last executing test programs: 7.190311734s ago: executing program 2 (id=3804): mmap$auto(0x0, 0x2020009, 0x3, 0x13, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x1) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x80302, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x18000) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x19) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x8, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) socket$nl_generic(0x10, 0x3, 0x10) r1 = prctl$auto_PR_GET_TIMING(0xd, 0x8, 0x0, 0x3, 0x3ff) mmap$auto(0x4, 0x2, 0x45, 0x1d, r1, 0x100000001) prctl$auto(0x43, 0x17, 0x0, 0x0, 0x0) socket(0x25, 0x3, 0x1) mmap$auto(0x0, 0x20008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) mmap$auto(0x0, 0x200004, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) syz_clone(0x800000, 0x0, 0x0, 0x0, 0x0, 0x0) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) r2 = openat$auto_proc_tid_children_operations_internal(0xffffffffffffff9c, &(0x7f0000000000), 0x82000, 0x0) pread64$auto(r2, 0x0, 0x400000000007, 0x10000) 3.808835122s ago: executing program 2 (id=3817): dup2$auto(0x0, 0x4) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b) r1 = socket(0xa, 0x806, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xec, r3, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_FRAME_MATCH={0xa6, 0x5b, "5adf59ba341f9d39525db5debb411e64be368d514f37945d8f96f01e7f785ce03bedad9dda887a1e74217179639eef730477623430edc52828b81f9373e3af5c7fc014279216428cee86e3ae5ffca848a66a05f3fdf0e071551be767007ba8c33fd21ab722896b6d52501e5eba8831ccadb955ee03ec940e9452db30808523bebd1ce5ff2492b016c5d03ba0398bdec628abea53c15845c1c1ab639ffb93c396dfb0"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x9}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xd}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SSID={0xb, 0x34, "97d773d0921b8c"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xd, 0xbd, "eb217c9a3d4a58736d"}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x458, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_PROBE_RESP={0x429, 0x91, "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"}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x9}]}, 0x458}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000002c0)=0x1) r4 = io_uring_setup$auto(0x6, 0x0) r5 = openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$auto_dai_list_fops_(r5, &(0x7f0000000140)=""/204, 0xcc) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x9) ioctl$auto_VHOST_SET_LOG_FD2(r4, 0x4004af07, &(0x7f0000000000)=r0) r6 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r6, &(0x7f0000000440)="110000000100"/17, 0x11) shutdown$auto(r0, 0x80000002) clock_nanosleep$auto(0x7, 0x4, &(0x7f0000000040)={0xb2, 0x9}, &(0x7f00000000c0)={0x1}) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r7 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, 0x0, 0x26a340, 0x0) ioctl$auto_FIONREAD(r7, 0x541b, r7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8008000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty15\x00', 0x103980, 0x0) open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) 3.564646721s ago: executing program 1 (id=3820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f0000001640), r0) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r2) mmap$auto(0x0, 0x1000009, 0xa861, 0x8000000008012, 0x1000000004, 0x83000000) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000001f40)={0x0, 0x0, &(0x7f0000001f00)={&(0x7f0000000180)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000000}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 3.428778225s ago: executing program 0 (id=3821): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYRES8=r0, @ANYRES8=r1, @ANYRES8=r0, @ANYRES32], 0x18}}, 0x80) io_uring_setup$auto(0x7, &(0x7f00000001c0)={0x10005, 0xdf, 0x0, 0xfffffffd, 0x53, 0x2, r0, [0x9573, 0x7, 0x1], {0x9, 0x2, 0x18201, 0x7, 0x3d, 0x8000001, 0x7, 0x0, 0x1}, {0x2967, 0x2, 0x7fff, 0x6, 0x400, 0x100057, 0x5, 0x27, 0x1000040}}) openat$auto_evdev_fops_evdev(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/input/event1\x00', 0x20082, 0x0) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0xffffffffffffff6a, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4000009}, 0x24004880) r4 = socket(0x10, 0x2, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYRES16=0x0, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}}, 0x20008810) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=':'], 0x1ac}}, 0x40000) sendmmsg$auto(r4, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x2, 0x0, 0x0, 0x1}, 0x5}, 0x3, 0x0) r5 = socket(0xa, 0x5, 0x84) statmount$auto(&(0x7f0000000000)={0x81, @inferred=r5, 0x5, 0xffffffff, 0xfffffffffffffff2}, 0x0, 0x800, 0x0) sendto$auto(r5, 0x0, 0x401, 0x101, &(0x7f0000000000)=@generic={0xa, "e2e18340cba8fe8000"}, 0x1c) ioctl$auto_KVM_CREATE_VM(r2, 0x4018aee3, 0x0) pwrite64$auto(0xc8, &(0x7f0000000040)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x1cJ\x99\x00\x00\x00\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9i8W\xe5Iq\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8dg\x81K*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/231, 0xfdf2, 0x3a) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) r6 = socketpair$auto(0x1, 0x801, 0x8000000000000000, 0x0) io_uring_setup$auto(0x1, 0x0) connect$auto(0xffffffffffffffff, 0x0, 0x7fc) mmap$auto(0x0, 0xb, 0x6, 0xeb1, 0x3ff, 0x8000) close_range$auto(0x2, r6, 0x900) socket(0x2, 0x80002, 0x73) socket(0xa, 0x2, 0x22) 3.2758084s ago: executing program 1 (id=3822): socket(0x2b, 0x1, 0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) adjtimex$auto(&(0x7f00000004c0)={0x7fffffff, 0x0, 0x7d, 0xfffffffffffffffd, 0xd4, 0x5, 0x4, 0x0, 0x1, 0x368e, 0x5, {0xc, 0x10000}, 0x5, 0xa, 0x9, 0x8d, 0x0, 0x80000004, 0x10081, 0xffffffffffff628e, 0x4, 0x0, 0x800}) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x24040804}, 0x4000) sendmsg$auto_TIPC_NL_LINK_GET(0xffffffffffffffff, 0x0, 0x44) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) io_uring_setup$auto(0x0, &(0x7f0000000000)={0x5, 0x66, 0x2, 0x14, 0x4, 0x4, 0xffffffffffffffff, [0x0, 