last executing test programs: 22m5.120677992s ago: executing program 32 (id=88): r0 = gettid() openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = socket(0x22, 0x800, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/raw\x00', 0x2000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f0000000040)=""/248, 0xf8) ioperm$auto(0x3, 0xe, 0x2000000000000149) kill$auto(r0, 0x11) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r3, 0x4b2f, 0x7) prctl$auto(0x16, 0x1, 0x6, 0xfffffffffffffffe, 0x4) 20m29.91599744s ago: executing program 33 (id=444): statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x9, 0x3, 0x26, 0x940, 0x1ffde, 0x3, 0x6, 0x902c, 0x9, 0x400005, 0xfff, 0x4, 0xb0, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, [0x3, 0x3, 0x200000000, 0x400000000, 0x0, 0x3903, 0x0, 0x4, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0xceb, 0x0, 0xfffffffffffffffc, 0x0, 0x4, 0x0, 0xffffffffffffffff, 0x2, 0x4001, 0xfffffffffffffffd, 0x0, 0xb548, 0x8, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}, 0xfffff7fffffffffa, 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1e, 0x805, 0x0) getcwd$auto(&(0x7f0000000100)='!\x00', 0xe2) sysfs$auto(0x0, 0x1b, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x1a1382, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x4, 0x0, 0xffffffff, 0x0, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x3, 0x2) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/lockdep\x00', 0x10b402, 0x0) pread64$auto(r0, &(0x7f0000000000)='/proc/NesH\x1fk\xdd\x00\x00\x00\x00\x88\x00\x00\x00\x00\x00:\x19\xf4\xe2\xb7:\x81\xf8\xedl\x9d\x9a\'\xf8D,\xc0x\x1d\xf5JE\xcd7\xc3^\xbc2\xc7\xbf\xe5\x7f\xb93 \xcd${!\x9a`\x96\x86\x96D|\xf0H\x8c\x05:\xae\xa6\x88x\t\x18\x8b\xec\xd7\xe8r4, 0x7, 0x6}, 0x4, 0x100000) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000003900), r4) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r5, &(0x7f00000039c0)={0x0, 0x0, &(0x7f0000003980)={&(0x7f0000003940)={0x14, r6, 0x301, 0x70bd2e, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0xc4) socket(0x11, 0x80003, 0x5) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) write$auto(r3, &(0x7f00000001c0)='/dev/audio1\x00JR\xe7\xae\xd27M0x0}) sendmsg$auto_BATADV_CMD_GET_MESH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r1, 0x432bc8a33af5150b, 0x70bd2a, 0x25dfdbff, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}, 0x1, 0x0, 0x60, 0x80}, 0x20000802) 12m57.291271678s ago: executing program 5 (id=2861): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nlbl_mgmt(0x0, r0) sendmsg$auto_NLBL_MGMT_C_PROTOCOLS(r0, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x34, r1, 0x4, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x2}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_VERSION={0x8, 0x3, 0x54}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'netdevsim0\x00'}) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000001040), r0) socket(0x2, 0x3, 0x100) shmget$auto(0x14, 0x2, 0xe64) r2 = openat$auto_rng_chrdev_ops_core(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) read$auto_rng_chrdev_ops_core(r2, &(0x7f0000000040)=""/4096, 0xfffffe82) r3 = open(&(0x7f0000000100)='.\x00', 0x40000, 0x0) getdents64$auto(r3, 0x0, 0x400) ioctl$auto_PPPIOCGUNIT(r3, 0x80047456, &(0x7f00000011c0)=0x4) r4 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000001c0)={0x38, r6, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_WANTED={0x9, 0x3, 0x0, 0x1, [@generic="ecd180b54a"]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24004840}, 0x4000000) setsockopt$auto(r4, 0x1, 0x12, &(0x7f0000000400)='\'\ak\xb6\xc8\vFx\xed\xd6\xf8\xa6-+\x00\x10\xa4#\x92`\xdb\xafL\x0f\xfbUV\xa6KH]Cv\xbf\xf2a\v', 0xeb66) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc6}, 0x1, 0x0, 0x2, 0x9}, 0x7}, 0x3, 0x0) 12m56.01872353s ago: executing program 5 (id=2865): setresuid$auto(0x1ffffffffffff, 0x0, 0x80080008080) (async, rerun: 64) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0xa, 0x0) (async, rerun: 32) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) (async, rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) socket(0x2, 0x5, 0x0) setsockopt$auto(0x4, 0x84, 0xb, 0xffffffffffffffff, 0x0) (async, rerun: 64) r0 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000040), 0x80000, 0x0) (rerun: 64) ioctl$auto_UBI_IOCATT(r0, 0x40186f40, &(0x7f0000000080)={0xd, 0x0, 0xd, 0x4, 0x9}) setsockopt$auto(0x2, 0xc7f9, 0x8, 0x0, 0x10001) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.0/usb1/bcdDevice\x00', 0x28440, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f00000001c0)=""/176, 0xb0) fanotify_init$auto(0x65, 0x2) (async) pipe$auto(0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) (async) close_range$auto(r1, r0, 0x7fff) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x9, 0x0) (async) landlock_restrict_self$auto(r2, 0x0) (async) open(&(0x7f0000000040)='./file0\x00', 0x149443, 0x0) (async) mount$auto(0x0, &(0x7f00000000c0)='./file0\x00', 0x0, 0x200, 0x0) (async, rerun: 64) write$auto(0x6, 0x0, 0x100000001) (async, rerun: 64) setsockopt$auto(0x3, 0x1, 0x2a, 0x0, 0x9) (async, rerun: 32) openat$auto_set_tracer_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/current_tracer\x00', 0x8001, 0x0) (rerun: 32) sendfile$auto(0x1, 0x3, 0x0, 0xc01) (async, rerun: 64) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (rerun: 64) r4 = getpgid(r3) kcmp$auto(r4, r3, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) 12m54.474203756s ago: executing program 5 (id=2870): openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x24c802, 0x0) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r1) ioctl$auto_KVM_CREATE_VM(r0, 0xae80, 0x3f00) 12m53.857693163s ago: executing program 5 (id=2872): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x3, 0x1) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, 0x0, 0xfffffff9, 0x10, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r4, 0x900064b0, 0x2000000000000c38) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) write$auto_trace_options_fops_trace(r0, &(0x7f0000000080)="8160c9dc34505cf3ba6b3c6c500110a909d348c4c13de4005395d3922e55eb6ee1603879c6a0a370ccc048197b4e4d4b46cf25b687cf68de2f42bb611ba1c5011cdf2344727aaf2de2cefe1e2e42444e4e23f1a421a7d67358786fa39cf06ce6f57c4452f97c58915303305afe6da9a9716e8c8b8afcbc265ad13fbec380ed562f000e7c7ac588bc0d7a423b8100b01c5eb63ac69b8241b3560142602e332e8669489e7f06033be1cca376be1fbf0aa3a201b7022f32fb482e98848e4e66223804787cc0565c2b01de28c7ac2760bbfb469386a69595fb4eaa18180748f117c82e4fd208b2557635", 0xe8) ioctl$auto(0x3, 0xae41, r3) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_KVM_CREATE_VM(r1, 0x5000aea5, 0x20) 12m38.010425612s ago: executing program 36 (id=2872): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x3, 0x1) r0 = socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) socket(0x2, 0x1, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB="1200", @ANYBLOB="5de1"], 0x1ac}}, 0x40000) recvmmsg$auto(r2, 0x0, 0xfffffff9, 0x10, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) r4 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x0, 0x0) ioctl$auto(r4, 0x900064b0, 0x2000000000000c38) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) write$auto_trace_options_fops_trace(r0, &(0x7f0000000080)="8160c9dc34505cf3ba6b3c6c500110a909d348c4c13de4005395d3922e55eb6ee1603879c6a0a370ccc048197b4e4d4b46cf25b687cf68de2f42bb611ba1c5011cdf2344727aaf2de2cefe1e2e42444e4e23f1a421a7d67358786fa39cf06ce6f57c4452f97c58915303305afe6da9a9716e8c8b8afcbc265ad13fbec380ed562f000e7c7ac588bc0d7a423b8100b01c5eb63ac69b8241b3560142602e332e8669489e7f06033be1cca376be1fbf0aa3a201b7022f32fb482e98848e4e66223804787cc0565c2b01de28c7ac2760bbfb469386a69595fb4eaa18180748f117c82e4fd208b2557635", 0xe8) ioctl$auto(0x3, 0xae41, r3) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) write$auto(0x3, 0x0, 0xfffffdef) ioctl$auto_KVM_CREATE_VM(r1, 0x5000aea5, 0x20) 10m11.623077153s ago: executing program 6 (id=3405): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/neigh/veth0_to_hsr/unres_qlen\x00', 0x20002, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0xffffffffffffffff, 0xc) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x20) r2 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000240)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r2, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x2, 0x80000000db, 0xffffffffffff0a18, 0xffffffffffffffff, 0x1) open(0x0, 0x2a2c1, 0x0) r3 = openat$auto_random_fops_random(0xffffffffffffff9c, &(0x7f0000000000), 0x2000, 0x0) read$auto_random_fops_random(r3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000100), r4) sendmsg$auto_NL802154_CMD_GET_SEC_LEVEL(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x1c, r5, 0xf01, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x40) r6 = getpid() pidfd_open$auto(r6, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x2) socket(0x21, 0x2, 0xa) getsockopt$auto(0x6, 0x8, 0x7, 0xffffffffffffffff, 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_TRIGGER_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x218, r5, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_DEVKEY={0x1d9, 0x2f, 0x0, 0x1, [@nested={0x18, 0x119, 0x0, 0x1, [@typed={0x14, 0xdc, 0x0, 0x0, @ipv6=@mcast1}]}, @nested={0x20, 0x6, 0x0, 0x1, [@typed={0x14, 0xe0, 0x0, 0x0, @ipv6=@mcast1}, @nested={0x4, 0xb6}, @nested={0x4, 0xfc}]}, @generic="f955abd975945935f12a9ea0c73b429eadd8f7b25f60c95c1dba112ec927b1976a92c54f3036e640a447dfb8cf2a94eafd4f61c8b8f1019cbe410b7fd51c0b78be0bb6c3fbbefbac77a3f09f7f5de7aa9b03b262dddc1d415ad8580698709151bdd2ca243dbce0b3ea20e177db3c7f5e49d8b87c7c0f592a7110a3fb", @generic="96355c4255120e1c032c8dfc4a4a22b2c6398924476dd06241466bc38e3e3f9830ddb592c6c489309246e95e5c21b760f80fd9960110d79acf20a054cde8a0922724448b5ca937a153286e3f4379d3e8bdb763a3790dc8b4244ca13a1767cfa2074e432e6b343240b102da1d931cfa4f5fce9dd82e1a826f6718bd70293c1e58eb1560176a33f2e5434dd9ab84352594ea316be72b5557613bd692388328a844465e845092f8c90617", @typed={0x8, 0x52, 0x0, 0x0, @u32=0xc}, @typed={0x4, 0x76}, @generic="148905663ec452982599d68397039c5691622c899b1fd93f329fe74f62eb8775b29dcd97c6ced05f0db21e09a5a1f2204c1dbf7d8f66e4946a4afa4b26e75aaf5185170f1bf057c1054eb28adff882610165a946b32b5fad6628f887c24e6af4a491443731e1a0dbf1db2806"]}, @NL802154_ATTR_CHANNEL={0x5, 0x8, 0xdf}, @NL802154_ATTR_ACKREQ_DEFAULT={0x5, 0x1a, 0x4f}, @NL802154_ATTR_SEC_LEVEL={0x10, 0x2d, 0x0, 0x1, [@typed={0x4, 0xf}, @typed={0x8, 0xcc, 0x0, 0x0, @pid=r6}]}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x6}]}, 0x218}, 0x1, 0x0, 0x0, 0x20040000}, 0x8010) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/platform/dummy_hcd.6/usb7/ep_00/power/autosuspend_delay_ms\x00', 0x80800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r7, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20005, 0x4000000000df, 0x12, 0x401, 0x8000) unshare$auto(0x40000080) write$auto_proc_sys_file_operations_proc_sysctl(r0, &(0x7f0000000040)='@QN', 0x3) 10m9.601883431s ago: executing program 6 (id=3410): r0 = socket(0x2, 0x801, 0x100) listen$auto(0x3, 0x81) poll$auto(&(0x7f0000000180)={r0, 0x6, 0x6}, 0x6, 0x8) listen$auto(r1, 0x1004) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) socket(0xa, 0x1, 0x84) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) statx$auto(0x2, 0x0, 0xfffffffc, 0xbdfa, 0x0) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) r2 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) move_pages$auto(r2, 0x1002, 0x0, 0x0, 0x0, 0x2) clone3$auto(&(0x7f0000000000)={0x4, 0x3, 0x5f59, 0x8, 0x8, 0xf8f8, 0xd9a, 0x3, 0xfff, 0x200, 0xf}, 0x1) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) r3 = socket(0xa, 0x2, 0x88) setsockopt$auto(r3, 0x88, 0xb, &(0x7f0000000000)='!/*:(*\'\x00', 0xe) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu/memory.kmem.limit_in_bytes\x00', 0xc2302, 0x0) sendfile$auto(r4, r4, 0x0, 0x7) r5 = syz_clone(0x40000, &(0x7f0000000000)="e906c92cfc13122c33ec4f3c203b644782216d8f68d28d960bcef44b31441ae36643ea6123a899fd8a18eb29c335928db1b485fd16e47aa9ec94dc85762f0407ba51d29aeb8d05c09323a5eb03154bacfd2824695035ce807bdb0f0b1d3f2658b13a81da19b282c148a41c489524bffa67404efdc814ba06cfa38300f0d5d0868b38d6c13f220c4229af37779d4cdc940013af8ce9", 0x95, &(0x7f0000000100), &(0x7f0000000140), &(0x7f0000000180)="7d378d43ea7b74814a88071241ea2e46402c6cbbf433f0a8feb2c072a3e612a02064a466df37a43f160f556af1dd0ce4bdf8a3d77c69a2f31c545463aa0cec900b5276add22a7ccdeddc10699ec3aea7690ae5a4b0b55a0c98d7761ff7281fa4aaec7003ba5767bcf8bb0570f266535a729265e6fadce0fe889008fe2853d43b74901467edba40417eceacc1f6c5fd23025c8c687cdec0da3538fa47029267de6f7bc702cb3885cdb57efba867f5a7a826997170a7755f78cefe015e4da45010225b18f7c351c05da85fbbe98d9d53764704cd78d474eaff3f065289d98412a5ee737ceaa8b0e24ddc59") fcntl$auto_F_DUPFD(0xffffffffffffffff, 0x0, r5) 10m8.57960581s ago: executing program 6 (id=3414): unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) getsockopt$auto(r0, 0x0, 0x81, 0x0, 0x0) 10m7.348234504s ago: executing program 6 (id=3417): ioperm$auto(0x7, 0x6, 0x1) r0 = socket(0x1d, 0x4, 0x20000006) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x108000, 0x800034, 0x9) mbind$auto(0xff, 0x7, 0x1000, &(0x7f0000000040)=0x82e, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'syzkaller1\x00'}) bind$auto(0xffffffffffffffff, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x2711, @my=0x0}, 0x69) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/i8042/serio0/scroll\x00', 0x62, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000800)='/sys/devices/virtual/bdi/43:384/max_bytes\x00', 0x181482, 0x0) read$auto(r1, 0x0, 0x9) write$auto(0x3, 0x0, 0x1) sched_setaffinity$auto(0x9, 0x0, 0xfffffffffffffffe) r2 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x8100, 0x0) read$auto_mon_fops_text_t_mon_text(r2, 0x0, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/009/001\x00', 0xa101, 0x0) 10m4.497899309s ago: executing program 6 (id=3425): socket(0xa, 0x5, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) open_tree$auto(r0, 0x0, 0x1001) r1 = socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, '\xb0\rR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) close_range$auto(r2, r2, 0x4) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) capset$auto(0x0, 0x0) r4 = open(0x0, 0x22240, 0x154) r5 = socket(0xa, 0x2, 0x88) bpf$auto(0x0, &(0x7f0000000400)=@link_update={r4, @new_prog_fd=0x4, 0x4, @old_map_fd=0x3ff}, 0xa3) openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/bluetooth/hci2/rfkill29/soft\x00', 0x10940, 0x0) bpf$auto(0x0, &(0x7f00000000c0)=@link_update={0xa, @new_map_fd=r1, 0x100, @old_prog_fd=r1}, 0x10) bpf$auto(0x2, &(0x7f00000001c0)=@bpf_attr_1={r5, 0xbb8, @value, 0x100000003}, 0xcd) 10m4.185592556s ago: executing program 6 (id=3426): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x800, 0x40) r2 = socket(0xa, 0x3, 0xff) connect$auto(r2, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x703d27, 0x25dfdbfc, {}, [@ETHTOOL_A_PSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x40d8) madvise$auto(0x0, 0xffffffffffff0004, 0x19) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r1) r6 = getpgid$auto(0x0) r7 = getpgid$auto(r6) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x158c, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x149b, 0x3, 0x0, 0x1, [@generic="0ae556ea96b6aac20a2df353bb08ecd46a7f933d1b2db8ce9af498e5ff3a90bfe88cc0b1e2e58b0f02ef589c88720e1e867e4da84e9bd27e4e7c2e138ed9b259006d0495ac1d03abe76afce408df49a9a4d2c79e8416718b6ea62d96bfe4d485b5898da01e69d213069313429fe114911f46d2480f", @nested={0x1111, 0x43, 0x0, 0x1, [@typed={0x8, 0x119, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x5e}, @generic="1b6180a9a251a5f7309b5b6b8af06ed32ba9a6c9b4845494259b2eee6bf6aceccc80f3c1ac1e002fbb719b8a15e2fe551c7c038ef05802e35f6c3566675751865ee538b9e57ac3c3ac0668a4b3929be439d1ef4cdd24c7415036f9d02f18333fe5fccf1ccb5a61d1e047fa29c9119ab9bbea68f91fc936910e843c7c568c765383c07ce45c309fbf64924e2567db900905537a8003e022f7a044", @typed={0x12, 0x14b, 0x0, 0x0, @str='/dev/snapshot\x00'}, @generic="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", @generic="627d93aa42f40ad39e72806204876c62645d32e22db38cf26b22937449b0acd596f82d21bbab5d200dbe014bca9443d8ef194821a06d9151f0027a098a56ce0fe0fb799d8437668b53f1752dcb19744e1fc8cd"]}, @nested={0x5e, 0x57, 0x0, 0x1, [@typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x14, 0xa3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0x53}, @generic="0baa9962d832bfc7a1598f73f290676159d5d963f0ef3f3694e8c4769e09a76a5681c9ac27bac98715719137d62e"]}, @generic="5b4616330f58eec7166fdb5686acea5e1073d07a6eb7b91e3eb3ad97fb23c2aa1e37e9c9253c0115d7c961fed3edb90a3043132ec20bdf79be7ae10344c3f520acf5783d0eb3c0e11c56c454f6919da28e35da492fd3bd376918d0d1db7541fe3db6ce2b222834198cbee80a7b8b144af6a3fea938b06a01046b00b17c01cfd123", @generic="0a8c25de9c6f31e39a6bcfad2f409551b2465a4c1003d3a46dc8740e9d4e1794644249f256fb7ba7b4475e04825ebcdadeb3d0824157cddbcb471d53880652048b58569b6e4c33ce64cb48ab36673752d6980118e2b398045597a158fb9fcc22e5ba4cdb205e8980f4ca5620bc9270655998e15fd4623e70d35bb1c3c2d4386f44f98217d65dc1b99d0995bb4e2f", @generic="1eecf67e42a1d61f4e23ea7292fa8f0b334f8861a5905219476eac17430e2a6298df7834dd39fea33d5140246b3c8cede37cc5d84006fce1b686f9aa64fbd490f5bdb6e8810fecef991664c54e804cd59dc1e3ce75bb3e4f7e12a5b3c9a7022868b3de8ec536b30525e4728d360702f8d5b0e5ddfdaefc630b8e9dcec51b6492186a79401903db258e75a34ca1c0f85639b3bdb06d35b5d220556679c0e28bdd", @generic="894e299d6260a47e11406008a472f6a9725b9fef7c39d86f448a815b8fe227", @nested={0x2c, 0x15, 0x0, 0x1, [@generic="dc641df00c5037ab80751ccffa98cf32a2937c8ff7aa7c751f859c9c5dba646cfa7737c23e800600"]}, @typed={0x8, 0xae, 0x0, 0x0, @pid=r7}, @generic="81b8b1fc1c32599be89ba74119c806ea27f3aa5e9c5679a312270e7e81db4890806dea78fbeef252fe7f1b53f45998db15af37e140c0980a2d7fbcd426c4d79699daf726d795c9ee038fbb00977b0cb662122831dd9d93cd3f297d8ba7f0c40aa0be2f15b6a064c90ed84f6e5fbe01f3bf592c3a924602291753fa87cf056ef96dc23104d826ebf0cb14701dd5813e112b131f931c47eb04b4122e7add7159a42977ab9a220fea98b80f73fb"]}, @IPVS_CMD_ATTR_DEST={0xd4, 0x2, 0x0, 0x1, [@nested={0xc8, 0x92, 0x0, 0x1, [@generic="d4ad4d603c22496113937a8eaa783c1c540b4fee3e91dd97e7e7c707d5c6824da6f81cd4ccfaa1e0192047d92a084580d8d3dcec9e0e1f05aaec27e0061c3bc62f4e2956b774100f323c35da387294d9002cdfc7442311ac9be9543f563477c79fa349fab57e1367f10dbcd33bf486e3e1c04b1bec3231ac4c345e364b8096f1b0b51235e4aa6a8610394439291a753b17c79af7e4bdc46ab8d125d52252171da528cd26fdd0be3f74ecc8f5651fa1b169e1ef6847f1ff5480f22d52ad8a9e28af66bbe2"]}, @typed={0x8, 0xf, 0x0, 0x0, @ipv4=@remote}]}]}, 0x158c}}, 0x4c0a4) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) lsm_set_self_attr$auto(0x1, 0x0, 0x80, 0x0) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0x9, 0x9b72, 0x2, 0x6) 9m48.816887825s ago: executing program 37 (id=3426): openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) close_range$auto(0x2, 0xa, 0x0) r1 = socket(0xa, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x800, 0x40) r2 = socket(0xa, 0x3, 0xff) connect$auto(r2, &(0x7f00000018c0)=@generic={0xa}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x3f) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x1ffff000, 0x7, 0x100000000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) shmget$auto(0x8, 0x10563, 0x568d1af2) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x2c, r4, 0x1, 0x703d27, 0x25dfdbfc, {}, [@ETHTOOL_A_PSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000050}, 0x40d8) madvise$auto(0x0, 0xffffffffffff0004, 0x19) r5 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), r1) r6 = getpgid$auto(0x0) r7 = getpgid$auto(r6) sendmsg$auto_IPVS_CMD_SET_CONFIG(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000080)={&(0x7f0000000240)={0x158c, r5, 0x20, 0x70bd25, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x5}, @IPVS_CMD_ATTR_DAEMON={0x149b, 0x3, 0x0, 0x1, [@generic="0ae556ea96b6aac20a2df353bb08ecd46a7f933d1b2db8ce9af498e5ff3a90bfe88cc0b1e2e58b0f02ef589c88720e1e867e4da84e9bd27e4e7c2e138ed9b259006d0495ac1d03abe76afce408df49a9a4d2c79e8416718b6ea62d96bfe4d485b5898da01e69d213069313429fe114911f46d2480f", @nested={0x1111, 0x43, 0x0, 0x1, [@typed={0x8, 0x119, 0x0, 0x0, @pid=r6}, @nested={0x4, 0x5e}, @generic="1b6180a9a251a5f7309b5b6b8af06ed32ba9a6c9b4845494259b2eee6bf6aceccc80f3c1ac1e002fbb719b8a15e2fe551c7c038ef05802e35f6c3566675751865ee538b9e57ac3c3ac0668a4b3929be439d1ef4cdd24c7415036f9d02f18333fe5fccf1ccb5a61d1e047fa29c9119ab9bbea68f91fc936910e843c7c568c765383c07ce45c309fbf64924e2567db900905537a8003e022f7a044", @typed={0x12, 0x14b, 0x0, 0x0, @str='/dev/snapshot\x00'}, @generic="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", @generic="627d93aa42f40ad39e72806204876c62645d32e22db38cf26b22937449b0acd596f82d21bbab5d200dbe014bca9443d8ef194821a06d9151f0027a098a56ce0fe0fb799d8437668b53f1752dcb19744e1fc8cd"]}, @nested={0x5e, 0x57, 0x0, 0x1, [@typed={0x14, 0xcf, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}, @typed={0x14, 0xa3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @nested={0x4, 0x53}, @generic="0baa9962d832bfc7a1598f73f290676159d5d963f0ef3f3694e8c4769e09a76a5681c9ac27bac98715719137d62e"]}, @generic="5b4616330f58eec7166fdb5686acea5e1073d07a6eb7b91e3eb3ad97fb23c2aa1e37e9c9253c0115d7c961fed3edb90a3043132ec20bdf79be7ae10344c3f520acf5783d0eb3c0e11c56c454f6919da28e35da492fd3bd376918d0d1db7541fe3db6ce2b222834198cbee80a7b8b144af6a3fea938b06a01046b00b17c01cfd123", @generic="0a8c25de9c6f31e39a6bcfad2f409551b2465a4c1003d3a46dc8740e9d4e1794644249f256fb7ba7b4475e04825ebcdadeb3d0824157cddbcb471d53880652048b58569b6e4c33ce64cb48ab36673752d6980118e2b398045597a158fb9fcc22e5ba4cdb205e8980f4ca5620bc9270655998e15fd4623e70d35bb1c3c2d4386f44f98217d65dc1b99d0995bb4e2f", @generic="1eecf67e42a1d61f4e23ea7292fa8f0b334f8861a5905219476eac17430e2a6298df7834dd39fea33d5140246b3c8cede37cc5d84006fce1b686f9aa64fbd490f5bdb6e8810fecef991664c54e804cd59dc1e3ce75bb3e4f7e12a5b3c9a7022868b3de8ec536b30525e4728d360702f8d5b0e5ddfdaefc630b8e9dcec51b6492186a79401903db258e75a34ca1c0f85639b3bdb06d35b5d220556679c0e28bdd", @generic="894e299d6260a47e11406008a472f6a9725b9fef7c39d86f448a815b8fe227", @nested={0x2c, 0x15, 0x0, 0x1, [@generic="dc641df00c5037ab80751ccffa98cf32a2937c8ff7aa7c751f859c9c5dba646cfa7737c23e800600"]}, @typed={0x8, 0xae, 0x0, 0x0, @pid=r7}, @generic="81b8b1fc1c32599be89ba74119c806ea27f3aa5e9c5679a312270e7e81db4890806dea78fbeef252fe7f1b53f45998db15af37e140c0980a2d7fbcd426c4d79699daf726d795c9ee038fbb00977b0cb662122831dd9d93cd3f297d8ba7f0c40aa0be2f15b6a064c90ed84f6e5fbe01f3bf592c3a924602291753fa87cf056ef96dc23104d826ebf0cb14701dd5813e112b131f931c47eb04b4122e7add7159a42977ab9a220fea98b80f73fb"]}, @IPVS_CMD_ATTR_DEST={0xd4, 0x2, 0x0, 0x1, [@nested={0xc8, 0x92, 0x0, 0x1, [@generic="d4ad4d603c22496113937a8eaa783c1c540b4fee3e91dd97e7e7c707d5c6824da6f81cd4ccfaa1e0192047d92a084580d8d3dcec9e0e1f05aaec27e0061c3bc62f4e2956b774100f323c35da387294d9002cdfc7442311ac9be9543f563477c79fa349fab57e1367f10dbcd33bf486e3e1c04b1bec3231ac4c345e364b8096f1b0b51235e4aa6a8610394439291a753b17c79af7e4bdc46ab8d125d52252171da528cd26fdd0be3f74ecc8f5651fa1b169e1ef6847f1ff5480f22d52ad8a9e28af66bbe2"]}, @typed={0x8, 0xf, 0x0, 0x0, @ipv4=@remote}]}]}, 0x158c}}, 0x4c0a4) shmctl$auto(0x0, 0x0, 0xfffffffffffffffd) lsm_set_self_attr$auto(0x1, 0x0, 0x80, 0x0) io_setup$auto(0x1, 0x0) mmap$auto(0x0, 0x400008, 0x9, 0x9b72, 0x2, 0x6) 3m54.361466796s ago: executing program 9 (id=4622): close_range$auto(0x0, 0xe903, 0x82) migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x0, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(r1, 0x5522, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)={0x4, 0x81, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0xeb94, 0x82, @stream_id=0x100, 0x5, 0x476, 0x0}) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r2, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_FLAGS={0x8, 0x4, 0x1}, @HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "a060292f83d9"}, @HWSIM_ATTR_COOKIE={0xc}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0xffffffcc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) adjtimex$auto(0x0) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x3, 0x1, 0x2b, 0x0, 0x9) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x101000, 0x0) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x104, 0x7, 0x7, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x180, 0x0) 3m53.497347136s ago: executing program 9 (id=4625): openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ptyzf\x00', 0x90800, 0x0) (async) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) (async) quotactl_fd$auto(0xffffffffffffffff, 