last executing test programs: 6m2.700353695s ago: executing program 1 (id=814): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r0, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000005840)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_FLAGS={0x8, 0x4, 0x1}, @HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "a060292f83d9"}]}, 0x28}, 0x1, 0x100000000000000, 0x0, 0x20000041}, 0x800) 6m2.149202937s ago: executing program 1 (id=817): syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), 0xffffffffffffffff) mmap$auto(0x3, 0x4, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x1200, 0x0, 0xfffffffffffffffd) write$auto(0x3, 0x0, 0x7fffffff) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) openat$auto_tracing_free_buffer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/free_buffer\x00', 0x200, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x5) getxattr$auto(&(0x7f0000000000)='}[,&*}\x00', &(0x7f0000000080)='-\x00', 0x0, 0x6) r2 = memfd_create$auto(0x0, 0xe) r3 = socket(0x2, 0x1, 0x106) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) setsockopt$auto(r3, 0x1, 0x21, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) write$auto(0x3, 0x0, 0xfdf3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x1d, 0x2, 0x6) bind$auto(0x3, &(0x7f00000000c0), 0xf) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/veth0/disable_ipv6\x00', 0x40802, 0x0) pwrite64$auto(r4, 0x0, 0x0, 0xe950eaf) close_range$auto(0x2, 0x8, 0x0) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x500) shutdown$auto(r1, 0x9) io_uring_register$auto(0x2, 0x0, 0x0, 0x3) 6m0.63699813s ago: executing program 1 (id=827): r0 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x3, 0x3, 0xeb1, r0, 0x8000) ioctl$auto_VHOST_SET_OWNER(r0, 0xaf01, 0x5) fspick$auto(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x5) syz_genetlink_get_family_id$auto_802_15_4_mac(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$auto(0x3, 0x4008af13, 0x38) 5m59.988084236s ago: executing program 1 (id=829): socket(0xa, 0x2, 0x3a) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bdi/7:7/max_ratio_fine\x00', 0x80, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f00000000c0)=""/17, 0x11) connect$auto(0x3, &(0x7f0000000040)=@l2tp={0x2, 0x0, @local}, 0x55) 5m59.25064877s ago: executing program 1 (id=839): semtimedop$auto(0x7, &(0x7f0000000180)={0xffff, 0x7}, 0x1, &(0x7f00000001c0)={0x7, 0x80000000}) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/system/cpu/cpuidle/current_driver\x00', 0x8000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/102, 0x66) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) socket(0x11, 0x3, 0x2) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) getsockopt$auto(0x6, 0x107, 0x6, 0x0, 0x0) open(&(0x7f0000000080)='./file0\x00', 0x10100, 0x0) 5m58.117407298s ago: executing program 1 (id=838): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x4000000028000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0xc8, 0x400454de, 0x5c8d) sysfs$auto(0x2, 0x10000000000002d, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x4000000028000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0xc8, 0x400454de, 0x5c8d) (async) sysfs$auto(0x2, 0x10000000000002d, 0x0) (async) fsopen$auto(0x0, 0x1) (async) close_range$auto(0x2, 0x8000, 0x0) (async) 5m42.780224231s ago: executing program 32 (id=838): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x4000000028000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0xc8, 0x400454de, 0x5c8d) sysfs$auto(0x2, 0x10000000000002d, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8000, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) mmap$auto(0x0, 0x4000b, 0x7, 0x9b72, 0x7, 0x4000000028000) (async) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) (async) ioctl$auto(0xc8, 0x400454de, 0x5c8d) (async) sysfs$auto(0x2, 0x10000000000002d, 0x0) (async) fsopen$auto(0x0, 0x1) (async) close_range$auto(0x2, 0x8000, 0x0) (async) 10.646708493s ago: executing program 0 (id=2797): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) mmap$auto(0x0, 0x810004, 0x9b6, 0x8000000008011, 0x20000000000003, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0xc0000, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000001c0), r1) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200025bd7000fbdbdf25040000000800040006000000501e02801400be800400b9800400ab80040061000400148008003b00", @ANYRES32=r2, @ANYBLOB="2c0010800800d600ac14140d04000d000c00680005000000000000000400b7800400ad800400438004003c800400d200"], 0x6c}, 0x1, 0x0, 0x0, 0x10000004}, 0x40080) r4 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_safesetid_gid_file_fops_securityfs(r4, 0x0, 0x0) 9.235660664s ago: executing program 0 (id=2800): bpf$auto(0x597, &(0x7f0000000040)=@prog_bind_map={0xffffffffffffffff, 0xffffffffffffffff, 0x8}, 0xd0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0xa, 0x5, 0x84) io_uring_setup$auto(0x3, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/hugetlb.2MB.max_usage_in_bytes\x00', 0x80880, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) read$auto(r0, 0x0, 0x20) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x6) io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86) io_uring_register$auto(0x2, 0x6, 0x0, 0x1) 8.174555511s ago: executing program 0 (id=2804): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r0 = open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xffffffffffffffff, 0x0) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) write$auto_msr_fops_msr(r0, 0x0, 0x0) getsockname$auto(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0xaea) fcntl$auto(0x0, 0x407, 0x100000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) memfd_create$auto(&(0x7f0000000000)='A\x00\x00\x00\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\f\x00\x00\v\x00E\xdb\x81\xd9\xd8\xe640\xc6\xa4Sr\x82\xcc\"K\xe1IIT\x00\x00\x00', 0xe) rseq$auto(0x0, 0x8000, 0x0, 0x6) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4602, 0x0) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) mmap$auto(0x0, 0x3, 0x3, 0x200000000eb1, r2, 0x8000) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto(0x3, 0x4008af21, 0x38) 7.247398338s ago: executing program 2 (id=2805): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x80000000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r0 = openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f00000000c0), 0xd80, 0x0) read$auto(r0, 0x0, 0x2) r1 = openat$auto_proc_oom_score_adj_operations_base(0xffffffffffffff9c, &(0x7f0000002600)='/proc/self/oom_score_adj\x00', 0x101a02, 0x0) write$auto_proc_oom_score_adj_operations_base(r1, 0x0, 0x2d) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) sysfs$auto(0x2, 0x4e, 0x0) sysfs$auto(0x6, 0x1, 0xb) mmap$auto(0x9, 0xfffffffffffffffb, 0x7f, 0xfffffffffffffff7, 0xffffffffffffffff, 0x9) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bluetooth/hci0/rfkill9/power/runtime_active_time\x00', 0x80, 0x0) mmap$auto(0x0, 0x400002, 0xfffffffffffffffe, 0x9b72, 0xe8, 0x8000) prctl$auto(0x41555856, 0xd, 0x2008, 0x0, 0x0) r2 = socket(0xa, 0x3, 0x3a) ioctl$auto(r2, 0x890b, 0x1) fsopen$auto(0x0, 0x6) 6.695060836s ago: executing program 4 (id=2808): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) mmap$auto(0x0, 0x810004, 0x9b6, 0x8000000008011, 0x20000000000003, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0xc0000, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000001c0), r1) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200025bd7000fbdbdf25040000000800040006000000501e02801400be800400b9800400ab80040061000400148008003b00", @ANYRES32=r2, @ANYBLOB="2c0010800800d600ac14140d04000d000c00680005000000000000000400b7800400ad800400438004003c800400d200"], 0x6c}, 0x1, 0x0, 0x0, 0x10000004}, 0x40080) r4 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_safesetid_gid_file_fops_securityfs(r4, 0x0, 0x0) 6.553424211s ago: executing program 2 (id=2809): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NFC_CMD_DEV_DOWN(0xffffffffffffffff, 0x0, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0xffffffff8cf23b7f, 0x2, 0x20000000000000) poll$auto(0x0, 0x4, 0xfffff800) ioctl$auto_SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000001f40), 0xffffffffffffffff) io_uring_setup$auto(0x1, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f00000006c0)={{0x0, 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c030000000000", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/auto_online_blocks\x00', 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) gettid() r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fbdbdf251200000008000900010000000c00018008000100", @ANYRES32=r5, @ANYBLOB="0800070006000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008800) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0x1f, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="a1000040", @ANYRES16=r3, @ANYBLOB="10002abd7000ffdbdf25110000004000018014000200766c616e3000000000000000000000001400020076657468300000000000000000000000140002006d616376746170300000000000000000180001801400020076657468315f766c616e000000000000040001800c0001800800030007000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40810}, 0x8000045) geteuid() sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0x6, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES32=r2], 0x1168}, 0x1, 0x0, 0x0, 0x890}, 0x40000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'pimreg\x00'}) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_clone3(&(0x7f00000003c0)={0x102200, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 6.297842649s ago: executing program 3 (id=2810): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) mmap$auto(0x0, 0x810004, 0x9b6, 0x8000000008011, 0x20000000000003, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0xc0000, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000001c0), r1) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="200025bd7000fbdbdf25040000000800040006000000501e02801400be800400b9800400ab80040061000400148008003b00", @ANYRES32=r2, @ANYBLOB="2c0010800800d600ac14140d04000d000c00680005000000000000000400b7800400ad800400438004003c800400d200"], 0x6c}, 0x1, 0x0, 0x0, 0x10000004}, 0x40080) r4 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_safesetid_gid_file_fops_securityfs(r4, 0x0, 0x0) 6.250338532s ago: executing program 0 (id=2811): bpf$auto(0xa, &(0x7f0000000300)=@batch={0x80000001, 0x3, 0x7, 0x7, 0xd, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x457) socket(0x1b, 0x4, 0x1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/admmidi2\x00', 0x129281, 0x0) socket(0x2a, 0x2, 0x0) write$auto(0x3, 0x0, 0x8d1) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0xe, 0x0, &(0x7f0000000040)=0xb0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, 0x0) socket(0xa249c0fca002d1ce, 0x5, 0x81) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptye8\x00', 0x149201, 0x0) sysfs$auto(0x2, 0xd, 0x0) mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x8000, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) read$auto(r3, 0x0, 0x5) read$auto_snd_pcm_oss_f_reg_pcm_oss(r3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x64842, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') getdents$auto(r4, 0x0, 0xd2) getdents$auto(r1, 0x0, 0xb) setns(r4, 0x10000000) socket(0xa, 0x1, 0x84) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x22000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, 0x0) ioctl$auto_TIOCSWINSZ2(r2, 0x5414, 0x0) openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/40s\x00', 0x48880, 0x0) 5.801900651s ago: executing program 4 (id=2812): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000240)="d0f040d9b878d39a13f87bcd7ecda3a22db0fed1a9a37c608c01137108c2ded3681738408e71652e9364986ddda420dfb7734d8b51b27029a0e4c76f99282baa791a3735390bcfb2aa3ea842e36f49c79fb988e50428607ad2b5559db495d718129c1b00519433230adce69d", 0x80000000, 0x0, 0xd, 0x0, 0x4}, 0x800009}, 0x80000005, 0x100500) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x100007}, 0x31cd3c7c, 0xb1) sendmsg$auto_IEEE802154_LLSEC_GETPARAMS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24008051) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x30, r2, 0x11, 0x70bd2b, 0x25dfdbfe, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x4000}, @NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0xc055}, 0x20000000) mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) ioctl$auto(0x3, 0x80044dfb, 0x38) connect$auto(0x3, &(0x7f00000000c0), 0x55) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/pcmC0D0p\x00', 0x400, 0x0) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r4, 0x1002, 0x0, 0x0, 0x0, 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r5 = socket(0x11, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r5, 0x8954, 0x0) sendmsg$auto_OVS_METER_CMD_DEL(r0, &(0x7f0000001700)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000016c0)={&(0x7f0000001300)=ANY=[@ANYBLOB="a0030000", @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=r4, @ANYBLOB="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"], 0x3a0}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) ioctl$auto_snd_pcm_f_ops_pcm(r3, 0x5, &(0x7f0000000300)="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") 5.397924641s ago: executing program 3 (id=2813): mmap$auto(0x0, 0x20009, 0x4000000000e1, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x7779) openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000100), 0x2200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vbi11\x00', 0x80700, 0x0) io_uring_setup$auto(0x8000, &(0x7f0000000140)={0x2, 0x8, 0x3, 0x0, 0x7, 0x101, 0xffffffffffffffff, [0x95, 0x9], {0xffffff80, 0x9, 0x10, 0xb831, 0x3, 0xdbb, 0x3, 0xee9, 0x2}, {0x8001, 0x6, 0x8, 0x1, 0x8, 0x0, 0x4, 0x6, 0xf}}) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x6, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r2, 0x4008af00, &(0x7f0000000000)=0x8) r3 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/trace_marker\x00', 0x2000, 0x0) fstatfs$auto(r3, &(0x7f00000002c0)={0x0, 0xec7b, 0x0, 0x3, 0x7, 0x6b294653, 0x8, {[0xfff, 0x78]}, 0xca, 0x1, 0x1, [0x6, 0xffff, 0x80000001, 0x5]}) openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/011/001\x00', 0x121002, 0x0) mmap$auto(0x0, 0x380000, 0x2, 0x28000000008011, 0x7, 0x0) readv$auto(r0, &(0x7f0000000240)={&(0x7f0000000140)="ace194f86a7825667cab43cce1e27963e2184eacc8afbf82749c0628d39e332d64eb0855d3411469b5d2c5af0cd1ea97918f57a7cf23e43e5375bce200860657cdaa5dbe2c01b599dbdf2e2ca3c65147befe1ddc2dfd38ccd722fe6d2c6aec67b1db0b9d01953468590efc22096d918119de2f303ddf0c64224d00a0be8f801c999b56d6250e76930afb9f58af2c62beed2bfb54422d08c953fabf55d189c9302c0832b1591d75476c87b48e669f0cd6100ebc1a67d347a478f421c33afb8440091bef297408aa4d965585c6e30c3178211f3e51e49480556adf24b17c11c5b7", 0x8}, 0x3) r4 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/buffer_percent\x00', 0x1, 0x0) bpf$auto(0x3, &(0x7f0000000080)=@bpf_attr_4={0x3, r1, 0x109a, r4}, 0x3) 5.053977584s ago: executing program 0 (id=2814): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x4000008000) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TDLS_OPER(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000e40)={0x3c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "e59954082586bc3ad68380a90659c016443901a24cd21d8a4e5e9deb34bdf7318e8589eb"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x40000c4) r3 = socket(0x2, 0x1, 0x106) r4 = openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/tracing_thresh\x00', 0x0, 0x0) read$auto_tracing_thresh_fops_trace(r4, 0x0, 0x0) setsockopt$auto(r3, 0x1, 0x21, 0x0, 0x9) pipe$auto(&(0x7f0000000000)=r3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_WRITE(r5, 0x40085503, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) fallocate$auto(r0, 0x7, 0x80000000, 0x800) write$auto(0x3, 0x0, 0xfdf3) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r7 = socket(0xa, 0x3, 0x6) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r7, 0x0, 0x20008040) sendmsg$auto_CGROUPSTATS_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r7}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xd0) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) 4.421747103s ago: executing program 4 (id=2815): mmap$auto(0x0, 0x20009, 0x4000000000e1, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x7779) openat$auto_trace_fops_debugfs(0xffffffffffffff9c, &(0x7f0000000100), 0x2200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) memfd_create$auto(&(0x7f0000000040)='A^^\x02\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\t8\f\x00\x00\v\x00\x82\xcc\"K\xe1IIT\x00'/54, 0x5) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vbi11\x00', 0x80700, 0x0) io_uring_setup$auto(0x8000, &(0x7f0000000140)={0x2, 0x8, 0x3, 0x0, 0x7, 0x101, 0xffffffffffffffff, [0x95, 0x9], {0xffffff80, 0x9, 0x10, 0xb831, 0x3, 0xdbb, 0x3, 0xee9, 0x2}, {0x8001, 0x6, 0x8, 0x1, 0x8, 0x0, 0x4, 0x6, 0xf}}) ppoll$auto(&(0x7f0000000140)={0xffffffffffffffff, 0x3ff, 0x4}, 0x7f, 0x0, 0x0, 0x8) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x4, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x6, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) ioctl$auto_VHOST_SET_FEATURES2(r2, 0x4008af00, &(0x7f0000000000)=0x8) r3 = openat$auto_tracing_mark_fops_trace(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/tracing/trace_marker\x00', 0x2000, 0x0) fstatfs$auto(r3, &(0x7f00000002c0)={0x0, 0xec7b, 0x0, 0x3, 0x7, 0x6b294653, 0x8, {[0xfff, 0x78]}, 0xca, 0x1, 0x1, [0x6, 0xffff, 0x80000001, 0x5]}) openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/011/001\x00', 0x121002, 0x0) mmap$auto(0x0, 0x380000, 0x2, 0x28000000008011, 0x7, 0x0) readv$auto(r0, &(0x7f0000000240)={&(0x7f0000000140)="ace194f86a7825667cab43cce1e27963e2184eacc8afbf82749c0628d39e332d64eb0855d3411469b5d2c5af0cd1ea97918f57a7cf23e43e5375bce200860657cdaa5dbe2c01b599dbdf2e2ca3c65147befe1ddc2dfd38ccd722fe6d2c6aec67b1db0b9d01953468590efc22096d918119de2f303ddf0c64224d00a0be8f801c999b56d6250e76930afb9f58af2c62beed2bfb54422d08c953fabf55d189c9302c0832b1591d75476c87b48e669f0cd6100ebc1a67d347a478f421c33afb8440091bef297408aa4d965585c6e30c3178211f3e51e49480556adf24b17c11c5b7", 0x8}, 0x3) write$auto_buffer_percent_fops_trace(0xffffffffffffffff, &(0x7f0000000040)='3\x00', 0x2) bpf$auto(0x3, &(0x7f0000000080)=@bpf_attr_4={0x3, r1, 0x109a}, 0x3) 4.39018944s ago: executing program 2 (id=2816): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NFC_CMD_DEV_DOWN(0xffffffffffffffff, 0x0, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0xffffffff8cf23b7f, 0x2, 0x20000000000000) poll$auto(0x0, 0x4, 0xfffff800) ioctl$auto_SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000001f40), 0xffffffffffffffff) io_uring_setup$auto(0x1, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f00000006c0)={{0x0, 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c030000000000", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/auto_online_blocks\x00', 0x2, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r2, 0x0, 