last executing test programs: 4.621008816s ago: executing program 0 (id=2611): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(0x6, 0x82, 0x80000000, 0xffffffffffffffff, 0x7) mremap$auto(0x9, 0xfee0, 0x3fd6, 0x3, 0xfffff000) getsockopt$auto(0x3, 0x3, 0x7, 0xfffffffffffffffe, 0xfffffffffffffffd) socket(0x21, 0x2, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x2, 0x5, 0x0) setresgid$auto(0x9, 0x100000001, 0x6) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x405, 0x8000) close_range$auto(0x0, 0x1ff, 0x840) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid_for_children\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/mnt\x00') mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x7, 0x1000000004, 0x9b72, 0x2, 0x800000008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clone$auto(0x6, 0x401, 0xffffffffffffffff, 0xfffffffffffffffc, 0xa31b) mlock$auto(0x81, 0xffff) io_uring_setup$auto(0x6, 0x0) socket(0x29, 0x1, 0x4) getsockname$auto(0x3, 0x0, 0x0) mmap$auto(0xffffffffffffffff, 0x8, 0x1000000004, 0x9b79, 0x2, 0x7fff) open(&(0x7f0000000040)='./cgroup\x00', 0x593002, 0x408) mmap$auto(0x0, 0x8, 0xdf, 0x29b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) shmctl$auto(0x2, 0x9, 0x0) 4.34099405s ago: executing program 1 (id=2613): mmap$auto(0x0, 0x9, 0x2, 0x9b72, 0x5, 0x0) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x2, 0x0, 0x9) set_mempolicy$auto(0x2, &(0x7f0000000080)=0x7e, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x2, 0x0) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) epoll_ctl$auto(0x7f, 0x7, 0x5, 0xfffffffffffffffe) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mlock2$auto(0x1, 0x8001, 0x0) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) mmap$auto(0x80000001, 0x8, 0xdd, 0x9b72, 0x1, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000000)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x0) syz_genetlink_get_family_id$auto_ovs_flow(0xfffffffffffffffe, 0xffffffffffffffff) readv$auto(0x3, &(0x7f00000000c0)={&(0x7f0000000040), 0x8}, 0x400) keyctl$auto(0x5, 0xfffffffd, 0x8, 0x1, 0xb8b) mmap$auto(0x8, 0x7, 0x2, 0x11, 0xd, 0x7f) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mseal$auto(0x1ffff000, 0x7dda, 0x0) munmap$auto(0x20001000, 0x2000000c) semctl$auto(0x1ff, 0x2, 0x13, 0x1) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 3.582034614s ago: executing program 2 (id=2617): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) socket(0xa, 0x2, 0x0) (async, rerun: 64) setsockopt$auto(0x400000000000003, 0x29, 0x46, 0xffffffffffffffff, 0x3) (rerun: 64) mmap$auto(0x0, 0x8, 0x72, 0x8b72, 0x8f1, 0x8000) socket(0x23, 0x5, 0x0) (async) write$auto(0x3, 0x0, 0x81) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000400), r0) sendmsg$auto_NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01002cbd7000fcdbdf25060005000400bf01110036011ad0c22dfd2d636da1990dc87f00000011009d0057626a1d9034d213fe4ce6975700000005001981"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x4000042) mount$auto(0x0, &(0x7f0000000180)='/\x00', 0x0, 0x7fffffff, 0x0) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40040021}, 0x8011) socket(0xa, 0x6, 0x0) (async) connect$auto(0x4, &(0x7f0000000140)={0xa, @sa_data_min="c4000000000000ab3100"}, 0x55) recvfrom$auto(0x3, 0x0, 0x800000000e, 0xfe, 0x0, 0xfffffffffffffffd) (async) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x40000000006, 0x7fffffffffffffff, 0x4000000000df, 0x3ff, 0x402, 0x300000000003) 3.242246838s ago: executing program 1 (id=2618): ioctl$auto(0xc8, 0x400454ce, 0x5c8d) ioctl$auto(0x7fffffff, 0x796, 0x5) ioctl$auto(0xc8, 0x400454ce, 0x5c8d) (async) ioctl$auto(0x7fffffff, 0x796, 0x5) (async) 3.036992602s ago: executing program 1 (id=2619): syslog$auto(0x4, &(0x7f0000001100)='{#{\x00', 0xc18e) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0x2, 0x1, 0x106) dup2$auto(0x0, 0x3) madvise$auto(0x0, 0xffffffffffff0005, 0x19) clone$auto(0xffffffffffffffff, 0x1, &(0x7f0000000040)=0x1, &(0x7f0000000080)=0x8, 0x3) mbind$auto(0xf000, 0x1, 0x1, 0x0, 0x7fff, 0x2) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0xac74, 0x101, &(0x7f00000000c0)=0xfffffffc, &(0x7f0000000100)=0x101, 0x5) dup$auto(0x6) mmap$auto(0x9, 0x3f, 0x7, 0x17, 0x140, 0xce) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000000c40), r0) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r0, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020025bd70007ddbdf250300000006000900430000000400b172"], 0x20}, 0x1, 0x0, 0x0, 0x8040}, 0x80000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 2.849542785s ago: executing program 2 (id=2620): mmap$auto(0x400000000000000, 0x4, 0xdf, 0x9b72, 0x400002, 0x8000) madvise$auto(0xa, 0xffffffffffff0001, 0x15) (async) munlock$auto(0xffffffffffff42b3, 0x29b6) (async) set_mempolicy$auto(0x4006, &(0x7f0000000000)=0xc, 0x7) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) get_mempolicy$auto(0xfffffffffffffffe, 0xfffffffffffffffd, 0x2, 0x0, 0x1) (async, rerun: 32) clone$auto(0x7fffffffffffffff, 0x2e93, &(0x7f0000000000)=0x2, &(0x7f0000000040)=0x3, 0xf3) (rerun: 32) 2.592884572s ago: executing program 2 (id=2622): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) (async) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) open(0x0, 0xc00, 0xa8) r0 = socket(0x2, 0x3, 0x6) sendmsg$auto_MAC802154_HWSIM_CMD_SET_EDGE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x4000000}, 0x4081) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) fchmodat$auto(0x800, 0xfffffffffffffffd, 0x6) shmget$auto(0xffffffffffffffff, 0xb0d, 0xa7db6ba) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x65, 0x2) (async) fanotify_init$auto(0x65, 0x2) mmap$auto(0x0, 0x9, 0x72, 0x8b72, 0x2, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x8) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x8) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') statx$auto(0x1, 0x0, 0x1000, 0x4, 0x0) io_uring_setup$auto(0x48, 0x0) (async) io_uring_setup$auto(0x48, 0x0) io_uring_register$auto(0x100000001, 0x12, 0xffffffffffffffff, 0x8) (async) io_uring_register$auto(0x100000001, 0x12, 0xffffffffffffffff, 0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000280), r1) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) timerfd_gettime$auto(0x9, 0x0) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000100), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f0000000180), r1) sendmsg$auto_HWSIM_CMD_FRAME(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="020028bd7000fedbdf25020000000a0007004503016ede01000009001a0017afa1f16900000008000c0008000000"], 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x2000c004) fanotify_mark$auto(0x1, 0x56d, 0x0, 0x8, 0xfffffffffffffffc) 2.580719157s ago: executing program 1 (id=2623): mmap$auto(0x2, 0x20009, 0x9, 0xeb1, 0x401, 0x7fff) setrlimit$auto(0x1000000007, 0x0) bpf$auto(0x8000000000000020, 0xffffffffffffffff, 0x0) r0 = socket(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_virt_wifi\x00'}) r1 = socket(0xf, 0x3, 0x2) syz_genetlink_get_family_id$auto_handshake(&(0x7f0000000040), r1) ioperm$auto(0x3, 0x5, 0x149) io_cancel$auto(0x935, 0xffffffffffffffff, 0xffffffffffffffff) socket(0xf, 0x3, 0x2) close_range$auto(0x80000000, 0x81, 0x20) syz_genetlink_get_family_id$auto_802_15_4_MAC(&(0x7f0000002280), 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mprotect$auto(0x1ffff000, 0x8007, 0x8000) 2.506555893s ago: executing program 0 (id=2625): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x0, 0x7ffffffffffffffc, 0xc) mremap$auto(0x80, 0xffffffff, 0x3fd6, 0x2000003, 0x9) mmap$auto(0x0, 0x20009, 0x68cb, 0xeb1, 0x401, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x89b1, &(0x7f0000000040)={'nicvf0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_TIPCv2(&(0x7f0000000340), r1) sendmsg$auto_TIPC_NL_KEY_FLUSH(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000003780)=ANY=[@ANYBLOB="90110000610d6f85aed82c94cebf18edd581f3ec5f4c2f8147a65d1ba10d30abc49ddc7e82d6bf4ba2dec8dbfdde34efec2131290bec63802da6dbc73a7bd2cc9b58d8e344d23dde05968a77b0b46086ffac5367bedf6601caa989d2800b16f53f5844319c1feb3aefd7122c73", @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf2518000000120006004c89800e894c1b989101992b834d0000460004005539cb12f4e85060c1026fa6d6ee41c9f7a95cd8e4ce87edeadbf836550aac5c63b377ed98284683b3550ef603fe43f6d005b1468259ed7807c2ef1f0a4d626867bd00003200030033874bfe5c058e1dc31e632c1dc28b985041057bd06f646599e5008324861642036431786786499fe2a3be4590540000410000007b51970eac9de777fd8ac2eecebe61effa0126dc0df9238d9552db6b7593f5f464b7c65616b55a7b43f275636ec42ecd6e9af538067802a1b08c4b77220000009f0003009c11eab5636aa84f0962e01ffac94b9bdd2011c927dcaefbf9d222618e046b04c1e253dc354ae12e804e41973e8d05fdfbf92318ce9ab899f33db2022c5cad77903dd70b3592b95c1451e8282588258055cb9ea5a7f4369bab480c2aad25314533ae78c327821164fe747a1429af25b7ac5b298041d43957b1cf9cab6812518afff551b40e6baacb6e5ac8ba4b4cac60a0aeb9033a6fc68954f80b0004100800d54c7edf1893a4ca6cd869504c4a58d757719e2f9ac111fd54a38027b46cb556192a47ee9592721ff7f06cadb04a1cf9f687d0b5557c1d8a0c93d24d0474dcf01f66028b68d822c2b67fcf51b18050c701b42faa4a9d55f9e2ed67b373eee403542c2fc5f165b4c891c11102f852c46b599560a2d9d3468089dde6cea5d544ac29d2904317fcb62a0ef8de9b0de359ab97a408566781f496054f10dde5718e56d9cd6340163bd3a2f76f1790f43393969b7830b8c0db80f7a01e8ded121231e76ee5cf6a946f09955ec1a0339b6760e59ed30d42d98f8d4b982fa1232e63f5bc71d1d111d3e326b714d5b3af24f6af2da413d05071736b7147cdd15532673da0a1d3294c376220c078b0aec1fd1c06d38b5a090db49c225b025a68891af77d71f924af37bb987d4f084f625b481073909abb4c7d599693713a25fe4f576e5c5e676b71af8df7e64b5b0cdecee42715e486776812573ae068f0ab6addeff915384cd519576abc92bc05420efe356f896cb34c5e25433ecb4fbd54f9787886243cbad4ed176ee820d000976633e93e6645465556dec3bb215eea504e176720d842fcf7660bc50e58e2d7ce46b939be565ddec6b83f384d91dd4e53d3cb08e2ccbcdd1f2c86c7b7de7f3b97ee939f58948ad5e7ec9259b47956f7c7295ef34104335acce81ad003b5d444e8728c9ea59c62e901dd03d2aacabeb5ea0d63216dc3c0062e98d9c95913ccbbd6ef6e678c257444e0d814c275de7257865d4ca8751a90957a29c86fa3962481df6762ada78ccf4c6599422caffd34155e6618b5c4546506fe2911ac26042d66732b7652f81fe8aadf8e5a2b5fec784bf81d5f41d701eb30055781a5fc054d4159fcb72748d06caaea05b3197cb9e6608669c36aeac5a396fa3af3b7b55ec3402a01a9c395801bc38b8943938c722d64d2e46ba7c52f85ac48e1bfb7e67ed8debaa2ff97b7e8d9f62ba1b0a81b073ad03e81baa71ec2aa890d8ca9a5ed15229f5f56cb1dcd4d26513ec105590d38675c21659468e305be5d662a048e0fde884ed56237414dec9bd76322509bc599ba2355c558fe2dfc75304d41f43fa64dc22ecc7b0197b5035f3936e759b54a50b4eb49c3018098749459144a6d83cb0a3c33f7baf8b3095ab864a2bd0257fcee2e53220396c6a364fda11d766c255367120ac90e8a0e65f2f879d64f9b8417984bfa37c95dde8f98c0bcd42cc5bd4b1f6429f9ba1b7c47aa8d463a130b1ec85707a7a9e316afa5b9ca905922c04c97cbc235c3e1b2d4de7b605fe37894894a2699e83f7958181ff3e886353b173b7ad7ce3943a1c992bdaab6fd145b39fa984f6e84499792f9acef35af10820c6d3ad80d7cdf3cb729318a75f6e733cfe8703cd37799d8ce52420908fb3f5530ed7ade38ffc3554fd2cf284b14b445eec0b06ec9d89dedc9571a8fe8933e6fe85ff4a871896a0eff17548ada3ce88c7a41d1839c15019883e46471e17e65bcae1093ca8b4cd9dc635a15234a7b46a6a421fd2101035c56ad39b83cb5854cbc8d060cd13317c6aea13b62054dff7f214917f0121cfc172d2ff8d126f82712af19f598e45421eaa530ea0403dda094e8ee3b9bbe76eb8646639097d840086f0282afb5edd8e70f0b90be3b74062f2a9c4e704acce1219bdb97762844815f88f424ba8e788d0c13b6cb5137089dc7158f667627f322c757a3e3a194a9dabb55960035ffe590c78000bfdac9199a1fb4c39c8826203893e6a2a7a2efd4217031daea8547337dfd78439b63d25dcc948583e9bc60a7430be42ffc150155d594f573fcd53e894c837b9c848140f3851434ee1704672e78af0b24b61dd9fe13e7c892316757f323fb6bcdb650328ac31f406b16bc48fb27adb16e45465fd481b0a64a35b3008570d7669497fa26531319a89d5853a0c7f488dc1faccf37d8369a417361ef64b241e97719c4e5fb305f2e0e6b6464454dcf9de5ec26c95f985df1eb026cba45d8f16ea67ffa6ceb4f3ce2c5725a7e9de441faeaa5d13322391624a597c2a2d75cd6aa2f26e9fc6821bd58af24793c53da72c4d671945be9f7c571f3db4cb2958c1c1c8173202b4b21f014ce61b4c98c078d39aa97af649394a9f34275103353e956fb759976851d503305e8c56435ace01cbc77d15bbb56bae402d09cbe64942ee186adaec1babfb753e9ef2f6d9524ac0d951b0d95317175a39596415b51dc74ab57ebc24ee7a84ef5fb1b987ba2a42a6bbcd4391ff85a3a8503757059909b81fbeb030140156fabe835f6950ae522ca5e0ec430ecb1890fe6528891fd4cfb11505f97db36015912141e27bbb5327300c84381fbfd2957dcafc4ebbc7cf82ed199a97a49463ceca914a3988f2469dc47dc4ec453b9b2a8a0d5899f52786650d1fb07a98ce134396f399546efaeb2b5f359eed75f1ebb226148d008c8191220a7fc5c6a065c995ec7985a5ae216e8700b78a362e403b7038b295f17511069b665ee9c453b56ebd99ac3d38f90e55aff340af2d70c0f9fca9fb0bcfa0d80f3ad39ed2f72432293c4f482fa913612e657b6f5382a914f55639a73a880f0646d7bb5748e96dbe85f4a0b95575933c98272150892fa93653dbccabf26d6051dc2d62128e3ff709df25627cf0a865e2db938de8ddf1a0016426a4440dea9f36a486e6f4ed9ab48b22ca50f231b409f95647b73c05c834df90fff6df9ddb158230c2696fc3310374c30b31bfcef2f0179c5f4557f4b17bf90a6116d5abaeece4325ef4c1e42e25b4edf05bcba7d27f7a6182e4559d726565b190c6f0a7a09a7de1365f6ddd0079c441aec8290563b6d2c5f5ff044e24891d0bb31bbb9845cc79c5bc062791e225d51ee07406eeed271d0ae4df860d942166f7825f0be696b5133bcb7d6df3a19c10978c087f75fe1734ad3cd1ffec3a0079e0c8b896675d5dee8a87374d376ab4abc9b7753af420934baf17408ef1f2646407cf4f4ffd7cd6a671d6cc9117d2b7119828ef0cfa8eb3b3bcaa3f2dea0b55a2bf4ad3b299fa745c2c1e719653a8edcbad6fabd2e300d16888ef57c056ae7407a23a148a5ba5c9cf172d927cbac1fd135a15ef46914752dfbc8379152d16d3030a66a391e716088921446ef40824c58d50051f9a3504ff9b465ef4d5be273ce0dd7efec0e420e2444a1297fa4f0b25c57b52b218e3136bed951142e3a5fcc05c59cf79c467b13b8655a31f899bf2b8fcebc65465f5113803178a29cb03d72db0ffa8fdcc90d414ad7207f49ff0965234ba8e85e8504581904e8b010c4b79a387c2cda0858ff27fa856a7ac97c68cafda0fdd323e3c158ebc659b4eb17365baf01c027a0b3c6931a9e715763a5345a7c321a16b8c88f68b2c5665277bce88a3b10e3223eacc9b66c2ee803902251e4d7eeefe82f35bad6b92c1a78dd528fccdd311e706d66ae2072840344690a9b45cfa0c52f37a0feee261f6487e2b9c53f840ff26b1d1b3f1a93efd2e9607551410a2286cd3a44a5cf8d42caf2d4cf5b82639b3f4492d84c43ba4223d43e27062b25fbb3e713074fe2a388c015eadb283eac6c572325ff408a5acaffe710614b96193579b7f38b767d8d7d59b0b044b17fbb35df2abf014e1f57a620c5c1de9399c0bb15b74a59f005e7630665d8202660c13c5718f2d98fab372d6adf8ee1cc53df5369ae6a5f946c545ae55bbfabc5fa9ab8d2b98da83f88f44786bb2d0a3993ac9e0900958f863763c8ec69b73ce74bc9f5570ad42133e19b6f7c3d32b1d5a993b4d06b199d8d3d003ffb080154c35983e479784fa50a99bf629f8e4c53feda8878a97220b070e3da64f80c338931e2864b94b92f0e6d6955448c2d9960e53659079ee23bc5077a555d93c4c8002aac6cfecfc2f7d9ebeb924f29e4580f5d373d3995fd73c2e663cb49389fd9a80e47a5499dfc8ccd64ecd41562e7e096fafa734dca4c8c3a756d8522029139e2ce7bc7bfa0b3d564ebff0fa1c449f133900954bb87d9cd0f5147d3bc956e20a35262a798aa01c68d67154a898d8509c9d382b7766779a6240f4d8588419819edadd1197b4a05f4e5734cd2ae8bdef47fd754c8561d1918debbc0ba6ce9236c6b7c15a2a72ee5caa2d1d10f84473568c1a20a9672deb590d97a4de684208c01e94c0d26bf8ed9c319c588c36abac5856a1ec0fa80b79d5b10fdf55f18168ba582afaddc48a04a26e6438a824cbb5cb168e3ad14a0614c82be77202ebc9703e981ea21473c29dd8e047b73a83e6124e719e5029a5ce7fef7b1b0a517acc80636e7db3b695caa036422e358e7cf8da1aa75eedde76a78d49c8bbb8b0c389d44a1a6d67f0a65b9e867cc54085d570c62068b23d99d4e8ddaf77b347941da9498184cb6f3a493001ab11a530b8af691d49526ce775d5b7fbd09166f0b9e0a9e776031077fef0e9a8c78e7ae6918857051fa6484c60793323e916b6200ca2b5f3c22a5fe928aa781dc1a67fe1266da31aa02ff053dd0b75e783ebba8b83415e920568e216347ee8ad18e1f85b27a5164ae6dcd3d2b608f6df938578619e3a8c67a704a64b878cd3a44459b99f13de6d44495df155c4ce54935d9ac1da7526eb5739998b3ada36caa366eb6a01290aaf9c9b5bf2b7ed518a8427b1c417cb3a4466378aa7268e614d536a4024b6f07b73b145a34c263b412cecab3d406bebce0dbc02bdb5874297c24a7e30af411d0996636a487dd2f86a847f4ae6f46aa66f01cd463303890d76d1084b4e366c7c96bbeeca77583f42c3a9174dc977d1e54c2966b7ca36d74c0fa570c8b6e02442100f27f0e5b2c7acdb95a26c6ed54338c1a16aa34c9e04b86a74608a37c6a72a18e755070b3af524e12804fec6bafd2cffc48514e5461add57ab82405a6d0f241c29af3e92911d9daae6731f59e6d0a3abbea7e9b1b9f56a6ab9562deaba458c86e87bafa489e2d0f96e65323015c535e260940af12f4b7037aca13d8aa7d2c2b9aa41e343ba34a2081223a10e9038797b037fab201cd513d64f16b5c40a404e76e69cbce966a6de99eb13147a1f8aa881d42e1960ae29eac545cf5b0f75e880a783c8c280e896d148bc9a7665a2b22cd679c50b88ea8246caf85d6f82ae3efe9c81403ee4833d3ecbf6c073665887d739172f4d482b0ed50d73df596c0f064eee16440e16b8155de39cff49747f90f7dbe449325e5db36e086a1c2f21bf6b18b987d1c3557a27d9914823e83d7f6ac4c35278d9d26a654e64f2c31693f7639c961d1dd771cccbf085538c23a75b16efce039fb25f0a900e8743be018a308858fab0de4e320e1a6ead8ea26ce41ac6e8428abaa60f8da29d4907300ba2213c22e8fd10b3fb54fc56e62f309ce8063b24214bafaad569eeb39aa52b059959b7ed8fc5fa4c8ef2c2ee1ab5d2ac3e25a87adade9da16324fe33a23e3f6cde19335915c61d8c0ab662e84f58936a1ce9eb0f7bfebd525dcbc2cd9bfc2385d076dbbcdc630520fe30c7d3c14f201f23aa696932f2b8dae61b019e7c2f5100982d49035aea6cd2996e665ff1fa1f1ca9c7ead44c9a28f1b39dfabd103e1b2ff8b58caa8e3f5e91a021561de287b503139c65ca2a86ce04d6ee77aeba9993722ea9ebf170a21ce03211ad38e78c308c9e65ecafc5fcd4d81e5908db96061c3303db9d36eee5f4857516b77ba429b02cd6cd794a0a55541adc36b674e30e18da339b44dfdf9791c5d104a293b54e05f6c69f4e3bf76e12060a163253f2786f8af9f72a574dd07a324be30789aa1db484fc79fd639c27afbbf6746d2d9760e3cd56804000800"], 0x1190}, 0x1, 0x0, 0x0, 0x20008882}, 0x40044) sendmsg$auto_TIPC_NL_PUBL_GET(r0, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000040)={0x20c, r2, 0x400, 0x70bd2b, 0x25dfdbff, {}, [@TIPC_NLA_UNSPEC={0x33, 0x0, "4b09b7c79d3b03dc330df3208a1c602b5fff87aa305d6ddd6ec16d77fb45a4dc0887fd717f883020a275c0d018fac4"}, @TIPC_NLA_NET={0x8e, 0x7, "07e386def95ea583a7f067fd389909c7964fb6fc94011be3dd4b573660d374860f266333f36babaa7590e190cc79811ee5947d710de248a5998b40bc04cc2e3426b7ffca3a81e2cad15c88a3edb7f62ee5f2a785f435db723289dec02f667eeb46e04afd33d333b4f20f2c65c94b9312d5d1b31f465fcb0d62ab0c0a18a2c0e0122f21031d08f11d7fc8"}, @TIPC_NLA_MON={0x45, 0x9, "a4a138a80af5f9bb5d0f1cc1d10abc37c557a399990d757bf0de0798825942b820162746908068cefc806905ebc505f01289221e048b117d0095b14834c252cae2"}, @TIPC_NLA_BEARER={0xe9, 0x1, "22cb1ede53fd1cecdb8e99304bb6e6c683c98c590817c99165a8235ce3a5bc8e1fd75fd8839c88e2f5bdcd8dfc9d9716cdd8db206ba218bdf3d4daa133d2d6c717f1f0cc3cb899a7a3d3b912d90e8a1f92cc369d468b38aab32565d70e694ff0186e7768329b086fe0232b0916ebb2525486433eb3f3785d53e8303e1dfb0e7045842f3263e6cebec4a54316a9f8e25cbb03bc229202140d16db66e16161ac9af6151d959a979dfb1976e9a2dacad9d585fa57e18b9f424e2e5e803827d02461577576b1f7111a8f059e631a3310165e50e7f14035d882633b6767680f1b131f594ab8eb0f"}]}, 0x20c}, 0x1, 0x0, 0x0, 0x20844}, 0x6f90d0103122443) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000003c0), r1) ioctl$auto(0xc8, 0x401054d5, 0x5c8d) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) socket(0xa, 0x801, 0x106) setsockopt$auto(0x3, 0x0, 0x1, 0x0, 0x9) listen$auto(0x3, 0x81) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000380), r0) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r3, &(0x7f0000000440)={&(0x7f0000000300), 0xc, &(0x7f0000000400)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000e5581e1c27a15e4b73a9b2ef00", @ANYRES16=r4, @ANYBLOB="00032abd7000ffdbdf251c000000070001002e143c230700010007200200070001004b7fef00070001007ed7bc5bf28265769b1d3d3e99d400070001007f036500"], 