0x1, 0x0, 0x0) (async) socket(0x2, 0x3, 0xfffffff1) (async) adjtimex$auto(&(0x7f00000004c0)={0xf332b71, 0x0, 0x0, 0xfffffffffffffffd, 0x40000d4, 0x8000000000001, 0x6, 0x0, 0x8, 0x9, 0x100000020000002, {0x2100000000, 0x10000}, 0x5, 0x100000006, 0xfffffffffffffffd, 0xf, 0x0, 0x80000004, 0x7, 0xffffffffffff628e, 0xa747, 0xdeae, 0x804}) socket(0x2b, 0x1, 0x1) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = open(0x0, 0x22240, 0x154) fcntl$auto(r0, 0x400, 0x1) (async) execve$auto(0x0, 0x0, 0x0) (async) mmap$auto(0x0, 0x202000d, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/printk_devkmsg\x00', 0x202, 0x0) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) write$auto_tty_fops_tty_io(r1, &(0x7f0000000000)="bd94fb", 0x3) (async) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) (async) unshare$auto(0x40000080) (async) ustat$auto(0x45, &(0x7f0000000040)={0x200, 0x2, "84d1d3931a0f", "0fa1b61ca8fe"}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) (async) epoll_create$auto(0x3e) (async) socket(0xf, 0x5, 0x200084) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) (async) prctl$auto(0x4, 0x0, 0x0, 0xfffffffffffffffd, 0x2) (async) socket(0x2, 0x1, 0x0) (async) bind$auto(0x3, &(0x7f0000000040)=@ethernet={0x6, @broadcast}, 0x6e) ioctl$auto_PAGEMAP_SCAN(0xffffffffffffffff, 0xc0606610, &(0x7f000000c380)={0x60, 0x0, 0x100000, 0x10000000000000, 0xfffffffffffffffe, 0x0, 0x4000, 0x50b301a, 0x2c, 0x24, 0xff, 0x2}) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) (async) openat$auto_trace_options_core_fops_trace(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/tracing/options/block\x00', 0x4a8800, 0x0) 3m53.092722107s ago: executing program 9 (id=4626): r0 = socket(0x10, 0x2, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x9, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x40, 0x8, 0x100000000}}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x4040, 0x75) socket(0xa, 0x2, 0x3a) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0xb000000, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x8) 3m52.948201393s ago: executing program 9 (id=4627): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x881}, 0x8000) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf253ee69df228010bc0030000000800030001000100060007000080000008000300000400000a0005001e16390f3abc00000a000500aaaaaaaaaabb00000a08050000000000", @ANYRES32=0x0, @ANYBLOB="060006"], 0x60}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x1, 0x0) getsockopt$auto(r0, 0x0, 0xcd, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x100000, 0xffffffffffff0005, 0x19) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/dummy0/carrier\x00', 0x8182, 0x0) write$auto_fops_init_pkru_pkeys(r2, 0x0, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x182, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose0/statistics/tx_window_errors\x00', 0xa2900, 0x0) read$auto(r3, 0x0, 0x9) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x23, 0x80805, 0x0) getpeername$auto(0x200000003, 0x0, 0x0) connect$auto(r1, &(0x7f0000000540)=@generic={0x10, "bc4386c1ef4c01397267cc6f1ef1"}, 0xc) syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000005c0), r1) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4818}, 0x8894) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="0000a0f9b40b1ad0210782414b35aa6596244e53311ddaf73ca4f23d870d836b546fba2df41b9e79420409f7ba13eb8f0e9e56021b3fb9208f0ad8b74c67ba142f79a7cbb5dcd1116dcc9e63a21b6b2313536f04997d1f25e47793b2e0994e71", @ANYRES16=0x0, @ANYBLOB="01002c"], 0x14}, 0x1, 0x0, 0x0, 0x4c055}, 0x20008010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) writev$auto(0x3, &(0x7f0000000100)={&(0x7f0000000000)="9216d919ad1409ceee606932795d4af4a68000"/33, 0x7111}, 0xfffffffd) 3m51.424352724s ago: executing program 9 (id=4630): openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0xb8b42, 0x0) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm0p/sub0/hw_params\x00', 0x1c1282, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000280)=""/65, 0x41) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0xa, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) madvise$auto(0x7, 0x80000000000001, 0x80000a) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$dir(0xffffffffffffff9c, 0x0, 0x101000, 0xab) ioprio_set$auto(0xffffff81, 0x0, 0x5) openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, 0x0, 0x0, 0x0) madvise$auto(0x0, 0x200007, 0x19) mmap$auto(0x0, 0x4020009, 0x8, 0xeb0, 0x401, 0x9) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) r1 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) mmap$auto(0x1, 0x400048, 0xdf, 0x1000009b72, 0x2, 0x8000) ioctl$auto_SNDRV_PCM_IOCTL_PREPARE2(r1, 0x4140, 0x0) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) r2 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x2, 0x0) read$auto(r2, 0x0, 0x39b8) writev$auto(0x3, 0x0, 0x8) r3 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/audit\x00', 0x0, 0x0) read$auto_tomoyo_operations_securityfs_if(r3, &(0x7f0000000040)=""/80, 0x50) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 3m46.621705904s ago: executing program 9 (id=4648): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r0, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x8, &(0x7f00000001c0)="e91953b4785d", 0x6) epoll_create$auto(0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) 3m31.166396886s ago: executing program 38 (id=4648): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(r0, 0x400454ca, 0x38) close_range$auto(0x2, 0x8, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xf8, 0xfffffffffffffffa, 0x8000) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x8, &(0x7f00000001c0)="e91953b4785d", 0x6) epoll_create$auto(0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x200007, 0x8) 3m25.210201937s ago: executing program 1 (id=4724): setresuid$auto(0x60, 0x1000, 0x8000) lstat$auto(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)={0x64, 0x100000000, 0x81, 0x4, 0xee00, 0x0, 0x0, 0x80000001, 0xfce, 0x1, 0x9, 0x7fff, 0xffff, 0xb96, 0x1, 0xc9aa}) shmctl$auto_SHM_STAT_ANY(0x4, 0xf, &(0x7f00000003c0)={{0x4, 0xee01, 0xee01, 0x4, 0xc, 0x7, 0x9}, 0x1, 0x6, 0xffffffff, 0x5b3e03ec0000000, @raw=0x9, @raw=0x6, 0x30c9, 0x0, &(0x7f0000000240)="7bef393b274bdd883d33e47807bb6407edb96db4c4dea23a003d6dd51c2294c30a09e3b0f2ef407012f76ed87b5e0c03f6b2d4efa0d02d62d7e6e0952a27b36b4842f288304bc1170e5430d503f5b3f09cae3d4f073caa000b07113328f6fea80d93d342924e1293037bf550ec51f7088185d5c59d7a3ccc989ac2f4231f943261a37c7e91a579cf31d1d558f02182ef3a71d72bc19ec0a386e8e647bf569beaaa007c35bad8eab198f7385c0a76aedafeb036d18aa22e0afec9d123f4e45966773f9c", &(0x7f0000000340)="ebaa97dd3aedc060ddee998383c23df3025b87a17ce47a8fe6bd3efb65c4143e70ea8213ae9d6444b4826631067e5e1f99808154a98caa3cd2f4dd1279367fc1b521381d9b52ef6624ddcc8ceb3262c85396ec76"}) stat$auto(&(0x7f0000000100)='./file0\x00', &(0x7f0000000440)={0xfffffffffffffffc, 0x80, 0x8, 0x3, r0, r1, 0x0, 0x0, 0x7, 0x3, 0x5, 0x63dc, 0x1ce2, 0x10001, 0x40, 0x6bf4, 0x2}) clock_adjtime$auto(0x0, &(0x7f0000000000)={0x7, 0x8, 0x4, 0x8, 0x7fffffff, 0xffffffc0, 0x6, 0x5, 0x3, 0x0, 0xb9, {}, 0x1000, 0x7, 0xb, 0x5, 0x2000006, 0x101, 0x7fff, 0x3}) 3m24.984880589s ago: executing program 1 (id=4725): r0 = socket(0xa, 0x1, 0x84) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) openat$auto_blk_mq_debugfs_fops_blk_mq_debugfs(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/block/loop8/hctx0/type\x00', 0x80, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/vidtv.0/i2c-0/0-0060/uevent\x00', 0xac00, 0x0) (async) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, &(0x7f0000000340)='/dev/psaux\x00', 0x40341, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r1, 0xfffffffffffff000, 0x2) (async) select$auto(0x6, 0x0, &(0x7f00000000c0)={[0xbb0, 0x8101, 0x80, 0x100, 0xb, 0x4db11dc, 0x3, 0x7f, 0x2, 0x9, 0x32, 0x1, 0x10000, 0x7, 0x6, 0xb85]}, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) socket(0x10, 0x2, 0x6) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) open(&(0x7f0000000800)='./file0\x00', 0x2240, 0x154) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x1, 0x8000) (async) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) (rerun: 64) clone$auto(0xa07, 0x20000000001, 0x0, 0x0, 0x5) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) bind$auto(0xffffffffffffffff, &(0x7f0000000040)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x40, 0xfffffffc, 0x2}}, 0x66) (async, rerun: 32) sendmmsg$auto(0xffffffffffffffff, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async, rerun: 32) close_range$auto(0x2, 0x8, 0x0) (async) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000000), 0x101003, 0x0) (async, rerun: 32) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async, rerun: 32) sendmmsg$auto(r3, &(0x7f0000000100)={{0x0, 0x4, 0x0, 0x2, 0x0, 0x400}, 0x4}, 0xfff, 0xb07e) (async, rerun: 64) mlock$auto(0xfbe8, 0x4) (rerun: 64) 3m23.114120867s ago: executing program 1 (id=4732): mmap$auto(0x0, 0xfee, 0xffffffff, 0x9b72, 0x2, 0x8000) r0 = socket(0xa, 0x801, 0x84) listen$auto(r0, 0x3) r1 = getsockopt$auto(r0, 0x84, 0x6d, 0x0, &(0x7f0000000280)=0x1000c0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000080)) r3 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dri/card0\x00', 0x0, 0x0) ioctl$auto(r3, 0x900064b7, r3) readv$auto(0x3, &(0x7f00000002c0)={0x0, 0x8}, 0x8) fstat$auto(r2, 0x0) ioctl$auto(0x3, 0x40081271, 0x38) write$auto(0x3, 0x0, 0x5c8) ioctl$auto_USB_RAW_IOCTL_EP_ENABLE(r1, 0x40095505, &(0x7f0000000040)={0x9, 0x4, 0x99, 0x20, 0x3, 0x3, 0x3d, 0x6}) 3m19.653445601s ago: executing program 1 (id=4735): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000900)='/sys/devices/LNXSYSTM:00/LNXPWRBN:00/input/input0/name\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000940)=""/4096, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) sendto$auto(0xffffffffffffffff, 0x0, 0x402, 0xacf8, &(0x7f0000000040)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) 3m11.974269311s ago: executing program 1 (id=4754): mmap$auto(0x0, 0x6, 0x4000000000df, 0xebe, 0x401, 0x200000000008000) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x90b0c1, 0x0) ioctl$auto_BLKSECTGET(r0, 0x1267, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) clock_getres$auto(0x0, &(0x7f0000000080)={0x6, 0x41}) mmap$auto(0x0, 0x4, 0x4000000020df, 0x40eb2, 0x402, 0x300000000000) r1 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vbi30\x00', 0x0, 0x0) read$auto_v4l2_fops_v4l2_dev(r1, &(0x7f0000000080)=""/27, 0x1b) r2 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x1, 0x0) write$auto_configfs_file_operations_configfs_internal(r2, &(0x7f0000000140)="8e", 0x1) close_range$auto(0x2, 0x8, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x2c201, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) r3 = pipe$auto(0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) ioctl$auto(0x4000000000000c8, 0x800454cf, 0x3) r4 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x4a8000, 0x0) ioctl$auto_IOCTL_VMCI_VERSION2(r4, 0x7a7, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x6) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r4, 0x7a6, 0x0) dup2$auto(0x5, 0x4) splice$auto(0x4, 0x0, 0x2, 0x0, 0x80000001, 0x9) write$auto(0x6, 0x0, 0x100000001) write$auto(r3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x7, 0x3, 0xeb1, 0x404, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$auto(r5, 0x10e, 0x6b6, 0xfffffffffffffffe, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x58, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000000) close_range$auto(0x2, 0x8, 0x0) 2m58.889570949s ago: executing program 1 (id=4791): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(0x0, 0x8000, 0x0, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8003) write$auto(r0, 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b16130079"], 0x14}}, 0x4000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) r3 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x40, 0x1ff, 0x9}) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xa0fc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0xffff, 0xc, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x4, 0x2, 0x4, 0x0, 0xfffffffffffffffa, 0x1, 0x0, 0x9, 0x7, 0x5}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0) write$auto(r4, &(0x7f0000000000)='y\x8c', 0x2) quotactl_fd$auto(r1, 0x2, 0xee01, &(0x7f0000000380)="c7a34676508b060b6a2b6c77") get_mempolicy$auto(&(0x7f0000000180)=0x6, &(0x7f0000000280)=0x5, 0xa6, 0xfff, 0x3) mmap$auto(0x1, 0x6240, 0xdb, 0xeb4, r2, 0x8000) r5 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) ppoll$auto(&(0x7f0000000000)={r5, 0x81, 0x9}, 0x9, &(0x7f0000000040)={0x1}, &(0x7f00000000c0), 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x60) 2m43.768503656s ago: executing program 39 (id=4791): r0 = open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) rseq$auto(0x0, 0x8000, 0x0, 0x6) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0x8003) write$auto(r0, 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setns(0xffffffffffffffff, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b16130079"], 0x14}}, 0x4000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r2 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, 0x0) r3 = socket(0x2, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mmap$auto(0x0, 0x128009, 0xdf, 0xeb1, 0x401, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x40, 0x1ff, 0x9}) sendmmsg$auto(r3, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0xa0fc}, 0x7, 0x0, 0x2, 0xb}, 0xfff}, 0x5, 0x311) adjtimex$auto(&(0x7f0000000000)={0x4, 0x0, 0xcbe9, 0xffff, 0xa, 0x80000000, 0xd37f, 0x0, 0xffff, 0xc, 0x3, {0x10, 0x6}, 0xfffffffffffffffc, 0x4, 0x2, 0x4, 0x0, 0xfffffffffffffffa, 0x1, 0x0, 0x9, 0x7, 0x5}) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0) write$auto(r4, &(0x7f0000000000)='y\x8c', 0x2) quotactl_fd$auto(r1, 0x2, 0xee01, &(0x7f0000000380)="c7a34676508b060b6a2b6c77") get_mempolicy$auto(&(0x7f0000000180)=0x6, &(0x7f0000000280)=0x5, 0xa6, 0xfff, 0x3) mmap$auto(0x1, 0x6240, 0xdb, 0xeb4, r2, 0x8000) r5 = mq_open$auto(&(0x7f0000000280)='\\*)A\x00', 0x7e, 0x9, 0x0) ppoll$auto(&(0x7f0000000000)={r5, 0x81, 0x9}, 0x9, &(0x7f0000000040)={0x1}, &(0x7f00000000c0), 0x8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_wireguard(&(0x7f0000000080), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x60) 2m33.64074603s ago: executing program 8 (id=4868): mmap$auto(0x0, 0x400004, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_PARAMS(r0, 0xc0305710, &(0x7f00000000c0)={0x1, 0xf8, 0x0, 0x1, 0x418, "00000f00ea0200"}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000002ec0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r1, 0x0, 0x24000802) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0x400000000000fdef}, 0x1) keyctl$auto(0x2000000000000016, 0x0, 0xfffffffe, 0x400040, 0xa8) r2 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/keys\x00', 0x8340, 0x0) read$auto_proc_iter_file_ops_compat_inode(r2, &(0x7f0000001700)=""/4096, 0x1000) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000380)='/proc/self/net/rxrpc/calls\x00', 0x20080, 0x0) pread64$auto(r3, 0x0, 0x8, 0xffff) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x88ds\x1cJ\x99\x00:\x00!\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) ioctl$auto(0x1, 0x541b, 0x8) r4 = openat$auto_tracing_saved_cmdlines_fops_trace(0xffffffffffffff9c, &(0x7f0000001900)='/sys/kernel/tracing/saved_cmdlines\x00', 0xda0c2, 0x0) r5 = openat$auto_ubi_ctrl_cdev_operations_ubi(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) ioctl$auto_UBI_IOCDET(r5, 0x40046f41, &(0x7f0000000040)=0xff6) readv$auto(r4, &(0x7f0000002840)={0x0, 0x7fffffff}, 0x6) 2m32.445234648s ago: executing program 8 (id=4870): openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, 0x0, 0x40001, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x2, 0x0) msync$auto(0x7, 0x2, 0x7) read$auto(r0, 0x0, 0x6) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) r2 = socket(0x10, 0x3, 0x6) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/net/nr7/queues/tx-0/traffic_class\x00', 0x383042, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001300)=""/4099, 0x1003) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) read$auto(0xffffffffffffffff, 0x0, 0x210000001) write$auto(0x4, 0x0, 0x100082) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r4, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001680)={0x2c, r5, 0x23, 0x70bd27, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0xc, 0x3, 0x0, 0x1, [@nested={0x5, 0x7, 0x0, 0x1, [@generic="03"]}]}, @MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_IFINDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) 2m31.500018221s ago: executing program 8 (id=4871): mmap$auto(0x5, 0x0, 0x8, 0x12, 0xffffffffffffffff, 0x38ab) set_mempolicy$auto(0x6, 0x0, 0x4) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000040), 0x102, 0x0) read$auto(0x3, 0x0, 0x80) openat$auto_aoe_fops_aoechr(0xffffffffffffff9c, &(0x7f0000000080)='/dev/etherd/discover\x00', 0x80a02, 0x0) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) ioctl$auto_PPPIOCSDEBUG(r0, 0x40047440, 0x0) write$auto(0x3, 0x0, 0x100082) socket(0x2, 0x80802, 0x0) 2m29.929743586s ago: executing program 8 (id=4873): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) bpf$auto(0x8, &(0x7f00000001c0)=@bpf_attr_0={0x7, 0x8b5, 0x10, 0x4, 0x53400000, 0xffffffffffffffff, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/038/001\x00', 0xa821, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) getsockopt$auto_SO_BUF_LOCK(r1, 0x1, 0x48, &(0x7f0000000100)='-\xf1/\x00', &(0x7f00000003c0)=0xfffffffc) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4004c18}, 0x8894) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0100"], 0x14}, 0x1, 0x0, 0x0, 0x4c055}, 0x20008010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYBLOB='h'], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x8000000000, 0x9}, 0xc}, 0x3, 0x1) sendmsg$auto_HSR_C_GET_NODE_STATUS(r1, &(0x7f0000000140)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000280)={0x24, 0x0, 0x200, 0x270bd2a, 0x25dfdbfc, {}, [@HSR_A_IF2_AGE={0x8, 0x4, 0x7}, @HSR_A_IFINDEX={0x8, 0x2, r0}]}, 0x24}, 0x1, 0x0, 0x0, 0x40000}, 0x90) sendmsg$auto_NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="13042bbd7000fbdbdf250b000020"], 0x14}, 0x1, 0x0, 0x0, 0x4804}, 0x80) mmap$auto(0x0, 0x9a, 0x4, 0xeb1, 0x401, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e"], 0x1ac}, 0x1, 0x0, 0x0, 0x4044000}, 0x800) sendmmsg$auto(r1, &(0x7f0000000080)={{0x0, 0x5, &(0x7f00000002c0)={0x0, 0x2000000c4}, 0x4, 0x0, 0x0, 0x2000009}, 0x7}, 0x3, 0x0) open(&(0x7f0000000000)='X))\x00', 0x145042, 0x1d0) socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x2, 0x73) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r3) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) 2m29.227509261s ago: executing program 8 (id=4875): close_range$auto(0x2, 0x8, 0x0) r0 = socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) r1 = openat$auto_uinput_fops_uinput(0xffffffffffffff9c, &(0x7f00000003c0), 0x2200, 0x0) syz_genetlink_get_family_id$auto_mac80211_hwsim(0x0, 0xffffffffffffffff) ioctl$auto_USB_RAW_IOCTL_INIT(0xffffffffffffffff, 0x41015500, 0x0) adjtimex$auto(0x0) splice$auto(0xffffffffffffffff, &(0x7f00000001c0)=0x3, 0xffffffffffffffff, 0x0, 0x2, 0x919) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000012c0)='/proc/sys/net/ipv6/conf/bridge_slave_0/mldv1_unsolicited_report_interval\x00', 0x88542, 0x0) lseek$auto(r2, 0x0, 0x0) r3 = openat$auto_hwsim_fops_group_(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/debug/ieee80211/phy9/hwsim/group\x00', 0x80002, 0x0) write$auto(r3, &(0x7f0000000040)='0\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x1000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r5 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r6, 0xfd}, 0x6a) r7 = socket(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$auto(0x3, &(0x7f0000000040)=@can={0x1d, r8, 0xfd}, 0x6a) sendmsg$auto_ETHTOOL_MSG_RINGS_GET(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2004004}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0xec, 0x0, 0x4, 0x70bd25, 0x25dfdbff, {}, [@ETHTOOL_A_RINGS_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7fff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x7}]}, @ETHTOOL_A_RINGS_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x8}]}, @ETHTOOL_A_RINGS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xc0}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x48015}, 0x40800) ioctl$auto_UI_SET_LEDBIT(r1, 0x40045569, &(0x7f0000000100)=0xffff391d) bind$auto(0x3, &(0x7f0000000040)=@rc={0x1f, @none, 0x7}, 0x6a) r9 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) write$auto(r9, &(0x7f0000000080)='\\x7fF&\xb5\x8d\xddEl/trac_notrace_pid\x00\x00\x00\x00', 0x7) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$auto_hsr(&(0x7f00000011c0), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f00000001c0)={'ip6tnl0\x00', 0x0}) sendmsg$auto_HSR_C_GET_NODE_STATUS(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)={0x28, r11, 0x929, 0x70bd2c, 0x25dfdbfb, {}, [@HSR_A_IFINDEX={0x8, 0x2, r13}, @HSR_A_NODE_ADDR={0xa, 0x1, @multicast}]}, 0x28}, 0x1, 0x0, 0x0, 0x240088c0}, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) 2m28.940578502s ago: executing program 8 (id=4876): r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x4, 0x1, 0x10000000000, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000005b8, 0xffff, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x840}, 0x7, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mknod$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x8) fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(0x400000000000, 0x101, 0x8040, 0x4, 0x0) mknod$auto(0x0, 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) read$auto(r2, 0x0, 0x20) unshare$auto(0xfffffffffffffffd) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) fcntl$auto_F_UNLCK(r2, 0xb3a, 0x2) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x210, 0xb99, 0xa, 0x10, r2, 0x2) r4 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0) write$auto(r4, &(0x7f0000000000), 0xef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) 2m13.79384765s ago: executing program 40 (id=4876): r0 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x4, 0x1, 0x10000000000, 0xffffffffffffffff, 0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000005b8, 0xffff, 0x0, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r1, &(0x7f0000000100)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x3, 0x0, 0x80000000, 0x6}, 0x9}, 0x7, 0x6, 0x0) syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x44814}, 0x2004c0c4) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x840}, 0x7, 0x88) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) mknod$auto(&(0x7f0000000140)=':,\x00', 0x0, 0x8) fanotify_init$auto(0x5, 0x2000000000002) fanotify_mark$auto(0x400000000000, 0x101, 0x8040, 0x4, 0x0) mknod$auto(0x0, 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) read$auto(r2, 0x0, 0x20) unshare$auto(0xfffffffffffffffd) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) fcntl$auto_F_UNLCK(r2, 0xb3a, 0x2) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x210, 0xb99, 0xa, 0x10, r2, 0x2) r4 = openat$auto_nsim_dev_health_break_fops_health(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/netdevsim/netdevsim1/health/break_health\x00', 0x101, 0x0) write$auto(r4, &(0x7f0000000000), 0xef) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) 1m49.570161688s ago: executing program 0 (id=5022): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS0\x00', 0x48140, 0x0) memfd_create$auto(0x0, 0xb) io_uring_setup$auto(0x6, 0x0) r0 = socket(0xa, 0x801, 0x84) getsockopt$auto(r0, 0x84, 0x2, 0x0, 0x0) setsockopt$auto(0x400000000000003, 0x29, 0x46, 0x0, 0x3) connect$auto(0x3, 0x0, 0x55) (fail_nth: 4) 1m49.108459447s ago: executing program 0 (id=5023): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/bpf_stats_enabled\x00', 0x163041, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r0, 0x0, 0x0) r1 = prctl$auto_PR_RISCV_V_GET_CONTROL(0x46, 0x100000001, 0xffffffffffffffff, 0x4, 0x2) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_START_SCHED_SCAN(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xb8, r2, 0x200, 0x70bd28, 0x25dfdbfd, {}, [@NL80211_ATTR_MAC={0xa2, 0x6, "71621ebf39cd18091874b66f7665324428e349ad26e44c7a22a5636b3b6a1414809f7c5ce5e95c8eea9577edc3f11907aeedfde9be8cb0d14f2123d2e0f5314c25c566b1cb042fb61279dcb28d56a1004305849eb71530abeb1a814a30bbdc0b16640bec9c8335f5b29ab14cda06cc629544759643a654262df0648aa022134950c93b67ed99a4b24fabaae1ddead7f35475b0282ad09f0200071be6bc3a"}]}, 