last executing test programs: 1m16.161483065s ago: executing program 0 (id=2281): mmap$auto(0x0, 0x2020009, 0xfffffffffffffff8, 0xeb1, 0xfffffffffffffffa, 0x8000) keyctl$auto(0x1d, 0xfffffffffffffffd, 0x2, 0x628, 0xfffffffffffffffd) r0 = socketcall$auto_SYS_SOCKETPAIR(0x8, &(0x7f0000000000)=0x8001) ioctl$auto_X86_IOC_WRMSR_REGS(r0, 0xc02063a1, &(0x7f0000000040)=[0x1ff, 0x0, 0x7, 0x1, 0x800, 0x5, 0x40, 0xfffff6e8]) 1m15.947198703s ago: executing program 0 (id=2283): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x2000d, 0x4000000200df, 0xeb1, 0x404, 0x8000) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0xa, 0x1, 0x84) r2 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x7, 0x3e, 0xfffffffffffffffa, 0x1ffde, 0x0, 0xa, 0x2, 0x9, 0x3, 0x9, 0x4, 0xb4, 0x9, 0x2, 0x10000, 0x80, 0x7, 0x0, 0x7, 0x2000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0xadd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ff, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd]}, 0x1fe, 0x200d) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) r3 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r3], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x2000c090}, 0x20020040) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="1c"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m15.779549159s ago: executing program 0 (id=2284): openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x800, 0x0) r0 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x101600, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/binderfs/binder1\x00', 0x20000, 0x0) read$auto_transactions_fops_(r0, &(0x7f0000000080)=""/18, 0x12) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x801, 0x106) socket(0x2c, 0x80000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/oom_adj\x00', 0x2bc540, 0x0) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MM_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r4, 0x301, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) r7 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, r10, 0x1b, 0x70bc26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r9}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r8, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xbc, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)={0xb40, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x10}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xb1c, 0x2b, 0x0, 0x1, [@nested={0xb17, 0x24, 0x0, 0x1, [@nested={0x4, 0x80}, @generic="ba89ebda4be9067b59c90d50dab4ba175b1b13d15e19ee0f5bf6c6d2095efcc719c8e137b7ec6062c6c768e512acd0f1208ee2be2b891868abd1934bd95a54945e649a2afd1272f72e8fffb57e3ba1c8fb306ce2ba95180cf54dcca46ab950e626ff31022afd57f1306ee00962cb60c30a9946d642a00256ed0006ec8364307874f7c763c6e9af0222943721fb4fa5b1cecfe3a908b1fd515dad1e0ca0998fa55ca4bbf9412855250567f1b981", @generic="86d8597ab6fb715cef224b510a7ccc4cae047b6d4ab94775e1158d87be4806455bbd76baaa3a656ed5f316b17a5a27a6ec99", @nested={0x4, 0x6d}, @nested={0xa2c, 0x8e, 0x0, 0x1, [@generic="b634a4b1ce57b5a586e945eb157cc566d02bed93630b901c93d3", @generic="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"]}]}]}]}, 0xb40}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) 1m15.398049463s ago: executing program 0 (id=2286): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r0, 0x401070cd, 0x5) socket(0x2, 0x80002, 0x73) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) (async) ioctl$auto(r0, 0x401070cd, 0x5) (async) socket(0x2, 0x80002, 0x73) (async) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) (async) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) (async) sendmmsg$auto(0x3, 0x0, 0x9a4, 0xffff) (async) 1m14.924157435s ago: executing program 0 (id=2287): r0 = socket(0x10, 0x2, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00'}) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) 1m14.577132543s ago: executing program 0 (id=2290): r0 = socket(0x2, 0x1, 0x0) shutdown$auto(r0, 0x7) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x80801, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000001740)='/dev/snd/controlC0\x00', 0x2100, 0x0) socket(0x2, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) close_range$auto(0x2, 0x8000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x1, 0x106) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20040045) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) pwrite64$auto(0xc8, 0x0, 0x6, 0x7a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlock$auto(0x1000, 0x6) pselect6$auto(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0x100082) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 59.379828268s ago: executing program 32 (id=2290): r0 = socket(0x2, 0x1, 0x0) shutdown$auto(r0, 0x7) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000000)='/dev/input/event0\x00', 0x80801, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000001740)='/dev/snd/controlC0\x00', 0x2100, 0x0) socket(0x2, 0x2, 0x0) r1 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, 0x0, 0x10004010) close_range$auto(0x2, 0x8000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) socket(0x2, 0x1, 0x106) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, 0x0, 0x20040045) madvise$auto(0x0, 0x2003f0, 0x15) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x60742, 0x0) pwrite64$auto(0xc8, 0x0, 0x6, 0x7a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mlock$auto(0x1000, 0x6) pselect6$auto(0x8000, 0x0, 0x0, 0x0, 0x0, 0x0) write$auto(0x3, 0x0, 0x100082) ioctl$auto_BLKFLSBUF(r2, 0x1261, 0x0) readv$auto(0x3, &(0x7f0000000040)={0x0, 0x36a}, 0x6) sendmsg$auto_IPVS_CMD_GET_SERVICE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x0, 0x4, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) 14.967875175s ago: executing program 1 (id=2450): r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x16002, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b7f, 0x7, 0x28000) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x7, 0x2, 0x8000000000000002, 0x2, 0x0, 0x0, 0x0, 0x2d9c, 0x40000000000f, 0x7, 0x40000401, 0x800000008001, 0x9, 0xffffffff80000000, 0x7, 0xfffffffffffffffd, 0x8}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f00000000c0)={{0x0, 0x2, 0xff, 0xffffffff, 0xeffffffb}, "0dd729347eeeccdf0732f77b050000000000000057a97ca5e9ca6310ea00"}) ioctl$auto_SNDRV_TIMER_IOCTL_START_OLD(r1, 0x5420, 0x0) close_range$auto(r0, r0, 0xfffffffd) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop14/queue/dma_alignment\x00', 0x80000, 0x0) read$auto(r3, 0x0, 0x20) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) socket(0x2, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x3, 0xa) socket(0x11, 0x80003, 0x300) clone3$auto(0x0, 0x9) socketpair$auto(0x1, 0x0, 0xfffffffc, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0xc7f16bff2a10ba01, 0x0) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TIOCVHANGUP2(r4, 0x5437, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) open(0x0, 0x22240, 0x154) bpf$auto(0x7, 0x0, 0xa3) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 14.262331322s ago: executing program 1 (id=2453): r0 = socket(0x2, 0x3, 0xa) open(0x0, 0x149443, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_METER_ATTR_STATS={0x14, 0x3, {0x7, 0xd}}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0xfffffeff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x404c0c0) ioperm$auto(0x3b, 0xf99b, 0x6) close_range$auto(0x0, 0xffffffffffffefff, 0x4000000000002) fanotify_init$auto(0x5, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x3e1) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1020, 0x202, 0x10001, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x4, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x10000008, 0x52, 0x1, 0x1, 0x40, 0x76c4, 0x80008, 0x5}}) unshare$auto(0x40000080) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_vlan/disable_ipv6\x00', 0x82002, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) socket(0xa, 0x801, 0x84) sendfile$auto(r2, r3, 0x0, 0x1) 13.718216284s ago: executing program 1 (id=2454): r0 = socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xffff6888, 0x0, 0x0, 0xfffffffffffffffd, 0x4ea, 0x1, 0x6, 0x0, 0x1, 0x0, 0x962, {0x2000100000000, 0x10000}, 0x5, 0x6, 0xffffffffffeffffb, 0x6, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0x20000a747, 0xdeb1, 0x804}) sysfs$auto(0x2, 0x7, 0x81) r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r1, 0x15, 0x0, 0x9) getsockopt$auto(r0, 0x11b, 0x8, 0x0, 0x0) 13.130198362s ago: executing program 1 (id=2456): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0xe) socket(0x2, 0x2, 0x88) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) socket(0x6, 0x3, 0x3b) connect$auto(0x3, &(0x7f0000000000)=@rc={0x1f, @any, 0x6}, 0x5) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b70, 0xffffffffffffffff, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r0 = socket(0xa, 0x3, 0x3a) openat$auto_objects_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x2000, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b71, 0x2, 0x8000) socketpair$auto(0x3, 0x7, 0x8000000000000000, 0x0) close_range$auto(0x2, 0xffffffffffffffff, 0x0) open(0x0, 0x22240, 0x55) openat$auto_dvb_frontend_fops_dvb_frontend(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$auto(0x3, 0x80106f53, r1) membarrier$auto(0x2, 0x0, 0x9) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) connect$auto(0x3, &(0x7f0000000000)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}}, 0x55) socket(0x22, 0x3, 0x1) sendmmsg$auto(r0, 0x0, 0x7, 0xffbfffe) mkdir$auto(&(0x7f00000002c0)='./file0\x00', 0x3) mkdir$auto(&(0x7f00000000c0)='./file1\x00', 0x9) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1/file0\x00', 0x101040, 0x149) rename$auto(&(0x7f0000000280)='./file1/file0\x00', &(0x7f0000000040)='./file0/file0\x00') 11.920090128s ago: executing program 1 (id=2458): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0x7115c3, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x400) socketpair$auto(0x11f, 0x1, 0x3, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40103d0b, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0xec315366f6b76f2e, 0x3, 0x1}}, 0x54) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x100800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x5, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x2, 0x2, 0x1) socket(0x25, 0x5, 0x9) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) ioctl$auto(0xffffffffffffffff, 0x4b4b, 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2a, 0x3, 0x2) getsockopt$auto(r3, 0x107, 0x1, 0x0, 0x0) setuid$auto(0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) 10.676085334s ago: executing program 4 (id=2459): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0x7115c3, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x400) socketpair$auto(0x11f, 0x1, 0x3, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40103d0b, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0xec315366f6b76f2e, 0x3, 0x1}}, 0x54) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x100800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x5, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x2, 0x2, 0x1) socket(0x25, 0x5, 0x9) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) ioctl$auto(0xffffffffffffffff, 0x4b4b, 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2a, 0x3, 0x2) getsockopt$auto(r3, 0x107, 0x1, 0x0, 0x0) setuid$auto(0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) 9.548566946s ago: executing program 2 (id=2460): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0x7115c3, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x400) socketpair$auto(0x11f, 0x1, 0x3, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40103d0b, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0xec315366f6b76f2e, 0x3, 0x1}}, 0x54) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x100800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x5, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x2, 0x2, 0x1) socket(0x25, 0x5, 0x9) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) ioctl$auto(0xffffffffffffffff, 0x4b4b, 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2a, 0x3, 0x2) getsockopt$auto(r3, 0x107, 0x1, 0x0, 0x0) setuid$auto(0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) 9.546974603s ago: executing program 1 (id=2467): openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x800, 0x0) r0 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x101600, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/binderfs/binder1\x00', 0x20000, 0x0) read$auto_transactions_fops_(r0, &(0x7f0000000080)=""/18, 0x12) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x801, 0x106) socket(0x2c, 0x80000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/oom_adj\x00', 0x2bc540, 0x0) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MM_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r4, 0x301, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) r7 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, r10, 0x1b, 0x70bc26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r9}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r8, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xbc, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)={0xb5c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x10}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xb38, 0x2b, 0x0, 0x1, [@nested={0xb33, 0x24, 0x0, 0x1, [@nested={0x4, 0x80}, @generic="ba89ebda4be9067b59c90d50dab4ba175b1b13d15e19ee0f5bf6c6d2095efcc719c8e137b7ec6062c6c768e512acd0f1208ee2be2b891868abd1934bd95a54945e649a2afd1272f72e8fffb57e3ba1c8fb306ce2ba95180cf54dcca46ab950e626ff31022afd57f1306ee00962cb60c30a9946d642a00256ed0006ec8364307874f7c763c6e9af0222943721fb4fa5b1cecfe3a908b1fd515dad1e0ca0998fa55ca4bbf9412855250567f1b981", @generic="86d8597ab6fb715cef224b510a7ccc4cae047b6d4ab94775e1158d87be4806455bbd76baaa3a656ed5f316b17a5a27a6ec99", @nested={0x4, 0x6d}, @nested={0xa45, 0x8e, 0x0, 0x1, [@generic="b634a4b1ce57b5a586e945eb157cc566d02bed93630b901c93d3fde23606aa3e80e4d0644fef266741cf5f2879924594cd388e", @generic="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"]}]}]}]}, 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) 8.799173579s ago: executing program 2 (id=2462): rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000100)={0x1ff, 0xfff, 0x1000}) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/0/msr\x00', 0x101f82, 0x0) pidfd_open$auto(0x1, 0x0) 8.364860423s ago: executing program 2 (id=2463): r0 = socket(0x2, 0x3, 0xa) open(0x0, 0x149443, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_METER_ATTR_STATS={0x14, 0x3, {0x7, 0xd}}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0xfffffeff}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008000}, 0x404c0c0) ioperm$auto(0x3b, 0xf99b, 0x6) close_range$auto(0x0, 0xffffffffffffefff, 0x4000000000002) fanotify_init$auto(0x5, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x3e1) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1020, 0x202, 0x10001, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x4, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x10000008, 0x52, 0x1, 0x1, 0x40, 0x76c4, 0x80008, 0x5}}) unshare$auto(0x40000080) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_vlan/disable_ipv6\x00', 0x82002, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) socket(0xa, 0x801, 0x84) sendfile$auto(r2, r3, 0x0, 0x1) 8.360941459s ago: executing program 4 (id=2471): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0x7115c3, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x400) socketpair$auto(0x11f, 0x1, 0x3, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40103d0b, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0xec315366f6b76f2e, 0x3, 0x1}}, 0x54) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x100800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x5, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x2, 0x2, 0x1) socket(0x25, 0x5, 0x9) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) ioctl$auto(0xffffffffffffffff, 0x4b4b, 0xffffffffffffffff) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2a, 0x3, 0x2) getsockopt$auto(r3, 0x107, 0x1, 0x0, 0x0) setuid$auto(0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) 5.404227356s ago: executing program 3 (id=2464): r0 = socket(0x2c, 0x3, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0xffff6888, 0x0, 0x0, 0xfffffffffffffffd, 0x4ea, 0x1, 0x6, 0x0, 0x1, 0x0, 0x962, {0x2000100000000, 0x10000}, 0x5, 0x6, 0xffffffffffeffffb, 0x6, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0x20000a747, 0xdeb1, 0x804}) sysfs$auto(0x2, 0x7, 0x81) r1 = io_uring_setup$auto(0x1d48, &(0x7f0000000340)={0x7fffffff, 0x10, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x8, 0x1, 0x80000000, 0x100, 0x83, 0x101, 0x6, 0x8000000000000001}, {0x100, 0x1, 0x52, 0x5, 0x11, 0x101, 0x876c5, 0xc9, 0x3}}) io_uring_register$auto(r1, 0x15, 0x0, 0x9) getsockopt$auto(r0, 0x11b, 0x8, 0x0, 0x0) 5.403104623s ago: executing program 4 (id=2465): r0 = openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) r1 = ioctl$auto_dma_heap_fops_dma_heap(r0, 0xffffffff5fdffe00, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/netfilter/nf_log/3\x00', 0xa2202, 0x0) r2 = wait4$auto(0x0, &(0x7f00000001c0)=0x4000000, 0x7, &(0x7f00000002c0)={{0x64a0, 0x2}, {0x4, 0x6e}, 0xfff, 0xe05b, 0x9, 0x8, 0x2e3, 0x9, 0x800, 0x5, 0xc85d, 0xffffffffffffffff, 0x8, 0x8, 0x9e3}) sendmsg$auto_NL802154_CMD_GET_SEC_DEVKEY(r1, &(0x7f0000000380)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="b804000032afaf3e15a41a995d93f019b64930a13328ee4cc4997136406bf90548483854bab99e9401e6cb695e7b392369de64243bd95400000000000000f48dac9a7224f2fb904ade263da38a3ee7ed1c9973f3cdd93b989ec8cad569222db1c9560dfe2dbdf7dc87ab3703daa418d75a66e6b9ff1c5cc6ecc84769ba2f8f05d9d08df240cbc3a3d28b6110471445363f99cad3b663a7a8d38ecbdd1b3fd1c56c2fff0ba18530ad98c59174ef755eeca5b56d4953fa94165dc22135ea04dedfcef6be55ca893a52c9ffdd1f0ceeb792d5976572298c21e74233e1df3044d9f12110347c6ea2bf9c2a6313a89ebe31a3cfb65058c584f69c698eace455fedc124c30bd23e634a20c", @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r0, @ANYBLOB="08002600ffffffff08008700", @ANYRES32=0xee00, @ANYBLOB="5e866a4d8f1c653e14681fa7fcae65bfe94de0b1bd1d9efddcd80d6783e1227cb8665379cc2d6e596dab7d626b65015e43a2e1fc1907804677f8e080be5c4eaecbbc8cc465aaeeb35afbb9d92f6338003486c4582c586e5e5d5c952da1b8db2e5beddd298d17f4eb464ccd8fad5c62ee180000000c00880007000000000000000800160005000000"], 0x4b8}, 0x1, 0x0, 0x0, 0x8db1892bf7459f02}, 0x8895) mmap$auto(0x0, 0x400009, 0xdf, 0x9b72, 0x8000000000000003, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x840, 0x152) socket(0x1d, 0x2, 0x6) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/power/pm_async\x00', 0x2100, 0x0) io_uring_setup$auto(0x7, 0x0) openat$auto_nsim_dev_take_snapshot_fops_dev(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/netdevsim/netdevsim1/take_snapshot\x00', 0x2001, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0x82080, 0x0) socket(0x10, 0x2, 0x0) openat$auto_ftrace_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/tracing/events/vmalloc/free_vmap_area_noflush/enable\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_lowpan_enable_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x109500, 0x0) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) io_uring_setup$auto(0x85, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder1\x00', 0x2001, 0x0) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x2) select$auto(0xa, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x7, 0x6, 0x1f2, 0x9, 0xe8, 0x400000000ff, 0xa, 0x4, 0xaab, 0x5, 0x7]}, 0x0, 0x0) socketpair$auto(0x4004, 0x7, 0x10001, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004580), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_DEL(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010629bd7000fedbdf250200000004000a80080001001243ed14"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x44000) ioctl$auto_TIOCSETD2(r4, 