0x3c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000) 2.23281169s ago: executing program 1 (id=2627): rseq$auto(&(0x7f0000000000)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x7ffe, 0x0, 0x6) (async, rerun: 64) mmap$auto(0x0, 0x400008, 0xdb, 0x18, 0x5, 0x2) (rerun: 64) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) kcmp$auto(0x1, 0xfffffffe, 0x6, 0x5, 0xffffffffffffffff) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$auto_MAC80211_HWSIM(&(0x7f00000020c0), 0xffffffffffffffff) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async, rerun: 32) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/uts\x00') (rerun: 32) ioctl$NS_GET_PARENT(r3, 0xc0189436, 0x20000000) (async, rerun: 64) sendmsg$auto_HWSIM_CMD_TX_INFO_FRAME(r1, &(0x7f0000003180)={0x0, 0x0, &(0x7f0000003140)={&(0x7f0000000180)=ANY=[@ANYBLOB="25a8b7ceb793aa1eb93bb3aba409e0c21c000000", @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf250300000007000b00263a5d00"], 0x1c}, 0x1, 0x0, 0x0, 0x4000400}, 0x8000) (rerun: 64) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) socket(0x2b, 0x1, 0x1) (async) syz_genetlink_get_family_id$auto_ila(&(0x7f0000000100), r0) mseal$auto(0x1ffff000, 0x7dda, 0x0) setsockopt$auto(0x8000, 0xffffffd9, 0x8001, &(0x7f0000000140)='ila\x00', 0x4) 2.128991603s ago: executing program 2 (id=2629): socket(0xa, 0x6, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) ioctl$auto(0x3, 0x80000541b, 0x38) (async) ioctl$auto(0x3, 0x80000541b, 0x38) ioperm$auto(0x7, 0x6, 0x4000000000002) io_pgetevents$auto(0xffff, 0x2, 0xfffffffffffff000, 0x0, 0x0, 0x0) (async) io_pgetevents$auto(0xffff, 0x2, 0xfffffffffffff000, 0x0, 0x0, 0x0) close_range$auto(0x0, 0x1, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) r0 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0xc}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x3}, @OVS_DP_ATTR_NAME={0x7, 0x1, '@]\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) (async) sendmsg$auto_OVS_DP_CMD_DEL(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000340)={0x2c, r0, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@OVS_DP_ATTR_UPCALL_PID={0x8, 0x2, 0xc}, @OVS_DP_ATTR_MASKS_CACHE_SIZE={0x8, 0x7, 0x3}, @OVS_DP_ATTR_NAME={0x7, 0x1, '@]\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20040011}, 0x20000000) socket(0x26, 0x80805, 0x0) (async) socket(0x26, 0x80805, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f00000000c0)='ns/pid\x00') open(&(0x7f0000000000)='./file0\x00', 0x4242, 0xe1d2b27bdc14aabc) open(&(0x7f0000000140)='./cgroup\x00', 0xc00, 0x0) fanotify_mark$auto(0x0, 0x1, 0x9, 0x4, 0x0) open(&(0x7f00000003c0)='./cgroup\x00', 0x8000, 0xb0) fchown$auto(0x5, 0x8, 0x3) 1.780185448s ago: executing program 2 (id=2632): mmap$auto(0x0, 0xede8, 0xdf, 0x9b72, 0x5, 0x28000) poll$auto(&(0x7f0000000000)={0xffff, 0x7f, 0xd}, 0xffffff7f, 0xffffffff) ioprio_set$auto(0x2, 0x800000000, 0x8) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x8001, 0x5, 0xffffffffffffffff, 0xfffffffffffffffc, 0x6) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) poll$auto(&(0x7f0000000040)={0x8, 0x7df, 0x3929}, 0x5, 0x6) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x61, 0x100001000000004, 0xfa31, 0x400, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x8003fd6, 0x3, 0x7fffffffb000) mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) 1.778043178s ago: executing program 0 (id=2634): close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) pidfd_open$auto(0x1, 0x0) socket(0x10, 0x3, 0x6) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0x25, 0x1, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x6) (async) socket(0x1d, 0x2, 0x6) iopl$auto(0x3) (async) iopl$auto(0x3) tee$auto(0x32c8, 0x7, 0x0, 0x5) bind$auto(0x7, &(0x7f00000002c0)={0x1d, @sockaddr_1_1={"f3c4f9e137ba79c8"}}, 0x3e) 1.618459844s ago: executing program 3 (id=2635): close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_restrict_self$auto(0x2, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') fcntl$auto(0x2, 0x4, 0x2150fd80) ioctl$NS_GET_PARENT(r0, 0xb701, 0x0) socket(0x1d, 0x2, 0x7) write$auto(0x3, 0x0, 0x81) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) landlock_restrict_self$auto(0x2, 0x0) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/cgroup\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') (async) fcntl$auto(0x2, 0x4, 0x2150fd80) (async) ioctl$NS_GET_PARENT(r0, 0xb701, 0x0) (async) socket(0x1d, 0x2, 0x7) (async) write$auto(0x3, 0x0, 0x81) (async) 1.528970867s ago: executing program 0 (id=2636): madvise$auto(0x0, 0x2000040080000004, 0xe) syz_genetlink_get_family_id$auto_IPVS(&(0x7f0000002240), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x2, 0x3) setsockopt$auto(0x4, 0x88, 0x66, &(0x7f0000000000)='!/*:(*\'\x00', 0xe) setuid$auto(0x0) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) socket(0x2, 0x6, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) madvise$auto(0x0, 0x1000, 0x13) setsockopt$auto(0x3, 0x0, 0x11, 0x0, 0x10d) madvise$auto(0x1ffff000, 0x208000000010001, 0x8) 1.487035576s ago: executing program 3 (id=2637): r0 = socket$nl_generic(0x10, 0x3, 0x10) setuid$auto(0x800000000008) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) syz_genetlink_get_family_id$auto_gtp(0x0, 0xffffffffffffffff) socket(0xa, 0x2, 0x73) setsockopt$auto(0x4, 0x29, 0x1a, 0x0, 0x200577) move_mount$auto(0xf, 0xffffffffffffffff, 0xd, 0xfffffffffffffffc, 0xd976) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) ioctl$auto(0x3, 0x541b, 0xfffffffffffff4e0) ioprio_set$auto(0x10000, 0x8, 0x3436) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000002500), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_SET(r0, &(0x7f00000025c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRESOCT=r1, @ANYRES16=r1, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x20) munmap$auto(0x0, 0xfffffffffffffffd) 1.256099425s ago: executing program 3 (id=2638): syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000040), 0xffffffffffffffff) mmap$auto(0x0, 0x8, 0x3, 0x9b72, 0xffffffffffffffff, 0x8000) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/pid\x00') recvmmsg$auto(0x5, 0xfffffffffffffffe, 0x7, 0x1563, 0xfffffffffffffffc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0x23, 0x80805, 0x0) prctl$auto(0x1, 0x2, 0x38, 0x3bc, 0x1) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) syz_genetlink_get_family_id$auto_IPVS(0x0, 0xffffffffffffffff) fchmodat$auto(0x2, &(0x7f0000000140)='/\x00', 0x2) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe2$auto(0x0, 0x80) listen$auto(0x3, 0x83) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x82099, 0xe9e, 0x7, 0x15, 0xffd, 0x100000001, 0x4, 0xf, 0x0, 0x0, 0xe, 0x3, 0x101, 0xff, 0x2, 0x80000001]}, 0x0, 0x0) mmap$auto(0xf000, 0x8, 0x1000000003, 0x9b72, 0x2, 0x8000) ioctl$auto(0xc8, 0xffffffff800454cf, 0x5c8d) mmap$auto(0x0, 0x1e9a, 0x3, 0xfb1, 0xfffffffffffffffb, 0x8000) mincore$auto(0x0, 0x8000000000005a, 0x0) mkdir$auto(0x0, 0x40) remap_file_pages$auto(0xfffffffffffffff7, 0x2, 0x10000000, 0x58, 0x5) access$auto(0x0, 0x0) 1.073564976s ago: executing program 0 (id=2639): r0 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0x20000000000eb1, 0xfffffffffffffffa, 0x8000) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) quotactl$auto(0x28000, 0x0, 0x7, 0x0) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) mmap$auto(0xeb, 0x0, 0x3, 0x1b, 0x400, 0x1) clone$auto(0x6, 0x401, 0xffffffffffffffff, 0xfffffffffffffffc, 0xa31b) getpeername$auto(0x3, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001900), r0) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001940)={0x14, r1, 0xd1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x0, 0x2020009, 0x3, 0x20000000000eb1, 0xfffffffffffffffa, 0x8000) (async) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) (async) quotactl$auto(0x28000, 0x0, 0x7, 0x0) (async) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) (async) mmap$auto(0xeb, 0x0, 0x3, 0x1b, 0x400, 0x1) (async) clone$auto(0x6, 0x401, 0xffffffffffffffff, 0xfffffffffffffffc, 0xa31b) (async) getpeername$auto(0x3, 0x0, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000001900), r0) (async) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f0000001980)={&(0x7f0000001940)={0x14, r1, 0xd1, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) (async) 869.451456ms ago: executing program 3 (id=2640): ioprio_set$auto(0x1, 0x0, 0x0) msync$auto(0x1001, 0xffffffffffc, 0x400000004) 692.903864ms ago: executing program 3 (id=2641): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x18, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x4008b100, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL802154_CMD_STOP_BEACONS(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x40, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@NL802154_ATTR_CCA_ED_LEVEL={0x8, 0xe, 0x80}, @NL802154_ATTR_IFNAME={0x14, 0x4, 'wlan1\x00'}, @NL802154_ATTR_TX_POWER={0x8, 0xb, 0x72ed}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xe1}]}, 0x40}, 0x1, 0x0, 0x0, 0x4000040}, 0x8000) r5 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'pim6reg\x00'}) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) io_uring_setup$auto(0x6, 0x0) r6 = socket(0x2b, 0x1, 0x1) connect$auto(0x4, 0x0, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0xa, 0x3, 0x3a) stat$auto(&(0x7f0000000000)='..\x00\x00', 0x0) ioctl$auto(0x1, 0x89a1, 0x8) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL80211_CMD_SET_REG(r7, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYRES16=r2, @ANYBLOB="a4010000e7d11f635de6e9848e815550237ebb59d951e5ed8e429fc53915ff21628dba93104a5bdc73a954433cf60b90ce09bcb4e62c1a24c51943c23a212826a40d84da690594ba8ea710c34375c1e0cc4ad4372e36bae5e1d1eea7bed18eb7367b2b52a0b91efe3abdfe02a8df7f4ea7d4f2be72f40ccfa93fb60ae78b549e2b0563742c73e35de345998f7a88e05c02bc74190432ff200dddc55545ddb57b1e15e03ce943caaa6f42e05c045b2186b48f6688524a78bc", @ANYRESOCT=r2, @ANYRES16=r2], 0x1a4}, 0x1, 0x0, 0x0, 0x845}, 0xfd6b416d1b7ae4ba) r8 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000240), r5) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r6, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000005c0)={0x2e4, r8, 0x308, 0x70bd26, 0x25dfdbfd, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xf7, 0x1, "a690da65197e0b8bf83def9e3e67da7db181d82713625e9ac9a7cd72435592c5f99ea9d9c9ae7e7c4d70f87007101f2dc7a6868fdf60f1567a776573154e0ee5658f31516951f403a398b6d0b8afc4905a7a4ceb1de168b9dead1f327ece6b0b5f1854bc902b38208ebe65792c36e1c6113fb3ef59d261edc640b29e84485c1accf90b3770c9a12d753c67af6c0462138902defaa0c6e7e7e6000c20176dc678934842b7daa2f07df57b44512b1f5aaff638e6d0e730de4dc629c4fef34264a189a97e2f522edfdb11a53ac12772717e56d3961c80b940e6e987df5ca7413b5568610f810e08b307e72d8f1922e58f232e4dae"}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4c, 0x1, "cd4ee02c3504562d38df58b7ddbf9566c4f4950aaff6242f07b41859fbaba9bf06bba513d7c45615425b5256c67ca0c830c340b5d00f4a616be9942565e0dc531cbe7b66e40f955c"}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x1e, 0x1, "907facec9e9e03a1479a3160f8797dc85b6cb6647c181f59ab62"}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x6a, 0x1, "f73a33fd42b13927445d4406e2fe2ff172358ddfc807e6c9f1116c1b2799ae169ee4d1d180a841fc4246e71dd051b48bdc4f9d630bbcf1dfcc191dbd6da1b1892b5ca7e0d96aeba4f5af4e2d2389c84a72c63f3a15e0e355d6da48d8a0efe56a9b4cc8d2a47d"}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x20, 0x1, "733b21d81f921c8dc516c59d77e1ca0009ffde9d867f7902673d0343"}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x85, 0x1, "2e1690cc3d736dce9d03a4036b36f199250244b8a5d1a902b3e994bdb68a2ad074b2601abefda8395d92342d10955d5fb205acb6b473d94356dc022decbe709ec4bf7258fde8b1b5f2a0756fcab9f88268c96f193133a225ab4bb9fb700a8acb7623b2ae24a0dc03d5f648d875977a778508c1995c54a3e4f29c0b2d3aa1f00c2f"}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x45, 0x1, "9743ff21e3061dcf907cac3fe32dfde7d92714919797fcfb878a0590154a44e6cfb72762d17838872245b72f75066e1bba808139466508db4e0a6a67d87bda5ea7"}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0xe, 0x1, "bd4fc1e8d8302cb9664c"}]}, 0x2e4}}, 0x4040014) r9 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$auto_OVS_FLOW_CMD_GET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01df2cbd7000fadbdf27030000000500090004"], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x51b41aab316a9d76) 536.611673ms ago: executing program 3 (id=2642): lsm_get_self_attr$auto(0x3bce, 0x0, 0x0, 0x0) r0 = socket(0x10, 0x2, 0xc) clone$auto(0xb, 0x2cb, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x6, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) lsm_get_self_attr$auto(0x4, &(0x7f00000000c0)={0x8, 0xfff, 0x1, 0x86, "9d66f85da247828001e066a318dc182426a741fc2047c441b8c842a18011affe0061944d8fa745e4146a47e7254fff976d6a047728ff9c1b7cb8c391b11236e79ccbe7e422377ce85ae85342d176eef51b636061a136dc1b84f25bc4828f7b3a729e2e4d320afb6034b9afd163e6d469fe128c2546ec15ca3e6c3de4ed130abdde375d917700"}, &(0x7f0000000200)=0xc1, 0xf0000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x9, 0x1, 0x9, 0x10, 0x8001, 0xfffffffffffffffe) mmap$auto(0xff, 0xffffffffffffffff, 0x6, 0x14, 0x8, 0x7) r1 = socket(0x10, 0x2, 0xc) r2 = syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400", @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf74b51fc800"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4004804) capget$auto(0x0, 0xfffffffffffffffe) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') setns(r3, 0x0) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) lsm_get_self_attr$auto(0x3bce, 0x0, 0x0, 0x0) (async) socket(0x10, 0x2, 0xc) (async) clone$auto(0xb, 0x2cb, &(0x7f0000000000)=0x10001, &(0x7f0000000080)=0x6, 0x3) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) lsm_get_self_attr$auto(0x4, &(0x7f00000000c0)={0x8, 0xfff, 0x1, 0x86, "9d66f85da247828001e066a318dc182426a741fc2047c441b8c842a18011affe0061944d8fa745e4146a47e7254fff976d6a047728ff9c1b7cb8c391b11236e79ccbe7e422377ce85ae85342d176eef51b636061a136dc1b84f25bc4828f7b3a729e2e4d320afb6034b9afd163e6d469fe128c2546ec15ca3e6c3de4ed130abdde375d917700"}, &(0x7f0000000200)=0xc1, 0xf0000000) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) mmap$auto(0x9, 0x1, 0x9, 0x10, 0x8001, 0xfffffffffffffffe) (async) mmap$auto(0xff, 0xffffffffffffffff, 0x6, 0x14, 0x8, 0x7) (async) socket(0x10, 0x2, 0xc) (async) syz_genetlink_get_family_id$auto_ovs_vport(0x0, 0xffffffffffffffff) (async) sendmsg$auto_OVS_VPORT_CMD_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1400", @ANYRES16=r2, @ANYBLOB="010029bd7000fcdbdf74b51fc800"], 0x14}, 0x1, 0x0, 0x0, 0x54}, 0x4004804) (async) capget$auto(0x0, 0xfffffffffffffffe) (async) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x20000000000006, 0x2) (async) madvise$auto(0x0, 0xffffffffffff0005, 0x19) (async) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/ipc\x00') (async) setns(r3, 0x0) (async) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), r0) (async) 353.117883ms ago: executing program 1 (id=2643): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0xffffffff, 0xc, 0x0, 0x0, 0x0, 0x1008) ioctl$auto(0xc8, 0x401054d5, 0x5c8d) 289.015713ms ago: executing program 0 (id=2644): socket(0x18, 0x5, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x1, 0x8, 0x1000000004, 0x11, 0x2, 0x8000) setrlimit$auto(0x1000000007, 0x0) landlock_create_ruleset$auto(&(0x7f00000007c0)={0x1}, 0x8, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) eventfd$auto(0x0) linkat$auto(0x1, 0xfffffffffffffffe, 0x76, 0xffffffffffffffff, 0x400) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x1b, 0x401, 0x2) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) timer_create$auto(0x9, 0x0, 0x0) fanotify_init$auto(0xae71, 0x7) mmap$auto(0xa40, 0x10000, 0xffff, 0x13, 0xe, 0x7fff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) socket(0xa, 0x801, 0x84) fallocate$auto(0x1, 0x40, 0x7, 0x10) 0s ago: executing program 2 (id=2645): close_range$auto(0x0, 0xfffffffffffff000, 0x2) syz_genetlink_get_family_id$auto_nfsd(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x5, 0x0) setsockopt$auto(0x4, 0x0, 0x30, 0xfffffffffffffffe, 0x800000) syz_genetlink_get_family_id$auto_SMC_PNETID(&(0x7f0000000200), 0xffffffffffffffff) kernel console output (not intermixed with test programs): 51.287105][ T9286] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.292325][ T9286] ? __pfx_lock_release+0x10/0x10 [ 251.297370][ T9286] ? fdget+0x176/0x210 [ 251.301456][ T9286] __sys_sendmsg+0x117/0x1f0 [ 251.306056][ T9286] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.311180][ T9286] ? blkcg_maybe_throttle_current+0x646/0xf00 [ 251.317276][ T9286] do_syscall_64+0xcd/0x250 [ 251.321789][ T9286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.327716][ T9286] RIP: 0033:0x7f1cb2d7dff9 [ 251.332161][ T9286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.351783][ T9286] RSP: 002b:00007f1cb3b30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.360222][ T9286] RAX: ffffffffffffffda RBX: 00007f1cb2f35f80 RCX: 00007f1cb2d7dff9 [ 251.368212][ T9286] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000003 [ 251.376192][ T9286] RBP: 00007f1cb2df0296 R08: 0000000000000000 R09: 0000000000000000 [ 251.384176][ T9286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.392146][ T9286] R13: 0000000000000000 R14: 00007f1cb2f35f80 R15: 00007fff8c40b348 [ 251.400135][ T9286] [ 251.469620][ T9286] sysfs: cannot create duplicate filename '/class/ieee80211/ýÿÿÿÿÿÿÿ-œä¾ž6y“Õ¼ŸÜ§ L¨¦÷ k†Áa;«×+™ç.!file1' [ 251.504097][ T9286] CPU: 1 UID: 0 PID: 9286 Comm: syz.2.901 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 251.514413][ T9286] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 251.524498][ T9286] Call Trace: [ 251.527793][ T9286] [ 251.530739][ T9286] dump_stack_lvl+0x16c/0x1f0 [ 251.535462][ T9286] sysfs_warn_dup+0x7f/0xa0 [ 251.540008][ T9286] sysfs_do_create_link_sd+0x124/0x140 [ 251.545505][ T9286] sysfs_create_link+0x61/0xc0 [ 251.550307][ T9286] device_add+0x62e/0x1a70 [ 251.554762][ T9286] ? __pfx_device_add+0x10/0x10 [ 251.559667][ T9286] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 251.565600][ T9286] ? ieee80211_set_bitrate_flags+0x249/0x6a0 [ 251.571620][ T9286] wiphy_register+0x20d7/0x2d30 [ 251.576513][ T9286] ? __pfx_wiphy_register+0x10/0x10 [ 251.581762][ T9286] ieee80211_register_hw+0x2959/0x3fb0 [ 251.587274][ T9286] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 251.593123][ T9286] ? lockdep_init_map_type+0x16d/0x7d0 [ 251.598630][ T9286] ? rcu_is_watching+0x12/0xc0 [ 251.603427][ T9286] ? __hrtimer_init+0x106/0x2c0 [ 251.608330][ T9286] mac80211_hwsim_new_radio+0x2c47/0x56c0 [ 251.614114][ T9286] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 251.620222][ T9286] ? __kmalloc_node_track_caller_noprof+0x22d/0x440 [ 251.626851][ T9286] ? hwsim_new_radio_nl+0x9ff/0x12b0 [ 251.632273][ T9286] hwsim_new_radio_nl+0xb42/0x12b0 [ 251.637440][ T9286] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 251.643036][ T9286] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 251.650447][ T9286] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 251.657867][ T9286] genl_family_rcv_msg_doit+0x202/0x2f0 [ 251.663454][ T9286] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 251.669570][ T9286] ? bpf_lsm_capable+0x9/0x10 [ 251.674278][ T9286] ? security_capable+0x7e/0x260 [ 251.679255][ T9286] ? ns_capable+0xd7/0x110 [ 251.683715][ T9286] genl_rcv_msg+0x565/0x800 [ 251.688256][ T9286] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.693315][ T9286] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 251.698938][ T9286] netlink_rcv_skb+0x165/0x410 [ 251.703728][ T9286] ? __pfx_genl_rcv_msg+0x10/0x10 [ 251.708783][ T9286] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 251.714118][ T9286] ? down_read+0xc9/0x330 [ 251.718471][ T9286] ? __pfx_down_read+0x10/0x10 [ 251.723258][ T9286] ? netlink_deliver_tap+0x1ae/0xcf0 [ 251.728582][ T9286] genl_rcv+0x28/0x40 [ 251.732586][ T9286] netlink_unicast+0x53c/0x7f0 [ 251.737405][ T9286] ? __pfx_netlink_unicast+0x10/0x10 [ 251.742810][ T9286] ? __phys_addr_symbol+0x30/0x80 [ 251.747876][ T9286] ? __check_object_size+0x488/0x710 [ 251.753196][ T9286] netlink_sendmsg+0x8b8/0xd70 [ 251.758003][ T9286] ? __pfx_netlink_sendmsg+0x10/0x10 [ 251.763345][ T9286] ____sys_sendmsg+0x9ae/0xb40 [ 251.768156][ T9286] ? copy_msghdr_from_user+0x10b/0x160 [ 251.773668][ T9286] ? __pfx_____sys_sendmsg+0x10/0x10 [ 251.778993][ T9286] ? __pfx___lock_acquire+0x10/0x10 [ 251.784233][ T9286] ___sys_sendmsg+0x135/0x1e0 [ 251.788944][ T9286] ? __pfx____sys_sendmsg+0x10/0x10 [ 251.794191][ T9286] ? __pfx_lock_release+0x10/0x10 [ 251.799269][ T9286] ? fdget+0x176/0x210 [ 251.803378][ T9286] __sys_sendmsg+0x117/0x1f0 [ 251.808007][ T9286] ? __pfx___sys_sendmsg+0x10/0x10 [ 251.813153][ T9286] ? blkcg_maybe_throttle_current+0x646/0xf00 [ 251.819282][ T9286] do_syscall_64+0xcd/0x250 [ 251.823821][ T9286] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 251.829753][ T9286] RIP: 0033:0x7f1cb2d7dff9 [ 251.834193][ T9286] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 251.853830][ T9286] RSP: 002b:00007f1cb3b30038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 251.862273][ T9286] RAX: ffffffffffffffda RBX: 00007f1cb2f35f80 RCX: 00007f1cb2d7dff9 [ 251.870277][ T9286] RDX: 0000000024000054 RSI: 0000000020000000 RDI: 0000000000000003 [ 251.878273][ T9286] RBP: 00007f1cb2df0296 R08: 0000000000000000 R09: 0000000000000000 [ 251.886284][ T9286] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 251.894281][ T9286] R13: 0000000000000000 R14: 00007f1cb2f35f80 R15: 00007fff8c40b348 [ 251.902298][ T9286] [ 255.506484][ T9393] Process accounting resumed [ 255.986235][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.993161][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.030711][ T9415] netlink: 5 bytes leftover after parsing attributes in process `syz.1.934'. [ 256.625775][ T9436] netlink: 'syz.1.940': attribute type 1 has an invalid length. [ 257.408806][ T9455] FAULT_INJECTION: forcing a failure. [ 257.408806][ T9455] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.454024][ T9455] CPU: 0 UID: 0 PID: 9455 Comm: syz.3.944 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 257.464326][ T9455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 257.474408][ T9455] Call Trace: [ 257.477710][ T9455] [ 257.480666][ T9455] dump_stack_lvl+0x16c/0x1f0 [ 257.485378][ T9455] should_fail_ex+0x497/0x5b0 [ 257.490082][ T9455] _copy_from_user+0x30/0xf0 [ 257.494706][ T9455] copy_msghdr_from_user+0x99/0x160 [ 257.499942][ T9455] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 257.505792][ T9455] ? __pfx___lock_acquire+0x10/0x10 [ 257.511031][ T9455] ___sys_sendmsg+0xff/0x1e0 [ 257.515663][ T9455] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.520907][ T9455] ? __pfx_lock_release+0x10/0x10 [ 257.525982][ T9455] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 257.531846][ T9455] ? fdget+0x176/0x210 [ 257.535963][ T9455] __sys_sendmmsg+0x1a1/0x450 [ 257.540679][ T9455] ? __pfx___sys_sendmmsg+0x10/0x10 [ 257.545995][ T9455] ? vfs_write+0x14d/0x1140 [ 257.550629][ T9455] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 257.556649][ T9455] ? fput+0x30/0x390 [ 257.560584][ T9455] ? ksys_write+0x1ad/0x260 [ 257.565114][ T9455] ? __pfx_ksys_write+0x10/0x10 [ 257.570005][ T9455] __x64_sys_sendmmsg+0x9c/0x100 [ 257.574982][ T9455] ? lockdep_hardirqs_on+0x7c/0x110 [ 257.580220][ T9455] do_syscall_64+0xcd/0x250 [ 257.584761][ T9455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.590698][ T9455] RIP: 0033:0x7f59c557dff9 [ 257.595135][ T9455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.614775][ T9455] RSP: 002b:00007f59c63ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 257.623236][ T9455] RAX: ffffffffffffffda RBX: 00007f59c5735f80 RCX: 00007f59c557dff9 [ 257.631237][ T9455] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 257.639233][ T9455] RBP: 00007f59c63ac090 R08: 0000000000000000 R09: 0000000000000000 [ 257.647232][ T9455] R10: 0000000007000038 R11: 0000000000000246 R12: 0000000000000001 [ 257.655223][ T9455] R13: 0000000000000000 R14: 00007f59c5735f80 R15: 00007ffc8a5a00e8 [ 257.663232][ T9455] [ 258.624414][ T9479] netlink: 5 bytes leftover after parsing attributes in process `syz.0.948'. [ 259.160336][ T9493] FAULT_INJECTION: forcing a failure. [ 259.160336][ T9493] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 259.218961][ T9493] CPU: 1 UID: 0 PID: 9493 Comm: syz.3.956 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 259.229267][ T9493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 259.239382][ T9493] Call Trace: [ 259.242680][ T9493] [ 259.245632][ T9493] dump_stack_lvl+0x16c/0x1f0 [ 259.250345][ T9493] should_fail_ex+0x497/0x5b0 [ 259.255052][ T9493] ? fs_reclaim_acquire+0xae/0x160 [ 259.260203][ T9493] should_fail_alloc_page+0xe7/0x130 [ 259.265577][ T9493] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 259.271767][ T9493] __alloc_pages_noprof+0x190/0x25c0 [ 259.277091][ T9493] ? hlock_class+0x4e/0x130 [ 259.281624][ T9493] ? mark_lock+0xb5/0xc60 [ 259.285989][ T9493] ? __pfx_mark_lock+0x10/0x10 [ 259.290778][ T9493] ? __pfx_mark_lock+0x10/0x10 [ 259.295580][ T9493] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 259.301336][ T9493] ? hlock_class+0x4e/0x130 [ 259.305870][ T9493] ? __lock_acquire+0xbdd/0x3ce0 [ 259.310839][ T9493] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 259.316887][ T9493] ? policy_nodemask+0xea/0x4e0 [ 259.321791][ T9493] alloc_pages_mpol_noprof+0x275/0x610 [ 259.327295][ T9493] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 259.333327][ T9493] pte_alloc_one+0x20/0x360 [ 259.337868][ T9493] do_pte_missing+0x1ae0/0x3e50 [ 259.343023][ T9493] __handle_mm_fault+0x100a/0x2a10 [ 259.348175][ T9493] ? __pfx_mt_find+0x10/0x10 [ 259.352793][ T9493] ? __pfx_lock_acquire+0x10/0x10 [ 259.357859][ T9493] ? __pfx___handle_mm_fault+0x10/0x10 [ 259.363371][ T9493] ? find_vma+0xc0/0x140 [ 259.367640][ T9493] ? __pfx_find_vma+0x10/0x10 [ 259.372430][ T9493] handle_mm_fault+0x3fa/0xaa0 [ 259.377231][ T9493] do_user_addr_fault+0x7a3/0x13f0 [ 259.382398][ T9493] exc_page_fault+0x5c/0xc0 [ 259.386930][ T9493] asm_exc_page_fault+0x26/0x30 [ 259.391889][ T9493] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 259.397735][ T9493] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 259.417374][ T9493] RSP: 0018:ffffc900046a79e0 EFLAGS: 00050206 [ 259.423485][ T9493] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000038 [ 259.431484][ T9493] RDX: fffff520008d4f4e RSI: 0000000000000000 RDI: ffffc900046a7a38 [ 259.439480][ T9493] RBP: 0000000000000038 R08: 0000000000000001 R09: fffff520008d4f4d [ 259.447477][ T9493] R10: ffffc900046a7a6f R11: 0000000000000000 R12: 0000000000000038 [ 259.455475][ T9493] R13: ffffc900046a7a38 R14: 0000000000000000 R15: ffffc900046a7a38 [ 259.463494][ T9493] _copy_from_user+0xc6/0xf0 [ 259.468123][ T9493] copy_msghdr_from_user+0x99/0x160 [ 259.473364][ T9493] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 259.479220][ T9493] ? __pfx___lock_acquire+0x10/0x10 [ 259.484462][ T9493] ___sys_sendmsg+0xff/0x1e0 [ 259.489092][ T9493] ? __pfx____sys_sendmsg+0x10/0x10 [ 259.494340][ T9493] ? __pfx_lock_release+0x10/0x10 [ 259.499395][ T9493] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 259.505166][ T9493] ? fdget+0x176/0x210 [ 259.509273][ T9493] __sys_sendmmsg+0x1a1/0x450 [ 259.513997][ T9493] ? __pfx___sys_sendmmsg+0x10/0x10 [ 259.519225][ T9493] ? vfs_write+0x14d/0x1140 [ 259.523785][ T9493] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 259.529813][ T9493] ? fput+0x30/0x390 [ 259.533741][ T9493] ? ksys_write+0x1ad/0x260 [ 259.538271][ T9493] ? __pfx_ksys_write+0x10/0x10 [ 259.543165][ T9493] __x64_sys_sendmmsg+0x9c/0x100 [ 259.548137][ T9493] ? lockdep_hardirqs_on+0x7c/0x110 [ 259.553361][ T9493] do_syscall_64+0xcd/0x250 [ 259.557895][ T9493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.563834][ T9493] RIP: 0033:0x7f59c557dff9 [ 259.568267][ T9493] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.587908][ T9493] RSP: 002b:00007f59c63ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 259.596351][ T9493] RAX: ffffffffffffffda RBX: 00007f59c5735f80 RCX: 00007f59c557dff9 [ 259.604347][ T9493] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 259.612339][ T9493] RBP: 00007f59c63ac090 R08: 0000000000000000 R09: 0000000000000000 [ 259.620445][ T9493] R10: 0000000007000038 R11: 0000000000000246 R12: 0000000000000001 [ 259.628443][ T9493] R13: 0000000000000000 R14: 00007f59c5735f80 R15: 00007ffc8a5a00e8 [ 259.636461][ T9493] [ 260.219612][ T9510] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 260.319720][ T9510] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 262.294405][ T9544] netlink: 5 bytes leftover after parsing attributes in process `syz.2.966'. [ 265.454938][ T9603] netlink: 5 bytes leftover after parsing attributes in process `syz.1.985'. [ 266.848193][ T9625] netlink: 44 bytes leftover after parsing attributes in process `syz.1.988'. [ 270.018189][ T9673] netlink: 5 bytes leftover after parsing attributes in process `syz.2.997'. [ 283.209427][ T9842] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 283.639790][ T9849] can: request_module (can-proto-5) failed. [ 284.126241][ T9849] can: request_module (can-proto-5) failed. [ 287.649807][ T9924] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1063'. [ 289.998547][ T9967] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1075'. [ 290.163209][ T9972] nbd: must specify a size in bytes for the device [ 292.874136][T10017] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1091'. [ 294.759716][T10062] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1107'. [ 296.889133][T10106] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1119'. [ 298.329611][T10145] nbd: must specify a device to reconfigure [ 299.496833][T10168] svc: failed to register nfsdv3 RPC service (errno 111). [ 299.572762][T10168] svc: failed to register nfsaclv3 RPC service (errno 111). [ 299.779628][T10177] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1136'. [ 302.237941][T10238] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1147'. [ 303.578362][T10273] coredump: 238(syz.2.1151): Core dump to core aborted: cannot preserve file permissions [ 304.280264][T10291] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1158'. [ 305.103181][T10303] delete_channel: no stack [ 306.274376][T10323] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1169'. [ 311.563137][T10378] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1181'. [ 317.428139][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.434616][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.864651][T10497] delete_channel: no stack [ 317.869439][T10497] delete_channel: no stack [ 320.584481][T10576] ptrace attach of "./syz-executor exec"[8665] was attempted by "./syz-executor exec"[10576] [ 324.589819][T10675] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1255'. [ 325.083758][ T9669] syz.1.1001 (9669) used greatest stack depth: 18304 bytes left [ 325.625251][T10684] nbd: socks must be embedded in a SOCK_ITEM attr [ 327.037564][ T3031] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.483726][ T3031] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.716636][ T3031] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.908805][ T3031] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.409764][ T3031] bridge_slave_1: left allmulticast mode [ 328.483532][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 328.492590][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 328.500806][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 328.510309][ T3031] bridge_slave_1: left promiscuous mode [ 328.524487][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 328.535926][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 328.543515][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 328.552476][ T3031] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.669519][ T3031] bridge_slave_0: left allmulticast mode [ 328.699155][ T3031] bridge_slave_0: left promiscuous mode [ 328.719635][ T3031] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.114532][ T3031] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.159104][ T3031] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.181113][ T3031] bond0 (unregistering): Released all slaves [ 330.624098][ T5232] Bluetooth: hci2: command tx timeout [ 330.879257][T10725] chnl_net:caif_netlink_parms(): no params data found [ 331.034011][ T3031] hsr_slave_0: left promiscuous mode [ 331.040356][ T3031] hsr_slave_1: left promiscuous mode [ 331.049100][ T3031] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.063941][ T3031] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.078541][ T3031] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.097987][ T3031] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.144657][ T3031] veth1_macvtap: left promiscuous mode [ 331.156946][ T3031] veth0_macvtap: left promiscuous mode [ 331.169596][ T3031] veth1_vlan: left promiscuous mode [ 331.181999][ T3031] veth0_vlan: left promiscuous mode [ 331.298522][T10791] delete_channel: no stack [ 332.681947][ T3031] team0 (unregistering): Port device team_slave_1 removed [ 332.708114][ T5232] Bluetooth: hci2: command tx timeout [ 332.743787][ T3031] team0 (unregistering): Port device team_slave_0 removed [ 333.963674][T10725] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.992901][T10725] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.030437][T10725] bridge_slave_0: entered allmulticast mode [ 334.049168][T10725] bridge_slave_0: entered promiscuous mode [ 334.070818][T10725] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.082578][T10725] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.122617][T10725] bridge_slave_1: entered allmulticast mode [ 334.154872][T10725] bridge_slave_1: entered promiscuous mode [ 334.332349][T10725] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.376585][T10725] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.572559][T10725] team0: Port device team_slave_0 added [ 334.599793][T10725] team0: Port device team_slave_1 added [ 334.783905][ T5232] Bluetooth: hci2: command tx timeout [ 334.855792][T10725] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.862870][T10725] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.922653][T10725] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.956827][T10725] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.971298][T10725] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.043866][T10725] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.350451][T10725] hsr_slave_0: entered promiscuous mode [ 335.387609][T10725] hsr_slave_1: entered promiscuous mode [ 335.410220][T10725] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.426321][T10725] Cannot create hsr debugfs directory [ 336.863908][ T5232] Bluetooth: hci2: command tx timeout [ 338.939653][T10725] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 339.041877][T10725] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 339.229070][T10725] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 339.407435][T10725] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 339.701660][T10725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.762833][T10725] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.791871][ T6672] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.799058][ T6672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.852054][ T6672] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.859235][ T6672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.363164][T10725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.528947][T10725] veth0_vlan: entered promiscuous mode [ 340.552327][T10725] veth1_vlan: entered promiscuous mode [ 340.642599][T10725] veth0_macvtap: entered promiscuous mode [ 340.687577][T10725] veth1_macvtap: entered promiscuous mode [ 340.741636][T10725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.785143][T10725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.810560][T10725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.843873][T10725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.864381][T10725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 340.894796][T10725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 340.927074][T10725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 340.956966][T10725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 340.993942][T10725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.014261][T10725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.045351][T10725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.083864][T10725] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 341.103885][T10725] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 341.135014][T10725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 341.173758][T10725] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.182580][T10725] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.238100][T10725] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.259479][T10725] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 341.533663][ T3031] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.569719][ T3031] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.660146][ T1279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 341.678082][ T1279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 341.941962][T11113] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1336'. [ 343.091012][T11152] netlink: 229 bytes leftover after parsing attributes in process `syz.1.1339'. [ 346.405827][T11268] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1360'. [ 