0xb8}, 0x1, 0x0, 0x0, 0x24000801}, 0x20000000) 1m48.656006792s ago: executing program 0 (id=5025): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:3/power/runtime_active_time\x00', 0x18b001, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_1={r0, 0x7f, @value=0x535393c8, 0x3}, 0x6f4) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) init_module$auto(0x0, 0xffff9, &(0x7f0000000140)='/sys/devices/platform/dummy_hcd.6/usb7/power/wakeup_active_count\x00') prctl$auto(0x1000000003b, 0x1, 0x0, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0x8000000000000000, 0x15) madvise$auto(0x0, 0x2000000080000001, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xebe, 0xfffffffffffffffa, 0xd3) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000000)={0x3, 0x7, 0x8}) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) madvise$auto(0x0, 0xffffffffffff0005, 0x17) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x30, 0x80000006, 0x4) r1 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x408, 0x7, 0x1ff, 0x7, 0x42, 0x4909b6f8, 0x1ffdf, 0x7, 0x200003, 0x2, 0xa121, 0x3, 0x6, 0x4, 0xb4, 0xa, 0x6, 0x10001, 0x80, 0x100000000, 0x0, 0x7, 0x2100, 0x200, 0x0, 0x84, [0x0, 0x0, 0x0, 0x50100000000000, 0x6, 0x2000, 0x0, 0x6, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xfffffffffffffffd, 0x0, 0x0, 0x5, 0xfffffffffffffffe, 0xffffffffffffbfff, 0xfffffffffffffffd, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0xfffffffffffffffe, 0x2000000000000000, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x0, 0x6, 0x0, 0x88e, 0x8000000000008, 0xfffffffffffffffc, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffa, 0x8, 0x4000000000, 0x7]}, 0x1fe, 0xd) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000000)={0x0, 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) madvise$auto(0x0, 0xffffffffffff0005, 0x19) move_mount$auto(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x91e4) mmap$auto(0x0, 0x200003, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x200000, 0x200006, 0x1, 0x40eb1, 0x602, 0xb00000000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) 1m45.282164845s ago: executing program 0 (id=5029): mmap$auto(0x5, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/module/nfs/parameters/nfs_idmap_cache_timeout\x00', 0xc2902, 0x0) read$auto(r0, 0x0, 0x2000000020) r1 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r1, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x4, 0x2020009, 0x20003, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mtdblock0\x00', 0x14f602, 0x0) capget$auto(&(0x7f0000000000)={0x19980330}, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x401) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000002500), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)={0x2c, r4, 0x1, 0x2070bd26, 0x25dfdbf8, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x4}, @OVS_DP_ATTR_NAME={0x8, 0x1, 'HfR\x00'}, @OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0x9}]}, 0x2c}, 0x1, 0x0, 0x0, 0x801}, 0x80) r5 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="38feff00", @ANYRES16=r5, @ANYBLOB="01002abd7000fedbdf2502"], 0x38}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000500)={'gretap0\x00', 0x0}) socket(0xa, 0x23af690fef30229, 0x9) sendmsg$auto_BATADV_CMD_SET_MESH(0xffffffffffffffff, 0x0, 0x140080e4) ioctl$auto_PPPIOCSMRU(0xffffffffffffffff, 0xc004743e, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x6, 0x1, 0x44f, 0x4807, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x20000000000008, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x0, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0xffffffffffffffff, 0x2, 0x0, 0x402000, 0x0, 0xe, 0x1, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x0, 0x8, 0x1fffd, 0x8, 0x10000000000, 0xfbffffffffffffff, 0x400000000004, 0x2f, 0x0, 0x0, 0x1006, 0x400000000005b5, 0xfffb, 0x0, 0x100, 0x0, 0x6, 0x2, 0x88e, 0x40, 0xfffffffffffffffc, 0x8, 0xa38, 0x3, 0x4000003, 0xfffffffffffffffc, 0x2, 0x8, 0x10000000007, 0xc567]}, 0x1fa, 0xd) r9 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f00000000c0), 0x2802, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r9, 0x2, &(0x7f0000000380)="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") ioctl$auto__ctl_fops_dm_ioctl(r9, 0xfffffff7effffd05, &(0x7f00000001c0)) sendmsg$auto_OVS_DP_CMD_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)={0xff6b, 0x0, 0x5, 0x70bd26, 0x25dfdbfc, {}, [@OVS_DP_ATTR_IFINDEX={0x8, 0x9, r8}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000c004}, 0x4000024) madvise$auto(0x0, 0xffffffffffff0001, 0x15) write$auto(0x3, 0x0, 0x100082) 1m43.767421829s ago: executing program 0 (id=5032): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004080}, 0x0) socketcall$auto_SYS_SETSOCKOPT(0xe, &(0x7f0000000040)=0xd) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0x59e, 0x0, 0x0, 0x9}, 0x207}, 0x40, 0x100) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(0x0, 0x161342, 0x100) openat$auto_btrfs_ctl_fops_super(0xffffffffffffff9c, 0x0, 0x20401, 0x0) ioperm$auto(0xfb, 0x5, 0xe) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/asound/card1/pcm1c/sub0/info\x00', 0xc0, 0x0) pread64$auto(r1, 0x0, 0x653, 0x3) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x23, 0x0) r2 = openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/tracing/set_event\x00', 0x20201, 0x0) write$auto(r2, 0x0, 0x4) r3 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/bus/usb/007/001\x00', 0xa500, 0x0) ioctl$auto(r3, 0x5514, 0x1) mbind$auto(0x0, 0x2091d2, 0x4, 0x0, 0x6, 0x2) clone$auto(0x21002, 0x5, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x9) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_VERSION_SET(0xffffffffffffffff, 0x0, 0x4010) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) pidfd_open$auto(0x0, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/adsp1\x00', 0x101140, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x0, 0x2020009, 0x1, 0x11, 0xfffffffffffffffa, 0x8000) getsockopt$auto_SO_LOCK_FILTER(r0, 0xfff, 0x2c, &(0x7f00000001c0)='/dev/vhost-net\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m42.069526491s ago: executing program 0 (id=5037): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x1a1382, 0x0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) recvmmsg$auto(0x4, 0x0, 0xffffffff, 0x0, 0x0) sendmsg$auto_NETDEV_CMD_NAPI_GET(0xffffffffffffffff, 0x0, 0x0) socket(0x11, 0x3, 0x2) r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/lockdep\x00', 0x10b402, 0x0) pread64$auto(r0, &(0x7f0000000000)='/proc/NesH\x1fk\xdd\x00\x00\x00\x00\x88\x00\x00\x00\x00\x00:\x19\xf4\xe2\xb7:\x81\xf8\xedl\x9d\x9a\'\xf8D,\xc0x\x1d\xf5JE\xcd7\xc3^\xbc2\xc7\xbf\xe5\x7f\xb93 \xcd${!\x9a`\x96\x86\x96D|\xf0H\x8c\x05:\xae\xa6\x88x\t\x18\x8b\xec\xd7\xe8r0, [0x7ff, 0x6, 0xffffffff], {0xffff, 0xfffffffb, 0xa1, 0x8, 0x10001, 0xff, 0x0, 0x9, 0x1}, {0x80000000, 0xf, 0xb87, 0x98d3, 0x1, 0x6, 0x5, 0xc529, 0x6}}) r4 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r5, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x14, r6, 0x1, 0x70bd26, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x400c010}, 0x810) sendmsg$auto_NETDEV_CMD_BIND_RX(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x8c, r6, 0x0, 0x70bd27, 0x25dfdbff, {}, [@NETDEV_A_DMABUF_FD={0x8, 0x3, r1}, @NETDEV_A_DMABUF_FD={0x8, 0x3, r3}, @NETDEV_A_DMABUF_QUEUES={0x3c, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_ID={0x8, 0x1, 0xffffa9aa}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x3}, @NETDEV_A_QUEUE_ID={0x8}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x10001}, @NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x3}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x523}]}, @NETDEV_A_DMABUF_QUEUES={0x2c, 0x2, 0x0, 0x1, [@NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0x400}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0xa7}, @NETDEV_A_QUEUE_ID={0x8, 0x1, 0x9}, @NETDEV_A_QUEUE_TYPE={0x8}, @NETDEV_A_QUEUE_TYPE={0x8, 0x3, 0xc0000}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4800}, 0x42fdadf54c94e328) ioctl$auto_KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$auto(0x3, 0xc048aec8, r0) 2.408668037s ago: executing program 7 (id=5375): ioctl$auto(0xffffffffffffffff, 0x7ff, 0xffffffffffffffff) mmap$auto(0xffffffff9fd9fe19, 0x1, 0x1a6, 0x15, 0x7, 0x28000) (async) mmap$auto(0xffffffff9fd9fe19, 0x1, 0x1a6, 0x15, 0x7, 0x28000) socket(0x2b, 0x1, 0x1) getsockopt$auto(0xffffffffffffffff, 0xb, 0x10000f25, 0x0, 0x0) prctl$auto(0x1000000003b, 0x80000000001, 0x4, 0xfffffffffffffffe, 0x7) r0 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/mem\x00', 0x100, 0x0) lseek$auto(r0, 0x8, 0x0) (async) lseek$auto(r0, 0x8, 0x0) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) mbind$auto(0x0, 0x2, 0x0, &(0x7f0000002100)=0x4, 0x7, 0x4) (async) mbind$auto(0x0, 0x2, 0x0, &(0x7f0000002100)=0x4, 0x7, 0x4) get_mempolicy$auto(0x0, 0x0, 0x7f, 0x41ff, 0x3) socket(0x2c, 0x3, 0x0) (async) socket(0x2c, 0x3, 0x0) r1 = socket(0x2, 0x1, 0x0) setsockopt$auto(0x4, 0x0, 0x480, 0xfffffffffffffffe, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0xffffffffffffffff, 0x4, 0x8, 0x8, 0xc, 0x66b, 0x4, 0x7fb}, 0x6f4) (async) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0xe, 0xffffffffffffffff, 0x4, 0x8, 0x8, 0xc, 0x66b, 0x4, 0x7fb}, 0x6f4) mbind$auto(0x1ffd, 0x100000006, 0x2, 0x0, 0x4, 0x2) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x101000, 0x0) ioctl$auto(r2, 0x228d, 0xbb1) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mlockall$auto(0x7) write$auto(0x3, 0x0, 0x7fffffff) (async) write$auto(0x3, 0x0, 0x7fffffff) read$auto(0x3, 0x0, 0x80) mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x6, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) listen$auto(r1, 0xde5c) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x6) readv$auto(0x3, 0x0, 0x1) (async) readv$auto(0x3, 0x0, 0x1) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) (async) socket(0x18, 0xa, 0x1) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0x402501, 0x0) 2.12528199s ago: executing program 2 (id=5376): migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x0, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(r1, 0x5522, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)={0x4, 0x81, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0xeb94, 0x82, @stream_id=0x100, 0x5, 0x476, 0x0}) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r2, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_FLAGS={0x8, 0x4, 0x1}, @HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "a060292f83d9"}, @HWSIM_ATTR_COOKIE={0xc}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0xffffffcc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) adjtimex$auto(0x0) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x3, 0x1, 0x2b, 0x0, 0x9) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x101000, 0x0) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x104, 0x7, 0x7, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x180, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x80, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 1.794222562s ago: executing program 7 (id=5377): mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x163742, 0x0) mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) madvise$auto_MADV_PAGEOUT(0x100000000000000, 0x4655, 0x15) timer_settime$auto(0x0, 0xffff8000, 0x0, 0x0) open(0x0, 0x0, 0x40) timerfd_settime$auto(0xffffffffffffffff, 0x5, 0x0, 0x0) r0 = io_uring_setup$auto(0xd364, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000140), r0) sendmsg$auto_NL80211_CMD_SET_TID_TO_LINK_MAPPING(r1, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x200, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x8010) 1.492640195s ago: executing program 3 (id=5378): socket(0xa, 0x3, 0x3a) setsockopt$auto(0x400000000000003, 0x29, 0xc8, 0x0, 0x567) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8002, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) socket(0x2a, 0x2, 0x6) setresgid$auto(0xa05, 0x4, 0x0) access$auto(0x0, 0x3) connect$auto(0x3, 0xfffffffffffffffe, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) getsockopt$auto_SO_NOFCS(r1, 0x1, 0x2b, 0x0, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000140)="671d264add69b6440843b6e6688a2b5ad9df2669e6f9cd236532b20ed763c1dbfee3f787fc87cd0f5600ac8caf4bde4c30b530ac6ebbff950e1a647d6a08a1b55dde5a409b58", 0x46) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500"}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r2 = openat$auto_rtc_dev_fops_dev(0xffffffffffffff9c, &(0x7f0000000040), 0x8300, 0x0) ioctl$auto_RTC_PIE_ON(r2, 0x7005, 0x0) readv$auto(r2, &(0x7f00000004c0)={0x0, 0x4}, 0x5) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) close_range$auto(0x2, 0x8, 0x0) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, &(0x7f00000009c0)='/sys/kernel/tracing/uprobe_events\x00', 0x302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, 0x0, 0x82204, 0x0) 1.352713968s ago: executing program 2 (id=5379): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), r0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {}, [@NL80211_ATTR_IFINDEX={0x8}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x860}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.020679522s ago: executing program 7 (id=5380): close_range$auto(0x0, 0xe903, 0x82) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x0, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(r1, 0x5522, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)={0x4, 0x81, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0xeb94, 0x82, @stream_id=0x100, 0x5, 0x476, 0x0}) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r2, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_FLAGS={0x8, 0x4, 0x1}, @HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "a060292f83d9"}, @HWSIM_ATTR_COOKIE={0xc}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0xffffffcc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) adjtimex$auto(0x0) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x3, 0x1, 0x2b, 0x0, 0x9) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x101000, 0x0) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x104, 0x7, 0x7, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x180, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x80, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 1.019799772s ago: executing program 2 (id=5388): migrate_pages$auto(0x0, 0x99, 0x0, &(0x7f00000001c0)=0x7b) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/adsp1\x00', 0x0, 0x0) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000180)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_ALLOW_SUSPEND(r1, 0x5522, 0x0) ioctl$auto_USBDEVFS_SUBMITURB(r1, 0x8038550a, &(0x7f0000000100)={0x4, 0x81, 0x5b, 0x4, &(0x7f0000000000), 0x9, 0xeb94, 0x82, @stream_id=0x100, 0x5, 0x476, 0x0}) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000000c0)) ioctl$auto_SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000005800), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r2, &(0x7f0000006940)={0x0, 0x0, &(0x7f0000006900)={&(0x7f0000000000)={0x3c, r3, 0x1, 0x70bd29, 0x25dfdbff, {}, [@HWSIM_ATTR_FLAGS={0x8, 0x4, 0x1}, @HWSIM_ATTR_ADDR_TRANSMITTER={0xa, 0x2, "a060292f83d9"}, @HWSIM_ATTR_COOKIE={0xc}, @HWSIM_ATTR_SIGNAL={0x8, 0x6, 0xffffffcc}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000041}, 0x800) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) adjtimex$auto(0x0) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x3, 0x1, 0x2b, 0x0, 0x9) mknod$auto(&(0x7f0000000180)=':,\x00', 0xcb, 0xfffffffa) execve$auto(&(0x7f0000000040)=':,\x00', 0x0, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x101000, 0x0) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(r4, 0x0, 0x20) r5 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r5, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x104, 0x7, 0x7, 0x0) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/swaps\x00', 0x180, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000500)='/dev/sequencer2\x00', 0x80, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) 268.578504ms ago: executing program 7 (id=5381): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000140), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000f40)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_SET_MESH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x24, r1, 0x1, 0x70bd28, 0x25dfdbb9, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0xfe}]}, 0x24}, 0x1, 0xf0ff, 0x0, 0x44010}, 0x20) 38.193729ms ago: executing program 2 (id=5382): mmap$auto(0x7, 0x200020007, 0x4000000000e3, 0xeb1, 0x401, 0x8000) r0 = openat$auto_mon_fops_text_t_mon_text(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/usb/usbmon/9t\x00', 0x0, 0x0) pread64$auto(r0, 0x0, 0x59, 0x7) read$auto_mon_fops_text_t_mon_text(r0, 0x0, 0x0) sendfile$auto(0x6, r0, 0x0, 0xc7b6) unshare$auto(0x40000080) mmap$auto(0xa, 0x400008, 0x0, 0x7fffffff, 0xffffffffffffffff, 0x8000) r1 = socket(0x0, 0x80000, 0x2) close_range$auto(0x2, r1, 0xa) r2 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) bpf$auto(0x2, &(0x7f00000001c0)=@test={r1, 0x10000040, 0xfff, 0xb, 0xb, 0x8, 0x8, 0x4b7961de, 0x3, 0x9, 0x6, 0xffffffffffffff7f, 0x1, 0x9, 0x6}, 0xc) read$auto_blk_mq_debugfs_fops_blk_mq_debugfs(r2, &(0x7f0000000440)=""/136, 0x88) r3 = socket(0xa, 0x2, 0x3a) epoll_wait$auto(r2, &(0x7f0000000100)={0x2, 0xff}, 0x1, 0x401) setsockopt$auto(r3, 0x29, 0x32, 0x0, 0x13) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r4 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x3090a2, 0x0) r5 = socket(0x10, 0x80000, 0x0) mmap$auto(0x0, 0x2, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x3, 0x3, 0x14) setgroups$auto(0xe32, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r1, @ANYRESDEC=0x0, @ANYRESHEX=r0, @ANYRES64=r5, @ANYRESOCT=r0], 0x1ac}}, 0x40000) recvmmsg$auto(r5, &(0x7f0000000140)={{0x0, 0x1, &(0x7f0000000080)={0x0, 0x401}, 0xffffffff, 0x0, 0x65, 0x9}, 0x803}, 0xfffffff9, 0x10, 0x0) write$auto_proc_clear_refs_operations_internal(r4, 0x0, 0xffffff4b) r6 = openat$auto_snd_mixer_oss_f_ops_mixer_oss(0xffffffffffffff9c, 0x0, 0xa00, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/tty/ttyrc/power/autosuspend_delay_ms\x00', 0x121000, 0x0) mincore$auto(0x0, 0x0, 0x0) ioctl$auto_OSS_ALSAEMULVER(r6, 0x80044df9, 0x0) syz_open_procfs$namespace(0x0, 0x0) socketpair$auto(0x1e, 0xffffff88, 0xfffffffd, 0x0) 0s ago: executing program 7 (id=5383): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/dummy_udc.7/driver_override\x00', 0x182, 0x0) writev$auto(r0, &(0x7f0000000140)={&(0x7f0000000040)="5183bf4fb5b15272a2be23e14cc503a85b10eab7b1423251b25155a1fb221aea4205e74a3bd33637ba7e5db43df73afde74b74acfc653398ea8fa7127939", 0x6a}, 0x6e) sendfile$auto(r0, r0, 0x0, 0x20000000088) kernel console output (not intermixed with test programs): 0000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1349.914762][T27229] RBP: 00007f16a420e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1349.914781][T27229] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1349.914799][T27229] R13: 0000000000000000 R14: 00007f16a43a5fa0 R15: 00007ffc7db74b58 [ 1349.914833][T27229] [ 1350.705011][T27238] FAULT_INJECTION: forcing a failure. [ 1350.705011][T27238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1350.783126][T27238] CPU: 1 UID: 0 PID: 27238 Comm: syz.4.5034 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1350.783164][T27238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1350.783183][T27238] Call Trace: [ 1350.783191][T27238] [ 1350.783203][T27238] dump_stack_lvl+0x16c/0x1f0 [ 1350.783242][T27238] should_fail_ex+0x50a/0x650 [ 1350.783292][T27238] strncpy_from_user+0x3b/0x2d0 [ 1350.783336][T27238] getname_flags.part.0+0x8f/0x550 [ 1350.783372][T27238] getname+0x8d/0xe0 [ 1350.783413][T27238] do_sys_openat2+0x104/0x1e0 [ 1350.783450][T27238] ? __pfx_do_sys_openat2+0x10/0x10 [ 1350.783482][T27238] ? do_raw_spin_unlock+0x172/0x230 [ 1350.783518][T27238] __x64_sys_openat+0x175/0x210 [ 1350.783549][T27238] ? __pfx___x64_sys_openat+0x10/0x10 [ 1350.783593][T27238] do_syscall_64+0xcd/0x250 [ 1350.783631][T27238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.783670][T27238] RIP: 0033:0x7f16a418cde9 [ 1350.783692][T27238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1350.783721][T27238] RSP: 002b:00007f16a4fae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1350.783747][T27238] RAX: ffffffffffffffda RBX: 00007f16a43a5fa0 RCX: 00007f16a418cde9 [ 1350.783766][T27238] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1350.783785][T27238] RBP: 00007f16a420e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1350.783802][T27238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1350.783819][T27238] R13: 0000000000000000 R14: 00007f16a43a5fa0 R15: 00007ffc7db74b58 [ 1350.783853][T27238] [ 1351.077256][T27249] bridge0: port 3(team0) entered blocking state [ 1351.084142][T27249] bridge0: port 3(team0) entered disabled state [ 1351.102110][T27249] team0: entered allmulticast mode [ 1351.135153][T27249] team_slave_0: entered allmulticast mode [ 1351.143707][T27249] team_slave_1: entered allmulticast mode [ 1351.172647][T27249] team0: entered promiscuous mode [ 1351.193539][T27249] team_slave_0: entered promiscuous mode [ 1351.199424][T27249] team_slave_1: entered promiscuous mode [ 1351.214259][T27249] bridge0: port 3(team0) entered blocking state [ 1351.220835][T27249] bridge0: port 3(team0) entered forwarding state [ 1351.295715][T27137] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1351.328941][T27137] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1351.355685][T27252] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5036'. [ 1351.373849][T27137] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1351.395095][T27137] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1351.695485][T27137] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1351.857486][T27137] 8021q: adding VLAN 0 to HW filter on device team0 [ 1351.887262][T21705] Bluetooth: hci6: command tx timeout [ 1351.989816][T26081] bridge0: port 1(bridge_slave_0) entered blocking state [ 1351.997011][T26081] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1352.051329][T26081] bridge0: port 2(bridge_slave_1) entered blocking state [ 1352.058520][T26081] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1352.748403][T27137] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1353.597120][T27137] veth0_vlan: entered promiscuous mode [ 1353.642279][T27137] veth1_vlan: entered promiscuous mode [ 1353.679220][T27310] usb usb15: usbfs: process 27310 (syz.2.5042) did not claim interface 0 before use [ 1353.729158][T27137] veth0_macvtap: entered promiscuous mode [ 1353.762701][T27137] veth1_macvtap: entered promiscuous mode [ 1353.762775][T27310] FAULT_INJECTION: forcing a failure. [ 1353.762775][T27310] name failslab, interval 1, probability 0, space 0, times 0 [ 1353.812762][T27137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1353.812918][T27310] CPU: 1 UID: 0 PID: 27310 Comm: syz.2.5042 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1353.812968][T27310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1353.812987][T27310] Call Trace: [ 1353.812996][T27310] [ 1353.813008][T27310] dump_stack_lvl+0x16c/0x1f0 [ 1353.813052][T27310] should_fail_ex+0x50a/0x650 [ 1353.813099][T27310] ? fs_reclaim_acquire+0xae/0x150 [ 1353.813143][T27310] ? tomoyo_encode2+0x100/0x3e0 [ 1353.813199][T27310] should_failslab+0xc2/0x120 [ 1353.813229][T27310] __kmalloc_noprof+0xcb/0x510 [ 1353.813286][T27310] ? d_absolute_path+0x137/0x1b0 [ 1353.813324][T27310] tomoyo_encode2+0x100/0x3e0 [ 1353.813369][T27310] tomoyo_encode+0x29/0x50 [ 1353.813408][T27310] tomoyo_realpath_from_path+0x19d/0x720 [ 1353.813460][T27310] tomoyo_check_open_permission+0x2ad/0x3c0 [ 1353.813497][T27310] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1353.813548][T27310] ? __pfx___lock_acquire+0x10/0x10 [ 1353.813609][T27310] ? __pfx_hook_file_open+0x10/0x10 [ 1353.813646][T27310] ? lock_acquire+0x2f/0xb0 [ 1353.813693][T27310] tomoyo_file_open+0x6b/0x90 [ 1353.813741][T27310] security_file_open+0x84/0x1e0 [ 1353.813781][T27310] do_dentry_open+0x57c/0x1c40 [ 1353.813829][T27310] ? inode_permission+0xdd/0x5f0 [ 1353.813866][T27310] vfs_open+0x82/0x3f0 [ 1353.813895][T27310] ? may_open+0x1f2/0x400 [ 1353.813931][T27310] path_openat+0x1e88/0x2d80 [ 