0x5423, 0x0) ioctl$auto_TCFLSH2(r3, 0x40204706, 0x0) 5.365909904s ago: executing program 2 (id=2466): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000013c0)='/sys/module/kvm/parameters/pi_inject_timer\x00', 0x10b142, 0x0) sendfile$auto(r0, r0, 0x0, 0x200) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x80086601, 0x0) 5.163686873s ago: executing program 2 (id=2468): r0 = socket(0x2, 0x3, 0xa) open(0x0, 0x149443, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_METER_ATTR_STATS={0x14, 0x3, {0x7, 0xd}}, @OVS_METER_ATTR_KBPS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x404c0c0) ioperm$auto(0x3b, 0xf99b, 0x6) close_range$auto(0x0, 0xffffffffffffefff, 0x4000000000002) fanotify_init$auto(0x5, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x3e1) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1020, 0x202, 0x10001, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x4, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x10000008, 0x52, 0x1, 0x1, 0x40, 0x76c4, 0x80008, 0x5}}) unshare$auto(0x40000080) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_vlan/disable_ipv6\x00', 0x82002, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) socket(0xa, 0x801, 0x84) sendfile$auto(r2, r3, 0x0, 0x1) 4.095113992s ago: executing program 3 (id=2469): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0x7115c3, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x400) socketpair$auto(0x11f, 0x1, 0x3, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40103d0b, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0xec315366f6b76f2e, 0x3, 0x1}}, 0x54) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x100800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x5, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x2, 0x2, 0x1) socket(0x25, 0x5, 0x9) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) ioctl$auto(0xffffffffffffffff, 0x4b4b, 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2a, 0x3, 0x2) getsockopt$auto(r3, 0x107, 0x1, 0x0, 0x0) setuid$auto(0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) 3.029223494s ago: executing program 3 (id=2470): openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000040)='/dev/binderfs/binder1\x00', 0x800, 0x0) r0 = openat$auto_transactions_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x101600, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/binderfs/binder1\x00', 0x20000, 0x0) read$auto_transactions_fops_(r0, &(0x7f0000000080)=""/18, 0x12) mmap$auto(0x0, 0x20009, 0x4000000000de, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) socket(0x2, 0x1, 0x106) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@in={0x2, 0x300, @loopback=0xac14140a}, 0x55) close_range$auto(0x2, 0x8000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x801, 0x106) socket(0x2c, 0x80000, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/oom_adj\x00', 0x2bc540, 0x0) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000020c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_MM_GET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x14, r4, 0x301, 0x70bd28, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x44808}, 0x2004c894) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'ip_vti0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_macvtap\x00', 0x0}) r7 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x3c, r10, 0x1b, 0x70bc26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0xc, 0x3, 0x0, 0x1, [@typed={0x8, 0xb, 0x0, 0x0, @fd=r9}]}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f17790485908286dd"}, @OVS_PACKET_ATTR_KEY={0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r8, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xbc, r4, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x4}, @ETHTOOL_A_LINKINFO_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_LINKINFO_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x810) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d80)={0xb5c, 0x0, 0x1, 0x70bd25, 0x25dfdbff, {}, [@NL802154_ATTR_MAX_CSMA_BACKOFFS={0x5, 0x12, 0x10}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0xc}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xb38, 0x2b, 0x0, 0x1, [@nested={0xb33, 0x24, 0x0, 0x1, [@nested={0x4, 0x80}, @generic="ba89ebda4be9067b59c90d50dab4ba175b1b13d15e19ee0f5bf6c6d2095efcc719c8e137b7ec6062c6c768e512acd0f1208ee2be2b891868abd1934bd95a54945e649a2afd1272f72e8fffb57e3ba1c8fb306ce2ba95180cf54dcca46ab950e626ff31022afd57f1306ee00962cb60c30a9946d642a00256ed0006ec8364307874f7c763c6e9af0222943721fb4fa5b1cecfe3a908b1fd515dad1e0ca0998fa55ca4bbf9412855250567f1b981", @generic="86d8597ab6fb715cef224b510a7ccc4cae047b6d4ab94775e1158d87be4806455bbd76baaa3a656ed5f316b17a5a27a6ec99", @nested={0x4, 0x6d}, @nested={0xa45, 0x8e, 0x0, 0x1, [@generic="b634a4b1ce57b5a586e945eb157cc566d02bed93630b901c93d3fde23606aa3e80e4d0644fef266741cf5f2879924594cd388e", @generic="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"]}]}]}]}, 0xb5c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48880) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x55) 1.564240832s ago: executing program 3 (id=2472): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0x7115c3, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x400) socketpair$auto(0x11f, 0x1, 0x3, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40103d0b, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0xec315366f6b76f2e, 0x3, 0x1}}, 0x54) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x100800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x5, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x2, 0x2, 0x1) socket(0x25, 0x5, 0x9) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) ioctl$auto(0xffffffffffffffff, 0x4b4b, 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2a, 0x3, 0x2) getsockopt$auto(r3, 0x107, 0x1, 0x0, 0x0) setuid$auto(0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) 1.561765635s ago: executing program 4 (id=2479): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0x7115c3, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x400) socketpair$auto(0x11f, 0x1, 0x3, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40103d0b, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, 0x0, 0x54) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x100800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x5, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x2, 0x2, 0x1) socket(0x25, 0x5, 0x9) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) ioctl$auto(0xffffffffffffffff, 0x4b4b, 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2a, 0x3, 0x2) getsockopt$auto(r3, 0x107, 0x1, 0x0, 0x0) setuid$auto(0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) 858.46193ms ago: executing program 3 (id=2473): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0x7115c3, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x400) socketpair$auto(0x11f, 0x1, 0x3, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40103d0b, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0xec315366f6b76f2e, 0x3, 0x1}}, 0x54) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x100800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x5, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x2, 0x2, 0x1) socket(0x25, 0x5, 0x9) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) ioctl$auto(0xffffffffffffffff, 0x4b4b, 0xffffffffffffffff) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2a, 0x3, 0x2) getsockopt$auto(r3, 0x107, 0x1, 0x0, 0x0) setuid$auto(0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) 856.972001ms ago: executing program 4 (id=2481): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0x7115c3, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x400) socketpair$auto(0x11f, 0x1, 0x3, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40103d0b, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, 0x0, 0x54) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x100800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x5, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x2, 0x2, 0x1) socket(0x25, 0x5, 0x9) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) ioctl$auto(0xffffffffffffffff, 0x4b4b, 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2a, 0x3, 0x2) getsockopt$auto(r3, 0x107, 0x1, 0x0, 0x0) setuid$auto(0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) 167.294609ms ago: executing program 3 (id=2474): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0x401, 0x8000) r0 = openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0x7115c3, 0x0) pread64$auto(r0, 0x0, 0x7ff, 0x400) socketpair$auto(0x11f, 0x1, 0x3, 0x0) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000000000), 0xc0402, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r1, 0x40103d0b, 0x0) get_robust_list$auto(0x0, 0x0, 0x0) io_uring_setup$auto(0x1, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x101e81, 0x0) socket(0x2, 0x3, 0xa) connect$auto(0x3, &(0x7f0000000080)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0xec315366f6b76f2e, 0x3, 0x1}}, 0x54) openat$auto_udf_dir_operations_udfdecl(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci7/power\x00', 0x100800, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) socket(0x2, 0x5, 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) socket(0x2, 0x2, 0x1) socket(0x25, 0x5, 0x9) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) ioctl$auto(0xffffffffffffffff, 0x4b4b, 0xffffffffffffffff) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) setresuid$auto(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2a, 0x3, 0x2) getsockopt$auto(r3, 0x107, 0x1, 0x0, 0x0) setuid$auto(0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) 165.888659ms ago: executing program 2 (id=2483): ioperm$auto(0x7, 0x5ad2, 0x8) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(0xffffffffffffffff, 0x5522, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) ioctl$auto_SIOCGIFHWADDR2(0xffffffffffffffff, 0x8927, &(0x7f0000001240)="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") mmap$auto(0x0, 0x4, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x4, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{0x0, 0x8000012, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x3, 0x8001) process_madvise$auto_PIDFD_SELF_THREAD_GROUP(0xffffffffffffb1e0, &(0x7f0000000080)={&(0x7f0000000000), 0x8}, 0xf, 0x8, 0x0) r1 = openat$auto_force_devcoredump_fops_hci_vhci(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/bluetooth/hci0/force_devcoredump\x00', 0x2, 0x0) write$auto(r1, 0x0, 0xe) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty45\x00', 0x88702, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), r3) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f00000001c0), r3) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={0x14, r6, 0x1, 0x70bd25, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x41}, 0x4004040) sendmsg$auto_WG_CMD_GET_DEVICE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x14, r4, 0x703, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x985}, 0x4) write$auto_tty_fops_tty_io(r2, &(0x7f0000000580)="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", 0xfdef) modify_ldt$auto(0x11, 0xfffffffffffffffc, 0x23b94) r7 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000100)='/dev/bus/usb/029/001\x00', 0xa002, 0x0) ioctl$auto_USBDEVFS_CLAIMINTERFACE(r7, 0x8004550f, &(0x7f0000000400)=0xfffff000) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtd0ro\x00', 0x141000, 0x0) select$auto(0xe, 0x0, 0x0, 0x0, 0x0) write$auto(r0, &(0x7f0000000600)='/Eev7audio1\x00VI\xa3\xaa\x01\x00\x00\x00\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\x8eZ|\xffGP\x97)\xcf\a\xfb\\nD\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbb\xd9\xce\xb3\xfa\xcd(\xa6\x9c\xc7I\xb65T\xa4Y8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4\x06k\xa2\xc2\xa7n\xf8>\"\xfd@\xee\xf9\xa4\xf4\xb4\x90\x95\f\xc2\xb6\x15\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xda\xe4\x15\xcbx\x01w\xeb\xf4R\x9663\x840\tL\xd2r\xf7\f#\xccR\xfc\xc0e~b\x99`S_\xba\a%Ta\xdf\xbc\x85\x99\xfe\xf8\x05n\xfa\xb9-ph\xf2\x87\x92\x9d\x10!\x83\xecV\x19\xd2\x96W\x9d\x8b\xd6bt\xea\xe4\x9c\xbf\x01t@\x85/D\xba\x14.w\xf57\xbe\x804\f\xeep\x9f\xa7\xc25\\\xe9m0\xcf\xbe;\x83E\x17C\xda||A\xe6R;\x00\x00', 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) statx$auto(0xffffffffffffffff, 0x0, 0x1000, 0x8, 0x0) 0s ago: executing program 4 (id=2475): r0 = socket(0x2, 0x3, 0xa) open(0x0, 0x149443, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) sendmsg$auto_OVS_METER_CMD_SET(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, 0x0, 0x100, 0x70bd2a, 0x25dfdbfb, {}, [@OVS_METER_ATTR_STATS={0x14, 0x3, {0x7, 0xd}}, @OVS_METER_ATTR_KBPS={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x404c0c0) ioperm$auto(0x3b, 0xf99b, 0x6) close_range$auto(0x0, 0xffffffffffffefff, 0x4000000000002) fanotify_init$auto(0x5, 0x2) open(&(0x7f0000000000)='./file0\x00', 0x7ffd, 0x3e1) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x1020, 0x202, 0x10001, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x4, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x10000008, 0x52, 0x1, 0x1, 0x40, 0x76c4, 0x80008, 0x5}}) unshare$auto(0x40000080) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth1_vlan/disable_ipv6\x00', 0x82002, 0x0) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) socket(0xa, 0x801, 0x84) sendfile$auto(r2, r3, 0x0, 0x1) kernel console output (not intermixed with test programs): 92732][T14986] ? __pfx___alloc_skb+0x10/0x10 [ 843.292773][T14986] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 843.292820][T14986] netlink_alloc_large_skb+0x69/0x130 [ 843.292862][T14986] netlink_sendmsg+0x6a1/0xdd0 [ 843.292909][T14986] ? __pfx_netlink_sendmsg+0x10/0x10 [ 843.292953][T14986] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 843.292994][T14986] sock_write_iter+0x4ff/0x5b0 [ 843.293041][T14986] ? __pfx_sock_write_iter+0x10/0x10 [ 843.293107][T14986] ? bpf_lsm_file_permission+0x9/0x10 [ 843.293148][T14986] ? security_file_permission+0x71/0x210 [ 843.293187][T14986] ? rw_verify_area+0xcf/0x6c0 [ 843.293221][T14986] vfs_write+0x7d0/0x11d0 [ 843.293256][T14986] ? __pfx_sock_write_iter+0x10/0x10 [ 843.293303][T14986] ? __pfx_vfs_write+0x10/0x10 [ 843.293332][T14986] ? find_held_lock+0x2b/0x80 [ 843.293385][T14986] ksys_write+0x1f8/0x250 [ 843.293419][T14986] ? __pfx_ksys_write+0x10/0x10 [ 843.293462][T14986] do_syscall_64+0xcd/0x490 [ 843.293502][T14986] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 843.293533][T14986] RIP: 0033:0x7f731cb8ebe9 [ 843.293557][T14986] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 843.293586][T14986] RSP: 002b:00007f731da8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 843.293614][T14986] RAX: ffffffffffffffda RBX: 00007f731cdb5fa0 RCX: 00007f731cb8ebe9 [ 843.293642][T14986] RDX: 00000000000002fb RSI: 0000200000000000 RDI: 0000000000000003 [ 843.293660][T14986] RBP: 00007f731da8e090 R08: 0000000000000000 R09: 0000000000000000 [ 843.293679][T14986] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 843.293696][T14986] R13: 00007f731cdb6038 R14: 00007f731cdb5fa0 R15: 00007ffd556c1e38 [ 843.293736][T14986] [ 843.557106][T14965] zswap: compressor not available [ 843.944635][T14998] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1751'. [ 844.042124][T14998] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1751'. [ 844.121434][T15000] random: crng reseeded on system resumption [ 844.903364][T15020] blktrace: Concurrent blktraces are not allowed on loop2 [ 845.529343][T15026] FAULT_INJECTION: forcing a failure. [ 845.529343][T15026] name failslab, interval 1, probability 0, space 0, times 0 [ 845.651735][T15026] CPU: 0 UID: 0 PID: 15026 Comm: syz.0.1756 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 845.651893][T15026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 845.651907][T15026] Call Trace: [ 845.651918][T15026] [ 845.651927][T15026] dump_stack_lvl+0x16c/0x1f0 [ 845.651955][T15026] should_fail_ex+0x512/0x640 [ 845.651981][T15026] ? __kmalloc_noprof+0xbf/0x510 [ 845.652005][T15026] ? genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 845.652036][T15026] should_failslab+0xc2/0x120 [ 845.652061][T15026] __kmalloc_noprof+0xd2/0x510 [ 845.652084][T15026] ? kmem_cache_free+0x2d1/0x4d0 [ 845.652108][T15026] genl_family_rcv_msg_attrs_parse.constprop.0+0xc8/0x290 [ 845.652143][T15026] genl_family_rcv_msg_doit+0xbf/0x2f0 [ 845.652172][T15026] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 845.652205][T15026] ? __dev_queue_xmit+0xaf1/0x4490 [ 845.652225][T15026] ? genl_get_cmd+0x194/0x580 [ 845.652257][T15026] ? __radix_tree_lookup+0x21f/0x2c0 [ 845.652282][T15026] genl_rcv_msg+0x55c/0x800 [ 845.652312][T15026] ? __pfx_genl_rcv_msg+0x10/0x10 [ 845.652350][T15026] ? __pfx_netdev_nl_napi_get_doit+0x10/0x10 [ 845.652384][T15026] netlink_rcv_skb+0x158/0x420 [ 845.652409][T15026] ? __pfx_genl_rcv_msg+0x10/0x10 [ 845.652446][T15026] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 845.652479][T15026] ? netlink_deliver_tap+0x1ae/0xd30 [ 845.652506][T15026] genl_rcv+0x28/0x40 [ 845.652537][T15026] netlink_unicast+0x5a7/0x870 [ 845.652569][T15026] ? __pfx_netlink_unicast+0x10/0x10 [ 845.652598][T15026] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 845.652621][T15026] ? __lock_acquire+0xb97/0x1ce0 [ 845.652651][T15026] netlink_sendmsg+0x8d1/0xdd0 [ 845.652680][T15026] ? __pfx_netlink_sendmsg+0x10/0x10 [ 845.652707][T15026] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 845.652732][T15026] ____sys_sendmsg+0xa95/0xc70 [ 845.652762][T15026] ? copy_msghdr_from_user+0x10a/0x160 [ 845.652792][T15026] ? __pfx_____sys_sendmsg+0x10/0x10 [ 845.652833][T15026] ___sys_sendmsg+0x134/0x1d0 [ 845.652858][T15026] ? __pfx____sys_sendmsg+0x10/0x10 [ 845.652902][T15026] ? __mutex_unlock_slowpath+0x140/0x800 [ 845.652934][T15026] __sys_sendmsg+0x16d/0x220 [ 845.652958][T15026] ? __pfx___sys_sendmsg+0x10/0x10 [ 845.652997][T15026] do_syscall_64+0xcd/0x490 [ 845.653023][T15026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 845.653043][T15026] RIP: 0033:0x7fde1318ebe9 [ 845.653060][T15026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 845.653078][T15026] RSP: 002b:00007fde14039038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 845.653097][T15026] RAX: ffffffffffffffda RBX: 00007fde133b5fa0 RCX: 00007fde1318ebe9 [ 845.653114][T15026] RDX: 0000000000000084 RSI: 0000200000000c40 RDI: 0000000000000003 [ 845.653126][T15026] RBP: 00007fde14039090 R08: 0000000000000000 R09: 0000000000000000 [ 845.653137][T15026] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 845.653148][T15026] R13: 00007fde133b6038 R14: 00007fde133b5fa0 R15: 00007fff9df61e68 [ 845.653171][T15026] [ 847.075395][T15050] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1763'. [ 847.095829][T15050] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1763'. [ 847.283696][T15056] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1761'. [ 847.779337][T15064] blktrace: Concurrent blktraces are not allowed on loop2 [ 848.216228][T15065] random: crng reseeded on system resumption [ 849.482785][T15097] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1773'. [ 849.548431][T15097] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1773'. [ 851.448647][T15144] blktrace: Concurrent blktraces are not allowed on loop2 [ 851.575885][T15143] random: crng reseeded on system resumption [ 852.473650][T15157] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1784'. [ 852.541788][T15158] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1784'. [ 854.992971][T15206] random: crng reseeded on system resumption [ 855.513237][T15214] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1796'. [ 855.546327][T15218] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1796'. [ 856.612684][T15242] FAULT_INJECTION: forcing a failure. [ 856.612684][T15242] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 856.640319][T15242] CPU: 1 UID: 0 PID: 15242 Comm: