, 0x5, 0x0, 0x200002, 0x13}, 0x803}, 0xfffffff9, 0x10, 0x0) ioctl$auto(r0, 0x8931, 0x24) 1.649480186s ago: executing program 3 (id=972): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20301, 0x0) (fail_nth: 2) write$auto(r0, 0x0, 0x4) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, 0x0, 0x20000044) syz_genetlink_get_family_id$auto_thermal(0x0, 0xffffffffffffffff) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x0) 1.059301594s ago: executing program 1 (id=973): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0xa, 0x0) (async) close_range$auto(0x2, 0xa, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) (async) r0 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r0, 0x1) (async) flock$auto(r0, 0x1) r1 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) flock$auto(r1, 0x1) flock$auto(r1, 0x2) close_range$auto(0x2, 0x8, 0x0) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x18, 0xa, 0x1) setreuid$auto(0xffffffffffffffff, 0x8) r2 = pidfd_open$auto(0x1, 0x0) setns(r2, 0x4000000) (async) setns(r2, 0x4000000) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x302, 0x0) (async) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x302, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) (async) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) r3 = openat$auto_media_devnode_fops_mc_devnode(0xffffffffffffff9c, &(0x7f0000000040)='/dev/media1\x00', 0x28202, 0x0) readv$auto(r3, &(0x7f00000000c0)={0x0, 0x547e0dec}, 0x9) socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xae71, r4) (async) ioctl$auto(0x3, 0xae71, r4) 1.009942601s ago: executing program 0 (id=974): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) capset$auto(0x0, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r0, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x6) (fail_nth: 2) 683.321574ms ago: executing program 1 (id=975): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r0 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20301, 0x0) write$auto(r0, 0x0, 0x4) (fail_nth: 2) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, 0x0, 0x20000044) syz_genetlink_get_family_id$auto_thermal(0x0, 0xffffffffffffffff) openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000001580)='/sys/kernel/debug/tracing/events/vmalloc/enable\x00', 0x204, 0x0) 591.666994ms ago: executing program 3 (id=976): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/snd/pcmC0D0c\x00', 0x80900, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_HW_PARAMS2(r0, 0xc2604111, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) sendmsg$auto_NL80211_CMD_SET_MULTICAST_TO_UNICAST(0xffffffffffffffff, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/scsi/device_info\x00', 0x109641, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x29, 0x2, 0x0) openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000240), 0x48000, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000100)='/d-:\xe7J\x00'/23, 0x1eb07fd) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x4, 0x15f4da0a, 0x1, 0x3, 0x1000000, 0x80000001, 0x7, 0x6d3c, 0x5, 0x2, 0x1]}, 0x0) socket(0x2, 0x80002, 0x73) r2 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) copy_file_range$auto(r2, 0x0, r2, 0x0, 0x21c1, 0x0) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x18, 0xdf, 0x9b72, 0x2, 0xfff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 539.028123ms ago: executing program 4 (id=915): mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x848000000015, 0x805, 0x0) io_uring_setup$auto(0x3ff, 0x0) socket(0x2c, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x6, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x20540, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x402c542c, 0x38) flock$auto(r0, 0x6) r1 = open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aab4) flock$auto(r1, 0x1) r2 = open(&(0x7f0000000040)='./file0\x00', 0x4242, 0x40) flock$auto(r2, 0x2) close_range$auto(0x2, 0x8, 0x0) 417.910612ms ago: executing program 0 (id=977): unshare$auto(0x40000080) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/tty45\x00', 0x201, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20c40, 0x0) socket(0x2, 0x801, 0x6) openat$auto_proc_uid_map_operations_base(0xffffffffffffff9c, 0x0, 0x80a01, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x121080, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x20400, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x42dc0, 0x10a) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8102, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/tty17\x00', 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptye4\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r0, 0x5412, 0x0) mmap$auto(0x10003, 0x2000000101, 0x2, 0x12, r1, 0x8005) sysfs$auto(0x2, 0x23, 0x0) r3 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20301, 0x0) write$auto(r3, 0x0, 0x4) sendmsg$auto_CTRL_CMD_GETFAMILY(0xffffffffffffffff, 0x0, 0x20000044) syz_genetlink_get_family_id$auto_thermal(0x0, 0xffffffffffffffff) 0s ago: executing program 1 (id=978): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000740), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x30, r1, 0x1, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_HIGH={0x8, 0x14, 0x101}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x44805}, 0x20004000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/mac80211_hwsim/hwsim0/ieee80211/phy0/macaddress\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000000200)=""/206, 0xce) openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) inotify_init1$auto(0x403) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x66) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000680)='/dev/v4l-subdev5\x00', 0x20281, 0x0) ioctl$auto(r5, 0x80085665, r4) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/snd_aloop.0/sound/card1/pcmC1D0c/pcm_class\x00', 0x100, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f0000000180)=""/89, 0x59) r7 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_GET_VCPU_MMAP_SIZE(r7, 0xae04, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r8 = timerfd_create$auto(0x9, 0x0) timerfd_gettime$auto(r8, &(0x7f0000000080)={{0x1, 0xc8}, {0x7, 0x1}}) kernel console output (not intermixed with test programs): rongly recommended to keep mac addresses unique to avoid problems! [ 92.024434][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.104690][ T1056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.155294][ T1056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.201087][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.237198][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.278978][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.316763][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.405908][ T2910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.463884][ T2910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.859064][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.908934][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.044330][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.076698][ T5850] Bluetooth: hci0: command tx timeout [ 93.096404][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.156683][ T5850] Bluetooth: hci3: command tx timeout [ 93.162167][ T5850] Bluetooth: hci2: command tx timeout [ 93.170326][ T55] Bluetooth: hci1: command tx timeout [ 93.193194][ T1056] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.202719][ T5915] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 93.226862][ T1056] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.274568][ T5918] random: crng reseeded on system resumption [ 95.162773][ T5850] Bluetooth: hci0: command tx timeout [ 95.237174][ T5850] Bluetooth: hci2: command tx timeout [ 95.242672][ T5850] Bluetooth: hci1: command tx timeout [ 95.249454][ T55] Bluetooth: hci3: command tx timeout [ 95.736749][ T5955] netlink: 'syz.0.7': attribute type 1 has an invalid length. [ 96.892749][ T5971] random: crng reseeded on system resumption [ 97.278122][ T26] cfg80211: failed to load regulatory.db [ 99.185825][ T5998] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 99.194968][ T5999] random: crng reseeded on system resumption [ 99.460614][ T6002] Zero length message leads to an empty skb [ 100.335540][ T6009] netlink: 'syz.0.16': attribute type 1 has an invalid length. [ 102.992720][ T6046] random: crng reseeded on system resumption [ 107.028160][ T6082] netlink: 'syz.0.26': attribute type 1 has an invalid length. [ 107.253739][ T6087] random: crng reseeded on system resumption [ 108.858664][ T6094] netlink: 'syz.0.28': attribute type 4 has an invalid length. [ 110.181286][ T6112] netlink: 'syz.1.32': attribute type 4 has an invalid length. [ 110.582191][ T6117] netlink: 'syz.1.33': attribute type 1 has an invalid length. [ 111.735353][ T6124] random: crng reseeded on system resumption [ 112.787630][ T6133] netlink: 'syz.3.36': attribute type 1 has an invalid length. [ 114.469143][ T6145] random: crng reseeded on system resumption [ 114.646542][ T6150] netlink: 'syz.2.39': attribute type 1 has an invalid length. [ 116.248703][ T6160] netlink: 'syz.2.41': attribute type 1 has an invalid length. [ 117.800647][ T6179] random: crng reseeded on system resumption [ 120.206939][ T6205] random: crng reseeded on system resumption [ 122.525223][ T6235] random: crng reseeded on system resumption [ 124.892775][ T6258] netlink: 'syz.3.55': attribute type 1 has an invalid length. [ 125.440908][ T6264] random: crng reseeded on system resumption [ 126.152063][ T6270] netlink: 'syz.3.58': attribute type 1 has an invalid length. [ 127.371575][ T6281] FAULT_INJECTION: forcing a failure. [ 127.371575][ T6281] name failslab, interval 1, probability 0, space 0, times 1 [ 127.445211][ T6281] CPU: 0 UID: 0 PID: 6281 Comm: syz.1.59 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 127.445255][ T6281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 127.445282][ T6281] Call Trace: [ 127.445291][ T6281] [ 127.445304][ T6281] dump_stack_lvl+0x16c/0x1f0 [ 127.445364][ T6281] should_fail_ex+0x50a/0x650 [ 127.445394][ T6281] ? fs_reclaim_acquire+0xae/0x150 [ 127.445440][ T6281] should_failslab+0xc2/0x120 [ 127.445471][ T6281] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 127.445520][ T6281] ? __alloc_skb+0x2b1/0x380 [ 127.445577][ T6281] __alloc_skb+0x2b1/0x380 [ 127.445635][ T6281] ? __pfx___alloc_skb+0x10/0x10 [ 127.445686][ T6281] ? kmem_cache_alloc_noprof+0x1e0/0x3d0 [ 127.445742][ T6281] ? tcp_send_mss+0x159/0x2c0 [ 127.445780][ T6281] mptcp_sendmsg_frag+0x4e1/0x2de0 [ 127.445830][ T6281] ? __pfx_mptcp_sendmsg_frag+0x10/0x10 [ 127.445862][ T6281] ? mptcp_sched_get_send+0x2c1/0x6e0 [ 127.445898][ T6281] ? __pfx_mptcp_sched_get_send+0x10/0x10 [ 127.445938][ T6281] __subflow_push_pending+0x34e/0xad0 [ 127.445993][ T6281] __mptcp_push_pending+0x2db/0x560 [ 127.446052][ T6281] ? __pfx___mptcp_push_pending+0x10/0x10 [ 127.446095][ T6281] ? __virt_addr_valid+0x5e/0x590 [ 127.446127][ T6281] ? __phys_addr+0xc6/0x150 [ 127.446158][ T6281] ? __phys_addr_symbol+0x30/0x80 [ 127.446191][ T6281] ? __check_object_size+0x488/0x710 [ 127.446229][ T6281] mptcp_sendmsg+0x179d/0x1d30 [ 127.446288][ T6281] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 127.446334][ T6281] ? __pfx_aa_sk_perm+0x10/0x10 [ 127.446371][ T6281] ? __pfx___futex_wait+0x10/0x10 [ 127.446421][ T6281] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 127.446465][ T6281] inet_sendmsg+0x119/0x140 [ 127.446501][ T6281] sock_write_iter+0x4ac/0x5b0 [ 127.446544][ T6281] ? __pfx_sock_write_iter+0x10/0x10 [ 127.446599][ T6281] ? bpf_lsm_file_permission+0x9/0x10 [ 127.446651][ T6281] ? security_file_permission+0x71/0x210 [ 127.446696][ T6281] ? rw_verify_area+0xcf/0x680 [ 127.446742][ T6281] vfs_write+0x5ae/0x1150 [ 127.446786][ T6281] ? __pfx_sock_write_iter+0x10/0x10 [ 127.446831][ T6281] ? __pfx_vfs_write+0x10/0x10 [ 127.446874][ T6281] ? do_futex+0x123/0x350 [ 127.446916][ T6281] ? __fget_files+0x40/0x3a0 [ 127.446984][ T6281] ksys_write+0x207/0x250 [ 127.447035][ T6281] ? __pfx_ksys_write+0x10/0x10 [ 127.447092][ T6281] do_syscall_64+0xcd/0x250 [ 127.447145][ T6281] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 127.447190][ T6281] RIP: 0033:0x7f1c9418d169 [ 127.447216][ T6281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 127.447254][ T6281] RSP: 002b:00007f1c950c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 127.447284][ T6281] RAX: ffffffffffffffda RBX: 00007f1c943a5fa0 RCX: 00007f1c9418d169 [ 127.447303][ T6281] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 127.447321][ T6281] RBP: 00007f1c9420e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 127.447339][ T6281] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 127.447356][ T6281] R13: 0000000000000000 R14: 00007f1c943a5fa0 R15: 00007ffc4cfc8f48 [ 127.447395][ T6281] [ 128.646757][ T6305] random: crng reseeded on system resumption [ 130.387961][ T6322] random: crng reseeded on system resumption [ 132.326849][ T6342] random: crng reseeded on system resumption [ 133.773448][ T6365] random: crng reseeded on system resumption [ 135.436305][ T6382] random: crng reseeded on system resumption [ 137.024433][ T6409] random: crng reseeded on system resumption [ 137.103538][ T6412] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 138.207019][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.213740][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 139.506758][ T6447] netlink: 'syz.2.89': attribute type 1 has an invalid length. [ 139.525216][ T6448] random: crng reseeded on system resumption [ 140.851742][ T6461] netlink: 'syz.0.90': attribute type 1 has an invalid length. [ 143.699104][ T6497] random: crng reseeded on system resumption [ 145.253225][ T6521] netlink: 'syz.2.101': attribute type 1 has an invalid length. [ 146.507563][ T6531] netlink: 'syz.1.102': attribute type 1 has an invalid length. [ 147.738716][ T6545] random: crng reseeded on system resumption [ 147.962183][ T6551] netlink: 'syz.2.106': attribute type 1 has an invalid length. [ 149.589841][ T6569] netlink: 'syz.1.108': attribute type 1 has an invalid length. [ 151.815465][ T6589] netlink: 'syz.2.111': attribute type 1 has an invalid length. [ 152.018177][ T6593] random: crng reseeded on system resumption [ 153.189064][ T6604] netlink: 'syz.1.115': attribute type 1 has an invalid length. [ 153.233995][ T6606] netlink: 'syz.0.114': attribute type 1 has an invalid length. [ 154.224765][ T6616] netlink: 'syz.2.116': attribute type 1 has an invalid length. [ 156.269336][ T6637] netlink: 'syz.2.120': attribute type 1 has an invalid length. [ 157.328797][ T6646] netlink: 'syz.0.122': attribute type 1 has an invalid length. [ 157.334738][ T6640] syz.3.121 (6640) used greatest stack depth: 19616 bytes left [ 158.529098][ T6663] random: crng reseeded on system resumption [ 158.594887][ T6662] Invalid ELF header magic: != ELF [ 160.730972][ T6689] random: crng reseeded on system resumption [ 163.716032][ T6719] Invalid ELF header magic: != ELF [ 163.790471][ T6722] random: crng reseeded on system resumption [ 165.004616][ T6740] netlink: 'syz.3.140': attribute type 1 has an invalid length. [ 168.442016][ T6780] Invalid ELF header magic: != ELF [ 168.610901][ T6785] netlink: 'syz.3.149': attribute type 4 has an invalid length. [ 168.626584][ T6783] random: crng reseeded on system resumption [ 169.794307][ T6802] netlink: 'syz.0.152': attribute type 4 has an invalid length. [ 171.186515][ T6815] netlink: 'syz.0.155': attribute type 1 has an invalid length. [ 171.446035][ T6819] random: crng reseeded on system resumption [ 171.541657][ T6818] Invalid ELF header magic: != ELF [ 173.797338][ T6849] netlink: 'syz.3.162': attribute type 1 has an invalid length. [ 174.950318][ T6861] netlink: 'syz.0.164': attribute type 1 has an invalid length. [ 174.990232][ T6864] random: crng reseeded on system resumption [ 175.053829][ T6862] netlink: 'syz.2.163': attribute type 1 has an invalid length. [ 176.505605][ T6875] Invalid ELF header magic: != ELF [ 176.684553][ T6879] netlink: 'syz.1.167': attribute type 1 has an invalid length. [ 177.646987][ T6897] random: crng reseeded on system resumption [ 177.948042][ T6900] netlink: 'syz.1.172': attribute type 1 has an invalid length. [ 178.536406][ T6908] netlink: 'syz.0.173': attribute type 1 has an invalid length. [ 179.763421][ T6916] netlink: 'syz.1.174': attribute type 1 has an invalid length. [ 180.733461][ T6929] Invalid ELF header magic: != ELF [ 180.961258][ T6935] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 181.674728][ T6943] FAULT_INJECTION: forcing a failure. [ 181.674728][ T6943] name failslab, interval 1, probability 0, space 0, times 0 [ 181.687795][ T6943] CPU: 0 UID: 0 PID: 6943 Comm: syz.1.181 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 181.687833][ T6943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.687853][ T6943] Call Trace: [ 181.687863][ T6943] [ 181.687875][ T6943] dump_stack_lvl+0x16c/0x1f0 [ 181.687930][ T6943] should_fail_ex+0x50a/0x650 [ 181.687968][ T6943] ? tipc_group_create_member+0x57/0x640 [ 181.688005][ T6943] should_failslab+0xc2/0x120 [ 181.688036][ T6943] __kmalloc_cache_noprof+0x68/0x410 [ 181.688083][ T6943] ? do_raw_spin_lock+0x12d/0x2c0 [ 181.688121][ T6943] tipc_group_create_member+0x57/0x640 [ 181.688167][ T6943] tipc_nametbl_build_group+0x21a/0x400 [ 181.688248][ T6943] tipc_setsockopt+0x95a/0xdf0 [ 181.688297][ T6943] ? __pfx_tipc_setsockopt+0x10/0x10 [ 181.688362][ T6943] ? __pfx_tipc_setsockopt+0x10/0x10 [ 181.688406][ T6943] do_sock_setsockopt+0x222/0x480 [ 181.688444][ T6943] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 181.688482][ T6943] ? lock_acquire+0x2f/0xb0 [ 181.688545][ T6943] __sys_setsockopt+0x1a0/0x230 [ 181.688600][ T6943] __x64_sys_setsockopt+0xbd/0x160 [ 181.688648][ T6943] ? do_syscall_64+0x91/0x250 [ 181.688695][ T6943] ? lockdep_hardirqs_on+0x7c/0x110 [ 181.688739][ T6943] do_syscall_64+0xcd/0x250 [ 181.688790][ T6943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.688833][ T6943] RIP: 0033:0x7f1c9418d169 [ 181.688859][ T6943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.688889][ T6943] RSP: 002b:00007f1c950c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 181.688917][ T6943] RAX: ffffffffffffffda RBX: 00007f1c943a5fa0 RCX: 00007f1c9418d169 [ 181.688937][ T6943] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 181.688955][ T6943] RBP: 00007f1c9420e2a0 R08: 0000000000000014 R09: 0000000000000000 [ 181.688973][ T6943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.688991][ T6943] R13: 0000000000000000 R14: 00007f1c943a5fa0 R15: 00007ffc4cfc8f48 [ 181.689032][ T6943] [ 182.254424][ T6949] random: crng reseeded on system resumption [ 183.405752][ T6970] netlink: 'syz.2.186': attribute type 1 has an invalid length. [ 184.038264][ T6975] Invalid ELF header magic: != ELF [ 184.699997][ T6985] FAULT_INJECTION: forcing a failure. [ 184.699997][ T6985] name failslab, interval 1, probability 0, space 0, times 0 [ 184.712946][ T6985] CPU: 0 UID: 0 PID: 6985 Comm: syz.2.190 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 184.712984][ T6985] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 184.713010][ T6985] Call Trace: [ 184.713019][ T6985] [ 184.713030][ T6985] dump_stack_lvl+0x16c/0x1f0 [ 184.713085][ T6985] should_fail_ex+0x50a/0x650 [ 184.713117][ T6985] ? hlock_class+0x4e/0x130 [ 184.713156][ T6985] should_failslab+0xc2/0x120 [ 184.713188][ T6985] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 184.713235][ T6985] ? __pfx_mark_lock+0x10/0x10 [ 184.713277][ T6985] ? __alloc_skb+0x2b1/0x380 [ 184.713331][ T6985] __alloc_skb+0x2b1/0x380 [ 184.713377][ T6985] ? __pfx___alloc_skb+0x10/0x10 [ 184.713444][ T6985] ? tipc_named_publish+0x1db/0x770 [ 184.713489][ T6985] tipc_buf_acquire+0x26/0xe0 [ 184.713518][ T6985] named_prepare_buf+0x29/0x170 [ 184.713554][ T6985] tipc_named_publish+0x1ed/0x770 [ 184.713596][ T6985] tipc_nametbl_publish+0x17d/0x280 [ 184.713645][ T6985] tipc_sk_publish+0x1d8/0x430 [ 184.713690][ T6985] ? __pfx_tipc_sk_publish+0x10/0x10 [ 184.713746][ T6985] tipc_setsockopt+0x965/0xdf0 [ 184.713793][ T6985] ? __pfx_tipc_setsockopt+0x10/0x10 [ 184.713859][ T6985] ? __pfx_tipc_setsockopt+0x10/0x10 [ 184.713905][ T6985] do_sock_setsockopt+0x222/0x480 [ 184.713941][ T6985] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 184.713979][ T6985] ? lock_acquire+0x2f/0xb0 [ 184.714052][ T6985] __sys_setsockopt+0x1a0/0x230 [ 184.714109][ T6985] __x64_sys_setsockopt+0xbd/0x160 [ 184.714158][ T6985] ? do_syscall_64+0x91/0x250 [ 184.714206][ T6985] ? lockdep_hardirqs_on+0x7c/0x110 [ 184.714249][ T6985] do_syscall_64+0xcd/0x250 [ 184.714300][ T6985] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.714345][ T6985] RIP: 0033:0x7fedf998d169 [ 184.714371][ T6985] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.714402][ T6985] RSP: 002b:00007fedfa700038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 184.714431][ T6985] RAX: ffffffffffffffda RBX: 00007fedf9ba5fa0 RCX: 00007fedf998d169 [ 184.714451][ T6985] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 184.714468][ T6985] RBP: 00007fedf9a0e2a0 R08: 0000000000000014 R09: 0000000000000000 [ 184.714486][ T6985] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.714504][ T6985] R13: 0000000000000000 R14: 00007fedf9ba5fa0 R15: 00007fff57a043c8 [ 184.714540][ T6985] [ 184.714553][ T6985] tipc: Publication distribution failure [ 184.730270][ T6978] FAULT_INJECTION: forcing a failure. [ 184.730270][ T6978] name failslab, interval 1, probability 0, space 0, times 0 [ 184.761980][ T6986] netlink: 'syz.0.191': attribute type 1 has an invalid length. [ 184.767690][ T6978] CPU: 1 UID: 0 PID: 6978 Comm: syz.3.188 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 184.767730][ T6978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 184.767754][ T6978] Call Trace: [ 184.767763][ T6978] [ 184.767775][ T6978] dump_stack_lvl+0x16c/0x1f0 [ 184.767825][ T6978] should_fail_ex+0x50a/0x650 [ 184.767857][ T6978] ? fs_reclaim_acquire+0xae/0x150 [ 184.767908][ T6978] should_failslab+0xc2/0x120 [ 184.767958][ T6978] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 184.768014][ T6978] ? __alloc_skb+0x2b1/0x380 [ 184.768073][ T6978] __alloc_skb+0x2b1/0x380 [ 184.768126][ T6978] ? __pfx___alloc_skb+0x10/0x10 [ 184.768179][ T6978] ? kmem_cache_alloc_noprof+0x1e0/0x3d0 [ 184.768238][ T6978] ? tcp_send_mss+0x159/0x2c0 [ 184.768278][ T6978] mptcp_sendmsg_frag+0x4e1/0x2de0 [ 184.768331][ T6978] ? __pfx_mptcp_sendmsg_frag+0x10/0x10 [ 184.768365][ T6978] ? mptcp_sched_get_send+0x2c1/0x6e0 [ 184.768403][ T6978] ? __pfx_mptcp_sched_get_send+0x10/0x10 [ 184.768447][ T6978] __subflow_push_pending+0x34e/0xad0 [ 184.768516][ T6978] __mptcp_push_pending+0x2db/0x560 [ 184.768564][ T6978] ? __pfx___mptcp_push_pending+0x10/0x10 [ 184.768608][ T6978] ? __virt_addr_valid+0x5e/0x590 [ 184.768640][ T6978] ? __phys_addr+0xc6/0x150 [ 184.768689][ T6978] ? __phys_addr_symbol+0x30/0x80 [ 184.768724][ T6978] ? __check_object_size+0x488/0x710 [ 184.768780][ T6978] mptcp_sendmsg+0x179d/0x1d30 [ 184.768845][ T6978] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 184.768890][ T6978] ? __pfx_aa_sk_perm+0x10/0x10 [ 184.768933][ T6978] ? __pfx___futex_wait+0x10/0x10 [ 184.768988][ T6978] ? __pfx_mptcp_sendmsg+0x10/0x10 [ 184.769035][ T6978] inet_sendmsg+0x119/0x140 [ 184.769073][ T6978] sock_write_iter+0x4ac/0x5b0 [ 184.769118][ T6978] ? __pfx_sock_write_iter+0x10/0x10 [ 184.769177][ T6978] ? bpf_lsm_file_permission+0x9/0x10 [ 184.769230][ T6978] ? security_file_permission+0x71/0x210 [ 184.769280][ T6978] ? rw_verify_area+0xcf/0x680 [ 184.769328][ T6978] vfs_write+0x5ae/0x1150 [ 184.769378][ T6978] ? __pfx_sock_write_iter+0x10/0x10 [ 184.769425][ T6978] ? __pfx_vfs_write+0x10/0x10 [ 184.769470][ T6978] ? do_futex+0x123/0x350 [ 184.769514][ T6978] ? __fget_files+0x40/0x3a0 [ 184.769585][ T6978] ksys_write+0x207/0x250 [ 184.769634][ T6978] ? __pfx_ksys_write+0x10/0x10 [ 184.769694][ T6978] do_syscall_64+0xcd/0x250 [ 184.769755][ T6978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.769805][ T6978] RIP: 0033:0x7efe2c18d169 [ 184.769833][ T6978] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.769865][ T6978] RSP: 002b:00007efe2cf3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 184.769896][ T6978] RAX: ffffffffffffffda RBX: 00007efe2c3a5fa0 RCX: 00007efe2c18d169 [ 184.769919][ T6978] RDX: 0000000000100082 RSI: 0000000000000000 RDI: 0000000000000003 [ 184.769941][ T6978] RBP: 00007efe2c20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 184.769962][ T6978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 184.769982][ T6978] R13: 0000000000000000 R14: 00007efe2c3a5fa0 R15: 00007ffc0536d378 [ 184.770025][ T6978] [ 185.727648][ T6993] random: crng reseeded on system resumption [ 187.265426][ T7015] random: crng reseeded on system resumption [ 187.307286][ T7019] netlink: 'syz.0.198': attribute type 1 has an invalid length. [ 187.470567][ T7017] Invalid ELF header magic: != ELF [ 188.429096][ T7030] netlink: 'syz.0.201': attribute type 1 has an invalid length. [ 190.077489][ T7053] netlink: 'syz.1.205': attribute type 1 has an invalid length. [ 190.836724][ T7064] netlink: 'syz.3.206': attribute type 1 has an invalid length. [ 192.133412][ T7072] random: crng reseeded on system resumption [ 192.149331][ T7075] netlink: 'syz.3.209': attribute type 1 has an invalid length. [ 192.259081][ T7076] Invalid ELF header magic: != ELF [ 195.226769][ T7108] random: crng reseeded on system resumption [ 195.645584][ T7115] netlink: 'syz.0.217': attribute type 1 has an invalid length. [ 197.298475][ T7125] Invalid ELF header magic: != ELF [ 197.543866][ T7133] netlink: 'syz.0.221': attribute type 1 has an invalid length. [ 197.575206][ T7132] netlink: 'syz.2.220': attribute type 1 has an invalid length. [ 198.786821][ T7147] random: crng reseeded on system resumption [ 199.651094][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 199.658124][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 201.449214][ T7181] Invalid ELF header magic: != ELF [ 201.770175][ T7188] random: crng reseeded on system resumption [ 202.074038][ T7192] netlink: 'syz.3.232': attribute type 1 has an invalid length. [ 203.276695][ T7205] netlink: 'syz.3.235': attribute type 1 has an invalid length. [ 204.598091][ T7215] random: crng reseeded on system resumption [ 204.923125][ T7221] netlink: 'syz.0.238': attribute type 1 has an invalid length. [ 206.475755][ T7240] netlink: 'syz.0.241': attribute type 1 has an invalid length. [ 206.533117][ T7237] Invalid ELF header magic: != ELF [ 206.823042][ T7247] random: crng reseeded on system resumption [ 207.136642][ T7250] netlink: 'syz.3.243': attribute type 1 has an invalid length. [ 208.491014][ T7263] netlink: 'syz.0.245': attribute type 1 has an invalid length. [ 210.374443][ T7282] netlink: 'syz.3.249': attribute type 1 has an invalid length. [ 210.553788][ T7288] random: crng reseeded on system resumption [ 211.958587][ T5852] Bluetooth: hci2: command 0x0406 tx timeout [ 211.959539][ T5854] Bluetooth: hci0: command 0x0406 tx timeout [ 211.966122][ T5852] Bluetooth: hci3: command 0x0406 tx timeout [ 211.970706][ T5853] Bluetooth: hci1: command 0x0406 tx timeout [ 212.871272][ T7304] Invalid ELF header magic: != ELF [ 212.943572][ T7309] netlink: 'syz.0.253': attribute type 1 has an invalid length. [ 212.957685][ T7310] random: crng reseeded on system resumption [ 215.536904][ T7339] random: crng reseeded on system resumption [ 215.616562][ T7341] netlink: 'syz.1.259': attribute type 1 has an invalid length. [ 218.051768][ T7369] Invalid ELF header magic: != ELF [ 218.295923][ T7376] netlink: 'syz.1.266': attribute type 1 has an invalid length. [ 218.370381][ T7379] random: crng reseeded on system resumption [ 220.926601][ T7409] random: crng reseeded on system resumption [ 221.400699][ T7417] Invalid ELF header magic: != ELF [ 222.532176][ T7418] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 222.585055][ T7418] File: /dev/ram7 PID: 7418 Comm: syz.1.274 [ 223.177963][ T7441] netlink: 'syz.2.280': attribute type 1 has an invalid length. [ 223.390073][ T7444] netlink: 'syz.0.278': attribute type 1 has an invalid length. [ 224.915260][ T7467] random: crng reseeded on system resumption [ 226.053706][ T7477] Invalid ELF header magic: != ELF [ 227.906865][ T7512] random: crng reseeded on system resumption [ 228.983266][ T7522] netlink: 'syz.2.293': attribute type 1 has an invalid length. [ 229.897513][ T7530] random: crng reseeded on system resumption [ 230.194422][ T7534] Invalid ELF header magic: != ELF [ 232.252981][ T7559] netlink: 'syz.1.301': attribute type 1 has an invalid length. [ 232.965668][ T7566] random: crng reseeded on system resumption [ 234.360449][ T7580] netlink: 'syz.1.304': attribute type 1 has an invalid length. [ 235.387731][ T7588] Invalid ELF header magic: != ELF [ 235.550459][ T7591] netlink: 'syz.2.306': attribute type 1 has an invalid length. [ 235.630905][ T7593] netlink: 'syz.1.307': attribute type 1 has an invalid length. [ 236.995405][ T7606] netlink: 'syz.0.309': attribute type 1 has an invalid length. [ 237.249642][ T7613] random: crng reseeded on system resumption [ 238.146704][ T7620] netlink: 'syz.2.311': attribute type 1 has an invalid length. [ 240.086864][ T7651] random: crng reseeded on system resumption [ 241.609597][ T7656] Invalid ELF header magic: != ELF [ 241.731158][ T7661] netlink: 'syz.2.320': attribute type 1 has an invalid length. [ 243.097561][ T7679] random: crng reseeded on system resumption [ 244.371414][ T7683] netlink: 'syz.2.323': attribute type 1 has an invalid length. [ 245.116882][ T7690] netlink: 'syz.2.324': attribute type 1 has an invalid length. [ 246.507920][ T7710] netlink: 'syz.2.326': attribute type 1 has an invalid length. [ 247.972483][ T7728] Invalid ELF header magic: != ELF [ 248.473661][ T7735] netlink: 'syz.2.331': attribute type 1 has an invalid length. [ 250.112319][ T7754] random: crng reseeded on system resumption [ 250.618971][ T7761] netlink: 'syz.2.336': attribute type 4 has an invalid length. [ 252.316840][ T7775] random: crng reseeded on system resumption [ 253.461984][ T7785] netlink: 'syz.2.348': attribute type 1 has an invalid length. [ 254.531365][ T7792] netlink: 'syz.3.339': attribute type 1 has an invalid length. [ 255.414388][ T7804] Invalid ELF header magic: != ELF [ 256.895691][ T7818] random: crng reseeded on system resumption [ 257.346563][ T7820] random: crng reseeded on system resumption [ 258.762018][ T7838] random: crng reseeded on system resumption [ 259.205370][ T7853] Invalid ELF header magic: != ELF [ 261.079685][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 261.086124][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 261.356824][ T7869] random: crng reseeded on system resumption [ 263.577624][ T7892] random: crng reseeded on system resumption [ 264.224423][ T7903] netlink: 'syz.3.364': attribute type 1 has an invalid length. [ 265.603654][ T7914] random: crng reseeded on system resumption [ 267.176157][ T7938] random: crng reseeded on system resumption [ 269.442168][ T7967] random: crng reseeded on system resumption [ 271.489459][ T7995] random: crng reseeded on system resumption [ 273.276611][ T8019] random: crng reseeded on system resumption [ 275.264845][ T8052] netlink: 'syz.1.390': attribute type 1 has an invalid length. [ 275.358114][ T8050] random: crng reseeded on system resumption [ 277.721562][ T8089] random: crng reseeded on system resumption [ 278.275890][ T8098] netlink: 'syz.1.397': attribute type 1 has an invalid length. [ 279.912557][ T8114] random: crng reseeded on system resumption [ 281.583974][ T8143] random: crng reseeded on system resumption [ 282.974430][ T8157] netlink: 'syz.3.407': attribute type 1 has an invalid length. [ 283.341217][ T8162] netlink: 'syz.1.408': attribute type 1 has an invalid length. [ 284.476454][ T8171] netlink: 'syz.3.412': attribute type 1 has an invalid length. [ 284.610149][ T8175] random: crng reseeded on system resumption [ 286.628244][ T8203] random: crng reseeded on system resumption [ 288.128692][ T8231] random: crng reseeded on system resumption [ 290.117238][ T8258] netlink: 'syz.3.426': attribute type 1 has an invalid length. [ 290.365844][ T8261] random: crng reseeded on system resumption [ 291.594358][ T8276] netlink: 'syz.2.428': attribute type 1 has an invalid length. [ 292.944123][ T8294] random: crng reseeded on system resumption [ 294.426832][ T8310] netlink: 'syz.0.442': attribute type 1 has an invalid length. [ 294.507825][ T8317] random: crng reseeded on system resumption [ 295.252083][ T8323] netlink: 'syz.2.435': attribute type 1 has an invalid length. [ 298.452568][ T8364] random: crng reseeded on system resumption [ 300.538479][ T8389] netlink: 'syz.3.445': attribute type 1 has an invalid length. [ 301.416621][ T8395] random: crng reseeded on system resumption [ 