1353.813994][T27310] ? __pfx_path_openat+0x10/0x10 [ 1353.814039][T27310] ? __pfx___lock_acquire+0x10/0x10 [ 1353.814080][T27310] ? lock_acquire.part.0+0x11b/0x380 [ 1353.814124][T27310] ? find_held_lock+0x2d/0x110 [ 1353.814161][T27310] do_filp_open+0x20c/0x470 [ 1353.814205][T27310] ? __pfx_do_filp_open+0x10/0x10 [ 1353.814247][T27310] ? find_held_lock+0x2d/0x110 [ 1353.814306][T27310] ? alloc_fd+0x41f/0x760 [ 1353.814359][T27310] do_sys_openat2+0x17a/0x1e0 [ 1353.814389][T27310] ? __pfx_do_sys_openat2+0x10/0x10 [ 1353.814424][T27310] ? do_raw_spin_unlock+0x172/0x230 [ 1353.814463][T27310] __x64_sys_openat+0x175/0x210 [ 1353.814496][T27310] ? __pfx___x64_sys_openat+0x10/0x10 [ 1353.814543][T27310] do_syscall_64+0xcd/0x250 [ 1353.814583][T27310] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.814627][T27310] RIP: 0033:0x7fe9cfd8cde9 [ 1353.814651][T27310] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1353.814680][T27310] RSP: 002b:00007fe9d0ccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1353.814707][T27310] RAX: ffffffffffffffda RBX: 00007fe9cffa5fa0 RCX: 00007fe9cfd8cde9 [ 1353.814728][T27310] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1353.814747][T27310] RBP: 00007fe9cfe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1353.814765][T27310] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1353.814784][T27310] R13: 0000000000000000 R14: 00007fe9cffa5fa0 R15: 00007fffd090c318 [ 1353.814821][T27310] [ 1353.816355][T27310] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1353.872456][T27137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.362431][T27137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.423613][T27137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.452764][T27137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.493611][T27137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.523220][T27137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.572336][T27137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.639553][T27137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.670621][T27137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.699776][T27137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.743518][T27137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.753368][T27137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1354.823455][T27137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1354.864108][T27137] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1354.928257][T27137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1354.929083][T27336] FAULT_INJECTION: forcing a failure. [ 1354.929083][T27336] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1354.989285][T27137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.021028][T27137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.023705][T27336] CPU: 1 UID: 0 PID: 27336 Comm: syz.4.5047 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1355.023742][T27336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1355.023760][T27336] Call Trace: [ 1355.023769][T27336] [ 1355.023780][T27336] dump_stack_lvl+0x16c/0x1f0 [ 1355.023822][T27336] should_fail_ex+0x50a/0x650 [ 1355.023873][T27336] ? __pfx___might_resched+0x10/0x10 [ 1355.023929][T27336] should_fail_alloc_page+0xe7/0x130 [ 1355.023961][T27336] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1355.024011][T27336] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 1355.024063][T27336] ? hlock_class+0x4e/0x130 [ 1355.024094][T27336] ? __lock_acquire+0x15a9/0x3c40 [ 1355.024141][T27336] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1355.024187][T27336] ? hlock_class+0x4e/0x130 [ 1355.024216][T27336] ? __lock_acquire+0x15a9/0x3c40 [ 1355.024270][T27336] ? __pfx___lock_acquire+0x10/0x10 [ 1355.024313][T27336] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1355.024362][T27336] ? policy_nodemask+0xea/0x4e0 [ 1355.024412][T27336] alloc_pages_mpol+0x1fc/0x540 [ 1355.024442][T27336] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1355.024491][T27336] ? __pfx_lock_release+0x10/0x10 [ 1355.024531][T27336] ? do_raw_spin_lock+0x12d/0x2c0 [ 1355.024564][T27336] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1355.024600][T27336] vma_alloc_folio_noprof+0xee/0x1b0 [ 1355.024633][T27336] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1355.024665][T27336] ? __anon_vma_prepare+0x2e2/0x5e0 [ 1355.024719][T27336] do_pte_missing+0x202f/0x3e10 [ 1355.024772][T27336] ? __pmd_alloc+0x3c2/0x870 [ 1355.024814][T27336] __handle_mm_fault+0x1166/0x2c60 [ 1355.024874][T27336] ? __pfx___handle_mm_fault+0x10/0x10 [ 1355.024917][T27336] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1355.024978][T27336] ? find_vma+0xc0/0x140 [ 1355.025013][T27336] ? __pfx_find_vma+0x10/0x10 [ 1355.025053][T27336] handle_mm_fault+0x3fa/0xaa0 [ 1355.025103][T27336] do_user_addr_fault+0x7a3/0x13f0 [ 1355.025152][T27336] exc_page_fault+0x5c/0xc0 [ 1355.025186][T27336] asm_exc_page_fault+0x26/0x30 [ 1355.025226][T27336] RIP: 0010:rep_movs_alternative+0x33/0x70 [ 1355.025272][T27336] Code: 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 <48> 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb [ 1355.025301][T27336] RSP: 0018:ffffc9000b38fba0 EFLAGS: 00050212 [ 1355.025325][T27336] RAX: 4000000400000001 RBX: 0000000000000010 RCX: 0000000000000010 [ 1355.025345][T27336] RDX: fffff52001671f99 RSI: ffffc9000b38fcb8 RDI: 0000400000000000 [ 1355.025365][T27336] RBP: 0000400000000000 R08: 0000000000000000 R09: fffff52001671f98 [ 1355.025385][T27336] R10: ffffc9000b38fcc7 R11: 0000000000000000 R12: ffffc9000b38fcb8 [ 1355.025403][T27336] R13: 0000400000000010 R14: 00007ffffffff000 R15: 0000000000000000 [ 1355.025457][T27336] _copy_to_user+0xbb/0xd0 [ 1355.025496][T27336] inotify_read+0x34d/0x8c0 [ 1355.025561][T27336] ? __pfx_inotify_read+0x10/0x10 [ 1355.025618][T27336] ? __pfx_woken_wake_function+0x10/0x10 [ 1355.025659][T27336] ? apparmor_file_permission+0x251/0x400 [ 1355.025701][T27336] ? security_file_permission+0x71/0x210 [ 1355.025763][T27336] ? rw_verify_area+0xcf/0x680 [ 1355.025805][T27336] ? __pfx_inotify_read+0x10/0x10 [ 1355.025860][T27336] vfs_read+0x1df/0xbf0 [ 1355.025923][T27336] ? __pfx_vfs_read+0x10/0x10 [ 1355.025970][T27336] ? do_sys_openat2+0xb1/0x1e0 [ 1355.026006][T27336] ? __pfx_do_sys_openat2+0x10/0x10 [ 1355.026063][T27336] ksys_read+0x12b/0x250 [ 1355.026109][T27336] ? __pfx_ksys_read+0x10/0x10 [ 1355.026167][T27336] do_syscall_64+0xcd/0x250 [ 1355.026214][T27336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1355.026261][T27336] RIP: 0033:0x7f16a418cde9 [ 1355.026288][T27336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1355.026321][T27336] RSP: 002b:00007f16a4fae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1355.026352][T27336] RAX: ffffffffffffffda RBX: 00007f16a43a5fa0 RCX: 00007f16a418cde9 [ 1355.026376][T27336] RDX: 0000000000000098 RSI: 0000400000000000 RDI: 0000000000000004 [ 1355.026396][T27336] RBP: 00007f16a4fae090 R08: 0000000000000000 R09: 0000000000000000 [ 1355.026418][T27336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1355.026439][T27336] R13: 0000000000000000 R14: 00007f16a43a5fa0 R15: 00007ffc7db74b58 [ 1355.026483][T27336] [ 1355.423671][T27333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5046'. [ 1355.458281][T27137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.561213][T27137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.602526][T27137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.628422][T27137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.651862][T27137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.711570][T27137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.760209][T27137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.797297][T27137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.823671][T27137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.881894][T27137] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1355.919145][T27137] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1355.950597][T27137] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1356.106021][T27137] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.135698][T27137] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.166104][T27137] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.192896][T27137] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1356.533609][T26086] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.541561][T26086] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.681254][T26086] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1356.703785][T26086] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1356.756394][T27362] usb usb15: usbfs: process 27362 (syz.2.5050) did not claim interface 0 before use [ 1356.816158][T27362] ERROR: Out of memory at tomoyo_memory_ok. [ 1360.287198][T27426] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5057'. [ 1360.872634][T27441] netlink: 'syz.7.5059': attribute type 11 has an invalid length. [ 1360.913917][T27441] netlink: 'syz.7.5059': attribute type 11 has an invalid length. [ 1360.922119][T27441] netlink: 'syz.7.5059': attribute type 11 has an invalid length. [ 1361.013516][T27441] netlink: 'syz.7.5059': attribute type 11 has an invalid length. [ 1361.021391][T27441] netlink: 'syz.7.5059': attribute type 11 has an invalid length. [ 1361.130823][T27441] netlink: 'syz.7.5059': attribute type 11 has an invalid length. [ 1361.233506][T27441] netlink: 'syz.7.5059': attribute type 11 has an invalid length. [ 1361.906863][T27462] vivid-003: ================= START STATUS ================= [ 1362.004933][T27462] vivid-003: Radio HW Seek Mode: Bounded [ 1362.072626][T27462] vivid-003: Radio Programmable HW Seek: false [ 1362.110326][T27462] vivid-003: RDS Rx I/O Mode: Block I/O [ 1362.154209][T27462] vivid-003: Generate RBDS Instead of RDS: false [ 1362.160620][T27462] vivid-003: RDS Reception: true [ 1362.277274][T27462] vivid-003: RDS Program Type: 0 inactive [ 1362.333540][T27462] vivid-003: RDS PS Name: inactive [ 1362.339050][T27462] vivid-003: RDS Radio Text: inactive [ 1362.371971][T27475] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5064'. [ 1362.395134][T27462] vivid-003: RDS Traffic Announcement: false inactive [ 1362.402012][T27462] vivid-003: RDS Traffic Program: false inactive [ 1362.463673][T27462] vivid-003: RDS Music: false inactive [ 1362.479699][T27462] vivid-003: ================== END STATUS ================== [ 1362.968584][T27491] FAULT_INJECTION: forcing a failure. [ 1362.968584][T27491] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1363.021642][T27491] CPU: 0 UID: 0 PID: 27491 Comm: syz.2.5066 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1363.021680][T27491] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1363.021699][T27491] Call Trace: [ 1363.021709][T27491] [ 1363.021722][T27491] dump_stack_lvl+0x16c/0x1f0 [ 1363.021764][T27491] should_fail_ex+0x50a/0x650 [ 1363.021838][T27491] strncpy_from_user+0x3b/0x2d0 [ 1363.021889][T27491] getname_flags.part.0+0x8f/0x550 [ 1363.021931][T27491] getname+0x8d/0xe0 [ 1363.021973][T27491] do_sys_openat2+0x104/0x1e0 [ 1363.022008][T27491] ? __pfx_do_sys_openat2+0x10/0x10 [ 1363.022046][T27491] ? do_raw_spin_unlock+0x172/0x230 [ 1363.022087][T27491] __x64_sys_openat+0x175/0x210 [ 1363.022123][T27491] ? __pfx___x64_sys_openat+0x10/0x10 [ 1363.022174][T27491] do_syscall_64+0xcd/0x250 [ 1363.022217][T27491] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.022263][T27491] RIP: 0033:0x7fe9cfd8cde9 [ 1363.022289][T27491] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1363.022331][T27491] RSP: 002b:00007fe9d0ccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1363.022360][T27491] RAX: ffffffffffffffda RBX: 00007fe9cffa5fa0 RCX: 00007fe9cfd8cde9 [ 1363.022381][T27491] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1363.022401][T27491] RBP: 00007fe9cfe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1363.022420][T27491] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1363.022439][T27491] R13: 0000000000000000 R14: 00007fe9cffa5fa0 R15: 00007fffd090c318 [ 1363.022482][T27491] [ 1363.545420][T27499] FAULT_INJECTION: forcing a failure. [ 1363.545420][T27499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1363.599929][T27499] CPU: 1 UID: 0 PID: 27499 Comm: syz.2.5067 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1363.599973][T27499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1363.599992][T27499] Call Trace: [ 1363.600001][T27499] [ 1363.600024][T27499] dump_stack_lvl+0x16c/0x1f0 [ 1363.600099][T27499] should_fail_ex+0x50a/0x650 [ 1363.600164][T27499] strncpy_from_user+0x3b/0x2d0 [ 1363.600216][T27499] getname_flags.part.0+0x8f/0x550 [ 1363.600252][T27499] getname+0x8d/0xe0 [ 1363.600288][T27499] do_sys_openat2+0x104/0x1e0 [ 1363.600318][T27499] ? __pfx_do_sys_openat2+0x10/0x10 [ 1363.600368][T27499] ? do_raw_spin_unlock+0x172/0x230 [ 1363.600406][T27499] __x64_sys_openat+0x175/0x210 [ 1363.600440][T27499] ? __pfx___x64_sys_openat+0x10/0x10 [ 1363.600488][T27499] do_syscall_64+0xcd/0x250 [ 1363.600527][T27499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1363.600569][T27499] RIP: 0033:0x7fe9cfd8cde9 [ 1363.600592][T27499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1363.600622][T27499] RSP: 002b:00007fe9d0ccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1363.600652][T27499] RAX: ffffffffffffffda RBX: 00007fe9cffa5fa0 RCX: 00007fe9cfd8cde9 [ 1363.600672][T27499] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1363.600702][T27499] RBP: 00007fe9cfe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1363.600720][T27499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1363.600738][T27499] R13: 0000000000000000 R14: 00007fe9cffa5fa0 R15: 00007fffd090c318 [ 1363.600772][T27499] [ 1364.867359][T27533] FAULT_INJECTION: forcing a failure. [ 1364.867359][T27533] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1364.927875][T27533] CPU: 0 UID: 0 PID: 27533 Comm: syz.7.5073 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1364.927912][T27533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1364.927928][T27533] Call Trace: [ 1364.927937][T27533] [ 1364.927948][T27533] dump_stack_lvl+0x16c/0x1f0 [ 1364.927986][T27533] should_fail_ex+0x50a/0x650 [ 1364.928033][T27533] _copy_to_user+0x32/0xd0 [ 1364.928066][T27533] rng_dev_read+0x1f1/0x800 [ 1364.928107][T27533] ? __pfx_virtio_read+0x10/0x10 [ 1364.928148][T27533] ? __pfx_rng_dev_read+0x10/0x10 [ 1364.928193][T27533] ? bpf_lsm_file_permission+0x9/0x10 [ 1364.928237][T27533] ? security_file_permission+0x71/0x210 [ 1364.928275][T27533] ? rw_verify_area+0xcf/0x680 [ 1364.928309][T27533] ? __pfx_rng_dev_read+0x10/0x10 [ 1364.928349][T27533] vfs_read+0x1df/0xbf0 [ 1364.928392][T27533] ? __fget_files+0x1fc/0x3a0 [ 1364.928430][T27533] ? __pfx_lock_release+0x10/0x10 [ 1364.928470][T27533] ? __pfx_vfs_read+0x10/0x10 [ 1364.928506][T27533] ? lock_acquire+0x2f/0xb0 [ 1364.928541][T27533] ? __fget_files+0x40/0x3a0 [ 1364.928582][T27533] ? __fget_files+0x206/0x3a0 [ 1364.928630][T27533] ksys_read+0x12b/0x250 [ 1364.928666][T27533] ? __pfx_ksys_read+0x10/0x10 [ 1364.928712][T27533] do_syscall_64+0xcd/0x250 [ 1364.928749][T27533] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1364.928788][T27533] RIP: 0033:0x7fb28638cde9 [ 1364.928810][T27533] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1364.928836][T27533] RSP: 002b:00007fb2871fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1364.928859][T27533] RAX: ffffffffffffffda RBX: 00007fb2865a5fa0 RCX: 00007fb28638cde9 [ 1364.928875][T27533] RDX: 00000000fffffe82 RSI: 0000400000000040 RDI: 0000000000000004 [ 1364.928891][T27533] RBP: 00007fb2871fa090 R08: 0000000000000000 R09: 0000000000000000 [ 1364.928908][T27533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1364.928925][T27533] R13: 0000000000000000 R14: 00007fb2865a5fa0 R15: 00007ffddcccabd8 [ 1364.928958][T27533] [ 1365.993787][T27551] netlink: 4 bytes leftover after parsing attributes in process `syz.7.5075'. [ 1366.929814][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1366.940293][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1367.068832][T27572] Invalid ELF header magic: != ELF [ 1367.874681][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1367.893689][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1367.904599][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1367.912514][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1367.920367][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1367.927811][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1368.387919][T27605] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1368.388479][T27590] chnl_net:caif_netlink_parms(): no params data found [ 1368.402519][T27605] vhci_hcd: invalid port number 110 [ 1368.409528][T27605] vhci_hcd: default hub control req: 2020 v7574 i006e l8240 [ 1368.905083][T27590] bridge0: port 1(bridge_slave_0) entered blocking state [ 1368.912291][T27590] bridge0: port 1(bridge_slave_0) entered disabled state [ 1368.942319][T27590] bridge_slave_0: entered allmulticast mode [ 1368.964748][T27590] bridge_slave_0: entered promiscuous mode [ 1368.983214][T27590] bridge0: port 2(bridge_slave_1) entered blocking state [ 1368.997408][T27590] bridge0: port 2(bridge_slave_1) entered disabled state [ 1369.018014][T27590] bridge_slave_1: entered allmulticast mode [ 1369.037399][T27590] bridge_slave_1: entered promiscuous mode [ 1369.228676][T27590] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1369.278907][T27590] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1369.448890][T27590] team0: Port device team_slave_0 added [ 1369.516605][T27590] team0: Port device team_slave_1 added [ 1369.666212][T27590] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1369.673205][T27590] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.787383][T27590] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1369.843361][T27639] FAULT_INJECTION: forcing a failure. [ 1369.843361][T27639] name failslab, interval 1, probability 0, space 0, times 0 [ 1369.860822][T27590] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1369.878676][T27590] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1369.920182][T27590] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1369.921637][T27639] CPU: 1 UID: 0 PID: 27639 Comm: syz.4.5088 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1369.921675][T27639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1369.921695][T27639] Call Trace: [ 1369.921705][T27639] [ 1369.921716][T27639] dump_stack_lvl+0x16c/0x1f0 [ 1369.921763][T27639] should_fail_ex+0x50a/0x650 [ 1369.921811][T27639] ? fs_reclaim_acquire+0xae/0x150 [ 1369.921854][T27639] should_failslab+0xc2/0x120 [ 1369.921883][T27639] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1369.921939][T27639] ? alloc_empty_file+0x73/0x1e0 [ 1369.921976][T27639] alloc_empty_file+0x73/0x1e0 [ 1369.922009][T27639] path_openat+0xe1/0x2d80 [ 1369.922051][T27639] ? hlock_class+0x4e/0x130 [ 1369.922084][T27639] ? __lock_acquire+0x15a9/0x3c40 [ 1369.922136][T27639] ? __pfx_path_openat+0x10/0x10 [ 1369.922180][T27639] ? __pfx___lock_acquire+0x10/0x10 [ 1369.922220][T27639] ? lock_acquire.part.0+0x11b/0x380 [ 1369.922263][T27639] ? find_held_lock+0x2d/0x110 [ 1369.922298][T27639] do_filp_open+0x20c/0x470 [ 1369.922343][T27639] ? __pfx_do_filp_open+0x10/0x10 [ 1369.922384][T27639] ? find_held_lock+0x2d/0x110 [ 1369.922439][T27639] ? alloc_fd+0x41f/0x760 [ 1369.922490][T27639] do_sys_openat2+0x17a/0x1e0 [ 1369.922521][T27639] ? __pfx_do_sys_openat2+0x10/0x10 [ 1369.922555][T27639] ? do_raw_spin_unlock+0x172/0x230 [ 1369.922592][T27639] __x64_sys_openat+0x175/0x210 [ 1369.922625][T27639] ? __pfx___x64_sys_openat+0x10/0x10 [ 1369.922670][T27639] do_syscall_64+0xcd/0x250 [ 1369.922711][T27639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1369.922754][T27639] RIP: 0033:0x7f16a418cde9 [ 1369.922776][T27639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1369.922806][T27639] RSP: 002b:00007f16a4fae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1369.922833][T27639] RAX: ffffffffffffffda RBX: 00007f16a43a5fa0 RCX: 00007f16a418cde9 [ 1369.922854][T27639] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1369.922873][T27639] RBP: 00007f16a420e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1369.922892][T27639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1369.922917][T27639] R13: 0000000000000000 R14: 00007f16a43a5fa0 R15: 00007ffc7db74b58 [ 1369.922953][T27639] [ 1369.963571][ T5843] Bluetooth: hci0: command tx timeout [ 1370.116295][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.508936][T27590] hsr_slave_0: entered promiscuous mode [ 1370.534678][T27590] hsr_slave_1: entered promiscuous mode [ 1370.566334][T27590] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1370.605851][T27590] Cannot create hsr debugfs directory [ 1370.690066][ C1] vkms_vblank_simulate: vblank timer overrun [ 1370.979885][T27671] netlink: 'syz.7.5095': attribute type 2 has an invalid length. [ 1371.317746][T27590] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.418537][T27590] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.509706][T27590] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.627114][T27590] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1371.844298][T27590] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1371.854442][T27590] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1371.866747][T27590] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1371.886853][T27590] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1372.178460][T27590] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1372.203748][ T5843] Bluetooth: hci0: command tx timeout [ 1372.256839][T27590] 8021q: adding VLAN 0 to HW filter on device team0 [ 1372.298461][T26088] bridge0: port 1(bridge_slave_0) entered blocking state [ 1372.305627][T26088] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1372.418881][T26088] bridge0: port 2(bridge_slave_1) entered blocking state [ 1372.426135][T26088] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1372.560839][T27590] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1372.690339][T27713] FAULT_INJECTION: forcing a failure. [ 1372.690339][T27713] name failslab, interval 1, probability 0, space 0, times 0 [ 1372.743207][T27713] CPU: 1 UID: 0 PID: 27713 Comm: syz.7.5101 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1372.743244][T27713] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1372.743262][T27713] Call Trace: [ 1372.743271][T27713] [ 1372.743282][T27713] dump_stack_lvl+0x16c/0x1f0 [ 1372.743321][T27713] should_fail_ex+0x50a/0x650 [ 1372.743366][T27713] ? fs_reclaim_acquire+0xae/0x150 [ 1372.743411][T27713] should_failslab+0xc2/0x120 [ 1372.743457][T27713] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1372.743579][T27713] ? getname_flags.part.0+0x4c/0x550 [ 1372.743624][T27713] getname_flags.part.0+0x4c/0x550 [ 1372.743664][T27713] getname+0x8d/0xe0 [ 1372.743703][T27713] do_sys_openat2+0x104/0x1e0 [ 1372.743734][T27713] ? __pfx_do_sys_openat2+0x10/0x10 [ 1372.743768][T27713] ? do_raw_spin_unlock+0x172/0x230 [ 1372.743808][T27713] __x64_sys_openat+0x175/0x210 [ 1372.743842][T27713] ? __pfx___x64_sys_openat+0x10/0x10 [ 1372.743889][T27713] do_syscall_64+0xcd/0x250 [ 1372.743930][T27713] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1372.743973][T27713] RIP: 0033:0x7fb28638cde9 [ 1372.743997][T27713] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1372.744026][T27713] RSP: 002b:00007fb2871fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1372.744054][T27713] RAX: ffffffffffffffda RBX: 00007fb2865a5fa0 RCX: 00007fb28638cde9 [ 1372.744074][T27713] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1372.744092][T27713] RBP: 00007fb28640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1372.744111][T27713] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1372.744129][T27713] R13: 0000000000000000 R14: 00007fb2865a5fa0 R15: 00007ffddcccabd8 [ 1372.744166][T27713] [ 1373.225820][T27716] synth uevent: /module/qat_c62x: unknown uevent action string [ 1373.359366][T27590] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1373.472464][T27725] FAULT_INJECTION: forcing a failure. [ 1373.472464][T27725] name failslab, interval 1, probability 0, space 0, times 0 [ 1373.543941][T27590] veth0_vlan: entered promiscuous mode [ 1373.547461][T27725] CPU: 1 UID: 0 PID: 27725 Comm: syz.7.5102 