346.434137][T11266] netlink: 25 bytes leftover after parsing attributes in process `syz.2.1360'. [ 350.233908][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 352.452790][T11424] svc: failed to register nfsdv3 RPC service (errno 111). [ 352.537322][T11424] svc: failed to register nfsaclv3 RPC service (errno 111). [ 353.008487][T11424] Process accounting resumed [ 355.505411][T11502] TCP: TCP_TX_DELAY enabled [ 356.526544][T11523] netlink: zone id is out of range [ 356.531709][T11523] netlink: zone id is out of range [ 356.572321][T11523] netlink: zone id is out of range [ 356.595262][T11523] netlink: zone id is out of range [ 356.600426][T11523] netlink: zone id is out of range [ 356.633969][T11523] netlink: zone id is out of range [ 356.650558][T11523] netlink: zone id is out of range [ 356.656440][T11523] netlink: zone id is out of range [ 356.661717][T11523] netlink: zone id is out of range [ 356.667670][T11523] netlink: zone id is out of range [ 360.471827][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 362.525811][T11660] delete_channel: no stack [ 365.556313][T11767] net_ratelimit: 135 callbacks suppressed [ 365.556336][T11767] openvswitch: netlink: Message has 4 unknown bytes. [ 368.569318][T11824] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1492'. [ 368.957577][T11835] delete_channel: no stack [ 368.982806][T11833] delete_channel: no stack [ 375.749385][T11912] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1513'. [ 378.874701][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.881046][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.498760][T11971] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1524'. [ 380.710401][T11632] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.283393][T11632] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.827351][T11632] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.230587][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.243700][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.253047][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.262069][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.267389][T11632] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.284257][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 382.295161][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.972890][T12030] chnl_net:caif_netlink_parms(): no params data found [ 383.444738][T12053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1548'. [ 383.565437][T11632] bridge_slave_1: left allmulticast mode [ 383.578860][T11632] bridge_slave_1: left promiscuous mode [ 383.606697][T11632] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.738713][T11632] bridge_slave_0: left allmulticast mode [ 383.756696][T11632] bridge_slave_0: left promiscuous mode [ 383.762458][T11632] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.384112][ T5232] Bluetooth: hci1: command tx timeout [ 386.463982][ T5232] Bluetooth: hci1: command tx timeout [ 386.584879][T11632] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.699734][T11632] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.786569][T11632] bond0 (unregistering): Released all slaves [ 386.911410][T12030] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.940116][T12030] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.983996][T12030] bridge_slave_0: entered allmulticast mode [ 386.991053][T12030] bridge_slave_0: entered promiscuous mode [ 387.026785][T12030] bridge0: port 2(bridge_slave_1) entered blocking state [ 387.043926][T12030] bridge0: port 2(bridge_slave_1) entered disabled state [ 387.058137][T12030] bridge_slave_1: entered allmulticast mode [ 387.089670][T12030] bridge_slave_1: entered promiscuous mode [ 387.525052][T12030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 387.560838][T12030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 387.902502][T12030] team0: Port device team_slave_0 added [ 388.026096][T12030] team0: Port device team_slave_1 added [ 388.252042][T12030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.281807][T12030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.348455][T12030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.534534][T12030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.544297][ T5232] Bluetooth: hci1: command tx timeout [ 388.551781][T12030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.621076][T12030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.750728][T12030] hsr_slave_0: entered promiscuous mode [ 388.793754][T12030] hsr_slave_1: entered promiscuous mode [ 388.803488][T12030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.821288][T12030] Cannot create hsr debugfs directory [ 389.864955][T12168] could not allocate digest TFM handle [ 390.484003][T11632] hsr_slave_0: left promiscuous mode [ 390.504954][T12191] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1576'. [ 390.594041][T11632] hsr_slave_1: left promiscuous mode [ 390.603371][T11632] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.623863][T11632] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.623979][ T5232] Bluetooth: hci1: command tx timeout [ 390.714636][T11632] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.722094][T11632] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.913938][T11632] veth1_macvtap: left promiscuous mode [ 390.919526][T11632] veth0_macvtap: left promiscuous mode [ 390.944698][T11632] veth1_vlan: left promiscuous mode [ 390.950173][T11632] veth0_vlan: left promiscuous mode [ 392.795962][T11632] team0 (unregistering): Port device team_slave_1 removed [ 392.991197][T11632] team0 (unregistering): Port device team_slave_0 removed [ 394.040550][T12226] FAULT_INJECTION: forcing a failure. [ 394.040550][T12226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 394.090893][T12226] CPU: 1 UID: 0 PID: 12226 Comm: syz.0.1586 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 394.101538][T12226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 394.111790][T12226] Call Trace: [ 394.115092][T12226] [ 394.118042][T12226] dump_stack_lvl+0x16c/0x1f0 [ 394.122753][T12226] should_fail_ex+0x497/0x5b0 [ 394.127459][T12226] _copy_to_user+0x30/0xc0 [ 394.131912][T12226] simple_read_from_buffer+0xd0/0x160 [ 394.136095][T12229] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1587'. [ 394.137295][T12226] proc_fail_nth_read+0x198/0x270 [ 394.151162][T12226] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 394.156740][T12226] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 394.162349][T12226] vfs_read+0x1ce/0xbd0 [ 394.166549][T12226] ? __fget_files+0x23a/0x3f0 [ 394.171260][T12226] ? fdget_pos+0x24c/0x360 [ 394.175697][T12226] ? __pfx_lock_release+0x10/0x10 [ 394.180726][T12226] ? timekeeping_debug_get_ns+0x3e0/0x5b0 [ 394.186446][T12226] ? __pfx_vfs_read+0x10/0x10 [ 394.191133][T12226] ? __pfx___mutex_lock+0x10/0x10 [ 394.196163][T12226] ? __fget_files+0x244/0x3f0 [ 394.200853][T12226] ksys_read+0x12f/0x260 [ 394.205108][T12226] ? __pfx_ksys_read+0x10/0x10 [ 394.209886][T12226] do_syscall_64+0xcd/0x250 [ 394.214391][T12226] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.220295][T12226] RIP: 0033:0x7fa696d7ca3c [ 394.224711][T12226] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 394.244323][T12226] RSP: 002b:00007fa697b11030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 394.252736][T12226] RAX: ffffffffffffffda RBX: 00007fa696f35f80 RCX: 00007fa696d7ca3c [ 394.260704][T12226] RDX: 000000000000000f RSI: 00007fa697b110a0 RDI: 0000000000000006 [ 394.268673][T12226] RBP: 00007fa697b11090 R08: 0000000000000000 R09: 0000000000000000 [ 394.276639][T12226] R10: 0000000000000018 R11: 0000000000000246 R12: 0000000000000001 [ 394.284606][T12226] R13: 0000000000000000 R14: 00007fa696f35f80 R15: 00007ffc2aa3fd28 [ 394.292610][T12226] [ 394.319648][T12030] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 394.363105][T12030] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 394.393052][T12030] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 394.444855][T12030] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 394.653375][T12030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.726770][T12030] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.746631][T11676] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.753731][T11676] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.823439][T11633] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.830612][T11633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 395.055030][T12254] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1592'. [ 395.287272][T12030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.398820][T12030] veth0_vlan: entered promiscuous mode [ 395.433346][T12030] veth1_vlan: entered promiscuous mode [ 395.533620][T12030] veth0_macvtap: entered promiscuous mode [ 395.580256][T12030] veth1_macvtap: entered promiscuous mode [ 395.637029][T12030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.663327][T12030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.686099][T12030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.709921][T12030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.730665][T12030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 395.753938][T12030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.786042][T12030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 395.827737][T12030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.848201][T12030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.858530][T12030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.869365][T12030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.879591][T12030] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.890331][T12030] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.902017][T12030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.912723][T12030] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.921925][T12030] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.930739][T12030] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.939799][T12030] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 396.347158][T11633] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.359534][T11633] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.401266][T11679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.412894][T11679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 397.082310][T12338] svc: failed to register nfsdv3 RPC service (errno 111). [ 397.092163][T12338] svc: failed to register nfsaclv3 RPC service (errno 111). [ 398.441667][T12383] can: request_module (can-proto-3) failed. [ 399.775316][ T6675] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.933239][ T6675] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.109835][ T6675] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.444071][ T6675] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.734714][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 400.752541][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 400.790752][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 400.814110][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 400.826055][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 400.834806][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 400.903373][ T6675] bridge_slave_1: left allmulticast mode [ 400.925175][ T6675] bridge_slave_1: left promiscuous mode [ 400.930958][ T6675] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.044675][ T6675] bridge_slave_0: left allmulticast mode [ 401.050371][ T6675] bridge_slave_0: left promiscuous mode [ 401.074072][ T6675] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.797247][T12434] netlink: 'syz.3.1630': attribute type 11 has an invalid length. [ 402.438696][ T6675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.463698][ T6675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.487359][ T6675] bond0 (unregistering): Released all slaves [ 402.865162][ T54] Bluetooth: hci0: command tx timeout [ 402.902295][T12427] chnl_net:caif_netlink_parms(): no params data found [ 403.272991][ T6675] hsr_slave_0: left promiscuous mode [ 403.294065][ T6675] hsr_slave_1: left promiscuous mode [ 403.324482][ T6675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.346316][ T6675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.382775][ T6675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.390730][ T6675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.427498][ T6675] veth1_macvtap: left promiscuous mode [ 403.433303][ T6675] veth0_macvtap: left promiscuous mode [ 403.439452][ T6675] veth1_vlan: left promiscuous mode [ 403.449229][ T6675] veth0_vlan: left promiscuous mode [ 404.521718][ T6675] team0 (unregistering): Port device team_slave_1 removed [ 404.588402][ T6675] team0 (unregistering): Port device team_slave_0 removed [ 404.955657][ T54] Bluetooth: hci0: command tx timeout [ 405.167782][T12427] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.177540][T12427] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.185168][T12427] bridge_slave_0: entered allmulticast mode [ 405.192245][T12427] bridge_slave_0: entered promiscuous mode [ 405.200286][T12427] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.207437][T12427] bridge0: port 2(bridge_slave_1) entered disabled state [ 405.214688][T12427] bridge_slave_1: entered allmulticast mode [ 405.221693][T12427] bridge_slave_1: entered promiscuous mode [ 405.310495][T12427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 405.351738][T12427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 405.471334][T12427] team0: Port device team_slave_0 added [ 405.513607][T12427] team0: Port device team_slave_1 added [ 405.637547][T12427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 405.663050][T12427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.754592][T12427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 405.786296][T12427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.808465][T12427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 405.873410][T12427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.016747][T12427] hsr_slave_0: entered promiscuous mode [ 406.029711][T12427] hsr_slave_1: entered promiscuous mode [ 407.024767][ T54] Bluetooth: hci0: command tx timeout [ 407.082267][T12427] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 407.121210][T12427] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 407.166802][T12427] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 407.200888][T12427] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 407.365238][T12427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.411589][T12427] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.488774][T11631] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.496026][T11631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.539109][T11631] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.546293][T11631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.675368][T12427] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 407.901099][T12602] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1658'. [ 408.050995][T12427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.223393][T12427] veth0_vlan: entered promiscuous mode [ 408.258480][T12427] veth1_vlan: entered promiscuous mode [ 408.299042][T12427] veth0_macvtap: entered promiscuous mode [ 408.330386][T12427] veth1_macvtap: entered promiscuous mode [ 408.334897][T12611] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1659'. [ 408.398723][T12427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.417713][T12427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.427799][T12427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.438421][T12427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.448322][T12427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 408.458936][T12427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.470459][T12427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 408.480540][T12427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.491115][T12427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.501079][T12427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.511645][T12427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.521512][T12427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 408.532118][T12427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 408.544697][T12427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 408.569281][T12427] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.578197][T12427] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.586968][T12427] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.595737][T12427] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 408.800251][T11679] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.824300][T11679] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 408.906325][T11679] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 408.948502][T11679] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.106866][ T54] Bluetooth: hci0: command tx timeout [ 410.615662][T12686] netlink: 'syz.1.1671': attribute type 11 has an invalid length. [ 412.361073][T12743] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1684'. [ 414.834347][T12781] netlink: 5 bytes leftover after parsing attributes in process `syz.0.1693'. [ 415.506646][T12794] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1696'. [ 417.484197][T12831] svc: failed to register nfsdv3 RPC service (errno 111). [ 417.512027][T12831] svc: failed to register nfsaclv3 RPC service (errno 111). [ 419.609660][T12867] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1721'. [ 421.337310][T12905] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1720'. [ 422.560530][T12935] netlink: 5 bytes leftover after parsing attributes in process `syz.3.1729'. [ 422.914662][T12947] openvswitch: netlink: Key type 8590 is out of range max 32 [ 423.762623][T12963] netlink: zone id is out of range [ 423.780485][T12963] netlink: zone id is out of range [ 423.811451][T12963] netlink: zone id is out of range [ 423.849042][T12963] netlink: zone id is out of range [ 423.886129][T12963] netlink: zone id is out of range [ 423.909501][T12963] netlink: zone id is out of range [ 423.935300][T12963] netlink: zone id is out of range [ 423.940459][T12963] netlink: zone id is out of range [ 423.964193][T12963] netlink: zone id is out of range [ 426.202154][T12991] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1745'. [ 427.156513][T13035] svc: failed to register nfsdv3 RPC service (errno 111). [ 427.179229][T13035] svc: failed to register nfsaclv3 RPC service (errno 111). [ 429.525336][T13083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'. [ 429.554036][T13083] net_ratelimit: 136 callbacks suppressed [ 429.554055][T13083] openvswitch: netlink: Flow key attr not present in new flow. [ 