303.473535][ T8422] random: crng reseeded on system resumption [ 303.711671][ T8427] netlink: 'syz.0.453': attribute type 1 has an invalid length. [ 306.800686][ T8459] random: crng reseeded on system resumption [ 308.937667][ T8479] random: crng reseeded on system resumption [ 311.588762][ T8506] random: crng reseeded on system resumption [ 315.178440][ T8530] random: crng reseeded on system resumption [ 316.876972][ T8534] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 316.956593][ T8534] File: /dev/ram7 PID: 8534 Comm: syz.1.471 [ 318.172522][ T8570] random: crng reseeded on system resumption [ 319.763732][ T8582] random: crng reseeded on system resumption [ 322.520061][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.526697][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.607744][ T8616] random: crng reseeded on system resumption [ 323.896580][ T8628] netlink: 'syz.2.488': attribute type 1 has an invalid length. [ 325.776829][ T8646] random: crng reseeded on system resumption [ 328.245978][ T8670] random: crng reseeded on system resumption [ 332.038145][ T8703] random: crng reseeded on system resumption [ 335.138790][ T8737] random: crng reseeded on system resumption [ 336.656872][ T8759] random: crng reseeded on system resumption [ 339.330719][ T8783] random: crng reseeded on system resumption [ 342.698394][ T8819] random: crng reseeded on system resumption [ 344.692229][ T8843] random: crng reseeded on system resumption [ 347.954082][ T8879] random: crng reseeded on system resumption [ 348.700740][ T8889] netlink: 'syz.0.538': attribute type 1 has an invalid length. [ 350.122355][ T8898] random: crng reseeded on system resumption [ 350.736419][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 351.984932][ T8922] netlink: 'syz.1.545': attribute type 1 has an invalid length. [ 352.787545][ T8931] random: crng reseeded on system resumption [ 354.043379][ T8947] netlink: 'syz.3.549': attribute type 1 has an invalid length. [ 355.297395][ T8962] random: crng reseeded on system resumption [ 356.774677][ T8987] random: crng reseeded on system resumption [ 357.174104][ T8994] netlink: 'syz.3.562': attribute type 1 has an invalid length. [ 359.996628][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 360.006469][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 360.484114][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 361.006554][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 361.286900][ T9036] netlink: 'syz.0.566': attribute type 1 has an invalid length. [ 361.488396][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 362.833662][ T9051] random: crng reseeded on system resumption [ 364.817833][ T9062] netlink: 'syz.2.579': attribute type 1 has an invalid length. [ 368.016360][ T9097] process 'syz.0.575' launched './file0' with NULL argv: empty string added [ 369.466523][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 371.596532][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 371.605069][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 372.035641][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 375.028290][ T9166] random: crng reseeded on system resumption [ 379.070733][ T9209] random: crng reseeded on system resumption [ 381.116985][ T9237] random: crng reseeded on system resumption [ 383.961968][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.972696][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.051240][ T9257] random: crng reseeded on system resumption [ 385.648559][ T9283] random: crng reseeded on system resumption [ 385.990541][ T9289] netlink: 'syz.3.606': attribute type 1 has an invalid length. [ 389.464115][ T9308] netlink: 'syz.3.616': attribute type 1 has an invalid length. [ 391.074638][ T9327] netlink: 'syz.1.618': attribute type 1 has an invalid length. [ 392.636674][ T9345] random: crng reseeded on system resumption [ 396.062417][ T9355] netlink: 'syz.1.622': attribute type 1 has an invalid length. [ 398.704764][ T9390] netlink: 'syz.1.617': attribute type 1 has an invalid length. [ 402.944021][ T9424] netlink: 'syz.0.624': attribute type 1 has an invalid length. [ 407.089895][ T9469] random: crng reseeded on system resumption [ 409.217428][ T9492] random: crng reseeded on system resumption [ 409.575290][ T9501] netlink: 'syz.2.634': attribute type 1 has an invalid length. [ 412.400182][ T9526] random: crng reseeded on system resumption [ 414.553451][ T9558] netlink: 'syz.3.642': attribute type 1 has an invalid length. [ 428.234200][ T9702] Invalid ELF header magic: != ELF [ 437.204253][ T9881] Invalid ELF header magic: != ELF [ 438.877875][ T9913] Invalid ELF header magic: != ELF [ 443.020957][T10009] Invalid ELF header magic: != ELF [ 443.502384][T10016] Invalid ELF header magic: != ELF [ 444.020251][T10035] Invalid ELF header magic: != ELF [ 445.269703][T10059] Invalid ELF header magic: != ELF [ 445.398904][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.405255][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.753856][T10064] Invalid ELF header magic: != ELF [ 445.795610][T10066] Invalid ELF header magic: != ELF [ 445.943799][T10075] Invalid ELF header magic: != ELF [ 446.564103][T10088] Invalid ELF header magic: != ELF [ 448.911486][T10122] Invalid ELF header magic: != ELF [ 450.875788][T10150] Invalid ELF header magic: != ELF [ 451.727968][T10165] Invalid ELF header magic: != ELF [ 453.056362][T10181] Invalid ELF header magic: != ELF [ 453.226396][T10183] Invalid ELF header magic: != ELF [ 454.737769][T10193] Invalid ELF header magic: != ELF [ 455.309593][T10200] Invalid ELF header magic: != ELF [ 455.732037][T10207] netlink: 'syz.3.738': attribute type 1 has an invalid length. [ 457.230464][T10213] Invalid ELF header magic: != ELF [ 458.082875][T10228] netlink: 'syz.3.743': attribute type 1 has an invalid length. [ 461.322041][T10250] FAULT_INJECTION: forcing a failure. [ 461.322041][T10250] name failslab, interval 1, probability 0, space 0, times 0 [ 461.335091][T10250] CPU: 1 UID: 0 PID: 10250 Comm: syz.1.747 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 461.335129][T10250] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 461.335164][T10250] Call Trace: [ 461.335174][T10250] [ 461.335187][T10250] dump_stack_lvl+0x16c/0x1f0 [ 461.335243][T10250] should_fail_ex+0x50a/0x650 [ 461.335280][T10250] ? tipc_group_create_member+0x57/0x640 [ 461.335318][T10250] should_failslab+0xc2/0x120 [ 461.335350][T10250] __kmalloc_cache_noprof+0x68/0x410 [ 461.335405][T10250] tipc_group_create_member+0x57/0x640 [ 461.335451][T10250] tipc_group_proto_rcv+0x1840/0x1dc0 [ 461.335492][T10250] ? __lock_acquire+0x1560/0x3c40 [ 461.335555][T10250] tipc_sk_filter_rcv+0x1b16/0x3050 [ 461.335626][T10250] ? hlock_class+0x4e/0x130 [ 461.335658][T10250] ? mark_lock+0xb5/0xc60 [ 461.335700][T10250] ? __pfx___lock_acquire+0x10/0x10 [ 461.335754][T10250] ? __pfx_tipc_sk_filter_rcv+0x10/0x10 [ 461.335810][T10250] ? lock_acquire.part.0+0x11b/0x380 [ 461.335855][T10250] ? find_held_lock+0x2d/0x110 [ 461.335906][T10250] ? mark_held_locks+0x9f/0xe0 [ 461.335961][T10250] tipc_sk_rcv+0xfc5/0x1b90 [ 461.336013][T10250] ? devres_destroy+0x5a/0xb0 [ 461.336065][T10250] ? __pfx___lock_acquire+0x10/0x10 [ 461.336109][T10250] ? do_sock_setsockopt+0x222/0x480 [ 461.336159][T10250] ? __pfx_tipc_sk_rcv+0x10/0x10 [ 461.336219][T10250] ? find_held_lock+0x2d/0x110 [ 461.336269][T10250] ? lockdep_init_map_type+0x16d/0x7d0 [ 461.336327][T10250] tipc_node_xmit+0x1b3/0xe20 [ 461.336366][T10250] ? rcu_is_watching+0x12/0xc0 [ 461.336400][T10250] ? __pfx_tipc_node_xmit+0x10/0x10 [ 461.336435][T10250] ? kmem_cache_alloc_node_noprof+0x272/0x3c0 [ 461.336496][T10250] ? __asan_memset+0x23/0x50 [ 461.336541][T10250] ? __build_skb_around+0x278/0x3b0 [ 461.336594][T10250] ? tipc_node_distr_xmit+0x178/0x3c0 [ 461.336642][T10250] tipc_node_distr_xmit+0x178/0x3c0 [ 461.336683][T10250] ? __pfx_tipc_node_distr_xmit+0x10/0x10 [ 461.336734][T10250] ? tipc_group_update_member+0x3a2/0x540 [ 461.336780][T10250] tipc_group_join+0xfa/0x230 [ 461.336818][T10250] ? __pfx_tipc_group_join+0x10/0x10 [ 461.336879][T10250] tipc_setsockopt+0x9f3/0xdf0 [ 461.336925][T10250] ? __pfx_tipc_setsockopt+0x10/0x10 [ 461.336988][T10250] ? __pfx_tipc_setsockopt+0x10/0x10 [ 461.337032][T10250] do_sock_setsockopt+0x222/0x480 [ 461.337068][T10250] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 461.337106][T10250] ? lock_acquire+0x2f/0xb0 [ 461.337175][T10250] __sys_setsockopt+0x1a0/0x230 [ 461.337229][T10250] __x64_sys_setsockopt+0xbd/0x160 [ 461.337278][T10250] ? do_syscall_64+0x91/0x250 [ 461.337322][T10250] ? lockdep_hardirqs_on+0x7c/0x110 [ 461.337364][T10250] do_syscall_64+0xcd/0x250 [ 461.337413][T10250] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.337458][T10250] RIP: 0033:0x7f1c9418d169 [ 461.337483][T10250] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.337513][T10250] RSP: 002b:00007f1c950c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 461.337542][T10250] RAX: ffffffffffffffda RBX: 00007f1c943a5fa0 RCX: 00007f1c9418d169 [ 461.337562][T10250] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 461.337579][T10250] RBP: 00007f1c9420e2a0 R08: 0000000000000014 R09: 0000000000000000 [ 461.337597][T10250] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 461.337615][T10250] R13: 0000000000000000 R14: 00007f1c943a5fa0 R15: 00007ffc4cfc8f48 [ 461.337654][T10250] [ 463.111963][T10266] Invalid ELF header magic: != ELF [ 464.302556][T10275] Invalid ELF header magic: != ELF [ 469.230367][T10302] Invalid ELF header magic: != ELF [ 470.103192][T10308] Invalid ELF header magic: != ELF [ 473.645519][T10336] netlink: 'syz.2.760': attribute type 1 has an invalid length. [ 477.008257][T10366] FAULT_INJECTION: forcing a failure. [ 477.008257][T10366] name failslab, interval 1, probability 0, space 0, times 0 [ 477.021229][T10366] CPU: 0 UID: 0 PID: 10366 Comm: syz.2.772 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 477.021267][T10366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 477.021287][T10366] Call Trace: [ 477.021297][T10366] [ 477.021309][T10366] dump_stack_lvl+0x16c/0x1f0 [ 477.021364][T10366] should_fail_ex+0x50a/0x650 [ 477.021394][T10366] ? lockdep_hardirqs_on+0x7c/0x110 [ 477.021445][T10366] ? tipc_topsrv_queue_evt+0x124/0x400 [ 477.021481][T10366] should_failslab+0xc2/0x120 [ 477.021513][T10366] __kmalloc_cache_noprof+0x68/0x410 [ 477.021571][T10366] tipc_topsrv_queue_evt+0x124/0x400 [ 477.021615][T10366] tipc_sub_report_overlap+0x555/0x9c0 [ 477.021660][T10366] tipc_nametbl_insert_publ+0xe0f/0x1660 [ 477.021728][T10366] tipc_nametbl_publish+0x137/0x280 [ 477.021778][T10366] tipc_sk_publish+0x1d8/0x430 [ 477.021826][T10366] ? __pfx_tipc_sk_publish+0x10/0x10 [ 477.021885][T10366] tipc_setsockopt+0x965/0xdf0 [ 477.021936][T10366] ? __pfx_tipc_setsockopt+0x10/0x10 [ 477.022004][T10366] ? __pfx_tipc_setsockopt+0x10/0x10 [ 477.022050][T10366] do_sock_setsockopt+0x222/0x480 [ 477.022088][T10366] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 477.022128][T10366] ? lock_acquire+0x2f/0xb0 [ 477.022202][T10366] __sys_setsockopt+0x1a0/0x230 [ 477.022261][T10366] __x64_sys_setsockopt+0xbd/0x160 [ 477.022310][T10366] ? do_syscall_64+0x91/0x250 [ 477.022358][T10366] ? lockdep_hardirqs_on+0x7c/0x110 [ 477.022404][T10366] do_syscall_64+0xcd/0x250 [ 477.022457][T10366] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 477.022502][T10366] RIP: 0033:0x7fedf998d169 [ 477.022527][T10366] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 477.022559][T10366] RSP: 002b:00007fedfa700038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 477.022589][T10366] RAX: ffffffffffffffda RBX: 00007fedf9ba5fa0 RCX: 00007fedf998d169 [ 477.022610][T10366] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 477.022628][T10366] RBP: 00007fedf9a0e2a0 R08: 0000000000000014 R09: 0000000000000000 [ 477.022646][T10366] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 477.022664][T10366] R13: 0000000000000000 R14: 00007fedf9ba5fa0 R15: 00007fff57a043c8 [ 477.022706][T10366] [ 481.214044][T10411] Invalid ELF header magic: != ELF [ 485.125733][T10455] Invalid ELF header magic: != ELF [ 496.528348][T10534] Invalid ELF header magic: != ELF [ 497.856457][T10559] netlink: 'syz.2.795': attribute type 1 has an invalid length. [ 498.993476][T10576] netlink: 'syz.2.798': attribute type 1 has an invalid length. [ 506.848296][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.854662][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 529.282747][T10787] FAULT_INJECTION: forcing a failure. [ 529.282747][T10787] name failslab, interval 1, probability 0, space 0, times 0 [ 529.376921][T10787] CPU: 0 UID: 0 PID: 10787 Comm: syz.1.828 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 529.376966][T10787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 529.376983][T10787] Call Trace: [ 529.376992][T10787] [ 529.377003][T10787] dump_stack_lvl+0x16c/0x1f0 [ 529.377053][T10787] should_fail_ex+0x50a/0x650 [ 529.377082][T10787] ? fs_reclaim_acquire+0xae/0x150 [ 529.377126][T10787] should_failslab+0xc2/0x120 [ 529.377156][T10787] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 529.377207][T10787] ? sock_alloc_inode+0x25/0x1c0 [ 529.377249][T10787] ? __pfx_sock_alloc_inode+0x10/0x10 [ 529.377283][T10787] sock_alloc_inode+0x25/0x1c0 [ 529.377325][T10787] alloc_inode+0x5d/0x230 [ 529.377356][T10787] sock_alloc+0x40/0x280 [ 529.377389][T10787] __sock_create+0xc1/0x8d0 [ 529.377436][T10787] __sys_socket+0x14f/0x260 [ 529.377478][T10787] ? __pfx___sys_socket+0x10/0x10 [ 529.377516][T10787] ? ksys_write+0x1ba/0x250 [ 529.377560][T10787] ? __pfx_ksys_write+0x10/0x10 [ 529.377609][T10787] __x64_sys_socket+0x72/0xb0 [ 529.377648][T10787] ? lockdep_hardirqs_on+0x7c/0x110 [ 529.377691][T10787] do_syscall_64+0xcd/0x250 [ 529.377749][T10787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 529.377794][T10787] RIP: 0033:0x7f1c9418d169 [ 529.377817][T10787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 529.377846][T10787] RSP: 002b:00007f1c950c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 529.377874][T10787] RAX: ffffffffffffffda RBX: 00007f1c943a5fa0 RCX: 00007f1c9418d169 [ 529.377899][T10787] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 000000000000001e [ 529.377917][T10787] RBP: 00007f1c950c9090 R08: 0000000000000000 R09: 0000000000000000 [ 529.377935][T10787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 529.377953][T10787] R13: 0000000000000001 R14: 00007f1c943a5fa0 R15: 00007ffc4cfc8f48 [ 529.377989][T10787] [ 529.378209][T10787] socket: no more sockets [ 534.687051][T10838] FAULT_INJECTION: forcing a failure. [ 534.687051][T10838] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 534.706248][T10838] CPU: 1 UID: 0 PID: 10838 Comm: syz.1.844 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 534.706287][T10838] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 534.706304][T10838] Call Trace: [ 534.706313][T10838] [ 534.706325][T10838] dump_stack_lvl+0x16c/0x1f0 [ 534.706375][T10838] should_fail_ex+0x50a/0x650 [ 534.706410][T10838] _copy_from_user+0x2e/0xd0 [ 534.706446][T10838] __do_sys_mount_setattr+0x244/0x1580 [ 534.706494][T10838] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 534.706546][T10838] ? __pfx___do_sys_mount_setattr+0x10/0x10 [ 534.706588][T10838] ? __fget_files+0x206/0x3a0 [ 534.706639][T10838] ? fput+0x67/0x440 [ 534.706692][T10838] do_syscall_64+0xcd/0x250 [ 534.706742][T10838] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 534.706786][T10838] RIP: 0033:0x7f1c9418d169 [ 534.706809][T10838] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 534.706838][T10838] RSP: 002b:00007f1c950c9038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ba [ 534.706867][T10838] RAX: ffffffffffffffda RBX: 00007f1c943a5fa0 RCX: 00007f1c9418d169 [ 534.706887][T10838] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffffff [ 534.706905][T10838] RBP: 00007f1c950c9090 R08: 0000000000000287 R09: 0000000000000000 [ 534.706922][T10838] R10: 0000400000000640 R11: 0000000000000246 R12: 0000000000000001 [ 534.706940][T10838] R13: 0000000000000000 R14: 00007f1c943a5fa0 R15: 00007ffc4cfc8f48 [ 534.706976][T10838] [ 535.491271][T10845] FAULT_INJECTION: forcing a failure. [ 535.491271][T10845] name failslab, interval 1, probability 0, space 0, times 0 [ 535.591410][T10845] CPU: 0 UID: 0 PID: 10845 Comm: syz.1.838 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 535.591450][T10845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 