0x34, 0x7fffffff], {0x101, 0x6, 0x4355, 0x80000000, 0xa5, 0x7, 0xb, 0xba90, 0x5}, {0xfffffc00, 0x6, 0x0, 0x401, 0x8, 0x8, 0x0, 0x7, 0x6}}) lstat$auto(&(0x7f0000000000)='./file1\x00', 0x0) r0 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(0xffffffffffffffff, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[], 0x1ac}}, 0x20044000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x103, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) socket(0x1e, 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) futex$auto(&(0x7f0000000000)=0x1, 0x6, 0x9, &(0x7f0000000040)={0x2}, 0x0, 0x6) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xffffffffffffffff, 0x8000) rt_sigtimedwait$auto(0x0, 0x0, 0x0, 0x8) close_range$auto(0x0, 0xfffffffffffff000, 0x2) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) prctl$auto(0x41555856, 0xc, 0x2008, 0x0, 0x0) socket(0xa, 0x3, 0x3a) getdents64$auto(0x0, 0x0, 0x18) ioctl$auto(0x1, 0x8941, 0x8) ioctl$auto(0x3, 0x800005411, 0x38) 3.139036027s ago: executing program 3 (id=3823): mmap$auto(0x0, 0x402000c, 0x6, 0xeb1, 0x401, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) r1 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) ioctl$auto(r0, 0x5415, r1) 2.946613221s ago: executing program 3 (id=3824): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sysfs$auto(0x2, 0x0, 0x0) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x8, 0xfff, 0xeb2, 0x401, 0x8000) r0 = open(&(0x7f0000000000)='./file0\x00', 0xaf44529eb48ad963, 0x17c) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) open(0x0, 0x8643, 0x15e) ioctl$sock_SIOCGIFINDEX(r1, 0x401c5820, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x801c581f, 0x0) mmap$auto(0x3, 0xa, 0x40000000000000df, 0x9b72, 0x2, 0x8000) clock_nanosleep$auto(0x8, 0x0, 0x0, 0x0) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000001100)='/sys/kernel/security/tomoyo/manager\x00', 0x400, 0x0) read$auto_tomoyo_operations_securityfs_if(r2, 0x0, 0x0) 2.725314025s ago: executing program 0 (id=3825): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) r0 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/tainted\x00', 0x28002, 0x0) r1 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwflags\x00', 0x20000, 0x0) r2 = getsockopt$auto_SO_PASSSEC(r0, 0x2, 0x22, &(0x7f0000000080)='/proc/sys/kernel/tainted\x00', &(0x7f0000000100)=0xa) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, 0x0, 0xc800) r4 = socket(0xa, 0x2, 0x0) r5 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r4) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x48020020}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x970, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_VENDOR_DATA={0xa2, 0xc5, "752f3cfd76b364ca0b5abc60798f6dad2f3c70e09999630d8f674216762a626360ed26a186b0b8ca8ab3ed7bb241a09420f788581f3e269fe2df27e4b56bfadc8d5777df06166e8c7dd9c8e0eab55b3d3ddffc53aa2e412b771c9c39b7de02e5e476c6ef30670d2b15bbb734e4b55f70365c7baebbd98b6cd614318b0f03e832a69265badebd1eb40e5f42897032327a72d6e92b9453957529bb7ebbe2fe"}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x9}, @NL80211_ATTR_FRAME={0x367, 0x33, "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"}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_STA_FLAGS2={0x39, 0x43, "4d577164ae86803d4f05c6c336ea77749a2d7315030a749f9f0f015e11331299a06b89ed37a77c0e35ca37c484525ffea8039bc61c"}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, "0f01e64a04e3aa9f90291853830d"}, @NL80211_ATTR_IE_RIC={0x4e9, 0xb2, "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"}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x970}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) r6 = semctl$auto_IPC_STAT(0x4, 0xfffffffd, 0x2, 0x8000) read$auto_proc_gid_map_operations_base(r2, &(0x7f0000000c00)=""/246, 0xf6) sendmsg$auto_NL80211_CMD_SET_REG(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x56c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0xdb}, @NL80211_ATTR_WDEV={0xc, 0x99, 0xced3}, @NL80211_ATTR_EHT_CAPABILITY={0x39, 0x136, "d0875faffe4584857c7c1f0b159f37560a919b460bba52462399772b6ba0bf049d407cf40623087301970dbc756edf027be0bae2dd"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x7fffffff}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_BEACON_HEAD={0x4e7, 0xe, "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"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "ac2f"}, @NL80211_ATTR_PID={0x8, 0x52, r6}]}, 0x56c}, 0x1, 0x0, 0x0, 0x404c040}, 0x40000) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r1, 0x0, 0x0) readv$auto(r0, &(0x7f00000000c0)={0x0, 0xb}, 0x4) write$auto(0x3, 0x0, 0x1) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x47, 0x8000) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/kernel/tainted\x00', 0x28002, 0x0) (async) openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/ieee80211/phy1/hwflags\x00', 0x20000, 0x0) (async) getsockopt$auto_SO_PASSSEC(r0, 0x2, 0x22, &(0x7f0000000080)='/proc/sys/kernel/tainted\x00', &(0x7f0000000100)=0xa) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r3, 0x0, 0xc800) (async) socket(0xa, 0x2, 0x0) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r4) (async) sendmsg$auto_NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x48020020}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0x970, r5, 0x4, 0x70bd2a, 0x25dfdbfc, {}, [@NL80211_ATTR_VENDOR_DATA={0xa2, 0xc5, "752f3cfd76b364ca0b5abc60798f6dad2f3c70e09999630d8f674216762a626360ed26a186b0b8ca8ab3ed7bb241a09420f788581f3e269fe2df27e4b56bfadc8d5777df06166e8c7dd9c8e0eab55b3d3ddffc53aa2e412b771c9c39b7de02e5e476c6ef30670d2b15bbb734e4b55f70365c7baebbd98b6cd614318b0f03e832a69265badebd1eb40e5f42897032327a72d6e92b9453957529bb7ebbe2fe"}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x9}, @NL80211_ATTR_FRAME={0x367, 