syz.1.1800 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 856.640369][T15242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 856.640388][T15242] Call Trace: [ 856.640400][T15242] [ 856.640414][T15242] dump_stack_lvl+0x16c/0x1f0 [ 856.640460][T15242] should_fail_ex+0x512/0x640 [ 856.640511][T15242] should_fail_alloc_page+0xe7/0x130 [ 856.640556][T15242] prepare_alloc_pages+0x3c2/0x610 [ 856.640602][T15242] ? rcu_is_watching+0x12/0xc0 [ 856.640639][T15242] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 856.640685][T15242] ? __lock_acquire+0x62e/0x1ce0 [ 856.640729][T15242] ? css_rstat_updated+0x1c2/0x510 [ 856.640766][T15242] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 856.640814][T15242] ? rcu_is_watching+0x12/0xc0 [ 856.640860][T15242] ? __lock_acquire+0x62e/0x1ce0 [ 856.640901][T15242] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 856.640952][T15242] ? policy_nodemask+0xea/0x4e0 [ 856.640997][T15242] alloc_pages_mpol+0x1fb/0x550 [ 856.641042][T15242] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 856.641086][T15242] ? filemap_get_entry+0x1a7/0x3b0 [ 856.641135][T15242] folio_alloc_noprof+0x20/0x2d0 [ 856.641183][T15242] filemap_alloc_folio_noprof+0x3a1/0x470 [ 856.641240][T15242] ? __pfx_filemap_alloc_folio_noprof+0x10/0x10 [ 856.641314][T15242] __filemap_get_folio+0x5e1/0xc30 [ 856.641367][T15242] ioctx_alloc+0x761/0x2120 [ 856.641423][T15242] ? __pfx_ioctx_alloc+0x10/0x10 [ 856.641456][T15242] ? __might_fault+0x13b/0x190 [ 856.641504][T15242] __x64_sys_io_setup+0xc9/0x210 [ 856.641543][T15242] do_syscall_64+0xcd/0x490 [ 856.641587][T15242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 856.641619][T15242] RIP: 0033:0x7f5f7f38ebe9 [ 856.641645][T15242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 856.641676][T15242] RSP: 002b:00007f5f8014a038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 856.641708][T15242] RAX: ffffffffffffffda RBX: 00007f5f7f5b6270 RCX: 00007f5f7f38ebe9 [ 856.641729][T15242] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 000000000000fff4 [ 856.641749][T15242] RBP: 00007f5f7f411e19 R08: 0000000000000000 R09: 0000000000000000 [ 856.641769][T15242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 856.641787][T15242] R13: 00007f5f7f5b6308 R14: 00007f5f7f5b6270 R15: 00007ffec91a33c8 [ 856.641830][T15242] [ 856.881464][ C1] vkms_vblank_simulate: vblank timer overrun [ 857.445358][T15256] FAULT_INJECTION: forcing a failure. [ 857.445358][T15256] name failslab, interval 1, probability 0, space 0, times 0 [ 857.493999][T15256] CPU: 0 UID: 0 PID: 15256 Comm: syz.3.1803 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 857.494048][T15256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 857.494067][T15256] Call Trace: [ 857.494080][T15256] [ 857.494093][T15256] dump_stack_lvl+0x16c/0x1f0 [ 857.494140][T15256] should_fail_ex+0x512/0x640 [ 857.494181][T15256] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 857.494222][T15256] should_failslab+0xc2/0x120 [ 857.494263][T15256] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 857.494297][T15256] ? register_lock_class+0x41/0x4c0 [ 857.494358][T15256] ? mas_dup_build.constprop.0+0x5f3/0x1740 [ 857.494408][T15256] mas_dup_build.constprop.0+0x5f3/0x1740 [ 857.494460][T15256] ? __lock_acquire+0x62e/0x1ce0 [ 857.494500][T15256] __mt_dup+0xeb/0x1f0 [ 857.494538][T15256] ? __pfx___mt_dup+0x10/0x10 [ 857.494610][T15256] dup_mmap+0x373/0x21d0 [ 857.494674][T15256] ? __pfx_dup_mmap+0x10/0x10 [ 857.494750][T15256] copy_process+0x4081/0x7690 [ 857.494811][T15256] ? __pfx_copy_process+0x10/0x10 [ 857.494848][T15256] ? futex_private_hash_put+0x176/0x300 [ 857.494893][T15256] ? futex_private_hash_put+0x18a/0x300 [ 857.494939][T15256] kernel_clone+0xfc/0x930 [ 857.494985][T15256] ? __pfx_futex_wake+0x10/0x10 [ 857.495028][T15256] ? __pfx_kernel_clone+0x10/0x10 [ 857.495065][T15256] ? __pfx_vfs_writev+0x10/0x10 [ 857.495120][T15256] ? 0xffffffffff600000 [ 857.495144][T15256] __do_sys_clone+0xce/0x120 [ 857.495183][T15256] ? __pfx___do_sys_clone+0x10/0x10 [ 857.495226][T15256] ? 0xffffffffff600000 [ 857.495265][T15256] ? xfd_validate_state+0x61/0x180 [ 857.495316][T15256] ? __pfx_do_writev+0x10/0x10 [ 857.495362][T15256] do_syscall_64+0xcd/0x490 [ 857.495405][T15256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 857.495444][T15256] RIP: 0033:0x7f731cb8ebe9 [ 857.495469][T15256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 857.495499][T15256] RSP: 002b:00007f731da8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 857.495530][T15256] RAX: ffffffffffffffda RBX: 00007f731cdb5fa0 RCX: 00007f731cb8ebe9 [ 857.495551][T15256] RDX: ffffffffffffffff RSI: 0000000000000005 RDI: 0000000000008001 [ 857.495586][T15256] RBP: 00007f731cc11e19 R08: 0000000000000006 R09: 0000000000000000 [ 857.495605][T15256] R10: ffffffffff600000 R11: 0000000000000246 R12: 0000000000000000 [ 857.495624][T15256] R13: 00007f731cdb6038 R14: 00007f731cdb5fa0 R15: 00007ffd556c1e38 [ 857.495653][T15256] ? 0xffffffffff600000 [ 857.495690][T15256] [ 857.970593][T15259] blktrace: Concurrent blktraces are not allowed on loop2 [ 859.234309][T15266] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1803'. [ 860.033410][T15290] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1808'. [ 860.105347][T15299] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1808'. [ 860.134682][T15300] ICMPv6: process `syz.0.1810' is using deprecated sysctl (syscall) net.ipv6.neigh.ipvlan1.retrans_time - use net.ipv6.neigh.ipvlan1.retrans_time_ms instead [ 860.377586][T15302] FAULT_INJECTION: forcing a failure. [ 860.377586][T15302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 860.436565][T15302] CPU: 0 UID: 0 PID: 15302 Comm: syz.0.1810 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 860.436606][T15302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 860.436621][T15302] Call Trace: [ 860.436631][T15302] [ 860.436642][T15302] dump_stack_lvl+0x16c/0x1f0 [ 860.436683][T15302] should_fail_ex+0x512/0x640 [ 860.436727][T15302] _copy_from_user+0x2e/0xd0 [ 860.436772][T15302] snd_rawmidi_kernel_write1+0x50a/0x8a0 [ 860.436832][T15302] snd_rawmidi_write+0x26e/0xc10 [ 860.436873][T15302] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 860.436906][T15302] ? __pfx_default_wake_function+0x10/0x10 [ 860.436939][T15302] ? bpf_lsm_file_permission+0x9/0x10 [ 860.436980][T15302] ? security_file_permission+0x71/0x210 [ 860.437019][T15302] ? rw_verify_area+0xcf/0x6c0 [ 860.437052][T15302] ? __pfx_snd_rawmidi_write+0x10/0x10 [ 860.437081][T15302] vfs_write+0x29d/0x11d0 [ 860.437123][T15302] ? __pfx_vfs_write+0x10/0x10 [ 860.437153][T15302] ? find_held_lock+0x2b/0x80 [ 860.437182][T15302] ? __fget_files+0x204/0x3c0 [ 860.437219][T15302] ? __fget_files+0x20e/0x3c0 [ 860.437259][T15302] ksys_write+0x1f8/0x250 [ 860.437296][T15302] ? __pfx_ksys_write+0x10/0x10 [ 860.437339][T15302] do_syscall_64+0xcd/0x490 [ 860.437377][T15302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 860.437406][T15302] RIP: 0033:0x7fde1318ebe9 [ 860.437431][T15302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 860.437459][T15302] RSP: 002b:00007fde13ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 860.437487][T15302] RAX: ffffffffffffffda RBX: 00007fde133b6180 RCX: 00007fde1318ebe9 [ 860.437505][T15302] RDX: 000000100000a3d9 RSI: 0000200000000400 RDI: 0000000000000008 [ 860.437522][T15302] RBP: 00007fde13ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 860.437539][T15302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 860.437556][T15302] R13: 00007fde133b6218 R14: 00007fde133b6180 R15: 00007fff9df61e68 [ 860.437600][T15302] [ 860.723198][T15315] device-mapper: ioctl: Invalid data size in the ioctl structure: 0 [ 861.152543][T15326] random: crng reseeded on system resumption [ 863.167375][T15345] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1820'. [ 863.190447][T15345] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1820'. [ 863.531774][T15354] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1821'. [ 864.278650][T15373] FAULT_INJECTION: forcing a failure. [ 864.278650][T15373] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 864.328896][T15373] CPU: 1 UID: 0 PID: 15373 Comm: syz.3.1825 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 864.328940][T15373] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 864.328958][T15373] Call Trace: [ 864.328969][T15373] [ 864.328981][T15373] dump_stack_lvl+0x16c/0x1f0 [ 864.329019][T15373] should_fail_ex+0x512/0x640 [ 864.329065][T15373] should_fail_alloc_page+0xe7/0x130 [ 864.329107][T15373] prepare_alloc_pages+0x3c2/0x610 [ 864.329159][T15373] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 864.329213][T15373] ? __lock_acquire+0x62e/0x1ce0 [ 864.329266][T15373] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 864.329307][T15373] ? __lock_acquire+0x62e/0x1ce0 [ 864.329366][T15373] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 864.329412][T15373] ? policy_nodemask+0xea/0x4e0 [ 864.329455][T15373] alloc_pages_mpol+0x1fb/0x550 [ 864.329495][T15373] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 864.329533][T15373] ? __kernel_text_address+0xd/0x40 [ 864.329561][T15373] ? unwind_get_return_address+0x59/0xa0 [ 864.329602][T15373] folio_alloc_mpol_noprof+0x36/0x2f0 [ 864.329648][T15373] shmem_alloc_folio+0x135/0x160 [ 864.329698][T15373] shmem_alloc_and_add_folio+0x499/0xc20 [ 864.329742][T15373] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 864.329783][T15373] ? shmem_allowable_huge_orders+0xcb/0x2f0 [ 864.329826][T15373] shmem_get_folio_gfp+0x67f/0x1600 [ 864.329869][T15373] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 864.329908][T15373] ? filemap_map_pages+0xf58/0x1670 [ 864.329949][T15373] shmem_fault+0x1fe/0xa30 [ 864.329987][T15373] ? __pfx_shmem_fault+0x10/0x10 [ 864.330027][T15373] ? __pfx_filemap_map_pages+0x10/0x10 [ 864.330077][T15373] ? __pfx_filemap_map_pages+0x10/0x10 [ 864.330109][T15373] __do_fault+0x10a/0x490 [ 864.330147][T15373] ? __pfx_filemap_map_pages+0x10/0x10 [ 864.330177][T15373] do_pte_missing+0xf50/0x3ba0 [ 864.330207][T15373] ? find_held_lock+0x2b/0x80 [ 864.330236][T15373] ? __handle_mm_fault+0x14fd/0x2a50 [ 864.330280][T15373] __handle_mm_fault+0x152a/0x2a50 [ 864.330316][T15373] ? mt_find+0x3ef/0xa30 [ 864.330355][T15373] ? __pfx___handle_mm_fault+0x10/0x10 [ 864.330382][T15373] ? __pfx_mt_find+0x10/0x10 [ 864.330442][T15373] ? find_vma+0xbf/0x140 [ 864.330481][T15373] ? __pfx_find_vma+0x10/0x10 [ 864.330534][T15373] handle_mm_fault+0x589/0xd10 [ 864.330567][T15373] ? __bpf_trace_exceptions+0x1/0x40 [ 864.330612][T15373] do_user_addr_fault+0x7a6/0x1370 [ 864.330662][T15373] ? rcu_is_watching+0x12/0xc0 [ 864.330698][T15373] exc_page_fault+0x5c/0xb0 [ 864.330730][T15373] asm_exc_page_fault+0x26/0x30 [ 864.330758][T15373] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 864.330804][T15373] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 864.330834][T15373] RSP: 0018:ffffc900180f79d0 EFLAGS: 00050206 [ 864.330868][T15373] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000007000 [ 864.330887][T15373] RDX: 0000000000000000 RSI: 0000000000001000 RDI: ffff88805f339000 [ 864.330904][T15373] RBP: 0000000000008000 R08: 0000000000000001 R09: ffffed100be67fff [ 864.330923][T15373] R10: ffff88805f33ffff R11: 0000000000000000 R12: 0000000000000000 [ 864.330939][T15373] R13: ffff88805f338000 R14: 1ffff9200301ef45 R15: ffffc900180f7d8c [ 864.330980][T15373] _copy_from_user+0x98/0xd0 [ 864.331027][T15373] ____sys_sendmsg+0x607/0xc70 [ 864.331077][T15373] ? __pfx_____sys_sendmsg+0x10/0x10 [ 864.331119][T15373] ? lockdep_hardirqs_on+0x7c/0x110 [ 864.331159][T15373] ? kfree+0x24f/0x4d0 [ 864.331185][T15373] ? __pfx__kstrtoull+0x10/0x10 [ 864.331217][T15373] ? ___sys_sendmsg+0x141/0x1d0 [ 864.331278][T15373] ___sys_sendmsg+0x134/0x1d0 [ 864.331317][T15373] ? __pfx____sys_sendmsg+0x10/0x10 [ 864.331392][T15373] ? __pfx___might_resched+0x10/0x10 [ 864.331430][T15373] __sys_sendmmsg+0x200/0x420 [ 864.331471][T15373] ? __pfx___sys_sendmmsg+0x10/0x10 [ 864.331522][T15373] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 864.331577][T15373] ? fput+0x9b/0xd0 [ 864.331617][T15373] ? ksys_write+0x1ac/0x250 [ 864.331662][T15373] ? __pfx_ksys_write+0x10/0x10 [ 864.331713][T15373] __x64_sys_sendmmsg+0x9c/0x100 [ 864.331750][T15373] ? lockdep_hardirqs_on+0x7c/0x110 [ 864.331785][T15373] do_syscall_64+0xcd/0x490 [ 864.331825][T15373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 864.331856][T15373] RIP: 0033:0x7f731cb8ebe9 [ 864.331880][T15373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 864.331908][T15373] RSP: 002b:00007f731da8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 864.331936][T15373] RAX: ffffffffffffffda RBX: 00007f731cdb5fa0 RCX: 00007f731cb8ebe9 [ 864.331955][T15373] RDX: 000000000000000b RSI: 0000200000000080 RDI: 0000000000000003 [ 864.331973][T15373] RBP: 00007f731da8e090 R08: 0000000000000000 R09: 0000000000000000 [ 864.331999][T15373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 864.332018][T15373] R13: 00007f731cdb6038 R14: 00007f731cdb5fa0 R15: 00007ffd556c1e38 [ 864.332060][T15373] [ 865.692874][T15388] random: crng reseeded on system resumption syzkaller syzkaller login: [ 867.203129][T15414] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1830'. [ 867.313132][T15414] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1830'. [ 868.405728][T15434] i2c i2c-0: Frontend requested software zigzag, but didn't set the frequency step size [ 868.832531][ T5875] Bluetooth: hci1: unexpected subevent 0x01 length: 123 > 18 [ 870.261030][T15468] random: crng reseeded on system resumption [ 870.334943][T15465] kafs: addr_prefs: Too many elements in string [ 870.987666][T15477] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1842'. [ 871.054728][T15479] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1842'. [ 873.260329][T15511] kafs: addr_prefs: Too many elements in string [ 874.142131][T15527] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1853'. [ 874.306390][T15528] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1853'. [ 875.282032][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 875.289988][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 875.299403][T15546] random: crng reseeded on system resumption [ 876.225448][T15555] FAULT_INJECTION: forcing a failure. [ 876.225448][T15555] name failslab, interval 1, probability 0, space 0, times 0 [ 876.283484][T15555] CPU: 1 UID: 0 PID: 15555 Comm: syz.3.1861 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 876.283526][T15555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 876.283551][T15555] Call Trace: [ 876.283562][T15555] [ 876.283573][T15555] dump_stack_lvl+0x16c/0x1f0 [ 876.283613][T15555] should_fail_ex+0x512/0x640 [ 876.283652][T15555] ? __kvmalloc_node_noprof+0x124/0x620 [ 876.283689][T15555] should_failslab+0xc2/0x120 [ 876.283745][T15555] __kvmalloc_node_noprof+0x137/0x620 [ 876.283777][T15555] ? bpf_lsm_key_permission+0x9/0x10 [ 876.283820][T15555] ? security_key_permission+0x79/0x240 [ 876.283853][T15555] ? keyctl_read_key+0x22d/0x4f0 [ 876.283897][T15555] ? keyctl_read_key+0x22d/0x4f0 [ 876.283925][T15555] keyctl_read_key+0x22d/0x4f0 [ 876.283960][T15555] __do_sys_keyctl+0x3d9/0x590 [ 876.283994][T15555] do_syscall_64+0xcd/0x490 [ 876.284035][T15555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 876.284066][T15555] RIP: 0033:0x7f731cb8ebe9 [ 876.284091][T15555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 876.284120][T15555] RSP: 002b:00007f731da8e038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 876.284148][T15555] RAX: ffffffffffffffda RBX: 00007f731cdb5fa0 RCX: 00007f731cb8ebe9 [ 876.284168][T15555] RDX: 0000000000000001 RSI: fffffffffffffffc RDI: 000000000000000b [ 876.284187][T15555] RBP: 00007f731da8e090 R08: 0000000000000002 R09: 0000000000000000 [ 876.284204][T15555] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 876.284223][T15555] R13: 00007f731cdb6038 R14: 00007f731cdb5fa0 R15: 00007ffd556c1e38 [ 876.284263][T15555] [ 876.822674][T15561] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1863'. [ 876.934151][T15561] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1863'. [ 879.121845][T15600] random: crng reseeded on system resumption [ 879.443183][T15606] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 879.686219][T10339] Bluetooth: hci2: Unable to find connection for big 0xd2 [ 880.180562][T15622] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1875'. [ 880.305530][T15622] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1875'. [ 881.146499][T15639] random: crng reseeded on system resumption [ 881.206271][T15641] FAULT_INJECTION: forcing a failure. [ 881.206271][T15641] name failslab, interval 1, probability 0, space 0, times 0 [ 881.302318][T15641] CPU: 1 UID: 0 PID: 15641 Comm: syz.2.1878 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 881.302351][T15641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 881.302363][T15641] Call Trace: [ 881.302370][T15641] [ 881.302378][T15641] dump_stack_lvl+0x16c/0x1f0 [ 881.302405][T15641] should_fail_ex+0x512/0x640 [ 881.302433][T15641] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 881.302460][T15641] should_failslab+0xc2/0x120 [ 881.302486][T15641] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 881.302510][T15641] ? proc_alloc_inode+0x25/0x200 [ 881.302537][T15641] ? __pfx_proc_alloc_inode+0x10/0x10 [ 881.302566][T15641] proc_alloc_inode+0x25/0x200 [ 881.302601][T15641] alloc_inode+0x61/0x240 [ 881.302641][T15641] new_inode+0x22/0x1c0 [ 881.302679][T15641] proc_pid_make_inode+0x22/0x160 [ 881.302702][T15641] ? do_raw_spin_unlock+0x172/0x230 [ 881.302733][T15641] proc_fd_instantiate+0x57/0x230 [ 881.302754][T15641] proc_lookupfd+0x11f/0x200 [ 881.302773][T15641] ? __pfx_proc_lookupfd+0x10/0x10 [ 881.302793][T15641] ? lockdep_init_map_type+0x5c/0x280 [ 881.302824][T15641] __lookup_slow+0x251/0x460 [ 881.302854][T15641] ? __pfx___lookup_slow+0x10/0x10 [ 881.302898][T15641] ? lookup_fast+0x156/0x610 [ 881.302920][T15641] walk_component+0x353/0x5b0 [ 881.302942][T15641] path_lookupat+0x142/0x6d0 [ 881.302966][T15641] filename_lookup+0x224/0x5f0 [ 881.302989][T15641] ? __pfx_filename_lookup+0x10/0x10 [ 881.303023][T15641] ? __pfx_kfree_link+0x10/0x10 [ 881.303056][T15641] ? getname_kernel+0x52/0x370 [ 881.303088][T15641] ? __asan_memcpy+0x3c/0x60 [ 881.303111][T15641] kern_path+0x35/0x50 [ 881.303131][T15641] tomoyo_realpath_nofollow+0x87/0xf0 [ 881.303160][T15641] ? __pfx_tomoyo_realpath_nofollow+0x10/0x10 [ 881.303193][T15641] ? tomoyo_domain+0xbb/0x150 [ 881.303211][T15641] ? tomoyo_init_request_info+0x101/0x370 [ 881.303234][T15641] tomoyo_find_next_domain+0x2a8/0x20b0 [ 881.303263][T15641] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 881.303293][T15641] tomoyo_bprm_check_security+0x12e/0x1d0 [ 881.303324][T15641] ? tomoyo_bprm_check_security+0x120/0x1d0 [ 881.303356][T15641] security_bprm_check+0x1b9/0x1e0 [ 881.303376][T15641] bprm_execve+0x81a/0x1640 [ 881.303400][T15641] ? __pfx_bprm_execve+0x10/0x10 [ 881.303419][T15641] ? copy_string_kernel+0x460/0x520 [ 881.303447][T15641] do_execveat_common.isra.0+0x4a5/0x610 [ 881.303474][T15641] __x64_sys_execveat+0xda/0x120 [ 881.303498][T15641] do_syscall_64+0xcd/0x490 [ 881.303524][T15641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 881.303544][T15641] RIP: 0033:0x7f7bee98ebe9 [ 881.303560][T15641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 881.303579][T15641] RSP: 002b:00007f7bef8dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 881.303598][T15641] RAX: ffffffffffffffda RBX: 00007f7beebb5fa0 RCX: 00007f7bee98ebe9 [ 881.303610][T15641] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 881.303622][T15641] RBP: 00007f7bef8dd090 R08: 0000000000001000 R09: 0000000000000000 [ 881.303633][T15641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 881.303644][T15641] R13: 00007f7beebb6038 R14: 00007f7beebb5fa0 R15: 00007ffe55b821d8 [ 881.303668][T15641] [ 882.095161][T15654] FAULT_INJECTION: forcing a failure. [ 882.095161][T15654] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 882.165886][T15654] CPU: 1 UID: 0 PID: 15654 Comm: syz.1.1880 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 882.165930][T15654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 882.165948][T15654] Call Trace: [ 882.165959][T15654] [ 882.165972][T15654] dump_stack_lvl+0x16c/0x1f0 [ 882.166013][T15654] should_fail_ex+0x512/0x640 [ 882.166060][T15654] _copy_to_iter+0x463/0x16f0 [ 882.166111][T15654] ? _raw_spin_unlock+0x28/0x50 [ 882.166146][T15654] ? __pfx__copy_to_iter+0x10/0x10 [ 882.166223][T15654] seq_read_iter+0xcf8/0x12c0 [ 882.166274][T15654] seq_read+0x3a3/0x570 [ 882.166304][T15654] ? __pfx_seq_read+0x10/0x10 [ 882.166364][T15654] full_proxy_read+0x12e/0x1a0 [ 882.166408][T15654] ? __pfx_full_proxy_read+0x10/0x10 [ 882.166452][T15654] vfs_read+0x1e4/0xcf0 [ 882.166492][T15654] ? __pfx___mutex_lock+0x10/0x10 [ 882.166530][T15654] ? __pfx_vfs_read+0x10/0x10 [ 882.166577][T15654] ? __fget_files+0x20e/0x3c0 [ 882.166622][T15654] ksys_read+0x12a/0x250 [ 882.166655][T15654] ? __pfx_ksys_read+0x10/0x10 [ 882.166700][T15654] do_syscall_64+0xcd/0x490 [ 882.166748][T15654] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 882.166778][T15654] RIP: 0033:0x7f5f7f38ebe9 [ 882.166802][T15654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 882.166830][T15654] RSP: 002b:00007f5f801ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 882.166860][T15654] RAX: ffffffffffffffda RBX: 00007f5f7f5b5fa0 RCX: 00007f5f7f38ebe9 [ 882.166880][T15654] RDX: 0000000000000012 RSI: 0000200000000080 RDI: 0000000000000004 [ 882.166899][T15654] RBP: 00007f5f801ad090 R08: 0000000000000000 R09: 0000000000000000 [ 882.166918][T15654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 882.166936][T15654] R13: 00007f5f7f5b6038 R14: 00007f5f7f5b5fa0 R15: 00007ffec91a33c8 [ 882.166978][T15654] [ 883.154480][T15677] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1884'. [ 883.199409][T15677] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1884'. [ 883.521624][T15674] random: crng reseeded on system resumption [ 884.313329][T15699] FAULT_INJECTION: forcing a failure. [ 884.313329][T15699] name failslab, interval 1, probability 0, space 0, times 0 [ 884.331924][T15699] CPU: 0 UID: 0 PID: 15699 Comm: syz.1.1891 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 884.331965][T15699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 884.331983][T15699] Call Trace: [ 884.331994][T15699] [ 884.332006][T15699] dump_stack_lvl+0x16c/0x1f0 [ 884.332047][T15699] should_fail_ex+0x512/0x640 [ 884.332086][T15699] ? fs_reclaim_acquire+0xae/0x150 [ 884.332131][T15699] ? tomoyo_encode2+0x100/0x3e0 [ 884.332170][T15699] should_failslab+0xc2/0x120 [ 884.332209][T15699] __kmalloc_noprof+0xd2/0x510 [ 884.332264][T15699] tomoyo_encode2+0x100/0x3e0 [ 884.332309][T15699] tomoyo_encode+0x29/0x50 [ 884.332347][T15699] tomoyo_realpath_from_path+0x18f/0x6e0 [ 884.332394][T15699] ? tomoyo_profile+0x47/0x60 [ 884.332441][T15699] tomoyo_path_number_perm+0x245/0x580 [ 884.332474][T15699] ? tomoyo_path_number_perm+0x237/0x580 [ 884.332513][T15699] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 884.332551][T15699] ? find_held_lock+0x2b/0x80 [ 884.332617][T15699] ? find_held_lock+0x2b/0x80 [ 884.332646][T15699] ? hook_file_ioctl_common+0x145/0x410 [ 884.332695][T15699] ? __fget_files+0x20e/0x3c0 [ 884.332733][T15699] security_file_ioctl+0x9b/0x240 [ 884.332772][T15699] __x64_sys_ioctl+0xb7/0x210 [ 884.332821][T15699] do_syscall_64+0xcd/0x490 [ 884.332862][T15699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 884.332893][T15699] RIP: 0033:0x7f5f7f38ebe9 [ 884.332919][T15699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 884.332948][T15699] RSP: 002b:00007f5f801ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 884.332976][T15699] RAX: ffffffffffffffda RBX: 00007f5f7f5b5fa0 RCX: 00007f5f7f38ebe9 [ 884.332997][T15699] RDX: 0000000000000003 RSI: 000000004068aea3 RDI: 0000000000000003 [ 884.333015][T15699] RBP: 00007f5f801ad090 R08: 0000000000000000 R09: 0000000000000000 [ 884.333033][T15699] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 884.333050][T15699] R13: 00007f5f7f5b6038 R14: 00007f5f7f5b5fa0 R15: 00007ffec91a33c8 [ 884.333090][T15699] [ 884.333519][T15699] ERROR: Out of memory at tomoyo_realpath_from_path. [ 885.301734][T15723] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1895'. [ 885.344831][T15723] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1895'. [ 886.520202][T15749] random: crng reseeded on system resumption [ 887.451937][T15764] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1905'. [ 887.543746][T15764] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1905'. [ 887.724842][T15771] blktrace: Concurrent blktraces are not allowed on loop2 [ 889.984294][T15806] i2c i2c-0: delete_device: Extra parameters [ 890.104327][T15823] random: crng reseeded on system resumption [ 890.401498][T15825] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1916'. [ 890.431570][T15827] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1916'. [ 890.905112][T15835] FAULT_INJECTION: forcing a failure. [ 890.905112][T15835] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 890.952754][T15835] CPU: 1 UID: 0 PID: 15835 Comm: syz.3.1918 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 890.952798][T15835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 890.952816][T15835] Call Trace: [ 890.952827][T15835] [ 890.952840][T15835] dump_stack_lvl+0x16c/0x1f0 [ 890.952882][T15835] should_fail_ex+0x512/0x640 [ 890.952928][T15835] _copy_to_user+0x32/0xd0 [ 890.952978][T15835] simple_read_from_buffer+0xcb/0x170 [ 890.953031][T15835] proc_fail_nth_read+0x197/0x240 [ 890.953065][T15835] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 890.953101][T15835] ? rw_verify_area+0xcf/0x6c0 [ 890.953130][T15835] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 890.953163][T15835] vfs_read+0x1e4/0xcf0 [ 890.953203][T15835] ? __pfx___mutex_lock+0x10/0x10 [ 890.953250][T15835] ? __pfx_vfs_read+0x10/0x10 [ 890.953295][T15835] ? __fget_files+0x20e/0x3c0 [ 890.953340][T15835] ksys_read+0x12a/0x250 [ 890.953374][T15835] ? __pfx_ksys_read+0x10/0x10 [ 890.953421][T15835] do_syscall_64+0xcd/0x490 [ 890.953461][T15835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 890.953491][T15835] RIP: 0033:0x7f731cb8d5fc [ 890.953516][T15835] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 890.953545][T15835] RSP: 002b:00007f731da8e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 890.953574][T15835] RAX: ffffffffffffffda RBX: 00007f731cdb5fa0 RCX: 00007f731cb8d5fc [ 890.953594][T15835] RDX: 000000000000000f RSI: 00007f731da8e0a0 RDI: 0000000000000004 [ 890.953613][T15835] RBP: 00007f731da8e090 R08: 0000000000000000 R09: 0000000000000000 [ 890.953633][T15835] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 890.953651][T15835] R13: 00007f731cdb6038 R14: 00007f731cdb5fa0 R15: 00007ffd556c1e38 [ 890.953693][T15835] [ 891.632985][T15857] blktrace: Concurrent blktraces are not allowed on loop2 [ 891.780308][T15865] FAULT_INJECTION: forcing a failure. [ 891.780308][T15865] name failslab, interval 1, probability 0, space 0, times 0 [ 891.803859][T15865] CPU: 1 UID: 0 PID: 15865 Comm: syz.0.1923 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 891.803898][T15865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 891.803916][T15865] Call Trace: [ 891.803927][T15865] [ 891.803938][T15865] dump_stack_lvl+0x16c/0x1f0 [ 891.803973][T15865] should_fail_ex+0x512/0x640 [ 891.803999][T15865] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 891.804024][T15865] should_failslab+0xc2/0x120 [ 891.804049][T15865] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 891.804072][T15865] ? alloc_empty_file+0x55/0x1e0 [ 891.804103][T15865] alloc_empty_file+0x55/0x1e0 [ 891.804132][T15865] path_openat+0xda/0x2cb0 [ 891.804159][T15865] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.804187][T15865] ? __pfx_path_openat+0x10/0x10 [ 891.804215][T15865] do_filp_open+0x20b/0x470 [ 891.804238][T15865] ? __pfx_do_filp_open+0x10/0x10 [ 891.804276][T15865] ? alloc_fd+0x471/0x7d0 [ 891.804302][T15865] do_sys_openat2+0x11b/0x1d0 [ 891.804330][T15865] ? __pfx_do_sys_openat2+0x10/0x10 [ 891.804362][T15865] ? __fget_files+0x20e/0x3c0 [ 891.804386][T15865] __x64_sys_openat+0x174/0x210 [ 891.804415][T15865] ? __pfx___x64_sys_openat+0x10/0x10 [ 891.804444][T15865] ? ksys_write+0x1ac/0x250 [ 891.804473][T15865] do_syscall_64+0xcd/0x490 [ 891.804499][T15865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 891.804518][T15865] RIP: 0033:0x7fde1318ebe9 [ 891.804533][T15865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 891.804552][T15865] RSP: 002b:00007fde13ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 891.804571][T15865] RAX: ffffffffffffffda RBX: 00007fde133b6180 RCX: 00007fde1318ebe9 [ 891.804583][T15865] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 891.804594][T15865] RBP: 00007fde13ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 891.804606][T15865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 891.804617][T15865] R13: 00007fde133b6218 R14: 00007fde133b6180 R15: 00007fff9df61e68 [ 891.804641][T15865] [ 893.107976][T15887] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1927'. [ 893.130833][T15887] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1927'. [ 893.539114][T15891] random: crng reseeded on system resumption [ 894.685679][T15929] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1937'. [ 894.696975][T15927] netlink: 338 bytes leftover after parsing attributes in process `syz.3.1937'. [ 896.436024][T15970] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1948'. [ 896.518923][T15970] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1948'. [ 896.984941][T15984] blktrace: Concurrent blktraces are not allowed on loop2 [ 898.543244][T16011] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1960'. [ 898.599049][T16011] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1960'. [ 898.855366][T16019] random: crng reseeded on system resumption [ 899.542072][T16043] blktrace: Concurrent blktraces are not allowed on loop2 [ 899.675168][T16045] netlink: 'syz.3.1972': attribute type 3 has an invalid length. [ 899.697143][T16045] netlink: 186 bytes leftover after parsing attributes in process `syz.3.1972'. [ 900.102341][T16051] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1973'. [ 900.198973][T16053] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1973'. [ 900.297279][T16057] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'. [ 900.391424][T16059] FAULT_INJECTION: forcing a failure. [ 900.391424][T16059] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 900.434806][T16059] CPU: 1 UID: 0 PID: 16059 Comm: syz.1.1976 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 900.434848][T16059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 900.434865][T16059] Call Trace: [ 900.434876][T16059] [ 900.434888][T16059] dump_stack_lvl+0x16c/0x1f0 [ 900.434930][T16059] should_fail_ex+0x512/0x640 [ 900.434975][T16059] _copy_from_iter+0x29f/0x16f0 [ 900.435024][T16059] ? __alloc_skb+0x200/0x380 [ 900.435059][T16059] ? __pfx__copy_from_iter+0x10/0x10 [ 900.435113][T16059] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 900.435155][T16059] ? __lock_acquire+0xb97/0x1ce0 [ 900.435199][T16059] netlink_sendmsg+0x829/0xdd0 [ 900.435241][T16059] ? __pfx_netlink_sendmsg+0x10/0x10 [ 900.435280][T16059] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 900.435314][T16059] ____sys_sendmsg+0xa95/0xc70 [ 900.435356][T16059] ? copy_msghdr_from_user+0x10a/0x160 [ 900.435389][T16059] ? __pfx_____sys_sendmsg+0x10/0x10 [ 900.435434][T16059] ? __pfx__kstrtoull+0x10/0x10 [ 900.435473][T16059] ___sys_sendmsg+0x134/0x1d0 [ 900.435509][T16059] ? __pfx____sys_sendmsg+0x10/0x10 [ 900.435559][T16059] ? find_held_lock+0x2b/0x80 [ 900.435607][T16059] __sys_sendmmsg+0x200/0x420 [ 900.435644][T16059] ? __pfx___sys_sendmmsg+0x10/0x10 [ 900.435690][T16059] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 900.435737][T16059] ? fput+0x9b/0xd0 [ 900.435773][T16059] ? ksys_write+0x1ac/0x250 [ 900.435803][T16059] ? __pfx_ksys_write+0x10/0x10 [ 900.435840][T16059] __x64_sys_sendmmsg+0x9c/0x100 [ 900.435873][T16059] ? lockdep_hardirqs_on+0x7c/0x110 [ 900.435904][T16059] do_syscall_64+0xcd/0x490 [ 900.435939][T16059] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 900.435966][T16059] RIP: 0033:0x7f5f7f38ebe9 [ 900.435989][T16059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 900.436014][T16059] RSP: 002b:00007f5f801ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 900.436041][T16059] RAX: ffffffffffffffda RBX: 00007f5f7f5b5fa0 RCX: 00007f5f7f38ebe9 [ 900.436060][T16059] RDX: 0000000000000100 RSI: 0000200000000080 RDI: 0000000000000003 [ 900.436077][T16059] RBP: 00007f5f801ad090 R08: 0000000000000000 R09: 0000000000000000 [ 900.436093][T16059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 900.436118][T16059] R13: 00007f5f7f5b6038 R14: 00007f5f7f5b5fa0 R15: 00007ffec91a33c8 [ 900.436159][T16059] [ 900.972516][T16073] random: crng reseeded on system resumption [ 901.818500][T16089] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1985'. [ 901.839324][T16093] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1985'. [ 902.142874][T16100] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1987'. [ 902.156937][T16101] blktrace: Concurrent blktraces are not allowed on loop2 [ 903.429075][T16125] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1996'. [ 903.462481][T16127] random: crng reseeded on system resumption [ 903.747983][T16132] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1997'. [ 903.792274][T16136] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1997'. [ 905.263213][T16175] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2008'. [ 905.322525][T16175] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2008'. [ 905.656407][T16181] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 905.728478][T16184] random: crng reseeded on system resumption [ 907.554821][T16220] can0: slcan on pty238. [ 907.714775][T16219] can0 (unregistered): slcan off pty238. [ 908.012747][T16230] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2020'. [ 908.074588][T16230] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2020'. [ 908.594257][T16242] random: crng reseeded on system resumption [ 908.840997][T16247] FAULT_INJECTION: forcing a failure. [ 908.840997][T16247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 908.933109][T16247] CPU: 0 UID: 0 PID: 16247 Comm: syz.1.2025 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 908.933137][T16247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 908.933149][T16247] Call Trace: [ 908.933156][T16247] [ 908.933163][T16247] dump_stack_lvl+0x16c/0x1f0 [ 908.933191][T16247] should_fail_ex+0x512/0x640 [ 908.933221][T16247] _copy_from_user+0x2e/0xd0 [ 908.933250][T16247] get_timespec64+0x8b/0x1b0 [ 908.933273][T16247] ? __pfx_get_timespec64+0x10/0x10 [ 908.933313][T16247] __x64_sys_utimensat+0x17a/0x290 [ 908.933338][T16247] ? __do_sys_openat2+0x1c8/0x2d0 [ 908.933367][T16247] ? __pfx___x64_sys_utimensat+0x10/0x10 [ 908.933399][T16247] do_syscall_64+0xcd/0x490 [ 908.933424][T16247] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 908.933444][T16247] RIP: 0033:0x7f5f7f38ebe9 [ 908.933459][T16247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 908.933477][T16247] RSP: 002b:00007f5f8018c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000118 [ 908.933495][T16247] RAX: ffffffffffffffda RBX: 00007f5f7f5b6090 RCX: 00007f5f7f38ebe9 [ 908.933508][T16247] RDX: 0000200000001400 RSI: 0000000000000000 RDI: ffffffffffffffff [ 908.933519][T16247] RBP: 00007f5f7f411e19 R08: 0000000000000000 R09: 0000000000000000 [ 908.933530][T16247] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 908.933541][T16247] R13: 00007f5f7f5b6128 R14: 00007f5f7f5b6090 R15: 00007ffec91a33c8 [ 908.933563][T16247] [ 909.593505][T16251] dvb_demux: dvb_demux_feed_del: feed not in list (type=0 state=0 pid=ffff) [ 909.862151][T16256] vivid-007: ================= START STATUS ================= [ 909.884422][T16256] vivid-007: Generate PTS: true [ 909.889910][T16256] vivid-007: Generate SCR: true [ 909.906450][T16256] tpg source WxH: 320x240 (Y'CbCr) [ 909.911615][T16256] tpg field: 1 [ 909.919069][T16256] tpg crop: (0,0)/320x240 [ 909.926906][T16256] tpg compose: (0,0)/320x240 [ 909.949988][T16256] tpg colorspace: 8 [ 909.954328][T16256] tpg transfer function: 0/0 [ 909.962334][T16256] tpg Y'CbCr encoding: 0/0 [ 909.967891][T16256] tpg quantization: 0/0 [ 909.972267][T16256] tpg RGB range: 0/2 [ 909.982524][T16256] vivid-007: ================== END STATUS ================== [ 910.696551][T16271] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2031'. [ 910.743617][T16271] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2031'. [ 912.231725][T16291] random: crng reseeded on system resumption [ 913.540218][T16313] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2043'. [ 913.686344][T16314] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2043'. [ 913.714749][T16313] netlink: 290 bytes leftover after parsing attributes in process `syz.0.2043'. [ 914.679079][T16327] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2046'. [ 915.469982][T16327] hsr_slave_0 (unregistering): left promiscuous mode [ 916.124182][T16344] random: crng reseeded on system resumption [ 917.261336][T16368] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2054'. [ 917.295720][T16372] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2054'. [ 918.874739][T16408] random: crng reseeded on system resumption [ 919.504333][T16430] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2065'. [ 919.529778][T16431] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2065'. [ 920.229332][T16443] netlink: 146 bytes leftover after parsing attributes in process `syz.2.2069'. [ 921.920261][T16468] ptrace attach of "./syz-executor exec"[16469] was attempted by "./syz-executor exec"[16468] [ 922.075907][T16472] random: crng reseeded on system resumption [ 922.280653][T16478] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2077'. [ 922.363036][T16480] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2077'. [ 923.509856][T16488] FAULT_INJECTION: forcing a failure. [ 923.509856][T16488] name failslab, interval 1, probability 0, space 0, times 0 [ 923.608071][T16488] CPU: 1 UID: 0 PID: 16488 Comm: syz.0.2081 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 923.608123][T16488] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 923.608141][T16488] Call Trace: [ 923.608152][T16488] [ 923.608164][T16488] dump_stack_lvl+0x16c/0x1f0 [ 923.608206][T16488] should_fail_ex+0x512/0x640 [ 923.608256][T16488] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 923.608294][T16488] should_failslab+0xc2/0x120 [ 923.608335][T16488] __kmalloc_cache_noprof+0x6a/0x3e0 [ 923.608367][T16488] ? copy_mount_options+0x55/0x190 [ 923.608404][T16488] ? _copy_from_user+0x59/0xd0 [ 923.608451][T16488] copy_mount_options+0x55/0x190 [ 923.608491][T16488] __x64_sys_mount+0x1ac/0x310 [ 923.608527][T16488] ? __pfx___x64_sys_mount+0x10/0x10 [ 923.608576][T16488] do_syscall_64+0xcd/0x490 [ 923.608615][T16488] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 923.608647][T16488] RIP: 0033:0x7fde1318ebe9 [ 923.608672][T16488] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 923.608701][T16488] RSP: 002b:00007fde14039038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 923.608744][T16488] RAX: ffffffffffffffda RBX: 00007fde133b5fa0 RCX: 00007fde1318ebe9 [ 923.608764][T16488] RDX: 0000200000000380 RSI: 0000000000000000 RDI: 00002000000002c0 [ 923.608782][T16488] RBP: 00007fde13211e19 R08: 00002000000003c0 R09: 0000000000000000 [ 923.608802][T16488] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000000 [ 923.608820][T16488] R13: 00007fde133b6038 R14: 00007fde133b5fa0 R15: 00007fff9df61e68 [ 923.608858][T16488] [ 923.985546][T16498] FAULT_INJECTION: forcing a failure. [ 923.985546][T16498] name failslab, interval 1, probability 0, space 0, times 0 [ 924.038154][T16498] CPU: 0 UID: 0 PID: 16498 Comm: syz.0.2083 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 924.038195][T16498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 924.038212][T16498] Call Trace: [ 924.038223][T16498] [ 924.038233][T16498] dump_stack_lvl+0x16c/0x1f0 [ 924.038275][T16498] should_fail_ex+0x512/0x640 [ 924.038313][T16498] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 924.038364][T16498] should_failslab+0xc2/0x120 [ 924.038403][T16498] __kmalloc_cache_noprof+0x6a/0x3e0 [ 924.038434][T16498] ? io_wq_create+0x6a/0x9a0 [ 924.038472][T16498] io_wq_create+0x6a/0x9a0 [ 924.038507][T16498] io_uring_alloc_task_context+0x1e1/0x650 [ 924.038558][T16498] ? __pfx_io_uring_alloc_task_context+0x10/0x10 [ 924.038616][T16498] ? alloc_file_pseudo+0x1b3/0x230 [ 924.038672][T16498] __io_uring_add_tctx_node+0x2dd/0x500 [ 924.038701][T16498] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 924.038752][T16498] ? __anon_inode_getfile+0x17c/0x280 [ 924.038794][T16498] io_uring_setup+0x1579/0x2080 [ 924.038836][T16498] ? __pfx_io_uring_setup+0x10/0x10 [ 924.038904][T16498] ? __fget_files+0x20e/0x3c0 [ 924.038947][T16498] ? ksys_write+0x1ac/0x250 [ 924.038979][T16498] ? __pfx_ksys_write+0x10/0x10 [ 924.039021][T16498] __x64_sys_io_uring_setup+0xc2/0x170 [ 924.039061][T16498] do_syscall_64+0xcd/0x490 [ 924.039101][T16498] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 924.039132][T16498] RIP: 0033:0x7fde1318ebe9 [ 924.039158][T16498] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 924.039187][T16498] RSP: 002b:00007fde14039038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 924.039216][T16498] RAX: ffffffffffffffda RBX: 00007fde133b5fa0 RCX: 00007fde1318ebe9 [ 924.039236][T16498] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 924.039253][T16498] RBP: 00007fde14039090 R08: 0000000000000000 R09: 0000000000000000 [ 924.039271][T16498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 924.039288][T16498] R13: 00007fde133b6038 R14: 00007fde133b5fa0 R15: 00007fff9df61e68 [ 924.039327][T16498] [ 924.255658][ C0] vkms_vblank_simulate: vblank timer overrun [ 924.732556][ T5949] Process accounting resumed [ 925.217142][T16518] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2088'. [ 925.263098][T16518] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2088'. [ 926.191364][T16536] random: crng reseeded on system resumption [ 928.019031][T16570] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2098'. [ 928.123112][T16572] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2098'. [ 930.430863][T16616] device-mapper: ioctl: ioctl interface mismatch: kernel(4.50.0), user(4.131072.4294967293), cmd(3) [ 931.269910][T16629] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2109'. [ 931.329115][T16629] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2109'. [ 931.584184][T16636] FAULT_INJECTION: forcing a failure. [ 931.584184][T16636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 931.627053][T16636] CPU: 0 UID: 0 PID: 16636 Comm: syz.3.2112 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 931.627098][T16636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 931.627117][T16636] Call Trace: [ 931.627128][T16636] [ 931.627141][T16636] dump_stack_lvl+0x16c/0x1f0 [ 931.627183][T16636] should_fail_ex+0x512/0x640 [ 931.627231][T16636] _copy_from_iter+0x29f/0x16f0 [ 931.627301][T16636] ? __alloc_skb+0x200/0x380 [ 931.627339][T16636] ? __pfx__copy_from_iter+0x10/0x10 [ 931.627389][T16636] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 931.627443][T16636] netlink_sendmsg+0x829/0xdd0 [ 931.627491][T16636] ? __pfx_netlink_sendmsg+0x10/0x10 [ 931.627532][T16636] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 931.627572][T16636] sock_write_iter+0x4ff/0x5b0 [ 931.627620][T16636] ? __pfx_sock_write_iter+0x10/0x10 [ 931.627680][T16636] ? bpf_lsm_file_permission+0x9/0x10 [ 931.627724][T16636] ? security_file_permission+0x71/0x210 [ 931.627764][T16636] ? rw_verify_area+0xcf/0x6c0 [ 931.627799][T16636] vfs_write+0x7d0/0x11d0 [ 931.627835][T16636] ? __pfx_sock_write_iter+0x10/0x10 [ 931.627885][T16636] ? __pfx_vfs_write+0x10/0x10 [ 931.627916][T16636] ? find_held_lock+0x2b/0x80 [ 931.627972][T16636] ksys_write+0x1f8/0x250 [ 931.628006][T16636] ? __pfx_ksys_write+0x10/0x10 [ 931.628053][T16636] do_syscall_64+0xcd/0x490 [ 931.628092][T16636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 931.628124][T16636] RIP: 0033:0x7f731cb8ebe9 [ 931.628149][T16636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 931.628178][T16636] RSP: 002b:00007f731da8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 931.628210][T16636] RAX: ffffffffffffffda RBX: 00007f731cdb5fa0 RCX: 00007f731cb8ebe9 [ 931.628230][T16636] RDX: 00000000000002fb RSI: 0000200000000000 RDI: 0000000000000003 [ 931.628257][T16636] RBP: 00007f731da8e090 R08: 0000000000000000 R09: 0000000000000000 [ 931.628277][T16636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 931.628295][T16636] R13: 00007f731cdb6038 R14: 00007f731cdb5fa0 R15: 00007ffd556c1e38 [ 931.628335][T16636] [ 932.972045][T16645] random: crng reseeded on system resumption [ 933.867498][T16656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2116'. [ 934.586689][T16668] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2121'. [ 934.647639][T16671] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2121'. [ 935.057257][T16678] vhci_hcd: invalid port number 21 [ 936.661727][T16699] random: crng reseeded on system resumption [ 936.761446][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 936.774825][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 936.985092][T16702] FAULT_INJECTION: forcing a failure. [ 936.985092][T16702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 937.146683][T16702] CPU: 1 UID: 0 PID: 16702 Comm: syz.1.2128 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 937.146727][T16702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 937.146743][T16702] Call Trace: [ 937.146753][T16702] [ 937.146765][T16702] dump_stack_lvl+0x16c/0x1f0 [ 937.146807][T16702] should_fail_ex+0x512/0x640 [ 937.146854][T16702] _copy_from_iter+0x29f/0x16f0 [ 937.146904][T16702] ? __alloc_skb+0x200/0x380 [ 937.146940][T16702] ? __pfx__copy_from_iter+0x10/0x10 [ 937.146988][T16702] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 937.147039][T16702] netlink_sendmsg+0x829/0xdd0 [ 937.147085][T16702] ? __pfx_netlink_sendmsg+0x10/0x10 [ 937.147128][T16702] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 937.147167][T16702] sock_write_iter+0x4ff/0x5b0 [ 937.147223][T16702] ? __pfx_sock_write_iter+0x10/0x10 [ 937.147282][T16702] ? bpf_lsm_file_permission+0x9/0x10 [ 937.147324][T16702] ? security_file_permission+0x71/0x210 [ 937.147365][T16702] ? rw_verify_area+0xcf/0x6c0 [ 937.147399][T16702] vfs_write+0x7d0/0x11d0 [ 937.147433][T16702] ? __pfx_sock_write_iter+0x10/0x10 [ 937.147483][T16702] ? __pfx_vfs_write+0x10/0x10 [ 937.147513][T16702] ? find_held_lock+0x2b/0x80 [ 937.147570][T16702] ksys_write+0x1f8/0x250 [ 937.147603][T16702] ? __pfx_ksys_write+0x10/0x10 [ 937.147646][T16702] do_syscall_64+0xcd/0x490 [ 937.147686][T16702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 937.147718][T16702] RIP: 0033:0x7f5f7f38ebe9 [ 937.147743][T16702] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 937.147772][T16702] RSP: 002b:00007f5f801ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 937.147802][T16702] RAX: ffffffffffffffda RBX: 00007f5f7f5b5fa0 RCX: 00007f5f7f38ebe9 [ 937.147823][T16702] RDX: 0000000000000009 RSI: 0000000000000000 RDI: 0000000000000003 [ 937.147841][T16702] RBP: 00007f5f801ad090 R08: 0000000000000000 R09: 0000000000000000 [ 937.147858][T16702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 937.147877][T16702] R13: 00007f5f7f5b6038 R14: 00007f5f7f5b5fa0 R15: 00007ffec91a33c8 [ 937.147918][T16702] [ 937.930147][T16721] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2132'. [ 937.988362][T16721] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2132'. [ 939.943077][T16767] random: crng reseeded on system resumption [ 941.675247][T16789] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2144'. [ 941.753207][T16791] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2144'. [ 941.777468][T16805] FAULT_INJECTION: forcing a failure. [ 941.777468][T16805] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 941.831426][T16805] CPU: 0 UID: 0 PID: 16805 Comm: syz.3.2146 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 941.831465][T16805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 941.831483][T16805] Call Trace: [ 941.831493][T16805] [ 941.831504][T16805] dump_stack_lvl+0x16c/0x1f0 [ 941.831535][T16805] should_fail_ex+0x512/0x640 [ 941.831565][T16805] should_fail_alloc_page+0xe7/0x130 [ 941.831592][T16805] prepare_alloc_pages+0x3c2/0x610 [ 941.831624][T16805] __alloc_frozen_pages_noprof+0x18b/0x23f0 [ 941.831648][T16805] ? __lock_acquire+0x62e/0x1ce0 [ 941.831676][T16805] ? __lock_acquire+0x62e/0x1ce0 [ 941.831706][T16805] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 941.831728][T16805] ? __lock_acquire+0x62e/0x1ce0 [ 941.831765][T16805] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 941.831795][T16805] ? policy_nodemask+0xea/0x4e0 [ 941.831822][T16805] alloc_pages_mpol+0x1fb/0x550 [ 941.831847][T16805] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 941.831879][T16805] alloc_pages_noprof+0x131/0x390 [ 941.831905][T16805] __pmd_alloc+0x3b/0x930 [ 941.831935][T16805] __handle_mm_fault+0xa06/0x2a50 [ 941.831958][T16805] ? mt_find+0x3ef/0xa30 [ 941.831984][T16805] ? __pfx___handle_mm_fault+0x10/0x10 [ 941.832002][T16805] ? __pfx_mt_find+0x10/0x10 [ 941.832039][T16805] ? find_vma+0xbf/0x140 [ 941.832063][T16805] ? __pfx_find_vma+0x10/0x10 [ 941.832090][T16805] handle_mm_fault+0x589/0xd10 [ 941.832110][T16805] ? __bpf_trace_exceptions+0x1/0x40 [ 941.832140][T16805] do_user_addr_fault+0x7a6/0x1370 [ 941.832172][T16805] ? rcu_is_watching+0x12/0xc0 [ 941.832193][T16805] exc_page_fault+0x5c/0xb0 [ 941.832216][T16805] asm_exc_page_fault+0x26/0x30 [ 941.832234][T16805] RIP: 0010:rep_movs_alternative+0x4a/0x90 [ 941.832265][T16805] Code: cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 73 e8 eb c5 a4 c3 cc cc cc cc 48 8b 06 48 89 07 48 8d 47 08 48 83 e0 f8 48 [ 941.832290][T16805] RSP: 0018:ffffc900179d77b8 EFLAGS: 00050202 [ 941.832306][T16805] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000005c [ 941.832318][T16805] RDX: fffff52002f3af41 RSI: 0000000000000000 RDI: ffffc900179d79b0 [ 941.832330][T16805] RBP: 000000000000005c R08: 0000000000000001 R09: fffff52002f3af41 [ 941.832341][T16805] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 941.832352][T16805] R13: ffffc900179d79b0 R14: ffffc900179d79b0 R15: 0000000000000000 [ 941.832376][T16805] _copy_from_user+0x98/0xd0 [ 941.832406][T16805] copy_from_sockptr_offset.constprop.0+0x136/0x170 [ 941.832434][T16805] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 941.832466][T16805] ? bpf_lsm_capable+0x9/0x10 [ 941.832483][T16805] ? security_capable+0x7e/0x260 [ 941.832504][T16805] ip6_mroute_setsockopt+0x435/0x20d0 [ 941.832537][T16805] ? __pfx_ip6_mroute_setsockopt+0x10/0x10 [ 941.832562][T16805] ? is_bpf_text_address+0x8a/0x1a0 [ 941.832585][T16805] ? bpf_ksym_find+0x124/0x1c0 [ 941.832603][T16805] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 941.832625][T16805] ? is_bpf_text_address+0x94/0x1a0 [ 941.832649][T16805] ? kernel_text_address+0x8d/0x100 [ 941.832679][T16805] ? __kernel_text_address+0xd/0x40 [ 941.832696][T16805] ? unwind_get_return_address+0x59/0xa0 [ 941.832716][T16805] ? arch_stack_walk+0xa6/0x100 [ 941.832744][T16805] ? __lock_acquire+0xb97/0x1ce0 [ 941.832766][T16805] ? _parse_integer_limit+0x17f/0x1d0 [ 941.832795][T16805] ? do_ipv6_setsockopt+0x7ba/0x4350 [ 941.832815][T16805] do_ipv6_setsockopt+0x7ba/0x4350 [ 941.832840][T16805] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 941.832860][T16805] ? aa_label_sk_perm+0x195/0x600 [ 941.832888][T16805] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 941.832918][T16805] ? find_held_lock+0x2b/0x80 [ 941.832937][T16805] ? get_pid_task+0xfc/0x250 [ 941.832972][T16805] ? __pfx___might_resched+0x10/0x10 [ 941.832991][T16805] ? __lock_acquire+0x62e/0x1ce0 [ 941.833022][T16805] ? ipv6_setsockopt+0xcb/0x170 [ 941.833041][T16805] ipv6_setsockopt+0xcb/0x170 [ 941.833063][T16805] rawv6_setsockopt+0xc2/0x510 [ 941.833094][T16805] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 941.833124][T16805] ? aa_sock_opt_perm+0xfd/0x1c0 [ 941.833154][T16805] ? sock_common_setsockopt+0x2e/0xf0 [ 941.833182][T16805] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 941.833212][T16805] do_sock_setsockopt+0xf3/0x1d0 [ 941.833243][T16805] __sys_setsockopt+0x120/0x1a0 [ 941.833275][T16805] __x64_sys_setsockopt+0xbd/0x160 [ 941.833297][T16805] ? do_syscall_64+0x91/0x490 [ 941.833320][T16805] ? lockdep_hardirqs_on+0x7c/0x110 [ 941.833342][T16805] do_syscall_64+0xcd/0x490 [ 941.833367][T16805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 941.833385][T16805] RIP: 0033:0x7f731cb8ebe9 [ 941.833401][T16805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 941.833419][T16805] RSP: 002b:00007f731da8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 941.833436][T16805] RAX: ffffffffffffffda RBX: 00007f731cdb5fa0 RCX: 00007f731cb8ebe9 [ 941.833448][T16805] RDX: 00000000000000cc RSI: 0000000000000029 RDI: 0400000000000003 [ 941.833459][T16805] RBP: 00007f731da8e090 R08: 0000000000000567 R09: 0000000000000000 [ 941.833471][T16805] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 941.833482][T16805] R13: 00007f731cdb6038 R14: 00007f731cdb5fa0 R15: 00007ffd556c1e38 [ 941.833505][T16805] [ 944.498309][T16839] random: crng reseeded on system resumption [ 944.916543][T16841] nbd: nbd7 already in use [ 944.921108][T16841] FAULT_INJECTION: forcing a failure. [ 944.921108][T16841] name failslab, interval 1, probability 0, space 0, times 0 [ 944.975641][T16841] CPU: 0 UID: 0 PID: 16841 Comm: syz.3.2154 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 944.975684][T16841] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 944.975703][T16841] Call Trace: [ 944.975714][T16841] [ 944.975726][T16841] dump_stack_lvl+0x16c/0x1f0 [ 944.975768][T16841] should_fail_ex+0x512/0x640 [ 944.975816][T16841] should_failslab+0xc2/0x120 [ 944.975856][T16841] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 944.975894][T16841] ? skb_clone+0x190/0x3f0 [ 944.975938][T16841] skb_clone+0x190/0x3f0 [ 944.975978][T16841] netlink_deliver_tap+0xabd/0xd30 [ 944.976025][T16841] netlink_unicast+0x71f/0x870 [ 944.976071][T16841] ? __pfx_netlink_unicast+0x10/0x10 [ 944.976112][T16841] ? genl_rcv_msg+0x4bb/0x800 [ 944.976166][T16841] netlink_ack+0x696/0xb80 [ 944.976219][T16841] netlink_rcv_skb+0x332/0x420 [ 944.976267][T16841] ? __pfx_genl_rcv_msg+0x10/0x10 [ 944.976314][T16841] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 944.976370][T16841] ? netlink_deliver_tap+0x1ae/0xd30 [ 944.976415][T16841] genl_rcv+0x28/0x40 [ 944.976453][T16841] netlink_unicast+0x5a7/0x870 [ 944.976498][T16841] ? __pfx_netlink_unicast+0x10/0x10 [ 944.976538][T16841] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 944.976575][T16841] ? __lock_acquire+0xb97/0x1ce0 [ 944.976627][T16841] netlink_sendmsg+0x8d1/0xdd0 [ 944.976673][T16841] ? __pfx_netlink_sendmsg+0x10/0x10 [ 944.976717][T16841] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 944.976764][T16841] ____sys_sendmsg+0xa95/0xc70 [ 944.976812][T16841] ? copy_msghdr_from_user+0x10a/0x160 [ 944.976849][T16841] ? __pfx_____sys_sendmsg+0x10/0x10 [ 944.976915][T16841] ___sys_sendmsg+0x134/0x1d0 [ 944.976956][T16841] ? __pfx____sys_sendmsg+0x10/0x10 [ 944.977030][T16841] ? __mutex_unlock_slowpath+0x140/0x800 [ 944.977082][T16841] __sys_sendmsg+0x16d/0x220 [ 944.977121][T16841] ? __pfx___sys_sendmsg+0x10/0x10 [ 944.977189][T16841] do_syscall_64+0xcd/0x490 [ 944.977239][T16841] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 944.977270][T16841] RIP: 0033:0x7f731cb8ebe9 [ 944.977295][T16841] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 944.977324][T16841] RSP: 002b:00007f731da8e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 944.977354][T16841] RAX: ffffffffffffffda RBX: 00007f731cdb5fa0 RCX: 00007f731cb8ebe9 [ 944.977375][T16841] RDX: 0000000000008880 RSI: 0000200000001e00 RDI: 0000000000000007 [ 944.977393][T16841] RBP: 00007f731da8e090 R08: 0000000000000000 R09: 0000000000000000 [ 944.977412][T16841] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 944.977430][T16841] R13: 00007f731cdb6038 R14: 00007f731cdb5fa0 R15: 00007ffd556c1e38 [ 944.977471][T16841] [ 945.299167][T16845] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2154'. [ 945.754182][T16850] uvcvideo: [Deprecated]: nodrop parameter will be eventually removed. [ 946.051037][T16855] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2156'. [ 946.061315][T16855] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2156'. [ 946.104574][T16855] netlink: 290 bytes leftover after parsing attributes in process `syz.3.2156'. [ 946.159978][T16855] veth0_macvtap: left promiscuous mode [ 946.352608][T16864] netlink: 334 bytes leftover after parsing attributes in process `syz.2.2158'. [ 948.639076][T16906] random: crng reseeded on system resumption [ 949.398871][T16909] sctp: failed to load transform for md5: -2 [ 949.604300][T16921] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2168'. [ 949.639437][T16923] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2168'. [ 949.688516][T16921] netlink: 290 bytes leftover after parsing attributes in process `syz.3.2168'. [ 950.979618][T16943] FAULT_INJECTION: forcing a failure. [ 950.979618][T16943] name failslab, interval 1, probability 0, space 0, times 0 [ 951.000282][T16943] CPU: 0 UID: 0 PID: 16943 Comm: syz.3.2172 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 951.000327][T16943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 951.000347][T16943] Call Trace: [ 951.000357][T16943] [ 951.000370][T16943] dump_stack_lvl+0x16c/0x1f0 [ 951.000414][T16943] should_fail_ex+0x512/0x640 [ 951.000456][T16943] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 951.000496][T16943] should_failslab+0xc2/0x120 [ 951.000535][T16943] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 951.000570][T16943] ? lockdep_init_map_type+0x5c/0x280 [ 951.000608][T16943] ? __d_alloc+0x32/0xae0 [ 951.000650][T16943] __d_alloc+0x32/0xae0 [ 951.000689][T16943] d_alloc_pseudo+0x1c/0xc0 [ 951.000729][T16943] alloc_file_pseudo+0xcf/0x230 [ 951.000772][T16943] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 951.000812][T16943] ? alloc_fd+0x471/0x7d0 [ 951.000848][T16943] sock_alloc_file+0x50/0x210 [ 951.000888][T16943] __sys_socket+0x1c0/0x260 [ 951.000917][T16943] ? __pfx___sys_socket+0x10/0x10 [ 951.000945][T16943] ? xfd_validate_state+0x61/0x180 [ 951.000993][T16943] __x64_sys_socket+0x72/0xb0 [ 951.001019][T16943] ? lockdep_hardirqs_on+0x7c/0x110 [ 951.001051][T16943] do_syscall_64+0xcd/0x490 [ 951.001091][T16943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 951.001121][T16943] RIP: 0033:0x7f731cb8ebe9 [ 951.001146][T16943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 951.001175][T16943] RSP: 002b:00007f731da8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 951.001204][T16943] RAX: ffffffffffffffda RBX: 00007f731cdb5fa0 RCX: 00007f731cb8ebe9 [ 951.001232][T16943] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 951.001252][T16943] RBP: 00007f731cc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 951.001271][T16943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 951.001291][T16943] R13: 00007f731cdb6038 R14: 00007f731cdb5fa0 R15: 