535.591468][T10845] Call Trace: [ 535.591476][T10845] [ 535.591487][T10845] dump_stack_lvl+0x16c/0x1f0 [ 535.591538][T10845] should_fail_ex+0x50a/0x650 [ 535.591567][T10845] ? fs_reclaim_acquire+0xae/0x150 [ 535.591609][T10845] should_failslab+0xc2/0x120 [ 535.591638][T10845] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 535.591686][T10845] ? getname_flags.part.0+0x4c/0x550 [ 535.591727][T10845] ? vfs_write+0x306/0x1150 [ 535.591772][T10845] getname_flags.part.0+0x4c/0x550 [ 535.591812][T10845] getname+0x8d/0xe0 [ 535.591854][T10845] do_sys_openat2+0x104/0x1e0 [ 535.591892][T10845] ? __pfx_do_sys_openat2+0x10/0x10 [ 535.591929][T10845] ? __fget_files+0x206/0x3a0 [ 535.591981][T10845] __x64_sys_openat+0x175/0x210 [ 535.592016][T10845] ? __pfx___x64_sys_openat+0x10/0x10 [ 535.592050][T10845] ? ksys_write+0x1ba/0x250 [ 535.592105][T10845] do_syscall_64+0xcd/0x250 [ 535.592153][T10845] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.592197][T10845] RIP: 0033:0x7f1c9418d169 [ 535.592220][T10845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 535.592248][T10845] RSP: 002b:00007f1c950c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 535.592276][T10845] RAX: ffffffffffffffda RBX: 00007f1c943a5fa0 RCX: 00007f1c9418d169 [ 535.592295][T10845] RDX: 0000000000020a01 RSI: 00004000000054c0 RDI: ffffffffffffff9c [ 535.592314][T10845] RBP: 00007f1c950c9090 R08: 0000000000000000 R09: 0000000000000000 [ 535.592331][T10845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.592348][T10845] R13: 0000000000000001 R14: 00007f1c943a5fa0 R15: 00007ffc4cfc8f48 [ 535.592383][T10845] [ 535.876280][T10849] FAULT_INJECTION: forcing a failure. [ 535.876280][T10849] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 535.982473][T10849] CPU: 0 UID: 0 PID: 10849 Comm: syz.0.837 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 535.982514][T10849] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 535.982531][T10849] Call Trace: [ 535.982540][T10849] [ 535.982556][T10849] dump_stack_lvl+0x16c/0x1f0 [ 535.982607][T10849] should_fail_ex+0x50a/0x650 [ 535.982642][T10849] _copy_to_user+0x32/0xd0 [ 535.982680][T10849] simple_read_from_buffer+0xd0/0x160 [ 535.982726][T10849] proc_fail_nth_read+0x198/0x270 [ 535.982764][T10849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 535.982805][T10849] ? rw_verify_area+0xcf/0x680 [ 535.982843][T10849] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 535.982882][T10849] vfs_read+0x1df/0xbf0 [ 535.982922][T10849] ? __fget_files+0x1fc/0x3a0 [ 535.982966][T10849] ? __pfx___mutex_lock+0x10/0x10 [ 535.983012][T10849] ? __pfx_vfs_read+0x10/0x10 [ 535.983064][T10849] ? __fget_files+0x206/0x3a0 [ 535.983119][T10849] ksys_read+0x12b/0x250 [ 535.983161][T10849] ? __pfx_ksys_read+0x10/0x10 [ 535.983215][T10849] do_syscall_64+0xcd/0x250 [ 535.983263][T10849] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 535.983306][T10849] RIP: 0033:0x7f34a978bb7c [ 535.983329][T10849] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 535.983358][T10849] RSP: 002b:00007f34aa6b5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 535.983387][T10849] RAX: ffffffffffffffda RBX: 00007f34a99a6080 RCX: 00007f34a978bb7c [ 535.983406][T10849] RDX: 000000000000000f RSI: 00007f34aa6b50a0 RDI: 0000000000000004 [ 535.983423][T10849] RBP: 00007f34aa6b5090 R08: 0000000000000000 R09: 0000000000000000 [ 535.983440][T10849] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 535.983455][T10849] R13: 0000000000000001 R14: 00007f34a99a6080 R15: 00007ffe984b2cb8 [ 535.983492][T10849] [ 538.618583][T10885] FAULT_INJECTION: forcing a failure. [ 538.618583][T10885] name failslab, interval 1, probability 0, space 0, times 0 [ 538.656362][T10885] CPU: 0 UID: 0 PID: 10885 Comm: syz.0.850 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 538.656403][T10885] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 538.656419][T10885] Call Trace: [ 538.656428][T10885] [ 538.656439][T10885] dump_stack_lvl+0x16c/0x1f0 [ 538.656489][T10885] should_fail_ex+0x50a/0x650 [ 538.656517][T10885] ? fs_reclaim_acquire+0xae/0x150 [ 538.656559][T10885] should_failslab+0xc2/0x120 [ 538.656588][T10885] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 538.656636][T10885] ? getname_flags.part.0+0x4c/0x550 [ 538.656671][T10885] ? vfs_write+0x306/0x1150 [ 538.656715][T10885] getname_flags.part.0+0x4c/0x550 [ 538.656755][T10885] getname+0x8d/0xe0 [ 538.656795][T10885] do_sys_openat2+0x104/0x1e0 [ 538.656827][T10885] ? __pfx_do_sys_openat2+0x10/0x10 [ 538.656864][T10885] ? __fget_files+0x206/0x3a0 [ 538.656916][T10885] __x64_sys_openat+0x175/0x210 [ 538.656949][T10885] ? __pfx___x64_sys_openat+0x10/0x10 [ 538.656982][T10885] ? ksys_write+0x1ba/0x250 [ 538.657037][T10885] do_syscall_64+0xcd/0x250 [ 538.657085][T10885] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 538.657127][T10885] RIP: 0033:0x7f34a978d169 [ 538.657162][T10885] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 538.657188][T10885] RSP: 002b:00007f34aa6d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 538.657215][T10885] RAX: ffffffffffffffda RBX: 00007f34a99a5fa0 RCX: 00007f34a978d169 [ 538.657234][T10885] RDX: 0000000000000002 RSI: 0000400000000080 RDI: ffffffffffffff9c [ 538.657252][T10885] RBP: 00007f34aa6d6090 R08: 0000000000000000 R09: 0000000000000000 [ 538.657269][T10885] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 538.657284][T10885] R13: 0000000000000001 R14: 00007f34a99a5fa0 R15: 00007ffe984b2cb8 [ 538.657319][T10885] [ 539.698290][T10899] FAULT_INJECTION: forcing a failure. [ 539.698290][T10899] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 539.796344][T10899] CPU: 1 UID: 0 PID: 10899 Comm: syz.0.853 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 539.796383][T10899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 539.796417][T10899] Call Trace: [ 539.796425][T10899] [ 539.796436][T10899] dump_stack_lvl+0x16c/0x1f0 [ 539.796487][T10899] should_fail_ex+0x50a/0x650 [ 539.796521][T10899] _copy_from_user+0x2e/0xd0 [ 539.796563][T10899] do_sock_getsockopt+0x5f6/0x800 [ 539.796599][T10899] ? trace_lock_acquire+0x60/0x1f0 [ 539.796638][T10899] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 539.796673][T10899] ? lock_acquire+0x2f/0xb0 [ 539.796714][T10899] ? __fget_files+0x40/0x3a0 [ 539.796763][T10899] ? __fget_files+0x206/0x3a0 [ 539.796816][T10899] __sys_getsockopt+0x12f/0x260 [ 539.796871][T10899] __x64_sys_getsockopt+0xbd/0x160 [ 539.796919][T10899] ? do_syscall_64+0x91/0x250 [ 539.796964][T10899] ? lockdep_hardirqs_on+0x7c/0x110 [ 539.797007][T10899] do_syscall_64+0xcd/0x250 [ 539.797054][T10899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 539.797098][T10899] RIP: 0033:0x7f34a978d169 [ 539.797121][T10899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 539.797150][T10899] RSP: 002b:00007f34aa6d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 539.797178][T10899] RAX: ffffffffffffffda RBX: 00007f34a99a5fa0 RCX: 00007f34a978d169 [ 539.797197][T10899] RDX: 0000000000000003 RSI: 0000000000000084 RDI: 0000000000000003 [ 539.797214][T10899] RBP: 00007f34aa6d6090 R08: 0000400000000080 R09: 0000000000000000 [ 539.797233][T10899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 539.797249][T10899] R13: 0000000000000000 R14: 00007f34a99a5fa0 R15: 00007ffe984b2cb8 [ 539.797285][T10899] [ 540.686821][T10911] FAULT_INJECTION: forcing a failure. [ 540.686821][T10911] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 540.766325][T10911] CPU: 0 UID: 0 PID: 10911 Comm: syz.3.857 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 540.766364][T10911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 540.766381][T10911] Call Trace: [ 540.766389][T10911] [ 540.766399][T10911] dump_stack_lvl+0x16c/0x1f0 [ 540.766447][T10911] should_fail_ex+0x50a/0x650 [ 540.766486][T10911] _copy_from_user+0x2e/0xd0 [ 540.766519][T10911] copy_msghdr_from_user+0x99/0x160 [ 540.766567][T10911] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 540.766630][T10911] ___sys_sendmsg+0xff/0x1e0 [ 540.766678][T10911] ? __pfx____sys_sendmsg+0x10/0x10 [ 540.766739][T10911] ? __pfx_lock_release+0x10/0x10 [ 540.766777][T10911] ? trace_lock_acquire+0x14e/0x1f0 [ 540.766821][T10911] ? __fget_files+0x206/0x3a0 [ 540.766872][T10911] __sys_sendmsg+0x16e/0x220 [ 540.766900][T10911] ? __pfx___sys_sendmsg+0x10/0x10 [ 540.766971][T10911] do_syscall_64+0xcd/0x250 [ 540.767016][T10911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 540.767056][T10911] RIP: 0033:0x7efe2c18d169 [ 540.767078][T10911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 540.767104][T10911] RSP: 002b:00007efe2cf3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 540.767130][T10911] RAX: ffffffffffffffda RBX: 00007efe2c3a5fa0 RCX: 00007efe2c18d169 [ 540.767148][T10911] RDX: 0000000020008000 RSI: 0000400000000480 RDI: 0000000000000003 [ 540.767163][T10911] RBP: 00007efe2cf3e090 R08: 0000000000000000 R09: 0000000000000000 [ 540.767178][T10911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 540.767193][T10911] R13: 0000000000000000 R14: 00007efe2c3a5fa0 R15: 00007ffc0536d378 [ 540.767224][T10911] [ 541.717976][T10918] FAULT_INJECTION: forcing a failure. [ 541.717976][T10918] name failslab, interval 1, probability 0, space 0, times 0 [ 541.783269][T10918] CPU: 0 UID: 0 PID: 10918 Comm: syz.3.859 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 541.783308][T10918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 541.783325][T10918] Call Trace: [ 541.783332][T10918] [ 541.783342][T10918] dump_stack_lvl+0x16c/0x1f0 [ 541.783394][T10918] should_fail_ex+0x50a/0x650 [ 541.783424][T10918] ? fs_reclaim_acquire+0xae/0x150 [ 541.783468][T10918] ? fib_default_rule_add+0x4f/0x420 [ 541.783513][T10918] should_failslab+0xc2/0x120 [ 541.783543][T10918] __kmalloc_noprof+0xcb/0x510 [ 541.783591][T10918] ? do_raw_spin_unlock+0xe1/0x230 [ 541.783628][T10918] fib_default_rule_add+0x4f/0x420 [ 541.783678][T10918] fib4_rules_init+0xa6/0x1c0 [ 541.783712][T10918] fib_net_init+0x1de/0x3d0 [ 541.783758][T10918] ? __pfx_fib_net_init+0x10/0x10 [ 541.783806][T10918] ? do_init_timer+0xc9/0x110 [ 541.783846][T10918] ? devinet_init_net+0x5c1/0x900 [ 541.783899][T10918] ? __pfx_fib_net_init+0x10/0x10 [ 541.783942][T10918] ops_init+0x1df/0x5f0 [ 541.783977][T10918] setup_net+0x21f/0x860 [ 541.784012][T10918] ? __pfx_setup_net+0x10/0x10 [ 541.784042][T10918] ? down_read_killable+0xcc/0x380 [ 541.784095][T10918] ? __pfx_down_read_killable+0x10/0x10 [ 541.784153][T10918] ? __raw_spin_lock_init+0x3a/0x110 [ 541.784181][T10918] ? debug_mutex_init+0x37/0x70 [ 541.784215][T10918] copy_net_ns+0x2a6/0x5f0 [ 541.784249][T10918] create_new_namespaces+0x3ea/0xad0 [ 541.784301][T10918] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 541.784348][T10918] ksys_unshare+0x45d/0xa40 [ 541.784379][T10918] ? __pfx_ksys_unshare+0x10/0x10 [ 541.784410][T10918] ? xfd_validate_state+0x5d/0x180 [ 541.784469][T10918] __x64_sys_unshare+0x31/0x40 [ 541.784501][T10918] do_syscall_64+0xcd/0x250 [ 541.784551][T10918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 541.784596][T10918] RIP: 0033:0x7efe2c18d169 [ 541.784622][T10918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 541.784652][T10918] RSP: 002b:00007efe2cf3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 541.784681][T10918] RAX: ffffffffffffffda RBX: 00007efe2c3a5fa0 RCX: 00007efe2c18d169 [ 541.784701][T10918] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 541.784733][T10918] RBP: 00007efe2c20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 541.784751][T10918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 541.784768][T10918] R13: 0000000000000000 R14: 00007efe2c3a5fa0 R15: 00007ffc0536d378 [ 541.784806][T10918] [ 545.588221][T10959] FAULT_INJECTION: forcing a failure. [ 545.588221][T10959] name failslab, interval 1, probability 0, space 0, times 0 [ 545.601039][T10959] CPU: 1 UID: 0 PID: 10959 Comm: syz.1.866 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 545.601076][T10959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 545.601093][T10959] Call Trace: [ 545.601101][T10959] [ 545.601112][T10959] dump_stack_lvl+0x16c/0x1f0 [ 545.601160][T10959] should_fail_ex+0x50a/0x650 [ 545.601188][T10959] ? fs_reclaim_acquire+0xae/0x150 [ 545.601231][T10959] should_failslab+0xc2/0x120 [ 545.601260][T10959] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 545.601308][T10959] ? __alloc_skb+0x2b1/0x380 [ 545.601360][T10959] __alloc_skb+0x2b1/0x380 [ 545.601406][T10959] ? __pfx___alloc_skb+0x10/0x10 [ 545.601452][T10959] ? destroy_workqueue+0x6f0/0xaa0 [ 545.601502][T10959] ? __pfx_lock_release+0x10/0x10 [ 545.601554][T10959] nfc_genl_device_removed+0x7f/0x300 [ 545.601586][T10959] ? __pfx_nfc_genl_device_removed+0x10/0x10 [ 545.601616][T10959] ? destroy_workqueue+0x7cd/0xaa0 [ 545.601653][T10959] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 545.601701][T10959] nfc_unregister_device+0x2a/0x330 [ 545.601744][T10959] ? __pfx_virtual_ncidev_close+0x10/0x10 [ 545.601791][T10959] virtual_ncidev_close+0x4b/0xa0 [ 545.601837][T10959] __fput+0x3ff/0xb70 [ 545.601883][T10959] task_work_run+0x14e/0x250 [ 545.601927][T10959] ? __pfx_task_work_run+0x10/0x10 [ 545.601981][T10959] get_signal+0x1d3/0x26c0 [ 545.602044][T10959] ? __pfx_get_signal+0x10/0x10 [ 545.602092][T10959] ? kick_process+0xf6/0x1b0 [ 545.602135][T10959] ? task_work_add+0x1d6/0x370 [ 545.602182][T10959] arch_do_signal_or_restart+0x90/0x7e0 [ 545.602220][T10959] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 545.602269][T10959] ? __pfx_do_readv+0x10/0x10 [ 545.602318][T10959] syscall_exit_to_user_mode+0x150/0x2a0 [ 545.602377][T10959] do_syscall_64+0xda/0x250 [ 545.602425][T10959] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 545.602467][T10959] RIP: 0033:0x7f1c9418d169 [ 545.602490][T10959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 545.602518][T10959] RSP: 002b:00007f1c950c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 545.602545][T10959] RAX: fffffffffffffff2 RBX: 00007f1c943a5fa0 RCX: 00007f1c9418d169 [ 545.602564][T10959] RDX: 0000000000000001 RSI: 0000400000000a80 RDI: 0000000000000003 [ 545.602581][T10959] RBP: 00007f1c950c9090 R08: 0000000000000000 R09: 0000000000000000 [ 545.602598][T10959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 545.602614][T10959] R13: 0000000000000000 R14: 00007f1c943a5fa0 R15: 00007ffc4cfc8f48 [ 545.602649][T10959] [ 546.524387][T10992] FAULT_INJECTION: forcing a failure. [ 546.524387][T10992] name failslab, interval 1, probability 0, space 0, times 0 [ 546.556311][T10992] CPU: 1 UID: 0 PID: 10992 Comm: syz.1.873 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 546.556352][T10992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 546.556369][T10992] Call Trace: [ 546.556378][T10992] [ 546.556389][T10992] dump_stack_lvl+0x16c/0x1f0 [ 546.556441][T10992] should_fail_ex+0x50a/0x650 [ 546.556471][T10992] ? fs_reclaim_acquire+0xae/0x150 [ 546.556513][T10992] ? tomoyo_realpath_from_path+0xb9/0x720 [ 546.556559][T10992] should_failslab+0xc2/0x120 [ 546.556589][T10992] __kmalloc_noprof+0xcb/0x510 [ 546.556637][T10992] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 546.556691][T10992] tomoyo_realpath_from_path+0xb9/0x720 [ 546.556734][T10992] ? tomoyo_path_number_perm+0x235/0x590 [ 546.556783][T10992] ? tomoyo_path_number_perm+0x235/0x590 [ 546.556827][T10992] tomoyo_path_number_perm+0x248/0x590 [ 546.556864][T10992] ? tomoyo_path_number_perm+0x235/0x590 [ 546.556907][T10992] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 546.556983][T10992] ? __pfx_lock_release+0x10/0x10 [ 546.557026][T10992] ? trace_lock_acquire+0x14e/0x1f0 [ 546.557069][T10992] ? lock_acquire+0x2f/0xb0 [ 546.557110][T10992] ? __fget_files+0x40/0x3a0 [ 546.557162][T10992] ? __fget_files+0x206/0x3a0 [ 546.557214][T10992] security_file_ioctl+0x9b/0x240 [ 546.557257][T10992] __x64_sys_ioctl+0xb7/0x200 [ 546.557300][T10992] do_syscall_64+0xcd/0x250 [ 546.557351][T10992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.557396][T10992] RIP: 0033:0x7f1c9418d169 [ 546.557420][T10992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 546.557449][T10992] RSP: 002b:00007f1c950c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 546.557479][T10992] RAX: ffffffffffffffda RBX: 00007f1c943a5fa0 RCX: 00007f1c9418d169 [ 546.557499][T10992] RDX: 00004000000000c0 RSI: 0000000040107447 RDI: 0000000000000003 [ 546.557517][T10992] RBP: 00007f1c950c9090 R08: 0000000000000000 R09: 0000000000000000 [ 