0x33, "2c6fa653c1d717d9b51468164b28878bdc046380bc3c5d81014a143234f27bb7ff0b9eb19fb944ed23add02ef0810e006d113221bc602c727251257e6345850e6caa7d8e4312f3d943b7709f3dcdebd477b7102895c6595f1483c81811c643e9e79ed2fddea60ab2efb7c3f9d9bed76592c1a94154a97bfb67c883aa81173c43d743517332970026d64c5f53d65afabce4c8ab824758420cc483e8e9d83c347174b50a1ed1ee44f75c94c0e76c878c2214beab409bd232dd93b05c259fb837652e73e493d9c72297e544063e02a72dea0f56ae90f90a9f7d75b162b7fd7c2828182d40b0d1d4e29964dc1059f36c22b605dbfb3c50aa65f189c0e2cf93bbbec989c7595296645ddbabcfec5c8a52232195bb25482ed4b26f3922935c086475b88d9b11061a2f34d8561588eda0d77885e2a4f9365f92e3882856f1eb9698d75d684c17a9e177f02bbb7a9f7a20ed66c182e118fbf929775d01a5854d375b22170a7a17983ec7883cff8c05c810fffc66b5dc040aaff8bb2b7bfffbf9f395eedabfc3e939ec6d7a4e72f2a0d7ed1a15b38487935cf929fa6de1b98f2850a41bd90a53fabeed8d1f4df629e3a4ed16436937122a3a5ace65f85c27a01ba4cd001c8fc1eee8b17c6bcc41a140c367b52e62c792d4d1ba7b4dd34fafceba2c7d5a6f8ba377a518522adda3159341dee1329322f4bb9827b1dbf908f05aea21d456d7124318da39a4559332b538fe6ccd739dcb6eabcf188695c4e8d6e5a813be37d98005f182c3dd8f8cfba5f9a88e937478a0c042a36bd50df2f70b23e7302a47aab85d16d01f8a27371e9e7fac69527ad5440f0810849a29322cfc40601ee8a092312935d9d311032d716abbd175bfe6fe1b6dfad4d59c498a8713be3abb8cb7fc72538ea4c3f4e5dfd94c2eec7a02955becf1e4a59918dfec9f9771031d7329815d0215d76fec033e245258cdf63c7992911b7c908546ed33d0be41f56b31ff2b070a1009e0658155b01f2079da7b3293dd380242912c77d394c54bc1daa4f906a618050669bba1241faf03a514273a3e383626bffd5b5eee618bff6b7e1353a6492d128c866ca9388dc9d8c671adf66a96bd84b4ad6b82e8438fdad7b6a332a210af0185973b1d7a09ef15e85041a947302e96eb8d635a053e5d5df625b6bb8ca6e17013784e6f71ce0764175452e04d85b399677a857bb1f7016e1368271b039c9e61"}, @NL80211_ATTR_TIMED_OUT={0x4}, @NL80211_ATTR_STA_FLAGS2={0x39, 0x43, "4d577164ae86803d4f05c6c336ea77749a2d7315030a749f9f0f015e11331299a06b89ed37a77c0e35ca37c484525ffea8039bc61c"}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x12, 0x24, "0f01e64a04e3aa9f90291853830d"}, @NL80211_ATTR_IE_RIC={0x4e9, 0xb2, "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"}, @NL80211_ATTR_TDLS_EXTERNAL_SETUP={0x4}]}, 0x970}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) (async) semctl$auto_IPC_STAT(0x4, 0xfffffffd, 0x2, 0x8000) (async) read$auto_proc_gid_map_operations_base(r2, &(0x7f0000000c00)=""/246, 0xf6) (async) sendmsg$auto_NL80211_CMD_SET_REG(r2, &(0x7f0000000780)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000200)={0x56c, r5, 0x1, 0x70bd2d, 0x25dfdbfb, {}, [@NL80211_ATTR_P2P_OPPPS={0x5, 0xa3, 0xdb}, @NL80211_ATTR_WDEV={0xc, 0x99, 0xced3}, @NL80211_ATTR_EHT_CAPABILITY={0x39, 0x136, "d0875faffe4584857c7c1f0b159f37560a919b460bba52462399772b6ba0bf049d407cf40623087301970dbc756edf027be0bae2dd"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x7fffffff}, @NL80211_ATTR_MESH_PEER_AID={0x6}, @NL80211_ATTR_BEACON_HEAD={0x4e7, 0xe, "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"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x6, 0xf9, "ac2f"}, @NL80211_ATTR_PID={0x8, 0x52, r6}]}, 0x56c}, 0x1, 0x0, 0x0, 0x404c040}, 0x40000) (async) read$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r1, 0x0, 0x0) (async) readv$auto(r0, &(0x7f00000000c0)={0x0, 0xb}, 0x4) (async) write$auto(0x3, 0x0, 0x1) (async) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) (async) 2.551800323s ago: executing program 3 (id=3826): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x4, 0x300000000000) io_uring_setup$auto(0x6, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r0 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r0, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, 0x0, 0x101000, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) ioctl$auto_KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = getpid() sched_setparam$auto(r1, &(0x7f0000000000)={0xa}) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/cpu.pressure\x00', 0x383140, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000004, 0xd) mmap$auto(0x0, 0x20009, 0x4000000000db, 0xeb1, 0x400, 0x8000) r2 = socket(0xa, 0x3, 0x3a) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/block/loop9/queue/io_poll\x00', 0x240103, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) acct$auto(&(0x7f0000000000)='/sys/devices/pla\xe1form/i8042/serio1/resync_t)me\x00') setsockopt$auto(r2, 0x8, 0xfffffffc, &(0x7f0000000040)=',%\x00', 0xfffffffc) add_key$auto(&(0x7f0000000740)='#)-\\&[}\x00', &(0x7f0000000780)='.\\@&\x00', 0x0, 0x5, 0x9) acct$auto(0x0) getsockopt$auto(r2, 0x29, 0xcf, 0x0, 0x0) clone$auto(0x7, 0x7fffffffffffffff, 0xffffffffffffffff, 0x0, 0x1) epoll_create1$auto(0x4) r3 = openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x82000, 0x0) ioctl$auto_tracing_buffers_fops_trace(r3, 0x5220, 0x0) 2.339746136s ago: executing program 0 (id=3827): dup2$auto(0x0, 0x4) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b) r1 = socket(0xa, 0x806, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xec, r3, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_FRAME_MATCH={0xa6, 0x5b, "5adf59ba341f9d39525db5debb411e64be368d514f37945d8f96f01e7f785ce03bedad9dda887a1e74217179639eef730477623430edc52828b81f9373e3af5c7fc014279216428cee86e3ae5ffca848a66a05f3fdf0e071551be767007ba8c33fd21ab722896b6d52501e5eba8831ccadb955ee03ec940e9452db30808523bebd1ce5ff2492b016c5d03ba0398bdec628abea53c15845c1c1ab639ffb93c396dfb0"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x9}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xd}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SSID={0xb, 0x34, "97d773d0921b8c"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xd, 0xbd, "eb217c9a3d4a58736d"}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x458, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_PROBE_RESP={0x429, 0x91, "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"}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x9}]}, 0x458}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000002c0)=0x1) r4 = io_uring_setup$auto(0x6, 0x0) r5 = openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$auto_dai_list_fops_(r5, &(0x7f0000000140)=""/204, 0xcc) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x9) ioctl$auto_VHOST_SET_LOG_FD2(r4, 0x4004af07, &(0x7f0000000000)=r0) r6 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r6, &(0x7f0000000440)="110000000100"/17, 0x11) shutdown$auto(r0, 0x80000002) clock_nanosleep$auto(0x7, 0x4, &(0x7f0000000040)={0xb2, 0x9}, &(0x7f00000000c0)={0x1}) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r7 