last executing test programs: 5m45.488693274s ago: executing program 0 (id=125): r0 = openat$auto_ftrace_system_enable_fops_trace_events(0xffffffffffffff9c, &(0x7f00000054c0)='/sys/kernel/tracing/events/vmalloc/enable\x00', 0x20a01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x9, 0x8000) socket(0x15, 0x5, 0x0) r1 = fcntl$auto_F_SETFL(r0, 0x4, 0x0) getsockopt$auto(r1, 0x118, 0x2710, 0xfffffffffffffffc, 0x0) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x6, 0x0) socket(0x18, 0x4, 0x0) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x20c40, 0x0) socket(0x2, 0x801, 0x6) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x121080, 0x0) openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/thread-self/net/dev_snmp6/macvtap0\x00', 0x149c00, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x103400, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x42dc0, 0x1a0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, 0x0, 0x80, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x183042, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, 0x0, 0x8102, 0x0) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptye4\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto_TIOCSTI2(r2, 0x5412, &(0x7f0000000080)="058f") 5m44.526082535s ago: executing program 0 (id=130): r0 = socket(0x2, 0x1, 0x106) r1 = getsockopt$auto_SO_PEERGROUPS(r0, 0x0, 0x3b, &(0x7f0000000100)='$.\x00', &(0x7f0000000140)=0xb00) setsockopt$auto(r1, 0x6, 0xd, &(0x7f0000000280)='lp\x00h\x85M\xdf\xdc\x83\x8a\xa7\xe4]U(\x01\t=\x1e\x00\x00', 0x4) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) ioctl$auto_SG_SET_RESERVED_SIZE2(0xffffffffffffffff, 0x2275, &(0x7f0000000040)="d93ca7") mmap$auto(0x0, 0x9, 0xffb, 0x8000000008011, 0x3, 0x0) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x26}}, 0x54) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0xa, 0x3, 0xff) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x40000002c55, 0x0) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r2 = socket(0xa, 0x801, 0x84) getsockopt$auto(r2, 0x84, 0x7f, 0x0, 0x0) unshare$auto(0x40000080) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x101000, 0x0) sendmmsg$auto(r0, 0x0, 0x4, 0x6) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) wait4$auto(r3, 0x0, 0x2, 0x0) r4 = socket(0xa, 0x3, 0x3b) getsockopt$auto(r4, 0x29, 0x30, 0x0, 0x0) r5 = socket(0x2a, 0x2, 0x1) connect$auto(r5, &(0x7f00000000c0)=@qipcrtr={0x2a, 0xffffffff, 0xfffffffe}, 0x55) openat$auto_qrtr_tun_ops_tun(0xffffffffffffff9c, 0x0, 0x8000, 0x0) close_range$auto(0x2, 0x8, 0x0) r6 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) read$auto(0x3, 0x0, 0x1f40) write$auto(r6, 0x0, 0x100000fdeb) openat$auto_lockdown_ops_lockdown(0xffffffffffffff9c, &(0x7f0000000000), 0xa0042, 0x0) 5m43.949032048s ago: executing program 0 (id=135): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x0, 0x5, 0x4000000000df, 0xeb1, 0x401, 0xe0) write$auto(0x3, 0x0, 0x100082) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8003) setns(0xffffffffffffffff, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/netdevsim0/del_port\x00', 0xa001, 0x0) mmap$auto(0x0, 0x5, 0x2, 0x40eb2, 0x401, 0x300000000000) io_uring_setup$auto(0x6, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x89fc, &(0x7f0000000000)={'ip_vti0\x00'}) write$auto(r0, &(0x7f0000000380)='0\x81=\"\xad/\x8d\b\x00\x18\xa4\xb0\xb4\xd9\x82=~\x17\xfb&L\xeb=j\a\xf1y\xb3\"\xeb\a\xdd\xf4\xf4Ry\xee\xd7\x1e\x1c\x86\x0f\xcf\x7f\xbf\xab\x12{\xc2\xc2*\xc1M+6/v8\xea\xe9\x85s4\xfe\xe5\t\x7fc\xfb7^\xb86J_\x1d1s!\x01\xff\xff\xff\xff\xff\xff\xff\x1dF\xe6\xf6\x17\x10+\xc0\xb0\xafc\x99\xd4\x150Y~\x1e\xe2\xd6x4fW\x13\xc4U`\x9e-X\xd7\xe2H^\fLS`\xfc\xbb\r\f\x00\xeaN\xa5\xd2\x82;\x7f\xa0.\x9a\xfb\x8d\xf3l\xf2\xd3\x95\xc1M5\xcb\xa6I\x067\xe36\xea\xe9\xe3\xf44oT_`8\xb3\xef\x04 \x05K\xf9\x87pl\xac\x86\nE\xc7e\xc5Q\x89\xcd@\x1c\x92\x00\x87\x976\x9f>\xa2\xcfm\xec\r\x11\x7f\x00\x00\x00\xb1\xde@\x02\xce\x03\xb7\xb1\xfb\x9fr\v\xb2\xe3\xc7\b\x85K /zm\x7f\x8fg,p\a\xc8\x7f\xa5\x87\x02\x87\xbbR=A\x00\x1f\x8a\xa7/Q\"J\xbb\xb0m\xf2SP\x84\x84S\xf0\xba\x9a\xf6\xb6`WI\xba\xba*8\x9f\xea\xe8K/\x98\xbc7~>\x12\x9buB\xcb\xe4\x8aKf\xba\x8c\x19m\xe6I\x02\xde\x80\x9d\x87}\xf4\xbd9\xaa\xd6\xdb1]\xde\xa0r\x14\xca56^\x94\xd2\xd8\xe6}9\x91\xb6\xf7\xa1=\x96\x11\xf1\\\xa91\x0e\xd1\xe4z\xc1;Pw!\x8b\xf5{\xc7Xd\xf1\xf2}\x96EVf\xc9\xa8\xcd\xe4\xc9\x8d\x1d7\xd5\x94\\\xb5\r\xd2\xaa\xe6H\xfe)\xb3a\x04\x1eRMl\xa3F\xa8W0\x90\xc9Ky#\x03\xf5~\xd2Z\xe9(\x99\b\x00M\xde\x01]\r\xd09k\xc2\x84\xc1\xabN\x96\x8a6\x98@\xd3\xab\xa8m\xdf\x8d\x1d\b\x82\xfcP\x87\x93\x80\x97Q\x86\x8a\x9c\xf8L\x0f\xa8@VE2\x9d\x1e`#\xd8\xd7M\xd4k1\xe6\x13Y\\\x83E\xd0e\x0eM\xa9Q\xac\x0e\x1d]\a\x19H\x81\xd2\xccF\xc6\xd4\xe2R$\xfa\xd6}\xbdsN\x18\xdf\xf5\xffP\xf5\f\xccL\xef\x83\xb3$\xd4\xf4\xb5\xe6\xd0 \xb9\xa7\x8e6\t\x83q\xef\b\xd2\xdb', 0x1) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) keyctl$auto(0x20000000000001c, 0xffffffffffffffff, 0x363, 0xa, 0x8000000000000007) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r2, 0x40107447, &(0x7f00000000c0)={0x9, &(0x7f0000000000)={0x30, 0xf1, 0xb0, @raw=0xfffff034}}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b1613007984cb"], 0x14}}, 0x4000080) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r3, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000340)='/sys/module/hid_cougar/parameters/g6_is_space\x00', 0x129102, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000002c00), 0xffffffffffffffff) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r4, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0a550c28ec1675010027bd7000fddbdf250300000038f639f93bff0aa008000a8004000680"], 0x24}, 0x1, 0x0, 0x0, 0x20000840}, 0x840) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) fanotify_init$auto(0x8, 0x401) mmap$auto(0x0, 0x5810, 0xffb, 0x8000000008011, 0x3, 0x0) 5m42.56844871s ago: executing program 0 (id=144): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x0, 0x5, 0xa) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f00000008c0)={0x7, 0x3, 0x3}, 0xa2b, 0x0) landlock_restrict_self$auto(r0, 0x0) kill$auto(0x0, 0x11) 5m42.356606837s ago: executing program 0 (id=148): mmap$auto(0x0, 0x20009, 0x4000000000df, 0x40000000000eb1, 0x401, 0x8000) (async, rerun: 64) r0 = socket(0xa, 0x2, 0x8) (rerun: 64) setsockopt$auto(r0, 0x29, 0x14, 0x0, 0x56b) (async) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x40000000000000, 0xfffffffffffffffd, 0x2, 0x5, 0x6, 0x0, 0x200000000000001, 0x368e, 0x1, {0xffffffff, 0x4}, 0x3, 0x6, 0xad08, 0x1007ffd, 0x0, 0x8000000c, 0x81, 0x10000, 0x80000000a747, 0x3, 0x804}) (async) open(&(0x7f0000000000)='./file0\x00', 0xa61c2, 0x84) socket(0x22, 0x2, 0x24) r1 = socket(0x28, 0x5, 0x0) (async) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) (async) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f00000001c0), r0) (async) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) (async) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer2\x00', 0x202002, 0x0) (async, rerun: 32) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) (rerun: 32) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d7) (async) mmap$auto(0x3, 0xc0, 0x204000000000e1, 0x210, 0xffffffffffffffff, 0xfdd) (async) r3 = openat$auto_bch_chardev_fops_chardev(0xffffffffffffff9c, &(0x7f0000000580), 0x400, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x15, 0x5, 0x0) mmap$auto(0x0, 0x402000b, 0xdf, 0xeb2, 0x401, 0x8000) (async) r4 = socket(0x2, 0x801, 0x106) clock_adjtime$auto(0x0, &(0x7f0000000240)={0xdbd, 0x0, 0x7, 0xfffffffffffffffe, 0x600, 0x47d, 0xb, 0x0, 0x100000000, 0x8, 0x3, {0x403, 0x4}, 0xfffffffffffffff8, 0xa5, 0x9, 0xb87e, 0x0, 0xc7, 0x80, 0xb, 0x5, 0x5, 0xfffffffd}) (async) r5 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async, rerun: 64) r6 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x0, 0x0) (rerun: 64) ioctl$auto(r6, 0x2275, r5) (async) ioctl$auto_XFS_IOC_ALLOCSP64(0xffffffffffffffff, 0x40305824, &(0x7f0000000100)={0x7, 0xf, 0x6, 0x689e, 0x4}) (async) sendmsg$auto_IPVS_CMD_SET_CONFIG(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00012abd7000fddbdf250c00000008000500070000000800050008000000"], 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x20040885) (async) setsockopt$auto(r4, 0x6, 0x17, 0x0, 0x9e) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(r1, 0x7, 0x422, 0x0, 0x9) (async) ioctl$auto_BCH_IOCTL_FSCK_OFFLINE(r3, 0x4018bc13, &(0x7f00000005c0)={0x0, 0x5, 0x1, [0x0]}) 5m41.041276185s ago: executing program 0 (id=154): io_uring_setup$auto(0x6, 0x0) write$auto(0xca, &(0x7f0000000140)='\x04>\x01\x01\b\x1a\x1e`0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) write$auto(r2, &(0x7f0000000000)='*\x00', 0xfd) mmap$auto(0x0, 0x8, 0xdf, 0x29b72, 0x2, 0x8000) getsockopt$auto(0x6, 0x40000000029, 0x2, 0xfffffffffffffffe, 0x0) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.1/usb2/power/wakeup_abort_count\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000140)=""/33, 0x21) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x7, 0x9, 0x0, 0x0) mmap$auto(0x0, 0x20007, 0x80000000000000df, 0x10004000eb1, 0x5, 0x8000) 5m3.450553527s ago: executing program 3 (id=316): shmctl$auto_SHM_UNLOCK(0x18, 0xc, &(0x7f0000000100)={{0x2c6, 0x0, 0xee00, 0x0, 0x5, 0x5, 0xf2}, 0x7fff, 0x8ba1, 0x6, 0x5, @raw, @raw=0x3, 0x5, 0x0, 0x0, &(0x7f0000000080)="aaf84e6c011326ab0ac2dff6799cc4119f7a41e8b1b057d1dfcee93886dbfb63dd88ebccd32ba54280b963c9b4c181e856582fd15e333afdd8393f3688b66d612daec100"}) setresuid$auto(0x0, 0x0, r0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x10f102, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x100) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x9, 0x4020009, 0xdf, 0xeb1, r2, 0xb) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0xd, &(0x7f0000000000)={0x2e, 0xf1, 0xb, @inferred=r4}}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b1613007984cb"], 0x14}}, 0x4000080) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x202, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000600)={{@raw=0x3, 0x1, 0x8, 0x2, "4391d915756c95b99b332fc34518dad2d65afd2ad66de593fa8ddf3c4602bba49222e13081b5323335e35100", @raw=0x9}, 0x1, @integer=@value=[0x8, 0xfffffffffffffffa, 0xffffffffffff8001, 0x9a0, 0xf, 0xd, 0xaf1, 0x9, 0x8, 0x6, 0x8, 0xda, 0x1a66, 0xc3e, 0x9, 0x7, 0x100, 0x744c, 0x4, 0x8, 0x100000000, 0x5, 0x7fff, 0x5, 0x6, 0x5, 0x9, 0xbaed, 0x5, 0xffffffffffffff4e, 0x5, 0x80, 0x2, 0x316, 0x78e43e1, 0x3, 0x200, 0xe, 0xf91, 0x3, 0x4, 0xe40, 0x8e, 0x2, 0x8, 0x53, 0x5, 0x1, 0xa0000000000000, 0x0, 0x3, 0x4, 0xc9, 0xbba5, 0xffffffff7fffffff, 0x400000000, 0x200, 0x0, 0x8, 0x8, 0x1, 0x6, 0x2e9, 0xfffffffffffffffa, 0x7fffffff, 0x0, 0x8, 0x2084, 0x100, 0x3, 0xccb3, 0x492fa1fa, 0x40, 0x34e, 0x5, 0x4176, 0x7fffffffffffffff, 0x6, 0x1, 0x200, 0xb41, 0x8000000000000001, 0xf0, 0x5, 0x5, 0x5, 0x4, 0x8, 0xf, 0x7fff, 0x10001, 0x5, 0x3, 0xfffffffffffffffe, 0x7, 0xb1, 0x401, 0x2, 0xe5, 0x1, 0x80, 0x7f8e, 0x5, 0x3, 0x2, 0x40, 0xfff, 0x4, 0x7fffffff, 0x7fffffffffffffff, 0x20007, 0x2c, 0x6, 0x5, 0x4, 0x8001, 0x8000000000000000, 0x736, 0xf1c8, 0x0, 0x5, 0x9, 0x40, 0xaa4, 0x3, 0x2ea, 0x2, 0x9], "af63fbf1491d26482ebaaa1187fa45e9bb711da32c41ac9e10e079ed60e4e8d678451e57d575075a3439ba35b93e70bb6984bf7a236c74438bc62bed872e213a6a9f472bcaa2146345f3add73d7d384cda8557f43cfac2dc024a027df9e254aecd3edfea5a6a0f32d838cc7f2a76194ca464f635888172e3f1b5c0d40c401d46"}) ioctl$auto_FIOQSIZE(r3, 0x5460, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000140), 0xffffffffffffffff) openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim1/ports/0/udp_ports_reset\x00', 0x400000, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r7, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38020000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250300000017020180ac4ef4057fc1e86e4943361180ebd0adca39c0cb729d21e4c8deca6761e4ece02b6666567e483c5ad1012a80040044800c000780", @ANYBLOB="9efb05", @ANYBLOB, @ANYRES32, @ANYRES32=0x0], 0x238}, 0x1, 0x0, 0x0, 0x20000840}, 0x28000814) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) fanotify_init$auto(0x8, 0x401) mmap$auto(0x0, 0x5810, 0xffb, 0x2008000000008011, r5, 0x4) mmap$auto(0x0, 0x400000000004, 0x4000000000df, 0x40eb2, 0x402, 0x0) close_range$auto(0x2, 0x8, 0x0) r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dmmidi2\x00', 0x482102, 0x0) ioctl$auto_SW_SYNC_IOC_INC(r8, 0x40045730, 0x0) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x181100, 0x0) r9 = semctl$auto(0x0, 0x3ac3, 0x7ff, 0x80000001) waitid$auto_P_ALL(0x0, r3, &(0x7f0000000300)={@siginfo_0_0={0x2, 0x1, 0x4, @_sigchld={r9, r0, 0x40, 0x3, 0x5}}}, 0xe, &(0x7f0000000540)={{0x94a}, {0xc5a, 0x8}, 0x100, 0x8001, 0x8, 0xb, 0x3, 0x7fffffff, 0x100000001, 0x7f, 0x3, 0x1, 0x3, 0xec66, 0x4, 0x1}) 4m48.333545774s ago: executing program 33 (id=316): shmctl$auto_SHM_UNLOCK(0x18, 0xc, &(0x7f0000000100)={{0x2c6, 0x0, 0xee00, 0x0, 0x5, 0x5, 0xf2}, 0x7fff, 0x8ba1, 0x6, 0x5, @raw, @raw=0x3, 0x5, 0x0, 0x0, &(0x7f0000000080)="aaf84e6c011326ab0ac2dff6799cc4119f7a41e8b1b057d1dfcee93886dbfb63dd88ebccd32ba54280b963c9b4c181e856582fd15e333afdd8393f3688b66d612daec100"}) setresuid$auto(0x0, 0x0, r0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x10f102, 0x0) r3 = open(&(0x7f0000000000)='./file0\x00', 0x800, 0x100) msync$auto(0x1ffff000, 0x180000000000000, 0x400000004) mmap$auto(0x9, 0x4020009, 0xdf, 0xeb1, r2, 0xb) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) r4 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000040)={0x6, 0x0}) ioctl$auto_PPPIOCSPASS(r4, 0x40107447, &(0x7f00000000c0)={0xd, &(0x7f0000000000)={0x2e, 0xf1, 0xb, @inferred=r4}}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB="ea12e528ded30ff1309c8b1613007984cb"], 0x14}}, 0x4000080) r5 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x202, 0x0) r6 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r6, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc4c85513, &(0x7f0000000600)={{@raw=0x3, 0x1, 0x8, 0x2, "4391d915756c95b99b332fc34518dad2d65afd2ad66de593fa8ddf3c4602bba49222e13081b5323335e35100", @raw=0x9}, 0x1, @integer=@value=[0x8, 0xfffffffffffffffa, 0xffffffffffff8001, 0x9a0, 0xf, 0xd, 0xaf1, 0x9, 0x8, 0x6, 0x8, 0xda, 0x1a66, 0xc3e, 0x9, 0x7, 0x100, 0x744c, 0x4, 0x8, 0x100000000, 0x5, 0x7fff, 0x5, 0x6, 0x5, 0x9, 0xbaed, 0x5, 0xffffffffffffff4e, 0x5, 0x80, 0x2, 0x316, 0x78e43e1, 0x3, 0x200, 0xe, 0xf91, 0x3, 0x4, 0xe40, 0x8e, 0x2, 0x8, 0x53, 0x5, 0x1, 0xa0000000000000, 0x0, 0x3, 0x4, 0xc9, 0xbba5, 0xffffffff7fffffff, 0x400000000, 0x200, 0x0, 0x8, 0x8, 0x1, 0x6, 0x2e9, 0xfffffffffffffffa, 0x7fffffff, 0x0, 0x8, 0x2084, 0x100, 0x3, 0xccb3, 0x492fa1fa, 0x40, 0x34e, 0x5, 0x4176, 0x7fffffffffffffff, 0x6, 0x1, 0x200, 0xb41, 0x8000000000000001, 0xf0, 0x5, 0x5, 0x5, 0x4, 0x8, 0xf, 0x7fff, 0x10001, 0x5, 0x3, 0xfffffffffffffffe, 0x7, 0xb1, 0x401, 0x2, 0xe5, 0x1, 0x80, 0x7f8e, 0x5, 0x3, 0x2, 0x40, 0xfff, 0x4, 0x7fffffff, 0x7fffffffffffffff, 0x20007, 0x2c, 0x6, 0x5, 0x4, 0x8001, 0x8000000000000000, 0x736, 0xf1c8, 0x0, 0x5, 0x9, 0x40, 0xaa4, 0x3, 0x2ea, 0x2, 0x9], "af63fbf1491d26482ebaaa1187fa45e9bb711da32c41ac9e10e079ed60e4e8d678451e57d575075a3439ba35b93e70bb6984bf7a236c74438bc62bed872e213a6a9f472bcaa2146345f3add73d7d384cda8557f43cfac2dc024a027df9e254aecd3edfea5a6a0f32d838cc7f2a76194ca464f635888172e3f1b5c0d40c401d46"}) ioctl$auto_FIOQSIZE(r3, 0x5460, 0xffffffffffffffff) syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000140), 0xffffffffffffffff) openat$auto_nsim_udp_tunnels_info_reset_fops_udp_tunnels(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/kernel/debug/netdevsim/netdevsim1/ports/0/udp_ports_reset\x00', 0x400000, 0x0) sendmsg$auto_OVS_CT_LIMIT_CMD_GET(r7, &(0x7f0000004480)={0x0, 0x0, &(0x7f0000004440)={&(0x7f00000004c0)=ANY=[@ANYBLOB="38020000", @ANYRES16=r1, @ANYBLOB="01002dbd7000fddbdf250300000017020180ac4ef4057fc1e86e4943361180ebd0adca39c0cb729d21e4c8deca6761e4ece02b6666567e483c5ad1012a80040044800c000780", @ANYBLOB="9efb05", @ANYBLOB, @ANYRES32, @ANYRES32=0x0], 0x238}, 0x1, 0x0, 0x0, 0x20000840}, 0x28000814) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) fanotify_init$auto(0x8, 0x401) mmap$auto(0x0, 0x5810, 0xffb, 0x2008000000008011, r5, 0x4) mmap$auto(0x0, 0x400000000004, 0x4000000000df, 0x40eb2, 0x402, 0x0) close_range$auto(0x2, 0x8, 0x0) r8 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000280)='/dev/dmmidi2\x00', 0x482102, 0x0) ioctl$auto_SW_SYNC_IOC_INC(r8, 0x40045730, 0x0) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000000), 0x181100, 0x0) r9 = semctl$auto(0x0, 0x3ac3, 0x7ff, 0x80000001) waitid$auto_P_ALL(0x0, r3, &(0x7f0000000300)={@siginfo_0_0={0x2, 0x1, 0x4, @_sigchld={r9, r0, 0x40, 0x3, 0x5}}}, 0xe, &(0x7f0000000540)={{0x94a}, {0xc5a, 0x8}, 0x100, 0x8001, 0x8, 0xb, 0x3, 0x7fffffff, 0x100000001, 0x7f, 0x3, 0x1, 0x3, 0xec66, 0x4, 0x1}) 2m18.139945726s ago: executing program 5 (id=907): r0 = socket(0x2, 0xa, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x100000, 0x8}, 0xfff}, 0x5, 0x311) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000280)='/dev/audio1\x00', 0xa3db) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x505042, 0x0) socket(0x3, 0x5, 0x5) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0ro\x00', 0x2000, 0x0) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd700001dcdf2503000000040006000c000180080010000400"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(r3, 0x4d13, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)="3098412d1d2a21f9821bbb6575682f4fa969d6d8f51ad133eb2fb3cd698bac435177fc1942f009b507130df5d599f4ff6031c5518c8e660d59059846f0326039e724f62ba81e019302f5") sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r6 = eventfd$auto(0x34b) readv$auto(r6, &(0x7f0000000380)={0x0, 0x8}, 0x4) read$auto(r1, 0x0, 0xcc9f) write$auto(r6, &(0x7f00000001c0)='\'\x00', 0x8) r7 = socket(0xa, 0x5, 0x84) sendto$auto(r7, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80fffe00"}, 0x1c) close_range$auto(0x0, r0, 0x1002) socket(0x1d, 0x6, 0x3) 2m16.662649766s ago: executing program 5 (id=912): r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy6/netdev:wlan1/stations/08:02:11:00:00:00/flags\x00', 0x8000, 0x0) r1 = getpid() process_vm_readv$auto(r1, 0x0, 0x1, 0x0, 0x6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x181842, 0x0) read$auto(r2, 0x0, 0x1) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) r3 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0xd, 0x0) fsopen$auto(0x0, 0x1) setsockopt$auto(r3, 0x104000000000010e, 0x2, 0x0, 0x400) unshare$auto(0x40000080) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) rt_sigqueueinfo$auto_SIGCONT(r1, 0x12, &(0x7f00000000c0)={@siginfo_0_0={0x8, 0x7, 0x5, @_sigpoll={0x4, r0}}}) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r0, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'veth0\x00'}) close_range$auto(0x0, 0xffffffffffffffff, 0x2) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) r5 = socket(0x18, 0x5, 0x1) connect$auto(r5, &(0x7f0000000000)=@in={0x2, 0x100}, 0x3a) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20006, 0x4000000000df, 0xeb1, 0x4, 0x8000) 2m15.545130709s ago: executing program 5 (id=917): r0 = socket(0x28, 0x5, 0x0) connect$auto(r0, 0x0, 0x56) 2m15.292627524s ago: executing program 5 (id=920): mmap$auto(0x8, 0x5, 0x3, 0x1000eb1, 0xffffffffffffffff, 0x6) socketpair$auto(0x81, 0x7ff, 0xf1, &(0x7f0000000040)=0x3) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000780)='/proc/self/net/rpc/auth.rpcsec.init/channel\x00', 0x441, 0x0) r0 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/thread-self/fail-nth\x00', 0x2, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/ram9/diskseq\x00', 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r1, 0x8000) read$auto(r1, 0x0, 0x20) writev$auto(r0, &(0x7f0000000200)={0x0, 0x64}, 0x8000000000003) openat$auto_wakeup_sources_stats_fops_wakeup(0xffffffffffffff9c, &(0x7f0000000000), 0xc8400, 0x0) 2m14.320275717s ago: executing program 5 (id=923): rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS0\x00', 0x1, 0x0) ioctl$auto(r0, 0x5408, r0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r1, 0x4b4a, 0x9) r2 = socket(0xa, 0x2, 0x0) socket(0xa, 0x801, 0x84) r3 = socket(0x2, 0x801, 0x100) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000005c0)={'veth0_to_bond\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r4, r3, 0x0, 0x0, 0x1, @relative_fd, 0x5}, 0x96) setsockopt$auto(r2, 0x29, 0x30, 0x0, 0xd393) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.1/usb2/power/wakeup_abort_count\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f0000000140)=""/33, 0x21) 2m13.719105373s ago: executing program 5 (id=925): socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1bf1, 0x4020009, 0x2000000000006, 0xfff, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, r0, 0x8, 0x8, 0x1, @relative_id=0x5, 0x2}, 0x92) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r3 = pidfd_getfd$auto(0x3, 0x1, 0x100000000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_1={r3, 0x9, @next_key, 0xffffffffffffffff}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/queues/tx-10/xps_cpus\x00', 0x8080, 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/user/max_fanotify_groups\x00', 0x202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0xfffffffe) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, 0x0, 0x6f3) r4 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0xf82, 0x0) readv$auto(r4, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) 2m13.37983383s ago: executing program 34 (id=925): socket(0x2b, 0x1, 0x1) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x1bf1, 0x4020009, 0x2000000000006, 0xfff, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_5={@target_ifindex=r1, r0, 0x8, 0x8, 0x1, @relative_id=0x5, 0x2}, 