546.557534][T10992] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.557551][T10992] R13: 0000000000000000 R14: 00007f1c943a5fa0 R15: 00007ffc4cfc8f48 [ 546.557587][T10992] [ 546.557598][T10992] ERROR: Out of memory at tomoyo_realpath_from_path. [ 547.173366][T10998] FAULT_INJECTION: forcing a failure. [ 547.173366][T10998] name failslab, interval 1, probability 0, space 0, times 0 [ 547.224148][T10998] CPU: 0 UID: 0 PID: 10998 Comm: syz.1.876 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 547.224189][T10998] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 547.224205][T10998] Call Trace: [ 547.224214][T10998] [ 547.224225][T10998] dump_stack_lvl+0x16c/0x1f0 [ 547.224275][T10998] should_fail_ex+0x50a/0x650 [ 547.224304][T10998] ? fs_reclaim_acquire+0xae/0x150 [ 547.224345][T10998] ? tomoyo_realpath_from_path+0xb9/0x720 [ 547.224391][T10998] should_failslab+0xc2/0x120 [ 547.224420][T10998] __kmalloc_noprof+0xcb/0x510 [ 547.224467][T10998] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 547.224521][T10998] tomoyo_realpath_from_path+0xb9/0x720 [ 547.224566][T10998] ? tomoyo_path_number_perm+0x235/0x590 [ 547.224606][T10998] ? tomoyo_path_number_perm+0x235/0x590 [ 547.224651][T10998] tomoyo_path_number_perm+0x248/0x590 [ 547.224689][T10998] ? tomoyo_path_number_perm+0x235/0x590 [ 547.224730][T10998] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 547.224817][T10998] ? __pfx_lock_release+0x10/0x10 [ 547.224858][T10998] ? trace_lock_acquire+0x14e/0x1f0 [ 547.224898][T10998] ? lock_acquire+0x2f/0xb0 [ 547.224937][T10998] ? __fget_files+0x40/0x3a0 [ 547.224987][T10998] ? __fget_files+0x206/0x3a0 [ 547.225037][T10998] security_file_ioctl+0x9b/0x240 [ 547.225085][T10998] __x64_sys_ioctl+0xb7/0x200 [ 547.225124][T10998] do_syscall_64+0xcd/0x250 [ 547.225171][T10998] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 547.225231][T10998] RIP: 0033:0x7f1c9418d169 [ 547.225255][T10998] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 547.225284][T10998] RSP: 002b:00007f1c950c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 547.225313][T10998] RAX: ffffffffffffffda RBX: 00007f1c943a5fa0 RCX: 00007f1c9418d169 [ 547.225334][T10998] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000003 [ 547.225351][T10998] RBP: 00007f1c950c9090 R08: 0000000000000000 R09: 0000000000000000 [ 547.225369][T10998] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 547.225387][T10998] R13: 0000000000000000 R14: 00007f1c943a5fa0 R15: 00007ffc4cfc8f48 [ 547.225426][T10998] [ 547.225438][T10998] ERROR: Out of memory at tomoyo_realpath_from_path. [ 547.997835][T11012] FAULT_INJECTION: forcing a failure. [ 547.997835][T11012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 548.136255][T11012] CPU: 1 UID: 0 PID: 11012 Comm: syz.1.879 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 548.136294][T11012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 548.136311][T11012] Call Trace: [ 548.136321][T11012] [ 548.136332][T11012] dump_stack_lvl+0x16c/0x1f0 [ 548.136384][T11012] should_fail_ex+0x50a/0x650 [ 548.136420][T11012] _copy_from_user+0x2e/0xd0 [ 548.136456][T11012] do_sock_getsockopt+0x5f6/0x800 [ 548.136494][T11012] ? trace_lock_acquire+0x60/0x1f0 [ 548.136533][T11012] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 548.136570][T11012] ? lock_acquire+0x2f/0xb0 [ 548.136613][T11012] ? __fget_files+0x40/0x3a0 [ 548.136663][T11012] ? __fget_files+0x206/0x3a0 [ 548.136718][T11012] __sys_getsockopt+0x12f/0x260 [ 548.136776][T11012] __x64_sys_getsockopt+0xbd/0x160 [ 548.136825][T11012] ? do_syscall_64+0x91/0x250 [ 548.136870][T11012] ? lockdep_hardirqs_on+0x7c/0x110 [ 548.136916][T11012] do_syscall_64+0xcd/0x250 [ 548.136973][T11012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 548.137018][T11012] RIP: 0033:0x7f1c9418d169 [ 548.137042][T11012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 548.137073][T11012] RSP: 002b:00007f1c950a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 548.137102][T11012] RAX: ffffffffffffffda RBX: 00007f1c943a6080 RCX: 00007f1c9418d169 [ 548.137123][T11012] RDX: 0000000000000020 RSI: 0000000000000084 RDI: 0000000000000006 [ 548.137141][T11012] RBP: 00007f1c950a8090 R08: 0000000000000000 R09: 0000000000000000 [ 548.137160][T11012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 548.137177][T11012] R13: 0000000000000000 R14: 00007f1c943a6080 R15: 00007ffc4cfc8f48 [ 548.137215][T11012] [ 549.820218][T11039] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input5 [ 550.087096][T11044] mmap: syz.1.886 (11044) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 550.506019][T11047] FAULT_INJECTION: forcing a failure. [ 550.506019][T11047] name failslab, interval 1, probability 0, space 0, times 0 [ 550.526415][T11047] CPU: 0 UID: 0 PID: 11047 Comm: syz.3.888 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 550.526454][T11047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 550.526471][T11047] Call Trace: [ 550.526480][T11047] [ 550.526492][T11047] dump_stack_lvl+0x16c/0x1f0 [ 550.526543][T11047] should_fail_ex+0x50a/0x650 [ 550.526574][T11047] ? fs_reclaim_acquire+0xae/0x150 [ 550.526616][T11047] ? trace_parser_get_init+0x30/0xc0 [ 550.526665][T11047] should_failslab+0xc2/0x120 [ 550.526696][T11047] __kmalloc_noprof+0xcb/0x510 [ 550.526751][T11047] ? __pfx_tracing_update_buffers+0x10/0x10 [ 550.526802][T11047] trace_parser_get_init+0x30/0xc0 [ 550.526853][T11047] ftrace_event_write+0x179/0x290 [ 550.526888][T11047] ? __pfx_ftrace_event_write+0x10/0x10 [ 550.526925][T11047] ? ksys_write+0x12b/0x250 [ 550.526979][T11047] ? __pfx_ftrace_event_write+0x10/0x10 [ 550.527012][T11047] vfs_write+0x24c/0x1150 [ 550.527057][T11047] ? __fget_files+0x1fc/0x3a0 [ 550.527103][T11047] ? __pfx___mutex_lock+0x10/0x10 [ 550.527150][T11047] ? __pfx_vfs_write+0x10/0x10 [ 550.527206][T11047] ? __fget_files+0x206/0x3a0 [ 550.527265][T11047] ksys_write+0x12b/0x250 [ 550.527307][T11047] ? __pfx_ksys_write+0x10/0x10 [ 550.527365][T11047] do_syscall_64+0xcd/0x250 [ 550.527416][T11047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 550.527462][T11047] RIP: 0033:0x7efe2c18d169 [ 550.527487][T11047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 550.527517][T11047] RSP: 002b:00007efe2cf3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 550.527547][T11047] RAX: ffffffffffffffda RBX: 00007efe2c3a5fa0 RCX: 00007efe2c18d169 [ 550.527580][T11047] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 550.527597][T11047] RBP: 00007efe2cf3e090 R08: 0000000000000000 R09: 0000000000000000 [ 550.527615][T11047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 550.527633][T11047] R13: 0000000000000000 R14: 00007efe2c3a5fa0 R15: 00007ffc0536d378 [ 550.527672][T11047] [ 551.442656][T11056] device-mapper: ioctl: only supply one of name or uuid, cmd(5) [ 552.359223][T11069] FAULT_INJECTION: forcing a failure. [ 552.359223][T11069] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 552.393548][T11069] CPU: 0 UID: 0 PID: 11069 Comm: syz.3.892 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 552.393594][T11069] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 552.393611][T11069] Call Trace: [ 552.393620][T11069] [ 552.393632][T11069] dump_stack_lvl+0x16c/0x1f0 [ 552.393682][T11069] should_fail_ex+0x50a/0x650 [ 552.393720][T11069] _copy_from_user+0x2e/0xd0 [ 552.393755][T11069] copy_msghdr_from_user+0x99/0x160 [ 552.393807][T11069] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 552.393865][T11069] ? __lock_acquire+0xcc5/0x3c40 [ 552.393925][T11069] ___sys_sendmsg+0xff/0x1e0 [ 552.393979][T11069] ? __pfx____sys_sendmsg+0x10/0x10 [ 552.394047][T11069] ? trace_lock_acquire+0x14e/0x1f0 [ 552.394109][T11069] __sys_sendmmsg+0x201/0x420 [ 552.394144][T11069] ? __pfx___sys_sendmmsg+0x10/0x10 [ 552.394185][T11069] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 552.394247][T11069] ? fput+0x67/0x440 [ 552.394278][T11069] ? ksys_write+0x1ba/0x250 [ 552.394322][T11069] ? __pfx_ksys_write+0x10/0x10 [ 552.394379][T11069] __x64_sys_sendmmsg+0x9c/0x100 [ 552.394408][T11069] ? lockdep_hardirqs_on+0x7c/0x110 [ 552.394451][T11069] do_syscall_64+0xcd/0x250 [ 552.394500][T11069] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 552.394546][T11069] RIP: 0033:0x7efe2c18d169 [ 552.394570][T11069] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 552.394601][T11069] RSP: 002b:00007efe2cf3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 552.394630][T11069] RAX: ffffffffffffffda RBX: 00007efe2c3a5fa0 RCX: 00007efe2c18d169 [ 552.394651][T11069] RDX: 0000000000000003 RSI: 0000400000000080 RDI: 0000000000000003 [ 552.394669][T11069] RBP: 00007efe2cf3e090 R08: 0000000000000000 R09: 0000000000000000 [ 552.394686][T11069] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 552.394704][T11069] R13: 0000000000000000 R14: 00007efe2c3a5fa0 R15: 00007ffc0536d378 [ 552.394741][T11069] [ 553.768424][T11092] FAULT_INJECTION: forcing a failure. [ 553.768424][T11092] name failslab, interval 1, probability 0, space 0, times 0 [ 553.826553][T11092] CPU: 1 UID: 0 PID: 11092 Comm: syz.1.895 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 553.826596][T11092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 553.826615][T11092] Call Trace: [ 553.826624][T11092] [ 553.826636][T11092] dump_stack_lvl+0x16c/0x1f0 [ 553.826686][T11092] should_fail_ex+0x50a/0x650 [ 553.826717][T11092] ? fs_reclaim_acquire+0xae/0x150 [ 553.826759][T11092] ? tomoyo_realpath_from_path+0xb9/0x720 [ 553.826806][T11092] should_failslab+0xc2/0x120 [ 553.826837][T11092] __kmalloc_noprof+0xcb/0x510 [ 553.826885][T11092] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 553.826940][T11092] tomoyo_realpath_from_path+0xb9/0x720 [ 553.826987][T11092] ? tomoyo_path_number_perm+0x235/0x590 [ 553.827027][T11092] ? tomoyo_path_number_perm+0x235/0x590 [ 553.827072][T11092] tomoyo_path_number_perm+0x248/0x590 [ 553.827111][T11092] ? tomoyo_path_number_perm+0x235/0x590 [ 553.827154][T11092] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 553.827230][T11092] ? __pfx_lock_release+0x10/0x10 [ 553.827274][T11092] ? trace_lock_acquire+0x14e/0x1f0 [ 553.827317][T11092] ? lock_acquire+0x2f/0xb0 [ 553.827358][T11092] ? __fget_files+0x40/0x3a0 [ 553.827410][T11092] ? __fget_files+0x206/0x3a0 [ 553.827461][T11092] security_file_ioctl+0x9b/0x240 [ 553.827513][T11092] __x64_sys_ioctl+0xb7/0x200 [ 553.827554][T11092] do_syscall_64+0xcd/0x250 [ 553.827610][T11092] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 553.827655][T11092] RIP: 0033:0x7f1c9418d169 [ 553.827679][T11092] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 553.827709][T11092] RSP: 002b:00007f1c950c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 553.827739][T11092] RAX: ffffffffffffffda RBX: 00007f1c943a5fa0 RCX: 00007f1c9418d169 [ 553.827760][T11092] RDX: 0000000000000009 RSI: 00000000c040564a RDI: 0000000000000009 [ 553.827778][T11092] RBP: 00007f1c950c9090 R08: 0000000000000000 R09: 0000000000000000 [ 553.827797][T11092] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 553.827816][T11092] R13: 0000000000000000 R14: 00007f1c943a5fa0 R15: 00007ffc4cfc8f48 [ 553.827855][T11092] [ 553.830399][T11092] ERROR: Out of memory at tomoyo_realpath_from_path. [ 554.255632][T11102] FAULT_INJECTION: forcing a failure. [ 554.255632][T11102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 554.273008][ T5850] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 554.295631][T11102] CPU: 0 UID: 0 PID: 11102 Comm: syz.3.898 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 554.295669][T11102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 554.295685][T11102] Call Trace: [ 554.295693][T11102] [ 554.295704][T11102] dump_stack_lvl+0x16c/0x1f0 [ 554.295751][T11102] should_fail_ex+0x50a/0x650 [ 554.295786][T11102] _copy_to_iter+0x2a1/0x1560 [ 554.295821][T11102] ? trace_lock_acquire+0x14e/0x1f0 [ 554.295862][T11102] ? __pfx__copy_to_iter+0x10/0x10 [ 554.295896][T11102] ? __virt_addr_valid+0x1a4/0x590 [ 554.295935][T11102] ? __virt_addr_valid+0x5e/0x590 [ 554.295968][T11102] ? __phys_addr_symbol+0x30/0x80 [ 554.295999][T11102] ? __check_object_size+0x488/0x710 [ 554.296034][T11102] simple_copy_to_iter+0x4f/0x80 [ 554.296078][T11102] __skb_datagram_iter+0x122/0x8c0 [ 554.296117][T11102] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 554.296170][T11102] ? rcu_is_watching+0x12/0xc0 [ 554.296205][T11102] skb_copy_datagram_iter+0x40/0x50 [ 554.296252][T11102] ip_recv_error+0x172/0xda0 [ 554.296292][T11102] ? __pfx_ip_recv_error+0x10/0x10 [ 554.296338][T11102] raw_recvmsg+0x1ea/0x7a0 [ 554.296372][T11102] ? find_held_lock+0x2d/0x110 [ 554.296407][T11102] ? __pfx_raw_recvmsg+0x10/0x10 [ 554.296443][T11102] ? aa_sk_perm+0x2f5/0xb20 [ 554.296490][T11102] ? __pfx_raw_recvmsg+0x10/0x10 [ 554.296521][T11102] inet_recvmsg+0x469/0x6a0 [ 554.296552][T11102] ? lock_acquire+0x2f/0xb0 [ 554.296595][T11102] ? __pfx_inet_recvmsg+0x10/0x10 [ 554.296637][T11102] sock_recvmsg+0x1b2/0x250 [ 554.296676][T11102] __sys_recvfrom+0x204/0x310 [ 554.296724][T11102] ? 0xffffffff81000000 [ 554.296747][T11102] ? __pfx___sys_recvfrom+0x10/0x10 [ 554.296824][T11102] ? ksys_write+0x1ba/0x250 [ 554.296867][T11102] ? __pfx_ksys_write+0x10/0x10 [ 554.296914][T11102] __x64_sys_recvfrom+0xe0/0x1c0 [ 554.296961][T11102] ? do_syscall_64+0x91/0x250 [ 554.297008][T11102] ? lockdep_hardirqs_on+0x7c/0x110 [ 554.297051][T11102] do_syscall_64+0xcd/0x250 [ 554.297100][T11102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 554.297142][T11102] RIP: 0033:0x7efe2c18d169 [ 554.297166][T11102] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 554.297196][T11102] RSP: 002b:00007efe2cf3e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002d [ 554.297224][T11102] RAX: ffffffffffffffda RBX: 00007efe2c3a5fa0 RCX: 00007efe2c18d169 [ 554.297245][T11102] RDX: 000000800000000e RSI: 0000000000000000 RDI: 0000000000000003 [ 554.297264][T11102] RBP: 00007efe2cf3e090 R08: 0000000000000000 R09: ffffffff81000000 [ 554.297283][T11102] R10: 00000000fffff4a4 R11: 0000000000000246 R12: 0000000000000001 [ 554.297302][T11102] R13: 0000000000000000 R14: 00007efe2c3a5fa0 R15: 00007ffc0536d378 [ 554.297329][T11102] ? 