00007ffd556c1e38 [ 951.001330][T16943] [ 953.051900][T16977] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2179'. [ 953.312485][T16975] loop6: detected capacity change from 0 to 8 [ 953.333452][T16980] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2179'. [ 953.454843][T16977] netlink: 290 bytes leftover after parsing attributes in process `syz.0.2179'. [ 953.540643][T16977] veth0_macvtap: left promiscuous mode [ 954.300648][T16994] random: crng reseeded on system resumption [ 957.097353][T17040] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2192'. [ 957.136941][T17040] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2192'. [ 957.152186][T17025] FAULT_INJECTION: forcing a failure. [ 957.152186][T17025] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 957.211593][T17040] netlink: 290 bytes leftover after parsing attributes in process `syz.2.2192'. [ 957.223767][T17025] CPU: 0 UID: 0 PID: 17025 Comm: syz.0.2189 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 957.223812][T17025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 957.223830][T17025] Call Trace: [ 957.223841][T17025] [ 957.223859][T17025] dump_stack_lvl+0x16c/0x1f0 [ 957.223902][T17025] should_fail_ex+0x512/0x640 [ 957.223948][T17025] _copy_to_user+0x32/0xd0 [ 957.224009][T17025] poll_select_finish+0x33a/0x6b0 [ 957.224045][T17025] ? __pfx_poll_select_finish+0x10/0x10 [ 957.224084][T17025] ? read_tsc+0x9/0x20 [ 957.224119][T17025] ? ktime_get_ts64+0x256/0x400 [ 957.224169][T17025] kern_select+0x16e/0x1e0 [ 957.224202][T17025] ? __pfx_kern_select+0x10/0x10 [ 957.224239][T17025] ? xfd_validate_state+0x61/0x180 [ 957.224292][T17025] __x64_sys_select+0xbd/0x160 [ 957.224324][T17025] ? do_syscall_64+0x91/0x490 [ 957.224361][T17025] ? lockdep_hardirqs_on+0x7c/0x110 [ 957.224398][T17025] do_syscall_64+0xcd/0x490 [ 957.224440][T17025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 957.224472][T17025] RIP: 0033:0x7fde1318ebe9 [ 957.224499][T17025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 957.224529][T17025] RSP: 002b:00007fde14039038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 957.224559][T17025] RAX: ffffffffffffffda RBX: 00007fde133b5fa0 RCX: 00007fde1318ebe9 [ 957.224578][T17025] RDX: 0000200000000100 RSI: 0000200000000080 RDI: 000000000000b83d [ 957.224598][T17025] RBP: 00007fde13211e19 R08: 0000200000000200 R09: 0000000000000000 [ 957.224616][T17025] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000000 [ 957.224634][T17025] R13: 00007fde133b6038 R14: 00007fde133b5fa0 R15: 00007fff9df61e68 [ 957.224675][T17025] [ 957.400789][ C0] vkms_vblank_simulate: vblank timer overrun [ 957.532929][T17042] random: crng reseeded on system resumption [ 958.517351][T17063] random: crng reseeded on system resumption [ 958.825099][T17074] FAULT_INJECTION: forcing a failure. [ 958.825099][T17074] name failslab, interval 1, probability 0, space 0, times 0 [ 958.904358][T17074] CPU: 1 UID: 0 PID: 17074 Comm: syz.3.2200 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 958.904400][T17074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 958.904418][T17074] Call Trace: [ 958.904429][T17074] [ 958.904441][T17074] dump_stack_lvl+0x16c/0x1f0 [ 958.904480][T17074] should_fail_ex+0x512/0x640 [ 958.904519][T17074] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 958.904554][T17074] should_failslab+0xc2/0x120 [ 958.904590][T17074] __kmalloc_cache_noprof+0x6a/0x3e0 [ 958.904620][T17074] ? _raw_spin_unlock+0x28/0x50 [ 958.904648][T17074] ? snd_rawmidi_open+0x3c3/0xbf0 [ 958.904686][T17074] snd_rawmidi_open+0x3c3/0xbf0 [ 958.904719][T17074] ? __mutex_unlock_slowpath+0x163/0x800 [ 958.904763][T17074] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 958.904806][T17074] ? kobject_get_unless_zero+0x156/0x1e0 [ 958.904849][T17074] ? __pfx_snd_rawmidi_open+0x10/0x10 [ 958.904882][T17074] snd_open+0x22a/0x4c0 [ 958.904922][T17074] ? __pfx_snd_open+0x10/0x10 [ 958.904962][T17074] chrdev_open+0x231/0x6a0 [ 958.904999][T17074] ? __pfx_apparmor_file_open+0x10/0x10 [ 958.905028][T17074] ? __pfx_chrdev_open+0x10/0x10 [ 958.905066][T17074] ? fsnotify_open_perm_and_set_mode+0x17c/0xa60 [ 958.905108][T17074] do_dentry_open+0x97f/0x1530 [ 958.905180][T17074] ? __pfx_chrdev_open+0x10/0x10 [ 958.905228][T17074] vfs_open+0x82/0x3f0 [ 958.905279][T17074] path_openat+0x1de4/0x2cb0 [ 958.905343][T17074] ? __pfx_path_openat+0x10/0x10 [ 958.905393][T17074] do_filp_open+0x20b/0x470 [ 958.905431][T17074] ? __pfx_do_filp_open+0x10/0x10 [ 958.905497][T17074] ? alloc_fd+0x471/0x7d0 [ 958.905544][T17074] do_sys_openat2+0x11b/0x1d0 [ 958.905584][T17074] ? __pfx_do_sys_openat2+0x10/0x10 [ 958.905641][T17074] __x64_sys_openat+0x174/0x210 [ 958.905686][T17074] ? __pfx___x64_sys_openat+0x10/0x10 [ 958.905747][T17074] do_syscall_64+0xcd/0x490 [ 958.905786][T17074] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.905816][T17074] RIP: 0033:0x7f731cb8ebe9 [ 958.905841][T17074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.905871][T17074] RSP: 002b:00007f731da8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 958.905900][T17074] RAX: ffffffffffffffda RBX: 00007f731cdb5fa0 RCX: 00007f731cb8ebe9 [ 958.905918][T17074] RDX: 0000000000020c00 RSI: 00002000000000c0 RDI: ffffffffffffff9c [ 958.905938][T17074] RBP: 00007f731cc11e19 R08: 0000000000000000 R09: 0000000000000000 [ 958.905956][T17074] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 958.905974][T17074] R13: 00007f731cdb6038 R14: 00007f731cdb5fa0 R15: 00007ffd556c1e38 [ 958.906015][T17074] [ 959.750970][T17091] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2202'. [ 959.884316][T17090] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2203'. [ 959.894232][T17092] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2203'. [ 960.052227][T17101] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2205'. [ 960.097554][T17100] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2205'. [ 961.202366][T17129] i2c i2c-0: DVB: adapter 0 frontend 0 frequency 0 out of range (51000000..2150000000) [ 961.254280][T17129] syz.0.2209 uses obsolete (PF_INET,SOCK_PACKET) [ 961.747538][T17146] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2214'. [ 961.855465][T17146] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2214'. [ 961.916512][T17146] netlink: 290 bytes leftover after parsing attributes in process `syz.2.2214'. [ 962.193471][T17161] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2216'. [ 962.218631][T17161] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2216'. [ 966.470488][T17224] Invalid ELF header magic: != ELF [ 967.988587][T17248] __nla_validate_parse: 3 callbacks suppressed [ 967.988608][T17248] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2235'. [ 968.081895][T17254] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2235'. [ 968.606338][ T30] audit: type=1800 audit(4294967299.530:15): pid=17279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2241" name="discovery_nqn" dev="configfs" ino=66049 res=0 errno=0 [ 970.904121][T17314] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2249'. [ 970.952603][T17317] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2249'. [ 971.335851][T17328] FAULT_INJECTION: forcing a failure. [ 971.335851][T17328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 971.504151][T17328] CPU: 0 UID: 0 PID: 17328 Comm: syz.0.2250 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 971.504194][T17328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 971.504212][T17328] Call Trace: [ 971.504223][T17328] [ 971.504235][T17328] dump_stack_lvl+0x16c/0x1f0 [ 971.504279][T17328] should_fail_ex+0x512/0x640 [ 971.504326][T17328] _copy_to_user+0x32/0xd0 [ 971.504377][T17328] pagemap_read+0x52c/0x890 [ 971.504422][T17328] ? __pfx_pagemap_read+0x10/0x10 [ 971.504466][T17328] ? rw_verify_area+0xcf/0x6c0 [ 971.504500][T17328] ? __pfx_pagemap_read+0x10/0x10 [ 971.504534][T17328] vfs_readv+0x5be/0x8b0 [ 971.504575][T17328] ? __pfx_vfs_readv+0x10/0x10 [ 971.504603][T17328] ? __mutex_lock+0x1c4/0x10b0 [ 971.504629][T17328] ? find_held_lock+0x2b/0x80 [ 971.504654][T17328] ? __pfx___mutex_lock+0x10/0x10 [ 971.504686][T17328] ? __fget_files+0x20e/0x3c0 [ 971.504705][T17328] ? __fget_files+0x200/0x3c0 [ 971.504730][T17328] ? do_readv+0x132/0x340 [ 971.504747][T17328] do_readv+0x132/0x340 [ 971.504766][T17328] ? __pfx_do_readv+0x10/0x10 [ 971.504792][T17328] do_syscall_64+0xcd/0x490 [ 971.504818][T17328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 971.504838][T17328] RIP: 0033:0x7fde1318ebe9 [ 971.504861][T17328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 971.504880][T17328] RSP: 002b:00007fde13ff7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 971.504899][T17328] RAX: ffffffffffffffda RBX: 00007fde133b6180 RCX: 00007fde1318ebe9 [ 971.504911][T17328] RDX: 0000000000000006 RSI: 0000200000000400 RDI: 0000000000000005 [ 971.504923][T17328] RBP: 00007fde13ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 971.504934][T17328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 971.504945][T17328] R13: 00007fde133b6218 R14: 00007fde133b6180 R15: 00007fff9df61e68 [ 971.504969][T17328] [ 974.706255][T17384] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2260'. [ 974.758408][T17384] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2260'. [ 974.796526][T17384] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2260'. [ 975.137434][ T30] audit: type=1800 audit(4294967306.060:16): pid=17392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2263" name="discovery_nqn" dev="configfs" ino=65414 res=0 errno=0 [ 975.600779][T17401] block2mtd: error: cannot open device /sys/module/block2mtd/parameters/block2mtd [ 976.825254][T17419] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2268'. [ 976.847963][T17419] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2268'. [ 977.081519][T17419] netlink: 290 bytes leftover after parsing attributes in process `syz.3.2268'. [ 979.058350][T17441] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2272'. [ 979.169456][T17442] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2272'. [ 979.189173][T17441] netlink: 204 bytes leftover after parsing attributes in process `syz.1.2272'. [ 982.063676][T17485] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2283'. [ 982.080803][T17485] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2283'. [ 982.107369][T17485] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2283'. [ 982.703963][T17495] sd 0:0:1:0: PR command failed: 1026 [ 982.721979][T17495] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 982.735497][T17495] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 982.793806][T17495] sd 0:0:1:0: PR command failed: 1026 [ 982.833062][T17495] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 982.858542][T17495] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 984.880878][T17520] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2293'. [ 984.892787][T17520] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2293'. [ 985.807984][T17537] FAULT_INJECTION: forcing a failure. [ 985.807984][T17537] name failslab, interval 1, probability 0, space 0, times 0 [ 985.844251][T17537] CPU: 1 UID: 0 PID: 17537 Comm: syz.1.2297 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 985.844296][T17537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 985.844315][T17537] Call Trace: [ 985.844325][T17537] [ 985.844338][T17537] dump_stack_lvl+0x16c/0x1f0 [ 985.844379][T17537] should_fail_ex+0x512/0x640 [ 985.844420][T17537] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 985.844461][T17537] should_failslab+0xc2/0x120 [ 985.844499][T17537] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 985.844536][T17537] ? __alloc_skb+0x2b2/0x380 [ 985.844576][T17537] __alloc_skb+0x2b2/0x380 [ 985.844610][T17537] ? __pfx___alloc_skb+0x10/0x10 [ 985.844660][T17537] netdev_nl_napi_get_doit+0xb0/0x490 [ 985.844703][T17537] genl_family_rcv_msg_doit+0x209/0x2f0 [ 985.844753][T17537] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 985.844795][T17537] ? __dev_queue_xmit+0xaf1/0x4490 [ 985.844824][T17537] ? genl_get_cmd+0x194/0x580 [ 985.844878][T17537] ? __radix_tree_lookup+0x21f/0x2c0 [ 985.844919][T17537] genl_rcv_msg+0x55c/0x800 [ 985.844967][T17537] ? __pfx_genl_rcv_msg+0x10/0x10 [ 985.845010][T17537] ? __pfx_netdev_nl_napi_get_doit+0x10/0x10 [ 985.845074][T17537] netlink_rcv_skb+0x158/0x420 [ 985.845113][T17537] ? __pfx_genl_rcv_msg+0x10/0x10 [ 985.845159][T17537] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 985.845215][T17537] ? netlink_deliver_tap+0x1ae/0xd30 [ 985.845259][T17537] genl_rcv+0x28/0x40 [ 985.845297][T17537] netlink_unicast+0x5a7/0x870 [ 985.845342][T17537] ? __pfx_netlink_unicast+0x10/0x10 [ 985.845381][T17537] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 985.845417][T17537] ? __lock_acquire+0xb97/0x1ce0 [ 985.845467][T17537] netlink_sendmsg+0x8d1/0xdd0 [ 985.845513][T17537] ? __pfx_netlink_sendmsg+0x10/0x10 [ 985.845554][T17537] ? aa_sock_msg_perm.constprop.0+0x100/0x1d0 [ 985.845593][T17537] ____sys_sendmsg+0xa95/0xc70 [ 985.845639][T17537] ? copy_msghdr_from_user+0x10a/0x160 [ 985.845677][T17537] ? __pfx_____sys_sendmsg+0x10/0x10 [ 985.845742][T17537] ___sys_sendmsg+0x134/0x1d0 [ 985.845781][T17537] ? __pfx____sys_sendmsg+0x10/0x10 [ 985.845855][T17537] ? __mutex_unlock_slowpath+0x140/0x800 [ 985.845906][T17537] __sys_sendmsg+0x16d/0x220 [ 985.845945][T17537] ? __pfx___sys_sendmsg+0x10/0x10 [ 985.846011][T17537] do_syscall_64+0xcd/0x490 [ 985.846060][T17537] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 985.846091][T17537] RIP: 0033:0x7f5f7f38ebe9 [ 985.846117][T17537] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 985.846147][T17537] RSP: 002b:00007f5f801ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 985.846177][T17537] RAX: ffffffffffffffda RBX: 00007f5f7f5b5fa0 RCX: 00007f5f7f38ebe9 [ 985.846198][T17537] RDX: 0000000000000084 RSI: 0000200000000c40 RDI: 0000000000000003 [ 985.846218][T17537] RBP: 00007f5f801ad090 R08: 0000000000000000 R09: 0000000000000000 [ 985.846238][T17537] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 985.846258][T17537] R13: 00007f5f7f5b6038 R14: 00007f5f7f5b5fa0 R15: 00007ffec91a33c8 [ 985.846299][T17537] [ 987.107372][T17547] random: crng reseeded on system resumption [ 988.262529][T17559] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2303'. [ 988.313305][T17560] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2303'. [ 991.241021][T17630] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2313'. [ 991.886440][T17636] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2315'. [ 991.952428][T17638] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2315'. [ 995.198190][T17678] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2325'. [ 995.288993][T17678] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2325'. [ 998.184557][ T1304] ieee802154 phy0 wpan0: encryption failed: -22 [ 998.191119][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 999.661587][T17723] random: crng reseeded on system resumption [ 999.827973][ T5875] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 999.844639][ T5875] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 999.853147][ T5875] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 999.862066][ T5875] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 999.872044][ T5875] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1000.960721][T17724] chnl_net:caif_netlink_parms(): no params data found [ 1001.569046][T17724] bridge0: port 1(bridge_slave_0) entered blocking state [ 1001.587789][T17724] bridge0: port 1(bridge_slave_0) entered disabled state [ 1001.609838][T17724] bridge_slave_0: entered allmulticast mode [ 1001.632730][T17724] bridge_slave_0: entered promiscuous mode [ 1001.670522][T17724] bridge0: port 2(bridge_slave_1) entered blocking state [ 1001.699921][T17724] bridge0: port 2(bridge_slave_1) entered disabled state [ 1001.740828][T17724] bridge_slave_1: entered allmulticast mode [ 1001.752943][T17724] bridge_slave_1: entered promiscuous mode [ 1001.927245][ T5875] Bluetooth: hci4: command tx timeout [ 1002.059945][T17724] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1002.110474][T17724] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1002.599709][T17724] team0: Port device team_slave_0 added [ 1002.650556][T17724] team0: Port device team_slave_1 added [ 1002.862644][T17724] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1002.890687][T17724] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1002.963372][T17724] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1003.020567][T17724] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1003.032363][T17724] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1003.076335][T17724] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1003.371206][T17724] hsr_slave_0: entered promiscuous mode [ 1003.409532][T17724] hsr_slave_1: entered promiscuous mode [ 1003.435097][T17724] debugfs: 'hsr0' already exists in 'hsr' [ 1003.441011][T17724] Cannot create hsr debugfs directory [ 1003.993948][ T5875] Bluetooth: hci4: command tx timeout [ 1004.985859][T17787] random: crng reseeded on system resumption [ 1005.081878][T17724] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1005.375016][T17724] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1005.392555][T17724] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1005.432602][T17724] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1006.074954][ T5875] Bluetooth: hci4: command tx timeout [ 1006.209090][T17724] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1006.922812][T17724] 8021q: adding VLAN 0 to HW filter on device team0 [ 1007.083304][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 1007.090585][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1007.709232][ T1095] bridge0: port 2(bridge_slave_1) entered blocking state [ 1007.716449][ T1095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1008.168520][ T5875] Bluetooth: hci4: command tx timeout [ 1008.823324][T17724] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1009.975352][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.381997][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.556164][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.591700][T17724] veth0_vlan: entered promiscuous mode [ 1010.610581][T17724] veth1_vlan: entered promiscuous mode [ 1010.747944][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1010.807846][T17724] veth0_macvtap: entered promiscuous mode [ 1010.832441][T17724] veth1_macvtap: entered promiscuous mode [ 1010.892891][T17724] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1010.908559][T17724] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1010.930908][ T49] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.947821][ T49] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.973780][ T49] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1010.988668][ T49] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1011.492497][ T36] bridge_slave_1: left allmulticast mode [ 1011.506200][ T36] bridge_slave_1: left promiscuous mode [ 1011.538554][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.589761][ T36] bridge_slave_0: left allmulticast mode [ 1011.604211][ T36] bridge_slave_0: left promiscuous mode [ 1011.615228][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1012.499158][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1012.512312][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1012.526108][ T36] bond0 (unregistering): Released all slaves [ 1012.748300][T11215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1012.775285][T11215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1012.981394][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1013.001633][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1013.403139][T17910] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2335'. [ 1013.470043][T17913] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2335'. [ 