0x92) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'syz_tun\x00'}) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r3 = pidfd_getfd$auto(0x3, 0x1, 0x100000000) bpf$auto(0x0, &(0x7f0000000040)=@bpf_attr_1={r3, 0x9, @next_key, 0xffffffffffffffff}, 0x92) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, 0xffff, 0x0, 0x3}, 0xc) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/queues/tx-10/xps_cpus\x00', 0x8080, 0x0) mmap$auto(0x0, 0x40009, 0x36, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x0) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/user/max_fanotify_groups\x00', 0x202, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0xfffffffe) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) bpf$auto(0x0, 0x0, 0x6f3) r4 = openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cpu/1/msr\x00', 0xf82, 0x0) readv$auto(r4, &(0x7f00000000c0)={0x0, 0x101d0}, 0x400) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) 3.015962278s ago: executing program 1 (id=1399): signalfd4$auto(0xffffffffffffffff, &(0x7f0000000080)={0x8}, 0x4, 0x5) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x3, 0x0, 0x81, 0x0, 0x78) r0 = gettid() tkill$auto(r0, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x38, 0x6, 0x8000) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0001, 0x0) r1 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000240), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r1, 0xc004743e, 0x0) shmctl$auto_SHM_INFO(0x7, 0xe, &(0x7f0000001080)={{0x5, 0x0, 0x0, 0xffffffd6, 0x2, 0x5, 0x8}, 0x2000400, 0x4, 0xb3, 0x1800000000000000, @raw=0x80, @raw=0x2, 0x80, 0x0, &(0x7f0000000000)="fbfc5ab80473a07faab0aa0f45053e1aa1d2cb0584d814e78ce7bf8c87e1a81785f0da9e2ff2f6e8a127427230edf384f85984942bc3da3bcbbcc2dba59e94bffbe6d6b4a47e77e95e", 0x0}) ioctl$auto_SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f00000000c0)={{0xfffffe01, 0x4, 0x7ff, 0x8, 0x8}, 0x800, 0x7441, "a02bfe35ba6087bc480b90d57b7be01547e2f1feac58f5ff1bdca283c2c826c291dc1d3e2eab1a14871a412539f0b16207c63190ce7a584b2a30945f6855d5dc", "9b456206640515c0b1f05632d19bb46c8190424bc99edb2bf4edd623f82a5f2c18d69fc5217e986b74e5a67c4ca684e3cf59d66ff242ee026c1331d9e43ee7e73ebff3274823d2786ac9f41fe59bf180", 0x100000001, 0x10001, 0xffffffffffffff59, 0x1, 0x4, "ab00bf495f1c90ffb61dad41c6d290399f4ba524c10ef287dc6c294d4f0d98d1"}) epoll_create$auto(0x2) socket(0xa, 0x6, 0x0) socket(0x2b, 0x1, 0x21) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) syz_open_procfs$namespace(0x0, 0x0) ioperm$auto(0x7, 0x6, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) select$auto(0x11, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x9, 0xd, 0x1, 0x9, 0x4, 0x15f4da0b, 0x3, 0x5, 0xc, 0x80400001, 0x4, 0x6d3f, 0x9, 0x2, 0x4000000000000d]}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket(0x18, 0x2, 0x0) socket(0x1e, 0x2, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20803, 0x0) r3 = socket(0x18, 0x4, 0x1) ioctl$sock_SIOCGIFINDEX(r3, 0x40047452, 0x0) 2.780757338s ago: executing program 1 (id=1401): openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) mmap$auto(0x2, 0x8, 0xdf, 0x17, 0x2, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @loopback}, 0x6a) sendmsg$auto_NFC_CMD_GET_SE(r0, 0x0, 0x24044001) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0x7}, 0x6}, 0x5, 0x20000000) mmap$auto(0x0, 0x200006, 0x2, 0x40eb1, 0x602, 0x300000000000) write$auto(0x3, 0x0, 0xfffffdef) close_range$auto(0x2, 0x8, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/platform/dummy_hcd.1/usb2/power/wakeup_abort_count\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/33, 0x21) 2.639533442s ago: executing program 2 (id=1402): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_GET_TXSC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002b00)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES64=r0, @ANYRESHEX], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x0) r1 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/snd/controlC1\x00', 0x331200, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_TLV_READ(r1, 0xc008551a, &(0x7f00000000c0)={0x10, 0xd}) 2.613138339s ago: executing program 1 (id=1403): prctl$auto_PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x5) 2.46895594s ago: executing program 6 (id=1405): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) socket(0x2, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6a) syz_open_procfs$namespace(0xffffffffffffffff, 0x0) sendmsg$auto_ETHTOOL_MSG_STATS_GET(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="811428bd7000fedbdf2520000000"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0xa884) write$auto(0x3, 0x0, 0xfffffdef) r1 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptyv6\x00', 0x101e81, 0x0) socket(0x2b, 0x1, 0x1) io_uring_setup$auto(0x6, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) fanotify_mark$auto(r1, 0x52, 0x4, 0xffffffffffffffff, 0x0) r3 = openat$auto_nodes_fops_netdebug(0xffffffffffffff9c, &(0x7f0000000080), 0x20000, 0x0) recvmmsg$auto(r3, &(0x7f0000000440)={{&(0x7f00000000c0)="281b7b82de94430caf77b657933c56a709b0865f486d50d44fb0fd0f92d0f36a15c06f27e0d8756f474a1ef0f14475a4d1663f92abdcd26914fa8ee8dfad3a5983765dd40f8ba75e2ce81b1336c60380a69fe8671a9fe92daa4a5c42d5f8c00f2044eb5abbab4397636eae68faf2ad6683dcd6ccc6", 0x1ff, &(0x7f0000000380)={&(0x7f0000000280)="9036a022f9f6f2969a70a630907370dd893e238445bd5cd204724fe70bba66d2aabbad211fc13cc54acc1b80dd5e46ae548fb1f53ef37328fac60195f261b63d5e7f21545a7446006c342cdf635e66c9b83ba04221dc9e51566470db6cbd10fb9065e099347fd19d130e5e011e0bbdebac93e0872ef2583b370a621a7e7e2ebc52f87d36d7efc0de12ffff6390ee83da09bd377c78d1ec4e653e974d7fd84cf80043e24e0cea397fea9dc563200ec3ea7701a3e00f6adea9db2843370a926a4fe7d29230b5", 0x6}, 0x8001, &(0x7f0000000400)="d22dab202c43afbc1b29cb9e349e9abc8a1ef36f1d22481b7c48d70d6b97e3", 0x5, 0x83}, 0x7}, 0x0, 0x6, &(0x7f0000000480)={0x8, 0x6}) 2.408462526s ago: executing program 1 (id=1406): sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/block/loop11/mq/0/nr_tags\x00', 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio1\x00', 0x8000, 0x0) read$auto(r1, 0x0, 0x9) close_range$auto(0x2, 0x8, 0x0) socket(0x1e, 0x805, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x802, 0x0) ioctl$auto(0x3, 0x40045532, 0x38) openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/pcmC1D0c\x00', 0x88c40, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000001100)=""/4080, 0xff0) r2 = socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @remote}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) sendmsg$auto_NL802154_CMD_NEW_SEC_LEVEL(r2, 0x0, 0x1) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) shutdown$auto(0x200000003, 0x2) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) timerfd_create$auto(0x5, 0x3) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, 0x0) close_range$auto(0x2, 0x8000, 0x0) 2.331966624s ago: executing program 2 (id=1407): r0 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000080), 0x8000, 0x0) ioctl$auto_I2C_PEC(r0, 0x708, 0x0) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) shmctl$auto_IPC_SET(0x1000, 0x1, &(0x7f00000000c0)={{0x7f, 0xee00, 0x0, 0x3, 0x4, 0xfffffffc}, 0xf, 0xcb2, 0x1a, 0x9, @raw=0x3, @inferred, 0x9, 0x0, &(0x7f0000000000)="73d4e92d26b40cb20d2a3726e58afb159518c7cfae344fc96bf3dcea7b0a4cf91f842412633b34fc55e242fc952a3717df6174", &(0x7f0000000040)="e204017fec3a2155e145ce9ceaea67e3aeefe70601d18047fbb9b3b77e30c079da8b149d5c09fe9924ee822decb229a0ff04275f8bad2e346f33e26abdb2a04ec24bb5bfc6b8a4844e1a669d57d7d29bf0c194268511a5"}) keyctl$auto(0x1d, 0xffffffffffffffff, r1, 0x0, 0x8) 2.18995341s ago: executing program 4 (id=1408): r0 = socket(0x2, 0xa, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x100000, 0x8}, 0xfff}, 0x5, 0x311) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) adjtimex$auto(0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000280)='/dev/audio1\x00', 0xa3db) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x505042, 0x0) socket(0x3, 0x5, 0x5) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0ro\x00', 0x2000, 0x0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0ca0316dfbc86a7f010026bd7000080000000f000000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd700001dcdf2503000000040006000c000180080010000400"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(r3, 0x4d13, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)="3098412d1d2a21f9821bbb6575682f4fa969d6d8f51ad133eb2fb3cd698bac435177fc1942f009b507130df5d599f4ff6031c5518c8e660d59059846f0326039e724f62ba81e019302f5") sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r6 = eventfd$auto(0x34b) readv$auto(r6, &(0x7f0000000380)={0x0, 0x8}, 0x4) read$auto(r1, 0x0, 0xcc9f) write$auto(r6, &(0x7f00000001c0)='\'\x00', 0x8) r7 = socket(0xa, 0x5, 0x84) sendto$auto(r7, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80fffe00"}, 0x1c) close_range$auto(0x0, r0, 0x1002) socket(0x1d, 0x6, 0x3) 2.114677486s ago: executing program 6 (id=1409): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24040804}, 0x4000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x0) select$auto(0x804, 0x0, &(0x7f0000000100)={[0x9, 0x0, 0x0, 0x80000300, 0x1, 0x0, 0x2, 0x3, 0x81, 0x10000005e58296b, 0x1e, 0x9, 0x7ff, 0x200, 0x20000000008, 0x4000000000006]}, 0x0, 0x0) io_uring_setup$auto(0x0, &(0x7f0000000000)={0x7fff, 0x66, 0x3, 0x14, 0x7, 0x4, 0xffffffffffffffff, [0x0, 0x32, 0x7fffffff], {0x101, 0x6, 0x0, 0x0, 0xa5, 0x7, 0xb, 0xba90, 0x5}, {0xfffffc00, 0x3, 0x0, 0x401, 0x8, 0x8, 0x0, 0x3, 0x6}}) lstat$auto(&(0x7f0000000000)='./file1\x00', 0x0) fchdir$auto(r0) r1 = socket(0x2, 0x6, 0x0) socket(0x18, 0x5, 0x2) r2 = openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/dri/vkms/Writeback-1/output_bpc\x00', 0x0, 0x0) bind$auto(r2, &(0x7f0000000000)=@in={0x2, 0x0, @empty}, 0x20006b) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) io_setup$auto(0x10000, &(0x7f0000000040)) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}}, 0x20044000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x103, 0x0) 1.97204521s ago: executing program 2 (id=1410): r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/dummy0/addr_gen_mode\x00', 0x1, 0x0) r1 = socket(0x2c, 0x3, 0x0) getsockopt$auto_SO_DEBUG(r1, 0x4, 0x1, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xe2, 0x9b72, 0x7, 0x28000) syz_clone3(&(0x7f00000004c0)={0x2000000, 0x0, 0x0, 0x0, {0x21}, 0x0, 0x0, 0x0, 0x0}, 0x58) futex$auto(0x0, 0x8d, 0x0, 0x0, 0x0, 0x100) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) r2 = socket(0x2, 0x6, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x80502, 0x0) close_range$auto(0x2, 0x8, 0x0) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a) sendmmsg$auto(r2, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x7}, 0x5, 0x20000000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x5, 0x80009}, 0x7}, 0x101, 0x0) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) write$auto(r0, &(0x7f0000000180)='\v\x90\x00\x00\x00\x00\x18\xbe\xdc\x00x\x91\xf9Vz>8\xbe\x91\xd8\xa9\x1b4\r\xd5\xc0R\xf1\xbb141\xe1NcR\xfe\x80\xcb9&\x8f\x96)^\xe6\xbf\x83t\xd7&\x96\xc8\x145K\xb9kUY\xac\x95t\xed\xfa_\xf4(\x8cU\x8dJE\xd0\x1a9\xf9\xf0:\xd4\xb96\'\xcdI0,\xd3f>\xfa\xe6F', 0x1) close_range$auto(0x0, 0xffffffffffffffff, 0x2) r3 = memfd_create$auto(&(0x7f00000000c0)='IPVS\x00\x84\x94\xbf\x7f\xe0(\xc7^M\xbe\x92\x98?I\xa5\x95V\xf2{\xd6\xc1\xc4.\xc3ja\xe8\xa1o\xb5-Z\x9dc\x152\xaew`0M\x1b3\r\x8afQ\xc2\x82W?r$\xf0\xce\x7f\x15\xa1\x13\xb2\x84\x04\xad<\x91\x85\xb22G\xf6\x8b\xba<\xe9&\x17%\x1a\xa5c\xe8\x06\xd4ok\x8a\xb2\xbaz\xf1\v\xf4\xaa\xda\x91\xfb\xea\x17~C\xb3\xc4S\xce\x83\x13\xd9\xbd{d\xfdB]\xb0R\x05b\x1b\xa5\xb8\x85\xa9\xbc5-9\x94\xa4QG\x06Z3#\x1cK\xbe\x16\xebaE~\x00\x00\x00\x00\x00', 0xa) fchmod$auto(0x0, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r3) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000380)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xc4, r5, 0x8, 0x70bd29, 0x25dfdbfc, {}, [@NL80211_ATTR_STA_SUPPORTED_CHANNELS={0x72, 0xbd, "03f9b056e2e7705e52dac3e31e8fc3104ecdec3e6832e766e571c1200ebaf44aaaf81b69a54876c102db45b45be97e4e8580d8a5191e71ff1401216da2ce1d8605f855c44e4948ec5b93c89ab6219881ce909f03b0cbe53d808c839649345909fa36410768cd4bea0e6d7b8c6456"}, @NL80211_ATTR_FILS_ERP_RRK={0x12, 0xfc, "b13020f67f13bc1a42081fec217f"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0x7}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_FRAME_MATCH={0x1a, 0x5b, "d9982b14ad005895ad4c0ab88365fb5416ff6d0a2bcd"}]}, 0xc4}, 0x1, 0x0, 0x0, 0x4014}, 0x1) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/afs/addr_prefs\x00', 0x8104, 0x0) read$auto_proc_reg_file_ops_compat_inode(r6, &(0x7f0000000e80)=""/215, 0xd7) 1.779585585s ago: executing program 1 (id=1411): mmap$auto(0xffffffffffffffff, 0x7, 0x2, 0x19, 0xffffffffffffffff, 0x300000000000) io_uring_register$auto(0xffffffffffffffff, 0x5, 0x0, 0x5) mmap$auto(0x4, 0x2020009, 0x7, 0xeb1, 0xffffffffffffffff, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vkms/graphics/fb0/state\x00', 0xc2481, 0x0) r1 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x28100, 0x0) ioctl$auto(r1, 0x64d0, 0x40) write$auto(r0, &(0x7f0000000040)='0\x00\\\xa0\x04|\x02\xcb\x00\x00\x01\x1c\xc7k', 0x81) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffff7ffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0x10008, 0xfffffffffffeffff, 0x19) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x0) setgroups$auto(0xe32, 0x0) mmap$auto(0x0, 0x40002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x3) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/fail-nth\x00', 0x80001, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x2000, 0x0) mmap$auto(0xff, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x592acfeb) io_uring_setup$auto(0x6, 0x0) execve$auto(&(0x7f0000000000)=':,\x00', 0x0, 0x0) socket(0x10, 0x2, 0xc) mlockall$auto(0x7) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa\x00', 0x0, 0x0) openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) 1.72945225s ago: executing program 4 (id=1412): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) ioctl$auto(r0, 0x5523, r0) r1 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyd3\x00', 0x400200, 0x0) ioctl$auto_TIOCSETD2(r1, 0x5423, &(0x7f0000000080)="985572db425b1549b0114d22ed3b1bc2f44d817e5189d54ee8024bee83799041d1df43a0a5187e897b51847fcbac9eb179f616daf048745bd2e049e378b7c6b6c6aa94c776ddc5539dd0b48bf5c0bdb4f1b34d3b6b23ded52e97ba5955f5115b211b787855366c67f5e6b6c1a482d259d05af7adb99dcafc00fdaf10a040984e40668ecf37b096b697ef19597fdf81475aa1d77f193bab2d0591247003e51e5c926faed5a44621bd") 1.430097726s ago: executing program 4 (id=1413): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/system/node/node1/hugepages/hugepages-1048576kB/demote\x00', 0x8b801, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, 0x0, 0x8000) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_DEL_RADIO(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="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"], 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0xc1) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) mmap$auto(0x0, 0x10000, 0x4000000000db, 0xeb1, 0x2, 0x8000) read$auto(r2, 0x0, 0x20) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) write$auto_aoe_fops_aoechr(0xffffffffffffffff, 0x0, 0x0) mmap$auto(0x0, 0x20009, 0x8004000000000df, 0xeb1, 0x401, 0x8000) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/conf/veth0_vlan/arp_accept\x00', 0x0, 0x0) read$auto(r4, 0x0, 0x1ff) acct$auto(&(0x7f0000000040)='/proc/sys/net/ipv4/conf/veth0_vlan/arp_accept\x00') write$auto(r0, &(0x7f0000000080)='\x00', 0x4d77) write$auto(0x3, 0x0, 0xfdef) 1.207147877s ago: executing program 6 (id=1414): prctl$auto_PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x1, 0x5) 1.183970805s ago: executing program 2 (id=1415): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/lapb5/broadcast\x00', 0x800, 0x0) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x34d802, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x6ab82, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) ioctl$auto_KVM_CREATE_VM(r1, 0xae80, 0x0) ioctl$auto(0x3, 0xae41, 0xffffffffffffffff) ioctl$auto_KVM_GET_MSRS(r1, 0xc008ae88, &(0x7f0000000040)={0x100, 0x0, [{0xda, 0x4, 0x9}, {0x1, 0x1, 0x1}]}) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000100)=""/16, 0x10) 1.111445825s ago: executing program 4 (id=1416): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffffffffff, 0x8000) r0 = openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) ioctl$auto(r0, 0x6f2d, r0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) epoll_create$auto(0x3e) r1 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r2 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r2, 0x2284, r1) 956.985436ms ago: executing program 6 (id=1417): r0 = socket(0x2, 0xa, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x10, &(0x7f00000000c0)={0x0, 0x1fff8}, 0x7, 0x0, 0x100000, 0x8}, 0xfff}, 0x5, 0x311) r1 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, 0x0, 0x2dc08f24db163610, 0x0) openat$auto_drm_edid_fops_drm_debugfs(0xffffffffffffff9c, 0x0, 0x40901, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x9, 0x81, 0xdfffffffffff628e, 0x6, 0xdeb1, 0x808}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D1\x00', 0x1, 0x0) write$auto(r2, &(0x7f0000000280)='/dev/audio1\x00', 0xa3db) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, 0x0, 0x4a801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) openat$auto_uprobe_events_ops_trace_uprobe(0xffffffffffffff9c, 0x0, 0x505042, 0x0) socket(0x3, 0x5, 0x5) r3 = openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mtd0ro\x00', 0x2000, 0x0) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0ca0316dfbc86a7f010026bd7000080000000f000000"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) r4 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010029bd700001dcdf2503000000040006000c000180080010000400"], 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x800) ioctl$auto_MTDFILEMODE(r3, 0x4d13, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f00000002c0)="3098412d1d2a21f9821bbb6575682f4fa969d6d8f51ad133eb2fb3cd698bac435177fc1942f009b507130df5d599f4ff6031c5518c8e660d59059846f0326039e724f62ba81e019302f5") sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r6 = eventfd$auto(0x34b) readv$auto(r6, &(0x7f0000000380)={0x0, 0x8}, 0x4) read$auto(r1, 0x0, 0xcc9f) write$auto(r6, &(0x7f00000001c0)='\'\x00', 0x8) r7 = socket(0xa, 0x5, 0x84) sendto$auto(r7, 0x0, 0x401, 0x7f, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe80fffe00"}, 0x1c) close_range$auto(0x0, r0, 0x1002) socket(0x1d, 0x6, 0x3) 861.719228ms ago: executing program 2 (id=1418): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/rxrpc/stats\x00', 0x62240, 0x0) r1 = socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r3, r2, 0x200, 0x1ff, r1, @relative_id=0x13, 0xe600}, 0xf) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000240)=""/7, 0x7) 846.906922ms ago: executing program 4 (id=1419): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x1, 0x6, 0x0, 0x1, 0x368e, 0x2, {0x100000000, 0x10000}, 0x5, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) r2 = openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/input/event2\x00', 0x20081, 0x0) futex$auto(0xfffffffffffffffd, 0x9, 0x402, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x21) write$auto(r2, &(0x7f00000000c0)='/nt0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xa9\xa4\xe2\xac\xe9', 0x7fe) statmount$auto(0x0, &(0x7f0000000180)={0x8000008, 0x1, 0x38a1, 0x3, 0x26, 0x940, 0x3, 0x3, 0x6, 0x902c, 0x29, 0x400005, 0x3, 0x4, 0x337b, 0x8, 0x9, 0x3, 0x5, 0x6, 0x0, 0xffffffff, 0xfffffffe, 0x0, 0x0, 0x0, [0x3, 0x3, 0x200000000, 0x400000000, 0x0, 0x3903, 0x0, 0x4, 0x3, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0xffffffeffffffffe, 0x4, 0x0, 0xceb, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x96f, 0xffffffffffffffff, 0x2, 0x4001, 0x3, 0x0, 0xb548, 0x8, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x3]}, 0xfffff7fffffffffa, 0x81) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="720100", @ANYBLOB], 0x1ac}}, 0x0) r3 = socket(0x10, 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) open(0x0, 0x2, 0x17f) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000500)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdc00}, 0x14}, 0x1, 0x0, 0x0, 0x2840}, 0x2004881c) bind$auto(0x3, &(0x7f0000000000)=@generic={0x10, "a500acb75c9cedd1b5e9a0d76293"}, 0x68) fcntl$auto(0x3, 0x400, 0x1) fremovexattr$auto(0x3, &(0x7f0000000080)='\\-\x00') r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000840), r6) sendmsg$auto_OVS_CT_LIMIT_CMD_SET(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="3f636dbc6afb0762a2a6f067cd897ed976e254aa119cc3cea96096ac39e7f851dc86eca55c8d19feabe3fcf904774dcd05007b804e7bfc", @ANYRES16=r7, @ANYBLOB="01002ebd5100fbcbdf250100000004000180072e0180"], 0x2e20}, 0x1, 0x0, 0x0, 0x2000c040}, 0x4) sendmsg$auto_OVS_FLOW_CMD_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010029bd7000fbdbdf2502ff"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x840) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x2404c000) write$auto(r4, &(0x7f0000000000)='-\x00', 0x2fb) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x114, r1, 0x1, 0x5, 0x25dfdbfb, {}, [@HWSIM_ATTR_RADIO_NAME={0xff, 0x11, 'we\xe4\xe26\x9b\x89Wdr\x97tD\xbb\x13\x99\x0fR\xb9\x1a}\xad\xc5\xacS\xac\x13Q\xb4\xe9Nf\xcb\xbc=\x15\xed\x91I[\x01\xeap\xc2\b\x99\xc1\xab\x8ck;\xa9\x84\x06\xb2O\x11\x88\v\xd3\xfe\xfc\xf0\xfbS\xa8\xe2%\x85:,7x\xb8G\x06\xe2pe\x83\xbe2\x0e\xf1\xfe\xbc\x0f=\x9c;v\xd8\x0e\x16M\xfa5\x00F\x83\xab0\f[\x87\xff\t\xe8\x80\x83\'\x80\xfa\xb7\xe8\xf2\xdd @\xab\xd5\x860\x1azC\x0f\xe0\x8a\x15\xe9\x83\xa5\xabu\x17\xf3\xbbq\xb1\xd3\xcc\xaeO\xe2\x94\x1e_\xe6\xb1\xb2\xa6\\bOF8\xbb\xf2Il@\xc0\xaa\x9a\xa6P|q\x93\t,\xa6\x9f\xb8h\xf2V\x9b\a\xaa\xf4n8H-1\xdf\xb7\x9c\xc5S\x1f\xfc\xb0\x16nh\x06\x8fL\xef\xef\xd0\x03f|\xfe\xe0\x02-.Q.