0x0) gettid() r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fbdbdf251200000008000900010000000c00018008000100", @ANYRES32=r5, @ANYBLOB="0800070006000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008800) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0x1f, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="a1000040", @ANYRES16=r3, @ANYBLOB="10002abd7000ffdbdf25110000004000018014000200766c616e3000000000000000000000001400020076657468300000000000000000000000140002006d616376746170300000000000000000180001801400020076657468315f766c616e000000000000040001800c0001800800030007000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40810}, 0x8000045) geteuid() sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0x6, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES32=r2], 0x1168}, 0x1, 0x0, 0x0, 0x890}, 0x40000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'pimreg\x00'}) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_clone3(&(0x7f00000003c0)={0x102200, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 4.388380724s ago: executing program 3 (id=2817): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) mmap$auto(0x0, 0x810004, 0x9b6, 0x8000000008011, 0x20000000000003, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0xc0000, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) r3 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000001c0), r1) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="2c0010800800d600ac14140d04000d000c00680005000000000000000400b7800400ad800400438004003c800400d200"], 0x6c}, 0x1, 0x0, 0x0, 0x10000004}, 0x40080) r4 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_safesetid_gid_file_fops_securityfs(r4, 0x0, 0x0) 4.013523359s ago: executing program 0 (id=2818): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x0, 0x0, 0x6f4) bpf$auto(0x2, 0x0, 0xf) mmap$auto(0x0, 0xe983, 0x20000000000df, 0xd12, 0x401, 0x408000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) iopl$auto(0x3) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000340), 0xffffffffffffffff) mmap$auto(0x3, 0x4, 0x4000000000dc, 0x40eb2, 0xa1c, 0x8) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x53, 0x9) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 3.590344063s ago: executing program 3 (id=2819): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x1b, &(0x7f0000000000), 0x1) mmap$auto(0x0, 0x810004, 0x9b6, 0x8000000008011, 0x20000000000003, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/fs/jfs/loglevel\x00', 0xc0000, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) syz_genetlink_get_family_id$auto_ipvs(&(0x7f00000001c0), r1) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, 0x0, 0x40080) r2 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) write$auto_safesetid_gid_file_fops_securityfs(r2, 0x0, 0x0) 3.400135557s ago: executing program 4 (id=2820): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) r0 = open(0x0, 0xeee00, 0x31) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) write$auto(0x3, 0x0, 0x100082) prctl$auto(0x10000000024, 0x2, 0x2008, 0x4000000c, 0x80001) lseek$auto(0x3, 0x7fffffffffffffff, 0x1) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xffffffffffffffff, 0x0) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) write$auto_msr_fops_msr(r0, 0x0, 0x0) getsockname$auto(0xffffffffffffffff, &(0x7f0000000240), &(0x7f0000000280)=0xaea) fcntl$auto(0x0, 0x407, 0x100000) mlockall$auto(0x7) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) memfd_create$auto(&(0x7f0000000000)='A\x00\x00\x00\x00\xef\x97\x8aY\x00\x00\xd2\x8c\xb05\x03\\\xb2\xbf247{\xde\f\x00\x00\v\x00E\xdb\x81\xd9\xd8\xe640\xc6\xa4Sr\x82\xcc\"K\xe1IIT\x00\x00\x00', 0xe) rseq$auto(0x0, 0x8000, 0x0, 0x6) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) finit_module$auto(0x3, 0xfffffffffffffffe, 0x400000000004) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) preadv2$auto(0x3, &(0x7f0000001000)={0x0, 0x9}, 0x5, 0xffffffffffffffff, 0x7, 0x2e) 3.146946608s ago: executing program 3 (id=2821): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x2, 0x0, 0x2009, 0x0, 0x1f, 0xb}, 0x2}, 0x5, 0x20000005) write$auto(0x3, 0x0, 0xfffffdef) fcntl$auto(0x3, 0x4, 0xa553) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0xa) getrandom$auto(0x0, 0x6000000, 0x3) setsockopt$auto(0x3, 0x0, 0x21, 0x0, 0x28) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x90) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x0, 0x53, 0x0, 0x0) connect$auto(0x3, &(0x7f00000000c0), 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x100, 0x0, 0xfffffffffffffffd) fcntl$auto(0xffffffffffffffff, 0x401, 0x5) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, 0x0, 0x40) write$auto(0x3, 0x0, 0xfffffdef) unshare$auto(0x40000080) 2.348351781s ago: executing program 2 (id=2822): mmap$auto(0x0, 0x400008, 0xe1, 0x9b7e, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/syz_tun/accept_ra_rt_info_min_plen\x00', 0x2, 0x0) rseq$auto(0x0, 0x8000, 0x0, 0x6) geteuid() madvise$auto(0x0, 0xffffffffffbf0005, 0x19) select$auto(0x3, 0x0, 0x0, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x51) openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, 0x0, 0x20840, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x101202, 0x0) ioperm$auto(0x7, 0x6, 0x1) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, 0x0, 0x40400c5) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x500, 0x0) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 2.073803109s ago: executing program 4 (id=2823): bpf$auto(0xa, &(0x7f0000000300)=@batch={0x80000001, 0x3, 0x7, 0x7, 0xd, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x457) socket(0x1b, 0x4, 0x1) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000240)='/dev/admmidi2\x00', 0x129281, 0x0) socket(0x2a, 0x2, 0x0) write$auto(0x3, 0x0, 0x8d1) r1 = socket(0xa, 0x1, 0x84) getsockopt$auto(r1, 0x84, 0xe, 0x0, &(0x7f0000000040)=0xb0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_STATUS32(r0, 0xc0245720, 0x0) socket(0xa249c0fca002d1ce, 0x5, 0x81) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptye8\x00', 0x149201, 0x0) sysfs$auto(0x2, 0xd, 0x0) mmap$auto(0x0, 0x400008, 0x6, 0x9b72, 0x8000, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) read$auto(r3, 0x0, 0x5) read$auto_snd_pcm_oss_f_reg_pcm_oss(r3, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x64842, 0x0) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/time\x00') getdents$auto(r4, 0x0, 0xd2) getdents$auto(r1, 0x0, 0xb) setns(r4, 0x10000000) socket(0xa, 0x1, 0x84) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000280)='/dev/snd/controlC1\x00', 0x22000, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, 0x0) ioctl$auto_TIOCSWINSZ2(r2, 0x5414, 0x0) openat$auto_mon_fops_stat_usb_mon(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/40s\x00', 0x48880, 0x0) 968.326033ms ago: executing program 3 (id=2824): openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) sendmsg$auto_NFC_CMD_DEV_DOWN(0xffffffffffffffff, 0x0, 0x8000) mremap$auto(0x0, 0x7, 0x3fd6, 0x3, 0x20000000) openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x800, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0xffffffff8cf23b7f, 0x2, 0x20000000000000) poll$auto(0x0, 0x4, 0xfffff800) ioctl$auto_SG_EMULATED_HOST(0xffffffffffffffff, 0x2203, 0x0) connect$auto(0xffffffffffffffff, &(0x7f0000000080), 0x9) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000001f40), 0xffffffffffffffff) io_uring_setup$auto(0x1, 0x0) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = socket(0x11, 0x3, 0x9) sendmmsg$auto(r0, &(0x7f00000006c0)={{0x0, 0x5ac, &(0x7f0000000100)={&(0x7f0000000200)="4c030000000000", 0x49}, 0x5, &(0x7f0000000700), 0x5, 0x1}, 0x5}, 0x2, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/system/memory/auto_online_blocks\x00', 0x2, 0x0) gettid() r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000003040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000003140)={0x0, 0x0, &(0x7f0000003100)={&(0x7f0000003080)=ANY=[@ANYBLOB='\a\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010025bd7000fbdbdf251200000008000900010000000c00018008000100", @ANYRES32=r5, @ANYBLOB="0800070006000000"], 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x20008800) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0x1f, &(0x7f0000000180)={&(0x7f0000000540)=ANY=[@ANYBLOB="a1000040", @ANYRES16=r3, @ANYBLOB="10002abd7000ffdbdf25110000004000018014000200766c616e3000000000000000000000001400020076657468300000000000000000000000140002006d616376746170300000000000000000180001801400020076657468315f766c616e000000000000040001800c0001800800030007000000"], 0x7c}, 0x1, 0x0, 0x0, 0x40810}, 0x8000045) geteuid() sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r0, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000}, 0x6, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES32=r2], 0x1168}, 0x1, 0x0, 0x0, 0x890}, 0x40000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'pimreg\x00'}) madvise$auto(0x0, 0xffffffffffff0001, 0x15) syz_clone3(&(0x7f00000003c0)={0x102200, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, 0x0}, 0x58) 967.475153ms ago: executing program 2 (id=2825): socket(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x801, 0x84) socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x6, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0x1d, 0x2, 0x2) sendmsg$auto_NL80211_CMD_RELOAD_REGDB(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000", @ANYRES64=r0], 0x14}, 0x1, 0x0, 0x0, 0x200408d5}, 0x8800) r1 = socket(0x11, 0x2, 0x4) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NL802154_CMD_GET_INTERFACE(r1, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x4000, 0x4040}, 0x20004010) 877.143666ms ago: executing program 4 (id=2826): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x4000008000) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000e00), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_TDLS_OPER(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000e40)={0x3c, r2, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, "e59954082586bc3ad68380a90659c016443901a24cd21d8a4e5e9deb34bdf7318e8589eb"}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40008c5}, 0x40000c4) r3 = socket(0x2, 0x1, 0x106) r4 = openat$auto_tracing_thresh_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/tracing_thresh\x00', 0x0, 0x0) read$auto_tracing_thresh_fops_trace(r4, 0x0, 0x0) setsockopt$auto(r3, 0x1, 0x21, 0x0, 0x9) pipe$auto(&(0x7f0000000000)=r3) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) io_uring_setup$auto(0x6, 0x0) r5 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000002640), 0x0, 0x0) ioctl$auto_USB_RAW_IOCTL_EP0_WRITE(r5, 0x40085503, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socket$nl_generic(0x10, 0x3, 0x10) fallocate$auto(r0, 0x7, 0x80000000, 0x800) write$auto(0x3, 0x0, 0xfdf3) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, 0x0, 0x20a02, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r6) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) r7 = socket(0xa, 0x3, 0x6) sendmsg$auto_NL802154_CMD_GET_SEC_DEV(r7, 0x0, 0x20008040) sendmsg$auto_CGROUPSTATS_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x0, 0x10, 0x70bd2b, 0x25dfdbfc, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r7}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r5}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0xd0) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) 0s ago: executing program 2 (id=2827): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x0) io_uring_setup$auto(0x6, 0x0) openat$auto_lowpan_control_fops_6lowpan(0xffffffffffffff9c, &(0x7f0000000040), 0x2001, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/011/001\x00', 0x121002, 0x0) mmap$auto(0x0, 0x380000, 0x0, 0x28000000008011, 0x7, 0x0) (fail_nth: 7) kernel console output (not intermixed with test programs): .975085][ T9284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.003573][ T9284] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 323.073825][ T9284] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 323.116014][ T9284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.200510][ T9284] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.235725][ T9284] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.275650][ T9284] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.315198][ T9284] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.599799][ T1145] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.632154][ T9385] netlink: 330 bytes leftover after parsing attributes in process `syz.3.961'. [ 323.638595][ T1145] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.707621][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 323.715507][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 324.168536][ T5844] Bluetooth: hci0: command 0x041b tx timeout [ 326.217494][ T5844] Bluetooth: hci0: command 0x041b tx timeout [ 326.344640][ T9448] Process accounting resumed [ 326.418664][ T9449] netlink: 28 bytes leftover after parsing attributes in process `syz.3.978'. [ 326.462203][ T9449] veth1_macvtap: left promiscuous mode [ 326.520586][ T9446] svc: failed to register nfsdv3 RPC service (errno 111). [ 326.555359][ T9446] svc: failed to register nfsaclv3 RPC service (errno 111). [ 327.043046][ T9463] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 327.282484][ T9473] netlink: 330 bytes leftover after parsing attributes in process `syz.4.987'. [ 327.636956][ T9484] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 327.933521][ T9487] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 327.933739][ T9489] svc: failed to register nfsdv3 RPC service (errno 111). [ 327.977875][ T9499] netlink: 28 bytes leftover after parsing attributes in process `syz.4.993'. [ 327.999673][ T9489] svc: failed to register nfsaclv3 RPC service (errno 111). [ 328.058474][ T9499] veth1_macvtap: left promiscuous mode [ 328.133143][ T9503] netlink: 28 bytes leftover after parsing attributes in process `syz.3.996'. [ 328.260523][ T9503] team0: Port device team_slave_0 removed [ 329.634534][ T9542] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 333.970731][ T9641] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 334.285326][ T9652] Process accounting resumed [ 334.521678][ T9650] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1046'. [ 334.532414][ T9654] netlink: 338 bytes leftover after parsing attributes in process `syz.0.1047'. [ 334.605500][ T9650] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 335.305884][ T9668] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1054'. [ 337.937941][ T9732] Process accounting resumed [ 339.342460][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1074'. [ 340.294754][ T9794] FAULT_INJECTION: forcing a failure. [ 340.294754][ T9794] name failslab, interval 1, probability 0, space 0, times 0 [ 340.349048][ T9794] CPU: 1 UID: 0 PID: 9794 Comm: syz.2.1084 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 340.359896][ T9794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 340.369999][ T9794] Call Trace: [ 340.373313][ T9794] [ 340.376278][ T9794] dump_stack_lvl+0x16c/0x1f0 [ 340.381034][ T9794] should_fail_ex+0x497/0x5b0 [ 340.385791][ T9794] ? fs_reclaim_acquire+0xae/0x150 [ 340.390972][ T9794] should_failslab+0xc2/0x120 [ 340.395738][ T9794] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 340.402187][ T9794] ? event_inject_write+0xbe/0x1ec0 [ 340.407567][ T9794] memdup_user_nul+0x2b/0x110 [ 340.412310][ T9794] event_inject_write+0xbe/0x1ec0 [ 340.417385][ T9794] ? __pfx_event_inject_write+0x10/0x10 [ 340.422993][ T9794] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 340.428665][ T9794] ? rcu_is_watching+0x12/0xc0 [ 340.433468][ T9794] ? trace_lock_acquire+0x14e/0x1f0 [ 340.438709][ T9794] ? ksys_write+0x12b/0x250 [ 340.443275][ T9794] ? __pfx_event_inject_write+0x10/0x10 [ 340.448873][ T9794] vfs_write+0x24c/0x1150 [ 340.453240][ T9794] ? __fget_files+0x1fc/0x3a0 [ 340.457957][ T9794] ? __pfx___mutex_lock+0x10/0x10 [ 340.463048][ T9794] ? __pfx_vfs_write+0x10/0x10 [ 340.467877][ T9794] ? __fget_files+0x206/0x3a0 [ 340.472601][ T9794] ksys_write+0x12b/0x250 [ 340.476963][ T9794] ? __pfx_ksys_write+0x10/0x10 [ 340.481862][ T9794] do_syscall_64+0xcd/0x250 [ 340.486421][ T9794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.492385][ T9794] RIP: 0033:0x7ff053985d29 [ 340.496824][ T9794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 340.516566][ T9794] RSP: 002b:00007ff05487d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 340.525015][ T9794] RAX: ffffffffffffffda RBX: 00007ff053b75fa0 RCX: 00007ff053985d29 [ 340.533016][ T9794] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 340.541017][ T9794] RBP: 00007ff05487d090 R08: 0000000000000000 R09: 0000000000000000 [ 340.549025][ T9794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 340.557036][ T9794] R13: 0000000000000000 R14: 00007ff053b75fa0 R15: 00007ffccc54cab8 [ 340.565068][ T9794] [ 341.022829][ T9801] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1086'. [ 341.047552][ T9809] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 341.077376][ T9801] IPv6: NLM_F_CREATE should be specified when creating new route [ 341.136999][ T9801] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 341.144754][ T9801] IPv6: NLM_F_CREATE should be set when creating new route [ 341.152150][ T9801] IPv6: NLM_F_CREATE should be set when creating new route [ 341.159568][ T9801] IPv6: NLM_F_CREATE should be set when creating new route [ 342.364465][ T29] audit: type=1807 audit(1734540919.558:24): UNKNOWN=$ res=0 [ 342.372084][ T29] audit: type=1802 audit(1734540919.558:25): pid=9854 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.0.1104" res=0 errno=0 [ 342.402522][ T9853] ima: policy update failed [ 342.440586][ T29] audit: type=1802 audit(1734540919.648:26): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1104" res=0 errno=0 [ 342.512947][ T9862] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1113'. [ 342.580137][ T9863] netlink: 'syz.4.1113': attribute type 46 has an invalid length. [ 342.667384][ T9862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.744051][ T9869] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 342.759235][ T9863] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1113'. [ 342.847342][ T9878] netlink: 'syz.4.1113': attribute type 46 has an invalid length. [ 342.967951][ T9862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 343.006384][ T9881] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 343.012956][ T9881] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 343.036567][ T9880] ima: policy update failed [ 343.041469][ T29] audit: type=1802 audit(1734540920.248:27): pid=9880 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1110" res=0 errno=0 [ 343.430830][ T9890] Process accounting resumed [ 344.077349][ T9914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1120'. [ 345.684564][ T9972] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 345.778651][ T9978] FAULT_INJECTION: forcing a failure. [ 345.778651][ T9978] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.841914][ T9978] CPU: 0 UID: 0 PID: 9978 Comm: syz.2.1136 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 