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, 0x0, 0x26a340, 0x0) ioctl$auto_FIONREAD(r7, 0x541b, r7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8008000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty15\x00', 0x103980, 0x0) socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) 2.296832204s ago: executing program 1 (id=3828): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyS3\x00', 0x22002, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$auto_NFC_CMD_ENABLE_SE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r1, 0x20, 0x70bd27, 0x25dfdbff, {}, [@NFC_ATTR_TARGET_INDEX={0x8}, @NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x2001}, 0x4000040) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000df, 0xeb2, 0xffffffffffffffff, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x0) socket(0xa, 0x1, 0x0) socketpair$auto(0x1e, 0x1, 0x0, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r2, 0x5423, 0x0) ioctl$auto(0x3, 0x5419, 0x38) 2.052364947s ago: executing program 2 (id=3829): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) write$auto(0x3, 0x0, 0x7fffffff) write$auto(0x1, 0x0, 0x80000000) openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) r0 = socket(0x2b, 0x1, 0x1) r1 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000001) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="2c0000001400c7d2a2e1917949643de42b"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D1\x00', 0x8c1, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) setrlimit$auto(0x9, 0x0) io_setup$auto(0x2, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x109402, 0x0) read$auto(0x3, 0x0, 0x7d) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/adsp1\x00', 0x0, 0x0) mmap$auto(0x2, 0x400009, 0x40000000080000df, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0xa, 0x0) 2.008953505s ago: executing program 1 (id=3830): openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, 0x0, 0x1c52c0, 0x0) r0 = bpf$auto(0x6, 0xffffffffffffffff, 0x0) mmap$auto(0x0, 0x400408, 0xdf, 0x9b72, 0x2, 0x8000) ioprio_set$auto(0x3, 0x0, 0x4b34) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) msgrcv$auto(0xffee, &(0x7f0000000000)={0x4, 0x7}, 0x3ff, 0x6, 0x9) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x5, 0x2) getgroups$auto(0x7, 0xffffffffffffffff) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0x7fffffffffffffff, 0x16) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x1) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000000080), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x11, 0x80003, 0x300) socket(0x11, 0x2, 0x300) pwrite64$auto(0xc8, 0x0, 0xe, 0x3) sendmsg$auto_IOAM6_CMD_DUMP_NAMESPACES(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x20, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x20000000) r2 = socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000800)='./file0\x00', 0x8241, 0x154) fcntl$auto(0x3, 0x400, 0x9ec0000000000000) fcntl$auto(0x3, 0x400, 0x2) r3 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000004540), 0xffffffffffffffff) sendmsg$auto_OVS_VPORT_CMD_GET(r2, &(0x7f00000046c0)={0x0, 0x0, &(0x7f0000004680)={&(0x7f00000045c0)=ANY=[@ANYBLOB="08030010", @ANYRES16=r3, @ANYBLOB="010028bd7000fddbdf25030000000400048008000800", @ANYRES32=0x0, @ANYBLOB], 0x20}, 0x1, 0x0, 0x0, 0x42}, 0x4004) ioctl$auto(0xffffffffffffffff, 0xc074510c, 0x3) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x80000c, 0x8001, 0x2) openat2$dir(0xffffffffffffff9c, &(0x7f00000016c0)='./file0\x00', &(0x7f0000001700)={0x4000, 0x0, 0x20}, 0x18) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x1fd, 0x7, 0x2, 0x7184, 0x1ffe1, 0x7, 0x7fffffffffffffff, 0x6, 0x9, 0x8, 0x4, 0x200000000001, 0x1, 0x1ff, 0x8, 0x6, 0x4000080, 0x8000, 0x100, 0x9, 0x7, 0x200, 0x0, 0x84, [0x3, 0x6, 0x0, 0x2, 0x7, 0x2000, 0x0, 0x5a17a924, 0x2b6, 0xfffffffffffffffe, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x4080, 0x7fffffff, 0xa, 0xfffffffffffbfff9, 0x2000000000000004, 0x10000000000001, 0x10000000000, 0xffffffffffffffff, 0x4, 0xfffffffffffffe00, 0x0, 0x2b35, 0x1005, 0x400000000005b8, 0xffff, 0x0, 0x100, 0x0, 0x1, 0x1, 0x88e, 0x40, 0x9, 0x8, 0xa3c, 0x0, 0x3, 0x8, 0x2, 0x8, 0x7, 0xc567]}, 0x1fe, 0x4000d) 1.46084178s ago: executing program 3 (id=3831): syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/dummy0/carrier\x00', 0x200200, 0x0) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) r1 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ieee80211/phy0/aql_txq_limit\x00', 0x121c01, 0x0) write$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(r1, &(0x7f0000000000)='\n', 0x1) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) r2 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3ff, 0x0) r3 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYRES8=r2, @ANYRES32], 0x18}}, 0x80) 1.352324488s ago: executing program 0 (id=3832): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) setsockopt$auto(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x8004) r0 = openat$auto_posix_clock_file_operations_posix_clock(0xffffffffffffff9c, &(0x7f0000005280), 0x40400, 0x0) syz_open_procfs$namespace(0x0, 0x0) ioctl$auto_posix_clock_file_operations_posix_clock(r0, 0xc0603d06, 0x0) r1 = open_by_handle_at$auto(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x1b}, 0x403) r2 = socket(0x11, 0x2, 0x9) mmap$auto(0x2, 0x20009, 0xdf, 0xeb1, 0x401, 0x2000000000008000) socket(0x11, 0x80003, 0x300) mmap$auto(0x0, 0x20009, 0x7fffffff, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) timer_create$auto(0x2, 0x0, 0x0) timer_create$auto(0x3, 0x0, 0x0) timer_delete$auto(0x1) read$auto(0x3, 0x0, 0x80) r3 = socket(0x10, 0x2, 0x0) statmount$auto(0x0, &(0x7f0000000040)={0x0, 0x0, 0x38, 0xfffeff01, 0x9, 0x9, 0x80000001, 0x7, 0x8, 0x5, 0x7, 0x9, 0x0, 0x8, 0x5, 0x80000000000000f, 0xfffffffffffffffe, 0x9, 0x10001, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x100000000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000]}, 0x4, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16, @ANYBLOB="1b0026bd7400fddbdf250300000004000800100003800c00098008"], 