`\xfb\xca\xe1\xe9%W3\xb7\xdd\xcd\x02\xd7\x88\ap\t\x1f\xed\x8f\xb8\xd2\xee\xcb\xe6#\x18\x80/I\xe64\xca\xdb\x0e;\xc1'}]}, 0x114}, 0x1, 0x0, 0x0, 0x44004811}, 0x40000c0) 509.267887ms ago: executing program 6 (id=1420): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x3, 0x9, 0x9, 0x3, 0x361, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x4, 0x0, 0x2, 0x0, 0x2000, 0x0, 0xe, 0x70624ce7, 0xfffffffffffffff7, 0xfffffffffdfffffd, 0xffffffffffffffff, 0x4000, 0x0, 0x6, 0x0, 0xfffffffffffbfffd, 0x4, 0x1, 0x10000000000, 0x7, 0x800, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x400000000005b8, 0x14ee, 0x3, 0x0, 0x0, 0x6, 0xffffffffffffffff, 0x88e, 0x8000000000008, 0xfffffffffffffffe, 0x9, 0xa38, 0x0, 0x3, 0xfffffffffffffffc, 0x2, 0x1, 0x4]}, 0x1fe, 0xd) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000012c0)={'veth0_macvtap\x00', 0x0}) sendmsg$auto_NETDEV_CMD_BIND_RX(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)={0x1c, r1, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NETDEV_A_DMABUF_IFINDEX={0x8, 0x1, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000004) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) recvmmsg$auto(r3, &(0x7f0000000000)={{0x0, 0x4, &(0x7f0000000080)={&(0x7f0000000040), 0xcb}, 0x5, 0x0, 0x6, 0x6}, 0x9}, 0x7, 0x6, 0x0) r4 = socket(0x10, 0x2, 0x0) r5 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_GET_REG(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYRES16=r5], 0x1ac}}, 0x40000) 361.381027ms ago: executing program 4 (id=1421): r0 = getpid() mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r1 = socket(0x2b, 0x1, 0x1) r2 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) ioctl$auto_PPPIOCSMRU(r2, 0xc004743e, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r1, 0x0, 0x20000001) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x400c000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001480)={'veth0_virt_wifi\x00'}) sendmsg$auto_NL80211_CMD_GET_MPP(r1, 0x0, 0x880) munmap$auto(0x8000, 0xffffffff) getrandom$auto(0x0, 0x6000000, 0x3) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x3, 0x4) mmap$auto(0x0, 0x2020009, 0x3, 0x400000eb1, 0xfffffffffffffffa, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) close_range$auto(0x2, 0x8, 0x0) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000100)="8bf787f8d165870b390537b8a766bde277efe9019b60d28e8b5f62d55ed932ce8006ad6820d333988f6acae69d83d8b9672b76d95ac7bd9e9b6a6647b590b6a12d9bf16b37036ccdc25e1e42476bb54811ad", 0xffffffff}, 0x6, 0x0) r3 = pidfd_open$auto(r0, 0x0) setns(r3, 0x60020000) ioctl$auto(r3, 0x8, r3) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sda\x00', 0x100, 0x0) 262.859463ms ago: executing program 2 (id=1422): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000380)='/sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x800, 0x0) sysfs$auto(0x9, 0x402, 0x3) r1 = socket(0x2, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) read$auto(r0, 0x0, 0x7) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000010c0)='/dev/snd/controlC1\x00', 0x840, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, 0x0, 0xc02, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r2 = open$dir(&(0x7f0000000000)='./file0\x00', 0x127e80, 0x80) faccessat2$auto(r2, &(0x7f0000000040)='./file0\x00', 0xb, 0x3) bpf$auto(0x5, 0x0, 0x201) keyctl$auto(0x1e, 0x0, 0x0, 0xfffffffffffffffd, 0x1) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x10008, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) setresuid$auto(0x0, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1.769016ms ago: executing program 1 (id=1423): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24040804}, 0x4000) close_range$auto(0x2, 0x8, 0x0) r0 = io_uring_setup$auto(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x6, 0x0) select$auto(0x804, 0x0, &(0x7f0000000100)={[0x9, 0x0, 0x0, 0x80000300, 0x1, 0x0, 0x2, 0x3, 0x81, 0x10000005e58296b, 0x1e, 0x9, 0x7ff, 0x200, 0x20000000008, 0x4000000000006]}, 0x0, 0x0) io_uring_setup$auto(0x0, &(0x7f0000000000)={0x7fff, 0x66, 0x3, 0x14, 0x7, 0x4, 0xffffffffffffffff, [0x0, 0x32, 0x7fffffff], {0x101, 0x6, 0x0, 0x0, 0xa5, 0x7, 0xb, 0xba90, 0x5}, {0xfffffc00, 0x3, 0x0, 0x401, 0x8, 0x8, 0x0, 0x3, 0x6}}) lstat$auto(&(0x7f0000000000)='./file1\x00', 0x0) fchdir$auto(r0) r1 = socket(0x2, 0x6, 0x0) socket(0x18, 0x5, 0x2) r2 = openat$auto_output_bpc_fops_(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/dri/vkms/Writeback-1/output_bpc\x00', 0x0, 0x0) bind$auto(r2, &(0x7f0000000000)=@in={0x2, 0x0, @empty}, 0x20006b) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) io_setup$auto(0x10000, &(0x7f0000000040)) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}}, 0x20044000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x103, 0x0) 0s ago: executing program 6 (id=1424): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) poll$auto(&(0x7f0000000180)={r0, 0xfff7, 0x9816}, 0x7f, 0x9) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r2, 0x29, 0x37, 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r1, 0xaf01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r3 = socket(0x2, 0x1, 0x0) r4 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/netdev:wlan0/beacon_timeout\x00', 0x8000, 0x0) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r4, 0x0, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0xd, 0x3000, 0x6, 0x10008, 0x7fffffff, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c47, 0x29f, 0x100, 0x7ffffffb, 0x101, 0x800, 0x3}, {0x8, 0x1, 0x52, 0x5, 0x2, 0x40, 0x76c5, 0x8, 0x100000000}}) mmap$auto(0x4000000000000000, 0x9, 0xffa, 0x8000000008011, 0xffffffffffffffff, 0x40000000000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r6, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="230027bd7000fcdbdfff070000001800038005000180030000000c000900feffffffffffffff04000280080001"], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0xc000) io_uring_enter$auto(r5, 0x5, 0xffffffff, 0x3, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) fanotify_init$auto(0x5, 0x2000000000002) socket(0x2, 0x801, 0x100) connect$auto(0x3, &(0x7f00000000c0), 0x55) getsockopt$auto(r3, 0x6, 0x23, 0x0, &(0x7f0000000100)=0x38) ioctl$auto(0x3, 0x4008af03, 0x0) r8 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/ip_unprivileged_port_start\x00', 0x80000, 0x0) read$auto_proc_sys_file_operations_proc_sysctl(r8, 0x0, 0x0) capset$auto(0x0, 0x0) madvise$auto(0x40000000000, 0x5, 0x4000001d) sendmsg$auto_NL80211_CMD_CHANGE_NAN_CONFIG(r1, &(0x7f0000000080)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000040)={&(0x7f0000000e80)=ANY=[@ANYBLOB="28050000", @ANYRESDEC=r5, @ANYBLOB="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"/1481], 0x528}}, 0x48000) madvise$auto(0x0, 0xffffff7fffff0005, 0x8) kernel console output (not intermixed with test programs): ? copy_msghdr_from_user+0x10a/0x160 [ 261.365452][ T9206] ? __pfx_____sys_sendmsg+0x10/0x10 [ 261.365490][ T9206] ? try_to_wake_up+0xa2f/0x1680 [ 261.365527][ T9206] ___sys_sendmsg+0x134/0x1d0 [ 261.365571][ T9206] ? __pfx____sys_sendmsg+0x10/0x10 [ 261.365648][ T9206] __sys_sendmsg+0x16d/0x220 [ 261.365693][ T9206] ? __pfx___sys_sendmsg+0x10/0x10 [ 261.365736][ T9206] ? __x64_sys_futex+0x1e0/0x4c0 [ 261.365782][ T9206] ? rcu_is_watching+0x12/0xc0 [ 261.365820][ T9206] do_syscall_64+0xcd/0x260 [ 261.365863][ T9206] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.365895][ T9206] RIP: 0033:0x7f56e658d169 [ 261.365919][ T9206] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.365952][ T9206] RSP: 002b:00007f56e7449038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 261.365981][ T9206] RAX: ffffffffffffffda RBX: 00007f56e67a5fa0 RCX: 00007f56e658d169 [ 261.366003][ T9206] RDX: 0000000020000044 RSI: 00002000000011c0 RDI: 0000000000000006 [ 261.366023][ T9206] RBP: 00007f56e660e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 261.366043][ T9206] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 261.366062][ T9206] R13: 0000000000000000 R14: 00007f56e67a5fa0 R15: 00007ffc0518bdb8 [ 261.366097][ T9206] [ 261.581244][ C1] vkms_vblank_simulate: vblank timer overrun [ 261.604854][ T9194] Invalid ELF header magic: != ELF [ 262.809632][ T9235] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 263.157963][ T9236] can: request_module (can-proto-3) failed. [ 264.419700][ T9263] FAULT_INJECTION: forcing a failure. [ 264.419700][ T9263] name failslab, interval 1, probability 0, space 0, times 0 [ 264.443025][ T9263] CPU: 1 UID: 0 PID: 9263 Comm: syz.2.749 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 264.443067][ T9263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 264.443084][ T9263] Call Trace: [ 264.443092][ T9263] [ 264.443103][ T9263] dump_stack_lvl+0x16c/0x1f0 [ 264.443147][ T9263] should_fail_ex+0x512/0x640 [ 264.443183][ T9263] should_failslab+0xc2/0x120 [ 264.443230][ T9263] __kmalloc_cache_noprof+0x6a/0x3e0 [ 264.443267][ T9263] ? __sctp_v6_cmp_addr+0x206/0x530 [ 264.443305][ T9263] ? sctp_add_bind_addr+0xae/0x3f0 [ 264.443339][ T9263] sctp_add_bind_addr+0xae/0x3f0 [ 264.443374][ T9263] sctp_copy_local_addr_list+0x39d/0x5a0 [ 264.443416][ T9263] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 264.443460][ T9263] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 264.443506][ T9263] ? sctp_bind_addr_copy+0xe0/0x530 [ 264.443538][ T9263] sctp_bind_addr_copy+0xe0/0x530 [ 264.443577][ T9263] sctp_connect_new_asoc+0x1d7/0x790 [ 264.443626][ T9263] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 264.443680][ T9263] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 264.443740][ T9263] sctp_sendmsg+0x15f9/0x1ee0 [ 264.443794][ T9263] ? __pfx_sctp_sendmsg+0x10/0x10 [ 264.443854][ T9263] ? __might_fault+0xe3/0x190 [ 264.443882][ T9263] ? __pfx_aa_sk_perm+0x10/0x10 [ 264.443926][ T9263] ? __pfx_sctp_sendmsg+0x10/0x10 [ 264.443974][ T9263] inet_sendmsg+0x119/0x140 [ 264.444021][ T9263] __sys_sendto+0x431/0x510 [ 264.444058][ T9263] ? __pfx___sys_sendto+0x10/0x10 [ 264.444118][ T9263] ? ksys_write+0x1b9/0x240 [ 264.444159][ T9263] ? __pfx_ksys_write+0x10/0x10 [ 264.444198][ T9263] ? rcu_is_watching+0x12/0xc0 [ 264.444232][ T9263] __x64_sys_sendto+0xe0/0x1c0 [ 264.444269][ T9263] ? do_syscall_64+0x91/0x260 [ 264.444309][ T9263] ? lockdep_hardirqs_on+0x7c/0x110 [ 264.444346][ T9263] do_syscall_64+0xcd/0x260 [ 264.444388][ T9263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.444419][ T9263] RIP: 0033:0x7f56e658d169 [ 264.444443][ T9263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.444473][ T9263] RSP: 002b:00007f56e7449038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 264.444502][ T9263] RAX: ffffffffffffffda RBX: 00007f56e67a5fa0 RCX: 00007f56e658d169 [ 264.444522][ T9263] RDX: 0000000000000401 RSI: 0000000000000000 RDI: 0000000000000003 [ 264.444540][ T9263] RBP: 00007f56e7449090 R08: 0000200000000000 R09: 000000000000001f [ 264.444560][ T9263] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000002 [ 264.444579][ T9263] R13: 0000000000000000 R14: 00007f56e67a5fa0 R15: 00007ffc0518bdb8 [ 264.444612][ T9263] [ 264.707914][ C1] vkms_vblank_simulate: vblank timer overrun [ 264.812359][ T9267] ERROR: Out of memory at tomoyo_memory_ok. [ 265.014856][ T9267] ERROR: Domain ' /sbin/init /etc/init.d/rcS /etc/init.d/S50sshd /usr/sbin/sshd /usr/sbin/sshd /bin/sh /root/syz-executor /root/syz-executor /newroot/96/:,' not defined. [ 265.791292][ T9271] FAULT_INJECTION: forcing a failure. [ 265.791292][ T9271] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.839233][ T9271] CPU: 1 UID: 0 PID: 9271 Comm: syz.1.751 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 265.839279][ T9271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 265.839299][ T9271] Call Trace: [ 265.839308][ T9271] [ 265.839318][ T9271] dump_stack_lvl+0x16c/0x1f0 [ 265.839364][ T9271] should_fail_ex+0x512/0x640 [ 265.839400][ T9271] _copy_from_iter+0x2a4/0x15b0 [ 265.839436][ T9271] ? find_held_lock+0x2b/0x80 [ 265.839470][ T9271] ? __pfx__copy_from_iter+0x10/0x10 [ 265.839511][ T9271] ? __virt_addr_valid+0x5e/0x590 [ 265.839555][ T9271] ? __phys_addr_symbol+0x30/0x80 [ 265.839597][ T9271] ? __check_object_size+0x4c7/0x710 [ 265.839667][ T9271] netlink_sendmsg+0x83a/0xd70 [ 265.839715][ T9271] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.839765][ T9271] __sys_sendto+0x495/0x510 [ 265.839806][ T9271] ? __pfx___sys_sendto+0x10/0x10 [ 265.839856][ T9271] ? fput+0x70/0xf0 [ 265.839894][ T9271] ? xfd_validate_state+0x5d/0x180 [ 265.839925][ T9271] ? rcu_is_watching+0x12/0xc0 [ 265.839957][ T9271] __x64_sys_sendto+0xe0/0x1c0 [ 265.839995][ T9271] ? do_syscall_64+0x91/0x260 [ 265.840033][ T9271] ? lockdep_hardirqs_on+0x7c/0x110 [ 265.840070][ T9271] do_syscall_64+0xcd/0x260 [ 265.840111][ T9271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.840141][ T9271] RIP: 0033:0x7fbf6b18effc [ 265.840165][ T9271] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 265.840195][ T9271] RSP: 002b:00007fbf6c0cdec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 265.840224][ T9271] RAX: ffffffffffffffda RBX: 00007fbf6c0cdfc0 RCX: 00007fbf6b18effc [ 265.840245][ T9271] RDX: 0000000000000024 RSI: 00007fbf6c0ce010 RDI: 0000000000000006 [ 265.840264][ T9271] RBP: 0000000000000000 R08: 00007fbf6c0cdf14 R09: 000000000000000c [ 265.840283][ T9271] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 265.840302][ T9271] R13: 00007fbf6c0cdf68 R14: 00007fbf6c0ce010 R15: 0000000000000000 [ 265.840335][ T9271] [ 266.049811][ C1] vkms_vblank_simulate: vblank timer overrun [ 266.311475][ T9286] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 266.747982][ T9284] can: request_module (can-proto-3) failed. [ 266.931397][ T9280] ERROR: Out of memory at tomoyo_memory_ok. [ 267.715917][ T9311] netlink: 338 bytes leftover after parsing attributes in process `syz.2.760'. [ 267.750044][ T9311] netlink: 338 bytes leftover after parsing attributes in process `syz.2.760'. [ 267.798146][ T9312] netlink: 8 bytes leftover after parsing attributes in process `syz.5.759'. [ 269.316639][ T9338] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 269.645178][ T9339] can: request_module (can-proto-3) failed. [ 270.795063][ T9352] can: request_module (can-proto-3) failed. [ 271.642070][ T9368] ERROR: Out of memory at tomoyo_memory_ok. [ 271.679368][ T9354] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 271.717992][ T9354] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 271.737191][ T9354] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 271.767062][ T9354] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 271.774540][ T9354] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 271.787542][ T9354] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 271.886178][ T9354] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 272.929067][ T5147] Bluetooth: hci0: command 0x0c1a tx timeout [ 273.222029][ T9382] FAULT_INJECTION: forcing a failure. [ 273.222029][ T9382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 273.315463][ T9382] CPU: 0 UID: 0 PID: 9382 Comm: syz.4.778 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 273.315508][ T9382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 273.315526][ T9382] Call Trace: [ 273.315535][ T9382] [ 273.315547][ T9382] dump_stack_lvl+0x16c/0x1f0 [ 273.315590][ T9382] should_fail_ex+0x512/0x640 [ 273.315626][ T9382] _copy_to_user+0x32/0xd0 [ 273.315665][ T9382] simple_read_from_buffer+0xe0/0x170 [ 273.315707][ T9382] proc_fail_nth_read+0x197/0x270 [ 273.315749][ T9382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.315790][ T9382] ? rw_verify_area+0xcf/0x680 [ 273.315825][ T9382] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 273.315867][ T9382] vfs_read+0x1de/0xc70 [ 273.315907][ T9382] ? fdget_pos+0x2a2/0x370 [ 273.315954][ T9382] ? __pfx___mutex_lock+0x10/0x10 [ 273.315995][ T9382] ? __pfx_vfs_read+0x10/0x10 [ 273.316042][ T9382] ? __fget_files+0x20e/0x3c0 [ 273.316103][ T9382] ksys_read+0x12a/0x240 [ 273.316142][ T9382] ? __pfx_ksys_read+0x10/0x10 [ 273.316180][ T9382] ? rcu_is_watching+0x12/0xc0 [ 273.316220][ T9382] do_syscall_64+0xcd/0x260 [ 273.316263][ T9382] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 273.316293][ T9382] RIP: 0033:0x7fcf55b8bb7c [ 273.316317][ T9382] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 273.316348][ T9382] RSP: 002b:00007fcf569db030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 273.316378][ T9382] RAX: ffffffffffffffda RBX: 00007fcf55da5fa0 RCX: 00007fcf55b8bb7c [ 273.316399][ T9382] RDX: 000000000000000f RSI: 00007fcf569db0a0 RDI: 0000000000000004 [ 273.316418][ T9382] RBP: 00007fcf569db090 R08: 0000000000000000 R09: 0000000000000000 [ 273.316437][ T9382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 273.316456][ T9382] R13: 0000000000000000 R14: 00007fcf55da5fa0 R15: 00007ffd69e67b68 [ 273.316490][ T9382] [ 273.508216][ C0] vkms_vblank_simulate: vblank timer overrun [ 273.752789][ T5147] Bluetooth: hci2: command 0x0c1a tx timeout [ 273.807880][ T5147] Bluetooth: hci4: command 0x0c1a tx timeout [ 273.815091][ T5147] Bluetooth: hci1: command 0x0c1a tx timeout [ 273.821898][ T5847] Bluetooth: hci3: command 0x0c1a tx timeout [ 274.883603][ T9400] can: request_module (can-proto-3) failed. [ 275.133034][ T9407] FAULT_INJECTION: forcing a failure. [ 275.133034][ T9407] name failslab, interval 1, probability 0, space 0, times 0 [ 275.163152][ T9407] CPU: 0 UID: 0 PID: 9407 Comm: syz.1.784 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 275.163192][ T9407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 275.163210][ T9407] Call Trace: [ 275.163219][ T9407] [ 275.163230][ T9407] dump_stack_lvl+0x16c/0x1f0 [ 275.163272][ T9407] should_fail_ex+0x512/0x640 [ 275.163307][ T9407] should_failslab+0xc2/0x120 [ 275.163354][ T9407] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 275.163399][ T9407] ? skb_clone+0x190/0x3f0 [ 275.163444][ T9407] skb_clone+0x190/0x3f0 [ 275.163488][ T9407] netlink_deliver_tap+0xabd/0xd30 [ 275.163532][ T9407] netlink_unicast+0x6b2/0x7f0 [ 275.163573][ T9407] ? __pfx_netlink_unicast+0x10/0x10 [ 275.163621][ T9407] ctrl_getfamily+0x40a/0x540 [ 275.163668][ T9407] ? __pfx_ctrl_getfamily+0x10/0x10 [ 275.163716][ T9407] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 275.163762][ T9407] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 275.163815][ T9407] genl_family_rcv_msg_doit+0x206/0x2f0 [ 275.163865][ T9407] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 275.163912][ T9407] ? genl_get_cmd+0x194/0x580 [ 275.163961][ T9407] ? __local_bh_enable_ip+0xa4/0x120 [ 275.164005][ T9407] ? __dev_queue_xmit+0x896/0x43e0 [ 275.164039][ T9407] ? __radix_tree_lookup+0x21f/0x2c0 [ 275.164081][ T9407] genl_rcv_msg+0x55c/0x800 [ 275.164130][ T9407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 275.164174][ T9407] ? __pfx___dev_queue_xmit+0x10/0x10 [ 275.164210][ T9407] ? __pfx_ctrl_getfamily+0x10/0x10 [ 275.164259][ T9407] ? __lock_acquire+0xaa4/0x1ba0 [ 275.164307][ T9407] netlink_rcv_skb+0x16a/0x440 [ 275.164347][ T9407] ? __pfx_genl_rcv_msg+0x10/0x10 [ 275.164393][ T9407] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 275.164448][ T9407] ? __pfx_down_read+0x10/0x10 [ 275.164494][ T9407] ? netlink_deliver_tap+0x1ae/0xd30 [ 275.164535][ T9407] genl_rcv+0x28/0x40 [ 275.164575][ T9407] netlink_unicast+0x53a/0x7f0 [ 275.164617][ T9407] ? __pfx_netlink_unicast+0x10/0x10 [ 275.164658][ T9407] ? __phys_addr_symbol+0x30/0x80 [ 275.164700][ T9407] ? __check_object_size+0x4c7/0x710 [ 275.164753][ T9407] netlink_sendmsg+0x8da/0xd70 [ 275.164803][ T9407] ? __pfx_netlink_sendmsg+0x10/0x10 [ 275.164852][ T9407] ____sys_sendmsg+0xa8d/0xc60 [ 275.164883][ T9407] ? copy_msghdr_from_user+0x10a/0x160 [ 275.164925][ T9407] ? __pfx_____sys_sendmsg+0x10/0x10 [ 275.164968][ T9407] ___sys_sendmsg+0x134/0x1d0 [ 275.165019][ T9407] ? __pfx____sys_sendmsg+0x10/0x10 [ 275.165096][ T9407] __sys_sendmsg+0x16d/0x220 [ 275.165137][ T9407] ? __pfx___sys_sendmsg+0x10/0x10 [ 275.165187][ T9407] ? rcu_is_watching+0x12/0xc0 [ 275.165225][ T9407] do_syscall_64+0xcd/0x260 [ 275.165266][ T9407] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.165296][ T9407] RIP: 0033:0x7fbf6b18d169 [ 275.165320][ T9407] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.165351][ T9407] RSP: 002b:00007fbf6c0cf038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 275.165380][ T9407] RAX: ffffffffffffffda RBX: 00007fbf6b3a5fa0 RCX: 00007fbf6b18d169 [ 275.165401][ T9407] RDX: 0000000020000044 RSI: 00002000000011c0 RDI: 0000000000000006 [ 275.165420][ T9407] RBP: 00007fbf6c0cf090 R08: 0000000000000000 R09: 0000000000000000 [ 275.165437][ T9407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 275.165453][ T9407] R13: 0000000000000000 R14: 00007fbf6b3a5fa0 R15: 00007fff9b5d4488 [ 275.165486][ T9407] [ 275.508614][ C0] vkms_vblank_simulate: vblank timer overrun [ 275.888124][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 276.260784][ T9420] ERROR: Out of memory at tomoyo_memory_ok. [ 277.967787][ T5847] Bluetooth: hci4: command 0x0c1a tx timeout [ 278.446534][ T30] audit: type=1800 audit(4294967503.473:10): pid=9456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.794" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 278.976251][ T9458] FAULT_INJECTION: forcing a failure. [ 278.976251][ T9458] name failslab, interval 1, probability 0, space 0, times 0 [ 279.105457][ T9465] can: request_module (can-proto-3) failed. [ 