345.852683][ T9978] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 345.862839][ T9978] Call Trace: [ 345.866163][ T9978] [ 345.869140][ T9978] dump_stack_lvl+0x16c/0x1f0 [ 345.873889][ T9978] should_fail_ex+0x497/0x5b0 [ 345.878653][ T9978] _copy_to_user+0x32/0xd0 [ 345.883144][ T9978] simple_read_from_buffer+0xd0/0x160 [ 345.888603][ T9978] proc_fail_nth_read+0x198/0x270 [ 345.893701][ T9978] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.899323][ T9978] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 345.904965][ T9978] vfs_read+0x1df/0xbe0 [ 345.909183][ T9978] ? __fget_files+0x1fc/0x3a0 [ 345.913922][ T9978] ? __pfx___mutex_lock+0x10/0x10 [ 345.919012][ T9978] ? __pfx_vfs_read+0x10/0x10 [ 345.923849][ T9978] ? __fget_files+0x206/0x3a0 [ 345.928598][ T9978] ksys_read+0x12b/0x250 [ 345.932901][ T9978] ? __pfx_ksys_read+0x10/0x10 [ 345.937730][ T9978] do_syscall_64+0xcd/0x250 [ 345.942308][ T9978] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.948264][ T9978] RIP: 0033:0x7ff05398473c [ 345.952725][ T9978] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 345.972577][ T9978] RSP: 002b:00007ff05487d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 345.982414][ T9978] RAX: ffffffffffffffda RBX: 00007ff053b75fa0 RCX: 00007ff05398473c [ 345.982461][ T9978] RDX: 000000000000000f RSI: 00007ff05487d0a0 RDI: 0000000000000004 [ 345.982484][ T9978] RBP: 00007ff05487d090 R08: 0000000000000000 R09: 0000000000000000 [ 345.982507][ T9978] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.982529][ T9978] R13: 0000000000000000 R14: 00007ff053b75fa0 R15: 00007ffccc54cab8 [ 345.982572][ T9978] [ 345.982685][ C0] vkms_vblank_simulate: vblank timer overrun [ 346.559429][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1143'. [ 346.575560][ T9983] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1138'. [ 346.595866][ T9983] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 346.603197][ T9983] IPv6: NLM_F_CREATE should be set when creating new route [ 346.610545][ T9983] IPv6: NLM_F_CREATE should be set when creating new route [ 346.617834][ T9983] IPv6: NLM_F_CREATE should be set when creating new route [ 348.044492][T10051] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 348.051019][T10051] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 348.085286][T10049] ima: policy update failed [ 348.092260][ T29] audit: type=1802 audit(1734540925.298:28): pid=10049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1158" res=0 errno=0 [ 348.151114][T10035] openvswitch: netlink: Key type 29 is not supported [ 349.116361][T10092] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1169'. [ 349.305670][T10098] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 350.058430][T10120] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 350.064983][T10120] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 350.131228][T10119] ima: policy update failed [ 350.143594][ T29] audit: type=1802 audit(1734540927.338:29): pid=10119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1177" res=0 errno=0 [ 352.621510][T10168] FAULT_INJECTION: forcing a failure. [ 352.621510][T10168] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 352.650508][T10168] CPU: 1 UID: 0 PID: 10168 Comm: syz.2.1188 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 352.661362][T10168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 352.671481][T10168] Call Trace: [ 352.674813][T10168] [ 352.677789][T10168] dump_stack_lvl+0x16c/0x1f0 [ 352.682536][T10168] should_fail_ex+0x497/0x5b0 [ 352.687290][T10168] _copy_from_user+0x2e/0xd0 [ 352.691946][T10168] copy_msghdr_from_user+0x99/0x160 [ 352.697210][T10168] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 352.703097][T10168] ___sys_sendmsg+0xff/0x1e0 [ 352.707767][T10168] ? __pfx____sys_sendmsg+0x10/0x10 [ 352.713041][T10168] ? __pfx_lock_release+0x10/0x10 [ 352.718108][T10168] ? trace_lock_acquire+0x14e/0x1f0 [ 352.723377][T10168] ? __fget_files+0x206/0x3a0 [ 352.728109][T10168] __sys_sendmsg+0x16e/0x220 [ 352.732762][T10168] ? __pfx___sys_sendmsg+0x10/0x10 [ 352.737959][T10168] do_syscall_64+0xcd/0x250 [ 352.742530][T10168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 352.748475][T10168] RIP: 0033:0x7ff053985d29 [ 352.752927][T10168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 352.772592][T10168] RSP: 002b:00007ff05487d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 352.781070][T10168] RAX: ffffffffffffffda RBX: 00007ff053b75fa0 RCX: 00007ff053985d29 [ 352.789093][T10168] RDX: 0000000000000040 RSI: 0000000020002cc0 RDI: 0000000000000003 [ 352.797201][T10168] RBP: 00007ff05487d090 R08: 0000000000000000 R09: 0000000000000000 [ 352.805309][T10168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 352.813337][T10168] R13: 0000000000000000 R14: 00007ff053b75fa0 R15: 00007ffccc54cab8 [ 352.821379][T10168] [ 354.342050][T10187] syz.0.1193 (10187): /proc/10186/oom_adj is deprecated, please use /proc/10186/oom_score_adj instead. [ 354.578662][T10186] ima: policy update failed [ 354.578811][ T29] audit: type=1802 audit(1734540931.788:30): pid=10186 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1193" res=0 errno=0 [ 355.039481][T10206] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 355.046088][T10206] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 355.211986][T10204] ima: policy update failed [ 355.218035][ T29] audit: type=1802 audit(1734540932.428:31): pid=10204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1201" res=0 errno=0 [ 355.938803][T10227] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1216'. [ 356.529384][T10237] netlink: 'syz.0.1210': attribute type 10 has an invalid length. [ 356.785640][T10237] Process accounting paused [ 356.802887][T10245] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 359.321423][T10293] ima: policy update failed [ 359.326432][ T29] audit: type=1802 audit(1734540936.528:32): pid=10293 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1230" res=0 errno=0 [ 360.258693][T10309] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 360.599521][T10312] HfR: entered promiscuous mode [ 360.632312][T10312] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1235'. [ 360.632415][T10312] HfR: left promiscuous mode [ 361.329065][T10326] FAULT_INJECTION: forcing a failure. [ 361.329065][T10326] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.367468][T10326] CPU: 0 UID: 0 PID: 10326 Comm: syz.2.1241 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 361.378340][T10326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 361.388449][T10326] Call Trace: [ 361.391761][T10326] [ 361.394733][T10326] dump_stack_lvl+0x16c/0x1f0 [ 361.399475][T10326] should_fail_ex+0x497/0x5b0 [ 361.404226][T10326] _copy_from_iter+0x29b/0x1400 [ 361.409152][T10326] ? trace_lock_acquire+0x14e/0x1f0 [ 361.414411][T10326] ? __alloc_skb+0x200/0x380 [ 361.419058][T10326] ? __pfx__copy_from_iter+0x10/0x10 [ 361.424382][T10326] ? __virt_addr_valid+0x1a4/0x590 [ 361.429535][T10326] ? __virt_addr_valid+0x5e/0x590 [ 361.434597][T10326] ? __phys_addr_symbol+0x30/0x80 [ 361.439661][T10326] ? __check_object_size+0x488/0x710 [ 361.444992][T10326] netlink_sendmsg+0x813/0xd70 [ 361.449806][T10326] ? __pfx_netlink_sendmsg+0x10/0x10 [ 361.455132][T10326] ____sys_sendmsg+0x9ae/0xb40 [ 361.459926][T10326] ? copy_msghdr_from_user+0x10b/0x160 [ 361.465424][T10326] ? __pfx_____sys_sendmsg+0x10/0x10 [ 361.470752][T10326] ___sys_sendmsg+0x135/0x1e0 [ 361.475489][T10326] ? __pfx____sys_sendmsg+0x10/0x10 [ 361.480775][T10326] ? __pfx_lock_release+0x10/0x10 [ 361.485829][T10326] ? trace_lock_acquire+0x14e/0x1f0 [ 361.491081][T10326] ? __fget_files+0x206/0x3a0 [ 361.495850][T10326] __sys_sendmsg+0x16e/0x220 [ 361.500484][T10326] ? __pfx___sys_sendmsg+0x10/0x10 [ 361.505670][T10326] do_syscall_64+0xcd/0x250 [ 361.510216][T10326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.516233][T10326] RIP: 0033:0x7ff053985d29 [ 361.520857][T10326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.540668][T10326] RSP: 002b:00007ff05487d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.549122][T10326] RAX: ffffffffffffffda RBX: 00007ff053b75fa0 RCX: 00007ff053985d29 [ 361.557207][T10326] RDX: 0000000000000040 RSI: 0000000020002cc0 RDI: 0000000000000003 [ 361.565211][T10326] RBP: 00007ff05487d090 R08: 0000000000000000 R09: 0000000000000000 [ 361.573204][T10326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.581196][T10326] R13: 0000000000000000 R14: 00007ff053b75fa0 R15: 00007ffccc54cab8 [ 361.589203][T10326] [ 361.592256][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.792114][T10332] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1244'. [ 361.801588][T10328] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 361.808125][T10328] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 361.896137][T10327] ima: policy update failed [ 361.915009][ T29] audit: type=1802 audit(1734540939.118:33): pid=10327 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.1242" res=0 errno=0 [ 363.595666][T10375] netlink: 'syz.0.1257': attribute type 10 has an invalid length. [ 364.646894][T10350] Process accounting paused [ 364.748653][T10384] device-mapper: ioctl: Invalid ioctl structure: name , dev 8000010007 [ 366.319808][T10423] netlink: 354 bytes leftover after parsing attributes in process `syz.4.1275'. [ 366.565521][T10431] netlink: 'syz.0.1279': attribute type 10 has an invalid length. [ 366.583909][T10431] FAULT_INJECTION: forcing a failure. [ 366.583909][T10431] name failslab, interval 1, probability 0, space 0, times 0 [ 366.645761][T10431] CPU: 0 UID: 0 PID: 10431 Comm: syz.0.1279 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 366.656794][T10431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 366.667167][T10431] Call Trace: [ 366.670492][T10431] [ 366.673455][T10431] dump_stack_lvl+0x16c/0x1f0 [ 366.678270][T10431] should_fail_ex+0x497/0x5b0 [ 366.683023][T10431] ? fs_reclaim_acquire+0xae/0x150 [ 366.688199][T10431] should_failslab+0xc2/0x120 [ 366.692950][T10431] kmem_cache_alloc_node_noprof+0x72/0x3b0 [ 366.698832][T10431] ? __alloc_skb+0x2b3/0x380 [ 366.703499][T10431] __alloc_skb+0x2b3/0x380 [ 366.707977][T10431] ? __pfx___alloc_skb+0x10/0x10 [ 366.713062][T10431] ? rtnetlink_rcv_msg+0x3e6/0xea0 [ 366.718251][T10431] netlink_ack+0x164/0xb20 [ 366.722752][T10431] netlink_rcv_skb+0x327/0x410 [ 366.727568][T10431] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 366.733090][T10431] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 366.738453][T10431] ? netlink_deliver_tap+0x1ae/0xca0 [ 366.743807][T10431] netlink_unicast+0x53c/0x7f0 [ 366.748647][T10431] ? __pfx_netlink_unicast+0x10/0x10 [ 366.753989][T10431] ? __phys_addr_symbol+0x30/0x80 [ 366.759072][T10431] ? __check_object_size+0x488/0x710 [ 366.764432][T10431] netlink_sendmsg+0x8b8/0xd70 [ 366.769275][T10431] ? __pfx_netlink_sendmsg+0x10/0x10 [ 366.774628][T10431] ____sys_sendmsg+0x9ae/0xb40 [ 366.779447][T10431] ? copy_msghdr_from_user+0x10b/0x160 [ 366.784982][T10431] ? __pfx_____sys_sendmsg+0x10/0x10 [ 366.790357][T10431] ___sys_sendmsg+0x135/0x1e0 [ 366.795105][T10431] ? __pfx____sys_sendmsg+0x10/0x10 [ 366.800390][T10431] ? __pfx_lock_release+0x10/0x10 [ 366.805470][T10431] ? trace_lock_acquire+0x14e/0x1f0 [ 366.810768][T10431] ? __fget_files+0x206/0x3a0 [ 366.815528][T10431] __sys_sendmsg+0x16e/0x220 [ 366.820187][T10431] ? __pfx___sys_sendmsg+0x10/0x10 [ 366.825388][T10431] do_syscall_64+0xcd/0x250 [ 366.829957][T10431] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 366.835916][T10431] RIP: 0033:0x7fcc09f85d29 [ 366.840374][T10431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 366.860038][T10431] RSP: 002b:00007fcc0ae31038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 366.868515][T10431] RAX: ffffffffffffffda RBX: 00007fcc0a175fa0 RCX: 00007fcc09f85d29 [ 366.876541][T10431] RDX: 0000000000000040 RSI: 0000000020002cc0 RDI: 0000000000000003 [ 366.884560][T10431] RBP: 00007fcc0ae31090 R08: 0000000000000000 R09: 0000000000000000 [ 366.892577][T10431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 366.900601][T10431] R13: 0000000000000000 R14: 00007fcc0a175fa0 R15: 00007ffd15a57738 [ 366.908653][T10431] [ 367.767834][T10444] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 367.774400][T10444] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 367.848410][T10443] ima: policy update failed [ 367.853156][ T29] audit: type=1802 audit(1734540945.058:34): pid=10443 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.1283" res=0 errno=0 [ 368.071840][T10458] netlink: 'syz.0.1289': attribute type 10 has an invalid length. [ 369.885084][T10506] FAULT_INJECTION: forcing a failure. [ 369.885084][T10506] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.925590][T10506] CPU: 1 UID: 0 PID: 10506 Comm: syz.3.1305 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 369.936439][T10506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 369.946566][T10506] Call Trace: [ 369.949893][T10506] [ 369.952881][T10506] dump_stack_lvl+0x16c/0x1f0 [ 369.957629][T10506] should_fail_ex+0x497/0x5b0 [ 369.962378][T10506] _copy_to_user+0x32/0xd0 [ 369.966951][T10506] simple_read_from_buffer+0xd0/0x160 [ 369.972549][T10506] proc_fail_nth_read+0x198/0x270 [ 369.977652][T10506] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 369.983270][T10506] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 369.988858][T10506] vfs_read+0x1df/0xbe0 [ 369.993047][T10506] ? __fget_files+0x1fc/0x3a0 [ 369.997759][T10506] ? __pfx___mutex_lock+0x10/0x10 [ 370.002826][T10506] ? __pfx_vfs_read+0x10/0x10 [ 370.007546][T10506] ? __fget_files+0x206/0x3a0 [ 370.012260][T10506] ksys_read+0x12b/0x250 [ 370.016531][T10506] ? __pfx_ksys_read+0x10/0x10 [ 370.021334][T10506] do_syscall_64+0xcd/0x250 [ 370.025874][T10506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.031808][T10506] RIP: 0033:0x7fc98038473c [ 370.036245][T10506] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 370.055888][T10506] RSP: 002b:00007fc9810da030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 370.064335][T10506] RAX: ffffffffffffffda RBX: 00007fc980575fa0 RCX: 00007fc98038473c [ 370.072335][T10506] RDX: 000000000000000f RSI: 00007fc9810da0a0 RDI: 0000000000000008 [ 370.080334][T10506] RBP: 00007fc9810da090 R08: 0000000000000000 R09: 0000000000000000 [ 370.088331][T10506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.096320][T10506] R13: 0000000000000000 R14: 00007fc980575fa0 R15: 00007ffef809a738 [ 370.104340][T10506] [ 370.107479][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.186435][T10513] FAULT_INJECTION: forcing a failure. [ 370.186435][T10513] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.200457][T10513] CPU: 1 UID: 0 PID: 10513 Comm: syz.2.1310 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 370.211287][T10513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 370.221383][T10513] Call Trace: [ 370.224678][T10513] [ 370.227624][T10513] dump_stack_lvl+0x16c/0x1f0 [ 370.232338][T10513] should_fail_ex+0x497/0x5b0 [ 370.237056][T10513] _copy_from_user+0x2e/0xd0 [ 370.241696][T10513] vhost_vring_ioctl+0x8f3/0x1390 [ 370.246775][T10513] ? __pfx_vhost_vring_ioctl+0x10/0x10 [ 370.252272][T10513] ? vhost_dev_ioctl+0x131/0xe20 [ 370.257256][T10513] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 370.262617][T10513] vhost_net_ioctl+0xe8a/0x16e0 [ 370.267501][T10513] ? __pfx_lock_release+0x10/0x10 [ 370.272637][T10513] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 370.277966][T10513] ? __fget_files+0x206/0x3a0 [ 370.282686][T10513] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 370.288001][T10513] __x64_sys_ioctl+0x190/0x200 [ 370.292907][T10513] do_syscall_64+0xcd/0x250 [ 370.297544][T10513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.303474][T10513] RIP: 0033:0x7ff053985d29 [ 370.307917][T10513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.327639][T10513] RSP: 002b:00007ff05487d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 370.336080][T10513] RAX: ffffffffffffffda RBX: 00007ff053b75fa0 RCX: 00007ff053985d29 [ 370.344086][T10513] RDX: 0000000000000038 RSI: 000000004008af13 RDI: 0000000000000003 [ 370.352094][T10513] RBP: 00007ff05487d090 R08: 0000000000000000 R09: 0000000000000000 [ 370.360095][T10513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.368090][T10513] R13: 0000000000000000 R14: 00007ff053b75fa0 R15: 00007ffccc54cab8 [ 370.376104][T10513] [ 370.379276][ C1] vkms_vblank_simulate: vblank timer overrun [ 370.595014][T10512] ima: policy update failed [ 370.617960][ T29] audit: type=1802 audit(1734540947.828:35): pid=10512 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1309" res=0 errno=0 [ 370.821809][T10527] sg_write: data in/out 32680/1048664 bytes for SCSI command 0x0-- guessing data in; [ 370.821809][T10527] program syz.0.1315 not setting count and/or reply_len properly [ 371.934777][T10574] FAULT_INJECTION: forcing a failure. [ 371.934777][T10574] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.948754][T10574] CPU: 0 UID: 0 PID: 10574 Comm: syz.0.1330 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 371.959598][T10574] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 371.969705][T10574] Call Trace: [ 371.973025][T10574] [ 371.976002][T10574] dump_stack_lvl+0x16c/0x1f0 [ 371.980745][T10574] should_fail_ex+0x497/0x5b0 [ 371.985530][T10574] _copy_to_user+0x32/0xd0 [ 371.990033][T10574] simple_read_from_buffer+0xd0/0x160 [ 371.995484][T10574] proc_fail_nth_read+0x198/0x270 [ 372.000590][T10574] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 372.006213][T10574] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 372.011832][T10574] vfs_read+0x1df/0xbe0 [ 372.016042][T10574] ? __fget_files+0x1fc/0x3a0 [ 372.020785][T10574] ? __pfx___mutex_lock+0x10/0x10 [ 372.025873][T10574] ? __pfx_vfs_read+0x10/0x10 [ 372.030608][T10574] ? __fget_files+0x206/0x3a0 [ 372.035422][T10574] ksys_read+0x12b/0x250 [ 372.039700][T10574] ? __pfx_ksys_read+0x10/0x10 [ 372.044519][T10574] do_syscall_64+0xcd/0x250 [ 372.049096][T10574] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.055113][T10574] RIP: 0033:0x7fcc09f8473c [ 372.059553][T10574] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 372.079275][T10574] RSP: 002b:00007fcc0ae31030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 372.087722][T10574] RAX: ffffffffffffffda RBX: 00007fcc0a175fa0 RCX: 00007fcc09f8473c [ 372.095813][T10574] RDX: 000000000000000f RSI: 00007fcc0ae310a0 RDI: 0000000000000004 [ 372.103805][T10574] RBP: 00007fcc0ae31090 R08: 0000000000000000 R09: 0000000000000000 [ 372.111800][T10574] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 372.119810][T10574] R13: 0000000000000000 R14: 00007fcc0a175fa0 R15: 00007ffd15a57738 [ 372.127910][T10574] [ 373.506586][T10626] netlink: 'syz.2.1346': attribute type 10 has an invalid length. [ 375.037821][T10673] FAULT_INJECTION: forcing a failure. [ 375.037821][T10673] name failslab, interval 1, probability 0, space 0, times 0 [ 375.050678][T10673] CPU: 0 UID: 0 PID: 10673 Comm: syz.4.1366 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 