429.653990][T13080] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1765'. [ 429.715823][T13080] openvswitch: netlink: Flow key attr not present in new flow. [ 436.908277][T11631] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.222800][T11631] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.375870][ T5232] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 437.388851][ T5232] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 437.404449][ T5232] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 437.433308][ T5232] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 437.441035][ T5232] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 437.448605][ T5232] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 437.538358][T13253] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1809'. [ 437.589256][T11631] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.836949][T11631] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.084176][T11631] bridge_slave_1: left allmulticast mode [ 438.093816][T11631] bridge_slave_1: left promiscuous mode [ 438.100573][T11631] bridge0: port 2(bridge_slave_1) entered disabled state [ 438.204576][T11631] bridge_slave_0: left allmulticast mode [ 438.210277][T11631] bridge_slave_0: left promiscuous mode [ 438.223031][T11631] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.504349][ T54] Bluetooth: hci1: command tx timeout [ 439.752000][T13300] FAULT_INJECTION: forcing a failure. [ 439.752000][T13300] name failslab, interval 1, probability 0, space 0, times 1 [ 439.793861][T13300] CPU: 0 UID: 0 PID: 13300 Comm: syz.0.1816 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 439.804345][T13300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 439.814420][T13300] Call Trace: [ 439.817714][T13300] [ 439.820658][T13300] dump_stack_lvl+0x16c/0x1f0 [ 439.825370][T13300] should_fail_ex+0x497/0x5b0 [ 439.830066][T13300] ? fs_reclaim_acquire+0xae/0x160 [ 439.835208][T13300] should_failslab+0xc2/0x120 [ 439.839915][T13300] __kmalloc_node_noprof+0xd1/0x440 [ 439.845158][T13300] ? load_msg+0x43/0x470 [ 439.849435][T13300] load_msg+0x43/0x470 [ 439.853542][T13300] do_msgrcv+0x20f/0x1690 [ 439.857906][T13300] ? __pfx_do_msg_fill+0x10/0x10 [ 439.862880][T13300] ? __fget_files+0x244/0x3f0 [ 439.867592][T13300] ? __pfx_do_msgrcv+0x10/0x10 [ 439.872387][T13300] ? fput+0x30/0x390 [ 439.876321][T13300] ? ksys_write+0x1ad/0x260 [ 439.880848][T13300] ? __pfx_ksys_write+0x10/0x10 [ 439.885746][T13300] ? do_syscall_64+0xcd/0x250 [ 439.890448][T13300] do_syscall_64+0xcd/0x250 [ 439.894982][T13300] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 439.900910][T13300] RIP: 0033:0x7f43d377dff9 [ 439.905349][T13300] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 439.924984][T13300] RSP: 002b:00007f43d45f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 439.933424][T13300] RAX: ffffffffffffffda RBX: 00007f43d3935f80 RCX: 00007f43d377dff9 [ 439.941422][T13300] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000004 [ 439.949420][T13300] RBP: 00007f43d45f1090 R08: 000000000000d876 R09: 0000000000000000 [ 439.957420][T13300] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 439.965414][T13300] R13: 0000000000000001 R14: 00007f43d3935f80 R15: 00007ffd3f6f5008 [ 439.973423][T13300] [ 440.137800][T13304] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1817'. [ 440.178142][T11631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 440.236831][T11631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 440.289466][T11631] bond0 (unregistering): Released all slaves [ 440.305564][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.311992][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.618189][T13244] chnl_net:caif_netlink_parms(): no params data found [ 441.404757][T13244] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.411902][T13244] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.444182][T13244] bridge_slave_0: entered allmulticast mode [ 441.464025][T13244] bridge_slave_0: entered promiscuous mode [ 441.504608][T13244] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.536721][T13244] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.561474][T13244] bridge_slave_1: entered allmulticast mode [ 441.569296][T13244] bridge_slave_1: entered promiscuous mode [ 441.583940][ T54] Bluetooth: hci1: command tx timeout [ 442.145996][T13349] FAULT_INJECTION: forcing a failure. [ 442.145996][T13349] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 442.220140][T13349] CPU: 1 UID: 0 PID: 13349 Comm: syz.0.1824 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 442.230613][T13349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 442.240694][T13349] Call Trace: [ 442.243992][T13349] [ 442.246939][T13349] dump_stack_lvl+0x16c/0x1f0 [ 442.251645][T13349] should_fail_ex+0x497/0x5b0 [ 442.256358][T13349] _copy_from_user+0x30/0xf0 [ 442.260973][T13349] load_msg+0x1a1/0x470 [ 442.265160][T13349] do_msgrcv+0x20f/0x1690 [ 442.269521][T13349] ? __pfx_do_msg_fill+0x10/0x10 [ 442.274490][T13349] ? __fget_files+0x244/0x3f0 [ 442.279216][T13349] ? __pfx_do_msgrcv+0x10/0x10 [ 442.283988][T13349] ? fput+0x30/0x390 [ 442.287891][T13349] ? ksys_write+0x1ad/0x260 [ 442.292391][T13349] ? __pfx_ksys_write+0x10/0x10 [ 442.297259][T13349] ? do_syscall_64+0xcd/0x250 [ 442.301938][T13349] do_syscall_64+0xcd/0x250 [ 442.306446][T13349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.312349][T13349] RIP: 0033:0x7f43d377dff9 [ 442.316766][T13349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.336382][T13349] RSP: 002b:00007f43d45f1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000046 [ 442.344892][T13349] RAX: ffffffffffffffda RBX: 00007f43d3935f80 RCX: 00007f43d377dff9 [ 442.352867][T13349] RDX: 0000000000000001 RSI: 00000000200001c0 RDI: 0000000000000004 [ 442.361278][T13349] RBP: 00007f43d45f1090 R08: 000000000000d876 R09: 0000000000000000 [ 442.369253][T13349] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.377224][T13349] R13: 0000000000000001 R14: 00007f43d3935f80 R15: 00007ffd3f6f5008 [ 442.385215][T13349] [ 442.441306][T11631] hsr_slave_0: left promiscuous mode [ 442.509778][T11631] hsr_slave_1: left promiscuous mode [ 442.659036][T11631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 442.678524][T11631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 442.752216][T11631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 442.761839][T11631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 442.854416][T11631] veth1_macvtap: left promiscuous mode [ 442.860245][T11631] veth0_macvtap: left promiscuous mode [ 442.866043][T11631] veth1_vlan: left promiscuous mode [ 442.871388][T11631] veth0_vlan: left promiscuous mode [ 443.664866][ T54] Bluetooth: hci1: command tx timeout [ 443.924451][T13381] FAULT_INJECTION: forcing a failure. [ 443.924451][T13381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 443.947832][T13381] CPU: 1 UID: 0 PID: 13381 Comm: syz.1.1833 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 443.958300][T13381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 443.968383][T13381] Call Trace: [ 443.971684][T13381] [ 443.974641][T13381] dump_stack_lvl+0x16c/0x1f0 [ 443.979354][T13381] should_fail_ex+0x497/0x5b0 [ 443.984061][T13381] _copy_to_user+0x30/0xc0 [ 443.988502][T13381] simple_read_from_buffer+0xd0/0x160 [ 443.993887][T13381] proc_fail_nth_read+0x198/0x270 [ 443.998916][T13381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.004469][T13381] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 444.010019][T13381] vfs_read+0x1ce/0xbd0 [ 444.014190][T13381] ? __fget_files+0x23a/0x3f0 [ 444.018887][T13381] ? fdget_pos+0x24c/0x360 [ 444.023310][T13381] ? __pfx_lock_release+0x10/0x10 [ 444.028343][T13381] ? __pfx_vfs_read+0x10/0x10 [ 444.033027][T13381] ? __pfx___mutex_lock+0x10/0x10 [ 444.038056][T13381] ? __pfx_do_msg_fill+0x10/0x10 [ 444.043004][T13381] ? __fget_files+0x244/0x3f0 [ 444.047698][T13381] ksys_read+0x12f/0x260 [ 444.051948][T13381] ? __pfx_ksys_read+0x10/0x10 [ 444.056728][T13381] do_syscall_64+0xcd/0x250 [ 444.061239][T13381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 444.067154][T13381] RIP: 0033:0x7fbb1bd7ca3c [ 444.071572][T13381] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 444.091184][T13381] RSP: 002b:00007fbb1b7ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 444.099606][T13381] RAX: ffffffffffffffda RBX: 00007fbb1bf35f80 RCX: 00007fbb1bd7ca3c [ 444.107578][T13381] RDX: 000000000000000f RSI: 00007fbb1b7ff0a0 RDI: 0000000000000003 [ 444.115548][T13381] RBP: 00007fbb1b7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 444.123515][T13381] R10: 0000000080000000 R11: 0000000000000246 R12: 0000000000000001 [ 444.131486][T13381] R13: 0000000000000001 R14: 00007fbb1bf35f80 R15: 00007ffdda243e38 [ 444.139474][T13381] [ 444.412757][T11631] team0 (unregistering): Port device team_slave_1 removed [ 444.532840][T11631] team0 (unregistering): Port device team_slave_0 removed [ 444.773531][T13392] svc: failed to register nfsdv3 RPC service (errno 111). [ 444.790987][T13392] svc: failed to register nfsaclv3 RPC service (errno 111). [ 445.566623][T13244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 445.598904][T13244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 445.744191][ T54] Bluetooth: hci1: command tx timeout [ 445.764240][T13244] team0: Port device team_slave_0 added [ 445.772753][T13244] team0: Port device team_slave_1 added [ 445.921296][T13244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.939204][T13244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.016845][T13244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.090265][T13244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.104093][T13244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.193807][T13244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.486482][T13244] hsr_slave_0: entered promiscuous mode [ 446.595317][T13244] hsr_slave_1: entered promiscuous mode [ 446.704566][T13244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.712174][T13244] Cannot create hsr debugfs directory [ 448.054636][T13244] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 448.066624][T13244] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 448.096409][T13244] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 448.121661][T13244] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 448.371390][T13244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.412526][T13244] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.486166][T11633] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.493321][T11633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.525451][T11633] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.532586][T11633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.958004][T13244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.082525][T13244] veth0_vlan: entered promiscuous mode [ 449.106637][T13244] veth1_vlan: entered promiscuous mode [ 449.165309][T13244] veth0_macvtap: entered promiscuous mode [ 449.191783][T13244] veth1_macvtap: entered promiscuous mode [ 449.224936][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.263826][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.284201][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.303840][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.337256][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 449.365627][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.395194][T13244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.453144][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.483938][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.510873][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.542112][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.573126][T13244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.588439][T13244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.610387][T13244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.676346][T13244] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.713093][T13244] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.744576][T13244] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.753334][T13244] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.002025][T11632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.017686][T11632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.026923][T11631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 450.064908][T11631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 452.623892][ T5232] Bluetooth: hci2: command 0x0406 tx timeout [ 454.835593][T13691] svc: failed to register nfsdv3 RPC service (errno 111). [ 454.869214][T13694] delete_channel: no stack [ 454.876296][T13691] svc: failed to register nfsaclv3 RPC service (errno 111). [ 456.640517][T13742] delete_channel: no stack [ 459.364011][T13850] openvswitch: netlink: Key type 8590 is out of range max 32 [ 459.722841][T13867] FAULT_INJECTION: forcing a failure. [ 459.722841][T13867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 459.772624][T13867] CPU: 1 UID: 0 PID: 13867 Comm: syz.3.1937 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 459.783116][T13867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 459.793197][T13867] Call Trace: [ 459.796500][T13867] [ 459.799452][T13867] dump_stack_lvl+0x16c/0x1f0 [ 459.804166][T13867] should_fail_ex+0x497/0x5b0 [ 459.808876][T13867] _copy_from_user+0x30/0xf0 [ 459.813501][T13867] do_tcp_setsockopt+0x1ca/0x2820 [ 459.818565][T13867] ? __mutex_trylock_common+0xea/0x250 [ 459.824070][T13867] ? mutex_is_locked+0x30/0x50 [ 459.828881][T13867] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 459.834374][T13867] ? rcu_is_watching+0x12/0xc0 [ 459.839170][T13867] ? trace_contention_end+0xea/0x140 [ 459.844498][T13867] ? __mutex_lock+0x1a6/0x9c0 [ 459.849208][T13867] ? hlock_class+0x4e/0x130 [ 459.853738][T13867] ? __lock_acquire+0xbdd/0x3ce0 [ 459.858714][T13867] ? smc_setsockopt+0x101/0xc00 [ 459.863597][T13867] ? __pfx___mutex_lock+0x10/0x10 [ 459.868666][T13867] tcp_setsockopt+0xe2/0x100 [ 459.873297][T13867] smc_setsockopt+0x1b4/0xc00 [ 459.878008][T13867] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 459.883936][T13867] ? __pfx_smc_setsockopt+0x10/0x10 [ 459.889184][T13867] ? __pfx_smc_setsockopt+0x10/0x10 [ 459.894413][T13867] do_sock_setsockopt+0x222/0x480 [ 459.899464][T13867] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 459.905068][T13867] ? fdget+0x176/0x210 [ 459.909170][T13867] __sys_setsockopt+0x1a4/0x270 [ 459.914054][T13867] ? __pfx___sys_setsockopt+0x10/0x10 [ 459.919464][T13867] ? fput+0x30/0x390 [ 459.923390][T13867] ? ksys_write+0x1ad/0x260 [ 459.927919][T13867] ? __pfx_ksys_write+0x10/0x10 [ 459.932824][T13867] __x64_sys_setsockopt+0xbd/0x160 [ 459.937970][T13867] ? do_syscall_64+0x91/0x250 [ 459.942684][T13867] ? lockdep_hardirqs_on+0x7c/0x110 [ 459.947906][T13867] do_syscall_64+0xcd/0x250 [ 459.952444][T13867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.958376][T13867] RIP: 0033:0x7f59c557dff9 [ 459.962815][T13867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.982454][T13867] RSP: 002b:00007f59c63ac038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 459.990900][T13867] RAX: ffffffffffffffda RBX: 00007f59c5735f80 RCX: 00007f59c557dff9 [ 459.998880][T13867] RDX: 0000000000000025 RSI: 8000000000000006 RDI: 0000000000000006 [ 459.998932][T13867] RBP: 00007f59c63ac090 R08: 00000000007ffffc R09: 0000000000000000 [ 459.998948][T13867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 459.998968][T13867] R13: 0000000000000000 R14: 00007f59c5735f80 R15: 00007ffc8a5a00e8 [ 459.999001][T13867] [ 460.498688][T13889] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1945'. [ 460.664206][T13898] FAULT_INJECTION: forcing a failure. [ 460.664206][T13898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 460.704035][T13898] CPU: 1 UID: 0 PID: 13898 Comm: syz.2.1949 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 460.714512][T13898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 460.724687][T13898] Call Trace: [ 460.727988][T13898] [ 460.730939][T13898] dump_stack_lvl+0x16c/0x1f0 [ 460.735653][T13898] should_fail_ex+0x497/0x5b0 [ 460.740361][T13898] _copy_from_user+0x30/0xf0 [ 460.744984][T13898] smc_setsockopt+0x308/0xc00 [ 460.749687][T13898] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 460.755625][T13898] ? __pfx_smc_setsockopt+0x10/0x10 [ 460.760862][T13898] ? __pfx_smc_setsockopt+0x10/0x10 [ 460.766097][T13898] do_sock_setsockopt+0x222/0x480 [ 460.771146][T13898] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 460.776744][T13898] ? fdget+0x176/0x210 [ 460.780856][T13898] __sys_setsockopt+0x1a4/0x270 [ 460.785744][T13898] ? __pfx___sys_setsockopt+0x10/0x10 [ 460.791144][T13898] ? fput+0x30/0x390 [ 460.795066][T13898] ? ksys_write+0x1ad/0x260 [ 460.799584][T13898] ? __pfx_ksys_write+0x10/0x10 [ 460.804456][T13898] __x64_sys_setsockopt+0xbd/0x160 [ 460.809575][T13898] ? do_syscall_64+0x91/0x250 [ 460.814279][T13898] ? lockdep_hardirqs_on+0x7c/0x110 [ 460.819505][T13898] do_syscall_64+0xcd/0x250 [ 460.824013][T13898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 460.829918][T13898] RIP: 0033:0x7fdaad97dff9 [ 460.834332][T13898] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 460.853948][T13898] RSP: 002b:00007fdaae85e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 460.862363][T13898] RAX: ffffffffffffffda RBX: 00007fdaadb35f80 RCX: 00007fdaad97dff9 [ 460.870336][T13898] RDX: 0000000000000025 RSI: 8000000000000006 RDI: 0000000000000006 [ 460.878310][T13898] RBP: 00007fdaae85e090 R08: 00000000007ffffc R09: 0000000000000000 [ 460.886283][T13898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 460.894252][T13898] R13: 0000000000000000 R14: 00007fdaadb35f80 R15: 00007ffd43152c48 [ 460.902235][T13898] [ 460.954428][T13896] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1948'. [ 462.482048][T13941] openvswitch: netlink: Key type 8590 is out of range max 32 [ 462.844090][T13956] ptrace attach of "./syz-executor exec"[13244] was attempted by "./syz-executor exec"[13956] [ 467.804176][T14068] delete_channel: no stack [ 476.261539][ T5232] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 476.270359][ T5232] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 476.279155][ T5232] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 476.287549][ T5232] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 476.295546][ T5232] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 476.303352][ T5232] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 476.997429][T14233] chnl_net:caif_netlink_parms(): no params data found [ 477.417355][T14233] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.434272][T14233] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.441497][T14233] bridge_slave_0: entered allmulticast mode [ 477.468304][T14233] bridge_slave_0: entered promiscuous