279.134198][ T9458] CPU: 1 UID: 0 PID: 9458 Comm: syz.5.795 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 279.134245][ T9458] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 279.134264][ T9458] Call Trace: [ 279.134274][ T9458] [ 279.134286][ T9458] dump_stack_lvl+0x16c/0x1f0 [ 279.134334][ T9458] should_fail_ex+0x512/0x640 [ 279.134369][ T9458] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 279.134419][ T9458] ? __pfx_wakeup_sources_stats_open+0x10/0x10 [ 279.134458][ T9458] should_failslab+0xc2/0x120 [ 279.134506][ T9458] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 279.134556][ T9458] ? rcu_is_watching+0x12/0xc0 [ 279.134589][ T9458] ? seq_open+0x55/0x170 [ 279.134623][ T9458] ? __pfx_wakeup_sources_stats_open+0x10/0x10 [ 279.134661][ T9458] seq_open+0x55/0x170 [ 279.134694][ T9458] __seq_open_private+0x3e/0xd0 [ 279.134732][ T9458] seq_open_private+0x24/0x40 [ 279.134770][ T9458] full_proxy_open_regular+0x1b6/0x360 [ 279.134803][ T9458] do_dentry_open+0x741/0x1c10 [ 279.134848][ T9458] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 279.134885][ T9458] vfs_open+0x82/0x3f0 [ 279.134920][ T9458] ? may_open+0x1f2/0x400 [ 279.134957][ T9458] path_openat+0x1e5e/0x2d40 [ 279.135013][ T9458] ? __pfx_path_openat+0x10/0x10 [ 279.135067][ T9458] do_filp_open+0x20b/0x470 [ 279.135112][ T9458] ? __pfx_do_filp_open+0x10/0x10 [ 279.135157][ T9458] ? find_held_lock+0x2b/0x80 [ 279.135207][ T9458] ? alloc_fd+0x420/0x760 [ 279.135258][ T9458] do_sys_openat2+0x11b/0x1d0 [ 279.135289][ T9458] ? __pfx_do_sys_openat2+0x10/0x10 [ 279.135332][ T9458] __x64_sys_openat+0x174/0x210 [ 279.135365][ T9458] ? __pfx___x64_sys_openat+0x10/0x10 [ 279.135400][ T9458] ? rcu_is_watching+0x12/0xc0 [ 279.135440][ T9458] do_syscall_64+0xcd/0x260 [ 279.135484][ T9458] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.135516][ T9458] RIP: 0033:0x7f691998d169 [ 279.135541][ T9458] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.135574][ T9458] RSP: 002b:00007f69177f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 279.135605][ T9458] RAX: ffffffffffffffda RBX: 00007f6919ba5fa0 RCX: 00007f691998d169 [ 279.135627][ T9458] RDX: 00000000000c8400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 279.135648][ T9458] RBP: 00007f6919a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 279.135669][ T9458] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 279.135688][ T9458] R13: 0000000000000000 R14: 00007f6919ba5fa0 R15: 00007ffc46863798 [ 279.135723][ T9458] [ 279.565776][ T9467] FAULT_INJECTION: forcing a failure. [ 279.565776][ T9467] name failslab, interval 1, probability 0, space 0, times 0 [ 279.612219][ T9467] CPU: 1 UID: 0 PID: 9467 Comm: syz.2.797 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 279.612266][ T9467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 279.612285][ T9467] Call Trace: [ 279.612293][ T9467] [ 279.612304][ T9467] dump_stack_lvl+0x16c/0x1f0 [ 279.612351][ T9467] should_fail_ex+0x512/0x640 [ 279.612385][ T9467] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 279.612428][ T9467] should_failslab+0xc2/0x120 [ 279.612475][ T9467] __kmalloc_cache_noprof+0x6a/0x3e0 [ 279.612513][ T9467] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 279.612548][ T9467] ? __request_module+0x2ad/0x690 [ 279.612595][ T9467] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 279.612633][ T9467] __request_module+0x2ad/0x690 [ 279.612678][ T9467] ? __pfx___request_module+0x10/0x10 [ 279.612726][ T9467] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 279.612770][ T9467] ? __up_read+0x1f8/0x750 [ 279.612818][ T9467] ? __pfx___up_read+0x10/0x10 [ 279.612864][ T9467] ? ctrl_getfamily+0x1cb/0x540 [ 279.612931][ T9467] ctrl_getfamily+0x1e9/0x540 [ 279.612978][ T9467] ? __pfx_ctrl_getfamily+0x10/0x10 [ 279.613027][ T9467] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 279.613077][ T9467] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 279.613133][ T9467] genl_family_rcv_msg_doit+0x206/0x2f0 [ 279.613180][ T9467] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 279.613227][ T9467] ? __pfx___mutex_lock+0x10/0x10 [ 279.613266][ T9467] ? genl_get_cmd+0x194/0x580 [ 279.613311][ T9467] ? __local_bh_enable_ip+0xa4/0x120 [ 279.613346][ T9467] ? __dev_queue_xmit+0x896/0x43e0 [ 279.613378][ T9467] ? __radix_tree_lookup+0x21f/0x2c0 [ 279.613419][ T9467] genl_rcv_msg+0x55c/0x800 [ 279.613466][ T9467] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.613510][ T9467] ? __pfx___dev_queue_xmit+0x10/0x10 [ 279.613542][ T9467] ? __pfx_ctrl_getfamily+0x10/0x10 [ 279.613589][ T9467] ? __lock_acquire+0xaa4/0x1ba0 [ 279.613633][ T9467] netlink_rcv_skb+0x16a/0x440 [ 279.613671][ T9467] ? __pfx_genl_rcv_msg+0x10/0x10 [ 279.613715][ T9467] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 279.613766][ T9467] ? __pfx_down_read+0x10/0x10 [ 279.613808][ T9467] ? netlink_deliver_tap+0x1ae/0xd30 [ 279.613847][ T9467] genl_rcv+0x28/0x40 [ 279.613884][ T9467] netlink_unicast+0x53a/0x7f0 [ 279.613934][ T9467] ? __pfx_netlink_unicast+0x10/0x10 [ 279.613974][ T9467] ? __phys_addr_symbol+0x30/0x80 [ 279.614013][ T9467] ? __check_object_size+0x4c7/0x710 [ 279.614064][ T9467] netlink_sendmsg+0x8da/0xd70 [ 279.614108][ T9467] ? __pfx_netlink_sendmsg+0x10/0x10 [ 279.614157][ T9467] __sys_sendto+0x495/0x510 [ 279.614196][ T9467] ? __pfx___sys_sendto+0x10/0x10 [ 279.614243][ T9467] ? fput+0x70/0xf0 [ 279.614280][ T9467] ? xfd_validate_state+0x5d/0x180 [ 279.614311][ T9467] ? rcu_is_watching+0x12/0xc0 [ 279.614345][ T9467] __x64_sys_sendto+0xe0/0x1c0 [ 279.614382][ T9467] ? do_syscall_64+0x91/0x260 [ 279.614420][ T9467] ? lockdep_hardirqs_on+0x7c/0x110 [ 279.614456][ T9467] do_syscall_64+0xcd/0x260 [ 279.614497][ T9467] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.614528][ T9467] RIP: 0033:0x7f56e658effc [ 279.614553][ T9467] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 279.614585][ T9467] RSP: 002b:00007f56e7426ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 279.614614][ T9467] RAX: ffffffffffffffda RBX: 00007f56e7426fc0 RCX: 00007f56e658effc [ 279.614634][ T9467] RDX: 0000000000000024 RSI: 00007f56e7427010 RDI: 0000000000000006 [ 279.614653][ T9467] RBP: 0000000000000000 R08: 00007f56e7426f14 R09: 000000000000000c [ 279.614672][ T9467] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 279.614690][ T9467] R13: 00007f56e7426f68 R14: 00007f56e7427010 R15: 0000000000000000 [ 279.614723][ T9467] [ 281.096098][ T9476] KVM: debugfs: duplicate directory 9476-3 [ 281.192383][ T9476] KVM: debugfs: duplicate directory 9476-7 [ 283.298856][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 283.314089][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 284.088827][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 284.418839][ T9514] FAULT_INJECTION: forcing a failure. [ 284.418839][ T9514] name failslab, interval 1, probability 0, space 0, times 0 [ 284.478225][ T9514] CPU: 1 UID: 0 PID: 9514 Comm: syz.2.807 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 284.478270][ T9514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 284.478301][ T9514] Call Trace: [ 284.478311][ T9514] [ 284.478323][ T9514] dump_stack_lvl+0x16c/0x1f0 [ 284.478370][ T9514] should_fail_ex+0x512/0x640 [ 284.478402][ T9514] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 284.478450][ T9514] ? __pfx_wakeup_sources_stats_open+0x10/0x10 [ 284.478486][ T9514] should_failslab+0xc2/0x120 [ 284.478534][ T9514] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 284.478577][ T9514] ? rcu_is_watching+0x12/0xc0 [ 284.478608][ T9514] ? seq_open+0x55/0x170 [ 284.478643][ T9514] ? __pfx_wakeup_sources_stats_open+0x10/0x10 [ 284.478679][ T9514] seq_open+0x55/0x170 [ 284.478712][ T9514] __seq_open_private+0x3e/0xd0 [ 284.478750][ T9514] seq_open_private+0x24/0x40 [ 284.478787][ T9514] full_proxy_open_regular+0x1b6/0x360 [ 284.478820][ T9514] do_dentry_open+0x741/0x1c10 [ 284.478861][ T9514] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 284.478897][ T9514] vfs_open+0x82/0x3f0 [ 284.478924][ T9514] ? may_open+0x1f2/0x400 [ 284.478958][ T9514] path_openat+0x1e5e/0x2d40 [ 284.479010][ T9514] ? __pfx_path_openat+0x10/0x10 [ 284.479061][ T9514] do_filp_open+0x20b/0x470 [ 284.479105][ T9514] ? __pfx_do_filp_open+0x10/0x10 [ 284.479147][ T9514] ? find_held_lock+0x2b/0x80 [ 284.479195][ T9514] ? alloc_fd+0x420/0x760 [ 284.479244][ T9514] do_sys_openat2+0x11b/0x1d0 [ 284.479290][ T9514] ? __pfx_do_sys_openat2+0x10/0x10 [ 284.479330][ T9514] __x64_sys_openat+0x174/0x210 [ 284.479361][ T9514] ? __pfx___x64_sys_openat+0x10/0x10 [ 284.479395][ T9514] ? rcu_is_watching+0x12/0xc0 [ 284.479431][ T9514] do_syscall_64+0xcd/0x260 [ 284.479468][ T9514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 284.479517][ T9514] RIP: 0033:0x7f56e658d169 [ 284.479543][ T9514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 284.479573][ T9514] RSP: 002b:00007f56e7449038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 284.479604][ T9514] RAX: ffffffffffffffda RBX: 00007f56e67a5fa0 RCX: 00007f56e658d169 [ 284.479625][ T9514] RDX: 00000000000c8400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 284.479646][ T9514] RBP: 00007f56e660e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 284.479665][ T9514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 284.479684][ T9514] R13: 0000000000000000 R14: 00007f56e67a5fa0 R15: 00007ffc0518bdb8 [ 284.479719][ T9514] [ 284.739449][ C1] vkms_vblank_simulate: vblank timer overrun [ 287.989166][ T9562] page: refcount:5 mapcount:4 mapping:0000000000000000 index:0xffff888078000f00 pfn:0x78000 [ 288.010211][ T9562] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 288.057905][ T9562] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 288.078693][ T9562] raw: ffff888078000f00 0000000000000000 0000000500000003 0000000000000000 [ 288.117980][ T9562] page dumped because: unmovable page [ 288.123569][ T9562] page_owner tracks the page as allocated [ 288.153936][ T9562] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 7600, tgid 7600 (syz-executor), ts 161048481581, free_ts 156619117897 [ 288.224991][ T9562] post_alloc_hook+0x181/0x1b0 [ 288.245311][ T9562] get_page_from_freelist+0x10c4/0x34c0 [ 288.265567][ T9562] __alloc_frozen_pages_noprof+0x223/0x24d0 [ 288.287967][ T9562] alloc_pages_mpol+0x1fb/0x540 [ 288.326490][ T9562] alloc_pages_noprof+0x131/0x390 [ 288.336876][ T9562] __vmalloc_node_range_noprof+0x732/0x1540 [ 288.390872][ T9568] could not allocate digest TFM handle binfmt_misc [ 288.407915][ T9562] vmalloc_user_noprof+0x6b/0x90 [ 288.417852][ T9562] kcov_ioctl+0x4c/0x730 [ 288.432938][ T9562] __x64_sys_ioctl+0x190/0x200 [ 288.467957][ T9562] do_syscall_64+0xcd/0x260 [ 288.472660][ T9562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.487864][ T9562] page last free pid 5837 tgid 5837 stack trace: [ 288.528151][ T9562] free_frozen_pages+0x6d8/0xf40 [ 288.557766][ T9562] kasan_depopulate_vmalloc_pte+0x63/0x80 [ 288.587151][ T9562] __apply_to_page_range+0x5f9/0xd30 [ 288.616839][ T9562] kasan_release_vmalloc+0xd1/0xe0 [ 288.622193][ T9562] purge_vmap_node+0x1cb/0xa70 [ 288.627043][ T9562] __purge_vmap_area_lazy+0x9d1/0xc90 [ 288.657772][ T9562] drain_vmap_area_work+0x27/0x40 [ 288.662909][ T9562] process_one_work+0x9cc/0x1b70 [ 288.707831][ T9562] worker_thread+0x6c1/0xef0 [ 288.712539][ T9562] kthread+0x3a4/0x760 [ 288.716703][ T9562] ret_from_fork+0x45/0x80 [ 288.761365][ T9562] ret_from_fork_asm+0x1a/0x30 [ 289.141128][ T9587] netlink: 28 bytes leftover after parsing attributes in process `syz.1.826'. [ 290.098595][ T9604] can: request_module (can-proto-3) failed. [ 290.824800][ T9616] page: refcount:9 mapcount:8 mapping:0000000000000000 index:0xffff888078000f00 pfn:0x78000 [ 290.888642][ T9616] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 290.888865][ T9616] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 290.888898][ T9616] raw: ffff888078000f00 0000000000000000 0000000900000007 0000000000000000 [ 290.888931][ T9616] page dumped because: unmovable page [ 290.888949][ T9616] page_owner tracks the page as allocated [ 290.889106][ T9616] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 7600, tgid 7600 (syz-executor), ts 161048481581, free_ts 156619117897 [ 290.889163][ T9616] post_alloc_hook+0x181/0x1b0 [ 290.889211][ T9616] get_page_from_freelist+0x10c4/0x34c0 [ 290.889260][ T9616] __alloc_frozen_pages_noprof+0x223/0x24d0 [ 290.889309][ T9616] alloc_pages_mpol+0x1fb/0x540 [ 290.889350][ T9616] alloc_pages_noprof+0x131/0x390 [ 290.889392][ T9616] __vmalloc_node_range_noprof+0x732/0x1540 [ 290.889432][ T9616] vmalloc_user_noprof+0x6b/0x90 [ 290.889472][ T9616] kcov_ioctl+0x4c/0x730 [ 290.889520][ T9616] __x64_sys_ioctl+0x190/0x200 [ 290.889558][ T9616] do_syscall_64+0xcd/0x260 [ 290.889601][ T9616] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 290.889634][ T9616] page last free pid 5837 tgid 5837 stack trace: [ 290.889655][ T9616] free_frozen_pages+0x6d8/0xf40 [ 290.889700][ T9616] kasan_depopulate_vmalloc_pte+0x63/0x80 [ 290.889745][ T9616] __apply_to_page_range+0x5f9/0xd30 [ 290.889787][ T9616] kasan_release_vmalloc+0xd1/0xe0 [ 290.889831][ T9616] purge_vmap_node+0x1cb/0xa70 [ 290.889864][ T9616] __purge_vmap_area_lazy+0x9d1/0xc90 [ 290.889898][ T9616] drain_vmap_area_work+0x27/0x40 [ 290.889943][ T9616] process_one_work+0x9cc/0x1b70 [ 290.889976][ T9616] worker_thread+0x6c1/0xef0 [ 290.890009][ T9616] kthread+0x3a4/0x760 [ 290.890057][ T9616] ret_from_fork+0x45/0x80 [ 290.890089][ T9616] ret_from_fork_asm+0x1a/0x30 [ 291.606149][ T9616] could not allocate digest TFM handle binfmt_misc [ 293.016835][ T9642] netlink: 4 bytes leftover after parsing attributes in process `syz.2.840'. [ 293.494792][ T9653] netlink: 350 bytes leftover after parsing attributes in process `syz.1.843'. [ 293.518863][ T9652] netlink: 338 bytes leftover after parsing attributes in process `syz.4.844'. [ 293.543737][ T9652] netlink: 338 bytes leftover after parsing attributes in process `syz.4.844'. [ 293.659887][ T9655] page: refcount:5 mapcount:4 mapping:0000000000000000 index:0xffff888078000f00 pfn:0x78000 [ 293.678270][ T9655] flags: 0xfff18000000214(referenced|dirty|workingset|node=0|zone=1|lastcpupid=0x7ff) [ 293.729239][ T9655] raw: 00fff18000000214 0000000000000000 dead000000000122 0000000000000000 [ 293.779502][ T9655] raw: ffff888078000f00 0000000000000000 0000000500000003 0000000000000000 [ 293.837953][ T9655] page dumped because: unmovable page [ 293.843409][ T9655] page_owner tracks the page as allocated [ 293.877911][ T9655] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN|__GFP_ZERO), pid 7600, tgid 7600 (syz-executor), ts 161048481581, free_ts 156619117897 [ 293.910156][ T9661] HfR: entered promiscuous mode [ 293.957758][ T9655] post_alloc_hook+0x181/0x1b0 [ 293.962768][ T9655] get_page_from_freelist+0x10c4/0x34c0 [ 294.017794][ T9655] __alloc_frozen_pages_noprof+0x223/0x24d0 [ 294.023811][ T9655] alloc_pages_mpol+0x1fb/0x540 [ 294.052555][ T9656] could not allocate digest TFM handle binfmt_misc [ 294.067855][ T9655] alloc_pages_noprof+0x131/0x390 [ 294.073011][ T9655] __vmalloc_node_range_noprof+0x732/0x1540 [ 294.157760][ T9655] vmalloc_user_noprof+0x6b/0x90 [ 294.162817][ T9655] kcov_ioctl+0x4c/0x730 [ 294.167165][ T9655] __x64_sys_ioctl+0x190/0x200 [ 294.228827][ T9655] do_syscall_64+0xcd/0x260 [ 294.233461][ T9655] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 294.286565][ T9655] page last free pid 5837 tgid 5837 stack trace: [ 294.327753][ T9655] free_frozen_pages+0x6d8/0xf40 [ 294.332813][ T9655] kasan_depopulate_vmalloc_pte+0x63/0x80 [ 294.373572][ T9655] __apply_to_page_range+0x5f9/0xd30 [ 294.397888][ T9655] kasan_release_vmalloc+0xd1/0xe0 [ 294.403104][ T9655] purge_vmap_node+0x1cb/0xa70 [ 294.461167][ T9655] __purge_vmap_area_lazy+0x9d1/0xc90 [ 294.466638][ T9655] drain_vmap_area_work+0x27/0x40 [ 294.497879][ T9655] process_one_work+0x9cc/0x1b70 [ 294.502959][ T9655] worker_thread+0x6c1/0xef0 [ 294.507619][ T9655] kthread+0x3a4/0x760 [ 294.563109][ T9655] ret_from_fork+0x45/0x80 [ 294.563153][ T9655] ret_from_fork_asm+0x1a/0x30 [ 294.870143][ T9680] ptrace attach of "./syz-executor exec"[5834] was attempted by "./syz-executor exec"[9680] [ 296.195061][ T9702] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 296.530474][ T9702] can: request_module (can-proto-3) failed. [ 297.653270][ T9719] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 297.909244][ T9720] can: request_module (can-proto-3) failed. [ 299.037370][ T9732] FAULT_INJECTION: forcing a failure. [ 299.037370][ T9732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.082287][ T9732] CPU: 1 UID: 0 PID: 9732 Comm: syz.4.865 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 299.082346][ T9732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 299.082368][ T9732] Call Trace: [ 299.082378][ T9732] [ 299.082391][ T9732] dump_stack_lvl+0x16c/0x1f0 [ 299.082441][ T9732] should_fail_ex+0x512/0x640 [ 299.082482][ T9732] _copy_from_user+0x2e/0xd0 [ 299.082525][ T9732] copy_msghdr_from_user+0x98/0x160 [ 299.082573][ T9732] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 299.082627][ T9732] ? kfree+0x252/0x4d0 [ 299.082675][ T9732] ___sys_sendmsg+0xfe/0x1d0 [ 299.082724][ T9732] ? __pfx____sys_sendmsg+0x10/0x10 [ 299.082799][ T9732] ? __pfx___might_resched+0x10/0x10 [ 299.082849][ T9732] __sys_sendmmsg+0x200/0x420 [ 299.082899][ T9732] ? __pfx___sys_sendmmsg+0x10/0x10 [ 299.082958][ T9732] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 299.083017][ T9732] ? fput+0x70/0xf0 [ 299.083049][ T9732] ? ksys_write+0x1b9/0x240 [ 299.083094][ T9732] ? __pfx_ksys_write+0x10/0x10 [ 299.083139][ T9732] ? rcu_is_watching+0x12/0xc0 [ 299.083178][ T9732] __x64_sys_sendmmsg+0x9c/0x100 [ 299.083225][ T9732] ? lockdep_hardirqs_on+0x7c/0x110 [ 299.083266][ T9732] do_syscall_64+0xcd/0x260 [ 299.083321][ T9732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.083357][ T9732] RIP: 0033:0x7fcf55b8d169 [ 299.083384][ T9732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 299.083419][ T9732] RSP: 002b:00007fcf569db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 299.083451][ T9732] RAX: ffffffffffffffda RBX: 00007fcf55da5fa0 RCX: 00007fcf55b8d169 [ 299.083473][ T9732] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 299.083493][ T9732] RBP: 00007fcf569db090 R08: 0000000000000000 R09: 0000000000000000 [ 299.083514][ T9732] R10: 000000000700001c R11: 0000000000000246 R12: 0000000000000002 [ 299.083535][ T9732] R13: 0000000000000000 R14: 00007fcf55da5fa0 R15: 00007ffd69e67b68 [ 299.083572][ T9732] [ 300.292715][ T9754] netlink: 4 bytes leftover after parsing attributes in process `syz.5.870'. [ 300.906779][ T9767] FAULT_INJECTION: forcing a failure. [ 300.906779][ T9767] name failslab, interval 1, probability 0, space 0, times 0 [ 301.581803][ T9767] CPU: 1 UID: 0 PID: 9767 Comm: syz.2.875 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 301.581858][ T9767] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 301.581881][ T9767] Call Trace: [ 301.581891][ T9767] [ 301.581906][ T9767] dump_stack_lvl+0x16c/0x1f0 [ 301.581961][ T9767] should_fail_ex+0x512/0x640 [ 301.581998][ T9767] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 301.582047][ T9767] should_failslab+0xc2/0x120 [ 301.582112][ T9767] __kmalloc_cache_noprof+0x6a/0x3e0 [ 301.582156][ T9767] ? tracing_log_err+0x499/0x6b0 [ 301.582200][ T9767] tracing_log_err+0x499/0x6b0 [ 301.582247][ T9767] append_filter_err+0x49c/0x5e0 [ 301.582288][ T9767] create_filter+0x1a6/0x210 [ 301.582328][ T9767] ? __pfx_create_filter+0x10/0x10 [ 301.582366][ T9767] ? __pfx___mutex_lock+0x10/0x10 [ 301.582407][ T9767] ? find_held_lock+0x2b/0x80 [ 301.582442][ T9767] apply_event_filter+0x20b/0x3b0 [ 301.582480][ T9767] ? __pfx_apply_event_filter+0x10/0x10 [ 301.582527][ T9767] event_filter_write+0x16d/0x290 [ 301.582579][ T9767] vfs_write+0x25c/0x1180 [ 301.582621][ T9767] ? __pfx_event_filter_write+0x10/0x10 [ 301.582673][ T9767] ? __pfx___mutex_lock+0x10/0x10 [ 301.582714][ T9767] ? __pfx_vfs_write+0x10/0x10 [ 301.582765][ T9767] ? __fget_files+0x20e/0x3c0 [ 301.582820][ T9767] ksys_write+0x12a/0x240 [ 301.582861][ T9767] ? __pfx_ksys_write+0x10/0x10 [ 301.582903][ T9767] ? rcu_is_watching+0x12/0xc0 [ 301.582945][ T9767] do_syscall_64+0xcd/0x260 [ 301.582992][ T9767] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.583027][ T9767] RIP: 0033:0x7f56e658d169 [ 301.583055][ T9767] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.583100][ T9767] RSP: 002b:00007f56e7449038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 301.583135][ T9767] RAX: ffffffffffffffda RBX: 00007f56e67a5fa0 RCX: 00007f56e658d169 [ 301.583159][ T9767] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 301.583180][ T9767] RBP: 00007f56e660e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 301.583202][ T9767] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 301.583224][ T9767] R13: 0000000000000000 R14: 00007f56e67a5fa0 R15: 00007ffc0518bdb8 [ 301.583263][ T9767] [ 302.332679][ T9781] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 302.867993][ T9785] can: request_module (can-proto-3) failed. [ 303.357919][ T9796] netlink: 12 bytes leftover after parsing attributes in process `syz.1.881'. [ 304.279314][ T5847] Bluetooth: hci0: unexpected subevent 0x01 length: 4 < 18 [ 304.327825][ T30] audit: type=1800 audit(4294967537.350:11): pid=9808 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.883" name="dbroot" dev="configfs" ino=29011 res=0 errno=0 [ 305.685791][ T9819] FAULT_INJECTION: forcing a failure. [ 305.685791][ T9819] name failslab, interval 1, probability 0, space 0, times 0 [ 305.780070][ T9819] CPU: 1 UID: 0 PID: 