375.061585][T10673] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 375.071684][T10673] Call Trace: [ 375.075110][T10673] [ 375.078087][T10673] dump_stack_lvl+0x16c/0x1f0 [ 375.082820][T10673] should_fail_ex+0x497/0x5b0 [ 375.087552][T10673] ? fs_reclaim_acquire+0xae/0x150 [ 375.092688][T10673] should_failslab+0xc2/0x120 [ 375.097413][T10673] __kmalloc_noprof+0xce/0x4f0 [ 375.102228][T10673] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 375.107888][T10673] ? tomoyo_realpath_from_path+0xbf/0x710 [ 375.113652][T10673] tomoyo_realpath_from_path+0xbf/0x710 [ 375.119253][T10673] ? tomoyo_path_number_perm+0x235/0x5b0 [ 375.124934][T10673] tomoyo_path_number_perm+0x248/0x5b0 [ 375.130456][T10673] ? tomoyo_path_number_perm+0x235/0x5b0 [ 375.136144][T10673] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 375.142202][T10673] ? __pfx_lock_release+0x10/0x10 [ 375.147269][T10673] ? trace_lock_acquire+0x14e/0x1f0 [ 375.152502][T10673] ? lock_acquire+0x2f/0xb0 [ 375.157029][T10673] ? __fget_files+0x40/0x3a0 [ 375.161674][T10673] ? __fget_files+0x206/0x3a0 [ 375.166384][T10673] security_file_ioctl+0x9b/0x240 [ 375.171434][T10673] __x64_sys_ioctl+0xb7/0x200 [ 375.176242][T10673] do_syscall_64+0xcd/0x250 [ 375.180780][T10673] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.186707][T10673] RIP: 0033:0x7fd5bf385d29 [ 375.191319][T10673] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.210953][T10673] RSP: 002b:00007fd5c00f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 375.219400][T10673] RAX: ffffffffffffffda RBX: 00007fd5bf575fa0 RCX: 00007fd5bf385d29 [ 375.227432][T10673] RDX: 0000000000000000 RSI: 0000000080084504 RDI: 0000000000000003 [ 375.235429][T10673] RBP: 00007fd5c00f1090 R08: 0000000000000000 R09: 0000000000000000 [ 375.243435][T10673] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.251438][T10673] R13: 0000000000000000 R14: 00007fd5bf575fa0 R15: 00007ffcc8facf18 [ 375.259462][T10673] [ 375.262592][ C0] vkms_vblank_simulate: vblank timer overrun [ 375.397652][T10673] ERROR: Out of memory at tomoyo_realpath_from_path. [ 375.691450][T10686] FAULT_INJECTION: forcing a failure. [ 375.691450][T10686] name failslab, interval 1, probability 0, space 0, times 0 [ 375.727355][T10686] CPU: 0 UID: 0 PID: 10686 Comm: syz.0.1372 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 375.738307][T10686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 375.748420][T10686] Call Trace: [ 375.751735][T10686] [ 375.754701][T10686] dump_stack_lvl+0x16c/0x1f0 [ 375.759454][T10686] should_fail_ex+0x497/0x5b0 [ 375.764205][T10686] ? fs_reclaim_acquire+0xae/0x150 [ 375.769388][T10686] should_failslab+0xc2/0x120 [ 375.774152][T10686] __kmalloc_noprof+0xce/0x4f0 [ 375.778995][T10686] ? rcu_is_watching+0x12/0xc0 [ 375.783828][T10686] ? kernfs_fop_write_iter+0x223/0x500 [ 375.789334][T10686] kernfs_fop_write_iter+0x223/0x500 [ 375.794766][T10686] vfs_write+0x5ae/0x1150 [ 375.799227][T10686] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 375.805166][T10686] ? __pfx___mutex_lock+0x10/0x10 [ 375.810229][T10686] ? __pfx_vfs_write+0x10/0x10 [ 375.815046][T10686] ksys_write+0x12b/0x250 [ 375.819408][T10686] ? __pfx_ksys_write+0x10/0x10 [ 375.824742][T10686] do_syscall_64+0xcd/0x250 [ 375.829284][T10686] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.835212][T10686] RIP: 0033:0x7fcc09f85d29 [ 375.839651][T10686] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.859296][T10686] RSP: 002b:00007fcc0ae31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 375.867740][T10686] RAX: ffffffffffffffda RBX: 00007fcc0a175fa0 RCX: 00007fcc09f85d29 [ 375.875736][T10686] RDX: 0000000000000004 RSI: 0000000020000100 RDI: 0000000000000003 [ 375.883729][T10686] RBP: 00007fcc0ae31090 R08: 0000000000000000 R09: 0000000000000000 [ 375.891716][T10686] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.899879][T10686] R13: 0000000000000000 R14: 00007fcc0a175fa0 R15: 00007ffd15a57738 [ 375.907893][T10686] [ 375.911103][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.125869][ T29] audit: type=1800 audit(1734540953.328:36): pid=10694 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1373" name="members" dev="configfs" ino=26209 res=0 errno=0 [ 376.146218][ C0] vkms_vblank_simulate: vblank timer overrun [ 376.652937][T10713] syz.2.1376 (10713): attempted to duplicate a private mapping with mremap. This is not supported. [ 377.176105][T10727] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1380'. [ 377.213142][T10727] ›: renamed from veth0_vlan (while UP) [ 379.937502][T10794] FAULT_INJECTION: forcing a failure. [ 379.937502][T10794] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.986785][T10794] CPU: 1 UID: 0 PID: 10794 Comm: syz.0.1397 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 379.997661][T10794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 380.007776][T10794] Call Trace: [ 380.011094][T10794] [ 380.014069][T10794] dump_stack_lvl+0x16c/0x1f0 [ 380.018824][T10794] should_fail_ex+0x497/0x5b0 [ 380.023596][T10794] _copy_from_iter+0x29b/0x1400 [ 380.028580][T10794] ? trace_lock_acquire+0x14e/0x1f0 [ 380.033867][T10794] ? __pfx__copy_from_iter+0x10/0x10 [ 380.039222][T10794] ? __virt_addr_valid+0x1a4/0x590 [ 380.044418][T10794] ? __virt_addr_valid+0x5e/0x590 [ 380.049491][T10794] ? __phys_addr_symbol+0x30/0x80 [ 380.054555][T10794] ? __check_object_size+0x488/0x710 [ 380.059884][T10794] kernfs_fop_write_iter+0x19d/0x500 [ 380.065217][T10794] vfs_write+0x5ae/0x1150 [ 380.069601][T10794] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 380.075453][T10794] ? __pfx___mutex_lock+0x10/0x10 [ 380.080553][T10794] ? __pfx_vfs_write+0x10/0x10 [ 380.085440][T10794] ksys_write+0x12b/0x250 [ 380.089811][T10794] ? __pfx_ksys_write+0x10/0x10 [ 380.094711][T10794] do_syscall_64+0xcd/0x250 [ 380.099342][T10794] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.105271][T10794] RIP: 0033:0x7fcc09f85d29 [ 380.109710][T10794] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.129350][T10794] RSP: 002b:00007fcc0ae31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 380.137819][T10794] RAX: ffffffffffffffda RBX: 00007fcc0a175fa0 RCX: 00007fcc09f85d29 [ 380.145834][T10794] RDX: 0000000000000004 RSI: 0000000020000100 RDI: 0000000000000003 [ 380.153916][T10794] RBP: 00007fcc0ae31090 R08: 0000000000000000 R09: 0000000000000000 [ 380.162014][T10794] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.170022][T10794] R13: 0000000000000000 R14: 00007fcc0a175fa0 R15: 00007ffd15a57738 [ 380.178058][T10794] [ 381.871402][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1414'. [ 381.919571][T10860] netlink: 'syz.3.1412': attribute type 10 has an invalid length. [ 382.192347][T10865] FAULT_INJECTION: forcing a failure. [ 382.192347][T10865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.359824][T10865] CPU: 1 UID: 0 PID: 10865 Comm: syz.2.1417 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 382.370681][T10865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 382.380795][T10865] Call Trace: [ 382.384111][T10865] [ 382.387085][T10865] dump_stack_lvl+0x16c/0x1f0 [ 382.392002][T10865] should_fail_ex+0x497/0x5b0 [ 382.396751][T10865] _copy_to_user+0x32/0xd0 [ 382.401245][T10865] simple_read_from_buffer+0xd0/0x160 [ 382.406706][T10865] proc_fail_nth_read+0x198/0x270 [ 382.411828][T10865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.417460][T10865] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.423117][T10865] vfs_read+0x1df/0xbe0 [ 382.427352][T10865] ? __fget_files+0x1fc/0x3a0 [ 382.432098][T10865] ? __pfx___mutex_lock+0x10/0x10 [ 382.437210][T10865] ? __pfx_vfs_read+0x10/0x10 [ 382.442052][T10865] ? __fget_files+0x206/0x3a0 [ 382.446811][T10865] ksys_read+0x12b/0x250 [ 382.451121][T10865] ? __pfx_ksys_read+0x10/0x10 [ 382.455963][T10865] do_syscall_64+0xcd/0x250 [ 382.460595][T10865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.466562][T10865] RIP: 0033:0x7ff05398473c [ 382.471031][T10865] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 382.490742][T10865] RSP: 002b:00007ff05487d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 382.499323][T10865] RAX: ffffffffffffffda RBX: 00007ff053b75fa0 RCX: 00007ff05398473c [ 382.507347][T10865] RDX: 000000000000000f RSI: 00007ff05487d0a0 RDI: 0000000000000004 [ 382.515365][T10865] RBP: 00007ff05487d090 R08: 0000000000000000 R09: 0000000000000000 [ 382.523393][T10865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.531422][T10865] R13: 0000000000000000 R14: 00007ff053b75fa0 R15: 00007ffccc54cab8 [ 382.539563][T10865] [ 383.299559][T10898] netlink: 330 bytes leftover after parsing attributes in process `syz.0.1430'. [ 383.309479][T10898] ›: renamed from veth0_vlan (while UP) [ 384.070025][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 384.076466][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.228466][T10915] ima: policy update failed [ 384.239885][ T29] audit: type=1802 audit(1734540961.438:37): pid=10915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.1435" res=0 errno=0 [ 385.135153][T10943] netlink: 'syz.3.1443': attribute type 10 has an invalid length. [ 387.041937][T10973] Process accounting resumed [ 388.073463][T11015] tipc: Started in network mode [ 388.091533][T11015] tipc: Node identity ee00, cluster identity 4711 [ 388.103953][T11015] tipc: Node number set to 60928 [ 389.015454][T11030] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1467'. [ 392.237966][T11105] binder: 11101:11105 ioctl c018620c 9 returned -22 [ 393.526691][T11136] FAULT_INJECTION: forcing a failure. [ 393.526691][T11136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 393.547253][T11136] CPU: 0 UID: 0 PID: 11136 Comm: syz.4.1501 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 393.558111][T11136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 393.568275][T11136] Call Trace: [ 393.571600][T11136] [ 393.574572][T11136] dump_stack_lvl+0x16c/0x1f0 [ 393.579315][T11136] should_fail_ex+0x497/0x5b0 [ 393.584065][T11136] _copy_to_user+0x32/0xd0 [ 393.588562][T11136] simple_read_from_buffer+0xd0/0x160 [ 393.594030][T11136] proc_fail_nth_read+0x198/0x270 [ 393.599129][T11136] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.604763][T11136] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 393.610382][T11136] vfs_read+0x1df/0xbe0 [ 393.614600][T11136] ? __fget_files+0x1fc/0x3a0 [ 393.619344][T11136] ? __pfx___mutex_lock+0x10/0x10 [ 393.624440][T11136] ? __pfx_vfs_read+0x10/0x10 [ 393.629195][T11136] ? __fget_files+0x206/0x3a0 [ 393.633961][T11136] ksys_read+0x12b/0x250 [ 393.638266][T11136] ? __pfx_ksys_read+0x10/0x10 [ 393.643099][T11136] do_syscall_64+0xcd/0x250 [ 393.647669][T11136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 393.653629][T11136] RIP: 0033:0x7fd5bf38473c [ 393.658093][T11136] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 393.677849][T11136] RSP: 002b:00007fd5c00f1030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 393.686338][T11136] RAX: ffffffffffffffda RBX: 00007fd5bf575fa0 RCX: 00007fd5bf38473c [ 393.694366][T11136] RDX: 000000000000000f RSI: 00007fd5c00f10a0 RDI: 0000000000000004 [ 393.702405][T11136] RBP: 00007fd5c00f1090 R08: 0000000000000000 R09: 0000000000000000 [ 393.710443][T11136] R10: 0000000034000000 R11: 0000000000000246 R12: 0000000000000001 [ 393.718468][T11136] R13: 0000000000000000 R14: 00007fd5bf575fa0 R15: 00007ffcc8facf18 [ 393.726516][T11136] [ 393.729681][ C0] vkms_vblank_simulate: vblank timer overrun [ 394.728166][T11153] Process accounting resumed [ 399.867289][T11262] openvswitch: netlink: Key type 261 is out of range max 32 [ 400.216085][T11265] DCCP is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 400.891070][T11279] Zero length message leads to an empty skb [ 401.764451][T11299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1550'. [ 401.915284][T11299] geneve1: entered allmulticast mode [ 401.948080][T11307] netlink: 'syz.0.1552': attribute type 10 has an invalid length. [ 401.949876][T11299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1550'. [ 402.039928][T11299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1550'. [ 402.049692][T11299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1550'. [ 402.070611][T11299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1550'. [ 402.105001][T11299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1550'. [ 402.118431][T11299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1550'. [ 402.157598][T11299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1550'. [ 402.166911][T11299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1550'. [ 402.209412][T11299] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1550'. [ 404.454917][T11346] process 'syz.3.1562' launched './file0' with NULL argv: empty string added [ 406.250421][T11368] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 406.266336][T11382] DCCP is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 407.715864][T11417] Zero length message leads to an empty skb [ 408.584456][T11441] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 410.882229][T11468] netlink: 'syz.3.1593': attribute type 10 has an invalid length. [ 411.835257][T11486] __nla_validate_parse: 23 callbacks suppressed [ 411.835285][T11486] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1596'. [ 416.677918][T11589] bridge0: port 3(syz_tun) entered blocking state [ 416.700305][T11589] bridge0: port 3(syz_tun) entered disabled state [ 416.721460][T11589] syz_tun: entered allmulticast mode [ 416.743702][T11589] syz_tun: entered promiscuous mode [ 416.762207][T11589] bridge0: port 3(syz_tun) entered blocking state [ 416.768895][T11589] bridge0: port 3(syz_tun) entered forwarding state [ 417.190949][T11604] FAULT_INJECTION: forcing a failure. [ 417.190949][T11604] name failslab, interval 1, probability 0, space 0, times 0 [ 417.233880][T11604] CPU: 1 UID: 0 PID: 11604 Comm: syz.4.1632 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 417.244747][T11604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 417.254856][T11604] Call Trace: [ 417.258183][T11604] [ 417.261170][T11604] dump_stack_lvl+0x16c/0x1f0 [ 417.265917][T11604] should_fail_ex+0x497/0x5b0 [ 417.270695][T11604] ? fs_reclaim_acquire+0xae/0x150 [ 417.275871][T11604] should_failslab+0xc2/0x120 [ 417.280636][T11604] __kmalloc_cache_noprof+0x68/0x420 [ 417.285998][T11604] afs_init_fs_context+0x49/0x1f0 [ 417.291095][T11604] ? __pfx_afs_init_fs_context+0x10/0x10 [ 417.296798][T11604] alloc_fs_context+0x54a/0x9c0 [ 417.301743][T11604] __x64_sys_fsopen+0xeb/0x240 [ 417.306584][T11604] do_syscall_64+0xcd/0x250 [ 417.311158][T11604] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 417.317123][T11604] RIP: 0033:0x7fd5bf385d29 [ 417.321601][T11604] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 417.341274][T11604] RSP: 002b:00007fd5c00f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 417.349764][T11604] RAX: ffffffffffffffda RBX: 00007fd5bf575fa0 RCX: 00007fd5bf385d29 [ 417.357788][T11604] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 417.365829][T11604] RBP: 00007fd5c00f1090 R08: 0000000000000000 R09: 0000000000000000 [ 417.373855][T11604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 417.381882][T11604] R13: 0000000000000000 R14: 00007fd5bf575fa0 R15: 00007ffcc8facf18 [ 417.390020][T11604] [ 417.416411][T11601] Process accounting paused [ 417.843714][T11617] capability: warning: `syz.4.1636' uses 32-bit capabilities (legacy support in use) [ 419.303904][T11650] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 419.310473][T11650] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 419.368607][T11649] ima: policy update failed [ 419.398047][ T29] audit: type=1802 audit(1734540996.578:38): pid=11649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.1646" res=0 errno=0 [ 421.845627][T11712] FAULT_INJECTION: forcing a failure. [ 421.845627][T11712] name failslab, interval 1, probability 0, space 0, times 0 [ 421.870191][T11712] CPU: 0 UID: 0 PID: 11712 Comm: syz.2.1667 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 421.881142][T11712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 421.891256][T11712] Call Trace: [ 421.894616][T11712] [ 421.897588][T11712] dump_stack_lvl+0x16c/0x1f0 [ 421.902319][T11712] should_fail_ex+0x497/0x5b0 [ 421.907035][T11712] ? fs_reclaim_acquire+0xae/0x150 [ 421.912185][T11712] should_failslab+0xc2/0x120 [ 421.916907][T11712] __kmalloc_cache_noprof+0x68/0x420 [ 421.922319][T11712] ? afs_init_fs_context+0x17b/0x1f0 [ 421.927649][T11712] fscontext_alloc_log+0x4a/0x1b0 [ 421.932714][T11712] __x64_sys_fsopen+0x157/0x240 [ 421.937621][T11712] do_syscall_64+0xcd/0x250 [ 421.942170][T11712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 421.948100][T11712] RIP: 0033:0x7ff053985d29 [ 421.952543][T11712] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 421.972201][T11712] RSP: 002b:00007ff05487d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ae [ 421.980659][T11712] RAX: ffffffffffffffda RBX: 00007ff053b75fa0 RCX: 00007ff053985d29 [ 421.988685][T11712] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 421.996684][T11712] RBP: 00007ff05487d090 R08: 0000000000000000 R09: 0000000000000000 [ 422.004678][T11712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 422.012696][T11712] R13: 0000000000000000 R14: 00007ff053b75fa0 R15: 00007ffccc54cab8 [ 422.020714][T11712] [ 422.023768][ C0] vkms_vblank_simulate: vblank timer overrun [ 422.518396][T11731] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1675'. [ 424.875072][T11772] Process accounting paused [ 428.562519][T11850] process 'syz.0.1708' launched ':,' with NULL argv: empty string added [ 429.806354][T11882] netlink: 'syz.4.1716': attribute type 10 has an invalid length. [ 430.208431][T11890] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1718'. [ 430.488304][T11899] FAULT_INJECTION: forcing a failure. [ 430.488304][T11899] name failslab, interval 1, probability 0, space 0, times 0 [ 430.527200][T11899] CPU: 1 UID: 0 PID: 11899 Comm: syz.3.1721 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 430.538104][T11899] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 430.548214][T11899] Call Trace: [ 430.551538][T11899] [ 430.554511][T11899] dump_stack_lvl+0x16c/0x1f0 [ 430.559265][T11899] should_fail_ex+0x497/0x5b0 [ 430.564111][T11899] ? fs_reclaim_acquire+0xae/0x150 [ 430.569300][T11899] should_failslab+0xc2/0x120 [ 430.574071][T11899] __kmalloc_cache_noprof+0x68/0x420 [ 430.577152][T11879] syz.2.1715 (11879) used greatest stack depth: 19616 bytes left [ 430.579406][T11899] ? __pfx___lock_acquire+0x10/0x10 [ 430.592943][T11899] alloc_fdtable+0xa0/0x2b0 [ 430.597531][T11899] expand_files+0x178/0xa10 [ 430.602107][T11899] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 430.607886][T11899] ? __pfx_expand_files+0x10/0x10 [ 430.612983][T11899] ? rcu_is_watching+0x12/0xc0 [ 430.617882][T11899] ? do_raw_spin_lock+0x12d/0x2c0 [ 430.622947][T11899] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 430.628363][T11899] ? lock_acquire+0x2f/0xb0 [ 430.632905][T11899] alloc_fd+0x61c/0x760 [ 430.637122][T11899] f_dupfd+0x9d/0x170 [ 430.641163][T11899] do_fcntl+0x143d/0x15b0 [ 430.645546][T11899] ? __pfx_do_fcntl+0x10/0x10 [ 430.650287][T11899] ? tomoyo_file_fcntl+0x6c/0xc0 [ 430.655273][T11899] __x64_sys_fcntl+0x170/0x200 [ 430.660091][T11899] do_syscall_64+0xcd/0x250 [ 430.664639][T11899] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.670587][T11899] RIP: 0033:0x7fc980385d29 [ 430.675136][T11899] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.694798][T11899] RSP: 002b:00007fc9810da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 430.703264][T11899] RAX: ffffffffffffffda RBX: 00007fc980575fa0 RCX: 00007fc980385d29 [ 430.711274][T11899] RDX: 00000000000000a8 RSI: 0000000000000000 RDI: 0000000000000001 [ 430.719278][T11899] RBP: 00007fc9810da090 R08: 0000000000000000 R09: 0000000000000000 [ 430.727280][T11899] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.735631][T11899] R13: 0000000000000000 R14: 00007fc980575fa0 R15: 00007ffef809a738 [ 430.743648][T11899] [ 432.339631][T11942] FAULT_INJECTION: forcing a failure. [ 432.339631][T11942] name failslab, interval 1, probability 0, space 0, times 0 [ 432.352865][T11942] CPU: 0 UID: 0 PID: 11942 Comm: syz.2.1733 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 432.363793][T11942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 432.373908][T11942] Call Trace: [ 432.377234][T11942] [ 432.380217][T11942] dump_stack_lvl+0x16c/0x1f0 [ 432.384940][T11942] should_fail_ex+0x497/0x5b0 [ 432.389661][T11942] ? fs_reclaim_acquire+0xae/0x150 [ 432.394820][T11942] should_failslab+0xc2/0x120 [ 432.399547][T11942] __kmalloc_noprof+0xce/0x4f0 [ 432.404358][T11942] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 432.410200][T11942] ? tomoyo_realpath_from_path+0xbf/0x710 [ 432.415972][T11942] tomoyo_realpath_from_path+0xbf/0x710 [ 432.421594][T11942] ? tomoyo_path_number_perm+0x235/0x5b0 [ 432.427283][T11942] tomoyo_path_number_perm+0x248/0x5b0 [ 432.432884][T11942] ? tomoyo_path_number_perm+0x235/0x5b0 [ 432.438572][T11942] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 432.444640][T11942] ? __pfx_lock_release+0x10/0x10 [ 432.449704][T11942] ? trace_lock_acquire+0x14e/0x1f0 [ 432.454959][T11942] ? lock_acquire+0x2f/0xb0 [ 432.459497][T11942] ? __fget_files+0x40/0x3a0 [ 432.464221][T11942] ? __fget_files+0x206/0x3a0 [ 432.468942][T11942] security_file_ioctl+0x9b/0x240 [ 432.474017][T11942] __x64_sys_ioctl+0xb7/0x200 [ 432.478755][T11942] do_syscall_64+0xcd/0x250 [ 432.483307][T11942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 432.489243][T11942] RIP: 0033:0x7ff053985d29 [ 432.493700][T11942] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 432.513442][T11942] RSP: 002b:00007ff05487d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 432.521900][T11942] RAX: ffffffffffffffda RBX: 00007ff053b75fa0 RCX: 00007ff053985d29 [ 432.529916][T11942] RDX: 0000000000000038 RSI: 000000004008af21 RDI: 0000000000000003 [ 432.538020][T11942] RBP: 00007ff05487d090 R08: 0000000000000000 R09: 0000000000000000 [ 432.546035][T11942] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 432.554053][T11942] R13: 0000000000000000 R14: 00007ff053b75fa0 R15: 00007ffccc54cab8 [ 432.562165][T11942] [ 432.570933][T11942] ERROR: Out of memory at tomoyo_realpath_from_path. [ 433.395871][T11959] mmap: syz.3.1739 (11959) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 435.820986][T12045] FAULT_INJECTION: forcing a failure. [ 435.820986][T12045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 435.858056][T12045] CPU: 0 UID: 0 PID: 12045 Comm: syz.0.1759 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 435.869094][T12045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 435.879205][T12045] Call Trace: [ 435.882526][T12045] [ 435.885513][T12045] dump_stack_lvl+0x16c/0x1f0 [ 435.890255][T12045] should_fail_ex+0x497/0x5b0 [ 435.895007][T12045] _copy_to_user+0x32/0xd0 [ 435.899514][T12045] simple_read_from_buffer+0xd0/0x160 [ 435.904972][T12045] proc_fail_nth_read+0x198/0x270 [ 435.910336][T12045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 435.915981][T12045] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 435.921610][T12045] vfs_read+0x1df/0xbe0 [ 435.925837][T12045] ? __fget_files+0x1fc/0x3a0 [ 435.930583][T12045] ? __pfx___mutex_lock+0x10/0x10 [ 435.935680][T12045] ? __pfx_vfs_read+0x10/0x10 [ 435.940452][T12045] ? __fget_files+0x206/0x3a0 [ 435.945304][T12045] ksys_read+0x12b/0x250 [ 435.949638][T12045] ? __pfx_ksys_read+0x10/0x10 [ 435.954495][T12045] do_syscall_64+0xcd/0x250 [ 435.959072][T12045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.965032][T12045] RIP: 0033:0x7fcc09f8473c [ 435.969528][T12045] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 435.989250][T12045] RSP: 002b:00007fcc0ae31030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 435.997825][T12045] RAX: ffffffffffffffda RBX: 00007fcc0a175fa0 RCX: 00007fcc09f8473c [ 436.005853][T12045] RDX: 000000000000000f RSI: 00007fcc0ae310a0 RDI: 0000000000000004 [ 436.013881][T12045] RBP: 00007fcc0ae31090 R08: 0000000000000000 R09: 0000000000000000 [ 436.021919][T12045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 436.030048][T12045] R13: 0000000000000000 R14: 00007fcc0a175fa0 R15: 00007ffd15a57738 [ 436.038095][T12045] [ 438.861042][ T29] audit: type=1800 audit(1734541016.038:39): pid=12110 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1778" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 441.786318][T12176] FAULT_INJECTION: forcing a failure. [ 441.786318][T12176] name failslab, interval 1, probability 0, space 0, times 0 [ 441.803884][T12176] CPU: 1 UID: 0 PID: 12176 Comm: syz.4.1795 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 441.814751][T12176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 441.825346][T12176] Call Trace: [ 441.828742][T12176] [ 441.831727][T12176] dump_stack_lvl+0x16c/0x1f0 [ 441.836488][T12176] should_fail_ex+0x497/0x5b0 [ 441.841235][T12176] ? fs_reclaim_acquire+0xae/0x150 [ 441.846424][T12176] should_failslab+0xc2/0x120 [ 441.851183][T12176] __kmalloc_node_noprof+0xd1/0x520 [ 441.856455][T12176] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 441.861998][T12176] __kvmalloc_node_noprof+0xad/0x1a0 [ 441.867365][T12176] alloc_fdtable+0x158/0x2b0 [ 441.872016][T12176] expand_files+0x178/0xa10 [ 441.876564][T12176] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 441.882229][T12176] ? __pfx_expand_files+0x10/0x10 [ 441.887287][T12176] ? rcu_is_watching+0x12/0xc0 [ 441.892089][T12176] ? do_raw_spin_lock+0x12d/0x2c0 [ 441.897244][T12176] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 441.902693][T12176] ? lock_acquire+0x2f/0xb0 [ 441.907234][T12176] alloc_fd+0x61c/0x760 [ 441.911437][T12176] f_dupfd+0x9d/0x170 [ 441.915470][T12176] do_fcntl+0x143d/0x15b0 [ 441.919844][T12176] ? __pfx_do_fcntl+0x10/0x10 [ 441.924575][T12176] ? tomoyo_file_fcntl+0x6c/0xc0 [ 441.929570][T12176] __x64_sys_fcntl+0x170/0x200 [ 441.934445][T12176] do_syscall_64+0xcd/0x250 [ 441.939182][T12176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 441.945875][T12176] RIP: 0033:0x7fd5bf385d29 [ 441.950414][T12176] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 441.970331][T12176] RSP: 002b:00007fd5c00f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 441.979162][T12176] RAX: ffffffffffffffda RBX: 00007fd5bf575fa0 RCX: 00007fd5bf385d29 [ 441.987765][T12176] RDX: 00000000000000a8 RSI: 0000000000000000 RDI: 0000000000000001 [ 441.995937][T12176] RBP: 00007fd5c00f1090 R08: 0000000000000000 R09: 0000000000000000 [ 442.004048][T12176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.012178][T12176] R13: 0000000000000000 R14: 00007fd5bf575fa0 R15: 00007ffcc8facf18 [ 442.020765][T12176] [ 442.024096][ C1] vkms_vblank_simulate: vblank timer overrun [ 443.518193][T12217] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 443.558732][T12217] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 444.610610][T12249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1815'. [ 445.517689][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.517800][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 448.170554][T12293] Process accounting resumed [ 452.303382][T12395] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1853'. [ 452.349759][T12395] netlink: 252 bytes leftover after parsing attributes in process `syz.3.1853'. [ 454.859444][T12467] FAULT_INJECTION: forcing a failure. [ 454.859444][T12467] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 454.887069][T12467] CPU: 0 UID: 0 PID: 12467 Comm: syz.0.1873 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 454.898005][T12467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 454.908081][T12467] Call Trace: [ 454.911390][T12467] [ 454.914340][T12467] dump_stack_lvl+0x16c/0x1f0 [ 454.919074][T12467] should_fail_ex+0x497/0x5b0 [ 454.923819][T12467] strncpy_from_user+0x3b/0x2d0 [ 454.928716][T12467] getname_flags.part.0+0x8f/0x550 [ 454.933890][T12467] getname+0x8d/0xe0 [ 454.937829][T12467] do_sys_openat2+0x104/0x1e0 [ 454.942551][T12467] ? __pfx_do_sys_openat2+0x10/0x10 [ 454.947825][T12467] ? __fget_files+0x206/0x3a0 [ 454.952566][T12467] __x64_sys_openat+0x175/0x210 [ 454.957553][T12467] ? __pfx___x64_sys_openat+0x10/0x10 [ 454.963057][T12467] ? ksys_write+0x1ba/0x250 [ 454.967607][T12467] do_syscall_64+0xcd/0x250 [ 454.972261][T12467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 454.978200][T12467] RIP: 0033:0x7fcc09f85d29 [ 454.982642][T12467] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.002291][T12467] RSP: 002b:00007fcc0ae31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 455.010743][T12467] RAX: ffffffffffffffda RBX: 00007fcc0a175fa0 RCX: 00007fcc09f85d29 [ 455.018746][T12467] RDX: 0000000000000002 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 455.026743][T12467] RBP: 00007fcc0ae31090 R08: 0000000000000000 R09: 0000000000000000 [ 455.034835][T12467] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.043009][T12467] R13: 0000000000000000 R14: 00007fcc0a175fa0 R15: 00007ffd15a57738 [ 455.051118][T12467] [ 455.323194][T12471] Process accounting resumed [ 458.834003][T12553] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 458.873821][T12553] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 459.804359][T12573] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1899'. [ 463.146761][T12648] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1918'. [ 463.205329][T12648] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1918'. [ 463.258845][T12648] netlink: 'syz.2.1918': attribute type 1 has an invalid length. [ 463.266686][T12648] netlink: 'syz.2.1918': attribute type 1 has an invalid length. [ 463.601091][T12656] netlink: 'syz.3.1920': attribute type 1 has an invalid length. [ 463.886442][T12672] FAULT_INJECTION: forcing a failure. [ 463.886442][T12672] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 463.907519][T12672] CPU: 0 UID: 0 PID: 12672 Comm: syz.3.1924 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 463.918381][T12672] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 463.928504][T12672] Call Trace: [ 463.931830][T12672] [ 463.934827][T12672] dump_stack_lvl+0x16c/0x1f0 [ 463.939573][T12672] should_fail_ex+0x497/0x5b0 [ 463.944328][T12672] _copy_from_user+0x2e/0xd0 [ 463.948988][T12672] vhost_vring_ioctl+0xf91/0x1390 [ 463.954079][T12672] ? __pfx_vhost_vring_ioctl+0x10/0x10 [ 463.959601][T12672] ? vhost_dev_ioctl+0x131/0xe20 [ 463.964590][T12672] ? __pfx_vhost_dev_ioctl+0x10/0x10 [ 463.969926][T12672] vhost_net_ioctl+0xe8a/0x16e0 [ 463.974903][T12672] ? __pfx_lock_release+0x10/0x10 [ 463.979962][T12672] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 463.985310][T12672] ? __fget_files+0x206/0x3a0 [ 463.990063][T12672] ? __pfx_vhost_net_ioctl+0x10/0x10 [ 463.995404][T12672] __x64_sys_ioctl+0x190/0x200 [ 464.000221][T12672] do_syscall_64+0xcd/0x250 [ 464.004787][T12672] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 464.010722][T12672] RIP: 0033:0x7fc980385d29 [ 464.015265][T12672] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 464.034913][T12672] RSP: 002b:00007fc9810da038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 464.043362][T12672] RAX: ffffffffffffffda RBX: 00007fc980575fa0 RCX: 00007fc980385d29 [ 464.051362][T12672] RDX: 0000000000000038 RSI: 000000004008af21 RDI: 0000000000000003 [ 464.059366][T12672] RBP: 00007fc9810da090 R08: 0000000000000000 R09: 0000000000000000 [ 464.067366][T12672] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 464.075365][T12672] R13: 0000000000000000 R14: 00007fc980575fa0 R15: 00007ffef809a738 [ 464.083380][T12672] [ 464.904767][T12688] CIFS: VFS: Unsupported security flags: 0x20 [ 466.219142][T12713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1936'. [ 467.948409][T12756] FAULT_INJECTION: forcing a failure. [ 467.948409][T12756] name failslab, interval 1, probability 0, space 0, times 0 [ 468.026743][T12756] CPU: 0 UID: 0 PID: 12756 Comm: syz.0.1947 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 468.037606][T12756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 468.047724][T12756] Call Trace: [ 468.051087][T12756] [ 468.054061][T12756] dump_stack_lvl+0x16c/0x1f0 [ 468.058809][T12756] should_fail_ex+0x497/0x5b0 [ 468.063554][T12756] ? fs_reclaim_acquire+0xae/0x150 [ 468.068734][T12756] should_failslab+0xc2/0x120 [ 468.073484][T12756] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 468.078955][T12756] ? security_file_alloc+0x34/0x2b0 [ 468.084217][T12756] security_file_alloc+0x34/0x2b0 [ 468.089302][T12756] init_file+0x93/0x480 [ 468.093549][T12756] alloc_empty_file+0x91/0x1e0 [ 468.098390][T12756] path_openat+0xe1/0x2d60 [ 468.102873][T12756] ? hlock_class+0x4e/0x130 [ 468.107452][T12756] ? __lock_acquire+0x15a9/0x3c40 [ 468.112559][T12756] ? __pfx_path_openat+0x10/0x10 [ 468.117562][T12756] ? __pfx___lock_acquire+0x10/0x10 [ 468.122955][T12756] ? lock_acquire.part.0+0x11b/0x380 [ 468.128309][T12756] ? find_held_lock+0x2d/0x110 [ 468.133149][T12756] do_filp_open+0x20c/0x470 [ 468.137712][T12756] ? __pfx_do_filp_open+0x10/0x10 [ 468.142821][T12756] ? find_held_lock+0x2d/0x110 [ 468.147678][T12756] ? alloc_fd+0x41f/0x760 [ 468.152118][T12756] do_sys_openat2+0x17a/0x1e0 [ 468.156878][T12756] ? __pfx_do_sys_openat2+0x10/0x10 [ 468.162160][T12756] ? __fget_files+0x206/0x3a0 [ 468.166904][T12756] __x64_sys_openat+0x175/0x210 [ 468.171829][T12756] ? __pfx___x64_sys_openat+0x10/0x10 [ 468.177280][T12756] ? ksys_write+0x1ba/0x250 [ 468.181859][T12756] do_syscall_64+0xcd/0x250 [ 468.186433][T12756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.192407][T12756] RIP: 0033:0x7fcc09f85d29 [ 468.196872][T12756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.216537][T12756] RSP: 002b:00007fcc0ae31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 468.225024][T12756] RAX: ffffffffffffffda RBX: 00007fcc0a175fa0 RCX: 00007fcc09f85d29 [ 468.233050][T12756] RDX: 0000000000000002 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 468.241078][T12756] RBP: 00007fcc0ae31090 R08: 0000000000000000 R09: 0000000000000000 [ 468.249117][T12756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 468.257245][T12756] R13: 0000000000000000 R14: 00007fcc0a175fa0 R15: 00007ffd15a57738 [ 468.265382][T12756] [ 469.137571][T12783] sp0: Synchronizing with TNC [ 469.540134][T12791] FAULT_INJECTION: forcing a failure. [ 469.540134][T12791] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 469.586211][T12791] CPU: 0 UID: 0 PID: 12791 Comm: syz.3.1955 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 469.597068][T12791] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 469.607197][T12791] Call Trace: [ 469.610527][T12791] [ 469.613512][T12791] dump_stack_lvl+0x16c/0x1f0 [ 469.618253][T12791] should_fail_ex+0x497/0x5b0 [ 469.623005][T12791] _copy_to_user+0x32/0xd0 [ 469.627501][T12791] simple_read_from_buffer+0xd0/0x160 [ 469.632981][T12791] proc_fail_nth_read+0x198/0x270 [ 469.638089][T12791] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 469.643724][T12791] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 469.649359][T12791] vfs_read+0x1df/0xbe0 [ 469.653578][T12791] ? __fget_files+0x1fc/0x3a0 [ 469.658325][T12791] ? __pfx___mutex_lock+0x10/0x10 [ 469.663422][T12791] ? __pfx_vfs_read+0x10/0x10 [ 469.668178][T12791] ? __fget_files+0x206/0x3a0 [ 469.672935][T12791] ksys_read+0x12b/0x250 [ 469.677246][T12791] ? __pfx_ksys_read+0x10/0x10 [ 469.682085][T12791] do_syscall_64+0xcd/0x250 [ 469.686669][T12791] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 469.692630][T12791] RIP: 0033:0x7fc98038473c [ 469.697096][T12791] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 469.716763][T12791] RSP: 002b:00007fc9810da030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 469.725263][T12791] RAX: ffffffffffffffda RBX: 00007fc980575fa0 RCX: 00007fc98038473c [ 469.733294][T12791] RDX: 000000000000000f RSI: 00007fc9810da0a0 RDI: 0000000000000004 [ 469.741413][T12791] RBP: 00007fc9810da090 R08: 0000000000000000 R09: 0000000000000000 [ 469.749441][T12791] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 469.757481][T12791] R13: 0000000000000000 R14: 00007fc980575fa0 R15: 00007ffef809a738 [ 469.765532][T12791] [ 472.822624][T12845] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1970'. [ 472.839940][T12845] syz_tun: left allmulticast mode [ 472.854137][T12845] syz_tun: left promiscuous mode [ 472.876469][T12845] bridge0: port 3(syz_tun) entered disabled state [ 472.897837][T12845] bridge_slave_1: left allmulticast mode [ 472.913862][T12845] bridge_slave_1: left promiscuous mode [ 472.924256][T12845] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.960075][T12845] bridge_slave_0: left allmulticast mode [ 472.967142][T12845] bridge_slave_0: left promiscuous mode [ 472.976307][T12845] bridge0: port 1(bridge_slave_0) entered disabled state [ 473.885841][T12860] Process accounting resumed [ 473.909299][T12865] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 475.553702][T12901] FAULT_INJECTION: forcing a failure. [ 475.553702][T12901] name failslab, interval 1, probability 0, space 0, times 0 [ 475.607910][T12901] CPU: 1 UID: 0 PID: 12901 Comm: syz.0.1984 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 475.618951][T12901] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 475.629065][T12901] Call Trace: [ 475.632392][T12901] [ 475.635376][T12901] dump_stack_lvl+0x16c/0x1f0 [ 475.640128][T12901] should_fail_ex+0x497/0x5b0 [ 475.644878][T12901] ? fs_reclaim_acquire+0xae/0x150 [ 475.650064][T12901] should_failslab+0xc2/0x120 [ 475.654832][T12901] __kmalloc_noprof+0xce/0x4f0 [ 475.659727][T12901] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 475.665515][T12901] ? tomoyo_realpath_from_path+0xbf/0x710 [ 475.671312][T12901] ? rcu_is_watching+0x12/0xc0 [ 475.676234][T12901] tomoyo_realpath_from_path+0xbf/0x710 [ 475.681952][T12901] tomoyo_check_open_permission+0x2ad/0x3c0 [ 475.688277][T12901] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 475.694933][T12901] ? __pfx_hook_file_open+0x10/0x10 [ 475.700307][T12901] ? lock_acquire+0x2f/0xb0 [ 475.704873][T12901] ? mnt_get_write_access+0x6a/0x300 [ 