1014.983069][T17936] kafs: addr_prefs: Too many elements in string [ 1015.225734][T17942] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2379'. [ 1015.237854][T17941] netlink: 354 bytes leftover after parsing attributes in process `syz.1.2379'. [ 1016.067463][T17952] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2382'. [ 1016.127925][T17954] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2382'. [ 1016.460622][T16378] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1016.482982][T16378] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1016.494622][T16378] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1016.506607][T16378] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1016.515946][T16378] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1016.619272][T17972] FAULT_INJECTION: forcing a failure. [ 1016.619272][T17972] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1016.684064][T17972] CPU: 1 UID: 0 PID: 17972 Comm: syz.1.2386 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1016.684107][T17972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1016.684124][T17972] Call Trace: [ 1016.684135][T17972] [ 1016.684148][T17972] dump_stack_lvl+0x16c/0x1f0 [ 1016.684190][T17972] should_fail_ex+0x512/0x640 [ 1016.684236][T17972] _copy_to_user+0x32/0xd0 [ 1016.684286][T17972] simple_read_from_buffer+0xcb/0x170 [ 1016.684340][T17972] proc_fail_nth_read+0x197/0x240 [ 1016.684376][T17972] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1016.684411][T17972] ? rw_verify_area+0xcf/0x6c0 [ 1016.684447][T17972] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1016.684479][T17972] vfs_read+0x1e4/0xcf0 [ 1016.684519][T17972] ? __pfx___mutex_lock+0x10/0x10 [ 1016.684555][T17972] ? __pfx_vfs_read+0x10/0x10 [ 1016.684601][T17972] ? __fget_files+0x20e/0x3c0 [ 1016.684658][T17972] ksys_read+0x12a/0x250 [ 1016.684692][T17972] ? __pfx_ksys_read+0x10/0x10 [ 1016.684723][T17972] ? keyctl_read_key+0x126/0x4f0 [ 1016.684767][T17972] do_syscall_64+0xcd/0x490 [ 1016.684809][T17972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1016.684839][T17972] RIP: 0033:0x7f5f7f38d5fc [ 1016.684862][T17972] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1016.684891][T17972] RSP: 002b:00007f5f801ad030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1016.684919][T17972] RAX: ffffffffffffffda RBX: 00007f5f7f5b5fa0 RCX: 00007f5f7f38d5fc [ 1016.684938][T17972] RDX: 000000000000000f RSI: 00007f5f801ad0a0 RDI: 0000000000000003 [ 1016.684956][T17972] RBP: 00007f5f801ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1016.684974][T17972] R10: 0000000000000006 R11: 0000000000000246 R12: 0000000000000001 [ 1016.684992][T17972] R13: 00007f5f7f5b6038 R14: 00007f5f7f5b5fa0 R15: 00007ffec91a33c8 [ 1016.685032][T17972] [ 1017.216188][ T36] hsr_slave_0: left promiscuous mode [ 1017.222598][ T36] hsr_slave_1: left promiscuous mode [ 1017.229136][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1017.237863][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1017.250662][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1017.258666][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1017.292232][ T36] veth1_macvtap: left promiscuous mode [ 1017.299224][ T36] veth1_vlan: left promiscuous mode [ 1017.306209][ T36] veth0_vlan: left promiscuous mode [ 1017.783533][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1017.824455][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1018.555029][ T5875] Bluetooth: hci5: command tx timeout [ 1019.056646][T17965] chnl_net:caif_netlink_parms(): no params data found [ 1019.089084][T17994] random: crng reseeded on system resumption [ 1019.804035][T17965] bridge0: port 1(bridge_slave_0) entered blocking state [ 1019.812897][T17965] bridge0: port 1(bridge_slave_0) entered disabled state [ 1019.820467][T17965] bridge_slave_0: entered allmulticast mode [ 1019.828550][T17965] bridge_slave_0: entered promiscuous mode [ 1019.892333][ T36] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1019.912229][T18010] lo: entered allmulticast mode [ 1019.918228][T17965] bridge0: port 2(bridge_slave_1) entered blocking state [ 1019.928440][T17965] bridge0: port 2(bridge_slave_1) entered disabled state [ 1019.938897][T17965] bridge_slave_1: entered allmulticast mode [ 1019.947599][T17965] bridge_slave_1: entered promiscuous mode [ 1019.971871][T18010] lo: left allmulticast mode [ 1020.010273][ T36] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.013623][T18010] blktrace: Concurrent blktraces are not allowed on loop2 [ 1020.109272][T17965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1020.130598][T17965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1020.298384][ T36] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.347584][T17965] team0: Port device team_slave_0 added [ 1020.462995][T17965] team0: Port device team_slave_1 added [ 1020.548761][ T36] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1020.672091][T16378] Bluetooth: hci5: command tx timeout [ 1020.719210][T17965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1020.726395][T17965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.753898][T17965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1020.767135][T17965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1020.774620][T17965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1020.838212][T17965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1021.481438][T18032] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2393'. [ 1021.483603][T18034] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2393'. [ 1021.543674][T17965] hsr_slave_0: entered promiscuous mode [ 1021.552678][T17965] hsr_slave_1: entered promiscuous mode [ 1021.680207][ T36] bridge_slave_1: left allmulticast mode [ 1021.686305][ T36] bridge_slave_1: left promiscuous mode [ 1021.697403][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1021.714970][ T36] bridge_slave_0: left allmulticast mode [ 1021.735223][ T36] bridge_slave_0: left promiscuous mode [ 1021.758352][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1022.012774][T18052] FAULT_INJECTION: forcing a failure. [ 1022.012774][T18052] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1022.036569][T18052] CPU: 0 UID: 0 PID: 18052 Comm: syz.1.2396 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1022.036613][T18052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1022.036630][T18052] Call Trace: [ 1022.036641][T18052] [ 1022.036653][T18052] dump_stack_lvl+0x16c/0x1f0 [ 1022.036703][T18052] should_fail_ex+0x512/0x640 [ 1022.036748][T18052] _copy_to_user+0x32/0xd0 [ 1022.036804][T18052] simple_read_from_buffer+0xcb/0x170 [ 1022.036856][T18052] proc_fail_nth_read+0x197/0x240 [ 1022.036890][T18052] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1022.036927][T18052] ? rw_verify_area+0xcf/0x6c0 [ 1022.036965][T18052] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1022.036996][T18052] vfs_read+0x1e4/0xcf0 [ 1022.037035][T18052] ? __pfx___mutex_lock+0x10/0x10 [ 1022.037073][T18052] ? __pfx_vfs_read+0x10/0x10 [ 1022.037117][T18052] ? __fget_files+0x20e/0x3c0 [ 1022.037160][T18052] ksys_read+0x12a/0x250 [ 1022.037191][T18052] ? __pfx_ksys_read+0x10/0x10 [ 1022.037234][T18052] do_syscall_64+0xcd/0x490 [ 1022.037274][T18052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1022.037302][T18052] RIP: 0033:0x7f5f7f38d5fc [ 1022.037326][T18052] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1022.037354][T18052] RSP: 002b:00007f5f801ad030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1022.037382][T18052] RAX: ffffffffffffffda RBX: 00007f5f7f5b5fa0 RCX: 00007f5f7f38d5fc [ 1022.037402][T18052] RDX: 000000000000000f RSI: 00007f5f801ad0a0 RDI: 0000000000000006 [ 1022.037421][T18052] RBP: 00007f5f801ad090 R08: 0000000000000000 R09: 0000000000000000 [ 1022.037439][T18052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1022.037456][T18052] R13: 00007f5f7f5b6038 R14: 00007f5f7f5b5fa0 R15: 00007ffec91a33c8 [ 1022.037496][T18052] [ 1022.718685][ T5875] Bluetooth: hci5: command tx timeout [ 1023.070926][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1023.090871][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1023.102697][ T36] bond0 (unregistering): Released all slaves [ 1024.696609][T18083] FAULT_INJECTION: forcing a failure. [ 1024.696609][T18083] name failslab, interval 1, probability 0, space 0, times 0 [ 1024.729341][T18083] CPU: 0 UID: 0 PID: 18083 Comm: syz.4.2400 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1024.729383][T18083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1024.729401][T18083] Call Trace: [ 1024.729412][T18083] [ 1024.729424][T18083] dump_stack_lvl+0x16c/0x1f0 [ 1024.729465][T18083] should_fail_ex+0x512/0x640 [ 1024.729504][T18083] ? kmem_cache_alloc_lru_noprof+0x5f/0x3b0 [ 1024.729546][T18083] should_failslab+0xc2/0x120 [ 1024.729585][T18083] kmem_cache_alloc_lru_noprof+0x72/0x3b0 [ 1024.729622][T18083] ? proc_alloc_inode+0x25/0x200 [ 1024.729663][T18083] ? __pfx_proc_alloc_inode+0x10/0x10 [ 1024.729698][T18083] proc_alloc_inode+0x25/0x200 [ 1024.729734][T18083] alloc_inode+0x61/0x240 [ 1024.729777][T18083] new_inode+0x22/0x1c0 [ 1024.729820][T18083] proc_pid_make_inode+0x22/0x160 [ 1024.729859][T18083] proc_pident_instantiate+0x85/0x310 [ 1024.729918][T18083] proc_pident_lookup+0x1f5/0x270 [ 1024.729968][T18083] __lookup_slow+0x251/0x460 [ 1024.730014][T18083] ? __pfx___lookup_slow+0x10/0x10 [ 1024.730091][T18083] ? lookup_fast+0x156/0x610 [ 1024.730129][T18083] walk_component+0x353/0x5b0 [ 1024.730164][T18083] link_path_walk+0x511/0xe20 [ 1024.730215][T18083] path_lookupat+0x15a/0x6d0 [ 1024.730255][T18083] filename_lookup+0x4cb/0x5f0 [ 1024.730292][T18083] ? __pfx_filename_lookup+0x10/0x10 [ 1024.730352][T18083] ? __pfx_kfree_link+0x10/0x10 [ 1024.730406][T18083] ? getname_kernel+0x52/0x370 [ 1024.730448][T18083] ? __asan_memcpy+0x3c/0x60 [ 1024.730488][T18083] kern_path+0x35/0x50 [ 1024.730521][T18083] tomoyo_realpath_nofollow+0x87/0xf0 [ 1024.730564][T18083] ? __pfx_tomoyo_realpath_nofollow+0x10/0x10 [ 1024.730604][T18083] ? tomoyo_domain+0xbb/0x150 [ 1024.730632][T18083] ? tomoyo_init_request_info+0x101/0x370 [ 1024.730668][T18083] tomoyo_find_next_domain+0x2a8/0x20b0 [ 1024.730710][T18083] ? __pfx_tomoyo_find_next_domain+0x10/0x10 [ 1024.730760][T18083] tomoyo_bprm_check_security+0x12e/0x1d0 [ 1024.730805][T18083] ? tomoyo_bprm_check_security+0x120/0x1d0 [ 1024.730854][T18083] security_bprm_check+0x1b9/0x1e0 [ 1024.730885][T18083] bprm_execve+0x81a/0x1640 [ 1024.730935][T18083] ? __pfx_bprm_execve+0x10/0x10 [ 1024.730965][T18083] ? copy_string_kernel+0x460/0x520 [ 1024.731005][T18083] do_execveat_common.isra.0+0x4a5/0x610 [ 1024.731048][T18083] __x64_sys_execveat+0xda/0x120 [ 1024.731086][T18083] do_syscall_64+0xcd/0x490 [ 1024.731126][T18083] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1024.731156][T18083] RIP: 0033:0x7f2e0738ebe9 [ 1024.731180][T18083] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1024.731207][T18083] RSP: 002b:00007f2e08250038 EFLAGS: 00000246 ORIG_RAX: 0000000000000142 [ 1024.731237][T18083] RAX: ffffffffffffffda RBX: 00007f2e075b5fa0 RCX: 00007f2e0738ebe9 [ 1024.731258][T18083] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 000000000000000a [ 1024.731276][T18083] RBP: 00007f2e08250090 R08: 0000000000001000 R09: 0000000000000000 [ 1024.731295][T18083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 1024.731312][T18083] R13: 00007f2e075b6038 R14: 00007f2e075b5fa0 R15: 00007ffc8906e098 [ 1024.731353][T18083] [ 1025.045229][ T5875] Bluetooth: hci5: command tx timeout [ 1025.601953][T18094] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2403'. [ 1025.642740][T18096] random: crng reseeded on system resumption [ 1025.720053][T18094] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2403'. [ 1026.439341][ T36] hsr_slave_0: left promiscuous mode [ 1026.489791][ T36] hsr_slave_1: left promiscuous mode [ 1026.509059][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1026.532085][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1026.552022][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1026.581544][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1026.646649][ T36] veth1_macvtap: left promiscuous mode [ 1026.652593][ T36] veth1_vlan: left promiscuous mode [ 1026.668696][ T36] veth0_vlan: left promiscuous mode [ 1027.298171][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1027.341187][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1027.948793][T17965] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1028.025313][T17965] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1028.056351][T17965] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1028.094662][T17965] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1028.413385][T18143] FAULT_INJECTION: forcing a failure. [ 1028.413385][T18143] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1028.447031][T18143] CPU: 0 UID: 0 PID: 18143 Comm: syz.3.2410 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1028.447075][T18143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1028.447093][T18143] Call Trace: [ 1028.447102][T18143] [ 1028.447114][T18143] dump_stack_lvl+0x16c/0x1f0 [ 1028.447155][T18143] should_fail_ex+0x512/0x640 [ 1028.447200][T18143] _copy_from_user+0x2e/0xd0 [ 1028.447246][T18143] kvm_vm_ioctl+0x520/0x4000 [ 1028.447289][T18143] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1028.447341][T18143] ? kasan_quarantine_put+0x10a/0x240 [ 1028.447373][T18143] ? lockdep_hardirqs_on+0x7c/0x110 [ 1028.447412][T18143] ? find_held_lock+0x2b/0x80 [ 1028.447444][T18143] ? tomoyo_path_number_perm+0x295/0x580 [ 1028.447486][T18143] ? tomoyo_path_number_perm+0x18d/0x580 [ 1028.447522][T18143] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1028.447570][T18143] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1028.447615][T18143] ? do_vfs_ioctl+0x128/0x14f0 [ 1028.447658][T18143] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 1028.447714][T18143] ? find_held_lock+0x2b/0x80 [ 1028.447742][T18143] ? hook_file_ioctl_common+0x145/0x410 [ 1028.447788][T18143] ? __fget_files+0x20e/0x3c0 [ 1028.447824][T18143] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 1028.447853][T18143] __x64_sys_ioctl+0x18e/0x210 [ 1028.447906][T18143] do_syscall_64+0xcd/0x490 [ 1028.447943][T18143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1028.447972][T18143] RIP: 0033:0x7f731cb8ebe9 [ 1028.447994][T18143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1028.448022][T18143] RSP: 002b:00007f731da8e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1028.448050][T18143] RAX: ffffffffffffffda RBX: 00007f731cdb5fa0 RCX: 00007f731cb8ebe9 [ 1028.448069][T18143] RDX: 0000000000000003 RSI: 000000004068aea3 RDI: 0000000000000003 [ 1028.448087][T18143] RBP: 00007f731da8e090 R08: 0000000000000000 R09: 0000000000000000 [ 1028.448105][T18143] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1028.448123][T18143] R13: 00007f731cdb6038 R14: 00007f731cdb5fa0 R15: 00007ffd556c1e38 [ 1028.448160][T18143] [ 1028.845163][T17965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1028.950326][T18148] random: crng reseeded on system resumption [ 1029.182256][T18156] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2412'. [ 1029.202371][T18157] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2412'. [ 1029.398624][T17965] 8021q: adding VLAN 0 to HW filter on device team0 [ 1029.439311][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1029.446685][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1029.571445][T16336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1029.578724][T16336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1030.739035][T17965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1030.851257][T18189] random: crng reseeded on system resumption [ 1031.037604][T17965] veth0_vlan: entered promiscuous mode [ 1031.068490][T17965] veth1_vlan: entered promiscuous mode [ 1031.862080][T17965] veth0_macvtap: entered promiscuous mode [ 1031.893624][T17965] veth1_macvtap: entered promiscuous mode [ 1032.073781][T17965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.099915][T17965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.129326][ T3544] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.171377][ T3544] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.188790][ T3544] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.293943][ T3544] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.435250][T18221] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2421'. [ 1032.448551][T18221] netlink: 338 bytes leftover after parsing attributes in process `syz.1.2421'. [ 1032.642740][T16336] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.692300][T16336] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.911870][ T3544] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.933733][ T3544] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1034.879952][T16378] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1034.891309][T16378] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1034.904729][T16378] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1034.920190][T16378] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1034.928262][T16378] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1035.001827][T18285] random: crng reseeded on system resumption [ 1035.218233][T18286] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2432'. [ 1035.669562][T18289] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2432'. [ 1035.979313][T18302] FAULT_INJECTION: forcing a failure. [ 1035.979313][T18302] name failslab, interval 1, probability 0, space 0, times 0 [ 1036.062951][T18302] CPU: 1 UID: 0 PID: 18302 Comm: syz.2.2433 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1036.062981][T18302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1036.062992][T18302] Call Trace: [ 1036.062998][T18302] [ 1036.063006][T18302] dump_stack_lvl+0x16c/0x1f0 [ 1036.063034][T18302] should_fail_ex+0x512/0x640 [ 1036.063061][T18302] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 1036.063086][T18302] should_failslab+0xc2/0x120 [ 1036.063111][T18302] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1036.063134][T18302] ? security_file_alloc+0x34/0x2b0 [ 1036.063163][T18302] security_file_alloc+0x34/0x2b0 [ 1036.063188][T18302] init_file+0x93/0x4c0 [ 1036.063215][T18302] alloc_empty_file+0x73/0x1e0 [ 1036.063244][T18302] path_openat+0xda/0x2cb0 [ 1036.063265][T18302] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.063292][T18302] ? __pfx_path_openat+0x10/0x10 [ 1036.063320][T18302] do_filp_open+0x20b/0x470 [ 1036.063343][T18302] ? __pfx_do_filp_open+0x10/0x10 [ 1036.063380][T18302] ? alloc_fd+0x471/0x7d0 [ 1036.063405][T18302] do_sys_openat2+0x11b/0x1d0 [ 1036.063434][T18302] ? __pfx_do_sys_openat2+0x10/0x10 [ 1036.063465][T18302] ? __fget_files+0x20e/0x3c0 [ 1036.063489][T18302] __x64_sys_openat+0x174/0x210 [ 1036.063525][T18302] ? __pfx___x64_sys_openat+0x10/0x10 [ 1036.063554][T18302] ? ksys_write+0x1ac/0x250 [ 1036.063583][T18302] do_syscall_64+0xcd/0x490 [ 1036.063608][T18302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.063627][T18302] RIP: 0033:0x7f96d658ebe9 [ 1036.063643][T18302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1036.063662][T18302] RSP: 002b:00007f96d73a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1036.063680][T18302] RAX: ffffffffffffffda RBX: 00007f96d67b6180 RCX: 00007f96d658ebe9 [ 1036.063692][T18302] RDX: 0000000000040302 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 1036.063704][T18302] RBP: 00007f96d73a2090 R08: 0000000000000000 R09: 0000000000000000 [ 1036.063715][T18302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1036.063727][T18302] R13: 00007f96d67b6218 R14: 00007f96d67b6180 R15: 00007ffec59d3c38 [ 1036.063749][T18302] [ 1036.923572][T18287] chnl_net:caif_netlink_parms(): no params data found [ 