9819 Comm: syz.2.886 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 305.780126][ T9819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 305.780150][ T9819] Call Trace: [ 305.780165][ T9819] [ 305.780182][ T9819] dump_stack_lvl+0x16c/0x1f0 [ 305.780239][ T9819] should_fail_ex+0x512/0x640 [ 305.780279][ T9819] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 305.780339][ T9819] ? __pfx_wakeup_sources_stats_open+0x10/0x10 [ 305.780384][ T9819] should_failslab+0xc2/0x120 [ 305.780446][ T9819] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 305.780498][ T9819] ? rcu_is_watching+0x12/0xc0 [ 305.780536][ T9819] ? seq_open+0x55/0x170 [ 305.780582][ T9819] ? __pfx_wakeup_sources_stats_open+0x10/0x10 [ 305.780628][ T9819] seq_open+0x55/0x170 [ 305.780665][ T9819] __seq_open_private+0x3e/0xd0 [ 305.780708][ T9819] seq_open_private+0x24/0x40 [ 305.780751][ T9819] full_proxy_open_regular+0x1b6/0x360 [ 305.780789][ T9819] do_dentry_open+0x741/0x1c10 [ 305.780840][ T9819] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 305.780884][ T9819] vfs_open+0x82/0x3f0 [ 305.780917][ T9819] ? may_open+0x1f2/0x400 [ 305.780983][ T9819] path_openat+0x1e5e/0x2d40 [ 305.781046][ T9819] ? __pfx_path_openat+0x10/0x10 [ 305.781105][ T9819] do_filp_open+0x20b/0x470 [ 305.781158][ T9819] ? __pfx_do_filp_open+0x10/0x10 [ 305.781207][ T9819] ? find_held_lock+0x2b/0x80 [ 305.781264][ T9819] ? alloc_fd+0x420/0x760 [ 305.781321][ T9819] do_sys_openat2+0x11b/0x1d0 [ 305.781356][ T9819] ? __pfx_do_sys_openat2+0x10/0x10 [ 305.781404][ T9819] __x64_sys_openat+0x174/0x210 [ 305.781440][ T9819] ? __pfx___x64_sys_openat+0x10/0x10 [ 305.781478][ T9819] ? rcu_is_watching+0x12/0xc0 [ 305.781521][ T9819] do_syscall_64+0xcd/0x260 [ 305.781570][ T9819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.781607][ T9819] RIP: 0033:0x7f56e658d169 [ 305.781635][ T9819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 305.781671][ T9819] RSP: 002b:00007f56e7449038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 305.781714][ T9819] RAX: ffffffffffffffda RBX: 00007f56e67a5fa0 RCX: 00007f56e658d169 [ 305.781744][ T9819] RDX: 00000000000c8400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 305.781874][ T9819] RBP: 00007f56e660e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 305.781898][ T9819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.781922][ T9819] R13: 0000000000000000 R14: 00007f56e67a5fa0 R15: 00007ffc0518bdb8 [ 305.781969][ T9819] [ 306.836738][ T9836] capability: warning: `syz.2.892' uses deprecated v2 capabilities in a way that may be insecure [ 307.154778][ T9839] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 307.552954][ T9845] can: request_module (can-proto-3) failed. [ 307.635235][ T9848] netlink: 338 bytes leftover after parsing attributes in process `syz.2.893'. [ 307.669192][ T9848] netlink: 338 bytes leftover after parsing attributes in process `syz.2.893'. [ 309.104249][ T9862] FAULT_INJECTION: forcing a failure. [ 309.104249][ T9862] name failslab, interval 1, probability 0, space 0, times 0 [ 309.210957][ T9862] CPU: 0 UID: 0 PID: 9862 Comm: syz.4.897 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 309.211010][ T9862] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 309.211034][ T9862] Call Trace: [ 309.211045][ T9862] [ 309.211060][ T9862] dump_stack_lvl+0x16c/0x1f0 [ 309.211114][ T9862] should_fail_ex+0x512/0x640 [ 309.211153][ T9862] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 309.211212][ T9862] ? __pfx_wakeup_sources_stats_open+0x10/0x10 [ 309.211257][ T9862] should_failslab+0xc2/0x120 [ 309.211313][ T9862] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 309.211364][ T9862] ? rcu_is_watching+0x12/0xc0 [ 309.211401][ T9862] ? seq_open+0x55/0x170 [ 309.211443][ T9862] ? __pfx_wakeup_sources_stats_open+0x10/0x10 [ 309.211486][ T9862] seq_open+0x55/0x170 [ 309.211524][ T9862] __seq_open_private+0x3e/0xd0 [ 309.211569][ T9862] seq_open_private+0x24/0x40 [ 309.211613][ T9862] full_proxy_open_regular+0x1b6/0x360 [ 309.211651][ T9862] do_dentry_open+0x741/0x1c10 [ 309.211700][ T9862] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 309.211741][ T9862] vfs_open+0x82/0x3f0 [ 309.211772][ T9862] ? may_open+0x1f2/0x400 [ 309.211814][ T9862] path_openat+0x1e5e/0x2d40 [ 309.211876][ T9862] ? __pfx_path_openat+0x10/0x10 [ 309.211936][ T9862] do_filp_open+0x20b/0x470 [ 309.211994][ T9862] ? __pfx_do_filp_open+0x10/0x10 [ 309.212046][ T9862] ? find_held_lock+0x2b/0x80 [ 309.212102][ T9862] ? alloc_fd+0x420/0x760 [ 309.212160][ T9862] do_sys_openat2+0x11b/0x1d0 [ 309.212196][ T9862] ? __pfx_do_sys_openat2+0x10/0x10 [ 309.212236][ T9862] ? __pfx___might_resched+0x10/0x10 [ 309.212287][ T9862] __x64_sys_openat+0x174/0x210 [ 309.212325][ T9862] ? __pfx___x64_sys_openat+0x10/0x10 [ 309.212364][ T9862] ? rcu_is_watching+0x12/0xc0 [ 309.212407][ T9862] do_syscall_64+0xcd/0x260 [ 309.212457][ T9862] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 309.212493][ T9862] RIP: 0033:0x7fcf55b8d169 [ 309.212521][ T9862] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 309.212557][ T9862] RSP: 002b:00007fcf569db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 309.212591][ T9862] RAX: ffffffffffffffda RBX: 00007fcf55da5fa0 RCX: 00007fcf55b8d169 [ 309.212615][ T9862] RDX: 00000000000c8400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 309.212640][ T9862] RBP: 00007fcf55c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 309.212663][ T9862] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 309.212686][ T9862] R13: 0000000000000000 R14: 00007fcf55da5fa0 R15: 00007ffd69e67b68 [ 309.212724][ T9862] [ 310.384615][ T9886] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 310.840911][ T9886] can: request_module (can-proto-3) failed. [ 311.391603][ T9906] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 311.730404][ T9903] FAULT_INJECTION: forcing a failure. [ 311.730404][ T9903] name failslab, interval 1, probability 0, space 0, times 0 [ 311.810895][ T9903] CPU: 0 UID: 0 PID: 9903 Comm: syz.2.909 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 311.810949][ T9903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 311.810972][ T9903] Call Trace: [ 311.810985][ T9903] [ 311.810999][ T9903] dump_stack_lvl+0x16c/0x1f0 [ 311.811054][ T9903] should_fail_ex+0x512/0x640 [ 311.811091][ T9903] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 311.811145][ T9903] ? __pfx_wakeup_sources_stats_open+0x10/0x10 [ 311.811190][ T9903] should_failslab+0xc2/0x120 [ 311.811245][ T9903] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 311.811296][ T9903] ? rcu_is_watching+0x12/0xc0 [ 311.811330][ T9903] ? seq_open+0x55/0x170 [ 311.811383][ T9903] ? __pfx_wakeup_sources_stats_open+0x10/0x10 [ 311.811426][ T9903] seq_open+0x55/0x170 [ 311.811462][ T9903] __seq_open_private+0x3e/0xd0 [ 311.811505][ T9903] seq_open_private+0x24/0x40 [ 311.811546][ T9903] full_proxy_open_regular+0x1b6/0x360 [ 311.811584][ T9903] do_dentry_open+0x741/0x1c10 [ 311.811632][ T9903] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 311.811671][ T9903] vfs_open+0x82/0x3f0 [ 311.811702][ T9903] ? may_open+0x1f2/0x400 [ 311.811743][ T9903] path_openat+0x1e5e/0x2d40 [ 311.811827][ T9903] ? __pfx_path_openat+0x10/0x10 [ 311.811887][ T9903] do_filp_open+0x20b/0x470 [ 311.811937][ T9903] ? __pfx_do_filp_open+0x10/0x10 [ 311.811987][ T9903] ? find_held_lock+0x2b/0x80 [ 311.812043][ T9903] ? alloc_fd+0x420/0x760 [ 311.812099][ T9903] do_sys_openat2+0x11b/0x1d0 [ 311.812133][ T9903] ? __pfx_do_sys_openat2+0x10/0x10 [ 311.812180][ T9903] __x64_sys_openat+0x174/0x210 [ 311.812215][ T9903] ? __pfx___x64_sys_openat+0x10/0x10 [ 311.812254][ T9903] ? rcu_is_watching+0x12/0xc0 [ 311.812296][ T9903] do_syscall_64+0xcd/0x260 [ 311.812344][ T9903] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 311.812379][ T9903] RIP: 0033:0x7f56e658d169 [ 311.812405][ T9903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 311.812440][ T9903] RSP: 002b:00007f56e7449038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 311.812474][ T9903] RAX: ffffffffffffffda RBX: 00007f56e67a5fa0 RCX: 00007f56e658d169 [ 311.812497][ T9903] RDX: 00000000000c8400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 311.812521][ T9903] RBP: 00007f56e660e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 311.812543][ T9903] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 311.812564][ T9903] R13: 0000000000000000 R14: 00007f56e67a5fa0 R15: 00007ffc0518bdb8 [ 311.812602][ T9903] [ 312.130402][ T9907] can: request_module (can-proto-3) failed. [ 314.107939][ T9940] ERROR: Out of memory at tomoyo_memory_ok. [ 314.266743][ T9944] FAULT_INJECTION: forcing a failure. [ 314.266743][ T9944] name failslab, interval 1, probability 0, space 0, times 0 [ 314.306254][ T9944] CPU: 0 UID: 0 PID: 9944 Comm: syz.5.920 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 314.306308][ T9944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 314.306335][ T9944] Call Trace: [ 314.306345][ T9944] [ 314.306360][ T9944] dump_stack_lvl+0x16c/0x1f0 [ 314.306425][ T9944] should_fail_ex+0x512/0x640 [ 314.306465][ T9944] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 314.306522][ T9944] ? __pfx_wakeup_sources_stats_open+0x10/0x10 [ 314.306567][ T9944] should_failslab+0xc2/0x120 [ 314.306619][ T9944] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 314.306668][ T9944] ? rcu_is_watching+0x12/0xc0 [ 314.306702][ T9944] ? seq_open+0x55/0x170 [ 314.306740][ T9944] ? __pfx_wakeup_sources_stats_open+0x10/0x10 [ 314.306783][ T9944] seq_open+0x55/0x170 [ 314.306822][ T9944] __seq_open_private+0x3e/0xd0 [ 314.306859][ T9944] seq_open_private+0x24/0x40 [ 314.306896][ T9944] full_proxy_open_regular+0x1b6/0x360 [ 314.306932][ T9944] do_dentry_open+0x741/0x1c10 [ 314.306982][ T9944] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 314.307024][ T9944] vfs_open+0x82/0x3f0 [ 314.307053][ T9944] ? may_open+0x1f2/0x400 [ 314.307093][ T9944] path_openat+0x1e5e/0x2d40 [ 314.307152][ T9944] ? __pfx_path_openat+0x10/0x10 [ 314.307206][ T9944] do_filp_open+0x20b/0x470 [ 314.307250][ T9944] ? __pfx_do_filp_open+0x10/0x10 [ 314.307294][ T9944] ? find_held_lock+0x2b/0x80 [ 314.307344][ T9944] ? alloc_fd+0x420/0x760 [ 314.307395][ T9944] do_sys_openat2+0x11b/0x1d0 [ 314.307435][ T9944] ? __pfx_do_sys_openat2+0x10/0x10 [ 314.307481][ T9944] __x64_sys_openat+0x174/0x210 [ 314.307517][ T9944] ? __pfx___x64_sys_openat+0x10/0x10 [ 314.307554][ T9944] ? rcu_is_watching+0x12/0xc0 [ 314.307596][ T9944] do_syscall_64+0xcd/0x260 [ 314.307642][ T9944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 314.307675][ T9944] RIP: 0033:0x7f691998d169 [ 314.307703][ T9944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 314.307736][ T9944] RSP: 002b:00007f69177f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 314.307769][ T9944] RAX: ffffffffffffffda RBX: 00007f6919ba5fa0 RCX: 00007f691998d169 [ 314.307790][ T9944] RDX: 00000000000c8400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 314.307813][ T9944] RBP: 00007f6919a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 314.307836][ T9944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 314.307859][ T9944] R13: 0000000000000000 R14: 00007f6919ba5fa0 R15: 00007ffc46863798 [ 314.307893][ T9944] [ 315.237346][ T9934] kexec: Could not allocate control_code_buffer [ 316.009932][ T9972] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 316.520239][ T9972] can: request_module (can-proto-3) failed. [ 316.601468][ T6894] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.931257][ T6894] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.116798][ T9984] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 317.389533][ T6894] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.823297][ T9987] can: request_module (can-proto-3) failed. [ 317.912479][ T5147] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 317.925125][ T5147] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 317.933740][ T5147] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 317.942579][ T5147] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 317.951143][ T5147] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 317.958677][ T5147] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 317.981480][ T6894] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.533913][ T6894] bridge_slave_1: left allmulticast mode [ 318.541912][ T6894] bridge_slave_1: left promiscuous mode [ 318.548929][ T6894] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.568077][ T6894] bridge_slave_0: left allmulticast mode [ 318.573806][ T6894] bridge_slave_0: left promiscuous mode [ 318.577534][ T30] audit: type=1800 audit(4294967551.600:12): pid=9995 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.939" name="dummy_udc" dev="gadgetfs" ino=7273 res=0 errno=0 [ 318.588042][ T6894] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.496831][T10014] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 320.048086][ T5147] Bluetooth: hci4: command tx timeout [ 320.126113][ T6894] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.141586][T10011] can: request_module (can-proto-3) failed. [ 320.141950][ T6894] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.174743][ T6894] bond0 (unregistering): Released all slaves [ 320.421453][ T9992] chnl_net:caif_netlink_parms(): no params data found [ 321.401046][ T9992] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.434836][ T9992] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.445092][ T9992] bridge_slave_0: entered allmulticast mode [ 321.466712][ T9992] bridge_slave_0: entered promiscuous mode [ 321.606930][T10038] FAULT_INJECTION: forcing a failure. [ 321.606930][T10038] name fail_futex, interval 1, probability 0, space 0, times 0 [ 321.630701][ T9992] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.640851][ T9992] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.650090][T10038] CPU: 1 UID: 0 PID: 10038 Comm: syz.1.940 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 321.650146][T10038] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 321.650169][T10038] Call Trace: [ 321.650181][T10038] [ 321.650196][T10038] dump_stack_lvl+0x16c/0x1f0 [ 321.650253][T10038] should_fail_ex+0x512/0x640 [ 321.650298][T10038] get_futex_key+0x49e/0x1000 [ 321.650343][T10038] ? __pfx_get_futex_key+0x10/0x10 [ 321.650381][T10038] ? stack_trace_save+0x8e/0xc0 [ 321.650422][T10038] ? __pfx_stack_trace_save+0x10/0x10 [ 321.650464][T10038] ? stack_depot_save_flags+0x29/0x9c0 [ 321.650503][T10038] ? __lock_acquire+0xaa4/0x1ba0 [ 321.650559][T10038] futex_wait_setup+0x78/0x290 [ 321.650609][T10038] ? kasan_save_free_info+0x3b/0x60 [ 321.650655][T10038] ? __x64_sys_openat+0x174/0x210 [ 321.650696][T10038] __futex_wait+0x266/0x3c0 [ 321.650750][T10038] ? __pfx___futex_wait+0x10/0x10 [ 321.650815][T10038] ? __pfx_futex_wake_mark+0x10/0x10 [ 321.650893][T10038] futex_wait+0xe8/0x380 [ 321.650943][T10038] ? __pfx_futex_wait+0x10/0x10 [ 321.650999][T10038] ? kmem_cache_free+0x2d4/0x4d0 [ 321.651050][T10038] ? fd_install+0x1db/0x670 [ 321.651100][T10038] ? putname+0x154/0x1a0 [ 321.651155][T10038] do_futex+0x229/0x350 [ 321.651199][T10038] ? __pfx_do_futex+0x10/0x10 [ 321.651248][T10038] ? __pfx___might_resched+0x10/0x10 [ 321.651302][T10038] __x64_sys_futex+0x1e0/0x4c0 [ 321.651351][T10038] ? __x64_sys_openat+0x174/0x210 [ 321.651392][T10038] ? __pfx___x64_sys_futex+0x10/0x10 [ 321.651441][T10038] ? rcu_is_watching+0x12/0xc0 [ 321.651484][T10038] do_syscall_64+0xcd/0x260 [ 321.651533][T10038] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 321.651571][T10038] RIP: 0033:0x7fbf6b18d169 [ 321.651602][T10038] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 321.651641][T10038] RSP: 002b:00007fbf6c0cf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 321.651679][T10038] RAX: ffffffffffffffda RBX: 00007fbf6b3a5fa8 RCX: 00007fbf6b18d169 [ 321.651706][T10038] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbf6b3a5fa8 [ 321.651731][T10038] RBP: 00007fbf6b3a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 321.651756][T10038] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbf6b3a5fac [ 321.651781][T10038] R13: 0000000000000000 R14: 00007fff9b5d43a0 R15: 00007fff9b5d4488 [ 321.651853][T10038] [ 321.679289][ T9992] bridge_slave_1: entered allmulticast mode [ 322.054625][ T9992] bridge_slave_1: entered promiscuous mode [ 322.128518][ T5147] Bluetooth: hci4: command tx timeout [ 322.229306][ T9992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.293016][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.299688][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.365587][ T6894] hsr_slave_0: left promiscuous mode [ 322.376711][ T6894] hsr_slave_1: left promiscuous mode [ 322.384300][ T6894] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.403245][ T6894] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.439259][ T6894] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.456989][ T6894] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.517931][ T6894] veth1_macvtap: left promiscuous mode [ 322.528935][ T6894] veth0_macvtap: left promiscuous mode [ 322.546597][ T6894] veth1_vlan: left promiscuous mode [ 322.552801][ T6894] veth0_vlan: left promiscuous mode [ 323.754123][ T6894] team0 (unregistering): Port device team_slave_1 removed [ 323.886507][ T6894] team0 (unregistering): Port device team_slave_0 removed [ 324.218578][ T5147] Bluetooth: hci4: command tx timeout [ 325.170317][ T9992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.240680][ T9992] team0: Port device team_slave_0 added [ 325.300529][ T9992] team0: Port device team_slave_1 added [ 325.365484][ T9992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.372755][ T9992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.417280][ T9992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.516186][ T9992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.539890][ T9992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.600499][ T9992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.833029][ T9992] hsr_slave_0: entered promiscuous mode [ 325.878957][ T9992] hsr_slave_1: entered promiscuous mode [ 325.885190][ T9992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.949201][ T9992] Cannot create hsr debugfs directory [ 326.290307][ T5147] Bluetooth: hci4: command tx timeout [ 326.915308][T10079] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 327.350378][ T9992] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 327.376937][T10083] can: request_module (can-proto-3) failed. [ 327.406846][ T9992] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 327.458351][ T9992] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 327.510109][ T9992] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 327.948726][ T9992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.007618][ T9992] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.170573][ T1325] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.177866][ T1325] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.257327][ T1325] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.264616][ T1325] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.417310][T10103] FAULT_INJECTION: forcing a failure. [ 328.417310][T10103] name failslab, interval 1, probability 0, space 0, times 0 [ 328.448043][T10103] CPU: 1 UID: 0 PID: 10103 Comm: syz.1.949 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 328.448095][T10103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 328.448120][T10103] Call Trace: [ 328.448131][T10103] [ 328.448145][T10103] dump_stack_lvl+0x16c/0x1f0 [ 328.448197][T10103] should_fail_ex+0x512/0x640 [ 328.448235][T10103] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 328.448290][T10103] ? __pfx_wakeup_sources_stats_open+0x10/0x10 [ 328.448337][T10103] should_failslab+0xc2/0x120 [ 328.448391][T10103] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 328.448454][T10103] ? rcu_is_watching+0x12/0xc0 [ 328.448492][T10103] ? seq_open+0x55/0x170 [ 328.448534][T10103] ? __pfx_wakeup_sources_stats_open+0x10/0x10 [ 328.448579][T10103] seq_open+0x55/0x170 [ 328.448617][T10103] __seq_open_private+0x3e/0xd0 [ 328.448661][T10103] seq_open_private+0x24/0x40 [ 328.448704][T10103] full_proxy_open_regular+0x1b6/0x360 [ 328.448742][T10103] do_dentry_open+0x741/0x1c10 [ 328.448793][T10103] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 328.448835][T10103] vfs_open+0x82/0x3f0 [ 328.448871][T10103] ? may_open+0x1f2/0x400 [ 328.448913][T10103] path_openat+0x1e5e/0x2d40 [ 328.448974][T10103] ? __pfx_path_openat+0x10/0x10 [ 328.449036][T10103] do_filp_open+0x20b/0x470 [ 328.449090][T10103] ? __pfx_do_filp_open+0x10/0x10 [ 328.449142][T10103] ? find_held_lock+0x2b/0x80 [ 328.449200][T10103] ? alloc_fd+0x420/0x760 [ 328.449258][T10103] do_sys_openat2+0x11b/0x1d0 [ 328.449307][T10103] ? __pfx_do_sys_openat2+0x10/0x10 [ 328.449355][T10103] __x64_sys_openat+0x174/0x210 [ 328.449391][T10103] ? __pfx___x64_sys_openat+0x10/0x10 [ 328.449443][T10103] ? rcu_is_watching+0x12/0xc0 [ 328.449488][T10103] do_syscall_64+0xcd/0x260 [ 328.449537][T10103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.449571][T10103] RIP: 0033:0x7fbf6b18d169 [ 328.449598][T10103] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.449633][T10103] RSP: 002b:00007fbf6c0cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 328.449667][T10103] RAX: ffffffffffffffda RBX: 00007fbf6b3a5fa0 RCX: 00007fbf6b18d169 [ 328.449690][T10103] RDX: 00000000000c8400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 328.449712][T10103] RBP: 00007fbf6b20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 