475.710237][T12901] tomoyo_file_open+0x6b/0x90 [ 475.715125][T12901] security_file_open+0x84/0x1e0 [ 475.720130][T12901] do_dentry_open+0x57e/0x1ea0 [ 475.724962][T12901] ? inode_permission+0xdd/0x5f0 [ 475.729986][T12901] vfs_open+0x82/0x3f0 [ 475.734131][T12901] ? may_open+0x1f2/0x400 [ 475.738530][T12901] path_openat+0x1e6a/0x2d60 [ 475.743200][T12901] ? __pfx_path_openat+0x10/0x10 [ 475.748204][T12901] ? __pfx___lock_acquire+0x10/0x10 [ 475.753479][T12901] ? lock_acquire.part.0+0x11b/0x380 [ 475.758912][T12901] ? find_held_lock+0x2d/0x110 [ 475.763747][T12901] do_filp_open+0x20c/0x470 [ 475.768315][T12901] ? __pfx_do_filp_open+0x10/0x10 [ 475.773402][T12901] ? find_held_lock+0x2d/0x110 [ 475.778270][T12901] ? alloc_fd+0x41f/0x760 [ 475.782678][T12901] do_sys_openat2+0x17a/0x1e0 [ 475.787429][T12901] ? __pfx_do_sys_openat2+0x10/0x10 [ 475.792705][T12901] ? __fget_files+0x206/0x3a0 [ 475.797448][T12901] __x64_sys_openat+0x175/0x210 [ 475.802372][T12901] ? __pfx___x64_sys_openat+0x10/0x10 [ 475.807812][T12901] ? ksys_write+0x1ba/0x250 [ 475.812392][T12901] do_syscall_64+0xcd/0x250 [ 475.816954][T12901] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 475.822909][T12901] RIP: 0033:0x7fcc09f85d29 [ 475.827372][T12901] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 475.847047][T12901] RSP: 002b:00007fcc0ae10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 475.855526][T12901] RAX: ffffffffffffffda RBX: 00007fcc0a176080 RCX: 00007fcc09f85d29 [ 475.863557][T12901] RDX: 0000000000000002 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 475.871580][T12901] RBP: 00007fcc0ae10090 R08: 0000000000000000 R09: 0000000000000000 [ 475.879688][T12901] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 475.887715][T12901] R13: 0000000000000001 R14: 00007fcc0a176080 R15: 00007ffd15a57738 [ 475.895758][T12901] [ 475.898932][ C1] vkms_vblank_simulate: vblank timer overrun [ 475.934046][T12901] ERROR: Out of memory at tomoyo_realpath_from_path. [ 477.880462][T12938] syz.0.1996 uses obsolete (PF_INET,SOCK_PACKET) [ 479.417199][T12969] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2004'. [ 480.703472][T12995] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 480.710042][T12995] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 480.806842][T12994] ima: policy update failed [ 480.858972][ T29] audit: type=1802 audit(1734541058.068:40): pid=12994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2014" res=0 errno=0 [ 481.829656][T13032] FAULT_INJECTION: forcing a failure. [ 481.829656][T13032] name failslab, interval 1, probability 0, space 0, times 0 [ 481.857109][T13032] CPU: 0 UID: 0 PID: 13032 Comm: syz.0.2023 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 481.867977][T13032] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 481.878073][T13032] Call Trace: [ 481.881390][T13032] [ 481.884362][T13032] dump_stack_lvl+0x16c/0x1f0 [ 481.889083][T13032] should_fail_ex+0x497/0x5b0 [ 481.893803][T13032] ? fs_reclaim_acquire+0xae/0x150 [ 481.898954][T13032] should_failslab+0xc2/0x120 [ 481.903681][T13032] __kmalloc_noprof+0xce/0x4f0 [ 481.908489][T13032] ? rcu_is_watching+0x12/0xc0 [ 481.913286][T13032] ? tomoyo_encode2+0x100/0x3e0 [ 481.918178][T13032] tomoyo_encode2+0x100/0x3e0 [ 481.922901][T13032] tomoyo_realpath_from_path+0x1a7/0x710 [ 481.928584][T13032] tomoyo_check_open_permission+0x2ad/0x3c0 [ 481.934620][T13032] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 481.941156][T13032] ? __pfx_hook_file_open+0x10/0x10 [ 481.946490][T13032] ? lock_acquire+0x2f/0xb0 [ 481.951024][T13032] ? mnt_get_write_access+0x6a/0x300 [ 481.956356][T13032] tomoyo_file_open+0x6b/0x90 [ 481.961077][T13032] security_file_open+0x84/0x1e0 [ 481.966052][T13032] do_dentry_open+0x57e/0x1ea0 [ 481.970860][T13032] ? inode_permission+0xdd/0x5f0 [ 481.975858][T13032] vfs_open+0x82/0x3f0 [ 481.979968][T13032] ? may_open+0x1f2/0x400 [ 481.984345][T13032] path_openat+0x1e6a/0x2d60 [ 481.989073][T13032] ? __pfx_path_openat+0x10/0x10 [ 481.994043][T13032] ? __pfx___lock_acquire+0x10/0x10 [ 481.999373][T13032] ? lock_acquire.part.0+0x11b/0x380 [ 482.004775][T13032] ? find_held_lock+0x2d/0x110 [ 482.009579][T13032] do_filp_open+0x20c/0x470 [ 482.014133][T13032] ? __pfx_do_filp_open+0x10/0x10 [ 482.019207][T13032] ? find_held_lock+0x2d/0x110 [ 482.024029][T13032] ? alloc_fd+0x41f/0x760 [ 482.028421][T13032] do_sys_openat2+0x17a/0x1e0 [ 482.033142][T13032] ? __pfx_do_sys_openat2+0x10/0x10 [ 482.038387][T13032] ? __fget_files+0x206/0x3a0 [ 482.043102][T13032] __x64_sys_openat+0x175/0x210 [ 482.047996][T13032] ? __pfx___x64_sys_openat+0x10/0x10 [ 482.053412][T13032] ? ksys_write+0x1ba/0x250 [ 482.057974][T13032] do_syscall_64+0xcd/0x250 [ 482.062522][T13032] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.068477][T13032] RIP: 0033:0x7fcc09f85d29 [ 482.072942][T13032] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.092579][T13032] RSP: 002b:00007fcc0ae31038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 482.101034][T13032] RAX: ffffffffffffffda RBX: 00007fcc0a175fa0 RCX: 00007fcc09f85d29 [ 482.109065][T13032] RDX: 0000000000000002 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 482.117148][T13032] RBP: 00007fcc0ae31090 R08: 0000000000000000 R09: 0000000000000000 [ 482.125147][T13032] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 482.133153][T13032] R13: 0000000000000000 R14: 00007fcc0a175fa0 R15: 00007ffd15a57738 [ 482.141349][T13032] [ 482.177163][T13032] ERROR: Out of memory at tomoyo_realpath_from_path. [ 485.599910][T13121] Process accounting paused [ 486.446664][T13149] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2049'. [ 487.747295][T13162] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 487.753873][T13162] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 488.221316][T13161] ima: policy update failed [ 488.227763][ T29] audit: type=1802 audit(1734541065.428:41): pid=13161 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2052" res=0 errno=0 [ 488.980226][T13190] FAULT_INJECTION: forcing a failure. [ 488.980226][T13190] name failslab, interval 1, probability 0, space 0, times 0 [ 489.056040][T13190] CPU: 1 UID: 0 PID: 13190 Comm: syz.4.2059 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 489.066914][T13190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 489.077051][T13190] Call Trace: [ 489.080405][T13190] [ 489.083466][T13190] dump_stack_lvl+0x16c/0x1f0 [ 489.088215][T13190] should_fail_ex+0x497/0x5b0 [ 489.092963][T13190] ? fs_reclaim_acquire+0xae/0x150 [ 489.098170][T13190] should_failslab+0xc2/0x120 [ 489.103040][T13190] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 489.108516][T13190] ? is_bad_inode+0xd/0x40 [ 489.112998][T13190] ? ima_d_path+0xbe/0x2a0 [ 489.117511][T13190] ima_d_path+0xbe/0x2a0 [ 489.121844][T13190] ? __pfx_ima_d_path+0x10/0x10 [ 489.126773][T13190] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 489.132348][T13190] process_measurement+0x1b76/0x2370 [ 489.137722][T13190] ? __pfx_process_measurement+0x10/0x10 [ 489.143422][T13190] ? tracing_open_file_tr+0x180/0x220 [ 489.148879][T13190] ? __pfx_lock_release+0x10/0x10 [ 489.153963][T13190] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 489.159837][T13190] ? lockdep_hardirqs_on+0x7c/0x110 [ 489.165106][T13190] ? __mutex_lock+0x1cc/0xa60 [ 489.169893][T13190] ? inode_to_bdi+0x9e/0x160 [ 489.174616][T13190] ima_file_check+0xc6/0x110 [ 489.179323][T13190] ? __pfx_ima_file_check+0x10/0x10 [ 489.184614][T13190] security_file_post_open+0x8e/0x210 [ 489.190057][T13190] path_openat+0x1419/0x2d60 [ 489.194738][T13190] ? __pfx_path_openat+0x10/0x10 [ 489.199745][T13190] ? __pfx___lock_acquire+0x10/0x10 [ 489.205019][T13190] ? lock_acquire.part.0+0x11b/0x380 [ 489.210371][T13190] ? find_held_lock+0x2d/0x110 [ 489.215312][T13190] do_filp_open+0x20c/0x470 [ 489.219903][T13190] ? __pfx_do_filp_open+0x10/0x10 [ 489.225005][T13190] ? find_held_lock+0x2d/0x110 [ 489.229874][T13190] ? alloc_fd+0x41f/0x760 [ 489.234295][T13190] do_sys_openat2+0x17a/0x1e0 [ 489.239062][T13190] ? __pfx_do_sys_openat2+0x10/0x10 [ 489.244354][T13190] ? __fget_files+0x206/0x3a0 [ 489.249112][T13190] __x64_sys_openat+0x175/0x210 [ 489.254047][T13190] ? __pfx___x64_sys_openat+0x10/0x10 [ 489.259514][T13190] ? ksys_write+0x1ba/0x250 [ 489.264112][T13190] do_syscall_64+0xcd/0x250 [ 489.268690][T13190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 489.274758][T13190] RIP: 0033:0x7fd5bf385d29 [ 489.279227][T13190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 489.298909][T13190] RSP: 002b:00007fd5c00d0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 489.307477][T13190] RAX: ffffffffffffffda RBX: 00007fd5bf576080 RCX: 00007fd5bf385d29 [ 489.315515][T13190] RDX: 0000000000000002 RSI: 0000000020000300 RDI: ffffffffffffff9c [ 489.323652][T13190] RBP: 00007fd5c00d0090 R08: 0000000000000000 R09: 0000000000000000 [ 489.331773][T13190] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 489.339896][T13190] R13: 0000000000000001 R14: 00007fd5bf576080 R15: 00007ffcc8facf18 [ 489.347951][T13190] [ 490.335144][T13218] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2065'. [ 494.437559][T13299] netlink: 'syz.4.2084': attribute type 10 has an invalid length. [ 494.486899][T13299] netlink: 'syz.4.2084': attribute type 13 has an invalid length. [ 494.542585][T13299] netlink: 342 bytes leftover after parsing attributes in process `syz.4.2084'. [ 496.468334][T13340] ima: policy update failed [ 496.487063][ T29] audit: type=1802 audit(6029508369.682:42): pid=13340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2094" res=0 errno=0 [ 497.424995][T13381] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2102'. [ 502.085113][T13126] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 504.113993][T13491] Process accounting paused [ 506.920508][T13546] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2138'. [ 506.939965][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 506.946862][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 509.457257][T13596] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2149'. [ 515.370930][T13682] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2170'. [ 515.446396][T13682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 515.955115][T13682] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.653089][T13692] ima: policy update failed [ 517.747352][ T29] audit: type=1802 audit(6029508390.952:43): pid=13692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.2172" res=0 errno=0 [ 517.921002][T13690] Process accounting resumed [ 525.826998][T13856] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 525.833515][T13856] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 525.881079][T13847] ima: policy update failed [ 525.895993][ T29] audit: type=1802 audit(6029508399.092:44): pid=13847 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2211" res=0 errno=0 [ 528.583285][T13913] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2227'. [ 528.870501][T13913] team0: Port device team_slave_0 removed [ 531.434633][T13975] Process accounting resumed [ 531.598065][T13968] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 531.627619][T13968] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 531.633763][T13968] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 531.707207][T13968] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 532.937048][ T5836] Bluetooth: hci1: command 0x0406 tx timeout [ 533.667272][ T5836] Bluetooth: hci3: command 0x0406 tx timeout [ 533.674318][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 533.737133][ T5836] Bluetooth: hci0: command 0x041b tx timeout [ 534.121855][T14027] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 534.128407][T14027] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 534.193941][T14026] ima: policy update failed [ 534.202157][ T29] audit: type=1802 audit(6029508407.402:45): pid=14026 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2252" res=0 errno=0 [ 536.390748][T14072] [U] [ 536.390851][T14072] [U] [ 536.390912][T14072] [U] [ 536.390972][T14072] [U] [ 536.391254][T14072] [U] [ 536.391312][T14072] [U] [ 536.391368][T14072] [U] [ 536.391423][T14072] [U] [ 536.391722][T14072] [U] [ 536.391781][T14072] [U] [ 536.391839][T14072] [U] [ 536.391897][T14072] [U] [ 536.392162][T14072] [U] [ 536.392221][T14072] [U] [ 536.392278][T14072] [U] [ 536.392335][T14072] [U] [ 536.392622][T14072] [U] [ 536.392679][T14072] [U] [ 536.392733][T14072] [U] [ 536.392791][T14072] [U] [ 536.393054][T14072] [U] [ 536.393115][T14072] [U] [ 536.393186][T14072] [U] [ 536.393242][T14072] [U] [ 536.393931][T14072] [U] [ 536.393993][T14072] [U] [ 536.394052][T14072] [U] [ 536.394110][T14072] [U] [ 536.394418][T14072] [U] [ 536.394489][T14072] [U] [ 536.394548][T14072] [U] [ 536.394607][T14072] [U] [ 536.395335][T14072] [U] [ 536.395396][T14072] [U] [ 536.395464][T14072] [U] [ 536.395523][T14072] [U] [ 536.395804][T14072] [U] [ 536.395861][T14072] [U] [ 536.395918][T14072] [U] [ 536.395976][T14072] [U] [ 536.396242][T14072] [U] [ 536.396319][T14072] [U] [ 536.396378][T14072] [U] [ 536.396445][T14072] [U] [ 536.396715][T14072] [U] [ 536.396775][T14072] [U] [ 536.396834][T14072] [U] [ 536.396893][T14072] [U] [ 536.406692][T14072] [U] [ 536.406759][T14072] [U] [ 536.406814][T14072] [U] [ 536.406870][T14072] [U] [ 536.407913][T14072] [U] [ 536.407975][T14072] [U] [ 536.408035][T14072] [U] [ 536.408094][T14072] [U] [ 536.408373][T14072] [U] [ 536.408441][T14072] [U] [ 536.408500][T14072] [U] [ 536.408560][T14072] [U] [ 536.408832][T14072] [U] [ 536.408892][T14072] [U] [ 536.408951][T14072] [U] [ 536.409011][T14072] [U] [ 536.409284][T14072] [U] [ 536.409343][T14072] [U] [ 536.409403][T14072] [U] [ 536.409558][T14072] [U] [ 536.409839][T14072] [U] [ 536.409902][T14072] [U] [ 536.409962][T14072] [U] [ 536.410022][T14072] [U] [ 536.410294][T14072] [U] [ 536.410356][T14072] [U] [ 536.410415][T14072] [U] [ 536.410483][T14072] [U] [ 536.410750][T14072] [U] [ 536.410808][T14072] [U] [ 536.410868][T14072] [U] [ 536.410926][T14072] [U] [ 536.412128][T14072] [U] [ 536.412191][T14072] [U] [ 536.412252][T14072] [U] [ 536.412321][T14072] [U] [ 536.412609][T14072] [U] [ 536.412671][T14072] [U] [ 536.412731][T14072] [U] [ 536.412788][T14072] [U] [ 536.413055][T14072] [U] [ 536.413114][T14072] [U] [ 536.413171][T14072] [U] [ 536.413227][T14072] [U] [ 536.423075][T14072] [U] [ 536.423141][T14072] [U] [ 536.423201][T14072] [U] [ 536.423261][T14072] [U] [ 536.423549][T14072] [U] [ 536.423609][T14072] [U] [ 536.423668][T14072] [U] [ 536.423726][T14072] [U] [ 536.424662][T14072] [U] [ 536.424773][T14072] [U] [ 536.424840][T14072] [U] [ 536.424899][T14072] [U] [ 536.425178][T14072] [U] [ 536.425235][T14072] [U] [ 536.425291][T14072] [U] [ 536.425350][T14072] [U] [ 536.425630][T14072] [U] [ 536.425704][T14072] [U] [ 536.425768][T14072] [U] [ 536.425829][T14072] [U] [ 536.426108][T14072] [U] [ 536.426168][T14072] [U] [ 536.426228][T14072] [U] [ 536.426288][T14072] [U] [ 536.446022][T14072] [U] [ 536.446092][T14072] [U] [ 536.446150][T14072] [U] [ 536.446219][T14072] [U] [ 536.447848][T14067] [U] [ 539.204073][T14148] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2283'. [ 539.293372][T14155] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 539.299999][T14155] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 539.338453][T14154] ima: policy update failed [ 539.349150][ T29] audit: type=1802 audit(6029508412.552:46): pid=14154 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2284" res=0 errno=0 [ 541.737348][T14227] netlink: 326 bytes leftover after parsing attributes in process `syz.0.2304'. [ 542.537735][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 542.561759][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 542.572526][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 542.609176][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 542.624086][ T5844] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 542.677707][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 543.341289][T14241] chnl_net:caif_netlink_parms(): no params data found [ 543.662609][T14241] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.721273][T14241] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.761308][T14271] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 543.764333][T14241] bridge_slave_0: entered allmulticast mode [ 543.767835][T14271] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 543.800460][T14241] bridge_slave_0: entered promiscuous mode [ 543.829244][T14241] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.837806][T14241] bridge0: port 2(bridge_slave_1) entered disabled state [ 543.846202][T14270] ima: policy update failed [ 543.855223][ T29] audit: type=1802 audit(6029508417.052:47): pid=14270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2314" res=0 errno=0 [ 543.857332][T14241] bridge_slave_1: entered allmulticast mode [ 543.915608][T14241] bridge_slave_1: entered promiscuous mode [ 544.236141][T14241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 544.300805][T14241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 544.415509][T14241] team0: Port device team_slave_0 added [ 544.515291][T14241] team0: Port device team_slave_1 added [ 544.646594][T14241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 544.656203][T14241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.747884][T14241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 544.777259][ T5836] Bluetooth: hci2: command tx timeout [ 544.778052][T14241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 544.795017][T14241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 544.855668][T14241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 545.158344][T14241] hsr_slave_0: entered promiscuous mode [ 545.197899][T14241] hsr_slave_1: entered promiscuous mode [ 545.214556][T14241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 545.223607][T14241] Cannot create hsr debugfs directory [ 546.225246][T14312] netlink: 1404 bytes leftover after parsing attributes in process `syz.4.2326'. [ 546.302759][T14241] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 546.871790][ T5836] Bluetooth: hci2: command tx timeout [ 546.933656][T14241] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.501064][T14241] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.750611][T14241] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.384937][T14241] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 548.413294][T14241] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 548.489075][T14241] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 548.589755][T14241] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 548.937548][ T5836] Bluetooth: hci2: command tx timeout [ 549.561680][T14241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.603771][T14241] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.664815][T13360] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.672074][T13360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.686196][T13360] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.693434][T13360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.727819][T14368] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 