mode [ 477.501660][T14233] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.543952][T14233] bridge0: port 2(bridge_slave_1) entered disabled state [ 477.573974][T14233] bridge_slave_1: entered allmulticast mode [ 477.581090][T14233] bridge_slave_1: entered promiscuous mode [ 477.672483][T14233] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 477.707754][T14233] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 477.947854][T14233] team0: Port device team_slave_0 added [ 478.011061][T14233] team0: Port device team_slave_1 added [ 478.171502][T14233] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 478.202776][T14233] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.311056][T14233] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 478.364142][T14233] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 478.384307][ T5232] Bluetooth: hci4: command tx timeout [ 478.413894][T14233] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 478.446045][T14233] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 478.681103][T14233] hsr_slave_0: entered promiscuous mode [ 478.710517][T14233] hsr_slave_1: entered promiscuous mode [ 478.730045][T14233] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 478.749454][T14233] Cannot create hsr debugfs directory [ 479.468749][T14233] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.039692][T14233] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 480.464004][ T5232] Bluetooth: hci4: command tx timeout [ 480.477765][T14233] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.328169][T14233] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.793037][T14233] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 481.866606][T14233] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 481.939890][T14233] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 481.993552][T14233] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 482.397523][T14233] 8021q: adding VLAN 0 to HW filter on device bond0 [ 482.460990][T14233] 8021q: adding VLAN 0 to HW filter on device team0 [ 482.544230][ T5232] Bluetooth: hci4: command tx timeout [ 482.563228][T11632] bridge0: port 1(bridge_slave_0) entered blocking state [ 482.570420][T11632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 482.755965][T11632] bridge0: port 2(bridge_slave_1) entered blocking state [ 482.763139][T11632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 482.926470][T14233] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 483.568631][T14233] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 483.772886][T14233] veth0_vlan: entered promiscuous mode [ 483.823549][T14233] veth1_vlan: entered promiscuous mode [ 483.913201][T14233] veth0_macvtap: entered promiscuous mode [ 483.938607][T14233] veth1_macvtap: entered promiscuous mode [ 483.983074][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.024572][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.045886][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.078681][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.098847][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.153959][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.173872][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 484.202489][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.237259][T14233] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 484.277538][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.314402][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.333799][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.379725][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.429176][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.461299][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.484878][T14233] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 484.504004][T14233] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 484.534339][T14233] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 484.558212][T14233] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.577743][T14233] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.605234][T14233] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 484.624239][ T5232] Bluetooth: hci4: command tx timeout [ 484.639978][T14233] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.387693][T11632] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.434513][T11632] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.512450][T11632] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.534444][T11632] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.970359][T14354] netlink: 4024 bytes leftover after parsing attributes in process `syz.2.2070'. [ 488.972828][T14385] delete_channel: no stack [ 489.045852][T14395] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2082'. [ 490.297531][T14425] delete_channel: no stack [ 492.034921][T14469] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 492.045198][T14469] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 492.058807][T14469] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 492.069825][T14469] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 492.084838][T14469] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 492.097043][T14469] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 492.511134][T14467] chnl_net:caif_netlink_parms(): no params data found [ 492.900639][T14467] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.917743][T14467] bridge0: port 1(bridge_slave_0) entered disabled state [ 492.938006][T14467] bridge_slave_0: entered allmulticast mode [ 492.963359][T14467] bridge_slave_0: entered promiscuous mode [ 492.978994][T14467] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.007212][T14467] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.028600][T14467] bridge_slave_1: entered allmulticast mode [ 493.040011][T14467] bridge_slave_1: entered promiscuous mode [ 493.156723][ T6675] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.322179][T14467] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.417229][ T6675] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.473580][T14467] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.833918][ T6675] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.948717][T14467] team0: Port device team_slave_0 added [ 494.021017][ T6675] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.071387][T14467] team0: Port device team_slave_1 added [ 494.144886][ T5232] Bluetooth: hci5: command tx timeout [ 494.157426][T14467] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 494.189446][T14467] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.259743][T14467] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 494.505469][T14467] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 494.528674][T14467] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 494.573957][T14467] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 494.785940][T14467] hsr_slave_0: entered promiscuous mode [ 494.817674][T14467] hsr_slave_1: entered promiscuous mode [ 494.853927][T14467] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 494.875726][T14467] Cannot create hsr debugfs directory [ 494.902176][ T6675] bridge_slave_1: left allmulticast mode [ 494.915396][ T6675] bridge_slave_1: left promiscuous mode [ 494.921185][ T6675] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.942793][ T6675] bridge_slave_0: left allmulticast mode [ 494.959463][ T6675] bridge_slave_0: left promiscuous mode [ 494.965814][ T6675] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.147547][ T6675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 496.216757][ T6675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 496.234730][ T5232] Bluetooth: hci5: command tx timeout [ 496.275779][ T6675] bond0 (unregistering): Released all slaves [ 498.300328][ T6675] hsr_slave_0: left promiscuous mode [ 498.306316][ T5232] Bluetooth: hci5: command tx timeout [ 498.345079][ T6675] hsr_slave_1: left promiscuous mode [ 498.424255][ T6675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 498.464545][ T6675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 498.547747][ T6675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 498.564216][ T6675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 498.616194][ T6675] veth1_macvtap: left promiscuous mode [ 498.621992][ T6675] veth0_macvtap: left promiscuous mode [ 498.654032][ T6675] veth1_vlan: left promiscuous mode [ 498.673893][ T6675] veth0_vlan: left promiscuous mode [ 499.687486][ T6675] team0 (unregistering): Port device team_slave_1 removed [ 499.777686][ T6675] team0 (unregistering): Port device team_slave_0 removed [ 500.394228][ T5232] Bluetooth: hci5: command tx timeout [ 500.936804][T14467] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 500.994286][T14467] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 501.037207][T14467] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 501.125202][T14467] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 501.478190][T14467] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.544919][T14467] 8021q: adding VLAN 0 to HW filter on device team0 [ 501.578585][T11633] bridge0: port 1(bridge_slave_0) entered blocking state [ 501.585769][T11633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 501.618871][T11633] bridge0: port 2(bridge_slave_1) entered blocking state [ 501.626068][T11633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 501.745447][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.758207][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.090992][T14467] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 502.141194][T14467] veth0_vlan: entered promiscuous mode [ 502.153299][T14467] veth1_vlan: entered promiscuous mode [ 502.206264][T14467] veth0_macvtap: entered promiscuous mode [ 502.256389][T14467] veth1_macvtap: entered promiscuous mode [ 502.309804][T14467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.325499][T14467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.344294][T14467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.360988][T14467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.384770][T14467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.413932][T14467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.448624][T14467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 502.464261][T14467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.505777][T14467] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 502.556493][T14467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.603098][T14467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.620289][T14467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.661545][T14467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.691927][T14467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.720548][T14467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.740831][T14467] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 502.770153][T14467] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 502.797216][T14467] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 502.836289][T14467] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.845856][T14467] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.855704][T14467] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 502.874144][T14467] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.076256][T11631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.096777][T11631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.171108][T11678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 503.208463][T11678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 503.562100][T14661] FAULT_INJECTION: forcing a failure. [ 503.562100][T14661] name failslab, interval 1, probability 0, space 0, times 0 [ 503.611980][T14661] CPU: 0 UID: 0 PID: 14661 Comm: syz.0.2143 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 503.622455][T14661] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 503.632534][T14661] Call Trace: [ 503.635833][T14661] [ 503.638789][T14661] dump_stack_lvl+0x16c/0x1f0 [ 503.643507][T14661] should_fail_ex+0x497/0x5b0 [ 503.648208][T14661] ? fs_reclaim_acquire+0xae/0x160 [ 503.653382][T14661] should_failslab+0xc2/0x120 [ 503.658094][T14661] __kmalloc_node_noprof+0xd1/0x440 [ 503.663326][T14661] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 503.669260][T14661] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 503.674770][T14661] __kvmalloc_node_noprof+0xad/0x1a0 [ 503.680092][T14661] keyctl_read_key+0x22e/0x4e0 [ 503.684894][T14661] __do_sys_keyctl+0x3d9/0x590 [ 503.689718][T14661] do_syscall_64+0xcd/0x250 [ 503.694256][T14661] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 503.700194][T14661] RIP: 0033:0x7f43d377dff9 [ 503.704636][T14661] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 503.724270][T14661] RSP: 002b:00007f43d45f1038 EFLAGS: 00000246 ORIG_RAX: 00000000000000fa [ 503.732711][T14661] RAX: ffffffffffffffda RBX: 00007f43d3935f80 RCX: 00007f43d377dff9 [ 503.740704][T14661] RDX: 0000000000000005 RSI: 00000000fffffffd RDI: 000000000000000b [ 503.748698][T14661] RBP: 00007f43d45f1090 R08: 0000000000000009 R09: 0000000000000000 [ 503.756695][T14661] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 503.764690][T14661] R13: 0000000000000000 R14: 00007f43d3935f80 R15: 00007ffd3f6f5008 [ 503.772701][T14661] [ 506.612622][T14738] FAULT_INJECTION: forcing a failure. [ 506.612622][T14738] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 506.683907][T14738] CPU: 0 UID: 0 PID: 14738 Comm: syz.1.2155 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 506.694383][T14738] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 506.704464][T14738] Call Trace: [ 506.707757][T14738] [ 506.710705][T14738] dump_stack_lvl+0x16c/0x1f0 [ 506.715418][T14738] should_fail_ex+0x497/0x5b0 [ 506.720126][T14738] _copy_to_user+0x30/0xc0 [ 506.724572][T14738] simple_read_from_buffer+0xd0/0x160 [ 506.729981][T14738] proc_fail_nth_read+0x198/0x270 [ 506.735033][T14738] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 506.740616][T14738] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 506.746199][T14738] vfs_read+0x1ce/0xbd0 [ 506.750404][T14738] ? __fget_files+0x23a/0x3f0 [ 506.755118][T14738] ? fdget_pos+0x24c/0x360 [ 506.759571][T14738] ? __pfx_lock_release+0x10/0x10 [ 506.764634][T14738] ? __pfx_vfs_read+0x10/0x10 [ 506.769348][T14738] ? __pfx___mutex_lock+0x10/0x10 [ 506.774415][T14738] ? __fget_files+0x244/0x3f0 [ 506.779139][T14738] ksys_read+0x12f/0x260 [ 506.783421][T14738] ? __pfx_ksys_read+0x10/0x10 [ 506.788229][T14738] ? syscall_user_dispatch+0x77/0x140 [ 506.793649][T14738] do_syscall_64+0xcd/0x250 [ 506.798191][T14738] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 506.804129][T14738] RIP: 0033:0x7fbb1bd7ca3c [ 506.808568][T14738] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 506.828208][T14738] RSP: 002b:00007fbb1b7ff030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 506.836658][T14738] RAX: ffffffffffffffda RBX: 00007fbb1bf35f80 RCX: 00007fbb1bd7ca3c [ 506.844659][T14738] RDX: 000000000000000f RSI: 00007fbb1b7ff0a0 RDI: 0000000000000006 [ 506.852656][T14738] RBP: 00007fbb1b7ff090 R08: 0000000000000000 R09: 0000000000000000 [ 506.860654][T14738] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 506.868652][T14738] R13: 0000000000000000 R14: 00007fbb1bf35f80 R15: 00007ffdda243e38 [ 506.876670][T14738] [ 511.954767][T14876] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2190'. [ 515.687920][T14971] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2208'. [ 516.111382][T14981] delete_channel: no stack [ 518.926074][T15041] delete_channel: no stack [ 519.356689][T15061] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2227'. [ 521.002104][T15087] netlink: 'syz.3.2238': attribute type 3 has an invalid length. [ 521.125442][T15091] delete_channel: no stack [ 523.961086][T15146] delete_channel: no stack [ 524.305098][T14469] Bluetooth: hci0: command 0x0406 tx timeout [ 525.176800][T15173] svc: failed to register nfsdv3 RPC service (errno 111). [ 525.210907][T15173] svc: failed to register nfsaclv3 RPC service (errno 111). [ 526.377039][T15190] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2261'. [ 527.096859][T15192] netlink: 'syz.2.2262': attribute type 11 has an invalid length. [ 527.131501][T15213] netlink: 'syz.0.2267': attribute type 11 has an invalid length. [ 527.134515][T15214] netlink: 'syz.0.2267': attribute type 11 has an invalid length. [ 528.094659][T15233] delete_channel: no stack [ 529.015933][T15253] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2279'. [ 529.153934][T15259] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2279'. [ 530.343798][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.586110][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.824649][T14469] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 530.848103][T14469] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 530.903998][T14469] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 530.966186][T14469] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 530.981192][T14469] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 530.988979][T14469] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 531.209821][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.538778][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.562541][T15292] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2288'. [ 531.919797][T15289] chnl_net:caif_netlink_parms(): no params data found [ 532.476811][T15324] FAULT_INJECTION: forcing a failure. [ 532.476811][T15324] name failslab, interval 1, probability 0, space 0, times 0 [ 532.581850][ T12] bridge_slave_1: left allmulticast mode [ 532.591339][ T12] bridge_slave_1: left promiscuous mode [ 532.608621][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.626849][T15324] CPU: 1 UID: 0 PID: 15324 Comm: syz.2.2292 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 532.637316][T15324] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 532.647396][T15324] Call Trace: [ 532.650692][T15324] [ 532.653637][T15324] dump_stack_lvl+0x16c/0x1f0 [ 532.658348][T15324] should_fail_ex+0x497/0x5b0 [ 532.663053][T15324] ? fs_reclaim_acquire+0xae/0x160 [ 532.668197][T15324] should_failslab+0xc2/0x120 [ 532.672914][T15324] __kmalloc_noprof+0xcb/0x410 [ 532.677714][T15324] ? __pfx_lock_acquire+0x10/0x10 [ 532.682782][T15324] tomoyo_realpath_from_path+0xbf/0x710 [ 532.688363][T15324] ? tomoyo_profile+0x47/0x60 [ 532.693080][T15324] tomoyo_path_number_perm+0x245/0x5b0 [ 532.698583][T15324] ? tomoyo_path_number_perm+0x232/0x5b0 [ 532.704266][T15324] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 532.710332][T15324] ? __fget_files+0x244/0x3f0 [ 532.715064][T15324] ? __fget_files+0x244/0x3f0 [ 532.719791][T15324] security_file_ioctl+0x9b/0x240 [ 532.724864][T15324] __x64_sys_ioctl+0xbb/0x220 [ 