328.449733][T10103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 328.449753][T10103] R13: 0000000000000000 R14: 00007fbf6b3a5fa0 R15: 00007fff9b5d4488 [ 328.449791][T10103] [ 329.148345][ T9992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.580294][T10139] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 329.986139][T10143] can: request_module (can-proto-3) failed. [ 330.226469][ T9992] veth0_vlan: entered promiscuous mode [ 330.281592][ T9992] veth1_vlan: entered promiscuous mode [ 330.402783][ T9992] veth0_macvtap: entered promiscuous mode [ 330.460066][ T9992] veth1_macvtap: entered promiscuous mode [ 330.517036][T10160] xs_local_setup_socket: unhandled error (13) connecting to /var/run/rpcbind.sock [ 330.549595][ T9992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.594749][ T9992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.624056][ T9992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.672646][T10160] svc: failed to register nfsdv3 RPC service (errno 111). [ 330.686559][ T9992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.715399][ T9992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.726011][ T9992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.737168][ T9992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 330.753493][ T9992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.767313][ T9992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.821774][ T9992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.915658][ T9992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.930955][T10160] svc: failed to register nfsaclv3 RPC service (errno 111). [ 330.932250][ T9992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.949040][ T9992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 330.959019][ T9992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 330.981192][ T9992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.005619][ T9992] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.030777][ T9992] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.079552][ T9992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.092389][ T9992] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.101225][ T9992] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.110820][ T9992] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.120523][ T9992] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.459513][ T1325] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.467420][ T1325] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.598571][ T6463] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.632563][ T6463] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.453621][T10188] Invalid ELF header magic: != ELF [ 332.485566][T10201] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 333.017998][T10204] can: request_module (can-proto-3) failed. [ 333.942272][T10228] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 333.971936][T10231] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 334.500924][T10234] can: request_module (can-proto-3) failed. [ 334.682722][T10237] can: request_module (can-proto-3) failed. [ 334.951794][T10246] netlink: 28 bytes leftover after parsing attributes in process `syz.1.969'. [ 336.033043][T10262] can: request_module (can-proto-3) failed. [ 336.864412][T10299] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 338.061616][T10315] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 338.795689][T10316] can: request_module (can-proto-3) failed. [ 339.444640][T10334] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 339.790789][T10335] can: request_module (can-proto-3) failed. [ 340.002194][T10341] [U] [ 340.005271][T10341] [U] [ 340.008059][T10341] [U] [ 340.010843][T10341] [U] [ 340.023228][T10341] [U] [ 340.026052][T10341] [U] [ 340.028828][T10341] [U] [ 340.031594][T10341] [U] [ 340.058485][T10344] netlink: 342 bytes leftover after parsing attributes in process `syz.2.985'. [ 340.177713][T10341] [U] [ 340.180521][T10341] [U] [ 340.183276][T10341] [U] [ 340.186041][T10341] [U] [ 340.272410][T10352] ICMPv6: process `syz.2.985' is using deprecated sysctl (syscall) net.ipv6.neigh.wg1.retrans_time - use net.ipv6.neigh.wg1.retrans_time_ms instead [ 340.438038][T10341] [U] [ 340.438135][T10341] [U] [ 340.438200][T10341] [U] [ 340.438265][T10341] [U] [ 340.466102][T10341] [U] [ 340.466172][T10341] [U] [ 340.466235][T10341] [U] [ 340.466286][T10341] [U] [ 340.466574][T10341] [U] [ 340.466648][T10341] [U] [ 340.466713][T10341] [U] [ 340.466775][T10341] [U] [ 340.467148][T10341] [U] [ 340.467215][T10341] [U] [ 340.467279][T10341] [U] [ 340.467342][T10341] [U] [ 340.467636][T10341] [U] [ 340.467700][T10341] [U] [ 340.467760][T10341] [U] [ 340.467827][T10341] [U] [ 340.504332][T10341] [U] [ 340.504427][T10341] [U] [ 340.504492][T10341] [U] [ 340.504557][T10341] [U] [ 340.504863][T10341] [U] [ 340.504933][T10341] [U] [ 340.504996][T10341] [U] [ 340.505061][T10341] [U] [ 340.505449][T10341] [U] [ 340.505517][T10341] [U] [ 340.505582][T10341] [U] [ 340.505657][T10341] [U] [ 340.505946][T10341] [U] [ 340.506010][T10341] [U] [ 340.506072][T10341] [U] [ 340.506131][T10341] [U] [ 340.532462][T10341] [U] [ 340.532534][T10341] [U] [ 340.532598][T10341] [U] [ 340.532678][T10341] [U] [ 340.533443][T10341] [U] [ 340.533512][T10341] [U] [ 340.533575][T10341] [U] [ 340.533649][T10341] [U] [ 340.534029][T10341] [U] [ 340.534101][T10341] [U] [ 340.534165][T10341] [U] [ 340.534230][T10341] [U] [ 340.541391][T10341] [U] [ 340.541459][T10341] [U] [ 340.541522][T10341] [U] [ 340.541585][T10341] [U] [ 340.541977][T10341] [U] [ 340.542041][T10341] [U] [ 340.542106][T10341] [U] [ 340.542171][T10341] [U] [ 340.542455][T10341] [U] [ 340.542519][T10341] [U] [ 340.542582][T10341] [U] [ 340.542655][T10341] [U] [ 340.543033][T10341] [U] [ 340.543097][T10341] [U] [ 340.543161][T10341] [U] [ 340.543225][T10341] [U] [ 340.543508][T10341] [U] [ 340.543572][T10341] [U] [ 340.543643][T10341] [U] [ 340.543709][T10341] [U] [ 340.544088][T10341] [U] [ 340.544154][T10341] [U] [ 340.544218][T10341] [U] [ 340.544282][T10341] [U] [ 340.575334][T10341] [U] [ 340.575423][T10341] [U] [ 340.575501][T10341] [U] [ 340.575578][T10341] [U] [ 340.576067][T10341] [U] [ 340.576146][T10341] [U] [ 340.576221][T10341] [U] [ 340.576297][T10341] [U] [ 340.576654][T10341] [U] [ 340.576731][T10341] [U] [ 340.576807][T10341] [U] [ 340.576883][T10341] [U] [ 340.577334][T10341] [U] [ 340.577413][T10341] [U] [ 340.577488][T10341] [U] [ 340.577564][T10341] [U] [ 340.588946][T10341] [U] [ 340.589018][T10341] [U] [ 340.589084][T10341] [U] [ 340.589152][T10341] [U] [ 340.589595][T10341] [U] [ 340.589671][T10341] [U] [ 340.589738][T10341] [U] [ 340.589804][T10341] [U] [ 340.590103][T10341] [U] [ 340.590166][T10341] [U] [ 340.590232][T10341] [U] [ 340.590298][T10341] [U] [ 340.590714][T10341] [U] [ 340.590782][T10341] [U] [ 340.590850][T10341] [U] [ 340.590917][T10341] [U] [ 340.591216][T10341] [U] [ 340.591284][T10341] [U] [ 340.591350][T10341] [U] [ 340.591417][T10341] [U] [ 340.611526][T10354] [U] [ 340.868014][T10361] ERROR: Out of memory at tomoyo_memory_ok. [ 341.622150][T10376] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 342.418787][T10377] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 342.712218][T10381] can: request_module (can-proto-3) failed. [ 343.536029][T10398] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 344.032513][T10406] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 344.123061][T10403] can: request_module (can-proto-3) failed. [ 346.722715][T10446] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 346.982167][T10440] netlink: 544 bytes leftover after parsing attributes in process `syz.1.1015'. [ 347.706335][T10462] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 347.786915][T10464] FAULT_INJECTION: forcing a failure. [ 347.786915][T10464] name failslab, interval 1, probability 0, space 0, times 0 [ 347.818499][T10455] can: request_module (can-proto-3) failed. [ 347.903169][T10464] CPU: 0 UID: 0 PID: 10464 Comm: syz.1.1009 Not tainted 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 347.903218][T10464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 347.903238][T10464] Call Trace: [ 347.903249][T10464] [ 347.903262][T10464] dump_stack_lvl+0x16c/0x1f0 [ 347.903310][T10464] should_fail_ex+0x512/0x640 [ 347.903351][T10464] should_failslab+0xc2/0x120 [ 347.903412][T10464] __kmalloc_cache_noprof+0x6a/0x3e0 [ 347.903458][T10464] ? __sctp_v6_cmp_addr+0x206/0x530 [ 347.903501][T10464] ? sctp_add_bind_addr+0xae/0x3f0 [ 347.903539][T10464] sctp_add_bind_addr+0xae/0x3f0 [ 347.903577][T10464] sctp_copy_local_addr_list+0x39d/0x5a0 [ 347.903625][T10464] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 347.903673][T10464] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 347.903721][T10464] ? sctp_bind_addr_copy+0xe0/0x530 [ 347.903757][T10464] sctp_bind_addr_copy+0xe0/0x530 [ 347.903800][T10464] sctp_connect_new_asoc+0x1d7/0x790 [ 347.903853][T10464] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 347.903941][T10464] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 347.903996][T10464] sctp_sendmsg+0x15f9/0x1ee0 [ 347.904054][T10464] ? __pfx_sctp_sendmsg+0x10/0x10 [ 347.904118][T10464] ? __might_fault+0xe3/0x190 [ 347.904150][T10464] ? __pfx_aa_sk_perm+0x10/0x10 [ 347.904200][T10464] ? __pfx_sctp_sendmsg+0x10/0x10 [ 347.904251][T10464] inet_sendmsg+0x119/0x140 [ 347.904300][T10464] __sys_sendto+0x431/0x510 [ 347.904342][T10464] ? __pfx___sys_sendto+0x10/0x10 [ 347.904416][T10464] ? ksys_write+0x1b9/0x240 [ 347.904462][T10464] ? __pfx_ksys_write+0x10/0x10 [ 347.904506][T10464] ? rcu_is_watching+0x12/0xc0 [ 347.904545][T10464] __x64_sys_sendto+0xe0/0x1c0 [ 347.904585][T10464] ? do_syscall_64+0x91/0x260 [ 347.904628][T10464] ? lockdep_hardirqs_on+0x7c/0x110 [ 347.904669][T10464] do_syscall_64+0xcd/0x260 [ 347.904714][T10464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.904749][T10464] RIP: 0033:0x7fbf6b18d169 [ 347.904775][T10464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.904807][T10464] RSP: 002b:00007fbf6c0ae038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 347.904839][T10464] RAX: ffffffffffffffda RBX: 00007fbf6b3a6080 RCX: 00007fbf6b18d169 [ 347.904862][T10464] RDX: 0000000000000401 RSI: 0000000000000000 RDI: 0000000000000003 [ 347.904883][T10464] RBP: 00007fbf6c0ae090 R08: 0000200000000000 R09: 000000000000001f [ 347.904905][T10464] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000002 [ 347.904925][T10464] R13: 0000000000000000 R14: 00007fbf6b3a6080 R15: 00007fff9b5d4488 [ 347.904963][T10464] [ 348.951002][T10485] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 349.189355][T10485] can: request_module (can-proto-3) failed. [ 349.394741][T10503] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1012'. [ 350.829303][T10529] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 351.354870][T10535] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 351.494879][T10530] can: request_module (can-proto-3) failed. [ 352.169384][T10540] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 352.707878][T10546] Setting dangerous option i915.mitigations - tainting kernel [ 353.246273][T10555] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 354.373386][T10572] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 354.575345][T10572] can: request_module (can-proto-3) failed. [ 354.920834][ T5147] Bluetooth: hci4: Malformed Event: 0x02 [ 355.216585][T10597] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 355.939215][T10602] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 357.282967][T10628] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 359.038934][T10660] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 359.721591][T10672] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 360.499695][T10679] FAULT_INJECTION: forcing a failure. [ 360.499695][T10679] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.552786][T10679] CPU: 0 UID: 0 PID: 10679 Comm: syz.2.1050 Tainted: G U 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 360.552843][T10679] Tainted: [U]=USER [ 360.552873][T10679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 360.552894][T10679] Call Trace: [ 360.552904][T10679] [ 360.552917][T10679] dump_stack_lvl+0x16c/0x1f0 [ 360.552968][T10679] should_fail_ex+0x512/0x640 [ 360.553009][T10679] _copy_from_user+0x2e/0xd0 [ 360.553050][T10679] copy_msghdr_from_user+0x98/0x160 [ 360.553100][T10679] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 360.553152][T10679] ? kfree+0x252/0x4d0 [ 360.553191][T10679] ? __pfx__kstrtoull+0x10/0x10 [ 360.553247][T10679] ___sys_sendmsg+0xfe/0x1d0 [ 360.553295][T10679] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.553369][T10679] ? __pfx___might_resched+0x10/0x10 [ 360.553416][T10679] __sys_sendmmsg+0x200/0x420 [ 360.553467][T10679] ? __pfx___sys_sendmmsg+0x10/0x10 [ 360.553536][T10679] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 360.553596][T10679] ? fput+0x70/0xf0 [ 360.553626][T10679] ? ksys_write+0x1b9/0x240 [ 360.553670][T10679] ? __pfx_ksys_write+0x10/0x10 [ 360.553714][T10679] ? rcu_is_watching+0x12/0xc0 [ 360.553754][T10679] __x64_sys_sendmmsg+0x9c/0x100 [ 360.553800][T10679] ? lockdep_hardirqs_on+0x7c/0x110 [ 360.553842][T10679] do_syscall_64+0xcd/0x260 [ 360.553887][T10679] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.553922][T10679] RIP: 0033:0x7f56e658d169 [ 360.553949][T10679] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.553984][T10679] RSP: 002b:00007f56e7449038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 360.554017][T10679] RAX: ffffffffffffffda RBX: 00007f56e67a5fa0 RCX: 00007f56e658d169 [ 360.554040][T10679] RDX: 00000000000009a6 RSI: 0000000000000000 RDI: 0000000000000003 [ 360.554061][T10679] RBP: 00007f56e7449090 R08: 0000000000000000 R09: 0000000000000000 [ 360.554083][T10679] R10: 000000000700001c R11: 0000000000000246 R12: 0000000000000002 [ 360.554105][T10679] R13: 0000000000000000 R14: 00007f56e67a5fa0 R15: 00007ffc0518bdb8 [ 360.554143][T10679] [ 360.869461][T10691] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1053'. [ 360.880168][T10691] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1053'. [ 361.686787][ T5147] Bluetooth: hci2: unexpected subevent 0x01 length: 4 < 18 [ 361.777353][ T30] audit: type=1800 audit(4294967602.785:13): pid=10721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1057" name="dbroot" dev="configfs" ino=31644 res=0 errno=0 [ 361.804676][T10715] FAULT_INJECTION: forcing a failure. [ 361.804676][T10715] name fail_futex, interval 1, probability 0, space 0, times 0 [ 361.864183][T10715] CPU: 0 UID: 0 PID: 10715 Comm: syz.1.1058 Tainted: G U 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 361.864238][T10715] Tainted: [U]=USER [ 361.864250][T10715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 361.864270][T10715] Call Trace: [ 361.864280][T10715] [ 361.864293][T10715] dump_stack_lvl+0x16c/0x1f0 [ 361.864339][T10715] should_fail_ex+0x512/0x640 [ 361.864378][T10715] get_futex_key+0x1c2/0x1000 [ 361.864419][T10715] ? __pfx_get_futex_key+0x10/0x10 [ 361.864480][T10715] futex_wake+0xe7/0x4e0 [ 361.864522][T10715] ? rcu_is_watching+0x12/0xc0 [ 361.864558][T10715] ? __pfx_futex_wake+0x10/0x10 [ 361.864618][T10715] do_futex+0x1e3/0x350 [ 361.864665][T10715] ? __pfx_do_futex+0x10/0x10 [ 361.864701][T10715] ? __might_fault+0xe3/0x190 [ 361.864740][T10715] mm_release+0x24e/0x300 [ 361.864778][T10715] do_exit+0x887/0x2d60 [ 361.864823][T10715] ? plist_check_head+0xd1/0x150 [ 361.864860][T10715] ? __pfx_do_exit+0x10/0x10 [ 361.864905][T10715] ? do_raw_spin_lock+0x12c/0x2b0 [ 361.864957][T10715] ? find_held_lock+0x2b/0x80 [ 361.864994][T10715] do_group_exit+0xd3/0x2a0 [ 361.865041][T10715] get_signal+0x24cf/0x26a0 [ 361.865079][T10715] ? kmem_cache_free+0x2d4/0x4d0 [ 361.865122][T10715] ? find_held_lock+0x2b/0x80 [ 361.865156][T10715] ? do_sys_openat2+0x1b0/0x1d0 [ 361.865188][T10715] ? __pfx_get_signal+0x10/0x10 [ 361.865226][T10715] ? do_futex+0x122/0x350 [ 361.865263][T10715] ? __pfx_do_futex+0x10/0x10 [ 361.865304][T10715] arch_do_signal_or_restart+0x8f/0x7d0 [ 361.865351][T10715] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 361.865405][T10715] ? rcu_is_watching+0x12/0xc0 [ 361.865451][T10715] syscall_exit_to_user_mode+0x150/0x2a0 [ 361.865494][T10715] do_syscall_64+0xda/0x260 [ 361.865537][T10715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.865570][T10715] RIP: 0033:0x7fbf6b18d169 [ 361.865595][T10715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.865627][T10715] RSP: 002b:00007fbf6c0cf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 361.865657][T10715] RAX: 0000000000000001 RBX: 00007fbf6b3a5fa8 RCX: 00007fbf6b18d169 [ 361.865677][T10715] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbf6b3a5fac [ 361.865697][T10715] RBP: 00007fbf6b3a5fa0 R08: 00007fbf6c0d0000 R09: 0000000000000000 [ 361.865718][T10715] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fbf6b3a5fac [ 361.865740][T10715] R13: 0000000000000000 R14: 00007fff9b5d43a0 R15: 00007fff9b5d4488 [ 361.865775][T10715] [ 364.128142][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 364.288428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 365.916402][T10810] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 367.110776][T10801] FAULT_INJECTION: forcing a failure. [ 367.110776][T10801] name fail_futex, interval 1, probability 0, space 0, times 0 [ 367.110836][T10801] CPU: 0 UID: 0 PID: 10801 Comm: syz.4.1070 Tainted: G U 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 367.110891][T10801] Tainted: [U]=USER [ 367.110902][T10801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 367.110924][T10801] Call Trace: [ 367.110933][T10801] [ 367.110946][T10801] dump_stack_lvl+0x16c/0x1f0 [ 367.110996][T10801] should_fail_ex+0x512/0x640 [ 367.111035][T10801] get_futex_key+0x49e/0x1000 [ 367.111073][T10801] ? find_held_lock+0x2b/0x80 [ 367.111107][T10801] ? __pfx_get_futex_key+0x10/0x10 [ 367.111143][T10801] ? do_raw_spin_unlock+0x172/0x230 [ 367.111171][T10801] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 367.111223][T10801] ? trace_pid_list_is_set+0x100/0x150 [ 367.111265][T10801] futex_wait_setup+0x78/0x290 [ 367.111308][T10801] ? event_filter_pid_sched_wakeup_probe_post+0xf7/0x260 [ 367.111361][T10801] __futex_wait+0x266/0x3c0 [ 367.111407][T10801] ? __pfx___futex_wait+0x10/0x10 [ 367.111455][T10801] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 367.111499][T10801] ? __pfx_futex_wake_mark+0x10/0x10 [ 367.111557][T10801] futex_wait+0xe8/0x380 [ 367.111603][T10801] ? __pfx_futex_wait+0x10/0x10 [ 367.111654][T10801] ? kmem_cache_free+0x2d4/0x4d0 [ 367.111698][T10801] ? find_held_lock+0x2b/0x80 [ 367.111739][T10801] ? putname+0x154/0x1a0 [ 367.111770][T10801] ? do_sys_openat2+0x1b0/0x1d0 [ 367.111806][T10801] do_futex+0x229/0x350 [ 367.111845][T10801] ? __pfx_do_futex+0x10/0x10 [ 367.111891][T10801] __x64_sys_futex+0x1e0/0x4c0 [ 367.111932][T10801] ? __x64_sys_openat+0x174/0x210 [ 367.111966][T10801] ? __pfx___x64_sys_futex+0x10/0x10 [ 367.112010][T10801] ? rcu_is_watching+0x12/0xc0 [ 367.112050][T10801] do_syscall_64+0xcd/0x260 [ 367.112096][T10801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.112130][T10801] RIP: 0033:0x7fcf55b8d169 [ 367.112157][T10801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.112191][T10801] RSP: 002b:00007fcf569db0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 367.112224][T10801] RAX: ffffffffffffffda RBX: 00007fcf55da5fa8 RCX: 00007fcf55b8d169 [ 367.112246][T10801] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fcf55da5fa8 [ 367.112267][T10801] RBP: 00007fcf55da5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 367.112288][T10801] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fcf55da5fac [ 367.112308][T10801] R13: 0000000000000000 R14: 00007ffd69e67a80 R15: 00007ffd69e67b68 [ 367.112343][T10801] [ 368.800492][T10828] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1078'. [ 369.258471][T10837] FAULT_INJECTION: forcing a failure. [ 369.258471][T10837] name fail_futex, interval 1, probability 0, space 0, times 0 [ 369.319176][T10837] CPU: 0 UID: 0 PID: 10837 Comm: syz.6.1081 Tainted: G U 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 369.319235][T10837] Tainted: [U]=USER [ 369.319248][T10837] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 369.319269][T10837] Call Trace: [ 369.319280][T10837] [ 369.319295][T10837] dump_stack_lvl+0x16c/0x1f0 [ 369.319349][T10837] should_fail_ex+0x512/0x640 [ 369.319391][T10837] get_futex_key+0x49e/0x1000 [ 369.319433][T10837] ? __pfx_get_futex_key+0x10/0x10 [ 369.319482][T10837] futex_wake+0xe7/0x4e0 [ 369.319533][T10837] ? __pfx_futex_wake+0x10/0x10 [ 369.319585][T10837] ? percpu_counter_add_batch+0xb8/0x1f0 [ 369.319644][T10837] ? errseq_sample+0x53/0x70 [ 369.319698][T10837] ? file_init_path+0x4fe/0x760 [ 369.319740][T10837] do_futex+0x1e3/0x350 [ 369.319781][T10837] ? __pfx_do_futex+0x10/0x10 [ 369.319822][T10837] ? fd_install+0x1db/0x670 [ 369.319874][T10837] __x64_sys_futex+0x1e0/0x4c0 [ 369.319917][T10837] ? __sys_socket+0xac/0x260 [ 369.319955][T10837] ? __pfx___x64_sys_futex+0x10/0x10 [ 369.320000][T10837] ? rcu_is_watching+0x12/0xc0 [ 369.320045][T10837] do_syscall_64+0xcd/0x260 [ 369.320094][T10837] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.320129][T10837] RIP: 0033:0x7f8872b8d169 [ 369.320157][T10837] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.320192][T10837] RSP: 002b:00007f8873a1a0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 369.320226][T10837] RAX: ffffffffffffffda RBX: 00007f8872da6088 RCX: 00007f8872b8d169 [ 