549.734342][T14368] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 549.839808][T14367] ima: policy update failed [ 549.848263][ T29] audit: type=1802 audit(6029508423.042:48): pid=14367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2338" res=0 errno=0 [ 550.243926][T14241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 550.248004][T14381] Process accounting resumed [ 550.402313][T14241] veth0_vlan: entered promiscuous mode [ 550.432208][T14241] veth1_vlan: entered promiscuous mode [ 550.528816][T14241] veth0_macvtap: entered promiscuous mode [ 550.555825][T14241] veth1_macvtap: entered promiscuous mode [ 550.600278][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.616590][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.638097][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.671849][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.682001][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 550.701517][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.719483][T14241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.746700][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.767438][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.791330][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.806345][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.824186][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.836717][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.857793][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.894084][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.904270][T14241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 550.933999][T14241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 550.959998][T14241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.996139][T14241] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.005486][T14241] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.017657][ T5836] Bluetooth: hci2: command tx timeout [ 551.022132][T14241] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.037039][T14241] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.427309][T13354] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.439507][T13354] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.500449][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.517455][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 551.770944][T14241] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 555.538124][T14469] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2364'. [ 555.630156][T14469] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.770403][T14469] bridge_slave_0 (unregistering): left allmulticast mode [ 555.797132][T14469] bridge_slave_0 (unregistering): left promiscuous mode [ 555.829500][T14469] bridge0: port 1(bridge_slave_0) entered disabled state [ 556.092360][T14472] can: request_module (can-proto-0) failed. [ 556.728374][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 556.779136][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 556.790464][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 556.822864][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 556.837984][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 556.845514][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 557.321174][T14491] chnl_net:caif_netlink_parms(): no params data found [ 557.619509][T14491] bridge0: port 1(bridge_slave_0) entered blocking state [ 557.626704][T14491] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.677417][T14491] bridge_slave_0: entered allmulticast mode [ 557.697263][T14491] bridge_slave_0: entered promiscuous mode [ 557.721860][T14491] bridge0: port 2(bridge_slave_1) entered blocking state [ 557.745041][T14491] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.757353][T14491] bridge_slave_1: entered allmulticast mode [ 557.764818][T14491] bridge_slave_1: entered promiscuous mode [ 557.888115][T14491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 557.921183][T14491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 558.055239][T14491] team0: Port device team_slave_0 added [ 558.075889][T14491] team0: Port device team_slave_1 added [ 558.262256][T14491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 558.270398][T14491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.344972][T14491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 558.369504][T14491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 558.376514][T14491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 558.402525][ C1] vkms_vblank_simulate: vblank timer overrun [ 558.432791][T14491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 558.641153][T14491] hsr_slave_0: entered promiscuous mode [ 558.671737][T14491] hsr_slave_1: entered promiscuous mode [ 558.697332][T14491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 558.705193][T14491] Cannot create hsr debugfs directory [ 558.946703][ T54] Bluetooth: hci1: command tx timeout [ 559.089725][T14532] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2381'. [ 559.145783][T14532] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.209637][T14532] bridge_slave_0 (unregistering): left allmulticast mode [ 559.216776][T14532] bridge_slave_0 (unregistering): left promiscuous mode [ 559.236204][T14532] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.742247][T14491] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.039241][T14491] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.529065][T14491] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.890989][T14491] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 561.017637][ T54] Bluetooth: hci1: command tx timeout [ 561.266114][T14491] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 561.302325][T14491] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 561.362407][T14491] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 561.399432][T14491] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 561.655025][T14491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 561.711343][T14491] 8021q: adding VLAN 0 to HW filter on device team0 [ 561.748571][T13360] bridge0: port 1(bridge_slave_0) entered blocking state [ 561.748707][T13360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 561.785828][T13354] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.785898][T13354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 562.531930][T14491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 562.643832][T14491] veth0_vlan: entered promiscuous mode [ 562.662636][T14491] veth1_vlan: entered promiscuous mode [ 562.740359][T14491] veth0_macvtap: entered promiscuous mode [ 562.780691][T14491] veth1_macvtap: entered promiscuous mode [ 562.863185][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.884395][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.904847][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.936475][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 562.963340][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 562.994743][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.008070][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 563.019345][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.075578][T14491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 563.101602][ T54] Bluetooth: hci1: command tx timeout [ 563.135208][T14596] netlink: 342 bytes leftover after parsing attributes in process `syz.2.2397'. [ 563.184539][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.270410][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.297469][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.317056][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.342790][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.369724][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.387013][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.408551][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.429004][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.449954][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.472223][T14491] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 563.497889][T14491] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 563.518387][T14491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 563.533335][T14491] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.552347][T14491] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.567054][T14491] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 563.587098][T14491] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 564.003966][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.024389][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 564.067616][T13359] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 564.076542][T13359] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 565.178566][ T54] Bluetooth: hci1: command tx timeout [ 565.485939][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 565.499680][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 565.523897][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 565.541421][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 565.559834][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 565.581432][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 565.874249][T13359] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.020929][T13359] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.178908][T13359] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.444183][T13359] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.716243][T14638] chnl_net:caif_netlink_parms(): no params data found [ 566.837405][T13359] hsr0: left allmulticast mode [ 566.842633][T13359] hsr_slave_0: left allmulticast mode [ 566.862889][T13359] hsr_slave_1: left allmulticast mode [ 566.874624][T13359] hsr0: left promiscuous mode [ 566.888623][T13359] bridge0: port 3(hsr0) entered disabled state [ 566.903841][T13359] bridge_slave_1: left allmulticast mode [ 566.938139][T13359] bridge_slave_1: left promiscuous mode [ 566.943972][T13359] bridge0: port 2(bridge_slave_1) entered disabled state [ 567.657640][ T54] Bluetooth: hci3: command tx timeout [ 568.391467][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 568.398232][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 568.960792][T13359] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 569.055649][T13359] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 569.079122][T13359] bond0 (unregistering): Released all slaves [ 569.508823][T14638] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.518630][T14638] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.536126][T14638] bridge_slave_0: entered allmulticast mode [ 569.554677][T14638] bridge_slave_0: entered promiscuous mode [ 569.727160][T14638] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.734365][T14638] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.743222][ T54] Bluetooth: hci3: command tx timeout [ 569.767516][T14638] bridge_slave_1: entered allmulticast mode [ 569.828167][T14638] bridge_slave_1: entered promiscuous mode [ 570.210832][T14638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 570.251087][T14638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 570.379539][T14745] ima: policy update failed [ 570.384270][ T29] audit: type=1802 audit(6029508443.582:49): pid=14745 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2433" res=0 errno=0 [ 570.555211][T14638] team0: Port device team_slave_0 added [ 570.704341][T14638] team0: Port device team_slave_1 added [ 571.064733][T14638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.097569][T14638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.123518][ C1] vkms_vblank_simulate: vblank timer overrun [ 571.196680][T14638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.286587][T14638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.307074][T14638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 571.387133][T14638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 571.599880][T14638] hsr_slave_0: entered promiscuous mode [ 571.627686][T14638] hsr_slave_1: entered promiscuous mode [ 571.698373][T14638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 571.707969][T14638] Cannot create hsr debugfs directory [ 571.821665][ T54] Bluetooth: hci3: command tx timeout [ 573.613872][T13359] hsr_slave_0: left promiscuous mode [ 573.707246][T13359] hsr_slave_1: left promiscuous mode [ 573.798420][T13359] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.806064][T13359] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.897545][ T54] Bluetooth: hci3: command tx timeout [ 573.965595][T13359] veth1_macvtap: left promiscuous mode [ 573.994705][T13359] veth0_macvtap: left promiscuous mode [ 574.023927][T13359] veth1_vlan: left promiscuous mode [ 574.041809][T13359] veth0_vlan: left promiscuous mode [ 575.888546][T14866] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2451'. [ 576.018145][T13359] team0 (unregistering): Port device team_slave_1 removed [ 576.812775][T14869] netlink: 334 bytes leftover after parsing attributes in process `syz.3.2451'. [ 576.943056][T14638] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 576.972124][T14638] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 577.058114][T14638] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 577.070208][T14638] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 577.269159][T14638] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.346822][T14638] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.385301][T13364] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.392531][T13364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.451548][T13364] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.460233][T13364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.687450][T14638] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 577.720603][T14638] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 578.216890][T14638] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 578.289167][T14638] veth0_vlan: entered promiscuous mode [ 578.345776][T14638] veth1_vlan: entered promiscuous mode [ 578.405268][T14638] veth0_macvtap: entered promiscuous mode [ 578.431984][T14638] veth1_macvtap: entered promiscuous mode [ 578.475326][T14638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.503133][T14638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.548503][T14638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.577081][T14638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.646644][T14638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.677613][T14638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.704190][T14638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.737230][T14638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.748296][T14638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.759137][T14638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.773246][T14638] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.801352][T14638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.812214][T14638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.837155][T14638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.867014][T14638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.879940][T14638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.910962][T14638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.951672][T14638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.987365][T14638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.999194][T14638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.010281][T14638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.025828][T14638] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 579.038497][T14638] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.083555][T14638] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.120408][T14638] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.147095][T14638] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.160528][T14918] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2463'. [ 579.170233][T14638] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.187143][T14638] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 579.468871][T13363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.477536][T13363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 579.574666][T13360] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 579.592375][T13360] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.044046][T14961] ima: policy update failed [ 581.071471][ T29] audit: type=1802 audit(6029508454.252:50): pid=14961 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2473" res=0 errno=0 [ 581.938614][T14992] Process accounting resumed [ 583.758191][T15038] ima: policy update failed [ 583.763157][ T29] audit: type=1802 audit(6029508456.962:51): pid=15038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2493" res=0 errno=0 [ 583.825189][T15042] netlink: zone id is out of range [ 583.888475][T15042] netlink: set zone limit has 8 unknown bytes [ 584.970992][T15065] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2501'. [ 585.005400][T15065] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2501'. [ 586.698823][T15095] ima: policy update failed [ 586.703547][ T29] audit: type=1802 audit(6029508459.902:52): pid=15095 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.2512" res=0 errno=0 [ 587.469806][T15123] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2519'. [ 591.524950][ T29] audit: type=1326 audit(6029508464.722:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15213 comm="" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f7357f85d29 code=0x0 [ 594.192792][T15271] FAULT_INJECTION: forcing a failure. [ 594.192792][T15271] name failslab, interval 1, probability 0, space 0, times 0 [ 594.215347][T15271] CPU: 1 UID: 0 PID: 15271 Comm: syz.2.2559 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 594.226224][T15271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 594.236346][T15271] Call Trace: [ 594.239788][T15271] [ 594.242980][T15271] dump_stack_lvl+0x16c/0x1f0 [ 594.247746][T15271] should_fail_ex+0x497/0x5b0 [ 594.252497][T15271] ? fs_reclaim_acquire+0xae/0x150 [ 594.257776][T15271] should_failslab+0xc2/0x120 [ 594.262537][T15271] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 594.268007][T15271] ? vma_merge_new_range+0x3f0/0xb70 [ 594.273378][T15271] ? vm_area_alloc+0x1f/0x1c0 [ 594.278159][T15271] vm_area_alloc+0x1f/0x1c0 [ 594.282830][T15271] __mmap_region+0x101b/0x2670 [ 594.287687][T15271] ? __pfx___mmap_region+0x10/0x10 [ 594.292966][T15271] ? hlock_class+0x4e/0x130 [ 594.297643][T15271] ? mark_lock+0xb5/0xc60 [ 594.302191][T15271] ? cap_mmap_addr+0x53/0x320 [ 594.307046][T15271] mmap_region+0x270/0x320 [ 594.311561][T15271] do_mmap+0xc00/0xfc0 [ 594.315718][T15271] vm_mmap_pgoff+0x1ba/0x360 [ 