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) r4 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x2, 0x0) write$auto_ecryptfs_miscdev_fops_miscdev(r4, 0x0, 0x0) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r2, &(0x7f0000003040)={0x0, 0x0, &(0x7f0000003000)={&(0x7f0000000680)=ANY=[@ANYBLOB="ff7ac052", @ANYRES8=r2, @ANYBLOB="010600bd7000fbdbdf250a"], 0x1c}, 0x1, 0x0, 0x0, 0x20040004}, 0x8850) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="72010000", @ANYBLOB="18400922e78dacfedf442eaaee9bf7e66a221ca8370ecdfc0c293e55bf95c0b78dac0e54186737b56c42"], 0x1ac}}, 0x40000) r5 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000340), r3) ioctl$auto_XFS_IOC_ALLOCSP64(r1, 0x40305824, &(0x7f0000000380)={0x2, 0x4, 0xffffffffffffffff, 0x100000000, 0x1, 0x0}) sendmsg$auto_TIPC_NL_KEY_SET(r2, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000600)={&(0x7f00000006c0)=ANY=[@ANYBLOB="10025ec32936598862c2b0b9515415d0cc4b4ff799fdf8232d9d26bf240f0f6fb15d7b9cd496e8da1266c80a960bf5efc101ef6cf970f9cafee00e12e32f0a07bdc7fe9284b0ff12fd4d2d6bbcb6026bc7ece809b8442f614dd5eba009878f3d5006e569d5828f04c7bc3572aa126468c6884f4fb285776da4090d39b53274d236b42fae9f535c43c8ea56", @ANYRES16=r5, @ANYBLOB="000225bd70000200000017000000fb010480efa2c479739d88b14a6b0bc6de5026ae413d2a848773d57308ae98be8815fa66819a4067ea96904d761f227adeae838371b331f95537525900112da8eb107ba7b8f46c74317bf547acccacbdba95f93f01cb12ac59fd7bfccbfbc5d43859f5f6f8ba00a5a30ce323df1fc1b068785a2b2ba9b5abfa35273112870fb2bfbe3e4367949caab6e65574e2ef0d486d7ecde4b643dfa4caf3307d60f19308b28da117ac9c87ff8e72abce3f7566faa33793db200f168baf39560208009500", @ANYRES32=r6, @ANYBLOB="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"], 0x210}, 0x1, 0x0, 0x0, 0x40000}, 0x10) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x700) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) sendmmsg$auto(r2, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000080), 0x49}, 0x5, &(0x7f0000000180), 0x6, 0x1000}, 0x5}, 0x2, 0x100) 1.057606839s ago: executing program 1 (id=3833): open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(0x3, 0x400, 0x1) r0 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/cmdline\x00', 0x20000, 0x0) readv$auto(r0, &(0x7f0000000280)={&(0x7f0000000240), 0x17}, 0x187) open(&(0x7f0000000080)='./file0\x00', 0x40, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, r1, 0x8000) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r1) socketcall$auto_SYS_SEND(0x9, &(0x7f00000003c0)=0xffffffff) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/midi2\x00', 0x103341, 0x0) ioctl$auto_SNDRV_RAWMIDI_IOCTL_DRAIN(r4, 0x40045731, &(0x7f0000000000)=0xfffffffe) sendmsg$auto_NL80211_CMD_CRIT_PROTOCOL_START(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1098}, 0x1, 0x0, 0x0, 0x24008000}, 0x1) sendmsg$auto_NL80211_CMD_GET_WIPHY(r1, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000140)=ANY=[@ANYBLOB="18000000", @ANYRES16=r2, @ANYBLOB="810b25bd7080fbdbdf25010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x20000000}, 0xc004) recvmmsg$auto(r1, &(0x7f0000000180)={{0x0, 0x5, 0x0, 0x0, 0x0, 0x2, 0x6}, 0x803}, 0x10a, 0x6, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) rename$auto(&(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='./file1\x00') r5 = open(&(0x7f0000000100)='.\x00', 0x0, 0x408) execveat$auto(r5, &(0x7f0000000140)='./file1\x00', 0x0, 0x0, 0x0) syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000000), r3) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000000c0), r3) sendmsg$auto_ETHTOOL_MSG_PSE_GET(r3, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)={0xe8, r6, 0x4, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_PSE_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x80000000}]}, @ETHTOOL_A_PSE_HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xffff1b3e}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_macvtap\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xebd}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x401}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @ETHTOOL_A_PSE_HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x1ff}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0xffffffff}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x4}, @ETHTOOL_A_HEADER_PHY_INDEX={0x8, 0x4, 0x4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x58}]}]}, 0xe8}}, 0x0) close_range$auto(0x2, 0x8, 0x0) 1.031992012s ago: executing program 0 (id=3834): unshare$auto(0x40000080) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xd}}, 0x6a) (async) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) (async) syz_genetlink_get_family_id$auto_nl80211(0x0, r0) (async) socketpair$auto(0x8, 0x5, 0x3, 0x0) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x8020009, 0xe2, 0xcb1, 0x401, 0x8040001008000) (async) close_range$auto(0x2, 0x8, 0x0) openat$auto_proc_loginuid_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/loginuid\x00', 0x3c8082, 0x0) (async) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/virtual/net/erspan0/queues/tx-0/byte_queue_limits/limit_min\x00', 0x141042, 0x0) (async) mprotect$auto(0x1ffff000, 0x8000000000000002, 0xd) (async) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/updelay\x00', 0x8242, 0x0) read$auto(r1, 0x0, 0xa) write$auto(0x3, 0x0, 0xfdef) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x7, 0x4008) (async) madvise$auto(0xfffffffffffffff9, 0x0, 0xfffff281) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(0x0, 0xffffffffffffffff) (async) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r2, 0x0, 0x24040004) (async) write$auto(0x3, 0x0, 0x100082) (async) bind$auto(0x3, 0x0, 0x68) (async) shutdown$auto(0x200000003, 0x2) 824.028941ms ago: executing program 3 (id=3835): r0 = io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x7, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) ioperm$auto(0x7, 0x6, 0x2) mbind$auto(0xfffffffffffff206, 0x3, 0x2000100000000, 0x0, 0x36, 0x5) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x2, 0x3a) r1 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000001c0)={0x3c, r1, 0x1, 0x50bd25, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [@nested={0xc, 