369.320252][T10837] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8872da608c [ 369.320275][T10837] RBP: 00007f8872da6080 R08: 00007f8873a3c000 R09: 0000000000000000 [ 369.320298][T10837] R10: 0000000000000007 R11: 0000000000000246 R12: 00007f8872da608c [ 369.320321][T10837] R13: 0000000000000000 R14: 00007fff4e1e7620 R15: 00007fff4e1e7708 [ 369.320359][T10837] [ 370.260712][T10853] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1084'. [ 370.280334][T10853] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1084'. [ 370.768852][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 371.293894][T10867] netlink: 330 bytes leftover after parsing attributes in process `syz.1.1087'. [ 371.356175][T10867] FAULT_INJECTION: forcing a failure. [ 371.356175][T10867] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 371.424275][T10867] CPU: 0 UID: 0 PID: 10867 Comm: syz.1.1087 Tainted: G U 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 371.424334][T10867] Tainted: [U]=USER [ 371.424346][T10867] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 371.424366][T10867] Call Trace: [ 371.424378][T10867] [ 371.424391][T10867] dump_stack_lvl+0x16c/0x1f0 [ 371.424443][T10867] should_fail_ex+0x512/0x640 [ 371.424485][T10867] _copy_from_user+0x2e/0xd0 [ 371.424527][T10867] copy_msghdr_from_user+0x98/0x160 [ 371.424599][T10867] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 371.424654][T10867] ? kfree+0x252/0x4d0 [ 371.424694][T10867] ? __pfx__kstrtoull+0x10/0x10 [ 371.424751][T10867] ___sys_sendmsg+0xfe/0x1d0 [ 371.424798][T10867] ? __pfx____sys_sendmsg+0x10/0x10 [ 371.424873][T10867] ? __pfx___might_resched+0x10/0x10 [ 371.424922][T10867] __sys_sendmmsg+0x200/0x420 [ 371.424973][T10867] ? __pfx___sys_sendmmsg+0x10/0x10 [ 371.425031][T10867] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 371.425091][T10867] ? fput+0x70/0xf0 [ 371.425121][T10867] ? ksys_write+0x1b9/0x240 [ 371.425166][T10867] ? __pfx_ksys_write+0x10/0x10 [ 371.425209][T10867] ? rcu_is_watching+0x12/0xc0 [ 371.425249][T10867] __x64_sys_sendmmsg+0x9c/0x100 [ 371.425292][T10867] ? lockdep_hardirqs_on+0x7c/0x110 [ 371.425328][T10867] do_syscall_64+0xcd/0x260 [ 371.425362][T10867] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 371.425386][T10867] RIP: 0033:0x7fbf6b18d169 [ 371.425405][T10867] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 371.425427][T10867] RSP: 002b:00007fbf6c0cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 371.425449][T10867] RAX: ffffffffffffffda RBX: 00007fbf6b3a5fa0 RCX: 00007fbf6b18d169 [ 371.425465][T10867] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 371.425480][T10867] RBP: 00007fbf6c0cf090 R08: 0000000000000000 R09: 0000000000000000 [ 371.425494][T10867] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 371.425508][T10867] R13: 0000000000000000 R14: 00007fbf6b3a5fa0 R15: 00007fff9b5d4488 [ 371.425533][T10867] [ 372.016000][T10873] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1090'. [ 372.268122][ T5147] Bluetooth: hci4: unexpected subevent 0x01 length: 4 < 18 [ 372.341792][ T30] audit: type=1800 audit(4294967621.362:14): pid=10881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1091" name="dbroot" dev="configfs" ino=32957 res=0 errno=0 [ 373.877468][T10909] netlink: 338 bytes leftover after parsing attributes in process `syz.6.1098'. [ 374.177312][T10906] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1097'. [ 374.590947][T10921] ERROR: Out of memory at tomoyo_memory_ok. [ 375.376416][T10932] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 375.392797][T10931] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 375.742974][T10934] can: request_module (can-proto-3) failed. [ 375.783844][T10939] aoe: skb alloc failure [ 375.890614][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 375.897117][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.123760][T10980] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 378.660291][T10978] can: request_module (can-proto-3) failed. [ 378.842515][T10987] FAULT_INJECTION: forcing a failure. [ 378.842515][T10987] name failslab, interval 1, probability 0, space 0, times 0 [ 378.908341][T10987] CPU: 1 UID: 0 PID: 10987 Comm: syz.1.1117 Tainted: G U 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 378.908399][T10987] Tainted: [U]=USER [ 378.908411][T10987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 378.908431][T10987] Call Trace: [ 378.908440][T10987] [ 378.908454][T10987] dump_stack_lvl+0x16c/0x1f0 [ 378.908506][T10987] should_fail_ex+0x512/0x640 [ 378.908544][T10987] should_failslab+0xc2/0x120 [ 378.908600][T10987] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 378.908652][T10987] ? __alloc_skb+0x2b2/0x380 [ 378.908699][T10987] __alloc_skb+0x2b2/0x380 [ 378.908739][T10987] ? __pfx___alloc_skb+0x10/0x10 [ 378.908783][T10987] ? __pfx___futex_wait+0x10/0x10 [ 378.908833][T10987] new_skb+0x21/0x230 [ 378.908861][T10987] aoecmd_cfg+0x21c/0x7d0 [ 378.908898][T10987] ? __pfx_aoecmd_cfg+0x10/0x10 [ 378.908940][T10987] ? apparmor_file_permission+0x251/0x400 [ 378.908992][T10987] ? aoechr_write+0x120/0x160 [ 378.909019][T10987] aoechr_write+0x120/0x160 [ 378.909049][T10987] vfs_write+0x25c/0x1180 [ 378.909089][T10987] ? __pfx_aoechr_write+0x10/0x10 [ 378.909129][T10987] ? __pfx_vfs_write+0x10/0x10 [ 378.909171][T10987] ? find_held_lock+0x2b/0x80 [ 378.909207][T10987] ? __fget_files+0x204/0x3c0 [ 378.909259][T10987] ? __fget_files+0x20e/0x3c0 [ 378.909312][T10987] ksys_write+0x12a/0x240 [ 378.909354][T10987] ? __pfx_ksys_write+0x10/0x10 [ 378.909394][T10987] ? rcu_is_watching+0x12/0xc0 [ 378.909434][T10987] do_syscall_64+0xcd/0x260 [ 378.909479][T10987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 378.909511][T10987] RIP: 0033:0x7fbf6b18d169 [ 378.909539][T10987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 378.909572][T10987] RSP: 002b:00007fbf6c0cf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 378.909604][T10987] RAX: ffffffffffffffda RBX: 00007fbf6b3a5fa0 RCX: 00007fbf6b18d169 [ 378.909627][T10987] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 378.909647][T10987] RBP: 00007fbf6b20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 378.909667][T10987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 378.909686][T10987] R13: 0000000000000000 R14: 00007fbf6b3a5fa0 R15: 00007fff9b5d4488 [ 378.909720][T10987] [ 378.910537][T10987] aoe: skb alloc failure [ 379.213926][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.220535][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.468514][T10998] can: request_module (can-proto-0) failed. [ 380.080053][T11011] FAULT_INJECTION: forcing a failure. [ 380.080053][T11011] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 380.156682][T11011] CPU: 1 UID: 0 PID: 11011 Comm: syz.4.1123 Tainted: G U 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 380.156742][T11011] Tainted: [U]=USER [ 380.156755][T11011] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 380.156775][T11011] Call Trace: [ 380.156786][T11011] [ 380.156798][T11011] dump_stack_lvl+0x16c/0x1f0 [ 380.156857][T11011] should_fail_ex+0x512/0x640 [ 380.156898][T11011] _copy_from_iter+0x2a4/0x15b0 [ 380.156941][T11011] ? find_held_lock+0x2b/0x80 [ 380.156977][T11011] ? __pfx__copy_from_iter+0x10/0x10 [ 380.157019][T11011] ? __virt_addr_valid+0x5e/0x590 [ 380.157064][T11011] ? __phys_addr_symbol+0x30/0x80 [ 380.157108][T11011] ? __check_object_size+0x4c7/0x710 [ 380.157164][T11011] netlink_sendmsg+0x83a/0xd70 [ 380.157213][T11011] ? __pfx_netlink_sendmsg+0x10/0x10 [ 380.157265][T11011] __sys_sendto+0x495/0x510 [ 380.157308][T11011] ? __pfx___sys_sendto+0x10/0x10 [ 380.157356][T11011] ? fput+0x70/0xf0 [ 380.157396][T11011] ? xfd_validate_state+0x5d/0x180 [ 380.157429][T11011] ? rcu_is_watching+0x12/0xc0 [ 380.157466][T11011] __x64_sys_sendto+0xe0/0x1c0 [ 380.157504][T11011] ? do_syscall_64+0x91/0x260 [ 380.157546][T11011] ? lockdep_hardirqs_on+0x7c/0x110 [ 380.157584][T11011] do_syscall_64+0xcd/0x260 [ 380.157627][T11011] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.157664][T11011] RIP: 0033:0x7fcf55b8effc [ 380.157687][T11011] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 380.157719][T11011] RSP: 002b:00007fcf569d9ec0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 380.157751][T11011] RAX: ffffffffffffffda RBX: 00007fcf569d9fc0 RCX: 00007fcf55b8effc [ 380.157773][T11011] RDX: 0000000000000024 RSI: 00007fcf569da010 RDI: 0000000000000006 [ 380.157794][T11011] RBP: 0000000000000000 R08: 00007fcf569d9f14 R09: 000000000000000c [ 380.157814][T11011] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000006 [ 380.157834][T11011] R13: 00007fcf569d9f68 R14: 00007fcf569da010 R15: 0000000000000000 [ 380.157877][T11011] [ 380.365243][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.438433][T11021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1123'. [ 381.731759][T11033] could not allocate digest TFM handle [ 382.200880][T11061] ERROR: Out of memory at tomoyo_memory_ok. [ 383.732187][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.738905][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 383.967238][T11090] FAULT_INJECTION: forcing a failure. [ 383.967238][T11090] name failslab, interval 1, probability 0, space 0, times 0 [ 384.006848][T11090] CPU: 0 UID: 0 PID: 11090 Comm: syz.4.1139 Tainted: G U 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 384.006909][T11090] Tainted: [U]=USER [ 384.006921][T11090] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 384.006942][T11090] Call Trace: [ 384.006953][T11090] [ 384.006968][T11090] dump_stack_lvl+0x16c/0x1f0 [ 384.007019][T11090] should_fail_ex+0x512/0x640 [ 384.007054][T11090] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 384.007108][T11090] ? __pfx_wakeup_sources_stats_open+0x10/0x10 [ 384.007149][T11090] should_failslab+0xc2/0x120 [ 384.007202][T11090] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 384.007248][T11090] ? rcu_is_watching+0x12/0xc0 [ 384.007281][T11090] ? seq_open+0x55/0x170 [ 384.007320][T11090] ? __pfx_wakeup_sources_stats_open+0x10/0x10 [ 384.007360][T11090] seq_open+0x55/0x170 [ 384.007395][T11090] __seq_open_private+0x3e/0xd0 [ 384.007435][T11090] seq_open_private+0x24/0x40 [ 384.007475][T11090] full_proxy_open_regular+0x1b6/0x360 [ 384.007511][T11090] do_dentry_open+0x741/0x1c10 [ 384.007556][T11090] ? __pfx_full_proxy_open_regular+0x10/0x10 [ 384.007594][T11090] vfs_open+0x82/0x3f0 [ 384.007638][T11090] ? may_open+0x1f2/0x400 [ 384.007681][T11090] path_openat+0x1e5e/0x2d40 [ 384.007742][T11090] ? __pfx_path_openat+0x10/0x10 [ 384.007793][T11090] do_filp_open+0x20b/0x470 [ 384.007840][T11090] ? __pfx_do_filp_open+0x10/0x10 [ 384.007888][T11090] ? find_held_lock+0x2b/0x80 [ 384.007939][T11090] ? alloc_fd+0x420/0x760 [ 384.007992][T11090] do_sys_openat2+0x11b/0x1d0 [ 384.008024][T11090] ? __pfx_do_sys_openat2+0x10/0x10 [ 384.008067][T11090] __x64_sys_openat+0x174/0x210 [ 384.008102][T11090] ? __pfx___x64_sys_openat+0x10/0x10 [ 384.008139][T11090] ? rcu_is_watching+0x12/0xc0 [ 384.008183][T11090] do_syscall_64+0xcd/0x260 [ 384.008228][T11090] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.008264][T11090] RIP: 0033:0x7fcf55b8d169 [ 384.008290][T11090] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 384.008324][T11090] RSP: 002b:00007fcf569db038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 384.008357][T11090] RAX: ffffffffffffffda RBX: 00007fcf55da5fa0 RCX: 00007fcf55b8d169 [ 384.008381][T11090] RDX: 00000000000c8400 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 384.008404][T11090] RBP: 00007fcf55c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 384.008425][T11090] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.008445][T11090] R13: 0000000000000000 R14: 00007fcf55da5fa0 R15: 00007ffd69e67b68 [ 384.008481][T11090] [ 384.718958][T11103] usb usb15: usbfs: process 11103 (syz.1.1141) did not claim interface 0 before use [ 385.649049][T11121] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 386.096921][T11121] can: request_module (can-proto-3) failed. [ 388.252829][T11151] aoe: skb alloc failure [ 388.270213][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 388.278796][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 388.302995][T11154] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1152'. [ 388.370795][T11160] usb usb15: usbfs: process 11160 (syz.2.1151) did not claim interface 0 before use [ 389.445403][T11182] usb usb28: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 390.613885][T11202] aoe: skb alloc failure [ 390.637251][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 390.643911][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 390.666740][T11203] aoe: skb alloc failure [ 390.686224][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 390.694632][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.238573][T11223] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 392.340779][T11225] usb usb15: usbfs: process 11225 (syz.4.1167) did not claim interface 0 before use [ 392.423368][T11226] aoe: skb alloc failure [ 392.441903][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 392.450461][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 392.623171][T11218] can: request_module (can-proto-3) failed. [ 392.935180][T11220] can: request_module (can-proto-3) failed. [ 393.500542][T11245] aoe: skb alloc failure [ 393.501949][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 393.502036][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.055083][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 394.055229][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 394.956855][T11281] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 395.778945][T11277] can: request_module (can-proto-3) failed. [ 396.659111][T11300] aoe: skb alloc failure [ 396.676787][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.684260][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 396.882676][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 396.891843][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 397.385694][T11311] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 397.716664][T11309] can: request_module (can-proto-3) failed. [ 397.864272][T11315] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 398.016007][T11315] can: request_module (can-proto-3) failed. [ 399.078564][T11326] FAULT_INJECTION: forcing a failure. [ 399.078564][T11326] name fail_futex, interval 1, probability 0, space 0, times 0 [ 399.159505][T11326] CPU: 1 UID: 0 PID: 11326 Comm: syz.1.1204 Tainted: G U 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 399.159568][T11326] Tainted: [U]=USER [ 399.159582][T11326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 399.159605][T11326] Call Trace: [ 399.159618][T11326] [ 399.159632][T11326] dump_stack_lvl+0x16c/0x1f0 [ 399.159693][T11326] should_fail_ex+0x512/0x640 [ 399.159731][T11326] ? __pfx___futex_wait+0x10/0x10 [ 399.159789][T11326] get_futex_key+0x49e/0x1000 [ 399.159829][T11326] ? __import_iovec+0x1c8/0x660 [ 399.159874][T11326] ? __pfx_futex_wake_mark+0x10/0x10 [ 399.159924][T11326] ? __pfx_get_futex_key+0x10/0x10 [ 399.159967][T11326] ? import_iovec+0x109/0x140 [ 399.160016][T11326] futex_wake+0xe7/0x4e0 [ 399.160068][T11326] ? __pfx_futex_wake+0x10/0x10 [ 399.160118][T11326] ? __pfx_vfs_writev+0x10/0x10 [ 399.160164][T11326] ? percpu_counter_add_batch+0xb8/0x1f0 [ 399.160222][T11326] ? errseq_sample+0x53/0x70 [ 399.160272][T11326] do_futex+0x1e3/0x350 [ 399.160315][T11326] ? __pfx_do_futex+0x10/0x10 [ 399.160365][T11326] __x64_sys_futex+0x1e0/0x4c0 [ 399.160410][T11326] ? fput+0x70/0xf0 [ 399.160467][T11326] ? __pfx___x64_sys_futex+0x10/0x10 [ 399.160514][T11326] ? __pfx_do_writev+0x10/0x10 [ 399.160563][T11326] ? rcu_is_watching+0x12/0xc0 [ 399.160611][T11326] do_syscall_64+0xcd/0x260 [ 399.160660][T11326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 399.160703][T11326] RIP: 0033:0x7fbf6b18d169 [ 399.160731][T11326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 399.160769][T11326] RSP: 002b:00007fbf6c0cf0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 399.160804][T11326] RAX: ffffffffffffffda RBX: 00007fbf6b3a5fa8 RCX: 00007fbf6b18d169 [ 399.160828][T11326] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fbf6b3a5fac [ 399.160850][T11326] RBP: 00007fbf6b3a5fa0 R08: 00007fbf6c0d0000 R09: 0000000000000000 [ 399.160874][T11326] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007fbf6b3a5fac [ 399.160898][T11326] R13: 0000000000000000 R14: 00007fff9b5d43a0 R15: 00007fff9b5d4488 [ 399.160938][T11326] [ 400.096521][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 400.103006][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 400.497633][T11349] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1201'. [ 401.191691][T11362] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 401.493541][T11365] can: request_module (can-proto-3) failed. [ 401.699803][T11367] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 402.640849][T11382] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 402.669385][T11380] aoe: skb alloc failure [ 402.791235][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 402.797624][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 403.315960][T11385] can: request_module (can-proto-3) failed. [ 404.240883][T11415] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 404.782008][T11416] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 405.147641][T11412] can: request_module (can-proto-3) failed. [ 405.812041][T11433] aoe: skb alloc failure [ 405.818223][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 405.827827][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 406.508323][T11447] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 406.799874][T11448] can: request_module (can-proto-3) failed. [ 408.534640][T11473] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1232'. [ 409.109948][T11482] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 409.706280][T11483] can: request_module (can-proto-3) failed. [ 410.136993][T11492] aoe: skb alloc failure [ 410.180120][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 410.187172][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 410.458798][T11496] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1239'. [ 410.568258][T11498] netlink: 338 bytes leftover after parsing attributes in process `syz.2.1239'. [ 411.614360][T11516] FAULT_INJECTION: forcing a failure. [ 411.614360][T11516] name failslab, interval 1, probability 0, space 0, times 0 [ 411.835259][T11516] CPU: 1 UID: 0 PID: 11516 Comm: syz.6.1244 Tainted: G U 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 411.835316][T11516] Tainted: [U]=USER [ 411.835328][T11516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 411.835349][T11516] Call Trace: [ 411.835359][T11516] [ 411.835372][T11516] dump_stack_lvl+0x16c/0x1f0 [ 411.835420][T11516] should_fail_ex+0x512/0x640 [ 411.835455][T11516] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 411.835514][T11516] should_failslab+0xc2/0x120 [ 411.835566][T11516] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 411.835620][T11516] ? dccp_feat_clone_sp_val+0x96/0x130 [ 411.835668][T11516] kmemdup_noprof+0x29/0x60 [ 411.835707][T11516] dccp_feat_clone_sp_val+0x96/0x130 [ 411.835754][T11516] __feat_register_sp+0x331/0x5a0 [ 411.835803][T11516] ? __pfx___feat_register_sp+0x10/0x10 [ 411.835857][T11516] ? __kasan_kmalloc+0xaa/0xb0 [ 411.835909][T11516] dccp_feat_init+0x724/0x800 [ 411.835959][T11516] ? __pfx_dccp_feat_init+0x10/0x10 [ 411.836007][T11516] ? __pfx_dccp_keepalive_timer+0x10/0x10 [ 411.836045][T11516] ? lockdep_init_map_type+0x5c/0x280 [ 411.836096][T11516] ? do_init_timer+0xc9/0x110 [ 411.836133][T11516] ? __pfx_dccp_keepalive_timer+0x10/0x10 [ 411.836170][T11516] ? __pfx_dccp_delack_timer+0x10/0x10 [ 411.836211][T11516] dccp_init_sock+0x327/0x420 [ 411.836242][T11516] ? __pfx_dccp_v4_init_sock+0x10/0x10 [ 411.836295][T11516] dccp_v4_init_sock+0x1f/0xa0 [ 411.836343][T11516] ? __pfx_dccp_v4_init_sock+0x10/0x10 [ 411.836394][T11516] inet_create+0x936/0x1090 [ 411.836444][T11516] ? inet_create+0x93/0x1090 [ 411.836497][T11516] __sock_create+0x335/0x8d0 [ 411.836537][T11516] inet_ctl_sock_create+0x94/0x230 [ 411.836583][T11516] ? __pfx_inet_ctl_sock_create+0x10/0x10 [ 411.836637][T11516] ? __pfx_dccp_v4_init_net+0x10/0x10 [ 411.836689][T11516] dccp_v4_init_net+0x63/0x90 [ 411.836739][T11516] ops_init+0x1df/0x5f0 [ 411.836791][T11516] setup_net+0x21e/0x850 [ 411.836853][T11516] ? __pfx_setup_net+0x10/0x10 [ 411.836901][T11516] ? lockdep_init_map_type+0x5c/0x280 [ 411.836949][T11516] ? __pfx_down_read_killable+0x10/0x10 [ 411.837003][T11516] ? debug_mutex_init+0x37/0x70 [ 411.837039][T11516] copy_net_ns+0x2a6/0x5f0 [ 411.837071][T11516] create_new_namespaces+0x3ea/0xad0 [ 411.837122][T11516] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 411.837169][T11516] ksys_unshare+0x45b/0xa40 [ 411.837216][T11516] ? __pfx_ksys_unshare+0x10/0x10 [ 411.837261][T11516] ? xfd_validate_state+0x5d/0x180 [ 411.837296][T11516] ? rcu_is_watching+0x12/0xc0 [ 411.837337][T11516] __x64_sys_unshare+0x31/0x40 [ 411.837383][T11516] do_syscall_64+0xcd/0x260 [ 411.837427][T11516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.837460][T11516] RIP: 0033:0x7f8872b8d169 [ 411.837486][T11516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.837518][T11516] RSP: 002b:00007f88739f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 411.837550][T11516] RAX: ffffffffffffffda RBX: 00007f8872da6160 RCX: 00007f8872b8d169 [ 411.837572][T11516] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 411.837593][T11516] RBP: 00007f8872c0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 