0xffffffff81000000 [ 554.297361][T11102] [ 557.172150][T11134] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 557.816925][T11143] FAULT_INJECTION: forcing a failure. [ 557.816925][T11143] name failslab, interval 1, probability 0, space 0, times 0 [ 557.888072][T11143] CPU: 0 UID: 0 PID: 11143 Comm: syz.0.908 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 557.888113][T11143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 557.888132][T11143] Call Trace: [ 557.888140][T11143] [ 557.888160][T11143] dump_stack_lvl+0x16c/0x1f0 [ 557.888211][T11143] should_fail_ex+0x50a/0x650 [ 557.888240][T11143] ? fs_reclaim_acquire+0xae/0x150 [ 557.888283][T11143] should_failslab+0xc2/0x120 [ 557.888313][T11143] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 557.888362][T11143] ? getname_flags.part.0+0x4c/0x550 [ 557.888398][T11143] ? vfs_write+0x306/0x1150 [ 557.888442][T11143] getname_flags.part.0+0x4c/0x550 [ 557.888481][T11143] getname+0x8d/0xe0 [ 557.888520][T11143] do_sys_openat2+0x104/0x1e0 [ 557.888552][T11143] ? __pfx_do_sys_openat2+0x10/0x10 [ 557.888589][T11143] ? __fget_files+0x206/0x3a0 [ 557.888639][T11143] __x64_sys_openat+0x175/0x210 [ 557.888672][T11143] ? __pfx___x64_sys_openat+0x10/0x10 [ 557.888702][T11143] ? ksys_write+0x1ba/0x250 [ 557.888747][T11143] do_syscall_64+0xcd/0x250 [ 557.888788][T11143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 557.888824][T11143] RIP: 0033:0x7f34a978d169 [ 557.888845][T11143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 557.888872][T11143] RSP: 002b:00007f34aa6d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 557.888897][T11143] RAX: ffffffffffffffda RBX: 00007f34a99a5fa0 RCX: 00007f34a978d169 [ 557.888917][T11143] RDX: 0000000000000800 RSI: 0000400000000000 RDI: ffffffffffffff9c [ 557.888933][T11143] RBP: 00007f34aa6d6090 R08: 0000000000000000 R09: 0000000000000000 [ 557.888949][T11143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 557.888964][T11143] R13: 0000000000000000 R14: 00007f34a99a5fa0 R15: 00007ffe984b2cb8 [ 557.888996][T11143] [ 559.541636][T11164] FAULT_INJECTION: forcing a failure. [ 559.541636][T11164] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 559.591537][T11164] CPU: 1 UID: 0 PID: 11164 Comm: syz.0.913 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 559.591580][T11164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 559.591597][T11164] Call Trace: [ 559.591606][T11164] [ 559.591616][T11164] dump_stack_lvl+0x16c/0x1f0 [ 559.591661][T11164] should_fail_ex+0x50a/0x650 [ 559.591694][T11164] _copy_from_user+0x2e/0xd0 [ 559.591727][T11164] copy_msghdr_from_user+0x99/0x160 [ 559.591825][T11164] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 559.591928][T11164] ___sys_sendmsg+0xff/0x1e0 [ 559.591979][T11164] ? __pfx____sys_sendmsg+0x10/0x10 [ 559.592042][T11164] ? __pfx_lock_release+0x10/0x10 [ 559.592092][T11164] ? trace_lock_acquire+0x14e/0x1f0 [ 559.592140][T11164] ? __fget_files+0x206/0x3a0 [ 559.592191][T11164] __sys_sendmsg+0x16e/0x220 [ 559.592221][T11164] ? __pfx___sys_sendmsg+0x10/0x10 [ 559.592293][T11164] do_syscall_64+0xcd/0x250 [ 559.592342][T11164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 559.592385][T11164] RIP: 0033:0x7f34a978d169 [ 559.592408][T11164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 559.592437][T11164] RSP: 002b:00007f34aa6b5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 559.592466][T11164] RAX: ffffffffffffffda RBX: 00007f34a99a6080 RCX: 00007f34a978d169 [ 559.592505][T11164] RDX: 0000000000000080 RSI: 00004000000028c0 RDI: 0000000000000003 [ 559.592524][T11164] RBP: 00007f34aa6b5090 R08: 0000000000000000 R09: 0000000000000000 [ 559.592543][T11164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 559.592561][T11164] R13: 0000000000000000 R14: 00007f34a99a6080 R15: 00007ffe984b2cb8 [ 559.592611][T11164] [ 561.200878][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 561.211646][ T5841] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 561.228537][ T5841] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 561.245040][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 561.253183][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 561.260664][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 562.656108][T11184] chnl_net:caif_netlink_parms(): no params data found [ 563.316372][T11186] Bluetooth: hci4: command tx timeout [ 564.456006][T11184] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.483285][T11184] bridge0: port 1(bridge_slave_0) entered disabled state [ 564.499752][T11184] bridge_slave_0: entered allmulticast mode [ 564.524184][T11184] bridge_slave_0: entered promiscuous mode [ 564.551725][T11184] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.577222][T11184] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.597860][T11184] bridge_slave_1: entered allmulticast mode [ 564.611107][T11184] bridge_slave_1: entered promiscuous mode [ 564.728416][T11184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.757240][T11184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.995303][T11184] team0: Port device team_slave_0 added [ 565.019753][T11184] team0: Port device team_slave_1 added [ 565.095411][T11234] FAULT_INJECTION: forcing a failure. [ 565.095411][T11234] name failslab, interval 1, probability 0, space 0, times 0 [ 565.108156][T11234] CPU: 1 UID: 0 PID: 11234 Comm: syz.0.925 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 565.108216][T11234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 565.108237][T11234] Call Trace: [ 565.108247][T11234] [ 565.108260][T11234] dump_stack_lvl+0x16c/0x1f0 [ 565.108316][T11234] should_fail_ex+0x50a/0x650 [ 565.108357][T11234] ? tipc_nametbl_insert_publ+0x5d/0x1660 [ 565.108403][T11234] should_failslab+0xc2/0x120 [ 565.108436][T11234] __kmalloc_cache_noprof+0x68/0x410 [ 565.108482][T11234] ? lock_acquire.part.0+0x11b/0x380 [ 565.108542][T11234] tipc_nametbl_insert_publ+0x5d/0x1660 [ 565.108588][T11234] ? rcu_is_watching+0x12/0xc0 [ 565.108626][T11234] ? do_raw_spin_lock+0x12d/0x2c0 [ 565.108667][T11234] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 565.108703][T11234] ? lock_acquire+0x2f/0xb0 [ 565.108750][T11234] ? tipc_nametbl_publish+0xdb/0x280 [ 565.108806][T11234] tipc_nametbl_publish+0x137/0x280 [ 565.108859][T11234] tipc_sk_publish+0x1d8/0x430 [ 565.108909][T11234] ? __pfx_tipc_sk_publish+0x10/0x10 [ 565.108971][T11234] tipc_setsockopt+0x965/0xdf0 [ 565.109022][T11234] ? __pfx_tipc_setsockopt+0x10/0x10 [ 565.109091][T11234] ? __pfx_tipc_setsockopt+0x10/0x10 [ 565.109141][T11234] do_sock_setsockopt+0x222/0x480 [ 565.109181][T11234] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 565.109223][T11234] ? lock_acquire+0x2f/0xb0 [ 565.109291][T11234] __sys_setsockopt+0x1a0/0x230 [ 565.109353][T11234] __x64_sys_setsockopt+0xbd/0x160 [ 565.109406][T11234] ? do_syscall_64+0x91/0x250 [ 565.109468][T11234] ? lockdep_hardirqs_on+0x7c/0x110 [ 565.109533][T11234] do_syscall_64+0xcd/0x250 [ 565.109587][T11234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.109637][T11234] RIP: 0033:0x7f34a978d169 [ 565.109676][T11234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.109710][T11234] RSP: 002b:00007f34aa6d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 565.109743][T11234] RAX: ffffffffffffffda RBX: 00007f34a99a5fa0 RCX: 00007f34a978d169 [ 565.109767][T11234] RDX: 0000000000000087 RSI: 000000000000010f RDI: 0000000000000003 [ 565.109787][T11234] RBP: 00007f34a980e2a0 R08: 0000000000000014 R09: 0000000000000000 [ 565.109808][T11234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 565.109828][T11234] R13: 0000000000000000 R14: 00007f34a99a5fa0 R15: 00007ffe984b2cb8 [ 565.109869][T11234] [ 565.431372][T11186] Bluetooth: hci4: command tx timeout [ 565.760168][T11242] FAULT_INJECTION: forcing a failure. [ 565.760168][T11242] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 565.761901][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 565.834604][T11242] CPU: 0 UID: 0 PID: 11242 Comm: syz.1.927 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 565.834647][T11242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 565.834666][T11242] Call Trace: [ 565.834674][T11242] [ 565.834686][T11242] dump_stack_lvl+0x16c/0x1f0 [ 565.834737][T11242] should_fail_ex+0x50a/0x650 [ 565.834773][T11242] _copy_from_user+0x2e/0xd0 [ 565.834823][T11242] copy_msghdr_from_user+0x99/0x160 [ 565.834871][T11242] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 565.834920][T11242] ? __lock_acquire+0xcc5/0x3c40 [ 565.834980][T11242] ___sys_sendmsg+0xff/0x1e0 [ 565.835032][T11242] ? __pfx____sys_sendmsg+0x10/0x10 [ 565.835098][T11242] ? trace_lock_acquire+0x14e/0x1f0 [ 565.835159][T11242] __sys_sendmmsg+0x201/0x420 [ 565.835193][T11242] ? __pfx___sys_sendmmsg+0x10/0x10 [ 565.835234][T11242] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 565.835296][T11242] ? fput+0x67/0x440 [ 565.835327][T11242] ? ksys_write+0x1ba/0x250 [ 565.835370][T11242] ? __pfx_ksys_write+0x10/0x10 [ 565.835419][T11242] __x64_sys_sendmmsg+0x9c/0x100 [ 565.835448][T11242] ? lockdep_hardirqs_on+0x7c/0x110 [ 565.835491][T11242] do_syscall_64+0xcd/0x250 [ 565.835540][T11242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 565.835595][T11242] RIP: 0033:0x7f1c9418d169 [ 565.835619][T11242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 565.835648][T11242] RSP: 002b:00007f1c950a8038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 565.835676][T11242] RAX: ffffffffffffffda RBX: 00007f1c943a6080 RCX: 00007f1c9418d169 [ 565.835695][T11242] RDX: 0000000000000006 RSI: 0000400000000080 RDI: 0000000000000003 [ 565.835713][T11242] RBP: 00007f1c950a8090 R08: 0000000000000000 R09: 0000000000000000 [ 565.835730][T11242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 565.835747][T11242] R13: 0000000000000001 R14: 00007f1c943a6080 R15: 00007ffc4cfc8f48 [ 565.835783][T11242] [ 565.875672][T11244] Invalid ELF header magic: != ELF [ 566.130124][T11184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.146350][T11184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.199948][T11184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.376012][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.442407][T11184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.460213][T11184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.546399][T11184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.621083][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.781674][T11184] hsr_slave_0: entered promiscuous mode [ 566.808801][T11184] hsr_slave_1: entered promiscuous mode [ 566.814985][T11184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 566.842599][T11184] Cannot create hsr debugfs directory [ 566.899912][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.476491][T11186] Bluetooth: hci4: command tx timeout [ 567.746845][ T53] bridge_slave_1: left allmulticast mode [ 567.810821][ T53] bridge_slave_1: left promiscuous mode [ 567.818746][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.845031][ T53] bridge_slave_0: left allmulticast mode [ 567.853241][ T53] bridge_slave_0: left promiscuous mode [ 567.859589][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 568.263339][T11276] FAULT_INJECTION: forcing a failure. [ 568.263339][T11276] name failslab, interval 1, probability 0, space 0, times 0 [ 568.279556][ T1290] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.285888][ T1290] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.294786][T11276] CPU: 0 UID: 0 PID: 11276 Comm: syz.1.933 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 568.294838][T11276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 568.294856][T11276] Call Trace: [ 568.294864][T11276] [ 568.294875][T11276] dump_stack_lvl+0x16c/0x1f0 [ 568.294924][T11276] should_fail_ex+0x50a/0x650 [ 568.294953][T11276] ? fs_reclaim_acquire+0xae/0x150 [ 568.294995][T11276] ? tomoyo_encode2+0x100/0x3e0 [ 568.295037][T11276] should_failslab+0xc2/0x120 [ 568.295067][T11276] __kmalloc_noprof+0xcb/0x510 [ 568.295114][T11276] ? d_absolute_path+0x137/0x1b0 [ 568.295146][T11276] ? rcu_is_watching+0x12/0xc0 [ 568.295190][T11276] tomoyo_encode2+0x100/0x3e0 [ 568.295238][T11276] tomoyo_encode+0x29/0x50 [ 568.295280][T11276] tomoyo_realpath_from_path+0x19d/0x720 [ 568.295336][T11276] tomoyo_path_number_perm+0x248/0x590 [ 568.295373][T11276] ? tomoyo_path_number_perm+0x235/0x590 [ 568.295414][T11276] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 568.295489][T11276] ? __pfx_lock_release+0x10/0x10 [ 568.295532][T11276] ? trace_lock_acquire+0x14e/0x1f0 [ 568.295569][T11276] ? lock_acquire+0x2f/0xb0 [ 568.295611][T11276] ? __fget_files+0x40/0x3a0 [ 568.295660][T11276] ? __fget_files+0x206/0x3a0 [ 568.295710][T11276] security_file_ioctl+0x9b/0x240 [ 568.295752][T11276] __x64_sys_ioctl+0xb7/0x200 [ 568.295794][T11276] do_syscall_64+0xcd/0x250 [ 568.295842][T11276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.295885][T11276] RIP: 0033:0x7f1c9418d169 [ 568.295909][T11276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.295939][T11276] RSP: 002b:00007f1c950c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 568.295968][T11276] RAX: ffffffffffffffda RBX: 00007f1c943a5fa0 RCX: 00007f1c9418d169 [ 568.295989][T11276] RDX: 0000000000000038 RSI: 000000000000541b RDI: 0000000000000003 [ 568.296007][T11276] RBP: 00007f1c950c9090 R08: 0000000000000000 R09: 0000000000000000 [ 568.296024][T11276] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 568.296041][T11276] R13: 0000000000000000 R14: 00007f1c943a5fa0 R15: 00007ffc4cfc8f48 [ 568.296079][T11276] [ 568.296098][T11276] ERROR: Out of memory at tomoyo_realpath_from_path. [ 569.256849][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.276566][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.291232][ T53] bond0 (unregistering): Released all slaves [ 569.494594][T11184] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 569.557761][T11186] Bluetooth: hci4: command tx timeout [ 569.778365][T11184] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 569.806016][T11184] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 569.861095][T11184] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 570.059867][T11307] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE ùrõ£Ò„yù*›"¤l-ý¤ôy–ú„ [ 570.383433][ T53] hsr_slave_0: left promiscuous mode [ 570.403494][ T53] hsr_slave_1: left promiscuous mode [ 570.457079][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.464615][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.503137][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.512638][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 570.591529][ T53] veth1_macvtap: left promiscuous mode [ 570.598122][ T53] veth0_macvtap: left promiscuous mode [ 570.603779][ T53] veth1_vlan: left promiscuous mode [ 570.620511][ T53] veth0_vlan: left promiscuous mode [ 571.948141][ T53] team0 (unregistering): Port device team_slave_1 removed [ 572.065820][T11339] FAULT_INJECTION: forcing a failure. [ 572.065820][T11339] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 572.081711][ T53] team0 (unregistering): Port device team_slave_0 removed [ 572.089371][T11339] CPU: 1 UID: 0 PID: 11339 Comm: syz.3.949 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 572.089408][T11339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 572.089426][T11339] Call Trace: [ 572.089434][T11339] [ 572.089446][T11339] dump_stack_lvl+0x16c/0x1f0 [ 572.089495][T11339] should_fail_ex+0x50a/0x650 [ 572.089524][T11339] ? __pfx___might_resched+0x10/0x10 [ 572.089579][T11339] should_fail_alloc_page+0xe7/0x130 [ 572.089613][T11339] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 572.089663][T11339] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 572.089718][T11339] ? __pfx_mark_lock+0x10/0x10 [ 572.089774][T11339] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 572.089829][T11339] ? hlock_class+0x4e/0x130 [ 572.089879][T11339] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 572.089932][T11339] ? policy_nodemask+0xea/0x4e0 [ 572.089965][T11339] alloc_pages_mpol+0x1fc/0x540 [ 572.089996][T11339] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 572.090029][T11339] ? find_held_lock+0x2d/0x110 [ 572.090071][T11339] alloc_pages_noprof+0x131/0x390 [ 572.090102][T11339] __pmd_alloc+0x3f/0x870 [ 572.090149][T11339] __handle_mm_fault+0x94a/0x2a40 [ 572.090216][T11339] ? __pfx___handle_mm_fault+0x10/0x10 [ 572.090259][T11339] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 572.090326][T11339] ? find_vma+0xc0/0x140 [ 572.090363][T11339] ? __pfx_find_vma+0x10/0x10 [ 572.090405][T11339] handle_mm_fault+0x3fa/0xaa0 [ 572.090460][T11339] do_user_addr_fault+0x7a3/0x13f0 [ 572.090522][T11339] exc_page_fault+0x5c/0xc0 [ 572.090567][T11339] asm_exc_page_fault+0x26/0x30 [ 572.090609][T11339] RIP: 0010:rep_movs_alternative+0x13/0x70 [ 572.090645][T11339] Code: cc cc cc 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 83 f9 40 73 40 83 f9 08 73 21 85 c9 74 0f <8a> 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f [ 572.090673][T11339] RSP: 0018:ffffc90005b8fd60 EFLAGS: 00050202 [ 572.090697][T11339] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000004 [ 572.090714][T11339] RDX: fffff52000b71fbc RSI: 0000000000000000 RDI: ffffc90005b8fde0 [ 572.090733][T11339] RBP: 0000000000000004 R08: 0000000000000001 R09: fffff52000b71fbc [ 572.090748][T11339] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 572.090764][T11339] R13: ffffc90005b8fde0 R14: 0000000000000000 R15: 0000000000000000 [ 572.090801][T11339] _copy_from_user+0x98/0xd0 [ 572.090839][T11339] do_sock_getsockopt+0x5f6/0x800 [ 572.090874][T11339] ? trace_lock_acquire+0x60/0x1f0 [ 572.090913][T11339] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 572.090950][T11339] ? lock_acquire+0x2f/0xb0 [ 572.090994][T11339] ? __fget_files+0x40/0x3a0 [ 572.091043][T11339] ? __fget_files+0x206/0x3a0 [ 572.091095][T11339] __sys_getsockopt+0x12f/0x260 [ 572.091151][T11339] __x64_sys_getsockopt+0xbd/0x160 [ 572.091205][T11339] ? do_syscall_64+0x91/0x250 [ 572.091249][T11339] ? lockdep_hardirqs_on+0x7c/0x110 [ 572.091292][T11339] do_syscall_64+0xcd/0x250 [ 572.091340][T11339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.091384][T11339] RIP: 0033:0x7efe2c18d169 [ 572.091407][T11339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.091437][T11339] RSP: 002b:00007efe2cf3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 572.091465][T11339] RAX: ffffffffffffffda RBX: 00007efe2c3a5fa0 RCX: 00007efe2c18d169 [ 572.091484][T11339] RDX: 0000000000000018 RSI: 0000000000000000 RDI: 0000000000000003 [ 572.091501][T11339] RBP: 00007efe2cf3e090 R08: 0000000000000000 R09: 0000000000000000 [ 572.091518][T11339] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.091535][T11339] R13: 0000000000000000 R14: 00007efe2c3a5fa0 