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1373.547502][T27725] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1373.547522][T27725] Call Trace: [ 1373.547533][T27725] [ 1373.547545][T27725] dump_stack_lvl+0x16c/0x1f0 [ 1373.547591][T27725] should_fail_ex+0x50a/0x650 [ 1373.547641][T27725] ? fs_reclaim_acquire+0xae/0x150 [ 1373.547696][T27725] ? tomoyo_encode2+0x100/0x3e0 [ 1373.547736][T27725] should_failslab+0xc2/0x120 [ 1373.547766][T27725] __kmalloc_noprof+0xcb/0x510 [ 1373.547811][T27725] ? d_absolute_path+0x137/0x1b0 [ 1373.547848][T27725] tomoyo_encode2+0x100/0x3e0 [ 1373.547893][T27725] tomoyo_encode+0x29/0x50 [ 1373.547932][T27725] tomoyo_realpath_from_path+0x19d/0x720 [ 1373.547986][T27725] tomoyo_check_open_permission+0x2ad/0x3c0 [ 1373.548024][T27725] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1373.548075][T27725] ? __pfx___lock_acquire+0x10/0x10 [ 1373.548136][T27725] ? __pfx_hook_file_open+0x10/0x10 [ 1373.548173][T27725] ? lock_acquire+0x2f/0xb0 [ 1373.548218][T27725] tomoyo_file_open+0x6b/0x90 [ 1373.548267][T27725] security_file_open+0x84/0x1e0 [ 1373.548309][T27725] do_dentry_open+0x57c/0x1c40 [ 1373.548377][T27725] ? inode_permission+0xdd/0x5f0 [ 1373.548424][T27725] vfs_open+0x82/0x3f0 [ 1373.548454][T27725] ? may_open+0x1f2/0x400 [ 1373.548499][T27725] path_openat+0x1e88/0x2d80 [ 1373.548561][T27725] ? __pfx_path_openat+0x10/0x10 [ 1373.548608][T27725] ? __pfx___lock_acquire+0x10/0x10 [ 1373.548650][T27725] ? lock_acquire.part.0+0x11b/0x380 [ 1373.548705][T27725] ? find_held_lock+0x2d/0x110 [ 1373.548742][T27725] do_filp_open+0x20c/0x470 [ 1373.548787][T27725] ? __pfx_do_filp_open+0x10/0x10 [ 1373.548828][T27725] ? find_held_lock+0x2d/0x110 [ 1373.548885][T27725] ? alloc_fd+0x41f/0x760 [ 1373.548937][T27725] do_sys_openat2+0x17a/0x1e0 [ 1373.548969][T27725] ? __pfx_do_sys_openat2+0x10/0x10 [ 1373.549004][T27725] ? do_raw_spin_unlock+0x172/0x230 [ 1373.549043][T27725] __x64_sys_openat+0x175/0x210 [ 1373.549075][T27725] ? __pfx___x64_sys_openat+0x10/0x10 [ 1373.549124][T27725] do_syscall_64+0xcd/0x250 [ 1373.549165][T27725] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1373.549208][T27725] RIP: 0033:0x7fb28638cde9 [ 1373.549231][T27725] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1373.549262][T27725] RSP: 002b:00007fb2871fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1373.549290][T27725] RAX: ffffffffffffffda RBX: 00007fb2865a5fa0 RCX: 00007fb28638cde9 [ 1373.549310][T27725] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1373.549329][T27725] RBP: 00007fb28640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1373.549348][T27725] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1373.549367][T27725] R13: 0000000000000000 R14: 00007fb2865a5fa0 R15: 00007ffddcccabd8 [ 1373.549411][T27725] [ 1373.549506][T27725] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1374.229083][T27590] veth1_vlan: entered promiscuous mode [ 1374.283673][ T5843] Bluetooth: hci0: command tx timeout [ 1374.324735][T27590] veth0_macvtap: entered promiscuous mode [ 1374.374647][T27590] veth1_macvtap: entered promiscuous mode [ 1374.435679][T27590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.493469][T27590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.523612][T27590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.553574][T27590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.573981][T27590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.599635][T27590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.623474][T27590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.645209][T27590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.665549][T27590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.691945][T27590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.726657][T27590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.749188][T27590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.771913][T27590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.792951][T27590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.823966][T27590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1374.863650][T27590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.891750][T27590] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1374.927592][T27590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1374.983482][T27590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1374.993341][T27590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1375.023543][T27590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.033380][T27590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1375.083887][T27590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.109364][T27590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1375.143458][T27590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.164054][T27590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1375.193449][T27590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.226379][T27590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1375.273753][T27590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.299485][T27590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1375.333618][T27590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.363523][T27590] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1375.391590][T27590] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1375.425187][T27590] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1375.460353][T27590] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.482013][T27590] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.510186][T27590] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.538626][T27590] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1375.798567][T13606] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1375.863847][T13606] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1376.117231][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1376.145053][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1376.363946][ T5843] Bluetooth: hci0: command tx timeout [ 1377.134606][T27796] netlink: 'syz.4.5109': attribute type 11 has an invalid length. [ 1377.152836][T27796] netlink: 'syz.4.5109': attribute type 11 has an invalid length. [ 1377.190026][T27796] netlink: 'syz.4.5109': attribute type 11 has an invalid length. [ 1377.224334][T27796] netlink: 'syz.4.5109': attribute type 11 has an invalid length. [ 1377.232211][T27796] netlink: 'syz.4.5109': attribute type 11 has an invalid length. [ 1377.268354][T27796] netlink: 'syz.4.5109': attribute type 11 has an invalid length. [ 1377.284360][T27796] netlink: 'syz.4.5109': attribute type 11 has an invalid length. [ 1378.471378][T27834] synth uevent: /module/qat_c62x: unknown uevent action string [ 1378.649239][T27840] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 1378.670247][T27840] vhci_hcd: invalid port number 48 [ 1378.680890][T27840] vhci_hcd: default hub control req: 3030 v3030 i0030 l12336 [ 1379.199013][T27857] FAULT_INJECTION: forcing a failure. [ 1379.199013][T27857] name failslab, interval 1, probability 0, space 0, times 0 [ 1379.212372][T27857] CPU: 0 UID: 0 PID: 27857 Comm: syz.7.5115 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1379.212412][T27857] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1379.212432][T27857] Call Trace: [ 1379.212441][T27857] [ 1379.212453][T27857] dump_stack_lvl+0x16c/0x1f0 [ 1379.212497][T27857] should_fail_ex+0x50a/0x650 [ 1379.212544][T27857] ? fs_reclaim_acquire+0xae/0x150 [ 1379.212585][T27857] ? ops_init+0x77/0x5f0 [ 1379.212628][T27857] should_failslab+0xc2/0x120 [ 1379.212656][T27857] __kmalloc_noprof+0xcb/0x510 [ 1379.212710][T27857] ops_init+0x77/0x5f0 [ 1379.212760][T27857] setup_net+0x21f/0x860 [ 1379.212808][T27857] ? __pfx_setup_net+0x10/0x10 [ 1379.212852][T27857] ? down_read_killable+0xcc/0x380 [ 1379.212893][T27857] ? __pfx_down_read_killable+0x10/0x10 [ 1379.212934][T27857] ? __raw_spin_lock_init+0x3a/0x110 [ 1379.212986][T27857] ? debug_mutex_init+0x37/0x70 [ 1379.213023][T27857] copy_net_ns+0x2b4/0x6c0 [ 1379.213055][T27857] create_new_namespaces+0x3ea/0xad0 [ 1379.213113][T27857] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1379.213174][T27857] ksys_unshare+0x45d/0xa40 [ 1379.213206][T27857] ? __pfx_ksys_unshare+0x10/0x10 [ 1379.213237][T27857] ? xfd_validate_state+0x5d/0x180 [ 1379.213292][T27857] __x64_sys_unshare+0x31/0x40 [ 1379.213322][T27857] do_syscall_64+0xcd/0x250 [ 1379.213362][T27857] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1379.213408][T27857] RIP: 0033:0x7fb28638cde9 [ 1379.213448][T27857] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1379.213476][T27857] RSP: 002b:00007fb2871d9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1379.213502][T27857] RAX: ffffffffffffffda RBX: 00007fb2865a6080 RCX: 00007fb28638cde9 [ 1379.213521][T27857] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1379.213538][T27857] RBP: 00007fb28640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1379.213555][T27857] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1379.213572][T27857] R13: 0000000000000000 R14: 00007fb2865a6080 R15: 00007ffddcccabd8 [ 1379.213607][T27857] [ 1379.604275][T27860] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5116'. [ 1379.668595][T27860] ipvlan1: entered allmulticast mode [ 1379.704699][T27860] veth0_vlan: entered allmulticast mode [ 1380.373022][T27873] Invalid ELF header magic: != ELF [ 1380.851701][T27873] Invalid ELF header magic: != ELF [ 1381.092572][T27881] FAULT_INJECTION: forcing a failure. [ 1381.092572][T27881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1381.113612][T27881] CPU: 0 UID: 0 PID: 27881 Comm: syz.4.5122 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1381.113648][T27881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1381.113666][T27881] Call Trace: [ 1381.113675][T27881] [ 1381.113686][T27881] dump_stack_lvl+0x16c/0x1f0 [ 1381.113725][T27881] should_fail_ex+0x50a/0x650 [ 1381.113775][T27881] _copy_to_user+0x32/0xd0 [ 1381.113807][T27881] simple_read_from_buffer+0xd0/0x160 [ 1381.113845][T27881] proc_fail_nth_read+0x198/0x270 [ 1381.113879][T27881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1381.113915][T27881] ? rw_verify_area+0xcf/0x680 [ 1381.113948][T27881] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1381.113982][T27881] vfs_read+0x1df/0xbf0 [ 1381.114025][T27881] ? __fget_files+0x1fc/0x3a0 [ 1381.114085][T27881] ? __pfx___mutex_lock+0x10/0x10 [ 1381.114120][T27881] ? __pfx_vfs_read+0x10/0x10 [ 1381.114169][T27881] ? __fget_files+0x206/0x3a0 [ 1381.114222][T27881] ksys_read+0x12b/0x250 [ 1381.114261][T27881] ? __pfx_ksys_read+0x10/0x10 [ 1381.114312][T27881] do_syscall_64+0xcd/0x250 [ 1381.114353][T27881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.114396][T27881] RIP: 0033:0x7f16a418b7fc [ 1381.114419][T27881] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1381.114448][T27881] RSP: 002b:00007f16a4fae030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1381.114476][T27881] RAX: ffffffffffffffda RBX: 00007f16a43a5fa0 RCX: 00007f16a418b7fc [ 1381.114496][T27881] RDX: 000000000000000f RSI: 00007f16a4fae0a0 RDI: 0000000000000004 [ 1381.114514][T27881] RBP: 00007f16a4fae090 R08: 0000000000000000 R09: 0000000000000000 [ 1381.114532][T27881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1381.114550][T27881] R13: 0000000000000000 R14: 00007f16a43a5fa0 R15: 00007ffc7db74b58 [ 1381.114587][T27881] [ 1381.121613][T27873] Invalid ELF header magic: != ELF [ 1381.633187][T27874] vivid-003: ================= START STATUS ================= [ 1381.711281][T27874] vivid-003: Radio HW Seek Mode: Bounded [ 1381.725885][T27874] vivid-003: Radio Programmable HW Seek: false [ 1381.746117][T27888] FAULT_INJECTION: forcing a failure. [ 1381.746117][T27888] name failslab, interval 1, probability 0, space 0, times 0 [ 1381.759587][T27888] CPU: 0 UID: 0 PID: 27888 Comm: syz.4.5124 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1381.759621][T27888] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1381.759638][T27888] Call Trace: [ 1381.759646][T27888] [ 1381.759657][T27888] dump_stack_lvl+0x16c/0x1f0 [ 1381.759721][T27888] should_fail_ex+0x50a/0x650 [ 1381.759768][T27888] ? fs_reclaim_acquire+0xae/0x150 [ 1381.759808][T27888] ? copy_net_ns+0x136/0x6c0 [ 1381.759835][T27888] should_failslab+0xc2/0x120 [ 1381.759863][T27888] __kmalloc_cache_noprof+0x68/0x410 [ 1381.759905][T27888] ? copy_net_ns+0xe9/0x6c0 [ 1381.759947][T27888] copy_net_ns+0x136/0x6c0 [ 1381.759973][T27888] ? copy_cgroup_ns+0xa4/0x6f0 [ 1381.760009][T27888] create_new_namespaces+0x3ea/0xad0 [ 1381.760062][T27888] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1381.760111][T27888] ksys_unshare+0x45d/0xa40 [ 1381.760141][T27888] ? __pfx_ksys_unshare+0x10/0x10 [ 1381.760170][T27888] ? ksys_write+0x1ba/0x250 [ 1381.760218][T27888] __x64_sys_unshare+0x31/0x40 [ 1381.760248][T27888] do_syscall_64+0xcd/0x250 [ 1381.760285][T27888] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1381.760324][T27888] RIP: 0033:0x7f16a418cde9 [ 1381.760346][T27888] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1381.760394][T27888] RSP: 002b:00007f16a4fae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1381.760435][T27888] RAX: ffffffffffffffda RBX: 00007f16a43a5fa0 RCX: 00007f16a418cde9 [ 1381.760454][T27888] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1381.760472][T27888] RBP: 00007f16a4fae090 R08: 0000000000000000 R09: 0000000000000000 [ 1381.760490][T27888] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1381.760507][T27888] R13: 0000000000000000 R14: 00007f16a43a5fa0 R15: 00007ffc7db74b58 [ 1381.760557][T27888] [ 1381.977862][T27874] vivid-003: RDS Rx I/O Mode: Block I/O [ 1381.983888][T27874] vivid-003: Generate RBDS Instead of RDS: false [ 1381.990353][T27874] vivid-003: RDS Reception: true [ 1381.995380][T27874] vivid-003: RDS Program Type: 0 inactive [ 1382.001378][T27874] vivid-003: RDS PS Name: inactive [ 1382.006873][T27874] vivid-003: RDS Radio Text: inactive [ 1382.012639][T27874] vivid-003: RDS Traffic Announcement: false inactive [ 1382.019615][T27874] vivid-003: RDS Traffic Program: false inactive [ 1382.026296][T27874] vivid-003: RDS Music: false inactive [ 1382.031840][T27874] vivid-003: ================== END STATUS ================== [ 1382.324525][T27894] FAULT_INJECTION: forcing a failure. [ 1382.324525][T27894] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1382.339711][T27894] CPU: 0 UID: 0 PID: 27894 Comm: syz.3.5125 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1382.339747][T27894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1382.339764][T27894] Call Trace: [ 1382.339772][T27894] [ 1382.339783][T27894] dump_stack_lvl+0x16c/0x1f0 [ 1382.339822][T27894] should_fail_ex+0x50a/0x650 [ 1382.339872][T27894] get_futex_key+0x4a3/0x1000 [ 1382.339909][T27894] ? __pfx_get_futex_key+0x10/0x10 [ 1382.339953][T27894] futex_wake+0xe8/0x4e0 [ 1382.339995][T27894] ? __pfx_futex_wake+0x10/0x10 [ 1382.340039][T27894] ? kmem_cache_free+0x2e2/0x4d0 [ 1382.340080][T27894] ? putname+0x13c/0x180 [ 1382.340113][T27894] do_futex+0x1e5/0x350 [ 1382.340148][T27894] ? __pfx_do_futex+0x10/0x10 [ 1382.340185][T27894] ? do_raw_spin_unlock+0x172/0x230 [ 1382.340216][T27894] __x64_sys_futex+0x1e1/0x4c0 [ 1382.340254][T27894] ? __x64_sys_openat+0x175/0x210 [ 1382.340286][T27894] ? __pfx___x64_sys_futex+0x10/0x10 [ 1382.340334][T27894] do_syscall_64+0xcd/0x250 [ 1382.340372][T27894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.340412][T27894] RIP: 0033:0x7f89c778cde9 [ 1382.340434][T27894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1382.340462][T27894] RSP: 002b:00007f89c86b10e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1382.340489][T27894] RAX: ffffffffffffffda RBX: 00007f89c79a5fa8 RCX: 00007f89c778cde9 [ 1382.340509][T27894] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f89c79a5fac [ 1382.340527][T27894] RBP: 00007f89c79a5fa0 R08: 00007f89c86b2000 R09: 0000000000000000 [ 1382.340545][T27894] R10: 0000000000000008 R11: 0000000000000246 R12: 00007f89c79a5fac [ 1382.340563][T27894] R13: 0000000000000000 R14: 00007ffe2b605ef0 R15: 00007ffe2b605fd8 [ 1382.340598][T27894] [ 1382.355830][T27896] usb usb15: usbfs: process 27896 (syz.4.5126) did not claim interface 0 before use [ 1382.617653][T27897] FAULT_INJECTION: forcing a failure. [ 1382.617653][T27897] name failslab, interval 1, probability 0, space 0, times 0 [ 1382.670478][T27897] CPU: 0 UID: 0 PID: 27897 Comm: syz.4.5126 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1382.670517][T27897] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1382.670536][T27897] Call Trace: [ 1382.670546][T27897] [ 1382.670558][T27897] dump_stack_lvl+0x16c/0x1f0 [ 1382.670600][T27897] should_fail_ex+0x50a/0x650 [ 1382.670653][T27897] ? fs_reclaim_acquire+0xae/0x150 [ 1382.670693][T27897] should_failslab+0xc2/0x120 [ 1382.670720][T27897] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1382.670765][T27897] ? alloc_empty_file+0x73/0x1e0 [ 1382.670799][T27897] alloc_empty_file+0x73/0x1e0 [ 1382.670830][T27897] path_openat+0xe1/0x2d80 [ 1382.670868][T27897] ? hlock_class+0x4e/0x130 [ 1382.670897][T27897] ? __lock_acquire+0x15a9/0x3c40 [ 1382.670948][T27897] ? __pfx_path_openat+0x10/0x10 [ 1382.670990][T27897] ? __pfx___lock_acquire+0x10/0x10 [ 1382.671028][T27897] ? lock_acquire.part.0+0x11b/0x380 [ 1382.671067][T27897] ? find_held_lock+0x2d/0x110 [ 1382.671101][T27897] do_filp_open+0x20c/0x470 [ 1382.671143][T27897] ? __pfx_do_filp_open+0x10/0x10 [ 1382.671182][T27897] ? find_held_lock+0x2d/0x110 [ 1382.671234][T27897] ? alloc_fd+0x41f/0x760 [ 1382.671283][T27897] do_sys_openat2+0x17a/0x1e0 [ 1382.671317][T27897] ? __pfx_do_sys_openat2+0x10/0x10 [ 1382.671351][T27897] ? do_raw_spin_unlock+0x172/0x230 [ 1382.671387][T27897] __x64_sys_openat+0x175/0x210 [ 1382.671418][T27897] ? __pfx___x64_sys_openat+0x10/0x10 [ 1382.671463][T27897] do_syscall_64+0xcd/0x250 [ 1382.671501][T27897] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1382.671540][T27897] RIP: 0033:0x7f16a418cde9 [ 1382.671562][T27897] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1382.671591][T27897] RSP: 002b:00007f16a4f8d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1382.671618][T27897] RAX: ffffffffffffffda RBX: 00007f16a43a6080 RCX: 00007f16a418cde9 [ 1382.671643][T27897] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1382.671662][T27897] RBP: 00007f16a420e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1382.671680][T27897] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1382.671698][T27897] R13: 0000000000000000 R14: 00007f16a43a6080 R15: 00007ffc7db74b58 [ 1382.671733][T27897] [ 1385.028193][T27943] usb usb15: usbfs: process 27943 (syz.2.5141) did not claim interface 0 before use [ 1385.373941][T27939] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1385.394735][T27943] FAULT_INJECTION: forcing a failure. [ 1385.394735][T27943] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.453517][T27943] CPU: 0 UID: 0 PID: 27943 Comm: syz.2.5141 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1385.453560][T27943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1385.453581][T27943] Call Trace: [ 1385.453592][T27943] [ 1385.453606][T27943] dump_stack_lvl+0x16c/0x1f0 [ 1385.453659][T27943] should_fail_ex+0x50a/0x650 [ 1385.453710][T27943] ? fs_reclaim_acquire+0xae/0x150 [ 1385.453757][T27943] should_failslab+0xc2/0x120 [ 1385.453788][T27943] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1385.453839][T27943] ? alloc_empty_file+0x73/0x1e0 [ 1385.453879][T27943] alloc_empty_file+0x73/0x1e0 [ 1385.453925][T27943] path_openat+0xe1/0x2d80 [ 1385.453967][T27943] ? hlock_class+0x4e/0x130 [ 1385.453998][T27943] ? __lock_acquire+0x15a9/0x3c40 [ 1385.454052][T27943] ? __pfx_path_openat+0x10/0x10 [ 1385.454096][T27943] ? __pfx___lock_acquire+0x10/0x10 [ 1385.454138][T27943] ? lock_acquire.part.0+0x11b/0x380 [ 1385.454180][T27943] ? find_held_lock+0x2d/0x110 [ 1385.454217][T27943] do_filp_open+0x20c/0x470 [ 1385.454264][T27943] ? __pfx_do_filp_open+0x10/0x10 [ 1385.454305][T27943] ? find_held_lock+0x2d/0x110 [ 1385.454361][T27943] ? alloc_fd+0x41f/0x760 [ 1385.454414][T27943] do_sys_openat2+0x17a/0x1e0 [ 1385.454447][T27943] ? __pfx_do_sys_openat2+0x10/0x10 [ 1385.454481][T27943] ? do_raw_spin_unlock+0x172/0x230 [ 1385.454538][T27943] __x64_sys_openat+0x175/0x210 [ 1385.454574][T27943] ? __pfx___x64_sys_openat+0x10/0x10 [ 1385.454626][T27943] do_syscall_64+0xcd/0x250 [ 1385.454726][T27943] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.454773][T27943] RIP: 0033:0x7fe9cfd8cde9 [ 1385.454800][T27943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1385.454842][T27943] RSP: 002b:00007fe9d0ccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1385.454873][T27943] RAX: ffffffffffffffda RBX: 00007fe9cffa5fa0 RCX: 00007fe9cfd8cde9 [ 1385.454895][T27943] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1385.454918][T27943] RBP: 00007fe9cfe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1385.454939][T27943] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1385.454960][T27943] R13: 0000000000000000 R14: 00007fe9cffa5fa0 R15: 00007fffd090c318 [ 1385.455000][T27943] [ 1385.853977][T27937] FAULT_INJECTION: forcing a failure. [ 1385.853977][T27937] name failslab, interval 1, probability 0, space 0, times 0 [ 1385.867287][T27937] CPU: 0 UID: 0 PID: 27937 Comm: syz.3.5139 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1385.867320][T27937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1385.867337][T27937] Call Trace: [ 1385.867346][T27937] [ 1385.867357][T27937] dump_stack_lvl+0x16c/0x1f0 [ 1385.867394][T27937] should_fail_ex+0x50a/0x650 [ 1385.867436][T27937] ? fs_reclaim_acquire+0xae/0x150 [ 1385.867475][T27937] should_failslab+0xc2/0x120 [ 1385.867502][T27937] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1385.867545][T27937] ? __kernfs_new_node+0xd3/0x890 [ 1385.867588][T27937] __kernfs_new_node+0xd3/0x890 [ 1385.867630][T27937] ? __pfx___lock_acquire+0x10/0x10 [ 1385.867672][T27937] ? __pfx___kernfs_new_node+0x10/0x10 [ 1385.867723][T27937] ? find_held_lock+0x2d/0x110 [ 1385.867760][T27937] kernfs_new_node+0x186/0x240 [ 1385.867809][T27937] kernfs_create_dir_ns+0x4c/0x150 [ 1385.867857][T27937] internal_create_group+0x34e/0xf10 [ 1385.867904][T27937] ? __pfx_internal_create_group+0x10/0x10 [ 1385.867946][T27937] ? __pfx_dev_add_physical_location+0x10/0x10 [ 1385.867979][T27937] ? bus_to_subsys+0x12d/0x160 [ 1385.868024][T27937] dpm_sysfs_add+0x80/0x280 [ 1385.868059][T27937] device_add+0x9a8/0x1a70 [ 1385.868098][T27937] ? __pfx_device_add+0x10/0x10 [ 1385.868137][T27937] ? lockdep_init_map_type+0x16d/0x7d0 [ 1385.868183][T27937] nfc_register_device+0x41/0x3c0 [ 1385.868220][T27937] nci_register_device+0x7f4/0xb80 [ 1385.868263][T27937] ? __pfx_nci_register_device+0x10/0x10 [ 1385.868320][T27937] virtual_ncidev_open+0x141/0x220 [ 1385.868361][T27937] ? __pfx_virtual_ncidev_open+0x10/0x10 [ 1385.868400][T27937] misc_open+0x35a/0x420 [ 1385.868426][T27937] ? __pfx_misc_open+0x10/0x10 [ 1385.868451][T27937] chrdev_open+0x237/0x6a0 [ 1385.868490][T27937] ? __pfx_apparmor_file_open+0x10/0x10 [ 1385.868524][T27937] ? __pfx_chrdev_open+0x10/0x10 [ 1385.868569][T27937] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1385.868619][T27937] do_dentry_open+0x735/0x1c40 [ 1385.868660][T27937] ? __pfx_chrdev_open+0x10/0x10 [ 1385.868704][T27937] ? inode_permission+0xdd/0x5f0 [ 1385.868738][T27937] vfs_open+0x82/0x3f0 [ 1385.868763][T27937] ? may_open+0x1f2/0x400 [ 1385.868796][T27937] path_openat+0x1e88/0x2d80 [ 1385.868848][T27937] ? __pfx_path_openat+0x10/0x10 [ 1385.868887][T27937] ? __pfx___lock_acquire+0x10/0x10 [ 1385.868924][T27937] ? lock_acquire.part.0+0x11b/0x380 [ 1385.868966][T27937] ? find_held_lock+0x2d/0x110 [ 1385.869004][T27937] do_filp_open+0x20c/0x470 [ 1385.869047][T27937] ? __pfx_do_filp_open+0x10/0x10 [ 1385.869087][T27937] ? find_held_lock+0x2d/0x110 [ 1385.869143][T27937] ? alloc_fd+0x41f/0x760 [ 1385.869194][T27937] do_sys_openat2+0x17a/0x1e0 [ 1385.869224][T27937] ? __pfx_do_sys_openat2+0x10/0x10 [ 1385.869269][T27937] __x64_sys_openat+0x175/0x210 [ 1385.869301][T27937] ? __pfx___x64_sys_openat+0x10/0x10 [ 1385.869347][T27937] do_syscall_64+0xcd/0x250 [ 1385.869386][T27937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1385.869425][T27937] RIP: 0033:0x7f89c778cde9 [ 1385.869449][T27937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1385.869477][T27937] RSP: 002b:00007f89c86b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1385.869504][T27937] RAX: ffffffffffffffda RBX: 00007f89c79a5fa0 RCX: 00007f89c778cde9 [ 1385.869524][T27937] RDX: 0000000000000002 RSI: 0000400000000400 RDI: ffffffffffffff9c [ 1385.869542][T27937] RBP: 00007f89c780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1385.869561][T27937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1385.869578][T27937] R13: 0000000000000000 R14: 00007f89c79a5fa0 R15: 00007ffe2b605fd8 [ 1385.869622][T27937] [ 1387.581154][T27967] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5147'. [ 1389.352882][T27990] FAULT_INJECTION: forcing a failure. [ 1389.352882][T27990] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1389.393730][T27990] CPU: 0 UID: 0 PID: 27990 Comm: syz.7.5152 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1389.393764][T27990] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1389.393781][T27990] Call Trace: [ 1389.393789][T27990] [ 1389.393799][T27990] dump_stack_lvl+0x16c/0x1f0 [ 1389.393837][T27990] should_fail_ex+0x50a/0x650 [ 1389.393883][T27990] get_futex_key+0x4a3/0x1000 [ 1389.393912][T27990] ? hlock_class+0x4e/0x130 [ 1389.393940][T27990] ? __lock_acquire+0x15a9/0x3c40 [ 1389.393980][T27990] ? __pfx_get_futex_key+0x10/0x10 [ 1389.394021][T27990] futex_wake+0xe8/0x4e0 [ 1389.394061][T27990] ? __pfx_futex_wake+0x10/0x10 [ 1389.394103][T27990] ? find_held_lock+0x2d/0x110 [ 1389.394139][T27990] do_futex+0x1e5/0x350 [ 1389.394172][T27990] ? __pfx_do_futex+0x10/0x10 [ 1389.394207][T27990] ? do_raw_spin_unlock+0x172/0x230 [ 1389.394240][T27990] __x64_sys_futex+0x1e1/0x4c0 [ 1389.394278][T27990] ? __pfx___x64_sys_futex+0x10/0x10 [ 1389.394312][T27990] ? rcu_is_watching+0x12/0xc0 [ 1389.394355][T27990] do_syscall_64+0xcd/0x250 [ 1389.394391][T27990] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.394429][T27990] RIP: 0033:0x7fb28638cde9 [ 1389.394449][T27990] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1389.394474][T27990] RSP: 002b:00007fb2871fa0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1389.394499][T27990] RAX: ffffffffffffffda RBX: 00007fb2865a5fa8 RCX: 00007fb28638cde9 [ 1389.394517][T27990] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fb2865a5fac [ 1389.394534][T27990] RBP: 00007fb2865a5fa0 R08: 00007fb2871fb000 R09: 0000000000000000 [ 1389.394551][T27990] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fb2865a5fac [ 1389.394569][T27990] R13: 0000000000000000 R14: 00007ffddcccaaf0 R15: 00007ffddcccabd8 [ 1389.394600][T27990] [ 1389.931005][T27996] FAULT_INJECTION: forcing a failure. [ 1389.931005][T27996] name failslab, interval 1, probability 0, space 0, times 0 [ 1389.954050][T27996] CPU: 1 UID: 0 PID: 27996 Comm: syz.7.5154 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1389.954092][T27996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1389.954112][T27996] Call Trace: [ 1389.954123][T27996] [ 1389.954136][T27996] dump_stack_lvl+0x16c/0x1f0 [ 1389.954182][T27996] should_fail_ex+0x50a/0x650 [ 1389.954232][T27996] ? fs_reclaim_acquire+0xae/0x150 [ 1389.954277][T27996] should_failslab+0xc2/0x120 [ 1389.954309][T27996] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1389.954366][T27996] ? alloc_empty_file+0x73/0x1e0 [ 1389.954405][T27996] alloc_empty_file+0x73/0x1e0 [ 1389.954438][T27996] path_openat+0xe1/0x2d80 [ 1389.954481][T27996] ? hlock_class+0x4e/0x130 [ 1389.954515][T27996] ? __lock_acquire+0x15a9/0x3c40 [ 1389.954572][T27996] ? __pfx_path_openat+0x10/0x10 [ 1389.954639][T27996] ? __pfx___lock_acquire+0x10/0x10 [ 1389.954677][T27996] ? lock_acquire.part.0+0x11b/0x380 [ 1389.954717][T27996] ? find_held_lock+0x2d/0x110 [ 1389.954750][T27996] do_filp_open+0x20c/0x470 [ 1389.954793][T27996] ? __pfx_do_filp_open+0x10/0x10 [ 1389.954832][T27996] ? find_held_lock+0x2d/0x110 [ 1389.954884][T27996] ? alloc_fd+0x41f/0x760 [ 1389.954934][T27996] do_sys_openat2+0x17a/0x1e0 [ 1389.954964][T27996] ? __pfx_do_sys_openat2+0x10/0x10 [ 1389.954998][T27996] ? do_raw_spin_unlock+0x172/0x230 [ 1389.955033][T27996] __x64_sys_openat+0x175/0x210 [ 1389.955064][T27996] ? __pfx___x64_sys_openat+0x10/0x10 [ 1389.955109][T27996] do_syscall_64+0xcd/0x250 [ 1389.955147][T27996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1389.955188][T27996] RIP: 0033:0x7fb28638cde9 [ 1389.955211][T27996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1389.955239][T27996] RSP: 002b:00007fb2871fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1389.955267][T27996] RAX: ffffffffffffffda RBX: 00007fb2865a5fa0 RCX: 00007fb28638cde9 [ 1389.955287][T27996] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1389.955306][T27996] RBP: 00007fb28640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1389.955331][T27996] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1389.955349][T27996] R13: 0000000000000000 R14: 00007fb2865a5fa0 R15: 00007ffddcccabd8 [ 1389.955385][T27996] [ 1391.783579][T28025] FAULT_INJECTION: forcing a failure. [ 1391.783579][T28025] name failslab, interval 1, probability 0, space 0, times 0 [ 1391.870949][T28025] CPU: 0 UID: 0 PID: 28025 Comm: syz.3.5164 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1391.870990][T28025] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1391.871008][T28025] Call Trace: [ 1391.871017][T28025] [ 1391.871029][T28025] dump_stack_lvl+0x16c/0x1f0 [ 1391.871071][T28025] should_fail_ex+0x50a/0x650 [ 1391.871116][T28025] ? fs_reclaim_acquire+0xae/0x150 [ 1391.871155][T28025] ? snd_seq_oss_open+0x55/0xa20 [ 1391.871183][T28025] should_failslab+0xc2/0x120 [ 1391.871212][T28025] __kmalloc_cache_noprof+0x68/0x410 [ 1391.871265][T28025] snd_seq_oss_open+0x55/0xa20 [ 1391.871300][T28025] odev_open+0x6f/0x90 [ 1391.871344][T28025] ? __pfx_odev_open+0x10/0x10 [ 1391.871388][T28025] soundcore_open+0x409/0x580 [ 1391.871436][T28025] ? __pfx_soundcore_open+0x10/0x10 [ 1391.871482][T28025] chrdev_open+0x237/0x6a0 [ 1391.871524][T28025] ? __pfx_apparmor_file_open+0x10/0x10 [ 1391.871561][T28025] ? __pfx_chrdev_open+0x10/0x10 [ 1391.871608][T28025] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 1391.871654][T28025] do_dentry_open+0x735/0x1c40 [ 1391.871695][T28025] ? __pfx_chrdev_open+0x10/0x10 [ 1391.871742][T28025] ? inode_permission+0xdd/0x5f0 [ 1391.871777][T28025] vfs_open+0x82/0x3f0 [ 1391.871804][T28025] ? may_open+0x1f2/0x400 [ 1391.871839][T28025] path_openat+0x1e88/0x2d80 [ 1391.871902][T28025] ? __pfx_path_openat+0x10/0x10 [ 1391.871944][T28025] ? __pfx___lock_acquire+0x10/0x10 [ 1391.871983][T28025] ? lock_acquire.part.0+0x11b/0x380 [ 1391.872023][T28025] ? find_held_lock+0x2d/0x110 [ 1391.872058][T28025] do_filp_open+0x20c/0x470 [ 1391.872101][T28025] ? __pfx_do_filp_open+0x10/0x10 [ 1391.872142][T28025] ? find_held_lock+0x2d/0x110 [ 1391.872198][T28025] ? alloc_fd+0x41f/0x760 [ 1391.872250][T28025] do_sys_openat2+0x17a/0x1e0 [ 1391.872289][T28025] ? __pfx_do_sys_openat2+0x10/0x10 [ 1391.872323][T28025] ? do_raw_spin_unlock+0x172/0x230 [ 1391.872357][T28025] __x64_sys_openat+0x175/0x210 [ 1391.872386][T28025] ? __pfx___x64_sys_openat+0x10/0x10 [ 1391.872432][T28025] do_syscall_64+0xcd/0x250 [ 1391.872471][T28025] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.872513][T28025] RIP: 0033:0x7f89c778cde9 [ 1391.872536][T28025] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1391.872566][T28025] RSP: 002b:00007f89c86b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1391.872596][T28025] RAX: ffffffffffffffda RBX: 00007f89c79a5fa0 RCX: 00007f89c778cde9 [ 1391.872616][T28025] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1391.872636][T28025] RBP: 00007f89c780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1391.872654][T28025] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1391.872673][T28025] R13: 0000000000000000 R14: 00007f89c79a5fa0 R15: 00007ffe2b605fd8 [ 1391.872709][T28025] [ 1392.497883][T28034] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5166'. [ 1392.526773][T28036] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5166'. [ 1392.845517][T28045] sock: sock_set_timeout: `syz.7.5168' (pid 28045) tries to set negative timeout [ 1395.080197][T28079] FAULT_INJECTION: forcing a failure. [ 1395.080197][T28079] name failslab, interval 1, probability 0, space 0, times 0 [ 1395.123492][T28079] CPU: 1 UID: 0 PID: 28079 Comm: syz.2.5181 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1395.123527][T28079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1395.123544][T28079] Call Trace: [ 1395.123553][T28079] [ 1395.123564][T28079] dump_stack_lvl+0x16c/0x1f0 [ 1395.123603][T28079] should_fail_ex+0x50a/0x650 [ 1395.123646][T28079] ? fs_reclaim_acquire+0xae/0x150 [ 1395.123684][T28079] ? btrfs_scan_one_device+0x1c0/0xb50 [ 1395.123718][T28079] should_failslab+0xc2/0x120 [ 1395.123745][T28079] __kmalloc_cache_noprof+0x68/0x410 [ 1395.123784][T28079] ? btrfs_scan_one_device+0x182/0xb50 [ 1395.123825][T28079] btrfs_scan_one_device+0x1c0/0xb50 [ 1395.123864][T28079] ? __pfx_lock_release+0x10/0x10 [ 1395.123909][T28079] ? __pfx_btrfs_scan_one_device+0x10/0x10 [ 1395.123944][T28079] ? __might_fault+0xe3/0x190 [ 1395.123988][T28079] btrfs_control_ioctl+0x2d2/0x3c0 [ 1395.124034][T28079] ? __pfx_btrfs_control_ioctl+0x10/0x10 [ 1395.124079][T28079] ? __fget_files+0x206/0x3a0 [ 1395.124124][T28079] ? __pfx_btrfs_control_ioctl+0x10/0x10 [ 1395.124172][T28079] __x64_sys_ioctl+0x190/0x200 [ 1395.124210][T28079] do_syscall_64+0xcd/0x250 [ 1395.124250][T28079] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.124289][T28079] RIP: 0033:0x7fe9cfd8cde9 [ 1395.124310][T28079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1395.124336][T28079] RSP: 002b:00007fe9d0ccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1395.124362][T28079] RAX: ffffffffffffffda RBX: 00007fe9cffa5fa0 RCX: 00007fe9cfd8cde9 [ 1395.124380][T28079] RDX: 0000400000001280 RSI: 0000000050009404 RDI: 0000000000000007 [ 1395.124397][T28079] RBP: 00007fe9d0ccf090 R08: 0000000000000000 R09: 0000000000000000 [ 1395.124414][T28079] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1395.124431][T28079] R13: 0000000000000000 R14: 00007fe9cffa5fa0 R15: 00007fffd090c318 [ 1395.124464][T28079] [ 1397.188386][T28107] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1397.617540][T28114] FAULT_INJECTION: forcing a failure. [ 1397.617540][T28114] name failslab, interval 1, probability 0, space 0, times 0 [ 1397.696524][T28114] CPU: 1 UID: 0 PID: 28114 Comm: syz.7.5190 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1397.696572][T28114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1397.696593][T28114] Call Trace: [ 1397.696603][T28114] [ 1397.696618][T28114] dump_stack_lvl+0x16c/0x1f0 [ 1397.696673][T28114] should_fail_ex+0x50a/0x650 [ 1397.696732][T28114] ? fs_reclaim_acquire+0xae/0x150 [ 1397.696774][T28114] ? tomoyo_init_log+0x13c7/0x2170 [ 1397.696812][T28114] should_failslab+0xc2/0x120 [ 1397.696840][T28114] __kmalloc_noprof+0xcb/0x510 [ 1397.696882][T28114] ? __pfx_from_kuid+0x10/0x10 [ 1397.696936][T28114] tomoyo_init_log+0x13c7/0x2170 [ 1397.696983][T28114] ? __kasan_slab_free+0x51/0x70 [ 1397.697035][T28114] ? __pfx_tomoyo_init_log+0x10/0x10 [ 1397.697074][T28114] ? tomoyo_profile+0x47/0x60 [ 1397.697116][T28114] ? tomoyo_domain_quota_is_ok+0x301/0x5a0 [ 1397.697154][T28114] tomoyo_supervisor+0x313/0x1380 [ 1397.697206][T28114] ? __pfx_tomoyo_supervisor+0x10/0x10 [ 1397.697259][T28114] ? mark_held_locks+0x9f/0xe0 [ 1397.697311][T28114] ? tomoyo_check_path_acl+0xad/0x210 [ 1397.697346][T28114] ? tomoyo_check_acl+0x1f7/0x410 [ 1397.697381][T28114] tomoyo_path_permission+0x270/0x3b0 [ 1397.697420][T28114] tomoyo_check_open_permission+0x37d/0x3c0 [ 1397.697460][T28114] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1397.697510][T28114] ? __pfx___lock_acquire+0x10/0x10 [ 1397.697569][T28114] ? __pfx_hook_file_open+0x10/0x10 [ 1397.697605][T28114] ? lock_acquire+0x2f/0xb0 [ 1397.697655][T28114] tomoyo_file_open+0x6b/0x90 [ 1397.697702][T28114] security_file_open+0x84/0x1e0 [ 1397.697741][T28114] do_dentry_open+0x57c/0x1c40 [ 1397.697788][T28114] ? inode_permission+0xdd/0x5f0 [ 1397.697823][T28114] vfs_open+0x82/0x3f0 [ 1397.697850][T28114] ? may_open+0x1f2/0x400 [ 1397.697886][T28114] path_openat+0x1e88/0x2d80 [ 1397.697941][T28114] ? __pfx_path_openat+0x10/0x10 [ 1397.697984][T28114] ? __pfx___lock_acquire+0x10/0x10 [ 1397.698023][T28114] ? lock_acquire.part.0+0x11b/0x380 [ 1397.698064][T28114] ? find_held_lock+0x2d/0x110 [ 1397.698100][T28114] do_filp_open+0x20c/0x470 [ 1397.698143][T28114] ? __pfx_do_filp_open+0x10/0x10 [ 1397.698183][T28114] ? find_held_lock+0x2d/0x110 [ 1397.698238][T28114] ? alloc_fd+0x41f/0x760 [ 1397.698290][T28114] do_sys_openat2+0x17a/0x1e0 [ 1397.698321][T28114] ? __pfx_do_sys_openat2+0x10/0x10 [ 1397.698355][T28114] ? do_raw_spin_unlock+0x172/0x230 [ 1397.698392][T28114] __x64_sys_openat+0x175/0x210 [ 1397.698424][T28114] ? __pfx___x64_sys_openat+0x10/0x10 [ 1397.698471][T28114] do_syscall_64+0xcd/0x250 [ 1397.698510][T28114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1397.698551][T28114] RIP: 0033:0x7fb28638cde9 [ 1397.698575][T28114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1397.698603][T28114] RSP: 002b:00007fb2871fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1397.698631][T28114] RAX: ffffffffffffffda RBX: 00007fb2865a5fa0 RCX: 00007fb28638cde9 [ 1397.698657][T28114] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1397.698675][T28114] RBP: 00007fb28640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1397.698693][T28114] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1397.698711][T28114] R13: 0000000000000000 R14: 00007fb2865a5fa0 R15: 00007ffddcccabd8 [ 1397.698747][T28114] [ 1398.758018][T28124] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input24 [ 1400.816910][T28148] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 1400.906667][T28151] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [1048706]. [ 1401.588271][T28159] usb usb15: usbfs: process 28159 (syz.3.5202) did not claim interface 0 before use [ 1401.693559][T28159] FAULT_INJECTION: forcing a failure. [ 1401.693559][T28159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1401.799877][T28159] CPU: 1 UID: 0 PID: 28159 Comm: syz.3.5202 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1401.799918][T28159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1401.799936][T28159] Call Trace: [ 1401.799946][T28159] [ 1401.799957][T28159] dump_stack_lvl+0x16c/0x1f0 [ 1401.799998][T28159] should_fail_ex+0x50a/0x650 [ 1401.800048][T28159] strncpy_from_user+0x3b/0x2d0 [ 1401.800093][T28159] getname_flags.part.0+0x8f/0x550 [ 1401.800130][T28159] getname+0x8d/0xe0 [ 1401.800185][T28159] do_sys_openat2+0x104/0x1e0 [ 1401.800218][T28159] ? __pfx_do_sys_openat2+0x10/0x10 [ 1401.800254][T28159] ? do_raw_spin_unlock+0x172/0x230 [ 1401.800293][T28159] __x64_sys_openat+0x175/0x210 [ 1401.800332][T28159] ? __pfx___x64_sys_openat+0x10/0x10 [ 1401.800380][T28159] do_syscall_64+0xcd/0x250 [ 1401.800421][T28159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1401.800464][T28159] RIP: 0033:0x7f89c778cde9 [ 1401.800507][T28159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1401.800540][T28159] RSP: 002b:00007f89c86b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1401.800572][T28159] RAX: ffffffffffffffda RBX: 00007f89c79a5fa0 RCX: 00007f89c778cde9 [ 1401.800594][T28159] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1401.800615][T28159] RBP: 00007f89c780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1401.800635][T28159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1401.800655][T28159] R13: 0000000000000000 R14: 00007f89c79a5fa0 R15: 00007ffe2b605fd8 [ 1401.800695][T28159] [ 1402.909926][T28181] openvswitch: netlink: Geneve opt len 1 is not a multiple of 4. [ 1404.848629][T28202] FAULT_INJECTION: forcing a failure. [ 1404.848629][T28202] name failslab, interval 1, probability 0, space 0, times 0 [ 1404.916284][T28202] CPU: 0 UID: 0 PID: 28202 Comm: syz.3.5215 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1404.916331][T28202] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1404.916353][T28202] Call Trace: [ 1404.916364][T28202] [ 1404.916377][T28202] dump_stack_lvl+0x16c/0x1f0 [ 1404.916426][T28202] should_fail_ex+0x50a/0x650 [ 1404.916478][T28202] ? fs_reclaim_acquire+0xae/0x150 [ 1404.916525][T28202] should_failslab+0xc2/0x120 [ 1404.916557][T28202] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1404.916610][T28202] ? alloc_empty_file+0x73/0x1e0 [ 1404.916663][T28202] alloc_empty_file+0x73/0x1e0 [ 1404.916708][T28202] path_openat+0xe1/0x2d80 [ 1404.916746][T28202] ? hlock_class+0x4e/0x130 [ 1404.916775][T28202] ? __lock_acquire+0x15a9/0x3c40 [ 1404.916837][T28202] ? __pfx_path_openat+0x10/0x10 [ 1404.916879][T28202] ? __pfx___lock_acquire+0x10/0x10 [ 1404.916917][T28202] ? lock_acquire.part.0+0x11b/0x380 [ 1404.916958][T28202] ? find_held_lock+0x2d/0x110 [ 1404.916992][T28202] do_filp_open+0x20c/0x470 [ 1404.917034][T28202] ? __pfx_do_filp_open+0x10/0x10 [ 1404.917073][T28202] ? find_held_lock+0x2d/0x110 [ 1404.917126][T28202] ? alloc_fd+0x41f/0x760 [ 1404.917175][T28202] do_sys_openat2+0x17a/0x1e0 [ 1404.917203][T28202] ? __pfx_do_sys_openat2+0x10/0x10 [ 1404.917239][T28202] ? do_raw_spin_unlock+0x172/0x230 [ 1404.917274][T28202] __x64_sys_openat+0x175/0x210 [ 1404.917305][T28202] ? __pfx___x64_sys_openat+0x10/0x10 [ 1404.917349][T28202] do_syscall_64+0xcd/0x250 [ 1404.917387][T28202] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1404.917427][T28202] RIP: 0033:0x7f89c778cde9 [ 1404.917449][T28202] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1404.917477][T28202] RSP: 002b:00007f89c86b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1404.917503][T28202] RAX: ffffffffffffffda RBX: 00007f89c79a5fa0 RCX: 00007f89c778cde9 [ 1404.917522][T28202] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1404.917541][T28202] RBP: 00007f89c780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1404.917559][T28202] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1404.917577][T28202] R13: 0000000000000000 R14: 00007f89c79a5fa0 R15: 00007ffe2b605fd8 [ 1404.917610][T28202] [ 1405.655154][T28196] kexec: Could not allocate control_code_buffer [ 1406.073237][T28218] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1406.425048][T28216] netlink: 342 bytes leftover after parsing attributes in process `syz.4.5219'. [ 1406.443072][T28220] netlink: 342 bytes leftover after parsing attributes in process `syz.4.5219'. [ 1407.581687][T28238] FAULT_INJECTION: forcing a failure. [ 1407.581687][T28238] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1407.624144][T28238] CPU: 0 UID: 0 PID: 28238 Comm: syz.2.5226 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1407.624183][T28238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1407.624201][T28238] Call Trace: [ 1407.624210][T28238] [ 1407.624222][T28238] dump_stack_lvl+0x16c/0x1f0 [ 1407.624264][T28238] should_fail_ex+0x50a/0x650 [ 1407.624313][T28238] strncpy_from_user+0x3b/0x2d0 [ 1407.624359][T28238] getname_flags.part.0+0x8f/0x550 [ 1407.624396][T28238] getname+0x8d/0xe0 [ 1407.624426][T28238] do_sys_openat2+0x104/0x1e0 [ 1407.624450][T28238] ? __pfx_do_sys_openat2+0x10/0x10 [ 1407.624477][T28238] ? do_raw_spin_unlock+0x172/0x230 [ 1407.624505][T28238] __x64_sys_openat+0x175/0x210 [ 1407.624530][T28238] ? __pfx___x64_sys_openat+0x10/0x10 [ 1407.624566][T28238] do_syscall_64+0xcd/0x250 [ 1407.624597][T28238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.624631][T28238] RIP: 0033:0x7fe9cfd8cde9 [ 1407.624648][T28238] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1407.624671][T28238] RSP: 002b:00007fe9d0ccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1407.624693][T28238] RAX: ffffffffffffffda RBX: 00007fe9cffa5fa0 RCX: 00007fe9cfd8cde9 [ 1407.624708][T28238] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1407.624723][T28238] RBP: 00007fe9cfe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1407.624737][T28238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1407.624751][T28238] R13: 0000000000000000 R14: 00007fe9cffa5fa0 R15: 00007fffd090c318 [ 1407.624778][T28238] [ 1408.116440][T28242] FAULT_INJECTION: forcing a failure. [ 1408.116440][T28242] name failslab, interval 1, probability 0, space 0, times 0 [ 1408.194535][T28242] CPU: 1 UID: 0 PID: 28242 Comm: syz.7.5227 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1408.194574][T28242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1408.194591][T28242] Call Trace: [ 1408.194600][T28242] [ 1408.194612][T28242] dump_stack_lvl+0x16c/0x1f0 [ 1408.194653][T28242] should_fail_ex+0x50a/0x650 [ 1408.194698][T28242] ? fs_reclaim_acquire+0xae/0x150 [ 1408.194739][T28242] should_failslab+0xc2/0x120 [ 1408.194766][T28242] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1408.194818][T28242] ? security_file_alloc+0x34/0x2b0 [ 1408.194861][T28242] security_file_alloc+0x34/0x2b0 [ 1408.194898][T28242] init_file+0x93/0x4c0 [ 1408.194928][T28242] alloc_empty_file+0x91/0x1e0 [ 1408.194958][T28242] path_openat+0xe1/0x2d80 [ 1408.194997][T28242] ? hlock_class+0x4e/0x130 [ 1408.195025][T28242] ? __lock_acquire+0x15a9/0x3c40 [ 1408.195075][T28242] ? __pfx_path_openat+0x10/0x10 [ 1408.195118][T28242] ? __pfx___lock_acquire+0x10/0x10 [ 1408.195155][T28242] ? lock_acquire.part.0+0x11b/0x380 [ 1408.195195][T28242] ? find_held_lock+0x2d/0x110 [ 1408.195229][T28242] do_filp_open+0x20c/0x470 [ 1408.195269][T28242] ? __pfx_do_filp_open+0x10/0x10 [ 1408.195308][T28242] ? find_held_lock+0x2d/0x110 [ 1408.195360][T28242] ? alloc_fd+0x41f/0x760 [ 1408.195409][T28242] do_sys_openat2+0x17a/0x1e0 [ 1408.195440][T28242] ? __pfx_do_sys_openat2+0x10/0x10 [ 1408.195492][T28242] ? do_raw_spin_unlock+0x172/0x230 [ 1408.195534][T28242] __x64_sys_openat+0x175/0x210 [ 1408.195572][T28242] ? __pfx___x64_sys_openat+0x10/0x10 [ 1408.195625][T28242] do_syscall_64+0xcd/0x250 [ 1408.195668][T28242] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.195716][T28242] RIP: 0033:0x7fb28638cde9 [ 1408.195743][T28242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1408.195776][T28242] RSP: 002b:00007fb2871fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1408.195819][T28242] RAX: ffffffffffffffda RBX: 00007fb2865a5fa0 RCX: 00007fb28638cde9 [ 1408.195843][T28242] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1408.195865][T28242] RBP: 00007fb28640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1408.195886][T28242] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1408.195906][T28242] R13: 0000000000000000 R14: 00007fb2865a5fa0 R15: 00007ffddcccabd8 [ 1408.195946][T28242] [ 1411.446709][T28283] FAULT_INJECTION: forcing a failure. [ 1411.446709][T28283] name failslab, interval 1, probability 0, space 0, times 0 [ 1411.470663][T28283] CPU: 0 UID: 0 PID: 28283 Comm: syz.4.5238 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1411.470702][T28283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1411.470720][T28283] Call Trace: [ 1411.470729][T28283] [ 1411.470741][T28283] dump_stack_lvl+0x16c/0x1f0 [ 1411.470785][T28283] should_fail_ex+0x50a/0x650 [ 1411.470830][T28283] ? fs_reclaim_acquire+0xae/0x150 [ 1411.470870][T28283] should_failslab+0xc2/0x120 [ 1411.470898][T28283] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1411.470942][T28283] ? security_file_alloc+0x34/0x2b0 [ 1411.470984][T28283] security_file_alloc+0x34/0x2b0 [ 1411.471021][T28283] init_file+0x93/0x4c0 [ 1411.471050][T28283] alloc_empty_file+0x91/0x1e0 [ 1411.471081][T28283] path_openat+0xe1/0x2d80 [ 1411.471119][T28283] ? hlock_class+0x4e/0x130 [ 1411.471149][T28283] ? __lock_acquire+0x15a9/0x3c40 [ 1411.471199][T28283] ? __pfx_path_openat+0x10/0x10 [ 1411.471241][T28283] ? __pfx___lock_acquire+0x10/0x10 [ 1411.471281][T28283] ? lock_acquire.part.0+0x11b/0x380 [ 1411.471321][T28283] ? find_held_lock+0x2d/0x110 [ 1411.471356][T28283] do_filp_open+0x20c/0x470 [ 1411.471399][T28283] ? __pfx_do_filp_open+0x10/0x10 [ 1411.471438][T28283] ? find_held_lock+0x2d/0x110 [ 1411.471491][T28283] ? alloc_fd+0x41f/0x760 [ 1411.471549][T28283] do_sys_openat2+0x17a/0x1e0 [ 1411.471579][T28283] ? __pfx_do_sys_openat2+0x10/0x10 [ 1411.471612][T28283] ? do_raw_spin_unlock+0x172/0x230 [ 1411.471647][T28283] __x64_sys_openat+0x175/0x210 [ 1411.471679][T28283] ? __pfx___x64_sys_openat+0x10/0x10 [ 1411.471724][T28283] do_syscall_64+0xcd/0x250 [ 1411.471762][T28283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1411.471803][T28283] RIP: 0033:0x7f16a418cde9 [ 1411.471826][T28283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1411.471856][T28283] RSP: 