594.320404][T15271] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 594.325606][T15271] ? __fget_files+0x206/0x3a0 [ 594.330364][T15271] ksys_mmap_pgoff+0x32c/0x5c0 [ 594.335203][T15271] ? __pfx_ksys_write+0x10/0x10 [ 594.340147][T15271] __x64_sys_mmap+0x125/0x190 [ 594.344988][T15271] do_syscall_64+0xcd/0x250 [ 594.349735][T15271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 594.355707][T15271] RIP: 0033:0x7faef0185d29 [ 594.360275][T15271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 594.380222][T15271] RSP: 002b:00007faef100c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 594.388719][T15271] RAX: ffffffffffffffda RBX: 00007faef0375fa0 RCX: 00007faef0185d29 [ 594.396821][T15271] RDX: 0000000000000000 RSI: 0000000000380000 RDI: 0000000000000000 [ 594.404947][T15271] RBP: 00007faef100c090 R08: 0000000000000007 R09: 0000000000000000 [ 594.412991][T15271] R10: 0028000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 594.421034][T15271] R13: 0000000000000000 R14: 00007faef0375fa0 R15: 00007ffc80addb58 [ 594.429190][T15271] [ 603.964414][T15439] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2596'. [ 603.998972][T15439] netlink: 338 bytes leftover after parsing attributes in process `syz.4.2596'. [ 604.088491][T15439] netlink: 'syz.4.2596': attribute type 1 has an invalid length. [ 604.096325][T15439] netlink: 'syz.4.2596': attribute type 1 has an invalid length. [ 606.957177][T15495] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2613'. [ 606.988249][T15495] netlink: 338 bytes leftover after parsing attributes in process `syz.0.2613'. [ 607.077245][T15495] netlink: 'syz.0.2613': attribute type 1 has an invalid length. [ 607.107178][T15495] netlink: 'syz.0.2613': attribute type 1 has an invalid length. [ 608.411443][T15529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2624'. [ 608.447261][T15529] bridge_slave_1: left allmulticast mode [ 608.452998][T15529] bridge_slave_1: left promiscuous mode [ 608.488382][T15529] bridge0: port 2(bridge_slave_1) entered disabled state [ 608.523528][T15529] bridge_slave_0: left allmulticast mode [ 608.531510][T15529] bridge_slave_0: left promiscuous mode [ 608.543028][T15529] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.170035][T15544] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2626'. [ 609.218925][T15544] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2626'. [ 609.348069][T15544] netlink: 'syz.3.2626': attribute type 1 has an invalid length. [ 609.366326][T15544] netlink: 'syz.3.2626': attribute type 1 has an invalid length. [ 614.762127][T15659] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2665'. [ 614.780627][T15659] bridge_slave_1: left allmulticast mode [ 614.789913][T15659] bridge_slave_1: left promiscuous mode [ 614.801496][T15659] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.827850][T15659] bridge_slave_0: left allmulticast mode [ 614.843287][T15659] bridge_slave_0: left promiscuous mode [ 614.861636][T15659] bridge0: port 1(bridge_slave_0) entered disabled state [ 617.189370][T15703] FAULT_INJECTION: forcing a failure. [ 617.189370][T15703] name failslab, interval 1, probability 0, space 0, times 0 [ 617.207196][T15703] CPU: 1 UID: 0 PID: 15703 Comm: syz.0.2668 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 617.218232][T15703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 617.228344][T15703] Call Trace: [ 617.231674][T15703] [ 617.234647][T15703] dump_stack_lvl+0x16c/0x1f0 [ 617.239405][T15703] should_fail_ex+0x497/0x5b0 [ 617.244154][T15703] ? fs_reclaim_acquire+0xae/0x150 [ 617.249340][T15703] should_failslab+0xc2/0x120 [ 617.254106][T15703] __kmalloc_cache_noprof+0x68/0x420 [ 617.259561][T15703] usbdev_mmap+0x1ee/0xb30 [ 617.264051][T15703] ? __pfx_usbdev_mmap+0x10/0x10 [ 617.269061][T15703] ? __raw_spin_lock_init+0x3a/0x110 [ 617.274422][T15703] __mmap_region+0x1786/0x2670 [ 617.279273][T15703] ? __pfx___mmap_region+0x10/0x10 [ 617.284456][T15703] ? hlock_class+0x4e/0x130 [ 617.289037][T15703] ? mark_lock+0xb5/0xc60 [ 617.293536][T15703] ? cap_mmap_addr+0x53/0x320 [ 617.298389][T15703] mmap_region+0x270/0x320 [ 617.302971][T15703] do_mmap+0xc00/0xfc0 [ 617.307115][T15703] vm_mmap_pgoff+0x1ba/0x360 [ 617.311776][T15703] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 617.317031][T15703] ? __fget_files+0x206/0x3a0 [ 617.321776][T15703] ksys_mmap_pgoff+0x32c/0x5c0 [ 617.326598][T15703] ? __pfx_ksys_write+0x10/0x10 [ 617.331478][T15703] __x64_sys_mmap+0x125/0x190 [ 617.336223][T15703] do_syscall_64+0xcd/0x250 [ 617.340757][T15703] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 617.346688][T15703] RIP: 0033:0x7f23e5d85d29 [ 617.351127][T15703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 617.370778][T15703] RSP: 002b:00007f23e6c10038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 617.379261][T15703] RAX: ffffffffffffffda RBX: 00007f23e5f75fa0 RCX: 00007f23e5d85d29 [ 617.387292][T15703] RDX: 0000000000000000 RSI: 0000000000380000 RDI: 0000000000000000 [ 617.395306][T15703] RBP: 00007f23e6c10090 R08: 0000000000000007 R09: 0000000000000000 [ 617.403318][T15703] R10: 0028000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 617.411437][T15703] R13: 0000000000000000 R14: 00007f23e5f75fa0 R15: 00007ffdd9815498 [ 617.419479][T15703] [ 617.422628][ C1] vkms_vblank_simulate: vblank timer overrun [ 625.716457][T15869] ima: policy update failed [ 625.767283][ T29] audit: type=1802 audit(6029508498.952:54): pid=15869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.0.2711" res=0 errno=0 [ 629.707365][T15967] netlink: 334 bytes leftover after parsing attributes in process `syz.4.2738'. [ 629.821165][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 629.838268][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 635.325178][T16087] netlink: 334 bytes leftover after parsing attributes in process `syz.0.2767'. [ 637.188438][T16123] netlink: 326 bytes leftover after parsing attributes in process `syz.4.2773'. [ 642.896402][T16202] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2790'. [ 653.988448][T16369] ima: policy update failed [ 654.033732][ T29] audit: type=1802 audit(6029508527.232:55): pid=16369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.2825" res=0 errno=0 [ 654.571495][T16381] FAULT_INJECTION: forcing a failure. [ 654.571495][T16381] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 654.687394][T16381] CPU: 0 UID: 0 PID: 16381 Comm: syz.2.2827 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 654.698283][T16381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 654.708396][T16381] Call Trace: [ 654.711728][T16381] [ 654.714720][T16381] dump_stack_lvl+0x16c/0x1f0 [ 654.719667][T16381] should_fail_ex+0x497/0x5b0 [ 654.724514][T16381] ? fs_reclaim_acquire+0xae/0x150 [ 654.729708][T16381] should_fail_alloc_page+0xe7/0x130 [ 654.735070][T16381] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 654.741315][T16381] __alloc_pages_noprof+0x190/0x25b0 [ 654.746699][T16381] ? hlock_class+0x4e/0x130 [ 654.751272][T16381] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 654.757069][T16381] ? __pfx_mark_lock+0x10/0x10 [ 654.761923][T16381] ? find_next_iomem_res+0x3fb/0x4f0 [ 654.767283][T16381] ? __pfx_register_lock_class+0x10/0x10 [ 654.772985][T16381] ? trace_lock_acquire+0x14e/0x1f0 [ 654.778300][T16381] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 654.784266][T16381] ? policy_nodemask+0xea/0x4e0 [ 654.789206][T16381] alloc_pages_mpol_noprof+0x2c9/0x610 [ 654.794764][T16381] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 654.800838][T16381] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 654.807071][T16381] ? __pfx___lock_acquire+0x10/0x10 [ 654.812357][T16381] ? __pfx_walk_system_ram_range+0x10/0x10 [ 654.818254][T16381] pte_alloc_one+0x20/0x390 [ 654.822824][T16381] __pte_alloc+0x6e/0x3b0 [ 654.827193][T16381] ? __pfx___pte_alloc+0x10/0x10 [ 654.832173][T16381] remap_pfn_range_notrack+0xb33/0xe80 [ 654.837677][T16381] ? lock_acquire+0x2f/0xb0 [ 654.842228][T16381] ? __pfx_remap_pfn_range_notrack+0x10/0x10 [ 654.848249][T16381] ? up_write+0x1b2/0x520 [ 654.852621][T16381] remap_pfn_range+0xce/0x140 [ 654.857368][T16381] ? __pfx_remap_pfn_range+0x10/0x10 [ 654.862706][T16381] usbdev_mmap+0x7d9/0xb30 [ 654.867180][T16381] ? __pfx_usbdev_mmap+0x10/0x10 [ 654.872151][T16381] ? __raw_spin_lock_init+0x3a/0x110 [ 654.877481][T16381] __mmap_region+0x1786/0x2670 [ 654.882301][T16381] ? __pfx___mmap_region+0x10/0x10 [ 654.887456][T16381] ? hlock_class+0x4e/0x130 [ 654.891999][T16381] ? mark_lock+0xb5/0xc60 [ 654.896444][T16381] ? cap_mmap_addr+0x53/0x320 [ 654.901167][T16381] mmap_region+0x270/0x320 [ 654.905626][T16381] do_mmap+0xc00/0xfc0 [ 654.909739][T16381] vm_mmap_pgoff+0x1ba/0x360 [ 654.914507][T16381] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 654.919688][T16381] ? __fget_files+0x206/0x3a0 [ 654.924411][T16381] ksys_mmap_pgoff+0x32c/0x5c0 [ 654.929214][T16381] ? __pfx_ksys_write+0x10/0x10 [ 654.934108][T16381] __x64_sys_mmap+0x125/0x190 [ 654.938849][T16381] do_syscall_64+0xcd/0x250 [ 654.943442][T16381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 654.949384][T16381] RIP: 0033:0x7faef0185d29 [ 654.953822][T16381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 654.973503][T16381] RSP: 002b:00007faef100c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 654.981987][T16381] RAX: ffffffffffffffda RBX: 00007faef0375fa0 RCX: 00007faef0185d29 [ 654.989984][T16381] RDX: 0000000000000000 RSI: 0000000000380000 RDI: 0000000000000000 [ 654.997980][T16381] RBP: 00007faef100c090 R08: 0000000000000007 R09: 0000000000000000 [ 655.006154][T16381] R10: 0028000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 655.014158][T16381] R13: 0000000000000000 R14: 00007faef0375fa0 R15: 00007ffc80addb58 [ 655.022636][T16381] [ 655.031904][T16381] ------------[ cut here ]------------ [ 655.037528][T16381] WARNING: CPU: 1 PID: 16381 at arch/x86/mm/pat/memtype.c:983 get_pat_info+0x2c1/0x320 [ 655.047409][T16381] Modules linked in: [ 655.051369][T16381] CPU: 1 UID: 0 PID: 16381 Comm: syz.2.2827 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 655.062341][T16381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 655.072517][T16381] RIP: 0010:get_pat_info+0x2c1/0x320 [ 655.078011][T16381] Code: 49 89 1c 24 e9 0f ff ff ff e8 fb f3 4d 00 90 0f 0b 90 e9 ff fd ff ff 4c 89 ef e8 3a 68 b0 00 e9 f0 fe ff ff e8 e0 f3 4d 00 90 <0f> 0b 90 bb ea ff ff ff e9 e3 fe ff ff 4c 89 ff e8 2a 67 b0 00 e9 [ 655.097985][T16381] RSP: 0018:ffffc9000e30f308 EFLAGS: 00010293 [ 655.104325][T16381] RAX: 0000000000000000 RBX: ffff88802fde30f8 RCX: ffffffff814b5a94 [ 655.112435][T16381] RDX: ffff88802f77bc00 RSI: ffffffff814b5b10 RDI: 0000000000000007 [ 655.122111][T16381] RBP: 1ffff92001c61e62 R08: 0000000000000007 R09: 0000000000000020 [ 655.130255][T16381] R10: 0000000000000028 R11: 0000000000000001 R12: ffffc9000e30f410 [ 655.138514][T16381] R13: 0000000000000000 R14: 0000000000000028 R15: ffff88802fde3118 [ 655.146637][T16381] FS: 00007faef100c6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 655.155960][T16381] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 655.162811][T16381] CR2: 0000000001830000 CR3: 000000004384c000 CR4: 00000000003526f0 [ 655.170909][T16381] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 655.179609][T16381] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 655.187986][T16381] Call Trace: [ 655.191309][T16381] [ 655.194279][T16381] ? __warn+0xea/0x3c0 [ 655.198537][T16381] ? get_pat_info+0x2c1/0x320 [ 655.203289][T16381] ? report_bug+0x3c0/0x580 [ 655.207960][T16381] ? handle_bug+0x54/0xa0 [ 655.212480][T16381] ? exc_invalid_op+0x17/0x50 [ 655.217319][T16381] ? asm_exc_invalid_op+0x1a/0x20 [ 655.223313][T16381] ? get_pat_info+0x244/0x320 [ 655.228832][T16381] ? get_pat_info+0x2c0/0x320 [ 655.233595][T16381] ? get_pat_info+0x2c1/0x320 [ 655.238857][T16381] ? get_pat_info+0x2c0/0x320 [ 655.243626][T16381] ? __pfx_get_pat_info+0x10/0x10 [ 655.248845][T16381] untrack_pfn+0xf7/0x4d0 [ 655.253260][T16381] ? __pfx_untrack_pfn+0x10/0x10 [ 655.258381][T16381] ? zap_page_range_single+0x307/0x560 [ 655.263939][T16381] ? __pfx_lock_release+0x10/0x10 [ 655.269248][T16381] ? uprobe_munmap+0x20/0x5c0 [ 655.274003][T16381] ? trace_lock_acquire+0x14e/0x1f0 [ 655.279369][T16381] unmap_single_vma+0x1bd/0x2b0 [ 655.284310][T16381] zap_page_range_single+0x326/0x560 [ 655.289745][T16381] ? __pfx_zap_page_range_single+0x10/0x10 [ 655.295632][T16381] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 655.301874][T16381] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 655.308165][T16381] ? __pfx___pte_alloc+0x10/0x10 [ 655.313182][T16381] remap_pfn_range_notrack+0xb8d/0xe80 [ 655.318817][T16381] ? lock_acquire+0x2f/0xb0 [ 655.324215][T16381] ? __pfx_remap_pfn_range_notrack+0x10/0x10 [ 655.331122][T16381] ? up_write+0x1b2/0x520 [ 655.335554][T16381] remap_pfn_range+0xce/0x140 [ 655.340781][T16381] ? __pfx_remap_pfn_range+0x10/0x10 [ 655.346157][T16381] usbdev_mmap+0x7d9/0xb30 [ 655.350720][T16381] ? __pfx_usbdev_mmap+0x10/0x10 [ 655.355726][T16381] ? __raw_spin_lock_init+0x3a/0x110 [ 655.361325][T16381] __mmap_region+0x1786/0x2670 [ 655.366184][T16381] ? __pfx___mmap_region+0x10/0x10 [ 655.371448][T16381] ? hlock_class+0x4e/0x130 [ 655.376033][T16381] ? mark_lock+0xb5/0xc60 [ 655.380657][T16381] ? cap_mmap_addr+0x53/0x320 [ 655.385444][T16381] mmap_region+0x270/0x320 [ 655.390008][T16381] do_mmap+0xc00/0xfc0 [ 655.394168][T16381] vm_mmap_pgoff+0x1ba/0x360 [ 655.398988][T16381] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 655.404204][T16381] ? __fget_files+0x206/0x3a0 [ 655.409028][T16381] ksys_mmap_pgoff+0x32c/0x5c0 [ 655.413872][T16381] ? __pfx_ksys_write+0x10/0x10 [ 655.420042][T16381] __x64_sys_mmap+0x125/0x190 [ 655.424805][T16381] do_syscall_64+0xcd/0x250 [ 655.431211][T16381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.438022][T16381] RIP: 0033:0x7faef0185d29 [ 655.442551][T16381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.462350][T16381] RSP: 002b:00007faef100c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 655.470986][T16381] RAX: ffffffffffffffda RBX: 00007faef0375fa0 RCX: 00007faef0185d29 [ 655.479295][T16381] RDX: 0000000000000000 RSI: 0000000000380000 RDI: 0000000000000000 [ 655.487512][T16381] RBP: 00007faef100c090 R08: 0000000000000007 R09: 0000000000000000 [ 655.495573][T16381] R10: 0028000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 655.503721][T16381] R13: 0000000000000000 R14: 00007faef0375fa0 R15: 00007ffc80addb58 [ 655.511875][T16381] [ 655.514947][T16381] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 655.522302][T16381] CPU: 1 UID: 0 PID: 16381 Comm: syz.2.2827 Not tainted 6.13.0-rc3-syzkaller-00044-gaef25be35d23 #0 [ 655.533131][T16381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 655.543256][T16381] Call Trace: [ 655.546588][T16381] [ 655.549587][T16381] dump_stack_lvl+0x3d/0x1f0 [ 655.554251][T16381] panic+0x71d/0x800 [ 655.558229][T16381] ? __pfx_panic+0x10/0x10 [ 655.562720][T16381] ? show_trace_log_lvl+0x29d/0x3d0 [ 655.567996][T16381] ? check_panic_on_warn+0x1f/0xb0 [ 655.573185][T16381] ? get_pat_info+0x2c1/0x320 [ 655.577921][T16381] check_panic_on_warn+0xab/0xb0 [ 655.582934][T16381] __warn+0xf6/0x3c0 [ 655.586904][T16381] ? get_pat_info+0x2c1/0x320 [ 655.591647][T16381] report_bug+0x3c0/0x580 [ 655.596051][T16381] handle_bug+0x54/0xa0 [ 655.600290][T16381] exc_invalid_op+0x17/0x50 [ 655.604867][T16381] asm_exc_invalid_op+0x1a/0x20 [ 655.609796][T16381] RIP: 0010:get_pat_info+0x2c1/0x320 [ 655.615160][T16381] Code: 49 89 1c 24 e9 0f ff ff ff e8 fb f3 4d 00 90 0f 0b 90 e9 ff fd ff ff 4c 89 ef e8 3a 68 b0 00 e9 f0 fe ff ff e8 e0 f3 4d 00 90 <0f> 0b 90 bb ea ff ff ff e9 e3 fe ff ff 4c 89 ff e8 2a 67 b0 00 e9 [ 655.635004][T16381] RSP: 0018:ffffc9000e30f308 EFLAGS: 00010293 [ 655.641122][T16381] RAX: 0000000000000000 RBX: ffff88802fde30f8 RCX: ffffffff814b5a94 [ 655.649123][T16381] RDX: ffff88802f77bc00 RSI: ffffffff814b5b10 RDI: 0000000000000007 [ 655.657124][T16381] RBP: 1ffff92001c61e62 R08: 0000000000000007 R09: 0000000000000020 [ 655.665118][T16381] R10: 0000000000000028 R11: 0000000000000001 R12: ffffc9000e30f410 [ 655.673117][T16381] R13: 0000000000000000 R14: 0000000000000028 R15: ffff88802fde3118 [ 655.681123][T16381] ? get_pat_info+0x244/0x320 [ 655.685836][T16381] ? get_pat_info+0x2c0/0x320 [ 655.690556][T16381] ? get_pat_info+0x2c0/0x320 [ 655.695265][T16381] ? __pfx_get_pat_info+0x10/0x10 [ 655.700336][T16381] untrack_pfn+0xf7/0x4d0 [ 655.704700][T16381] ? __pfx_untrack_pfn+0x10/0x10 [ 655.709672][T16381] ? zap_page_range_single+0x307/0x560 [ 655.715163][T16381] ? __pfx_lock_release+0x10/0x10 [ 655.720212][T16381] ? uprobe_munmap+0x20/0x5c0 [ 655.725101][T16381] ? trace_lock_acquire+0x14e/0x1f0 [ 655.730343][T16381] unmap_single_vma+0x1bd/0x2b0 [ 655.735250][T16381] zap_page_range_single+0x326/0x560 [ 655.740578][T16381] ? __pfx_zap_page_range_single+0x10/0x10 [ 655.746449][T16381] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 655.752508][T16381] ? __pfx_pagerange_is_ram_callback+0x10/0x10 [ 655.758744][T16381] ? __pfx___pte_alloc+0x10/0x10 [ 655.763729][T16381] remap_pfn_range_notrack+0xb8d/0xe80 [ 655.769249][T16381] ? lock_acquire+0x2f/0xb0 [ 655.773789][T16381] ? __pfx_remap_pfn_range_notrack+0x10/0x10 [ 655.779812][T16381] ? up_write+0x1b2/0x520 [ 655.784208][T16381] remap_pfn_range+0xce/0x140 [ 655.788922][T16381] ? __pfx_remap_pfn_range+0x10/0x10 [ 655.794260][T16381] usbdev_mmap+0x7d9/0xb30 [ 655.798836][T16381] ? __pfx_usbdev_mmap+0x10/0x10 [ 655.803819][T16381] ? __raw_spin_lock_init+0x3a/0x110 [ 655.809158][T16381] __mmap_region+0x1786/0x2670 [ 655.814066][T16381] ? __pfx___mmap_region+0x10/0x10 [ 655.819227][T16381] ? hlock_class+0x4e/0x130 [ 655.823774][T16381] ? mark_lock+0xb5/0xc60 [ 655.828389][T16381] ? cap_mmap_addr+0x53/0x320 [ 655.833202][T16381] mmap_region+0x270/0x320 [ 655.837668][T16381] do_mmap+0xc00/0xfc0 [ 655.841784][T16381] vm_mmap_pgoff+0x1ba/0x360 [ 655.846423][T16381] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 655.851698][T16381] ? __fget_files+0x206/0x3a0 [ 655.856595][T16381] ksys_mmap_pgoff+0x32c/0x5c0 [ 655.861409][T16381] ? __pfx_ksys_write+0x10/0x10 [ 655.866299][T16381] __x64_sys_mmap+0x125/0x190 [ 655.871013][T16381] do_syscall_64+0xcd/0x250 [ 655.875614][T16381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 655.881549][T16381] RIP: 0033:0x7faef0185d29 [ 655.885984][T16381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.905627][T16381] RSP: 002b:00007faef100c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 655.914072][T16381] RAX: ffffffffffffffda RBX: 00007faef0375fa0 RCX: 00007faef0185d29 [ 655.922077][T16381] RDX: 0000000000000000 RSI: 0000000000380000 RDI: 0000000000000000 [ 655.930078][T16381] RBP: 00007faef100c090 R08: 0000000000000007 R09: 0000000000000000 [ 655.938077][T16381] R10: 0028000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 655.946173][T16381] R13: 0000000000000000 R14: 00007faef0375fa0 R15: 00007ffc80addb58 [ 655.954199][T16381] [ 655.957558][T16381] Kernel Offset: disabled [ 655.962049][T16381] Rebooting in 86400 seconds..