R15: 00007ffc0536d378 [ 572.091572][T11339] [ 572.563191][T11341] FAULT_INJECTION: forcing a failure. [ 572.563191][T11341] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.581072][T11341] CPU: 1 UID: 0 PID: 11341 Comm: syz.0.950 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 572.581107][T11341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 572.581123][T11341] Call Trace: [ 572.581136][T11341] [ 572.581147][T11341] dump_stack_lvl+0x16c/0x1f0 [ 572.581195][T11341] should_fail_ex+0x50a/0x650 [ 572.581230][T11341] _copy_to_user+0x32/0xd0 [ 572.581269][T11341] sctp_getsockopt+0x4608/0x74a0 [ 572.581302][T11341] ? hlock_class+0x4e/0x130 [ 572.581331][T11341] ? mark_lock+0xb5/0xc60 [ 572.581369][T11341] ? aa_label_sk_perm+0x19d/0x5a0 [ 572.581411][T11341] ? __pfx_sctp_getsockopt+0x10/0x10 [ 572.581440][T11341] ? __lock_acquire+0x15a9/0x3c40 [ 572.581496][T11341] ? __pfx___lock_acquire+0x10/0x10 [ 572.581550][T11341] ? find_held_lock+0x2d/0x110 [ 572.581588][T11341] ? __might_fault+0x13b/0x190 [ 572.581620][T11341] ? __pfx_lock_release+0x10/0x10 [ 572.581661][T11341] ? trace_lock_acquire+0x14e/0x1f0 [ 572.581700][T11341] ? lock_acquire+0x2f/0xb0 [ 572.581739][T11341] ? __might_fault+0xe3/0x190 [ 572.581768][T11341] ? __might_fault+0xe3/0x190 [ 572.581800][T11341] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 572.581852][T11341] ? do_sock_getsockopt+0x3fe/0x800 [ 572.581888][T11341] do_sock_getsockopt+0x3fe/0x800 [ 572.581928][T11341] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 572.581964][T11341] ? lock_acquire+0x2f/0xb0 [ 572.582002][T11341] ? __fget_files+0x40/0x3a0 [ 572.582053][T11341] ? __fget_files+0x206/0x3a0 [ 572.582107][T11341] __sys_getsockopt+0x12f/0x260 [ 572.582163][T11341] __x64_sys_getsockopt+0xbd/0x160 [ 572.582211][T11341] ? do_syscall_64+0x91/0x250 [ 572.582256][T11341] ? lockdep_hardirqs_on+0x7c/0x110 [ 572.582300][T11341] do_syscall_64+0xcd/0x250 [ 572.582348][T11341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 572.582391][T11341] RIP: 0033:0x7f34a978d169 [ 572.582415][T11341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.582445][T11341] RSP: 002b:00007f34aa6d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 572.582474][T11341] RAX: ffffffffffffffda RBX: 00007f34a99a5fa0 RCX: 00007f34a978d169 [ 572.582493][T11341] RDX: 0000000000000003 RSI: 0000000000000084 RDI: 0000000000000003 [ 572.582511][T11341] RBP: 00007f34aa6d6090 R08: 0000400000000080 R09: 0000000000000000 [ 572.582529][T11341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.582545][T11341] R13: 0000000000000000 R14: 00007f34a99a5fa0 R15: 00007ffe984b2cb8 [ 572.582583][T11341] [ 573.000267][T11350] FAULT_INJECTION: forcing a failure. [ 573.000267][T11350] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.015540][T11350] CPU: 1 UID: 0 PID: 11350 Comm: syz.0.953 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 573.015573][T11350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 573.015587][T11350] Call Trace: [ 573.015595][T11350] [ 573.015603][T11350] dump_stack_lvl+0x16c/0x1f0 [ 573.015645][T11350] should_fail_ex+0x50a/0x650 [ 573.015674][T11350] _copy_from_user+0x2e/0xd0 [ 573.015706][T11350] move_addr_to_kernel+0x68/0x160 [ 573.015744][T11350] __copy_msghdr+0x386/0x470 [ 573.015796][T11350] copy_msghdr_from_user+0xc2/0x160 [ 573.015841][T11350] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 573.015882][T11350] ? __lock_acquire+0xcc5/0x3c40 [ 573.015932][T11350] ___sys_sendmsg+0xff/0x1e0 [ 573.015975][T11350] ? __pfx____sys_sendmsg+0x10/0x10 [ 573.016030][T11350] ? trace_lock_acquire+0x14e/0x1f0 [ 573.016083][T11350] __sys_sendmmsg+0x201/0x420 [ 573.016113][T11350] ? __pfx___sys_sendmmsg+0x10/0x10 [ 573.016171][T11350] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 573.016228][T11350] ? fput+0x67/0x440 [ 573.016256][T11350] ? ksys_write+0x1ba/0x250 [ 573.016308][T11350] ? __pfx_ksys_write+0x10/0x10 [ 573.016349][T11350] __x64_sys_sendmmsg+0x9c/0x100 [ 573.016374][T11350] ? lockdep_hardirqs_on+0x7c/0x110 [ 573.016413][T11350] do_syscall_64+0xcd/0x250 [ 573.016456][T11350] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 573.016499][T11350] RIP: 0033:0x7f34a978d169 [ 573.016521][T11350] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 573.016549][T11350] RSP: 002b:00007f34aa6d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 573.016575][T11350] RAX: ffffffffffffffda RBX: 00007f34a99a5fa0 RCX: 00007f34a978d169 [ 573.016594][T11350] RDX: 0000000000000002 RSI: 0000400000000640 RDI: 0000000000000003 [ 573.016612][T11350] RBP: 00007f34aa6d6090 R08: 0000000000000000 R09: 0000000000000000 [ 573.016630][T11350] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 573.016647][T11350] R13: 0000000000000000 R14: 00007f34a99a5fa0 R15: 00007ffe984b2cb8 [ 573.016683][T11350] [ 573.329315][T11352] netlink: 4 bytes leftover after parsing attributes in process `syz.0.954'. [ 573.729873][T11184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.805563][T11184] 8021q: adding VLAN 0 to HW filter on device team0 [ 573.869690][ T1056] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.876907][ T1056] bridge0: port 1(bridge_slave_0) entered forwarding state [ 573.940957][ T1056] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.948194][ T1056] bridge0: port 2(bridge_slave_1) entered forwarding state [ 574.579889][T11395] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 574.732241][T11399] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[11399] [ 575.221824][T11184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 575.401298][T11408] FAULT_INJECTION: forcing a failure. [ 575.401298][T11408] name failslab, interval 1, probability 0, space 0, times 0 [ 575.446502][T11408] CPU: 1 UID: 0 PID: 11408 Comm: syz.1.963 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 575.446539][T11408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 575.446556][T11408] Call Trace: [ 575.446564][T11408] [ 575.446575][T11408] dump_stack_lvl+0x16c/0x1f0 [ 575.446636][T11408] should_fail_ex+0x50a/0x650 [ 575.446665][T11408] ? fs_reclaim_acquire+0xae/0x150 [ 575.446725][T11408] ? tomoyo_encode2+0x100/0x3e0 [ 575.446768][T11408] should_failslab+0xc2/0x120 [ 575.446799][T11408] __kmalloc_noprof+0xcb/0x510 [ 575.446846][T11408] ? d_absolute_path+0x137/0x1b0 [ 575.446879][T11408] ? rcu_is_watching+0x12/0xc0 [ 575.446917][T11408] tomoyo_encode2+0x100/0x3e0 [ 575.446967][T11408] tomoyo_encode+0x29/0x50 [ 575.447010][T11408] tomoyo_realpath_from_path+0x19d/0x720 [ 575.447069][T11408] tomoyo_path_number_perm+0x248/0x590 [ 575.447107][T11408] ? tomoyo_path_number_perm+0x235/0x590 [ 575.447150][T11408] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 575.447226][T11408] ? __pfx_lock_release+0x10/0x10 [ 575.447271][T11408] ? trace_lock_acquire+0x14e/0x1f0 [ 575.447311][T11408] ? lock_acquire+0x2f/0xb0 [ 575.447351][T11408] ? __fget_files+0x40/0x3a0 [ 575.447403][T11408] ? __fget_files+0x206/0x3a0 [ 575.447454][T11408] security_file_ioctl+0x9b/0x240 [ 575.447496][T11408] __x64_sys_ioctl+0xb7/0x200 [ 575.447537][T11408] do_syscall_64+0xcd/0x250 [ 575.447589][T11408] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.447644][T11408] RIP: 0033:0x7f1c9418d169 [ 575.447668][T11408] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.447698][T11408] RSP: 002b:00007f1c950c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 575.447727][T11408] RAX: ffffffffffffffda RBX: 00007f1c943a5fa0 RCX: 00007f1c9418d169 [ 575.447747][T11408] RDX: 0000000000000000 RSI: 00000000c004743e RDI: 0000000000000003 [ 575.447765][T11408] RBP: 00007f1c950c9090 R08: 0000000000000000 R09: 0000000000000000 [ 575.447782][T11408] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.447799][T11408] R13: 0000000000000000 R14: 00007f1c943a5fa0 R15: 00007ffc4cfc8f48 [ 575.447836][T11408] [ 575.447856][T11408] ERROR: Out of memory at tomoyo_realpath_from_path. [ 576.148673][T11433] netlink: 28 bytes leftover after parsing attributes in process `syz.1.965'. [ 576.202595][T11433] veth0_macvtap: left promiscuous mode [ 576.292849][T11184] veth0_vlan: entered promiscuous mode [ 576.345692][T11184] veth1_vlan: entered promiscuous mode [ 576.379252][T11439] FAULT_INJECTION: forcing a failure. [ 576.379252][T11439] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 576.428422][T11184] veth0_macvtap: entered promiscuous mode [ 576.434642][T11439] CPU: 0 UID: 0 PID: 11439 Comm: syz.3.967 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 576.434679][T11439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 576.434698][T11439] Call Trace: [ 576.434706][T11439] [ 576.434718][T11439] dump_stack_lvl+0x16c/0x1f0 [ 576.434766][T11439] should_fail_ex+0x50a/0x650 [ 576.434807][T11439] ? __pfx___might_resched+0x10/0x10 [ 576.434862][T11439] should_fail_alloc_page+0xe7/0x130 [ 576.434894][T11439] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 576.434935][T11439] ? hlock_class+0x4e/0x130 [ 576.434970][T11439] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 576.435032][T11439] ? __pfx_mark_lock+0x10/0x10 [ 576.435091][T11439] ? find_held_lock+0x2d/0x110 [ 576.435129][T11439] ? is_bpf_text_address+0x8a/0x1a0 [ 576.435174][T11439] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 576.435236][T11439] ? hlock_class+0x4e/0x130 [ 576.435263][T11439] ? mark_lock+0xb5/0xc60 [ 576.435299][T11439] ? hlock_class+0x4e/0x130 [ 576.435327][T11439] ? mark_lock+0xb5/0xc60 [ 576.435363][T11439] ? hlock_class+0x4e/0x130 [ 576.435394][T11439] ? mark_lock+0xb5/0xc60 [ 576.435457][T11439] ? __pfx_mark_lock+0x10/0x10 [ 576.435501][T11439] ? __pfx_mark_lock+0x10/0x10 [ 576.435553][T11439] ? mark_lock+0xb5/0xc60 [ 576.435594][T11439] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 576.435659][T11439] ? policy_nodemask+0xea/0x4e0 [ 576.435698][T11439] alloc_pages_mpol+0x1fc/0x540 [ 576.435730][T11439] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 576.435765][T11439] ? find_held_lock+0x2d/0x110 [ 576.435801][T11439] folio_alloc_mpol_noprof+0x36/0x2f0 [ 576.435846][T11439] vma_alloc_folio_noprof+0xee/0x1b0 [ 576.435883][T11439] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 576.435922][T11439] ? __pfx___lock_acquire+0x10/0x10 [ 576.435975][T11439] do_wp_page+0x1f68/0x4670 [ 576.436025][T11439] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 576.436071][T11439] ? __pfx_do_wp_page+0x10/0x10 [ 576.436107][T11439] ? rcu_is_watching+0x12/0xc0 [ 576.436144][T11439] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 576.436174][T11439] ? lock_acquire+0x2f/0xb0 [ 576.436214][T11439] ? __handle_mm_fault+0xdfa/0x2a40 [ 576.436266][T11439] __handle_mm_fault+0x1ade/0x2a40 [ 576.436325][T11439] ? __pfx___handle_mm_fault+0x10/0x10 [ 576.436368][T11439] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 576.436435][T11439] ? find_vma+0xc0/0x140 [ 576.436471][T11439] ? __pfx_find_vma+0x10/0x10 [ 576.436514][T11439] handle_mm_fault+0x3fa/0xaa0 [ 576.436576][T11439] do_user_addr_fault+0x7a3/0x13f0 [ 576.436627][T11439] exc_page_fault+0x5c/0xc0 [ 576.436669][T11439] asm_exc_page_fault+0x26/0x30 [ 576.436710][T11439] RIP: 0010:__put_user_4+0x11/0x20 [ 576.436754][T11439] Code: 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 48 89 cb 48 c1 fb 3f 48 09 d9 0f 01 cb <89> 01 31 c9 0f 01 ca c3 cc cc cc cc 0f 1f 00 90 90 90 90 90 90 90 [ 576.436782][T11439] RSP: 0018:ffffc90004897a58 EFLAGS: 00050246 [ 576.436805][T11439] RAX: 0000000000000004 RBX: 0000000000000000 RCX: 0000000000000000 [ 576.436822][T11439] RDX: ffff88802aac3c00 RSI: ffffffff8a9bd6ad RDI: ffffffff8bd35960 [ 576.436841][T11439] RBP: ffffc90004897d70 R08: 0000000000000000 R09: fffffbfff20c5182 [ 576.436858][T11439] R10: ffffffff90628c17 R11: 0000000000000001 R12: 0000000000000004 [ 576.436874][T11439] R13: ffff88805f87ec00 R14: 0000000000000020 R15: 0000000000000000 [ 576.436904][T11439] ? sctp_getsockopt+0x3dbd/0x74a0 [ 576.436941][T11439] sctp_getsockopt+0x3dce/0x74a0 [ 576.436975][T11439] ? hlock_class+0x4e/0x130 [ 576.437006][T11439] ? mark_lock+0xb5/0xc60 [ 576.437045][T11439] ? aa_label_sk_perm+0x19d/0x5a0 [ 576.437087][T11439] ? __pfx_sctp_getsockopt+0x10/0x10 [ 576.437118][T11439] ? __lock_acquire+0x15a9/0x3c40 [ 576.437178][T11439] ? __pfx___lock_acquire+0x10/0x10 [ 576.437234][T11439] ? find_held_lock+0x2d/0x110 [ 576.437271][T11439] ? __might_fault+0x13b/0x190 [ 576.437302][T11439] ? __pfx_lock_release+0x10/0x10 [ 576.437343][T11439] ? trace_lock_acquire+0x14e/0x1f0 [ 576.437383][T11439] ? lock_acquire+0x2f/0xb0 [ 576.437423][T11439] ? __might_fault+0xe3/0x190 [ 576.437455][T11439] ? __might_fault+0xe3/0x190 [ 576.437488][T11439] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 576.437538][T11439] ? do_sock_getsockopt+0x3fe/0x800 [ 576.437575][T11439] do_sock_getsockopt+0x3fe/0x800 [ 576.437615][T11439] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 576.437652][T11439] ? lock_acquire+0x2f/0xb0 [ 576.437694][T11439] ? __fget_files+0x40/0x3a0 [ 576.437743][T11439] ? __fget_files+0x206/0x3a0 [ 576.437796][T11439] __sys_getsockopt+0x12f/0x260 [ 576.437873][T11439] __x64_sys_getsockopt+0xbd/0x160 [ 576.437922][T11439] ? do_syscall_64+0x91/0x250 [ 576.437970][T11439] ? lockdep_hardirqs_on+0x7c/0x110 [ 576.438015][T11439] do_syscall_64+0xcd/0x250 [ 576.438073][T11439] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.438118][T11439] RIP: 0033:0x7efe2c18d169 [ 576.438142][T11439] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.438173][T11439] RSP: 002b:00007efe2cf1d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 576.438201][T11439] RAX: ffffffffffffffda RBX: 00007efe2c3a6080 RCX: 00007efe2c18d169 [ 576.438222][T11439] RDX: 0000000000000020 RSI: 0000000000000084 RDI: 0000000000000006 [ 576.438240][T11439] RBP: 00007efe2cf1d090 R08: 0000000000000000 R09: 0000000000000000 [ 576.438259][T11439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 576.438278][T11439] R13: 0000000000000000 R14: 00007efe2c3a6080 R15: 00007ffc0536d378 [ 576.438318][T11439] [ 576.985623][T11184] veth1_macvtap: entered promiscuous mode [ 577.001749][T11184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.012583][T11184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.022462][T11184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.032984][T11184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.044138][T11184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 577.054664][T11184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.065854][T11184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 577.133782][T11184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.184726][T11184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.224636][T11184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.286220][T11184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.331179][T11184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 577.380377][T11184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 577.394310][T11454] FAULT_INJECTION: forcing a failure. [ 577.394310][T11454] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 577.407824][T11454] CPU: 0 UID: 0 PID: 11454 Comm: syz.3.969 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 577.407867][T11454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 577.407887][T11454] Call Trace: [ 577.407897][T11454] [ 577.407909][T11454] dump_stack_lvl+0x16c/0x1f0 [ 577.407964][T11454] should_fail_ex+0x50a/0x650 [ 577.408002][T11454] _copy_from_user+0x2e/0xd0 [ 577.408040][T11454] copy_msghdr_from_user+0x99/0x160 [ 577.408093][T11454] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 577.408151][T11454] ? hlock_class+0x4e/0x130 [ 577.408184][T11454] ? __lock_acquire+0x15a9/0x3c40 [ 577.408238][T11454] ___sys_sendmsg+0xff/0x1e0 [ 577.408293][T11454] ? __pfx____sys_sendmsg+0x10/0x10 [ 577.408343][T11454] ? __pfx___lock_acquire+0x10/0x10 [ 577.408388][T11454] ? handle_mm_fault+0x497/0xaa0 [ 577.408473][T11454] ? __pfx___might_resched+0x10/0x10 [ 577.408525][T11454] ? __might_fault+0xe3/0x190 [ 577.408563][T11454] __sys_sendmmsg+0x201/0x420 [ 577.408597][T11454] ? __pfx___sys_sendmmsg+0x10/0x10 [ 577.408640][T11454] ? __pfx_do_futex+0x10/0x10 [ 577.408676][T11454] ? find_held_lock+0x2d/0x110 [ 577.408726][T11454] ? xfd_validate_state+0x5d/0x180 [ 577.408773][T11454] ? rcu_is_watching+0x12/0xc0 [ 577.408814][T11454] __x64_sys_sendmmsg+0x9c/0x100 [ 577.408845][T11454] ? lockdep_hardirqs_on+0x7c/0x110 [ 577.408890][T11454] do_syscall_64+0xcd/0x250 [ 