532.729589][T15324] do_syscall_64+0xcd/0x250 [ 532.734130][T15324] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 532.740066][T15324] RIP: 0033:0x7f906d57dff9 [ 532.744530][T15324] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 532.764169][T15324] RSP: 002b:00007f906e29e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 532.772620][T15324] RAX: ffffffffffffffda RBX: 00007f906d736058 RCX: 00007f906d57dff9 [ 532.780627][T15324] RDX: 0000000000005c8d RSI: 00000000401054d5 RDI: 00000000000000c8 [ 532.788633][T15324] RBP: 00007f906e29e090 R08: 0000000000000000 R09: 0000000000000000 [ 532.796638][T15324] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 532.804643][T15324] R13: 0000000000000001 R14: 00007f906d736058 R15: 00007ffe1b552888 [ 532.812672][T15324] [ 532.831671][T15324] ERROR: Out of memory at tomoyo_realpath_from_path. [ 532.847021][ T12] bridge_slave_0: left allmulticast mode [ 532.853056][ T12] bridge_slave_0: left promiscuous mode [ 532.873724][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.023986][T14469] Bluetooth: hci0: command tx timeout [ 533.495112][T15343] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2297'. [ 534.899434][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.949744][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.971873][ T12] bond0 (unregistering): Released all slaves [ 535.023492][T15289] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.043868][T15289] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.051121][T15289] bridge_slave_0: entered allmulticast mode [ 535.085038][T15289] bridge_slave_0: entered promiscuous mode [ 535.095376][T15289] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.102748][T15289] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.103881][T14469] Bluetooth: hci0: command tx timeout [ 535.133942][T15289] bridge_slave_1: entered allmulticast mode [ 535.145913][T15289] bridge_slave_1: entered promiscuous mode [ 535.691833][T15289] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 535.958933][T15289] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 536.259106][T15289] team0: Port device team_slave_0 added [ 536.290004][T15289] team0: Port device team_slave_1 added [ 536.602803][T15289] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 536.619492][T15289] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.681689][T15289] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 536.885871][T15289] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 536.892845][T15289] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 536.929008][T15289] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 537.183952][T14469] Bluetooth: hci0: command tx timeout [ 537.558268][T15289] hsr_slave_0: entered promiscuous mode [ 537.583401][T15289] hsr_slave_1: entered promiscuous mode [ 537.653847][T15289] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 537.661449][T15289] Cannot create hsr debugfs directory [ 538.485235][ T12] hsr_slave_0: left promiscuous mode [ 538.562907][ T12] hsr_slave_1: left promiscuous mode [ 538.728800][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 538.754387][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.820222][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 538.840163][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.126719][ T12] veth1_macvtap: left promiscuous mode [ 539.132304][ T12] veth0_macvtap: left promiscuous mode [ 539.154067][ T12] veth1_vlan: left promiscuous mode [ 539.159416][ T12] veth0_vlan: left promiscuous mode [ 539.263875][T14469] Bluetooth: hci0: command tx timeout [ 539.496493][T15434] delete_channel: no stack [ 541.735047][ T12] team0 (unregistering): Port device team_slave_1 removed [ 541.928947][ T12] team0 (unregistering): Port device team_slave_0 removed [ 545.885265][ T5232] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 545.894292][ T5232] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 545.902643][ T5232] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 545.912145][ T5232] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 545.920635][ T5232] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 545.930466][ T5232] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 546.838423][T15484] chnl_net:caif_netlink_parms(): no params data found [ 547.014804][T15491] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2322'. [ 547.233054][T15484] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.253416][T15484] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.284063][T15484] bridge_slave_0: entered allmulticast mode [ 547.314983][T15484] bridge_slave_0: entered promiscuous mode [ 547.335845][T15484] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.342985][T15484] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.364023][T15484] bridge_slave_1: entered allmulticast mode [ 547.413597][T15484] bridge_slave_1: entered promiscuous mode [ 547.433906][T15289] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 547.571816][T15289] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 547.606392][T15484] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.658867][T15484] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.783975][T15289] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 547.816315][T15289] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 547.916473][T15484] team0: Port device team_slave_0 added [ 547.965188][T15484] team0: Port device team_slave_1 added [ 548.064101][T14469] Bluetooth: hci3: command tx timeout [ 548.973230][T15484] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 549.001719][T15484] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.121079][T15484] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 549.193871][T15484] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.200861][T15484] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.313411][T15484] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.560539][T15484] hsr_slave_0: entered promiscuous mode [ 549.596590][T15484] hsr_slave_1: entered promiscuous mode [ 550.172185][T14469] Bluetooth: hci3: command tx timeout [ 550.508622][T15289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.576357][T15289] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.821073][T15484] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.904878][T14913] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.912037][T14913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.012653][T14913] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.019847][T14913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.186374][T15484] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.592162][T15484] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 551.945736][T15484] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.071944][T15289] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.126729][T15289] veth0_vlan: entered promiscuous mode [ 552.137560][T15289] veth1_vlan: entered promiscuous mode [ 552.158948][T15289] veth0_macvtap: entered promiscuous mode [ 552.167862][T15289] veth1_macvtap: entered promiscuous mode [ 552.182785][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.193473][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.203365][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.213846][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.223661][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.234290][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.244195][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.254747][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.265920][T15289] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.274103][T14469] Bluetooth: hci3: command tx timeout [ 552.365316][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.395948][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.434135][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.461282][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.483918][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.496639][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.583982][T15289] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.624277][T15289] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.655049][T15289] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.925469][T15289] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.936334][T15289] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.990530][T15289] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.044214][T15289] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.848823][T14930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.879793][T14930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.927593][T14930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.935512][T14930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.957515][T15484] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 554.006926][T15484] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 554.071658][T15484] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 554.102733][T15484] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 554.304433][T14469] Bluetooth: hci3: command tx timeout [ 554.404355][T15595] delete_channel: no stack [ 554.429888][T15484] 8021q: adding VLAN 0 to HW filter on device bond0 [ 554.471205][T15484] 8021q: adding VLAN 0 to HW filter on device team0 [ 554.722599][T14929] bridge0: port 1(bridge_slave_0) entered blocking state [ 554.729790][T14929] bridge0: port 1(bridge_slave_0) entered forwarding state [ 554.808944][T14929] bridge0: port 2(bridge_slave_1) entered blocking state [ 554.816134][T14929] bridge0: port 2(bridge_slave_1) entered forwarding state [ 554.942636][T15484] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 555.018424][T15484] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 555.739189][T15484] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 555.960688][T15484] veth0_vlan: entered promiscuous mode [ 556.043857][T15484] veth1_vlan: entered promiscuous mode [ 556.117957][T15484] veth0_macvtap: entered promiscuous mode [ 556.147142][T15484] veth1_macvtap: entered promiscuous mode [ 556.215626][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.253234][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.301273][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.333845][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.367187][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.403816][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.423794][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.447310][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.500822][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 556.523121][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.546320][T15484] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 556.573520][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.599408][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.630252][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.661191][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.701740][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.733874][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.763631][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.785153][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.804541][T15484] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 556.835931][T15484] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 556.860754][T15484] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 556.936446][T15484] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.963810][T15484] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 556.993334][T15484] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.013805][T15484] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 557.169858][T15635] delete_channel: no stack [ 557.226111][T14929] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.280577][T14929] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 557.359877][T14929] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 557.374769][T14929] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.444815][T15645] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2321'. [ 559.194969][T15685] delete_channel: no stack [ 560.145867][ T5232] Bluetooth: hci1: command 0x0406 tx timeout [ 561.405672][T15722] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2364'. [ 561.449453][T15725] delete_channel: no stack [ 563.204644][ T1264] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.210983][ T1264] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.422859][T14913] bridge_slave_1: left allmulticast mode [ 563.430327][T14913] bridge_slave_1: left promiscuous mode [ 563.439174][T15771] delete_channel: no stack [ 563.453260][T14913] bridge0: port 2(bridge_slave_1) entered disabled state [ 563.625723][T14913] bridge_slave_0: left allmulticast mode [ 563.631518][T14913] bridge_slave_0: left promiscuous mode [ 563.642579][T14913] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.961631][T15782] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2379'. [ 565.561028][T14913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.581296][T14913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.620213][T14913] bond0 (unregistering): Released all slaves [ 566.281833][T14913] hsr_slave_0: left promiscuous mode [ 566.288891][T14913] hsr_slave_1: left promiscuous mode [ 566.320997][T14913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.334011][T14913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.364613][T14913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.373435][T14913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.422370][T14913] veth1_macvtap: left promiscuous mode [ 566.460882][T14913] veth0_macvtap: left promiscuous mode [ 566.467338][T14913] veth1_vlan: left promiscuous mode [ 566.473119][T14913] veth0_vlan: left promiscuous mode [ 566.721341][T15838] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2392'. [ 567.412726][T14913] team0 (unregistering): Port device team_slave_1 removed [ 567.465477][T14913] team0 (unregistering): Port device team_slave_0 removed [ 568.862990][ T12] bridge_slave_1: left allmulticast mode [ 568.887854][T15877] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2401'. [ 568.903853][ T12] bridge_slave_1: left promiscuous mode [ 568.924073][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 568.973089][ T12] bridge_slave_0: left allmulticast mode [ 568.992601][ T12] bridge_slave_0: left promiscuous mode [ 569.023167][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.768452][T15889] delete_channel: no stack [ 570.392994][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.418032][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.445219][ T12] bond0 (unregistering): Released all slaves [ 570.858032][T15933] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2416'. [ 570.868986][T15935] delete_channel: no stack [ 570.902990][ T12] hsr_slave_0: left promiscuous mode [ 570.956602][ T12] hsr_slave_1: left promiscuous mode [ 571.013912][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.021396][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.084449][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.103303][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.129344][T15942] nbd: must specify at least one socket [ 571.142026][T15942] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2419'. [ 571.296514][ T12] veth1_macvtap: left promiscuous mode [ 571.302089][ T12] veth0_macvtap: left promiscuous mode [ 571.307824][ T12] veth1_vlan: left promiscuous mode [ 571.313142][ T12] veth0_vlan: left promiscuous mode [ 572.048582][ T12] team0 (unregistering): Port device team_slave_1 removed [ 572.119749][ T12] team0 (unregistering): Port device team_slave_0 removed [ 572.887440][T15961] netlink: 288 bytes leftover after parsing attributes in process `syz.1.2424'. [ 573.419056][T15982] can: request_module (can-proto-0) failed. [ 573.549755][T15973] openvswitch: netlink: Message has 4 unknown bytes. [ 573.654855][T15989] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2429'. [ 575.964770][T16051] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2446'. [ 578.308471][T16110] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2462'. [ 578.442481][T16111] delete_channel: no stack [ 579.154992][T16130] delete_channel: no stack [ 580.833027][T16159] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2475'. [ 581.633253][T16163] delete_channel: no stack [ 581.973908][T16171] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2478'. [ 583.264453][T16193] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2482'. [ 584.457223][T16212] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2491'. [ 585.576230][T16234] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2494'. [ 586.573495][T16269] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2504'. [ 587.756574][T16297] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2513'. [ 587.798582][T16296] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2512'. [ 588.941233][T16323] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2519'. [ 589.106219][T16331] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2522'. [ 589.703780][T16347] can: request_module (can-proto-0) failed. [ 591.370252][T16393] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2534'. [ 591.587258][T16393] FAULT_INJECTION: forcing a failure. [ 591.587258][T16393] name fail_futex, interval 1, probability 0, space 0, times 1 [ 591.627591][T16393] CPU: 1 UID: 0 PID: 16393 Comm: syz.2.2534 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 591.638066][T16393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 591.648147][T16393] Call Trace: [ 591.651442][T16393] [ 591.654390][T16393] dump_stack_lvl+0x16c/0x1f0 [ 591.659099][T16393] should_fail_ex+0x497/0x5b0 [ 591.663805][T16393] get_futex_key+0x1b1/0x1090 [ 591.668522][T16393] ? __pfx_get_futex_key+0x10/0x10 [ 591.673688][T16393] futex_requeue+0x1c7/0x1cf0 [ 591.678405][T16393] ? __pfx_futex_requeue+0x10/0x10 [ 591.683554][T16393] ? ksys_write+0x12f/0x260 [ 591.688084][T16393] ? find_held_lock+0x2d/0x110 [ 591.692876][T16393] ? ksys_write+0x21e/0x260 [ 591.697404][T16393] ? __pfx_lock_release+0x10/0x10 [ 591.702463][T16393] ? vfs_write+0x14d/0x1140 [ 591.707009][T16393] do_futex+0x1af/0x350 [ 591.711193][T16393] ? __pfx_do_futex+0x10/0x10 [ 591.715914][T16393] __x64_sys_futex+0x1e1/0x4c0 [ 591.720709][T16393] ? fput+0x30/0x390 [ 591.724634][T16393] ? __pfx___x64_sys_futex+0x10/0x10 [ 591.729943][T16393] ? ksys_write+0x1ad/0x260 [ 591.734467][T16393] ? __pfx_ksys_write+0x10/0x10 [ 591.739369][T16393] do_syscall_64+0xcd/0x250 [ 591.743899][T16393] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 591.749840][T16393] RIP: 0033:0x7fea8d37dff9 [ 591.754279][T16393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 