0x1, 0x0, 0x1, [@nested={0x8, 0x1, 0x0, 0x1, [@generic='\x00\x00\x00\x00']}]}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x200000000006}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0xaa22}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x8880) io_uring_register$auto(r0, 0xf, &(0x7f0000000100)="9a2add7747ef36a0fc54faacc204976cd28563a1f2d7c7d985bdb79ed5a75299b332f70ae33616961225ad47aa61e4871b56430656d3bb0189f93db977585536835c17e682e57ade9c8b69cf42", 0xfffffb07) 528.022085ms ago: executing program 2 (id=3836): mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffa, 0x8000) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x0, 0x6) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ram4\x00', 0x80200, 0x0) ioctl$auto_BLKRAGET(r0, 0x1263, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) semctl$auto(0x3, 0x2, 0x13, 0x9) fcntl$auto(0xffffffffffffffff, 0xf, 0x6) memfd_secret$auto(0x0) mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) fchownat$auto(0x2, 0x0, 0x4, 0x8001, 0x1000) unshare$auto(0x40000080) r1 = openat$auto_show_traces_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/available_tracers\x00', 0x40000, 0x0) read$auto_show_traces_fops_trace(r1, &(0x7f0000000640)=""/188, 0xbc) read$auto_show_traces_fops_trace(r1, &(0x7f0000000000)=""/179, 0xb3) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000e80), 0xffffffffffffffff) r2 = socket(0x28, 0x6, 0x20e) r3 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc000000", @ANYRES16=r3, @ANYBLOB="01002dbd7000fedbdf2505000000e6000400110008002e00", @ANYRES16, @ANYBLOB="d152e64e22695352dd73864415aa8a78c65e6ab752fb4d469a47a092ae7d5061cdd9690cac4100f7b4a8132d759892f424887b55fbcf38553ecfbb1b32dd7c33b14cc842bc1e2a5da4203e64ceaa9db5223aa655b6313c011b3e73a75f1aa1f7b2ea43341a1e670a42bc677830013e9c4aa4fa30c3e6630bf0ed13206d5a18f6813c6fb03466112aedf5d67bb5b99fe96a6dcd279916b0bce029925b63c48d41ca8a76e46c6014100045800c00c50003000000000000001800368014006c800800150002020000050018005d0000000000d0cb580b273180"], 0xfc}, 0x1, 0x0, 0x0, 0x4044800}, 0x50) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000100), r2) 257.974548ms ago: executing program 1 (id=3837): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000100), 0x100, 0x0) ioctl$auto_KVM_CHECK_EXTENSION(r0, 0xae03, 0xec) socket$nl_generic(0x10, 0x3, 0x10) msgctl$auto_MSG_INFO(0xe, 0xc, &(0x7f0000000100)={{0x4, 0x0, 0xee01, 0xd, 0x7, 0x471, 0x2}, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0xfff, 0x1, 0x10, 0xf, 0x16, 0x10, @inferred=0xffffffffffffffff, @inferred=0xffffffffffffffff}) setsockopt$auto(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x8) getsockopt$auto(0xffffffffffffffff, 0x0, 0x30, 0x0, &(0x7f0000000040)=0xdbb) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, 0x0, 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_STEREO(r2, 0xc0045003, 0x0) ioctl$auto(0x1, 0x541b, 0x8) r3 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000d40)='/dev/sequencer2\x00', 0x800, 0x0) ioctl$auto_SNDCTL_SEQ_CTRLRATE(r3, 0xc0045103, 0x0) sendfile$auto(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x8, 0x5) r4 = getuid() openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x143680, 0x0) shmctl$auto_IPC_INFO(0x9, 0x3, 0x0) msgctl$auto_IPC_SET(0x7, 0x1, 0x0) statx$auto(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0xf2e1, 0xf, &(0x7f0000000140)={0x80, 0x1, 0x4, 0x1000, r4, 0x0, 0x7fff, 0x9, 0x9, 0x5, 0x2, 0xffffffff, {0x6, 0xffffb58b}, {0xffffffffffffffff, 0x820a}, {0x6, 0x7}, {0x4, 0x2e}, 0x7, 0x3, 0x0, 0x7, 0x9, 0x5, 0x0, 0x4, 0x3, 0x974, 0x3, 0x0, [0x5, 0xfffffffffffffff9, 0x8, 0xfffffffffffff2ef, 0x22, 0x4, 0x803, 0x7, 0x2]}) fstat$auto(0xffffffffffffffff, &(0x7f0000000180)={0x7fffffffffffffff, 0x3, 0x3, 0x9, r1, 0x0, 0x0, 0x4, 0x1, 0xff, 0xf21, 0x80000001, 0x56, 0x3ca0, 0x8, 0x80, 0x6}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/net/afs/rootcell\x00', 0x1cb842, 0x0) write$auto(r6, &(0x7f0000000000)='@-[!\x00', 0x9) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001080), 0xffffffffffffffff) r7 = openat$auto_trace_time_stamp_mode_fops_trace(0xffffffffffffff9c, &(0x7f0000008300)='/sys/kernel/tracing/timestamp_mode\x00', 0x300, 0x0) read$auto_trace_time_stamp_mode_fops_trace(r7, &(0x7f0000008340)=""/88, 0x58) read$auto(r5, 0x0, 0x1f3c) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/tls_stat\x00', 0x4024c0, 0x0) socketpair$auto(0x1e, 0x6, 0x8000000000000000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS3\x00', 0x0, 0x0) 210.694988ms ago: executing program 2 (id=3838): syz_genetlink_get_family_id$auto_ila(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x80002, 0x73) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/dummy0/carrier\x00', 0x200200, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000040)='ns/net\x00') open$dir(&(0x7f0000000000)='./file0\x00', 0x42, 0x20) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3ff, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=r1, @ANYRES8=r0, @ANYRES32], 0x18}}, 0x80) (fail_nth: 7) 125.674637ms ago: executing program 0 (id=3839): r0 = socket(0xb, 0x4, 0x0) setsockopt$auto_SO_ATTACH_REUSEPORT_EBPF(r0, 0x1, 0x34, 0x0, 0x9) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x8000) read$auto(0xffffffffffffffff, 0x0, 0x20000074d) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_ftrace_set_event_fops_trace_events(0xffffffffffffff9c, &(0x7f0000005680)='/sys/kernel/debug/tracing/set_event\x00', 0x8000, 0x0) read$auto(0x3, 0x0, 0x400000) (fail_nth: 2) 124.86816ms ago: executing program 3 (id=3840): dup2$auto(0x0, 0x4) r0 = socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x4001, @loopback}, 0x6b) r1 = socket(0xa, 0x806, 0x0) r2 = io_uring_setup$auto(0x6, 0x0) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r1) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0xec, r3, 0x800, 0x70bd26, 0x25dfdbfe, {}, [@NL80211_ATTR_FRAME_MATCH={0xa6, 