577.408941][T11454] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.408988][T11454] RIP: 0033:0x7efe2c18d169 [ 577.409013][T11454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.409046][T11454] RSP: 002b:00007efe2cf3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 577.409077][T11454] RAX: ffffffffffffffda RBX: 00007efe2c3a5fa0 RCX: 00007efe2c18d169 [ 577.409099][T11454] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 577.409119][T11454] RBP: 00007efe2c20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 577.409138][T11454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.409157][T11454] R13: 0000000000000000 R14: 00007efe2c3a5fa0 R15: 00007ffc0536d378 [ 577.409196][T11454] [ 577.433148][T11184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 577.606628][T11461] syz.1.970 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 577.839685][T11184] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.862707][T11184] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.872073][T11184] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.887620][T11184] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 577.984527][T11466] FAULT_INJECTION: forcing a failure. [ 577.984527][T11466] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 578.083136][T11466] CPU: 1 UID: 0 PID: 11466 Comm: syz.3.972 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 578.083175][T11466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 578.083193][T11466] Call Trace: [ 578.083202][T11466] [ 578.083212][T11466] dump_stack_lvl+0x16c/0x1f0 [ 578.083262][T11466] should_fail_ex+0x50a/0x650 [ 578.083307][T11466] strncpy_from_user+0x3b/0x2d0 [ 578.083372][T11466] getname_flags.part.0+0x8f/0x550 [ 578.083411][T11466] getname+0x8d/0xe0 [ 578.083450][T11466] do_sys_openat2+0x104/0x1e0 [ 578.083482][T11466] ? __pfx_do_sys_openat2+0x10/0x10 [ 578.083518][T11466] ? __fget_files+0x206/0x3a0 [ 578.083569][T11466] __x64_sys_openat+0x175/0x210 [ 578.083622][T11466] ? __pfx___x64_sys_openat+0x10/0x10 [ 578.083665][T11466] ? ksys_write+0x1ba/0x250 [ 578.083723][T11466] do_syscall_64+0xcd/0x250 [ 578.083774][T11466] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.083820][T11466] RIP: 0033:0x7efe2c18d169 [ 578.083845][T11466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.083876][T11466] RSP: 002b:00007efe2cf3e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 578.083905][T11466] RAX: ffffffffffffffda RBX: 00007efe2c3a5fa0 RCX: 00007efe2c18d169 [ 578.083927][T11466] RDX: 0000000000020301 RSI: 0000400000000100 RDI: ffffffffffffff9c [ 578.083946][T11466] RBP: 00007efe2cf3e090 R08: 0000000000000000 R09: 0000000000000000 [ 578.083965][T11466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.083983][T11466] R13: 0000000000000000 R14: 00007efe2c3a5fa0 R15: 00007ffc0536d378 [ 578.084021][T11466] [ 578.251597][ C1] vkms_vblank_simulate: vblank timer overrun [ 578.301099][ T9054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.326480][ T9054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.382201][ T9054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 578.463911][ T9054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 578.654172][T11475] FAULT_INJECTION: forcing a failure. [ 578.654172][T11475] name failslab, interval 1, probability 0, space 0, times 0 [ 578.713322][T11475] CPU: 1 UID: 0 PID: 11475 Comm: syz.0.974 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 578.713367][T11475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 578.713384][T11475] Call Trace: [ 578.713392][T11475] [ 578.713401][T11475] dump_stack_lvl+0x16c/0x1f0 [ 578.713447][T11475] should_fail_ex+0x50a/0x650 [ 578.713474][T11475] ? fs_reclaim_acquire+0xae/0x150 [ 578.713512][T11475] ? tomoyo_encode2+0x100/0x3e0 [ 578.713549][T11475] should_failslab+0xc2/0x120 [ 578.713575][T11475] __kmalloc_noprof+0xcb/0x510 [ 578.713637][T11475] ? d_absolute_path+0x137/0x1b0 [ 578.713669][T11475] ? rcu_is_watching+0x12/0xc0 [ 578.713705][T11475] tomoyo_encode2+0x100/0x3e0 [ 578.713754][T11475] tomoyo_encode+0x29/0x50 [ 578.713794][T11475] tomoyo_realpath_from_path+0x19d/0x720 [ 578.713850][T11475] tomoyo_path_number_perm+0x248/0x590 [ 578.713887][T11475] ? tomoyo_path_number_perm+0x235/0x590 [ 578.713928][T11475] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 578.714003][T11475] ? __pfx_lock_release+0x10/0x10 [ 578.714046][T11475] ? trace_lock_acquire+0x14e/0x1f0 [ 578.714087][T11475] ? lock_acquire+0x2f/0xb0 [ 578.714126][T11475] ? __fget_files+0x40/0x3a0 [ 578.714175][T11475] ? __fget_files+0x206/0x3a0 [ 578.714222][T11475] security_file_ioctl+0x9b/0x240 [ 578.714263][T11475] __x64_sys_ioctl+0xb7/0x200 [ 578.714303][T11475] do_syscall_64+0xcd/0x250 [ 578.714352][T11475] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 578.714404][T11475] RIP: 0033:0x7f34a978d169 [ 578.714428][T11475] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 578.714458][T11475] RSP: 002b:00007f34aa6d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 578.714487][T11475] RAX: ffffffffffffffda RBX: 00007f34a99a5fa0 RCX: 00007f34a978d169 [ 578.714508][T11475] RDX: 0000000000000006 RSI: 00000000000007a0 RDI: 0000000000000003 [ 578.714525][T11475] RBP: 00007f34aa6d6090 R08: 0000000000000000 R09: 0000000000000000 [ 578.714542][T11475] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 578.714560][T11475] R13: 0000000000000000 R14: 00007f34a99a5fa0 R15: 00007ffe984b2cb8 [ 578.714598][T11475] [ 578.714619][T11475] ERROR: Out of memory at tomoyo_realpath_from_path. [ 579.072025][T11483] FAULT_INJECTION: forcing a failure. [ 579.072025][T11483] name failslab, interval 1, probability 0, space 0, times 0 [ 579.116231][T11483] CPU: 1 UID: 0 PID: 11483 Comm: syz.1.975 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 579.116266][T11483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 579.116281][T11483] Call Trace: [ 579.116288][T11483] [ 579.116299][T11483] dump_stack_lvl+0x16c/0x1f0 [ 579.116351][T11483] should_fail_ex+0x50a/0x650 [ 579.116377][T11483] ? fs_reclaim_acquire+0xae/0x150 [ 579.116415][T11483] ? tracepoint_add_func+0x2a9/0xeb0 [ 579.116456][T11483] should_failslab+0xc2/0x120 [ 579.116481][T11483] __kmalloc_noprof+0xcb/0x510 [ 579.116520][T11483] ? trace_contention_end+0xee/0x140 [ 579.116565][T11483] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 579.116607][T11483] tracepoint_add_func+0x2a9/0xeb0 [ 579.116648][T11483] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 579.116696][T11483] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 579.116736][T11483] tracepoint_probe_register+0xc0/0x110 [ 579.116781][T11483] ? __pfx_tracepoint_probe_register+0x10/0x10 [ 579.116826][T11483] ? __pfx_probe_sched_wakeup+0x10/0x10 [ 579.116864][T11483] ? lockdep_hardirqs_on+0x7c/0x110 [ 579.116911][T11483] tracing_start_sched_switch+0xaf/0x1e0 [ 579.116949][T11483] __ftrace_event_enable_disable+0x64d/0x850 [ 579.117019][T11483] __ftrace_set_clr_event_nolock+0x397/0xb80 [ 579.117077][T11483] ftrace_set_clr_event+0x16f/0x330 [ 579.117109][T11483] ? __pfx_ftrace_set_clr_event+0x10/0x10 [ 579.117171][T11483] ftrace_event_write+0x245/0x290 [ 579.117204][T11483] ? __pfx_ftrace_event_write+0x10/0x10 [ 579.117239][T11483] ? ksys_write+0x12b/0x250 [ 579.117291][T11483] ? __pfx_ftrace_event_write+0x10/0x10 [ 579.117322][T11483] vfs_write+0x24c/0x1150 [ 579.117371][T11483] ? __fget_files+0x1fc/0x3a0 [ 579.117417][T11483] ? __pfx___mutex_lock+0x10/0x10 [ 579.117462][T11483] ? __pfx_vfs_write+0x10/0x10 [ 579.117517][T11483] ? __fget_files+0x206/0x3a0 [ 579.117575][T11483] ksys_write+0x12b/0x250 [ 579.117618][T11483] ? __pfx_ksys_write+0x10/0x10 [ 579.117673][T11483] do_syscall_64+0xcd/0x250 [ 579.117724][T11483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.117767][T11483] RIP: 0033:0x7f1c9418d169 [ 579.117790][T11483] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 579.117819][T11483] RSP: 002b:00007f1c950c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 579.117848][T11483] RAX: ffffffffffffffda RBX: 00007f1c943a5fa0 RCX: 00007f1c9418d169 [ 579.117868][T11483] RDX: 0000000000000004 RSI: 0000000000000000 RDI: 0000000000000003 [ 579.117885][T11483] RBP: 00007f1c950c9090 R08: 0000000000000000 R09: 0000000000000000 [ 579.117902][T11483] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 579.117918][T11483] R13: 0000000000000000 R14: 00007f1c943a5fa0 R15: 00007ffc4cfc8f48 [ 579.117958][T11483] [ 579.117970][T11483] wakeup trace: Couldn't activate tracepoint probe to kernel_sched_wakeup [ 579.925288][T11490] ------------[ cut here ]------------ [ 579.931477][T11490] WARNING: CPU: 1 PID: 11490 at kernel/tracepoint.c:358 tracepoint_probe_unregister+0x894/0xd70 [ 579.942240][T11490] Modules linked in: [ 579.946465][T11490] CPU: 1 UID: 0 PID: 11490 Comm: syz.0.977 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 579.957539][T11490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 579.967960][T11490] RIP: 0010:tracepoint_probe_unregister+0x894/0xd70 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 579.974665][T11490] Code: 41 5e 41 5f c3 cc cc cc cc e8 38 1a fe ff 48 c7 c6 f0 c6 bb 81 48 89 df e8 29 d9 e4 ff eb 9f bb fe ff ff ff e8 1d 1a fe ff 90 <0f> 0b 90 eb 91 e8 12 1a fe ff 48 89 da 48 b8 00 00 00 00 00 fc ff [ 579.994678][T11490] RSP: 0018:ffffc900044f7890 EFLAGS: 00010283 [ 580.000876][T11490] RAX: 0000000000044952 RBX: 00000000fffffffe RCX: ffffc9000504a000 [ 580.009077][T11490] RDX: 0000000000080000 RSI: ffffffff81bbd833 RDI: 0000000000000005 [ 580.017766][T11490] RBP: ffffffff8e57bfe0 R08: 0000000000000005 R09: 0000000000000000 [ 580.026469][T11490] R10: 0000000000000001 R11: 0000000000000003 R12: ffffffff81c198c0 [ 580.034506][T11490] R13: 0000000000000402 R14: 0000000000000002 R15: ffffffff8e2410b8 [ 580.042695][T11490] FS: 00007f34aa6d66c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 580.051751][T11490] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 580.058462][T11490] CR2: 00007fd14d458440 CR3: 000000005d1ba000 CR4: 00000000003526f0 [ 580.066535][T11490] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 580.074597][T11490] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 580.082722][T11490] Call Trace: [ 580.086048][T11490] [ 580.089092][T11490] ? __warn+0xea/0x3c0 [ 580.093229][T11490] ? tracepoint_probe_unregister+0x894/0xd70 [ 580.099356][T11490] ? report_bug+0x3c0/0x580 [ 580.103936][T11490] ? handle_bug+0x54/0xa0 [ 580.108413][T11490] ? exc_invalid_op+0x17/0x50 [ 580.113723][T11490] ? asm_exc_invalid_op+0x1a/0x20 [ 580.119760][T11490] ? __pfx_probe_sched_switch+0x10/0x10 [ 580.125611][T11490] ? tracepoint_probe_unregister+0x893/0xd70 [ 580.131725][T11490] ? tracepoint_probe_unregister+0x894/0xd70 [ 580.137837][T11490] ? __pfx_tracepoint_probe_unregister+0x10/0x10 [ 580.144292][T11490] tracing_stop_cmdline_record+0x66/0xa0 [ 580.150074][T11490] __ftrace_event_enable_disable+0x73f/0x850 [ 580.156221][T11490] ftrace_event_set_open+0x240/0x390 [ 580.161609][T11490] do_dentry_open+0x735/0x1c40 [ 580.166525][T11490] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 580.172455][T11490] ? inode_permission+0xdd/0x5f0 [ 580.177535][T11490] vfs_open+0x82/0x3f0 [ 580.181661][T11490] ? may_open+0x1f2/0x400 [ 580.186055][T11490] path_openat+0x1e88/0x2d80 [ 580.190814][T11490] ? __pfx_path_openat+0x10/0x10 [ 580.196081][T11490] ? __pfx___lock_acquire+0x10/0x10 [ 580.201557][T11490] ? lock_acquire.part.0+0x11b/0x380 [ 580.206983][T11490] ? find_held_lock+0x2d/0x110 [ 580.212186][T11490] do_filp_open+0x20c/0x470 [ 580.217670][T11490] ? __pfx_do_filp_open+0x10/0x10 [ 580.223619][T11490] ? find_held_lock+0x2d/0x110 [ 580.228543][T11490] ? alloc_fd+0x41f/0x760 [ 580.232968][T11490] do_sys_openat2+0x17a/0x1e0 [ 580.237747][T11490] ? __pfx_do_sys_openat2+0x10/0x10 [ 580.243034][T11490] __x64_sys_openat+0x175/0x210 [ 580.248010][T11490] ? __pfx___x64_sys_openat+0x10/0x10 [ 580.253491][T11490] do_syscall_64+0xcd/0x250 [ 580.258170][T11490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.264907][T11490] RIP: 0033:0x7f34a978d169 [ 580.269464][T11490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.289388][T11490] RSP: 002b:00007f34aa6d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 580.298559][T11490] RAX: ffffffffffffffda RBX: 00007f34a99a5fa0 RCX: 00007f34a978d169 [ 580.306822][T11490] RDX: 0000000000020301 RSI: 0000400000000100 RDI: ffffffffffffff9c [ 580.314848][T11490] RBP: 00007f34a980e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 580.323533][T11490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.332278][T11490] R13: 0000000000000000 R14: 00007f34a99a5fa0 R15: 00007ffe984b2cb8 [ 580.340670][T11490] [ 580.343736][T11490] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 580.351050][T11490] CPU: 1 UID: 0 PID: 11490 Comm: syz.0.977 Not tainted 6.14.0-rc7-syzkaller-00074-ga7f2e10ecd8f #0 [ 580.361751][T11490] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 580.371842][T11490] Call Trace: [ 580.375140][T11490] [ 580.378092][T11490] dump_stack_lvl+0x3d/0x1f0 [ 580.382727][T11490] panic+0x71d/0x800 [ 580.386650][T11490] ? __pfx_panic+0x10/0x10 [ 580.391117][T11490] ? show_trace_log_lvl+0x29d/0x3d0 [ 580.396373][T11490] ? tracepoint_probe_unregister+0x894/0xd70 [ 580.402401][T11490] check_panic_on_warn+0xab/0xb0 [ 580.407369][T11490] __warn+0xf6/0x3c0 [ 580.411316][T11490] ? tracepoint_probe_unregister+0x894/0xd70 [ 580.417367][T11490] report_bug+0x3c0/0x580 [ 580.421763][T11490] handle_bug+0x54/0xa0 [ 580.425960][T11490] exc_invalid_op+0x17/0x50 [ 580.430505][T11490] asm_exc_invalid_op+0x1a/0x20 [ 580.435418][T11490] RIP: 0010:tracepoint_probe_unregister+0x894/0xd70 [ 580.442058][T11490] Code: 41 5e 41 5f c3 cc cc cc cc e8 38 1a fe ff 48 c7 c6 f0 c6 bb 81 48 89 df e8 29 d9 e4 ff eb 9f bb fe ff ff ff e8 1d 1a fe ff 90 <0f> 0b 90 eb 91 e8 12 1a fe ff 48 89 da 48 b8 00 00 00 00 00 fc ff [ 580.461696][T11490] RSP: 0018:ffffc900044f7890 EFLAGS: 00010283 [ 580.467788][T11490] RAX: 0000000000044952 RBX: 00000000fffffffe RCX: ffffc9000504a000 [ 580.475779][T11490] RDX: 0000000000080000 RSI: ffffffff81bbd833 RDI: 0000000000000005 [ 580.483770][T11490] RBP: ffffffff8e57bfe0 R08: 0000000000000005 R09: 0000000000000000 [ 580.491762][T11490] R10: 0000000000000001 R11: 0000000000000003 R12: ffffffff81c198c0 [ 580.499753][T11490] R13: 0000000000000402 R14: 0000000000000002 R15: ffffffff8e2410b8 [ 580.507748][T11490] ? __pfx_probe_sched_switch+0x10/0x10 [ 580.513335][T11490] ? tracepoint_probe_unregister+0x893/0xd70 [ 580.519366][T11490] ? __pfx_tracepoint_probe_unregister+0x10/0x10 [ 580.525745][T11490] tracing_stop_cmdline_record+0x66/0xa0 [ 580.531414][T11490] __ftrace_event_enable_disable+0x73f/0x850 [ 580.537445][T11490] ftrace_event_set_open+0x240/0x390 [ 580.542777][T11490] do_dentry_open+0x735/0x1c40 [ 580.547580][T11490] ? __pfx_ftrace_event_set_open+0x10/0x10 [ 580.553433][T11490] ? inode_permission+0xdd/0x5f0 [ 580.558402][T11490] vfs_open+0x82/0x3f0 [ 580.562497][T11490] ? may_open+0x1f2/0x400 [ 580.566858][T11490] path_openat+0x1e88/0x2d80 [ 580.571492][T11490] ? __pfx_path_openat+0x10/0x10 [ 580.576466][T11490] ? __pfx___lock_acquire+0x10/0x10 [ 580.581696][T11490] ? lock_acquire.part.0+0x11b/0x380 [ 580.587014][T11490] ? find_held_lock+0x2d/0x110 [ 580.591821][T11490] do_filp_open+0x20c/0x470 [ 580.596362][T11490] ? __pfx_do_filp_open+0x10/0x10 [ 580.601423][T11490] ? find_held_lock+0x2d/0x110 [ 580.606245][T11490] ? alloc_fd+0x41f/0x760 [ 580.610623][T11490] do_sys_openat2+0x17a/0x1e0 [ 580.615325][T11490] ? __pfx_do_sys_openat2+0x10/0x10 [ 580.620564][T11490] __x64_sys_openat+0x175/0x210 [ 580.625440][T11490] ? __pfx___x64_sys_openat+0x10/0x10 [ 580.630853][T11490] do_syscall_64+0xcd/0x250 [ 580.635394][T11490] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 580.641325][T11490] RIP: 0033:0x7f34a978d169 [ 580.645759][T11490] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 580.665392][T11490] RSP: 002b:00007f34aa6d6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 580.673832][T11490] RAX: ffffffffffffffda RBX: 00007f34a99a5fa0 RCX: 00007f34a978d169 [ 580.681822][T11490] RDX: 0000000000020301 RSI: 0000400000000100 RDI: ffffffffffffff9c [ 580.689812][T11490] RBP: 00007f34a980e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 580.697799][T11490] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 580.705780][T11490] R13: 0000000000000000 R14: 00007f34a99a5fa0 R15: 00007ffe984b2cb8 [ 580.713785][T11490] [ 580.717138][T11490] Kernel Offset: disabled [ 580.721538][T11490] Rebooting in 86400 seconds..