1037.034550][T16378] Bluetooth: hci2: command tx timeout [ 1037.889047][T18287] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.914422][T18287] bridge0: port 1(bridge_slave_0) entered disabled state [ 1037.923054][T18287] bridge_slave_0: entered allmulticast mode [ 1037.939737][T18287] bridge_slave_0: entered promiscuous mode [ 1037.979759][T18287] bridge0: port 2(bridge_slave_1) entered blocking state [ 1038.004136][T18287] bridge0: port 2(bridge_slave_1) entered disabled state [ 1038.023923][T18287] bridge_slave_1: entered allmulticast mode [ 1038.045490][T18287] bridge_slave_1: entered promiscuous mode [ 1038.381748][T18287] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1038.416946][T18287] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1038.594095][T18287] team0: Port device team_slave_0 added [ 1038.636041][T18287] team0: Port device team_slave_1 added [ 1038.823169][T18337] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2441'. [ 1038.842391][T18287] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1038.860567][T18287] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1038.913935][T18287] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1038.944188][T18339] netlink: 338 bytes leftover after parsing attributes in process `syz.2.2441'. [ 1038.956769][T18287] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1038.984702][T18287] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1039.072090][T18287] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1039.118255][T16378] Bluetooth: hci2: command tx timeout [ 1039.500233][T18287] hsr_slave_0: entered promiscuous mode [ 1039.517707][T18287] hsr_slave_1: entered promiscuous mode [ 1039.528518][T18287] debugfs: 'hsr0' already exists in 'hsr' [ 1039.537015][T18287] Cannot create hsr debugfs directory [ 1040.443520][T18287] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1040.708736][T18287] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.091115][T18287] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1041.198683][T16378] Bluetooth: hci2: command tx timeout [ 1041.382813][T18287] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1042.278219][T18380] FAULT_INJECTION: forcing a failure. [ 1042.278219][T18380] name failslab, interval 1, probability 0, space 0, times 0 [ 1042.291905][T18380] CPU: 1 UID: 0 PID: 18380 Comm: syz.4.2449 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1042.291949][T18380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1042.291968][T18380] Call Trace: [ 1042.291978][T18380] [ 1042.291990][T18380] dump_stack_lvl+0x16c/0x1f0 [ 1042.292034][T18380] should_fail_ex+0x512/0x640 [ 1042.292083][T18380] should_failslab+0xc2/0x120 [ 1042.292121][T18380] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 1042.292156][T18380] ? do_raw_spin_lock+0x12c/0x2b0 [ 1042.292199][T18380] ? inet_bind2_bucket_create+0x36/0x580 [ 1042.292229][T18380] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1042.292277][T18380] inet_bind2_bucket_create+0x36/0x580 [ 1042.292311][T18380] __inet_hash_connect+0x1501/0x1e30 [ 1042.292356][T18380] ? __pfx___inet6_check_established+0x10/0x10 [ 1042.292410][T18380] ? __pfx___inet_hash_connect+0x10/0x10 [ 1042.292454][T18380] ? inet6_hash_connect+0xe2/0x180 [ 1042.292503][T18380] tcp_v6_connect+0x1301/0x2170 [ 1042.292536][T18380] ? aa_label_sk_perm+0x195/0x600 [ 1042.292581][T18380] ? __pfx_tcp_v6_connect+0x10/0x10 [ 1042.292613][T18380] ? find_held_lock+0x2b/0x80 [ 1042.292668][T18380] ? __lock_acquire+0xb97/0x1ce0 [ 1042.292716][T18380] ? __inet_stream_connect+0x917/0xf60 [ 1042.292742][T18380] __inet_stream_connect+0x917/0xf60 [ 1042.292782][T18380] ? __pfx___inet_stream_connect+0x10/0x10 [ 1042.292843][T18380] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1042.292894][T18380] ? __pfx_inet_stream_connect+0x10/0x10 [ 1042.292927][T18380] ? __local_bh_enable_ip+0xa4/0x120 [ 1042.292968][T18380] ? __pfx_inet_stream_connect+0x10/0x10 [ 1042.292996][T18380] inet_stream_connect+0x57/0xa0 [ 1042.293029][T18380] __sys_connect_file+0x141/0x1a0 [ 1042.293066][T18380] __sys_connect+0x13b/0x160 [ 1042.293100][T18380] ? __pfx___sys_connect+0x10/0x10 [ 1042.293147][T18380] ? xfd_validate_state+0x61/0x180 [ 1042.293190][T18380] ? __sys_setsockopt+0x140/0x1a0 [ 1042.293237][T18380] __x64_sys_connect+0x72/0xb0 [ 1042.293268][T18380] ? lockdep_hardirqs_on+0x7c/0x110 [ 1042.293306][T18380] do_syscall_64+0xcd/0x490 [ 1042.293349][T18380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1042.293376][T18380] RIP: 0033:0x7f2e0738ebe9 [ 1042.293401][T18380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1042.293428][T18380] RSP: 002b:00007f2e08250038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1042.293456][T18380] RAX: ffffffffffffffda RBX: 00007f2e075b5fa0 RCX: 00007f2e0738ebe9 [ 1042.293476][T18380] RDX: 000000000000001b RSI: 00002000000018c0 RDI: 0000000000000003 [ 1042.293495][T18380] RBP: 00007f2e07411e19 R08: 0000000000000000 R09: 0000000000000000 [ 1042.293514][T18380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1042.293531][T18380] R13: 00007f2e075b6038 R14: 00007f2e075b5fa0 R15: 00007ffc8906e098 [ 1042.293572][T18380] [ 1042.311726][T18287] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1042.614619][T18287] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1042.708291][T18287] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1042.758147][T18287] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1043.188414][T18287] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1043.274053][T16378] Bluetooth: hci2: command tx timeout [ 1043.282443][T18287] 8021q: adding VLAN 0 to HW filter on device team0 [ 1043.319427][T11215] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.326691][T11215] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1043.423460][T16336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.430747][T16336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1044.648224][T18287] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1044.897310][T18287] veth0_vlan: entered promiscuous mode [ 1044.967282][T18287] veth1_vlan: entered promiscuous mode [ 1045.095673][T18287] veth0_macvtap: entered promiscuous mode [ 1045.143298][T18287] veth1_macvtap: entered promiscuous mode [ 1045.277676][T18287] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1045.335563][T16336] bridge_slave_1: left allmulticast mode [ 1045.348792][T16336] bridge_slave_1: left promiscuous mode [ 1045.371169][T16336] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.028931][T16336] bridge_slave_0: left allmulticast mode [ 1046.054019][T16336] bridge_slave_0: left promiscuous mode [ 1046.059922][T16336] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.863654][T16336] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1046.881558][T16336] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1046.895473][T16336] bond0 (unregistering): Released all slaves [ 1046.927579][T18287] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1047.166902][ T1095] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.187733][ T1095] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.303105][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.325174][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1048.209783][T11215] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.223648][T11215] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1048.348501][ T1095] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1048.393111][ T1095] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1049.626487][T18491] zswap: compressor not available [ 1050.928985][ T5875] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1050.944168][ T5875] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1050.952806][ T5875] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1050.963360][ T5875] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1050.971395][ T5875] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1053.084130][T16336] hsr_slave_1: left promiscuous mode [ 1053.090365][T16336] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1053.114735][T16378] Bluetooth: hci3: command tx timeout [ 1053.134037][T16336] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1053.235386][T16336] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.246659][T16336] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1053.438686][T16336] veth1_macvtap: left promiscuous mode [ 1053.454839][T16336] veth1_vlan: left promiscuous mode [ 1053.464780][T16336] veth0_vlan: left promiscuous mode [ 1055.158338][T16336] team0 (unregistering): Port device team_slave_1 removed [ 1055.204550][T16378] Bluetooth: hci3: command tx timeout [ 1055.295270][T16336] team0 (unregistering): Port device team_slave_0 removed [ 1056.511560][T18508] chnl_net:caif_netlink_parms(): no params data found [ 1057.252547][T18508] bridge0: port 1(bridge_slave_0) entered blocking state [ 1057.266103][T18508] bridge0: port 1(bridge_slave_0) entered disabled state [ 1057.274338][T16378] Bluetooth: hci3: command tx timeout [ 1057.284795][T18508] bridge_slave_0: entered allmulticast mode [ 1057.293635][T18508] bridge_slave_0: entered promiscuous mode [ 1057.313524][T18508] bridge0: port 2(bridge_slave_1) entered blocking state [ 1057.321755][T18508] bridge0: port 2(bridge_slave_1) entered disabled state [ 1057.330527][T18508] bridge_slave_1: entered allmulticast mode [ 1057.339080][T18508] bridge_slave_1: entered promiscuous mode [ 1057.576406][T16336] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.740848][T16336] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.888889][T18508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1057.977432][T16336] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.003359][T18604] ================================================================== [ 1058.011550][T18604] BUG: KASAN: slab-use-after-free in force_devcd_write+0x312/0x340 [ 1058.019467][T18604] Read of size 8 at addr ffff888025141000 by task syz.2.2483/18604 [ 1058.027376][T18604] [ 1058.029743][T18604] CPU: 0 UID: 0 PID: 18604 Comm: syz.2.2483 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1058.029784][T18604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1058.029802][T18604] Call Trace: [ 1058.029812][T18604] [ 1058.029824][T18604] dump_stack_lvl+0x116/0x1f0 [ 1058.029864][T18604] print_report+0xcd/0x630 [ 1058.029902][T18604] ? __virt_addr_valid+0x81/0x610 [ 1058.029937][T18604] ? __phys_addr+0xe8/0x180 [ 1058.029972][T18604] ? force_devcd_write+0x312/0x340 [ 1058.030007][T18604] kasan_report+0xe0/0x110 [ 1058.030043][T18604] ? force_devcd_write+0x312/0x340 [ 1058.030079][T18604] force_devcd_write+0x312/0x340 [ 1058.030116][T18604] ? __pfx_force_devcd_write+0x10/0x10 [ 1058.030153][T18604] ? __debugfs_file_get+0x1fe/0x840 [ 1058.030194][T18604] ? __pfx___debugfs_file_get+0x10/0x10 [ 1058.030241][T18604] full_proxy_write+0x12e/0x1a0 [ 1058.030287][T18604] ? __pfx_full_proxy_write+0x10/0x10 [ 1058.030330][T18604] vfs_write+0x29d/0x11d0 [ 1058.030367][T18604] ? __pfx___mutex_lock+0x10/0x10 [ 1058.030413][T18604] ? __pfx_vfs_write+0x10/0x10 [ 1058.030465][T18604] ? __fget_files+0x20e/0x3c0 [ 1058.030504][T18604] ksys_write+0x12a/0x250 [ 1058.030539][T18604] ? __pfx_ksys_write+0x10/0x10 [ 1058.030578][T18604] do_syscall_64+0xcd/0x490 [ 1058.030626][T18604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1058.030654][T18604] RIP: 0033:0x7f96d658ebe9 [ 1058.030678][T18604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1058.030705][T18604] RSP: 002b:00007f96d73e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1058.030736][T18604] RAX: ffffffffffffffda RBX: 00007f96d67b5fa0 RCX: 00007f96d658ebe9 [ 1058.030760][T18604] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000005 [ 1058.030779][T18604] RBP: 00007f96d6611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1058.030799][T18604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1058.030819][T18604] R13: 00007f96d67b6038 R14: 00007f96d67b5fa0 R15: 00007ffec59d3c38 [ 1058.030850][T18604] [ 1058.030861][T18604] [ 1058.239525][T18604] Allocated by task 1166: [ 1058.243961][T18604] kasan_save_stack+0x33/0x60 [ 1058.248661][T18604] kasan_save_track+0x14/0x30 [ 1058.253525][T18604] __kasan_kmalloc+0xaa/0xb0 [ 1058.258217][T18604] __kmalloc_node_track_caller_noprof+0x221/0x510 [ 1058.264834][T18604] kmalloc_reserve+0xef/0x2c0 [ 1058.269557][T18604] pskb_expand_head+0x238/0x1030 [ 1058.274533][T18604] batadv_skb_head_push+0xf5/0x290 [ 1058.279675][T18604] batadv_send_skb_packet+0x11b/0x780 [ 1058.285072][T18604] batadv_iv_send_outstanding_bat_ogm_packet+0x734/0x920 [ 1058.292195][T18604] process_one_work+0x9cc/0x1b70 [ 1058.297163][T18604] worker_thread+0x6c8/0xf10 [ 1058.301877][T18604] kthread+0x3c5/0x780 [ 1058.305963][T18604] ret_from_fork+0x5d4/0x6f0 [ 1058.310615][T18604] ret_from_fork_asm+0x1a/0x30 [ 1058.315406][T18604] [ 1058.317826][T18604] Freed by task 1166: [ 1058.321898][T18604] kasan_save_stack+0x33/0x60 [ 1058.326606][T18604] kasan_save_track+0x14/0x30 [ 1058.331300][T18604] kasan_save_free_info+0x3b/0x60 [ 1058.336349][T18604] __kasan_slab_free+0x60/0x70 [ 1058.341137][T18604] kfree+0x2b4/0x4d0 [ 1058.345042][T18604] skb_free_head+0x114/0x210 [ 1058.349736][T18604] skb_release_data+0x795/0x9e0 [ 1058.354606][T18604] sk_skb_reason_drop+0x129/0x1a0 [ 1058.359748][T18604] __netif_receive_skb_core.constprop.0+0x57a/0x48c0 [ 1058.366439][T18604] __netif_receive_skb_one_core+0xb0/0x1e0 [ 1058.372283][T18604] __netif_receive_skb+0x1d/0x160 [ 1058.377323][T18604] process_backlog+0x442/0x15e0 [ 1058.382198][T18604] __napi_poll.constprop.0+0xba/0x550 [ 1058.387591][T18604] net_rx_action+0xa9f/0xfe0 [ 1058.392196][T18604] handle_softirqs+0x219/0x8e0 [ 1058.396975][T18604] do_softirq+0xb2/0xf0 [ 1058.401287][T18604] __local_bh_enable_ip+0x100/0x120 [ 1058.406497][T18604] __dev_queue_xmit+0xb06/0x4490 [ 1058.411573][T18604] batadv_send_skb_packet+0x58e/0x780 [ 1058.417054][T18604] batadv_iv_send_outstanding_bat_ogm_packet+0x734/0x920 [ 1058.424166][T18604] process_one_work+0x9cc/0x1b70 [ 1058.429134][T18604] worker_thread+0x6c8/0xf10 [ 1058.433750][T18604] kthread+0x3c5/0x780 [ 1058.437856][T18604] ret_from_fork+0x5d4/0x6f0 [ 1058.442482][T18604] ret_from_fork_asm+0x1a/0x30 [ 1058.447308][T18604] [ 1058.449636][T18604] The buggy address belongs to the object at ffff888025141000 [ 1058.449636][T18604] which belongs to the cache kmalloc-1k of size 1024 [ 1058.463790][T18604] The buggy address is located 0 bytes inside of [ 1058.463790][T18604] freed 1024-byte region [ffff888025141000, ffff888025141400) [ 1058.477557][T18604] [ 1058.479889][T18604] The buggy address belongs to the physical page: [ 1058.486307][T18604] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x25140 [ 1058.495083][T18604] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1058.503677][T18604] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1058.511233][T18604] page_type: f5(slab) [ 1058.515248][T18604] raw: 00fff00000000040 ffff88801b841dc0 ffffea0000961600 dead000000000002 [ 1058.524410][T18604] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1058.533028][T18604] head: 00fff00000000040 ffff88801b841dc0 ffffea0000961600 dead000000000002 [ 1058.541900][T18604] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 1058.550681][T18604] head: 00fff00000000003 ffffea0000945001 00000000ffffffff 00000000ffffffff [ 1058.559720][T18604] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 1058.568490][T18604] page dumped because: kasan: bad access detected [ 1058.575001][T18604] page_owner tracks the page as allocated [ 1058.580716][T18604] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5198, tgid 5198 (init), ts 35624151553, free_ts 0 [ 1058.599757][T18604] post_alloc_hook+0x1c0/0x230 [ 1058.604545][T18604] get_page_from_freelist+0x132b/0x38e0 [ 1058.610114][T18604] __alloc_frozen_pages_noprof+0x261/0x23f0 [ 1058.616130][T18604] alloc_pages_mpol+0x1fb/0x550 [ 1058.621018][T18604] new_slab+0x247/0x330 [ 1058.625209][T18604] ___slab_alloc+0xcf2/0x1740 [ 1058.629914][T18604] __slab_alloc.constprop.0+0x56/0xb0 [ 1058.635305][T18604] __kmalloc_noprof+0x2f2/0x510 [ 1058.640177][T18604] tomoyo_init_log+0x1385/0x2140 [ 1058.645134][T18604] tomoyo_supervisor+0x302/0x13b0 [ 1058.650184][T18604] tomoyo_env_perm+0x191/0x200 [ 1058.654955][T18604] tomoyo_find_next_domain+0xec2/0x20b0 [ 1058.660509][T18604] tomoyo_bprm_check_security+0x12e/0x1d0 [ 1058.666254][T18604] security_bprm_check+0x1b9/0x1e0 [ 1058.671384][T18604] bprm_execve+0x81a/0x1640 [ 1058.675987][T18604] do_execveat_common.isra.0+0x4a5/0x610 [ 1058.681667][T18604] page_owner free stack trace missing [ 1058.687060][T18604] [ 1058.689389][T18604] Memory state around the buggy address: [ 1058.695018][T18604] ffff888025140f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1058.703087][T18604] ffff888025140f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1058.711246][T18604] >ffff888025141000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1058.719421][T18604] ^ [ 1058.723504][T18604] ffff888025141080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1058.731578][T18604] ffff888025141100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1058.739824][T18604] ================================================================== SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1058.813237][T18508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1058.905166][T18604] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 1058.912473][T18604] CPU: 1 UID: 0 PID: 18604 Comm: syz.2.2483 Not tainted 6.17.0-rc1-syzkaller #0 PREEMPT(full) [ 1058.922830][T18604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1058.932913][T18604] Call Trace: [ 1058.936377][T18604] [ 1058.939306][T18604] dump_stack_lvl+0x3d/0x1f0 [ 1058.943904][T18604] vpanic+0x6e8/0x7a0 [ 1058.947908][T18604] ? __pfx_vpanic+0x10/0x10 [ 1058.952415][T18604] ? __pfx_vprintk_emit+0x10/0x10 [ 1058.957455][T18604] ? force_devcd_write+0x312/0x340 [ 1058.962662][T18604] panic+0xca/0xd0 [ 1058.966402][T18604] ? __pfx_panic+0x10/0x10 [ 1058.970867][T18604] ? force_devcd_write+0x312/0x340 [ 1058.975988][T18604] ? preempt_schedule_common+0x44/0xc0 [ 1058.981452][T18604] ? preempt_schedule_thunk+0x16/0x30 [ 1058.987007][T18604] check_panic_on_warn+0xab/0xb0 [ 1058.992043][T18604] end_report+0x107/0x170 [ 1058.996386][T18604] kasan_report+0xee/0x110 [ 1059.001339][T18604] ? force_devcd_write+0x312/0x340 [ 1059.006457][T18604] force_devcd_write+0x312/0x340 [ 1059.011405][T18604] ? __pfx_force_devcd_write+0x10/0x10 [ 1059.016879][T18604] ? __debugfs_file_get+0x1fe/0x840 [ 1059.022179][T18604] ? __pfx___debugfs_file_get+0x10/0x10 [ 1059.027736][T18604] full_proxy_write+0x12e/0x1a0 [ 1059.032596][T18604] ? __pfx_full_proxy_write+0x10/0x10 [ 1059.037974][T18604] vfs_write+0x29d/0x11d0 [ 1059.042594][T18604] ? __pfx___mutex_lock+0x10/0x10 [ 1059.047620][T18604] ? __pfx_vfs_write+0x10/0x10 [ 1059.052540][T18604] ? __fget_files+0x20e/0x3c0 [ 1059.057227][T18604] ksys_write+0x12a/0x250 [ 1059.061818][T18604] ? __pfx_ksys_write+0x10/0x10 [ 1059.066762][T18604] do_syscall_64+0xcd/0x490 [ 1059.071285][T18604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1059.077267][T18604] RIP: 0033:0x7f96d658ebe9 [ 1059.081696][T18604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1059.101829][T18604] RSP: 002b:00007f96d73e4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1059.110244][T18604] RAX: ffffffffffffffda RBX: 00007f96d67b5fa0 RCX: 00007f96d658ebe9 [ 1059.118217][T18604] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000005 [ 1059.126284][T18604] RBP: 00007f96d6611e19 R08: 0000000000000000 R09: 0000000000000000 [ 1059.134801][T18604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1059.142810][T18604] R13: 00007f96d67b6038 R14: 00007f96d67b5fa0 R15: 00007ffec59d3c38 [ 1059.150906][T18604] [ 1059.154264][T18604] Kernel Offset: disabled [ 1059.158679][T18604] Rebooting in 86400 seconds..