002b:00007f16a4fae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1411.471883][T28283] RAX: ffffffffffffffda RBX: 00007f16a43a5fa0 RCX: 00007f16a418cde9 [ 1411.471903][T28283] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1411.471922][T28283] RBP: 00007f16a420e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1411.471941][T28283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1411.471959][T28283] R13: 0000000000000000 R14: 00007f16a43a5fa0 R15: 00007ffc7db74b58 [ 1411.471994][T28283] [ 1412.593460][T28302] FAULT_INJECTION: forcing a failure. [ 1412.593460][T28302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1412.641342][T28302] CPU: 0 UID: 0 PID: 28302 Comm: syz.2.5241 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1412.641389][T28302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1412.641410][T28302] Call Trace: [ 1412.641420][T28302] [ 1412.641434][T28302] dump_stack_lvl+0x16c/0x1f0 [ 1412.641481][T28302] should_fail_ex+0x50a/0x650 [ 1412.641539][T28302] strncpy_from_user+0x3b/0x2d0 [ 1412.641592][T28302] getname_flags.part.0+0x8f/0x550 [ 1412.641636][T28302] getname+0x8d/0xe0 [ 1412.641681][T28302] do_sys_openat2+0x104/0x1e0 [ 1412.641717][T28302] ? __pfx_do_sys_openat2+0x10/0x10 [ 1412.641756][T28302] ? do_raw_spin_unlock+0x172/0x230 [ 1412.641799][T28302] __x64_sys_openat+0x175/0x210 [ 1412.641836][T28302] ? __pfx___x64_sys_openat+0x10/0x10 [ 1412.641889][T28302] do_syscall_64+0xcd/0x250 [ 1412.641934][T28302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.641981][T28302] RIP: 0033:0x7fe9cfd8cde9 [ 1412.642007][T28302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1412.642041][T28302] RSP: 002b:00007fe9d0ccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1412.642073][T28302] RAX: ffffffffffffffda RBX: 00007fe9cffa5fa0 RCX: 00007fe9cfd8cde9 [ 1412.642097][T28302] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1412.642119][T28302] RBP: 00007fe9cfe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1412.642141][T28302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1412.642161][T28302] R13: 0000000000000000 R14: 00007fe9cffa5fa0 R15: 00007fffd090c318 [ 1412.642211][T28302] [ 1414.371287][T28322] usb usb15: usbfs: process 28322 (syz.3.5250) did not claim interface 0 before use [ 1414.549379][T28322] FAULT_INJECTION: forcing a failure. [ 1414.549379][T28322] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1414.668315][T28322] CPU: 0 UID: 0 PID: 28322 Comm: syz.3.5250 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1414.668353][T28322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1414.668373][T28322] Call Trace: [ 1414.668382][T28322] [ 1414.668392][T28322] dump_stack_lvl+0x16c/0x1f0 [ 1414.668432][T28322] should_fail_ex+0x50a/0x650 [ 1414.668478][T28322] strncpy_from_user+0x3b/0x2d0 [ 1414.668520][T28322] getname_flags.part.0+0x8f/0x550 [ 1414.668556][T28322] getname+0x8d/0xe0 [ 1414.668591][T28322] do_sys_openat2+0x104/0x1e0 [ 1414.668620][T28322] ? __pfx_do_sys_openat2+0x10/0x10 [ 1414.668651][T28322] ? do_raw_spin_unlock+0x172/0x230 [ 1414.668684][T28322] __x64_sys_openat+0x175/0x210 [ 1414.668714][T28322] ? __pfx___x64_sys_openat+0x10/0x10 [ 1414.668754][T28322] do_syscall_64+0xcd/0x250 [ 1414.668791][T28322] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1414.668828][T28322] RIP: 0033:0x7f89c778cde9 [ 1414.668850][T28322] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1414.668877][T28322] RSP: 002b:00007f89c86b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1414.668902][T28322] RAX: ffffffffffffffda RBX: 00007f89c79a5fa0 RCX: 00007f89c778cde9 [ 1414.668920][T28322] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1414.668938][T28322] RBP: 00007f89c780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1414.668954][T28322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1414.668971][T28322] R13: 0000000000000000 R14: 00007f89c79a5fa0 R15: 00007ffe2b605fd8 [ 1414.669003][T28322] [ 1415.088088][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 1415.409048][T28332] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1416.158107][T28351] FAULT_INJECTION: forcing a failure. [ 1416.158107][T28351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1416.186120][T28351] CPU: 0 UID: 0 PID: 28351 Comm: syz.4.5256 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1416.186164][T28351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1416.186184][T28351] Call Trace: [ 1416.186194][T28351] [ 1416.186207][T28351] dump_stack_lvl+0x16c/0x1f0 [ 1416.186249][T28351] should_fail_ex+0x50a/0x650 [ 1416.186304][T28351] strncpy_from_user+0x3b/0x2d0 [ 1416.186355][T28351] getname_flags.part.0+0x8f/0x550 [ 1416.186398][T28351] getname+0x8d/0xe0 [ 1416.186441][T28351] do_sys_openat2+0x104/0x1e0 [ 1416.186477][T28351] ? __pfx_do_sys_openat2+0x10/0x10 [ 1416.186515][T28351] ? do_raw_spin_unlock+0x172/0x230 [ 1416.186557][T28351] __x64_sys_openat+0x175/0x210 [ 1416.186593][T28351] ? __pfx___x64_sys_openat+0x10/0x10 [ 1416.186645][T28351] do_syscall_64+0xcd/0x250 [ 1416.186703][T28351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.186749][T28351] RIP: 0033:0x7f16a418cde9 [ 1416.186774][T28351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1416.186816][T28351] RSP: 002b:00007f16a4fae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1416.186843][T28351] RAX: ffffffffffffffda RBX: 00007f16a43a5fa0 RCX: 00007f16a418cde9 [ 1416.186862][T28351] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1416.186881][T28351] RBP: 00007f16a420e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1416.186899][T28351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1416.186925][T28351] R13: 0000000000000000 R14: 00007f16a43a5fa0 R15: 00007ffc7db74b58 [ 1416.186963][T28351] [ 1417.205288][T28334] kexec: Could not allocate control_code_buffer [ 1418.014193][T28368] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 1418.646291][T28383] usb usb15: usbfs: process 28383 (syz.7.5269) did not claim interface 0 before use [ 1418.739231][T28383] FAULT_INJECTION: forcing a failure. [ 1418.739231][T28383] name failslab, interval 1, probability 0, space 0, times 0 [ 1418.789910][T28383] CPU: 1 UID: 0 PID: 28383 Comm: syz.7.5269 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1418.789958][T28383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1418.789974][T28383] Call Trace: [ 1418.789982][T28383] [ 1418.789993][T28383] dump_stack_lvl+0x16c/0x1f0 [ 1418.790030][T28383] should_fail_ex+0x50a/0x650 [ 1418.790069][T28383] ? fs_reclaim_acquire+0xae/0x150 [ 1418.790105][T28383] should_failslab+0xc2/0x120 [ 1418.790130][T28383] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1418.790170][T28383] ? security_file_alloc+0x34/0x2b0 [ 1418.790207][T28383] security_file_alloc+0x34/0x2b0 [ 1418.790239][T28383] init_file+0x93/0x4c0 [ 1418.790264][T28383] alloc_empty_file+0x91/0x1e0 [ 1418.790290][T28383] path_openat+0xe1/0x2d80 [ 1418.790324][T28383] ? hlock_class+0x4e/0x130 [ 1418.790350][T28383] ? __lock_acquire+0x15a9/0x3c40 [ 1418.790393][T28383] ? __pfx_path_openat+0x10/0x10 [ 1418.790430][T28383] ? __pfx___lock_acquire+0x10/0x10 [ 1418.790467][T28383] ? lock_acquire.part.0+0x11b/0x380 [ 1418.790502][T28383] ? find_held_lock+0x2d/0x110 [ 1418.790531][T28383] do_filp_open+0x20c/0x470 [ 1418.790568][T28383] ? __pfx_do_filp_open+0x10/0x10 [ 1418.790602][T28383] ? find_held_lock+0x2d/0x110 [ 1418.790645][T28383] ? alloc_fd+0x41f/0x760 [ 1418.790689][T28383] do_sys_openat2+0x17a/0x1e0 [ 1418.790716][T28383] ? __pfx_do_sys_openat2+0x10/0x10 [ 1418.790743][T28383] ? do_raw_spin_unlock+0x172/0x230 [ 1418.790773][T28383] __x64_sys_openat+0x175/0x210 [ 1418.790800][T28383] ? __pfx___x64_sys_openat+0x10/0x10 [ 1418.790838][T28383] do_syscall_64+0xcd/0x250 [ 1418.790871][T28383] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1418.790907][T28383] RIP: 0033:0x7fb28638cde9 [ 1418.790933][T28383] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1418.790958][T28383] RSP: 002b:00007fb2871fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1418.790983][T28383] RAX: ffffffffffffffda RBX: 00007fb2865a5fa0 RCX: 00007fb28638cde9 [ 1418.791000][T28383] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1418.791016][T28383] RBP: 00007fb28640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1418.791031][T28383] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1418.791046][T28383] R13: 0000000000000000 R14: 00007fb2865a5fa0 R15: 00007ffddcccabd8 [ 1418.791076][T28383] [ 1419.285074][T28387] HfR: entered promiscuous mode [ 1419.297609][T28387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5271'. [ 1419.306836][T28387] HfR: left promiscuous mode [ 1419.859690][T28398] FAULT_INJECTION: forcing a failure. [ 1419.859690][T28398] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1419.903703][T28398] CPU: 1 UID: 0 PID: 28398 Comm: syz.4.5273 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1419.903739][T28398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1419.903756][T28398] Call Trace: [ 1419.903765][T28398] [ 1419.903775][T28398] dump_stack_lvl+0x16c/0x1f0 [ 1419.903815][T28398] should_fail_ex+0x50a/0x650 [ 1419.903869][T28398] _copy_from_iter+0x2a1/0x1560 [ 1419.903901][T28398] ? trace_lock_acquire+0x14e/0x1f0 [ 1419.903937][T28398] ? __pfx__copy_from_iter+0x10/0x10 [ 1419.903963][T28398] ? __virt_addr_valid+0x1a4/0x590 [ 1419.903996][T28398] ? __virt_addr_valid+0x5e/0x590 [ 1419.904025][T28398] ? __phys_addr_symbol+0x30/0x80 [ 1419.904052][T28398] ? __check_object_size+0x488/0x710 [ 1419.904084][T28398] file_tty_write.constprop.0+0x48d/0x9a0 [ 1419.904130][T28398] redirected_tty_write+0xcc/0x140 [ 1419.904164][T28398] vfs_write+0x5ae/0x1150 [ 1419.904203][T28398] ? __pfx_redirected_tty_write+0x10/0x10 [ 1419.904243][T28398] ? __pfx_vfs_write+0x10/0x10 [ 1419.904284][T28398] ? __fget_files+0x40/0x3a0 [ 1419.904342][T28398] ksys_write+0x12b/0x250 [ 1419.904381][T28398] ? __pfx_ksys_write+0x10/0x10 [ 1419.904430][T28398] do_syscall_64+0xcd/0x250 [ 1419.904467][T28398] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1419.904507][T28398] RIP: 0033:0x7f16a418cde9 [ 1419.904528][T28398] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1419.904557][T28398] RSP: 002b:00007f16a4fae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1419.904583][T28398] RAX: ffffffffffffffda RBX: 00007f16a43a5fa0 RCX: 00007f16a418cde9 [ 1419.904602][T28398] RDX: 0000000000000083 RSI: 0000400000000000 RDI: 0000000000000003 [ 1419.904619][T28398] RBP: 00007f16a4fae090 R08: 0000000000000000 R09: 0000000000000000 [ 1419.904636][T28398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1419.904653][T28398] R13: 0000000000000000 R14: 00007f16a43a5fa0 R15: 00007ffc7db74b58 [ 1419.904689][T28398] [ 1421.639661][T28417] cougar: G6 mapped to space [ 1421.702503][T28420] FAULT_INJECTION: forcing a failure. [ 1421.702503][T28420] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1421.762472][T28420] CPU: 0 UID: 0 PID: 28420 Comm: syz.2.5279 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1421.762509][T28420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1421.762527][T28420] Call Trace: [ 1421.762535][T28420] [ 1421.762548][T28420] dump_stack_lvl+0x16c/0x1f0 [ 1421.762590][T28420] should_fail_ex+0x50a/0x650 [ 1421.762640][T28420] get_futex_key+0x4a3/0x1000 [ 1421.762678][T28420] ? __pfx_get_futex_key+0x10/0x10 [ 1421.762709][T28420] ? stack_trace_save+0x95/0xd0 [ 1421.762742][T28420] ? __pfx_stack_trace_save+0x10/0x10 [ 1421.762781][T28420] ? mntput+0x6b/0x90 [ 1421.762816][T28420] ? stack_depot_save_flags+0x28/0x9c0 [ 1421.762869][T28420] futex_wait_setup+0x78/0x290 [ 1421.762914][T28420] ? kasan_save_free_info+0x3b/0x60 [ 1421.762952][T28420] ? __x64_sys_openat+0x175/0x210 [ 1421.762988][T28420] __futex_wait+0x267/0x3c0 [ 1421.763030][T28420] ? __pfx___futex_wait+0x10/0x10 [ 1421.763079][T28420] ? __pfx_futex_wake_mark+0x10/0x10 [ 1421.763136][T28420] futex_wait+0xe9/0x380 [ 1421.763178][T28420] ? __pfx_futex_wait+0x10/0x10 [ 1421.763227][T28420] ? kmem_cache_free+0x2e2/0x4d0 [ 1421.763268][T28420] ? putname+0x13c/0x180 [ 1421.763302][T28420] do_futex+0x22b/0x350 [ 1421.763338][T28420] ? __pfx_do_futex+0x10/0x10 [ 1421.763376][T28420] ? do_raw_spin_unlock+0x172/0x230 [ 1421.763407][T28420] __x64_sys_futex+0x1e1/0x4c0 [ 1421.763445][T28420] ? __x64_sys_openat+0x175/0x210 [ 1421.763477][T28420] ? __pfx___x64_sys_futex+0x10/0x10 [ 1421.763526][T28420] do_syscall_64+0xcd/0x250 [ 1421.763565][T28420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1421.763605][T28420] RIP: 0033:0x7fe9cfd8cde9 [ 1421.763628][T28420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1421.763657][T28420] RSP: 002b:00007fe9d0ccf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1421.763685][T28420] RAX: ffffffffffffffda RBX: 00007fe9cffa5fa8 RCX: 00007fe9cfd8cde9 [ 1421.763704][T28420] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fe9cffa5fa8 [ 1421.763721][T28420] RBP: 00007fe9cffa5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1421.763740][T28420] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe9cffa5fac [ 1421.763758][T28420] R13: 0000000000000000 R14: 00007fffd090c230 R15: 00007fffd090c318 [ 1421.763799][T28420] [ 1423.304001][T28436] bcache: register_bcache() error : Not a bcache superblock (bad offset) [ 1425.289211][T28458] FAULT_INJECTION: forcing a failure. [ 1425.289211][T28458] name failslab, interval 1, probability 0, space 0, times 0 [ 1425.302022][T28458] CPU: 1 UID: 0 PID: 28458 Comm: syz.3.5289 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1425.302056][T28458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1425.302073][T28458] Call Trace: [ 1425.302082][T28458] [ 1425.302094][T28458] dump_stack_lvl+0x16c/0x1f0 [ 1425.302133][T28458] should_fail_ex+0x50a/0x650 [ 1425.302178][T28458] ? fs_reclaim_acquire+0xae/0x150 [ 1425.302217][T28458] should_failslab+0xc2/0x120 [ 1425.302245][T28458] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1425.302290][T28458] ? security_file_alloc+0x34/0x2b0 [ 1425.302333][T28458] security_file_alloc+0x34/0x2b0 [ 1425.302370][T28458] init_file+0x93/0x4c0 [ 1425.302398][T28458] alloc_empty_file+0x91/0x1e0 [ 1425.302435][T28458] path_openat+0xe1/0x2d80 [ 1425.302474][T28458] ? hlock_class+0x4e/0x130 [ 1425.302503][T28458] ? __lock_acquire+0x15a9/0x3c40 [ 1425.302552][T28458] ? __pfx_path_openat+0x10/0x10 [ 1425.302593][T28458] ? __pfx___lock_acquire+0x10/0x10 [ 1425.302630][T28458] ? lock_acquire.part.0+0x11b/0x380 [ 1425.302669][T28458] ? find_held_lock+0x2d/0x110 [ 1425.302703][T28458] do_filp_open+0x20c/0x470 [ 1425.302745][T28458] ? __pfx_do_filp_open+0x10/0x10 [ 1425.302783][T28458] ? find_held_lock+0x2d/0x110 [ 1425.302833][T28458] ? alloc_fd+0x41f/0x760 [ 1425.302886][T28458] do_sys_openat2+0x17a/0x1e0 [ 1425.302917][T28458] ? __pfx_do_sys_openat2+0x10/0x10 [ 1425.302949][T28458] ? do_raw_spin_unlock+0x172/0x230 [ 1425.302984][T28458] __x64_sys_openat+0x175/0x210 [ 1425.303016][T28458] ? __pfx___x64_sys_openat+0x10/0x10 [ 1425.303060][T28458] do_syscall_64+0xcd/0x250 [ 1425.303098][T28458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1425.303133][T28458] RIP: 0033:0x7f89c778cde9 [ 1425.303151][T28458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1425.303176][T28458] RSP: 002b:00007f89c86b1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1425.303198][T28458] RAX: ffffffffffffffda RBX: 00007f89c79a5fa0 RCX: 00007f89c778cde9 [ 1425.303215][T28458] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1425.303231][T28458] RBP: 00007f89c780e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1425.303246][T28458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1425.303262][T28458] R13: 0000000000000000 R14: 00007f89c79a5fa0 R15: 00007ffe2b605fd8 [ 1425.303290][T28458] [ 1425.537276][ C1] vkms_vblank_simulate: vblank timer overrun [ 1426.064643][T28474] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 3000000000 [ 1428.378844][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1428.385441][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1430.217168][T28520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5301'. [ 1430.412147][T28524] netlink: 350 bytes leftover after parsing attributes in process `syz.2.5304'. [ 1434.280626][T28553] HfR: entered promiscuous mode [ 1434.317878][T28553] device-mapper: ioctl: Unable to rename non-existent device, to „ [ 1436.100122][T28576] netlink: set zone limit has 8 unknown bytes [ 1438.982946][T28606] netlink: 8 bytes leftover after parsing attributes in process `syz.7.5325'. [ 1439.549111][T28619] Invalid ELF header magic: != ELF [ 1443.858113][T28666] usb usb15: usbfs: process 28666 (syz.4.5342) did not claim interface 0 before use [ 1444.092980][T28666] FAULT_INJECTION: forcing a failure. [ 1444.092980][T28666] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.117349][T28664] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5341'. [ 1444.147877][T28666] CPU: 1 UID: 0 PID: 28666 Comm: syz.4.5342 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1444.147913][T28666] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1444.147931][T28666] Call Trace: [ 1444.147940][T28666] [ 1444.147951][T28666] dump_stack_lvl+0x16c/0x1f0 [ 1444.147991][T28666] should_fail_ex+0x50a/0x650 [ 1444.148036][T28666] ? fs_reclaim_acquire+0xae/0x150 [ 1444.148075][T28666] should_failslab+0xc2/0x120 [ 1444.148104][T28666] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1444.148149][T28666] ? security_file_alloc+0x34/0x2b0 [ 1444.148191][T28666] security_file_alloc+0x34/0x2b0 [ 1444.148227][T28666] init_file+0x93/0x4c0 [ 1444.148256][T28666] alloc_empty_file+0x91/0x1e0 [ 1444.148287][T28666] path_openat+0xe1/0x2d80 [ 1444.148326][T28666] ? hlock_class+0x4e/0x130 [ 1444.148353][T28666] ? __lock_acquire+0x15a9/0x3c40 [ 1444.148402][T28666] ? __pfx_path_openat+0x10/0x10 [ 1444.148439][T28666] ? __pfx___lock_acquire+0x10/0x10 [ 1444.148478][T28666] ? lock_acquire.part.0+0x11b/0x380 [ 1444.148517][T28666] ? find_held_lock+0x2d/0x110 [ 1444.148550][T28666] do_filp_open+0x20c/0x470 [ 1444.148593][T28666] ? __pfx_do_filp_open+0x10/0x10 [ 1444.148632][T28666] ? find_held_lock+0x2d/0x110 [ 1444.148693][T28666] ? alloc_fd+0x41f/0x760 [ 1444.148743][T28666] do_sys_openat2+0x17a/0x1e0 [ 1444.148773][T28666] ? __pfx_do_sys_openat2+0x10/0x10 [ 1444.148805][T28666] ? do_raw_spin_unlock+0x172/0x230 [ 1444.148841][T28666] __x64_sys_openat+0x175/0x210 [ 1444.148872][T28666] ? __pfx___x64_sys_openat+0x10/0x10 [ 1444.148917][T28666] do_syscall_64+0xcd/0x250 [ 1444.148955][T28666] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.148995][T28666] RIP: 0033:0x7f16a418cde9 [ 1444.149017][T28666] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1444.149045][T28666] RSP: 002b:00007f16a4fae038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1444.149072][T28666] RAX: ffffffffffffffda RBX: 00007f16a43a5fa0 RCX: 00007f16a418cde9 [ 1444.149090][T28666] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1444.149110][T28666] RBP: 00007f16a420e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1444.149128][T28666] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1444.149145][T28666] R13: 0000000000000000 R14: 00007f16a43a5fa0 R15: 00007ffc7db74b58 [ 1444.149180][T28666] [ 1445.144197][T28679] program syz.4.5346 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1445.832862][ T5147] Bluetooth: hci1: command 0x0406 tx timeout [ 1446.248979][T28705] netlink: 80 bytes leftover after parsing attributes in process `syz.4.5350'. [ 1446.313663][T28705] FAULT_INJECTION: forcing a failure. [ 1446.313663][T28705] name failslab, interval 1, probability 0, space 0, times 0 [ 1446.383554][T28705] CPU: 1 UID: 0 PID: 28705 Comm: syz.4.5350 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1446.383590][T28705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1446.383606][T28705] Call Trace: [ 1446.383615][T28705] [ 1446.383625][T28705] dump_stack_lvl+0x16c/0x1f0 [ 1446.383665][T28705] should_fail_ex+0x50a/0x650 [ 1446.383709][T28705] ? fs_reclaim_acquire+0xae/0x150 [ 1446.383748][T28705] should_failslab+0xc2/0x120 [ 1446.383776][T28705] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 1446.383819][T28705] ? __alloc_skb+0x2b1/0x380 [ 1446.383861][T28705] __alloc_skb+0x2b1/0x380 [ 1446.383897][T28705] ? __pfx___alloc_skb+0x10/0x10 [ 1446.383935][T28705] ? genl_rcv_msg+0x4bd/0x800 [ 1446.383986][T28705] netlink_ack+0x15f/0xb80 [ 1446.384031][T28705] netlink_rcv_skb+0x348/0x440 [ 1446.384066][T28705] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1446.384110][T28705] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1446.384161][T28705] ? down_read+0xc9/0x330 [ 1446.384198][T28705] ? __pfx_down_read+0x10/0x10 [ 1446.384235][T28705] ? netlink_deliver_tap+0x1ae/0xd30 [ 1446.384274][T28705] genl_rcv+0x28/0x40 [ 1446.384310][T28705] netlink_unicast+0x53c/0x7f0 [ 1446.384350][T28705] ? __pfx_netlink_unicast+0x10/0x10 [ 1446.384389][T28705] ? __phys_addr_symbol+0x30/0x80 [ 1446.384418][T28705] ? __check_object_size+0x488/0x710 [ 1446.384450][T28705] netlink_sendmsg+0x8b8/0xd70 [ 1446.384500][T28705] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1446.384553][T28705] ____sys_sendmsg+0xaaf/0xc90 [ 1446.384585][T28705] ? copy_msghdr_from_user+0x10b/0x160 [ 1446.384625][T28705] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1446.384670][T28705] ___sys_sendmsg+0x135/0x1e0 [ 1446.384713][T28705] ? __pfx____sys_sendmsg+0x10/0x10 [ 1446.384768][T28705] ? __pfx_lock_release+0x10/0x10 [ 1446.384807][T28705] ? trace_lock_acquire+0x14e/0x1f0 [ 1446.384851][T28705] ? __fget_files+0x206/0x3a0 [ 1446.384900][T28705] __sys_sendmsg+0x16e/0x220 [ 1446.384941][T28705] ? __pfx___sys_sendmsg+0x10/0x10 [ 1446.385004][T28705] do_syscall_64+0xcd/0x250 [ 1446.385040][T28705] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1446.385079][T28705] RIP: 0033:0x7f16a418cde9 [ 1446.385100][T28705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1446.385127][T28705] RSP: 002b:00007f16a4fae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1446.385151][T28705] RAX: ffffffffffffffda RBX: 00007f16a43a5fa0 RCX: 00007f16a418cde9 [ 1446.385170][T28705] RDX: 0000000024008040 RSI: 0000400000000280 RDI: 0000000000000003 [ 1446.385187][T28705] RBP: 00007f16a4fae090 R08: 0000000000000000 R09: 0000000000000000 [ 1446.385204][T28705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1446.385221][T28705] R13: 0000000000000000 R14: 00007f16a43a5fa0 R15: 00007ffc7db74b58 [ 1446.385256][T28705] [ 1447.507072][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1447.513682][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1447.586274][T28719] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5356'. [ 1447.858862][T28724] cougar: G6 mapped to space [ 1448.834245][T28737] usb usb15: usbfs: process 28737 (syz.7.5363) did not claim interface 0 before use [ 1448.987222][T28737] FAULT_INJECTION: forcing a failure. [ 1448.987222][T28737] name failslab, interval 1, probability 0, space 0, times 0 [ 1449.039201][T28737] CPU: 1 UID: 0 PID: 28737 Comm: syz.7.5363 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1449.039238][T28737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1449.039256][T28737] Call Trace: [ 1449.039266][T28737] [ 1449.039278][T28737] dump_stack_lvl+0x16c/0x1f0 [ 1449.039319][T28737] should_fail_ex+0x50a/0x650 [ 1449.039365][T28737] ? fs_reclaim_acquire+0xae/0x150 [ 1449.039405][T28737] should_failslab+0xc2/0x120 [ 1449.039432][T28737] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1449.039478][T28737] ? security_file_alloc+0x34/0x2b0 [ 1449.039530][T28737] security_file_alloc+0x34/0x2b0 [ 1449.039568][T28737] init_file+0x93/0x4c0 [ 1449.039597][T28737] alloc_empty_file+0x91/0x1e0 [ 1449.039630][T28737] path_openat+0xe1/0x2d80 [ 1449.039666][T28737] ? hlock_class+0x4e/0x130 [ 1449.039696][T28737] ? __lock_acquire+0x15a9/0x3c40 [ 1449.039745][T28737] ? __pfx_path_openat+0x10/0x10 [ 1449.039785][T28737] ? __pfx___lock_acquire+0x10/0x10 [ 1449.039823][T28737] ? lock_acquire.part.0+0x11b/0x380 [ 1449.039862][T28737] ? find_held_lock+0x2d/0x110 [ 1449.039896][T28737] do_filp_open+0x20c/0x470 [ 1449.039939][T28737] ? __pfx_do_filp_open+0x10/0x10 [ 1449.039977][T28737] ? find_held_lock+0x2d/0x110 [ 1449.040029][T28737] ? alloc_fd+0x41f/0x760 [ 1449.040079][T28737] do_sys_openat2+0x17a/0x1e0 [ 1449.040109][T28737] ? __pfx_do_sys_openat2+0x10/0x10 [ 1449.040161][T28737] ? do_raw_spin_unlock+0x172/0x230 [ 1449.040200][T28737] __x64_sys_openat+0x175/0x210 [ 1449.040234][T28737] ? __pfx___x64_sys_openat+0x10/0x10 [ 1449.040290][T28737] do_syscall_64+0xcd/0x250 [ 1449.040328][T28737] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.040388][T28737] RIP: 0033:0x7fb28638cde9 [ 1449.040412][T28737] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1449.040442][T28737] RSP: 002b:00007fb2871fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1449.040472][T28737] RAX: ffffffffffffffda RBX: 00007fb2865a5fa0 RCX: 00007fb28638cde9 [ 1449.040501][T28737] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1449.040521][T28737] RBP: 00007fb28640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1449.040541][T28737] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1449.040559][T28737] R13: 0000000000000000 R14: 00007fb2865a5fa0 R15: 00007ffddcccabd8 [ 1449.040596][T28737] [ 1449.652831][T28751] FAULT_INJECTION: forcing a failure. [ 1449.652831][T28751] name failslab, interval 1, probability 0, space 0, times 0 [ 1449.665932][T28751] CPU: 1 UID: 0 PID: 28751 Comm: syz.2.5366 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1449.665975][T28751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1449.665995][T28751] Call Trace: [ 1449.666006][T28751] [ 1449.666019][T28751] dump_stack_lvl+0x16c/0x1f0 [ 1449.666064][T28751] should_fail_ex+0x50a/0x650 [ 1449.666116][T28751] ? fs_reclaim_acquire+0xae/0x150 [ 1449.666161][T28751] should_failslab+0xc2/0x120 [ 1449.666193][T28751] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1449.666247][T28751] ? alloc_empty_file+0x73/0x1e0 [ 1449.666289][T28751] alloc_empty_file+0x73/0x1e0 [ 1449.666326][T28751] path_openat+0xe1/0x2d80 [ 1449.666372][T28751] ? hlock_class+0x4e/0x130 [ 1449.666406][T28751] ? __lock_acquire+0x15a9/0x3c40 [ 1449.666474][T28751] ? __pfx_path_openat+0x10/0x10 [ 1449.666524][T28751] ? __pfx___lock_acquire+0x10/0x10 [ 1449.666568][T28751] ? lock_acquire.part.0+0x11b/0x380 [ 1449.666615][T28751] ? find_held_lock+0x2d/0x110 [ 1449.666665][T28751] do_filp_open+0x20c/0x470 [ 1449.666725][T28751] ? __pfx_do_filp_open+0x10/0x10 [ 1449.666767][T28751] ? find_held_lock+0x2d/0x110 [ 1449.666831][T28751] ? alloc_fd+0x41f/0x760 [ 1449.666880][T28751] do_sys_openat2+0x17a/0x1e0 [ 1449.666910][T28751] ? __pfx_do_sys_openat2+0x10/0x10 [ 1449.666942][T28751] ? do_raw_spin_unlock+0x172/0x230 [ 1449.666978][T28751] __x64_sys_openat+0x175/0x210 [ 1449.667042][T28751] ? __pfx___x64_sys_openat+0x10/0x10 [ 1449.667101][T28751] do_syscall_64+0xcd/0x250 [ 1449.667140][T28751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.667181][T28751] RIP: 0033:0x7fe9cfd8cde9 [ 1449.667204][T28751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1449.667234][T28751] RSP: 002b:00007fe9d0ccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1449.667262][T28751] RAX: ffffffffffffffda RBX: 00007fe9cffa5fa0 RCX: 00007fe9cfd8cde9 [ 1449.667282][T28751] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1449.667300][T28751] RBP: 00007fe9cfe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1449.667318][T28751] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1449.667335][T28751] R13: 0000000000000000 R14: 00007fe9cffa5fa0 R15: 00007fffd090c318 [ 1449.667370][T28751] [ 1449.673594][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1449.912765][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 1450.403856][T28765] FAULT_INJECTION: forcing a failure. [ 1450.403856][T28765] name failslab, interval 1, probability 0, space 0, times 0 [ 1450.419817][T28765] CPU: 0 UID: 0 PID: 28765 Comm: syz.7.5372 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1450.419858][T28765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1450.419877][T28765] Call Trace: [ 1450.419885][T28765] [ 1450.419897][T28765] dump_stack_lvl+0x16c/0x1f0 [ 1450.419937][T28765] should_fail_ex+0x50a/0x650 [ 1450.419983][T28765] ? fs_reclaim_acquire+0xae/0x150 [ 1450.420025][T28765] should_failslab+0xc2/0x120 [ 1450.420056][T28765] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1450.420104][T28765] ? alloc_empty_file+0x73/0x1e0 [ 1450.420140][T28765] alloc_empty_file+0x73/0x1e0 [ 1450.420173][T28765] path_openat+0xe1/0x2d80 [ 1450.420215][T28765] ? hlock_class+0x4e/0x130 [ 1450.420251][T28765] ? __lock_acquire+0x15a9/0x3c40 [ 1450.420313][T28765] ? __pfx_path_openat+0x10/0x10 [ 1450.420353][T28765] ? __pfx___lock_acquire+0x10/0x10 [ 1450.420398][T28765] ? lock_acquire.part.0+0x11b/0x380 [ 1450.420439][T28765] ? find_held_lock+0x2d/0x110 [ 1450.420474][T28765] do_filp_open+0x20c/0x470 [ 1450.420517][T28765] ? __pfx_do_filp_open+0x10/0x10 [ 1450.420558][T28765] ? find_held_lock+0x2d/0x110 [ 1450.420610][T28765] ? alloc_fd+0x41f/0x760 [ 1450.420659][T28765] do_sys_openat2+0x17a/0x1e0 [ 1450.420690][T28765] ? __pfx_do_sys_openat2+0x10/0x10 [ 1450.420722][T28765] ? do_raw_spin_unlock+0x172/0x230 [ 1450.420758][T28765] __x64_sys_openat+0x175/0x210 [ 1450.420789][T28765] ? __pfx___x64_sys_openat+0x10/0x10 [ 1450.420834][T28765] do_syscall_64+0xcd/0x250 [ 1450.420872][T28765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1450.420913][T28765] RIP: 0033:0x7fb28638cde9 [ 1450.420936][T28765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1450.420965][T28765] RSP: 002b:00007fb2871fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1450.420992][T28765] RAX: ffffffffffffffda RBX: 00007fb2865a5fa0 RCX: 00007fb28638cde9 [ 1450.421012][T28765] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1450.421032][T28765] RBP: 00007fb28640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1450.421050][T28765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1450.421068][T28765] R13: 0000000000000000 R14: 00007fb2865a5fa0 R15: 00007ffddcccabd8 [ 1450.421102][T28765] [ 1451.488391][T28782] FAULT_INJECTION: forcing a failure. [ 1451.488391][T28782] name failslab, interval 1, probability 0, space 0, times 0 [ 1451.501883][T28782] CPU: 0 UID: 0 PID: 28782 Comm: syz.2.5376 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1451.501923][T28782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1451.501943][T28782] Call Trace: [ 1451.501954][T28782] [ 1451.501966][T28782] dump_stack_lvl+0x16c/0x1f0 [ 1451.502014][T28782] should_fail_ex+0x50a/0x650 [ 1451.502074][T28782] ? fs_reclaim_acquire+0xae/0x150 [ 1451.502120][T28782] should_failslab+0xc2/0x120 [ 1451.502152][T28782] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1451.502204][T28782] ? security_file_alloc+0x34/0x2b0 [ 1451.502252][T28782] security_file_alloc+0x34/0x2b0 [ 1451.502295][T28782] init_file+0x93/0x4c0 [ 1451.502338][T28782] alloc_empty_file+0x91/0x1e0 [ 1451.502371][T28782] path_openat+0xe1/0x2d80 [ 1451.502411][T28782] ? hlock_class+0x4e/0x130 [ 1451.502442][T28782] ? __lock_acquire+0x15a9/0x3c40 [ 1451.502495][T28782] ? __pfx_path_openat+0x10/0x10 [ 1451.502540][T28782] ? __pfx___lock_acquire+0x10/0x10 [ 1451.502579][T28782] ? lock_acquire.part.0+0x11b/0x380 [ 1451.502621][T28782] ? find_held_lock+0x2d/0x110 [ 1451.502657][T28782] do_filp_open+0x20c/0x470 [ 1451.502702][T28782] ? __pfx_do_filp_open+0x10/0x10 [ 1451.502744][T28782] ? find_held_lock+0x2d/0x110 [ 1451.502802][T28782] ? alloc_fd+0x41f/0x760 [ 1451.502854][T28782] do_sys_openat2+0x17a/0x1e0 [ 1451.502885][T28782] ? __pfx_do_sys_openat2+0x10/0x10 [ 1451.502920][T28782] ? do_raw_spin_unlock+0x172/0x230 [ 1451.502957][T28782] __x64_sys_openat+0x175/0x210 [ 1451.502990][T28782] ? __pfx___x64_sys_openat+0x10/0x10 [ 1451.503038][T28782] do_syscall_64+0xcd/0x250 [ 1451.503084][T28782] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1451.503128][T28782] RIP: 0033:0x7fe9cfd8cde9 [ 1451.503150][T28782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1451.503180][T28782] RSP: 002b:00007fe9d0ccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1451.503209][T28782] RAX: ffffffffffffffda RBX: 00007fe9cffa5fa0 RCX: 00007fe9cfd8cde9 [ 1451.503230][T28782] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1451.503249][T28782] RBP: 00007fe9cfe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1451.503268][T28782] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1451.503286][T28782] R13: 0000000000000000 R14: 00007fe9cffa5fa0 R15: 00007fffd090c318 [ 1451.503323][T28782] [ 1452.413507][T28798] usb usb15: usbfs: process 28798 (syz.2.5388) did not claim interface 0 before use [ 1452.496598][T28797] FAULT_INJECTION: forcing a failure. [ 1452.496598][T28797] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1452.512142][T28797] CPU: 0 UID: 0 PID: 28797 Comm: syz.7.5380 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1452.512181][T28797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1452.512197][T28797] Call Trace: [ 1452.512206][T28797] [ 1452.512217][T28797] dump_stack_lvl+0x16c/0x1f0 [ 1452.512254][T28797] should_fail_ex+0x50a/0x650 [ 1452.512305][T28797] strncpy_from_user+0x3b/0x2d0 [ 1452.512347][T28797] getname_flags.part.0+0x8f/0x550 [ 1452.512382][T28797] getname+0x8d/0xe0 [ 1452.512417][T28797] do_sys_openat2+0x104/0x1e0 [ 1452.512445][T28797] ? __pfx_do_sys_openat2+0x10/0x10 [ 1452.512476][T28797] ? do_raw_spin_unlock+0x172/0x230 [ 1452.512511][T28797] __x64_sys_openat+0x175/0x210 [ 1452.512542][T28797] ? __pfx___x64_sys_openat+0x10/0x10 [ 1452.512586][T28797] do_syscall_64+0xcd/0x250 [ 1452.512624][T28797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.512664][T28797] RIP: 0033:0x7fb28638cde9 [ 1452.512685][T28797] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1452.512712][T28797] RSP: 002b:00007fb2871fa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1452.512738][T28797] RAX: ffffffffffffffda RBX: 00007fb2865a5fa0 RCX: 00007fb28638cde9 [ 1452.512756][T28797] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1452.512775][T28797] RBP: 00007fb28640e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1452.512793][T28797] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1452.512810][T28797] R13: 0000000000000000 R14: 00007fb2865a5fa0 R15: 00007ffddcccabd8 [ 1452.512845][T28797] [ 1452.523087][T28798] FAULT_INJECTION: forcing a failure. [ 1452.523087][T28798] name failslab, interval 1, probability 0, space 0, times 0 [ 1452.720270][T28798] CPU: 0 UID: 0 PID: 28798 Comm: syz.2.5388 Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1452.720306][T28798] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1452.720322][T28798] Call Trace: [ 1452.720330][T28798] [ 1452.720340][T28798] dump_stack_lvl+0x16c/0x1f0 [ 1452.720384][T28798] should_fail_ex+0x50a/0x650 [ 1452.720425][T28798] ? fs_reclaim_acquire+0xae/0x150 [ 1452.720463][T28798] should_failslab+0xc2/0x120 [ 1452.720491][T28798] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 1452.720542][T28798] ? security_file_alloc+0x34/0x2b0 [ 1452.720584][T28798] security_file_alloc+0x34/0x2b0 [ 1452.720620][T28798] init_file+0x93/0x4c0 [ 1452.720648][T28798] alloc_empty_file+0x91/0x1e0 [ 1452.720677][T28798] path_openat+0xe1/0x2d80 [ 1452.720714][T28798] ? hlock_class+0x4e/0x130 [ 1452.720742][T28798] ? __lock_acquire+0x15a9/0x3c40 [ 1452.720789][T28798] ? __pfx_path_openat+0x10/0x10 [ 1452.720828][T28798] ? __pfx___lock_acquire+0x10/0x10 [ 1452.720863][T28798] ? lock_acquire.part.0+0x11b/0x380 [ 1452.720901][T28798] ? find_held_lock+0x2d/0x110 [ 1452.720941][T28798] do_filp_open+0x20c/0x470 [ 1452.720981][T28798] ? __pfx_do_filp_open+0x10/0x10 [ 1452.721019][T28798] ? find_held_lock+0x2d/0x110 [ 1452.721069][T28798] ? alloc_fd+0x41f/0x760 [ 1452.721116][T28798] do_sys_openat2+0x17a/0x1e0 [ 1452.721146][T28798] ? __pfx_do_sys_openat2+0x10/0x10 [ 1452.721177][T28798] ? do_raw_spin_unlock+0x172/0x230 [ 1452.721211][T28798] __x64_sys_openat+0x175/0x210 [ 1452.721248][T28798] ? __pfx___x64_sys_openat+0x10/0x10 [ 1452.721290][T28798] do_syscall_64+0xcd/0x250 [ 1452.721328][T28798] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.721366][T28798] RIP: 0033:0x7fe9cfd8cde9 [ 1452.721387][T28798] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1452.721415][T28798] RSP: 002b:00007fe9d0ccf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1452.721440][T28798] RAX: ffffffffffffffda RBX: 00007fe9cffa5fa0 RCX: 00007fe9cfd8cde9 [ 1452.721459][T28798] RDX: 0000000000000080 RSI: 0000400000000500 RDI: ffffffffffffff9c [ 1452.721476][T28798] RBP: 00007fe9cfe0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1452.721493][T28798] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1452.721510][T28798] R13: 0000000000000000 R14: 00007fe9cffa5fa0 R15: 00007fffd090c318 [ 1452.721542][T28798] [ 1453.988795][ T30] INFO: task kworker/u8:9:7454 blocked for more than 143 seconds. [ 1453.997043][ T30] Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1454.027495][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1454.036347][ T30] task:kworker/u8:9 state:D stack:23472 pid:7454 tgid:7454 ppid:2 task_flags:0x4208060 flags:0x00004000 [ 1454.127757][ T30] Workqueue: netns cleanup_net [ 1454.132687][ T30] Call Trace: [ 1454.136055][ T30] [ 1454.146963][ T30] __schedule+0xf43/0x5890 [ 1454.168082][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1454.178381][ T30] ? add_lock_to_list+0x17d/0x390 [ 1454.183550][ T30] ? __pfx___schedule+0x10/0x10 [ 1454.227081][ T30] ? schedule+0x298/0x350 [ 1454.237880][ T30] ? __pfx_lock_release+0x10/0x10 [ 1454.247385][ T30] ? lock_acquire+0x2f/0xb0 [ 1454.252001][ T30] ? schedule+0x1fd/0x350 [ 1454.256923][ T30] schedule+0xe7/0x350 [ 1454.271814][ T30] schedule_timeout+0x244/0x280 [ 1454.280461][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1454.288283][ T30] ? mark_held_locks+0x9f/0xe0 [ 1454.295839][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 1454.303873][ T30] __wait_for_common+0x3e1/0x600 [ 1454.311971][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 1454.321288][ T30] ? __pfx___wait_for_common+0x10/0x10 [ 1454.329169][ T30] remove_one+0x30f/0x420 [ 1454.337640][ T30] ? __pfx_remove_one+0x10/0x10 [ 1454.348479][ T30] simple_recursive_removal+0x4e2/0x8e0 [ 1454.359946][ T30] ? __pfx_remove_one+0x10/0x10 [ 1454.371053][ T30] debugfs_remove+0x5d/0x80 [ 1454.385904][ T30] nsim_dev_health_exit+0x3b/0xe0 [ 1454.391489][ T30] nsim_dev_reload_destroy+0x143/0x4d0 [ 1454.407451][ T30] nsim_dev_reload_down+0x6e/0xd0 [ 1454.412644][ T30] devlink_reload+0x19a/0x7c0 [ 1454.437597][ T30] ? __pfx_devlink_reload+0x10/0x10 [ 1454.442976][ T30] ? devlinks_xa_find_get+0x39/0x260 [ 1454.458003][ T30] devlink_pernet_pre_exit+0x1a1/0x2b0 [ 1454.464045][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1454.487494][ T30] ? up_write+0x1b2/0x520 [ 1454.491985][ T30] ? kobject_put+0xab/0x5a0 [ 1454.496640][ T30] ? __pfx_devlink_pernet_pre_exit+0x10/0x10 [ 1454.507512][ T30] cleanup_net+0x497/0xbf0 [ 1454.512082][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 1454.517179][ T30] ? lock_acquire+0x2f/0xb0 [ 1454.537649][ T30] ? process_one_work+0x921/0x1ba0 [ 1454.549806][ T30] process_one_work+0x9c5/0x1ba0 [ 1454.560651][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 1454.573025][ T30] ? __pfx_process_one_work+0x10/0x10 [ 1454.584514][ T30] ? assign_work+0x1a0/0x250 [ 1454.594403][ T30] worker_thread+0x6c8/0xf00 [ 1454.604889][ T30] ? __pfx_worker_thread+0x10/0x10 [ 1454.617599][ T30] kthread+0x3af/0x750 [ 1454.622999][ T30] ? __pfx_kthread+0x10/0x10 [ 1454.633061][ T30] ? lock_acquire+0x2f/0xb0 [ 1454.657730][ T30] ? __pfx_kthread+0x10/0x10 [ 1454.667443][ T30] ret_from_fork+0x45/0x80 [ 1454.676546][ T30] ? __pfx_kthread+0x10/0x10 [ 1454.690163][ T30] ret_from_fork_asm+0x1a/0x30 [ 1454.699571][ T30] [ 1454.709978][ T30] INFO: task syz.8.4876:26234 blocked for more than 144 seconds. [ 1454.731218][ T30] Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1454.747147][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1454.769644][ T30] task:syz.8.4876 state:D stack:25232 pid:26234 tgid:26233 ppid:17096 task_flags:0x400140 flags:0x00000004 [ 1454.795754][ T30] Call Trace: [ 1454.800920][ T30] [ 1454.804000][ T30] __schedule+0xf43/0x5890 [ 1454.809222][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1454.814821][ T30] ? __pfx___lock_acquire+0x10/0x10 [ 1454.820628][ T30] ? __pfx___schedule+0x10/0x10 [ 1454.825738][ T30] ? schedule+0x298/0x350 [ 1454.830969][ T30] ? __pfx_lock_release+0x10/0x10 [ 1454.836238][ T30] ? __mutex_trylock_common+0x78/0x250 [ 1454.843729][ T30] ? lock_acquire+0x2f/0xb0 [ 1454.858016][ T30] ? schedule+0x1fd/0x350 [ 1454.862552][ T30] schedule+0xe7/0x350 [ 1454.868484][ T30] schedule_preempt_disabled+0x13/0x30 [ 1454.877952][ T30] __mutex_lock+0x6bd/0xb10 [ 1454.884895][ T30] ? devlink_health_report+0x3c5/0x9d0 [ 1454.891808][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1454.897402][ T30] ? find_held_lock+0x2d/0x110 [ 1454.902803][ T30] ? __might_fault+0x13b/0x190 [ 1454.908400][ T30] ? __pfx_lock_release+0x10/0x10 [ 1454.913853][ T30] ? devlink_health_report+0x3c5/0x9d0 [ 1454.919851][ T30] devlink_health_report+0x3c5/0x9d0 [ 1454.925312][ T30] ? __pfx_devlink_health_report+0x10/0x10 [ 1454.931927][ T30] ? _copy_from_user+0x59/0xd0 [ 1454.936884][ T30] nsim_dev_health_break_write+0x167/0x210 [ 1454.943239][ T30] ? __pfx_nsim_dev_health_break_write+0x10/0x10 [ 1454.950303][ T30] ? rcu_is_watching+0x12/0xc0 [ 1454.955243][ T30] ? trace_lock_acquire+0x14e/0x1f0 [ 1454.960995][ T30] full_proxy_write+0x13c/0x200 [ 1454.966062][ T30] ? __pfx_full_proxy_write+0x10/0x10 [ 1454.977793][ T30] vfs_write+0x24c/0x1150 [ 1454.984527][ T30] ? __fget_files+0x1fc/0x3a0 [ 1454.992771][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1455.005570][ T30] ? __pfx_vfs_write+0x10/0x10 [ 1455.013854][ T30] ? __fget_files+0x206/0x3a0 [ 1455.025402][ T30] ksys_write+0x12b/0x250 [ 1455.046480][ T30] ? __pfx_ksys_write+0x10/0x10 [ 1455.053346][ T30] do_syscall_64+0xcd/0x250 [ 1455.061702][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1455.067685][ T30] RIP: 0033:0x7fa32278cde9 [ 1455.085440][ T30] RSP: 002b:00007fa32360c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1455.100384][ T30] RAX: ffffffffffffffda RBX: 00007fa3229a5fa0 RCX: 00007fa32278cde9 [ 1455.117146][ T30] RDX: 00000000000000ef RSI: 0000400000000000 RDI: 0000000000000008 [ 1455.125485][ T30] RBP: 00007fa32280e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1455.133655][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1455.142062][ T30] R13: 0000000000000000 R14: 00007fa3229a5fa0 R15: 00007fff219c39a8 [ 1455.153702][ T30] [ 1455.156840][ T30] [ 1455.156840][ T30] Showing all locks held in the system: [ 1455.172494][ T30] 1 lock held by khungtaskd/30: [ 1455.177449][ T30] #0: ffffffff8e1bcc80 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 1455.195090][ T30] 2 locks held by kworker/u8:3/52: [ 1455.200413][ T30] 6 locks held by kworker/u8:9/7454: [ 1455.206391][ T30] #0: ffff88801bef5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1455.217219][ T30] #1: ffffc9000464fd18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1455.227685][ T30] #2: ffffffff8fee2c10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xbf0 [ 1455.237454][ T30] #3: ffff8880617ae0e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x12d/0x2b0 [ 1455.248823][ T30] #4: ffff8880617ab250 (&devlink->lock_key#9){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x137/0x2b0 [ 1455.260664][ T30] #5: ffff88805ecaaa08 (&sb->s_type->i_mutex_key#3){++++}-{4:4}, at: simple_recursive_removal+0x2f5/0x8e0 [ 1455.272740][ T30] 2 locks held by kworker/u8:10/7455: [ 1455.278485][ T30] #0: ffff8881436cb948 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1455.289624][ T30] #1: ffffc900046f7d18 ((work_completion)(&ctx->exit_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1455.321665][ T30] 2 locks held by syz.3.2661/16005: [ 1455.346376][ T30] 2 locks held by getty/24934: [ 1455.352773][ T30] #0: ffff8880315fd0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 1455.373936][ T30] #1: ffffc9000deab2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 1455.394566][ T30] 3 locks held by syz.8.4876/26234: [ 1455.402216][ T30] #0: ffff888038f747f8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 1455.422428][ T30] #1: ffff88801f2c2420 (sb_writers#9){.+.+}-{0:0}, at: ksys_write+0x12b/0x250 [ 1455.432229][ T30] #2: ffff8880617ab250 (&devlink->lock_key#9){+.+.}-{4:4}, at: devlink_health_report+0x3c5/0x9d0 [ 1455.443790][ T30] [ 1455.446151][ T30] ============================================= [ 1455.446151][ T30] [ 1455.455172][ T30] NMI backtrace for cpu 1 [ 1455.455186][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1455.455217][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1455.455233][ T30] Call Trace: [ 1455.455241][ T30] [ 1455.455252][ T30] dump_stack_lvl+0x116/0x1f0 [ 1455.455288][ T30] nmi_cpu_backtrace+0x27b/0x390 [ 1455.455333][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1455.455372][ T30] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 1455.455418][ T30] watchdog+0xf62/0x12b0 [ 1455.455488][ T30] ? __pfx_watchdog+0x10/0x10 [ 1455.455534][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1455.455590][ T30] ? __kthread_parkme+0x148/0x220 [ 1455.455624][ T30] ? __pfx_watchdog+0x10/0x10 [ 1455.455676][ T30] kthread+0x3af/0x750 [ 1455.455716][ T30] ? __pfx_kthread+0x10/0x10 [ 1455.455768][ T30] ? __pfx_kthread+0x10/0x10 [ 1455.455809][ T30] ret_from_fork+0x45/0x80 [ 1455.455852][ T30] ? __pfx_kthread+0x10/0x10 [ 1455.455891][ T30] ret_from_fork_asm+0x1a/0x30 [ 1455.455945][ T30] [ 1455.456348][ T30] Sending NMI from CPU 1 to CPUs 0: [ 1455.571017][ C0] NMI backtrace for cpu 0 [ 1455.571031][ C0] CPU: 0 UID: 0 PID: 5190 Comm: syslogd Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1455.571057][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1455.571070][ C0] RIP: 0010:entry_SYSCALL_64+0xf/0x2b [ 1455.571104][ C0] Code: cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc cc f3 0f 1e fa 0f 01 f8 65 48 89 25 85 9f 00 7f <66> 90 0f 20 dc 0f 1f 44 00 00 48 81 e4 ff e7 ff ff 0f 22 dc 65 48 [ 1455.571126][ C0] RSP: 0018:00007ffd0ecf6058 EFLAGS: 00000002 [ 1455.571143][ C0] RAX: 0000000000000000 RBX: 0000000000000002 RCX: 00007f4eee702b6a [ 1455.571157][ C0] RDX: 00000000000000ff RSI: 000055c9dc6b6950 RDI: 0000000000000000 [ 1455.571170][ C0] RBP: 000055c9dc6b6910 R08: 0000000000000001 R09: 0000000000000000 [ 1455.571183][ C0] R10: 00007f4eee8a13a3 R11: 0000000000000246 R12: 000055c9dc6b699c [ 1455.571197][ C0] R13: 000055c9dc6b6950 R14: 0000000000000000 R15: 00007f4eee8e5a80 [ 1455.571211][ C0] FS: 00007f4eee5ae380(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 1455.571235][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1455.571250][ C0] CR2: 0000001b2edb1ff8 CR3: 000000007dc64000 CR4: 00000000003526f0 [ 1455.571264][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 1455.571277][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 1455.571290][ C0] Call Trace: [ 1455.571297][ C0] [ 1455.571305][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 1455.571342][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 1455.571371][ C0] ? nmi_handle+0x1ac/0x5d0 [ 1455.571402][ C0] ? entry_SYSCALL_64+0xf/0x2b [ 1455.571431][ C0] ? default_do_nmi+0x6a/0x160 [ 1455.571463][ C0] ? exc_nmi+0x170/0x1e0 [ 1455.571494][ C0] ? end_repeat_nmi+0xf/0x53 [ 1455.571529][ C0] ? entry_SYSCALL_64+0xf/0x2b [ 1455.571557][ C0] ? entry_SYSCALL_64+0xf/0x2b [ 1455.571586][ C0] ? entry_SYSCALL_64+0xf/0x2b [ 1455.571613][ C0] [ 1455.572103][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 1455.770781][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc3-syzkaller-00060-g6537cfb395f3 #0 [ 1455.781292][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1455.791355][ T30] Call Trace: [ 1455.794638][ T30] [ 1455.797587][ T30] dump_stack_lvl+0x3d/0x1f0 [ 1455.802219][ T30] panic+0x71d/0x800 [ 1455.806135][ T30] ? __pfx_panic+0x10/0x10 [ 1455.810574][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1455.815981][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1455.821990][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 1455.827385][ T30] ? watchdog+0xdcc/0x12b0 [ 1455.831828][ T30] ? watchdog+0xdbf/0x12b0 [ 1455.836279][ T30] watchdog+0xddd/0x12b0 [ 1455.840560][ T30] ? __pfx_watchdog+0x10/0x10 [ 1455.845362][ T30] ? lockdep_hardirqs_on+0x7c/0x110 [ 1455.850580][ T30] ? __kthread_parkme+0x148/0x220 [ 1455.855648][ T30] ? __pfx_watchdog+0x10/0x10 [ 1455.860369][ T30] kthread+0x3af/0x750 [ 1455.864473][ T30] ? __pfx_kthread+0x10/0x10 [ 1455.869083][ T30] ? __pfx_kthread+0x10/0x10 [ 1455.873696][ T30] ret_from_fork+0x45/0x80 [ 1455.878137][ T30] ? __pfx_kthread+0x10/0x10 [ 1455.882762][ T30] ret_from_fork_asm+0x1a/0x30 [ 1455.887551][ T30] [ 1455.890911][ T30] Kernel Offset: disabled [ 1455.895249][ T30] Rebooting in 86400 seconds..