591.773917][T16393] RSP: 002b:00007fea8e0d9038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 591.782372][T16393] RAX: ffffffffffffffda RBX: 00007fea8d536058 RCX: 00007fea8d37dff9 [ 591.790380][T16393] RDX: 00000000000000c3 RSI: 0000000000000003 RDI: 0000000020000080 [ 591.798482][T16393] RBP: 00007fea8e0d9090 R08: 0000000020000100 R09: 0000000000000003 [ 591.806577][T16393] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 591.814577][T16393] R13: 0000000000000000 R14: 00007fea8d536058 R15: 00007ffd81241068 [ 591.822589][T16393] [ 591.973423][T16401] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2535'. [ 594.894199][T16459] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2549'. [ 595.927472][T16505] netlink: 5 bytes leftover after parsing attributes in process `syz.2.2557'. [ 596.124446][T16512] FAULT_INJECTION: forcing a failure. [ 596.124446][T16512] name failslab, interval 1, probability 0, space 0, times 0 [ 596.223806][T16512] CPU: 0 UID: 0 PID: 16512 Comm: syz.0.2559 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 596.234284][T16512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 596.244800][T16512] Call Trace: [ 596.248191][T16512] [ 596.251149][T16512] dump_stack_lvl+0x16c/0x1f0 [ 596.255863][T16512] should_fail_ex+0x497/0x5b0 [ 596.260568][T16512] ? fs_reclaim_acquire+0xae/0x160 [ 596.265714][T16512] should_failslab+0xc2/0x120 [ 596.270425][T16512] __kmalloc_noprof+0xcb/0x410 [ 596.275216][T16512] ? __pfx_lock_acquire+0x10/0x10 [ 596.280277][T16512] tomoyo_realpath_from_path+0xbf/0x710 [ 596.285858][T16512] ? tomoyo_profile+0x47/0x60 [ 596.290574][T16512] tomoyo_path_number_perm+0x245/0x5b0 [ 596.296076][T16512] ? tomoyo_path_number_perm+0x232/0x5b0 [ 596.301797][T16512] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 596.307857][T16512] ? __fget_files+0x244/0x3f0 [ 596.312606][T16512] ? __fget_files+0x244/0x3f0 [ 596.317330][T16512] security_file_ioctl+0x9b/0x240 [ 596.322409][T16512] __x64_sys_ioctl+0xbb/0x220 [ 596.327133][T16512] do_syscall_64+0xcd/0x250 [ 596.331684][T16512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 596.337649][T16512] RIP: 0033:0x7fe0b6d7dff9 [ 596.342097][T16512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 596.361738][T16512] RSP: 002b:00007fe0b7c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 596.370193][T16512] RAX: ffffffffffffffda RBX: 00007fe0b6f36058 RCX: 00007fe0b6d7dff9 [ 596.378200][T16512] RDX: 0000000000005c8d RSI: 00000000400454d9 RDI: 00000000000000c8 [ 596.386202][T16512] RBP: 00007fe0b7c17090 R08: 0000000000000000 R09: 0000000000000000 [ 596.394201][T16512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 596.402201][T16512] R13: 0000000000000001 R14: 00007fe0b6f36058 R15: 00007ffd75f22c88 [ 596.410225][T16512] [ 596.481598][T16512] ERROR: Out of memory at tomoyo_realpath_from_path. [ 596.794343][T16516] netlink: 5 bytes leftover after parsing attributes in process `syz.1.2561'. [ 597.097882][T16514] FAULT_INJECTION: forcing a failure. [ 597.097882][T16514] name fail_futex, interval 1, probability 0, space 0, times 0 [ 597.173728][T16514] CPU: 0 UID: 0 PID: 16514 Comm: syz.1.2561 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 597.184204][T16514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 597.194286][T16514] Call Trace: [ 597.197589][T16514] [ 597.200544][T16514] dump_stack_lvl+0x16c/0x1f0 [ 597.205254][T16514] should_fail_ex+0x497/0x5b0 [ 597.209964][T16514] get_futex_key+0x482/0x1090 [ 597.214698][T16514] ? __pfx_get_futex_key+0x10/0x10 [ 597.219952][T16514] futex_requeue+0x211/0x1cf0 [ 597.224667][T16514] ? __pfx_futex_requeue+0x10/0x10 [ 597.229831][T16514] ? ksys_write+0x12f/0x260 [ 597.234361][T16514] ? find_held_lock+0x2d/0x110 [ 597.239150][T16514] ? ksys_write+0x21e/0x260 [ 597.243654][T16514] ? __pfx_lock_release+0x10/0x10 [ 597.248692][T16514] ? vfs_write+0x14d/0x1140 [ 597.253209][T16514] do_futex+0x1af/0x350 [ 597.257380][T16514] ? __pfx_do_futex+0x10/0x10 [ 597.262069][T16514] __x64_sys_futex+0x1e1/0x4c0 [ 597.266842][T16514] ? native_tss_update_io_bitmap+0x2ec/0x610 [ 597.272833][T16514] ? __pfx___x64_sys_futex+0x10/0x10 [ 597.278119][T16514] ? ksys_write+0x1ad/0x260 [ 597.282619][T16514] ? __pfx_ksys_write+0x10/0x10 [ 597.287488][T16514] do_syscall_64+0xcd/0x250 [ 597.292002][T16514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.297911][T16514] RIP: 0033:0x7fbb1bd7dff9 [ 597.302324][T16514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 597.321939][T16514] RSP: 002b:00007fbb1b7ff038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 597.330356][T16514] RAX: ffffffffffffffda RBX: 00007fbb1bf35f80 RCX: 00007fbb1bd7dff9 [ 597.338328][T16514] RDX: 00000000000000c3 RSI: 0000000000000003 RDI: 0000000020000080 [ 597.346300][T16514] RBP: 00007fbb1b7ff090 R08: 0000000020000100 R09: 0000000000000003 [ 597.354272][T16514] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000001 [ 597.362250][T16514] R13: 0000000000000000 R14: 00007fbb1bf35f80 R15: 00007ffdda243e38 [ 597.370238][T16514] [ 599.404404][T16562] FAULT_INJECTION: forcing a failure. [ 599.404404][T16562] name failslab, interval 1, probability 0, space 0, times 0 [ 599.503982][T16562] CPU: 0 UID: 0 PID: 16562 Comm: syz.0.2570 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 599.514469][T16562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 599.524559][T16562] Call Trace: [ 599.527853][T16562] [ 599.530797][T16562] dump_stack_lvl+0x16c/0x1f0 [ 599.535514][T16562] should_fail_ex+0x497/0x5b0 [ 599.540215][T16562] ? fs_reclaim_acquire+0xae/0x160 [ 599.545355][T16562] should_failslab+0xc2/0x120 [ 599.550071][T16562] __kmalloc_noprof+0xcb/0x410 [ 599.554866][T16562] ? __pfx_d_absolute_path+0x10/0x10 [ 599.560178][T16562] tomoyo_encode2+0x100/0x3e0 [ 599.564887][T16562] tomoyo_realpath_from_path+0x1a7/0x710 [ 599.570547][T16562] ? tomoyo_profile+0x47/0x60 [ 599.575260][T16562] tomoyo_path_number_perm+0x245/0x5b0 [ 599.580755][T16562] ? tomoyo_path_number_perm+0x232/0x5b0 [ 599.586428][T16562] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 599.592479][T16562] ? __fget_files+0x244/0x3f0 [ 599.597203][T16562] ? __fget_files+0x244/0x3f0 [ 599.601924][T16562] security_file_ioctl+0x9b/0x240 [ 599.606987][T16562] __x64_sys_ioctl+0xbb/0x220 [ 599.611705][T16562] do_syscall_64+0xcd/0x250 [ 599.616242][T16562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 599.622174][T16562] RIP: 0033:0x7fe0b6d7dff9 [ 599.626612][T16562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 599.646242][T16562] RSP: 002b:00007fe0b7c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 599.654685][T16562] RAX: ffffffffffffffda RBX: 00007fe0b6f36058 RCX: 00007fe0b6d7dff9 [ 599.662678][T16562] RDX: 0000000000005c8d RSI: 00000000400454d9 RDI: 00000000000000c8 [ 599.670670][T16562] RBP: 00007fe0b7c17090 R08: 0000000000000000 R09: 0000000000000000 [ 599.678664][T16562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 599.686655][T16562] R13: 0000000000000001 R14: 00007fe0b6f36058 R15: 00007ffd75f22c88 [ 599.694670][T16562] [ 599.713565][T16562] ERROR: Out of memory at tomoyo_realpath_from_path. [ 600.799930][ T29] audit: type=1326 audit(4294967313.736:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=16585 comm="syz.2.2580" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fea8d37dff9 code=0x0 [ 601.637752][T16627] FAULT_INJECTION: forcing a failure. [ 601.637752][T16627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 601.716747][T16627] CPU: 0 UID: 0 PID: 16627 Comm: syz.0.2586 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 601.727226][T16627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 601.737306][T16627] Call Trace: [ 601.740611][T16627] [ 601.743573][T16627] dump_stack_lvl+0x16c/0x1f0 [ 601.748288][T16627] should_fail_ex+0x497/0x5b0 [ 601.752995][T16627] _copy_from_user+0x30/0xf0 [ 601.757625][T16627] __tun_chr_ioctl+0x2d2/0x4960 [ 601.762520][T16627] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 601.767849][T16627] ? __fget_files+0x244/0x3f0 [ 601.772572][T16627] ? __fget_files+0x244/0x3f0 [ 601.777294][T16627] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 601.782447][T16627] __x64_sys_ioctl+0x18f/0x220 [ 601.787248][T16627] do_syscall_64+0xcd/0x250 [ 601.791778][T16627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 601.797713][T16627] RIP: 0033:0x7fe0b6d7dff9 [ 601.802142][T16627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 601.821773][T16627] RSP: 002b:00007fe0b7c17038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 601.830214][T16627] RAX: ffffffffffffffda RBX: 00007fe0b6f36058 RCX: 00007fe0b6d7dff9 [ 601.838217][T16627] RDX: 0000000000005c8d RSI: 00000000400454d9 RDI: 00000000000000c8 [ 601.846215][T16627] RBP: 00007fe0b7c17090 R08: 0000000000000000 R09: 0000000000000000 [ 601.854209][T16627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 601.862197][T16627] R13: 0000000000000001 R14: 00007fe0b6f36058 R15: 00007ffd75f22c88 [ 601.870208][T16627] [ 602.968954][T16663] FAULT_INJECTION: forcing a failure. [ 602.968954][T16663] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 603.058795][T16663] CPU: 1 UID: 0 PID: 16663 Comm: syz.3.2600 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 603.069268][T16663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 603.079350][T16663] Call Trace: [ 603.082650][T16663] [ 603.085611][T16663] dump_stack_lvl+0x16c/0x1f0 [ 603.090317][T16663] should_fail_ex+0x497/0x5b0 [ 603.095022][T16663] _copy_to_user+0x30/0xc0 [ 603.099467][T16663] simple_read_from_buffer+0xd0/0x160 [ 603.104874][T16663] proc_fail_nth_read+0x198/0x270 [ 603.109918][T16663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 603.115470][T16663] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 603.121021][T16663] vfs_read+0x1ce/0xbd0 [ 603.125206][T16663] ? __fget_files+0x23a/0x3f0 [ 603.129891][T16663] ? fdget_pos+0x24c/0x360 [ 603.134317][T16663] ? __pfx_lock_release+0x10/0x10 [ 603.139352][T16663] ? __pfx_vfs_read+0x10/0x10 [ 603.144038][T16663] ? __pfx___mutex_lock+0x10/0x10 [ 603.149073][T16663] ? __fget_files+0x244/0x3f0 [ 603.153767][T16663] ksys_read+0x12f/0x260 [ 603.158024][T16663] ? __pfx_ksys_read+0x10/0x10 [ 603.162804][T16663] do_syscall_64+0xcd/0x250 [ 603.167317][T16663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 603.173223][T16663] RIP: 0033:0x7fa48bd7ca3c [ 603.177638][T16663] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 603.197335][T16663] RSP: 002b:00007fa48b7de030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 603.205753][T16663] RAX: ffffffffffffffda RBX: 00007fa48bf36058 RCX: 00007fa48bd7ca3c [ 603.213728][T16663] RDX: 000000000000000f RSI: 00007fa48b7de0a0 RDI: 0000000000000003 [ 603.221702][T16663] RBP: 00007fa48b7de090 R08: 0000000000000000 R09: 0000000000000000 [ 603.229675][T16663] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 603.237645][T16663] R13: 0000000000000001 R14: 00007fa48bf36058 R15: 00007ffd35fb0988 [ 603.245632][T16663] [ 604.041039][T16692] netlink: 5 bytes leftover after parsing attributes in process `syz.0.2606'. [ 606.350996][T16735] netlink: 'syz.2.2617': attribute type 11 has an invalid length. [ 609.971366][T16831] ------------[ cut here ]------------ [ 609.978008][T16831] WARNING: CPU: 1 PID: 16831 at mm/huge_memory.c:1602 copy_huge_pmd+0x16dd/0x2500 [ 609.987757][T16831] Modules linked in: [ 609.991689][T16831] CPU: 1 UID: 0 PID: 16831 Comm: syz.3.2642 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 610.002474][T16831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 610.012961][T16831] RIP: 0010:copy_huge_pmd+0x16dd/0x2500 [ 610.018882][T16831] Code: 01 e9 dd f5 ff ff e8 72 be 9a ff 4c 89 e3 31 ff 83 e3 02 48 89 de e8 d2 c0 9a ff 48 85 db 0f 84 a0 07 00 00 e8 54 be 9a ff 90 <0f> 0b 90 e9 88 ef ff ff e8 46 be 9a ff 49 89 ec 31 ff 41 81 e4 ff [ 610.038846][T16831] RSP: 0018:ffffc9000b067640 EFLAGS: 00010293 [ 610.045007][T16831] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff81f16abe [ 610.053008][T16831] RDX: ffff88807aa65a00 RSI: ffffffff81f16acc RDI: 0000000000000007 [ 610.061090][T16831] RBP: ffffea0001d52440 R08: 0000000000000007 R09: 0000000000000000 [ 610.069160][T16831] R10: 0000000000000002 R11: 0000000000000000 R12: d7f0000000000e02 [ 610.077214][T16831] R13: d7ffe7ffedabfe02 R14: 0000000000000200 R15: ffff88808d5661f0 [ 610.085478][T16831] FS: 00007fa48b7ff6c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 610.094486][T16831] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 610.101098][T16831] CR2: 00007fa48b718d58 CR3: 000000002f930000 CR4: 00000000003506f0 [ 610.109420][T16831] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 610.117766][T16831] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 610.125925][T16831] Call Trace: [ 610.129223][T16831] [ 610.132169][T16831] ? __warn+0xea/0x3d0 [ 610.136335][T16831] ? copy_huge_pmd+0x16dd/0x2500 [ 610.141316][T16831] ? report_bug+0x3c0/0x580 [ 610.145978][T16831] ? handle_bug+0x54/0xa0 [ 610.150346][T16831] ? exc_invalid_op+0x17/0x50 [ 610.155133][T16831] ? asm_exc_invalid_op+0x1a/0x20 [ 610.160195][T16831] ? copy_huge_pmd+0x16ce/0x2500 [ 610.165223][T16831] ? copy_huge_pmd+0x16dc/0x2500 [ 610.170203][T16831] ? copy_huge_pmd+0x16dd/0x2500 [ 610.175348][T16831] ? __pfx_copy_huge_pmd+0x10/0x10 [ 610.180500][T16831] ? lockdep_hardirqs_on+0x7c/0x110 [ 610.185831][T16831] ? __pfx___might_resched+0x10/0x10 [ 610.191180][T16831] copy_page_range+0xa66/0x5a20 [ 610.196316][T16831] ? __pfx_copy_page_range+0x10/0x10 [ 610.201633][T16831] ? mas_store+0x53b/0xad0 [ 610.206178][T16831] ? down_write+0x14e/0x200 [ 610.211005][T16831] ? up_write+0x1b2/0x520 [ 610.215687][T16831] copy_mm+0x134f/0x2550 [ 610.219988][T16831] ? __pfx_copy_mm+0x10/0x10 [ 610.224747][T16831] ? copy_process+0x38ef/0x6f00 [ 610.229661][T16831] ? __raw_spin_lock_init+0x3a/0x110 [ 610.235020][T16831] copy_process+0x3ab9/0x6f00 [ 610.239726][T16831] ? netlink_recvmsg+0x81c/0xf30 [ 610.244762][T16831] ? __pfx_copy_process+0x10/0x10 [ 610.249833][T16831] ? futex_wait+0x121/0x380 [ 610.254411][T16831] kernel_clone+0xfd/0x960 [ 610.258861][T16831] ? __pfx_kernel_clone+0x10/0x10 [ 610.263992][T16831] ? do_futex+0x123/0x350 [ 610.268352][T16831] ? __pfx_do_futex+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 610.273069][T16831] __do_sys_clone+0xba/0x100 [ 610.277793][T16831] ? __pfx___do_sys_clone+0x10/0x10 [ 610.283060][T16831] do_syscall_64+0xcd/0x250 [ 610.287657][T16831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.293598][T16831] RIP: 0033:0x7fa48bd7dff9 [ 610.298122][T16831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.318093][T16831] RSP: 002b:00007fa48b7ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 610.326921][T16831] RAX: ffffffffffffffda RBX: 00007fa48bf35f80 RCX: 00007fa48bd7dff9 [ 610.335121][T16831] RDX: 0000000020000000 RSI: 00000000000002cb RDI: 000000000000000b [ 610.343132][T16831] RBP: 00007fa48bdf0296 R08: 0000000000000003 R09: 0000000000000000 [ 610.351206][T16831] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 610.359305][T16831] R13: 0000000000000000 R14: 00007fa48bf35f80 R15: 00007ffd35fb0988 [ 610.367384][T16831] [ 610.370440][T16831] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 610.377738][T16831] CPU: 1 UID: 0 PID: 16831 Comm: syz.3.2642 Not tainted 6.11.0-syzkaller-11624-ge477dba5442c #0 [ 610.388175][T16831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 610.398258][T16831] Call Trace: [ 610.401554][T16831] [ 610.404507][T16831] dump_stack_lvl+0x3d/0x1f0 [ 610.409128][T16831] panic+0x71d/0x800 [ 610.413056][T16831] ? __pfx_panic+0x10/0x10 [ 610.417499][T16831] ? show_trace_log_lvl+0x29d/0x3d0 [ 610.422720][T16831] ? check_panic_on_warn+0x1f/0xb0 [ 610.427843][T16831] ? copy_huge_pmd+0x16dd/0x2500 [ 610.432792][T16831] check_panic_on_warn+0xab/0xb0 [ 610.437750][T16831] __warn+0xf6/0x3d0 [ 610.441709][T16831] ? copy_huge_pmd+0x16dd/0x2500 [ 610.446656][T16831] report_bug+0x3c0/0x580 [ 610.450995][T16831] handle_bug+0x54/0xa0 [ 610.455157][T16831] exc_invalid_op+0x17/0x50 [ 610.459665][T16831] asm_exc_invalid_op+0x1a/0x20 [ 610.464619][T16831] RIP: 0010:copy_huge_pmd+0x16dd/0x2500 [ 610.470188][T16831] Code: 01 e9 dd f5 ff ff e8 72 be 9a ff 4c 89 e3 31 ff 83 e3 02 48 89 de e8 d2 c0 9a ff 48 85 db 0f 84 a0 07 00 00 e8 54 be 9a ff 90 <0f> 0b 90 e9 88 ef ff ff e8 46 be 9a ff 49 89 ec 31 ff 41 81 e4 ff [ 610.489815][T16831] RSP: 0018:ffffc9000b067640 EFLAGS: 00010293 [ 610.495892][T16831] RAX: 0000000000000000 RBX: 0000000000000002 RCX: ffffffff81f16abe [ 610.503866][T16831] RDX: ffff88807aa65a00 RSI: ffffffff81f16acc RDI: 0000000000000007 [ 610.511838][T16831] RBP: ffffea0001d52440 R08: 0000000000000007 R09: 0000000000000000 [ 610.519814][T16831] R10: 0000000000000002 R11: 0000000000000000 R12: d7f0000000000e02 [ 610.527785][T16831] R13: d7ffe7ffedabfe02 R14: 0000000000000200 R15: ffff88808d5661f0 [ 610.535764][T16831] ? copy_huge_pmd+0x16ce/0x2500 [ 610.540717][T16831] ? copy_huge_pmd+0x16dc/0x2500 [ 610.545681][T16831] ? __pfx_copy_huge_pmd+0x10/0x10 [ 610.550802][T16831] ? lockdep_hardirqs_on+0x7c/0x110 [ 610.556008][T16831] ? __pfx___might_resched+0x10/0x10 [ 610.561310][T16831] copy_page_range+0xa66/0x5a20 [ 610.566200][T16831] ? __pfx_copy_page_range+0x10/0x10 [ 610.571487][T16831] ? mas_store+0x53b/0xad0 [ 610.575926][T16831] ? down_write+0x14e/0x200 [ 610.580448][T16831] ? up_write+0x1b2/0x520 [ 610.584797][T16831] copy_mm+0x134f/0x2550 [ 610.589057][T16831] ? __pfx_copy_mm+0x10/0x10 [ 610.593647][T16831] ? copy_process+0x38ef/0x6f00 [ 610.598519][T16831] ? __raw_spin_lock_init+0x3a/0x110 [ 610.603837][T16831] copy_process+0x3ab9/0x6f00 [ 610.608518][T16831] ? netlink_recvmsg+0x81c/0xf30 [ 610.613483][T16831] ? __pfx_copy_process+0x10/0x10 [ 610.618529][T16831] ? futex_wait+0x121/0x380 [ 610.623045][T16831] kernel_clone+0xfd/0x960 [ 610.627565][T16831] ? __pfx_kernel_clone+0x10/0x10 [ 610.632608][T16831] ? do_futex+0x123/0x350 [ 610.636941][T16831] ? __pfx_do_futex+0x10/0x10 [ 610.641624][T16831] __do_sys_clone+0xba/0x100 [ 610.646223][T16831] ? __pfx___do_sys_clone+0x10/0x10 [ 610.651443][T16831] do_syscall_64+0xcd/0x250 [ 610.655953][T16831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 610.661859][T16831] RIP: 0033:0x7fa48bd7dff9 [ 610.666282][T16831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 610.685893][T16831] RSP: 002b:00007fa48b7ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 610.694316][T16831] RAX: ffffffffffffffda RBX: 00007fa48bf35f80 RCX: 00007fa48bd7dff9 [ 610.702285][T16831] RDX: 0000000020000000 RSI: 00000000000002cb RDI: 000000000000000b [ 610.710256][T16831] RBP: 00007fa48bdf0296 R08: 0000000000000003 R09: 0000000000000000 [ 610.718237][T16831] R10: 0000000020000080 R11: 0000000000000246 R12: 0000000000000000 [ 610.726207][T16831] R13: 0000000000000000 R14: 00007fa48bf35f80 R15: 00007ffd35fb0988 [ 610.734192][T16831] [ 610.737424][T16831] Kernel Offset: disabled [ 610.742041][T16831] Rebooting in 86400 seconds..