411.837614][T11516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.837635][T11516] R13: 0000000000000000 R14: 00007f8872da6160 R15: 00007fff4e1e7708 [ 411.837676][T11516] [ 413.045543][T11537] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 413.464165][T11540] FAULT_INJECTION: forcing a failure. [ 413.464165][T11540] name failslab, interval 1, probability 0, space 0, times 0 [ 413.565403][T11540] CPU: 0 UID: 0 PID: 11540 Comm: syz.6.1249 Tainted: G U 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 413.565460][T11540] Tainted: [U]=USER [ 413.565472][T11540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 413.565493][T11540] Call Trace: [ 413.565504][T11540] [ 413.565518][T11540] dump_stack_lvl+0x16c/0x1f0 [ 413.565567][T11540] should_fail_ex+0x512/0x640 [ 413.565609][T11540] should_failslab+0xc2/0x120 [ 413.565661][T11540] __kmalloc_cache_noprof+0x6a/0x3e0 [ 413.565705][T11540] ? __sctp_v6_cmp_addr+0x206/0x530 [ 413.565750][T11540] ? sctp_add_bind_addr+0xae/0x3f0 [ 413.565790][T11540] sctp_add_bind_addr+0xae/0x3f0 [ 413.565828][T11540] sctp_copy_local_addr_list+0x39d/0x5a0 [ 413.565878][T11540] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 413.565928][T11540] ? sctp_auth_asoc_copy_shkeys+0x2a5/0x360 [ 413.565987][T11540] ? sctp_bind_addr_copy+0xe0/0x530 [ 413.566023][T11540] sctp_bind_addr_copy+0xe0/0x530 [ 413.566067][T11540] sctp_connect_new_asoc+0x1d7/0x790 [ 413.566122][T11540] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 413.566181][T11540] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 413.566236][T11540] sctp_sendmsg+0x15f9/0x1ee0 [ 413.566297][T11540] ? __pfx_sctp_sendmsg+0x10/0x10 [ 413.566363][T11540] ? __might_fault+0xe3/0x190 [ 413.566395][T11540] ? __pfx_aa_sk_perm+0x10/0x10 [ 413.566444][T11540] ? __pfx_sctp_sendmsg+0x10/0x10 [ 413.566496][T11540] inet_sendmsg+0x119/0x140 [ 413.566549][T11540] __sys_sendto+0x431/0x510 [ 413.566592][T11540] ? __pfx___sys_sendto+0x10/0x10 [ 413.566660][T11540] ? ksys_write+0x1b9/0x240 [ 413.566705][T11540] ? __pfx_ksys_write+0x10/0x10 [ 413.566749][T11540] ? rcu_is_watching+0x12/0xc0 [ 413.566788][T11540] __x64_sys_sendto+0xe0/0x1c0 [ 413.566829][T11540] ? do_syscall_64+0x91/0x260 [ 413.566873][T11540] ? lockdep_hardirqs_on+0x7c/0x110 [ 413.566915][T11540] do_syscall_64+0xcd/0x260 [ 413.566968][T11540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.567003][T11540] RIP: 0033:0x7f8872b8d169 [ 413.567030][T11540] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.567065][T11540] RSP: 002b:00007f8873a3b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 413.567098][T11540] RAX: ffffffffffffffda RBX: 00007f8872da5fa0 RCX: 00007f8872b8d169 [ 413.567121][T11540] RDX: 0000000000000401 RSI: 0000000000000000 RDI: 0000000000000003 [ 413.567142][T11540] RBP: 00007f8873a3b090 R08: 0000200000000000 R09: 000000000000001f [ 413.567163][T11540] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000002 [ 413.567184][T11540] R13: 0000000000000000 R14: 00007f8872da5fa0 R15: 00007fff4e1e7708 [ 413.567221][T11540] [ 414.557744][T11564] usbip-vudc usbip-vudc.0: gadget not bound [ 414.804168][T11569] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 415.608450][T11581] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1256'. [ 415.920696][T11584] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 415.998954][T11588] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 416.356771][T11584] can: request_module (can-proto-3) failed. [ 416.580542][T11588] can: request_module (can-proto-3) failed. [ 416.997230][T11603] nbd: must specify a size in bytes for the device [ 417.180736][T11606] aoe: skb alloc failure [ 417.210581][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 417.219503][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 417.486276][T11613] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 417.929470][T11624] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 418.863759][T11629] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 419.368011][T11631] can: request_module (can-proto-3) failed. [ 419.856605][T11640] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 420.118500][T11643] aoe: skb alloc failure [ 420.124195][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 420.135656][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 420.437312][T11640] can: request_module (can-proto-3) failed. [ 421.169271][T11654] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 422.078462][T11670] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 423.249923][T11682] usbip-vudc usbip-vudc.0: gadget not bound [ 423.749136][T11688] aoe: skb alloc failure [ 423.761544][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 423.768494][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 424.500495][T11704] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 426.623221][T11728] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 427.047780][T11728] can: request_module (can-proto-3) failed. [ 427.221997][T11734] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1297'. [ 427.275406][T11737] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1297'. [ 427.379539][T11734] FAULT_INJECTION: forcing a failure. [ 427.379539][T11734] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 427.477990][T11734] CPU: 1 UID: 0 PID: 11734 Comm: syz.6.1297 Tainted: G U 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 427.478057][T11734] Tainted: [U]=USER [ 427.478070][T11734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 427.478091][T11734] Call Trace: [ 427.478101][T11734] [ 427.478116][T11734] dump_stack_lvl+0x16c/0x1f0 [ 427.478167][T11734] should_fail_ex+0x512/0x640 [ 427.478209][T11734] should_fail_alloc_page+0xe7/0x130 [ 427.478270][T11734] prepare_alloc_pages.constprop.0+0x172/0x570 [ 427.478322][T11734] __alloc_frozen_pages_noprof+0x18f/0x24d0 [ 427.478382][T11734] ? __lock_acquire+0x5ca/0x1ba0 [ 427.478439][T11734] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 427.478500][T11734] ? __lock_acquire+0x5ca/0x1ba0 [ 427.478585][T11734] ? lock_acquire+0x179/0x350 [ 427.478636][T11734] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 427.478695][T11734] ? policy_nodemask+0xea/0x4e0 [ 427.478755][T11734] alloc_pages_mpol+0x1fb/0x540 [ 427.478814][T11734] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 427.478873][T11734] ? __lock_acquire+0x5ca/0x1ba0 [ 427.478925][T11734] folio_alloc_mpol_noprof+0x36/0x2f0 [ 427.478966][T11734] vma_alloc_folio_noprof+0xed/0x1e0 [ 427.479004][T11734] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 427.479061][T11734] do_pte_missing+0x2049/0x3ea0 [ 427.479135][T11734] __handle_mm_fault+0x1043/0x2a50 [ 427.479195][T11734] ? __pfx___handle_mm_fault+0x10/0x10 [ 427.479241][T11734] ? __pte_offset_map_lock+0x155/0x2f0 [ 427.479283][T11734] ? find_held_lock+0x2b/0x80 [ 427.479317][T11734] ? find_held_lock+0x2b/0x80 [ 427.479372][T11734] handle_mm_fault+0x3fa/0xaa0 [ 427.479425][T11734] __get_user_pages+0x771/0x36f0 [ 427.479479][T11734] ? __pfx_mt_find+0x10/0x10 [ 427.479531][T11734] ? __pfx___get_user_pages+0x10/0x10 [ 427.479591][T11734] populate_vma_page_range+0x278/0x3a0 [ 427.479646][T11734] ? __pfx_populate_vma_page_range+0x10/0x10 [ 427.479694][T11734] ? __pfx_find_vma_intersection+0x10/0x10 [ 427.479740][T11734] ? do_mmap+0x69c/0x11b0 [ 427.479786][T11734] __mm_populate+0x1d8/0x380 [ 427.479834][T11734] ? __pfx___mm_populate+0x10/0x10 [ 427.479886][T11734] ? up_write+0x1b2/0x520 [ 427.479942][T11734] vm_mmap_pgoff+0x362/0x450 [ 427.479991][T11734] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 427.480052][T11734] ? __x64_sys_futex+0x1e0/0x4c0 [ 427.480092][T11734] ? __x64_sys_futex+0x1e9/0x4c0 [ 427.480138][T11734] ksys_mmap_pgoff+0x7d/0x5c0 [ 427.480178][T11734] ? rcu_is_watching+0x12/0xc0 [ 427.480216][T11734] __x64_sys_mmap+0x125/0x190 [ 427.480255][T11734] do_syscall_64+0xcd/0x260 [ 427.480304][T11734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 427.480340][T11734] RIP: 0033:0x7f8872b8d169 [ 427.480367][T11734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 427.480402][T11734] RSP: 002b:00007f8873a3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 427.480437][T11734] RAX: ffffffffffffffda RBX: 00007f8872da5fa0 RCX: 00007f8872b8d169 [ 427.480462][T11734] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 427.480485][T11734] RBP: 00007f8872c0e2a0 R08: 0000000000000005 R09: 0000000000008000 [ 427.480508][T11734] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 427.480530][T11734] R13: 0000000000000000 R14: 00007f8872da5fa0 R15: 00007fff4e1e7708 [ 427.480568][T11734] [ 428.441080][T11748] usbip-vudc usbip-vudc.0: gadget not bound [ 428.566517][T11753] HfR: entered promiscuous mode [ 429.137871][ T30] audit: type=1800 audit(4294967678.152:15): pid=11764 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.1301" name="SYSV00000008" dev="hugetlbfs" ino=0 res=0 errno=0 [ 429.966559][T11778] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1308'. [ 430.683018][T11804] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 431.041314][T11804] can: request_module (can-proto-3) failed. [ 431.261608][T11812] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 431.455279][T11817] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 431.644445][T11817] can: request_module (can-proto-3) failed. [ 433.067529][T11848] Invalid ELF header magic: != ELF [ 433.142138][ T5147] Bluetooth: hci1: unexpected event 0x3e length: 508 > 260 [ 433.142186][ T5147] Bluetooth: hci1: unexpected subevent 0x02 length: 507 > 260 [ 433.159634][ T5147] Bluetooth: hci1: Dropping invalid advertising data [ 433.166386][ T5147] Bluetooth: hci1: unknown advertising packet type: 0xe9 [ 433.166419][ T5147] Bluetooth: hci1: unknown advertising packet type: 0x07 [ 433.316938][ T5147] Bluetooth: hci0: unexpected event 0x3e length: 726 > 260 [ 433.333468][ T5147] Bluetooth: hci0: unexpected subevent 0x0d length: 725 > 260 [ 433.352340][ T5147] Bluetooth: hci0: adv larger than maximum supported [ 433.352382][ T5147] Bluetooth: hci0: adv larger than maximum supported [ 433.487325][T11862] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 433.703358][T11862] can: request_module (can-proto-3) failed. [ 434.552954][T11884] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 435.145698][T11897] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 435.300586][T11900] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 435.398350][T11901] can: request_module (can-proto-3) failed. [ 437.270768][T11938] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 437.348772][T11936] HfR: entered promiscuous mode [ 437.499471][ T5147] Bluetooth: hci1: unexpected event 0x3e length: 726 > 260 [ 437.499519][ T5147] Bluetooth: hci1: unexpected subevent 0x0d length: 725 > 260 [ 437.517554][ T5147] Bluetooth: hci1: adv larger than maximum supported [ 437.517592][ T5147] Bluetooth: hci1: adv larger than maximum supported [ 437.561792][T11938] can: request_module (can-proto-3) failed. [ 438.505132][T11952] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1360'. [ 439.560740][T11978] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 439.953236][T11988] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 440.102519][T11983] FAULT_INJECTION: forcing a failure. [ 440.102519][T11983] name fail_futex, interval 1, probability 0, space 0, times 0 [ 440.125145][T11988] can: request_module (can-proto-3) failed. [ 440.170264][T11983] CPU: 1 UID: 0 PID: 11983 Comm: syz.6.1367 Tainted: G U 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 440.170316][T11983] Tainted: [U]=USER [ 440.170326][T11983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 440.170344][T11983] Call Trace: [ 440.170353][T11983] [ 440.170365][T11983] dump_stack_lvl+0x16c/0x1f0 [ 440.170410][T11983] should_fail_ex+0x512/0x640 [ 440.170447][T11983] get_futex_key+0xabc/0x1000 [ 440.170484][T11983] ? __pfx_get_futex_key+0x10/0x10 [ 440.170525][T11983] futex_wake+0xe7/0x4e0 [ 440.170562][T11983] ? rcu_is_watching+0x12/0xc0 [ 440.170593][T11983] ? __pfx_futex_wake+0x10/0x10 [ 440.170663][T11983] do_futex+0x1e3/0x350 [ 440.170697][T11983] ? __pfx_do_futex+0x10/0x10 [ 440.170731][T11983] ? __might_fault+0xe3/0x190 [ 440.170765][T11983] mm_release+0x24e/0x300 [ 440.170799][T11983] do_exit+0x887/0x2d60 [ 440.170868][T11983] ? plist_check_head+0xa3/0x150 [ 440.170901][T11983] ? __pfx_do_exit+0x10/0x10 [ 440.170941][T11983] ? do_raw_spin_lock+0x12c/0x2b0 [ 440.170992][T11983] ? find_held_lock+0x2b/0x80 [ 440.171026][T11983] do_group_exit+0xd3/0x2a0 [ 440.171069][T11983] get_signal+0x24cf/0x26a0 [ 440.171105][T11983] ? kmem_cache_free+0x2d4/0x4d0 [ 440.171146][T11983] ? find_held_lock+0x2b/0x80 [ 440.171176][T11983] ? do_sys_openat2+0x1b0/0x1d0 [ 440.171207][T11983] ? __pfx_get_signal+0x10/0x10 [ 440.171242][T11983] ? do_futex+0x122/0x350 [ 440.171277][T11983] ? __pfx_do_futex+0x10/0x10 [ 440.171314][T11983] arch_do_signal_or_restart+0x8f/0x7d0 [ 440.171357][T11983] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 440.171408][T11983] ? rcu_is_watching+0x12/0xc0 [ 440.171442][T11983] syscall_exit_to_user_mode+0x150/0x2a0 [ 440.171482][T11983] do_syscall_64+0xda/0x260 [ 440.171523][T11983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 440.171553][T11983] RIP: 0033:0x7f8872b8d169 [ 440.171577][T11983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 440.171607][T11983] RSP: 002b:00007f8873a3b0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 440.171634][T11983] RAX: 0000000000000001 RBX: 00007f8872da5fa8 RCX: 00007f8872b8d169 [ 440.171653][T11983] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f8872da5fac [ 440.171672][T11983] RBP: 00007f8872da5fa0 R08: 00007f8873a3c000 R09: 0000000000000000 [ 440.171692][T11983] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007f8872da5fac [ 440.171712][T11983] R13: 0000000000000000 R14: 00007fff4e1e7620 R15: 00007fff4e1e7708 [ 440.171744][T11983] [ 440.669552][T12000] aoe: skb alloc failure [ 440.682277][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.688846][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.974362][T12008] openvswitch: HfR: Dropping previously announced user features [ 441.553126][T12020] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 442.127780][ T5847] Bluetooth: hci4: command 0x0406 tx timeout [ 442.283520][ T30] audit: type=1800 audit(4294967691.292:16): pid=12025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.1375" name="SYSV00000400" dev="tmpfs" ino=0 res=0 errno=0 [ 443.103896][T12044] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1384'. [ 443.165554][T12043] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 443.984508][T12041] can: request_module (can-proto-3) failed. [ 444.346375][T12062] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 445.171047][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.177493][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 445.372871][ T5147] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 445.696666][T12082] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 446.129407][T12082] can: request_module (can-proto-3) failed. [ 446.800676][T12105] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 446.922673][T12105] can: request_module (can-proto-3) failed. [ 447.158023][T12120] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 447.396508][T12120] can: request_module (can-proto-3) failed. [ 448.399264][T12146] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 448.545458][T12149] netlink: 21 bytes leftover after parsing attributes in process `syz.4.1419'. [ 448.606484][T12146] can: request_module (can-proto-3) failed. [ 448.917406][T12157] netlink: 338 bytes leftover after parsing attributes in process `syz.6.1420'. [ 448.975699][T12157] netlink: 338 bytes leftover after parsing attributes in process `syz.6.1420'. [ 449.011497][T12157] netlink: 134 bytes leftover after parsing attributes in process `syz.6.1420'. [ 449.597010][ T942] [ 449.599435][ T942] ====================================================== [ 449.606474][ T942] WARNING: possible circular locking dependency detected [ 449.613530][ T942] 6.14.0-syzkaller-01103-g2df0c02dab82 #0 Tainted: G U [ 449.621808][ T942] ------------------------------------------------------ [ 449.628858][ T942] kworker/1:2/942 is trying to acquire lock: [ 449.634872][ T942] ffffffff8fefa328 (rtnl_mutex){+.+.}-{4:4}, at: smc_vlan_by_tcpsk+0x251/0x620 [ 449.643914][ T942] [ 449.643914][ T942] but task is already holding lock: [ 449.651328][ T942] ffff888078088dd8 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x1f2/0xae0 [ 449.660764][ T942] [ 449.660764][ T942] which lock already depends on the new lock. [ 449.660764][ T942] [ 449.671203][ T942] [ 449.671203][ T942] the existing dependency chain (in reverse order) is: [ 449.680254][ T942] [ 449.680254][ T942] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 449.687968][ T942] lock_sock_nested+0x41/0xf0 [ 449.693230][ T942] sockopt_lock_sock+0x54/0x70 [ 449.698588][ T942] do_ip_setsockopt+0xfe/0x3250 [ 449.704017][ T942] ip_setsockopt+0x59/0xf0 [ 449.709014][ T942] tcp_setsockopt+0xa4/0x100 [ 449.714175][ T942] do_sock_setsockopt+0x221/0x470 [ 449.719803][ T942] __sys_setsockopt+0x1a0/0x230 [ 449.725230][ T942] __x64_sys_setsockopt+0xbd/0x160 [ 449.730922][ T942] do_syscall_64+0xcd/0x260 [ 449.736035][ T942] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 449.742499][ T942] [ 449.742499][ T942] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 449.749773][ T942] __lock_acquire+0x1173/0x1ba0 [ 449.755208][ T942] lock_acquire+0x179/0x350 [ 449.760292][ T942] __mutex_lock+0x19a/0xb00 [ 449.765374][ T942] smc_vlan_by_tcpsk+0x251/0x620 [ 449.770893][ T942] __smc_connect+0x44b/0x4880 [ 449.776158][ T942] smc_connect_work+0x54c/0xae0 [ 449.781594][ T942] process_one_work+0x9cc/0x1b70 [ 449.787099][ T942] worker_thread+0x6c1/0xef0 [ 449.792236][ T942] kthread+0x3a4/0x760 [ 449.796866][ T942] ret_from_fork+0x45/0x80 [ 449.801829][ T942] ret_from_fork_asm+0x1a/0x30 [ 449.807169][ T942] [ 449.807169][ T942] other info that might help us debug this: [ 449.807169][ T942] [ 449.817422][ T942] Possible unsafe locking scenario: [ 449.817422][ T942] [ 449.824887][ T942] CPU0 CPU1 [ 449.830266][ T942] ---- ---- [ 449.835638][ T942] lock(sk_lock-AF_INET); [ 449.840075][ T942] lock(rtnl_mutex); [ 449.846599][ T942] lock(sk_lock-AF_INET); [ 449.853565][ T942] lock(rtnl_mutex); [ 449.857569][ T942] [ 449.857569][ T942] *** DEADLOCK *** [ 449.857569][ T942] [ 449.865725][ T942] 3 locks held by kworker/1:2/942: [ 449.870854][ T942] #0: ffff88814d29a948 ((wq_completion)smc_hs_wq){+.+.}-{0:0}, at: process_one_work+0x12a2/0x1b70 [ 449.881617][ T942] #1: ffffc90003ea7d18 ((work_completion)(&smc->connect_work)){+.+.}-{0:0}, at: process_one_work+0x929/0x1b70 [ 449.893410][ T942] #2: ffff888078088dd8 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_connect_work+0x1f2/0xae0 [ 449.903243][ T942] [ 449.903243][ T942] stack backtrace: [ 449.909158][ T942] CPU: 1 UID: 0 PID: 942 Comm: kworker/1:2 Tainted: G U 6.14.0-syzkaller-01103-g2df0c02dab82 #0 PREEMPT(full) [ 449.909207][ T942] Tainted: [U]=USER [ 449.909217][ T942] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 449.909238][ T942] Workqueue: smc_hs_wq smc_connect_work [ 449.909286][ T942] Call Trace: [ 449.909298][ T942] [ 449.909309][ T942] dump_stack_lvl+0x116/0x1f0 [ 449.909346][ T942] print_circular_bug+0x275/0x350 [ 449.909385][ T942] check_noncircular+0x14c/0x170 [ 449.909425][ T942] __lock_acquire+0x1173/0x1ba0 [ 449.909467][ T942] ? lockdep_hardirqs_on+0x7c/0x110 [ 449.909503][ T942] lock_acquire+0x179/0x350 [ 449.909540][ T942] ? smc_vlan_by_tcpsk+0x251/0x620 [ 449.909567][ T942] ? __pfx___might_resched+0x10/0x10 [ 449.909599][ T942] ? kasan_save_stack+0x42/0x60 [ 449.909637][ T942] ? kasan_save_stack+0x33/0x60 [ 449.909674][ T942] ? kasan_save_track+0x14/0x30 [ 449.909725][ T942] __mutex_lock+0x19a/0xb00 [ 449.909760][ T942] ? smc_vlan_by_tcpsk+0x251/0x620 [ 449.909785][ T942] ? __lock_acquire+0x5ca/0x1ba0 [ 449.909820][ T942] ? smc_vlan_by_tcpsk+0x251/0x620 [ 449.909845][ T942] ? __pfx___mutex_lock+0x10/0x10 [ 449.909883][ T942] ? find_held_lock+0x2b/0x80 [ 449.909912][ T942] ? smc_vlan_by_tcpsk+0x251/0x620 [ 449.909936][ T942] ? rtnl_lock+0x9/0x20 [ 449.909958][ T942] smc_vlan_by_tcpsk+0x251/0x620 [ 449.909983][ T942] ? __pfx_smc_vlan_by_tcpsk+0x10/0x10 [ 449.910029][ T942] __smc_connect+0x44b/0x4880 [ 449.910070][ T942] ? __lock_sock+0x1f4/0x260 [ 449.910106][ T942] ? __pfx___lock_sock+0x10/0x10 [ 449.910142][ T942] ? __pfx___smc_connect+0x10/0x10 [ 449.910187][ T942] ? __pfx_autoremove_wake_function+0x10/0x10 [ 449.910226][ T942] ? __local_bh_enable_ip+0xa4/0x120 [ 449.910260][ T942] smc_connect_work+0x54c/0xae0 [ 449.910301][ T942] ? __pfx_smc_connect_work+0x10/0x10 [ 449.910342][ T942] ? rcu_is_watching+0x12/0xc0 [ 449.910370][ T942] process_one_work+0x9cc/0x1b70 [ 449.910402][ T942] ? __pfx_process_one_work+0x10/0x10 [ 449.910433][ T942] ? assign_work+0x1a0/0x250 [ 449.910476][ T942] worker_thread+0x6c1/0xef0 [ 449.910506][ T942] ? __kthread_parkme+0x148/0x220 [ 449.910542][ T942] ? __pfx_worker_thread+0x10/0x10 [ 449.910568][ T942] kthread+0x3a4/0x760 [ 449.910610][ T942] ? __pfx_kthread+0x10/0x10 [ 449.910650][ T942] ? __pfx_kthread+0x10/0x10 [ 449.910691][ T942] ? __pfx_kthread+0x10/0x10 [ 449.910731][ T942] ? __pfx_kthread+0x10/0x10 [ 449.910772][ T942] ? rcu_is_watching+0x12/0xc0 [ 449.910798][ T942] ? __pfx_kthread+0x10/0x10 [ 449.910839][ T942] ret_from_fork+0x45/0x80 [ 449.910864][ T942] ? __pfx_kthread+0x10/0x10 [ 449.910905][ T942] ret_from_fork_asm+0x1a/0x30 [ 449.910949][ T942]