0x5b, "5adf59ba341f9d39525db5debb411e64be368d514f37945d8f96f01e7f785ce03bedad9dda887a1e74217179639eef730477623430edc52828b81f9373e3af5c7fc014279216428cee86e3ae5ffca848a66a05f3fdf0e071551be767007ba8c33fd21ab722896b6d52501e5eba8831ccadb955ee03ec940e9452db30808523bebd1ce5ff2492b016c5d03ba0398bdec628abea53c15845c1c1ab639ffb93c396dfb0"}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x9}, @NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0xd}, @NL80211_ATTR_SCHED_SCAN_MULTI={0x4}, @NL80211_ATTR_SSID={0xb, 0x34, "97d773d0921b8c"}, @NL80211_ATTR_STA_SUPPORTED_CHANNELS={0xd, 0xbd, "eb217c9a3d4a58736d"}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x80) sendmsg$auto_NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000480)={0x458, r3, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_PROBE_RESP={0x429, 0x91, "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"}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x9}]}, 0x458}, 0x1, 0x0, 0x0, 0x4}, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) ioctl$auto_VHOST_VSOCK_SET_RUNNING(r2, 0x4004af61, &(0x7f00000002c0)=0x1) r4 = io_uring_setup$auto(0x6, 0x0) r5 = openat$auto_dai_list_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) read$auto_dai_list_fops_(r5, &(0x7f0000000140)=""/204, 0xcc) setsockopt$auto(0x3, 0x1, 0x9, 0x0, 0x9) ioctl$auto_VHOST_SET_LOG_FD2(r4, 0x4004af07, &(0x7f0000000000)=r0) r6 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x1c1041, 0x0) write$auto_fuse_dev_operations_fuse_i(r6, &(0x7f0000000440)="110000000100"/17, 0x11) shutdown$auto(r0, 0x80000002) clock_nanosleep$auto(0x7, 0x4, &(0x7f0000000040)={0xb2, 0x9}, &(0x7f00000000c0)={0x1}) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) r7 = openat$auto_proc_pid_set_comm_operations_base(0xffffffffffffff9c, 0x0, 0x26a340, 0x0) ioctl$auto_FIONREAD(r7, 0x541b, r7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8008000) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty15\x00', 0x103980, 0x0) socket(0xa, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x106) 0s ago: executing program 2 (id=3841): r0 = getsockopt$auto_SO_LOCK_FILTER(0xffffffffffffffff, 0x800, 0x2c, &(0x7f0000000040)='/sys/devices/virtual/block/nbd8/queue/write_cache\x00', &(0x7f0000000080)=0x10000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, r0, 0x8000) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) r1 = socket(0xa, 0x5, 0x0) getsockopt$auto(r1, 0x84, 0x7, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x8, 0xa, 0x0, 0x0, 0x80800001) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd8/queue/write_cache\x00', 0x1a3b42, 0x0) write$auto(r2, &(0x7f00000000c0)=',.\\\x00', 0xd) kernel console output (not intermixed with test programs): 5 #0 [ 1340.417989][T23392] Tainted: [U]=USER [ 1340.417996][T23392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1340.418007][T23392] Call Trace: [ 1340.418013][T23392] [ 1340.418022][T23392] dump_stack_lvl+0x16c/0x1f0 [ 1340.418061][T23392] should_fail_ex+0x50a/0x650 [ 1340.418087][T23392] ? fs_reclaim_acquire+0xae/0x150 [ 1340.418122][T23392] should_failslab+0xc2/0x120 [ 1340.418149][T23392] __kmalloc_noprof+0xce/0x4f0 [ 1340.418173][T23392] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1340.418198][T23392] ? tomoyo_realpath_from_path+0xbf/0x710 [ 1340.418232][T23392] tomoyo_realpath_from_path+0xbf/0x710 [ 1340.418262][T23392] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1340.418289][T23392] tomoyo_path_number_perm+0x248/0x5b0 [ 1340.418311][T23392] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1340.418338][T23392] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1340.418392][T23392] ? __pfx_lock_release+0x10/0x10 [ 1340.418422][T23392] ? trace_lock_acquire+0x14e/0x1f0 [ 1340.418447][T23392] ? lock_acquire+0x2f/0xb0 [ 1340.418471][T23392] ? __fget_files+0x40/0x3a0 [ 1340.418499][T23392] ? __fget_files+0x206/0x3a0 [ 1340.418526][T23392] security_file_ioctl+0x9b/0x240 [ 1340.418552][T23392] __x64_sys_ioctl+0xb7/0x200 [ 1340.418587][T23392] do_syscall_64+0xcd/0x250 [ 1340.418610][T23392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1340.418639][T23392] RIP: 0033:0x7fd8cd98cde9 [ 1340.418657][T23392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1340.418676][T23392] RSP: 002b:00007fd8ce896038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1340.418697][T23392] RAX: ffffffffffffffda RBX: 00007fd8cdba6080 RCX: 00007fd8cd98cde9 [ 1340.418710][T23392] RDX: 0000400000000040 RSI: 00000000c0045002 RDI: 0000000000000003 [ 1340.418722][T23392] RBP: 00007fd8ce896090 R08: 0000000000000000 R09: 0000000000000000 [ 1340.418735][T23392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1340.418747][T23392] R13: 0000000000000001 R14: 00007fd8cdba6080 R15: 00007ffe2d364a88 [ 1340.418775][T23392] [ 1340.418784][T23392] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1342.299745][T23414] Process accounting resumed [ 1342.921554][T23430] block2mtd: device name too long [ 1343.734234][T23429] ima: policy update failed [ 1343.760484][ T29] audit: type=1802 audit(4294968508.375:8): pid=23429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.3327" res=0 errno=0 [ 1345.608629][T23455] can: request_module (can-proto-0) failed. [ 1348.438068][T23495] can: request_module (can-proto-0) failed. [ 1348.821340][T23507] FAULT_INJECTION: forcing a failure. [ 1348.821340][T23507] name failslab, interval 1, probability 0, space 0, times 0 [ 1348.848139][T23507] CPU: 1 UID: 0 PID: 23507 Comm: syz.1.3346 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1348.848182][T23507] Tainted: [U]=USER [ 1348.848190][T23507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1348.848204][T23507] Call Trace: [ 1348.848211][T23507] [ 1348.848221][T23507] dump_stack_lvl+0x16c/0x1f0 [ 1348.848264][T23507] should_fail_ex+0x50a/0x650 [ 1348.848292][T23507] ? fs_reclaim_acquire+0xae/0x150 [ 1348.848333][T23507] should_failslab+0xc2/0x120 [ 1348.848364][T23507] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1348.848392][T23507] ? copy_process+0x3798/0x6f20 [ 1348.848425][T23507] ? _raw_spin_unlock_irq+0x23/0x50 [ 1348.848461][T23507] copy_process+0x3798/0x6f20 [ 1348.848506][T23507] ? __pfx_copy_process+0x10/0x10 [ 1348.848543][T23507] ? futex_wake+0x18e/0x4e0 [ 1348.848576][T23507] kernel_clone+0xfd/0x960 [ 1348.848611][T23507] ? __pfx_kernel_clone+0x10/0x10 [ 1348.848651][T23507] ? do_futex+0x123/0x350 [ 1348.848675][T23507] ? __pfx_do_futex+0x10/0x10 [ 1348.848704][T23507] __do_sys_clone+0xba/0x100 [ 1348.848736][T23507] ? __pfx___do_sys_clone+0x10/0x10 [ 1348.848791][T23507] do_syscall_64+0xcd/0x250 [ 1348.848815][T23507] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1348.848847][T23507] RIP: 0033:0x7fe47fb8cde9 [ 1348.848865][T23507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1348.848887][T23507] RSP: 002b:00007fe4809d4fe8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 1348.848911][T23507] RAX: ffffffffffffffda RBX: 00007fe47fda6080 RCX: 00007fe47fb8cde9 [ 1348.848928][T23507] RDX: 0000000000000000 RSI: ffffffffffffff10 RDI: 0000000000000000 [ 1348.848943][T23507] RBP: 00007fe47fc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1348.848957][T23507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1348.848971][T23507] R13: 0000000000000000 R14: 00007fe47fda6080 R15: 00007ffe0a33fea8 [ 1348.849002][T23507] [ 1349.608173][T23519] openvswitch: HfR: Dropping previously announced user features [ 1349.662770][T23519] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3349'. [ 1349.672280][T23519] HfR: left promiscuous mode [ 1349.726580][T23524] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(7.0.1), cmd(5) [ 1349.797266][T23525] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3350'. [ 1350.021527][T23535] can: request_module (can-proto-0) failed. [ 1350.257780][T23539] FAULT_INJECTION: forcing a failure. [ 1350.257780][T23539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1350.288229][T23539] CPU: 1 UID: 0 PID: 23539 Comm: syz.3.3354 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1350.288267][T23539] Tainted: [U]=USER [ 1350.288275][T23539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1350.288288][T23539] Call Trace: [ 1350.288294][T23539] [ 1350.288302][T23539] dump_stack_lvl+0x16c/0x1f0 [ 1350.288340][T23539] should_fail_ex+0x50a/0x650 [ 1350.288373][T23539] _copy_to_user+0x32/0xd0 [ 1350.288411][T23539] simple_read_from_buffer+0xd0/0x160 [ 1350.288448][T23539] proc_fail_nth_read+0x198/0x270 [ 1350.288479][T23539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1350.288513][T23539] ? rw_verify_area+0xcf/0x680 [ 1350.288545][T23539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1350.288575][T23539] vfs_read+0x1df/0xbf0 [ 1350.288597][T23539] ? __fget_files+0x1fc/0x3a0 [ 1350.288621][T23539] ? __pfx___mutex_lock+0x10/0x10 [ 1350.288653][T23539] ? __pfx_vfs_read+0x10/0x10 [ 1350.288690][T23539] ? __fget_files+0x206/0x3a0 [ 1350.288722][T23539] ksys_read+0x12b/0x250 [ 1350.288743][T23539] ? __pfx_ksys_read+0x10/0x10 [ 1350.288773][T23539] do_syscall_64+0xcd/0x250 [ 1350.288797][T23539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1350.288827][T23539] RIP: 0033:0x7fd8cd98b7fc [ 1350.288845][T23539] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1350.288866][T23539] RSP: 002b:00007fd8ce8b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1350.288887][T23539] RAX: ffffffffffffffda RBX: 00007fd8cdba5fa0 RCX: 00007fd8cd98b7fc [ 1350.288902][T23539] RDX: 000000000000000f RSI: 00007fd8ce8b70a0 RDI: 0000000000000006 [ 1350.288915][T23539] RBP: 00007fd8ce8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1350.288929][T23539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1350.288942][T23539] R13: 0000000000000000 R14: 00007fd8cdba5fa0 R15: 00007ffe2d364a88 [ 1350.288971][T23539] [ 1350.994439][T23549] FAULT_INJECTION: forcing a failure. [ 1350.994439][T23549] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1351.044241][T23549] CPU: 0 UID: 0 PID: 23549 Comm: syz.1.3359 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1351.044277][T23549] Tainted: [U]=USER [ 1351.044285][T23549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1351.044297][T23549] Call Trace: [ 1351.044304][T23549] [ 1351.044313][T23549] dump_stack_lvl+0x16c/0x1f0 [ 1351.044351][T23549] should_fail_ex+0x50a/0x650 [ 1351.044382][T23549] _copy_from_iter+0x29b/0x1400 [ 1351.044416][T23549] ? _copy_from_iter+0x159/0x1400 [ 1351.044446][T23549] ? __pfx__copy_from_iter+0x10/0x10 [ 1351.044478][T23549] ? __pfx__copy_from_iter+0x10/0x10 [ 1351.044506][T23549] ? __virt_addr_valid+0x1a4/0x590 [ 1351.044536][T23549] copy_page_from_iter+0xa5/0x120 [ 1351.044570][T23549] skb_copy_datagram_from_iter+0x29b/0x710 [ 1351.044613][T23549] tun_get_user+0x197f/0x3e40 [ 1351.044654][T23549] ? __pfx_tun_get_user+0x10/0x10 [ 1351.044680][T23549] ? find_held_lock+0x2d/0x110 [ 1351.044717][T23549] ? __pfx_lock_release+0x10/0x10 [ 1351.044764][T23549] tun_chr_write_iter+0xdc/0x210 [ 1351.044795][T23549] vfs_write+0x5ae/0x1150 [ 1351.044818][T23549] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1351.044846][T23549] ? __pfx_lock_release+0x10/0x10 [ 1351.044871][T23549] ? __pfx_vfs_write+0x10/0x10 [ 1351.044895][T23549] ? lock_acquire+0x2f/0xb0 [ 1351.044919][T23549] ? __fget_files+0x40/0x3a0 [ 1351.044957][T23549] __x64_sys_pwrite64+0x1f6/0x250 [ 1351.044982][T23549] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 1351.045015][T23549] do_syscall_64+0xcd/0x250 [ 1351.045038][T23549] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1351.045067][T23549] RIP: 0033:0x7fe47fb8cde9 [ 1351.045084][T23549] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1351.045106][T23549] RSP: 002b:00007fe4809f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1351.045127][T23549] RAX: ffffffffffffffda RBX: 00007fe47fda5fa0 RCX: 00007fe47fb8cde9 [ 1351.045142][T23549] RDX: 000000000000fdf2 RSI: 0000400000000040 RDI: 00000000000000c8 [ 1351.045156][T23549] RBP: 00007fe4809f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1351.045170][T23549] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000002 [ 1351.045183][T23549] R13: 0000000000000000 R14: 00007fe47fda5fa0 R15: 00007ffe0a33fea8 [ 1351.045213][T23549] [ 1351.435509][T23554] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1351.441674][T23554] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1351.477578][T23554] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1351.548235][T23554] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1352.389707][T23575] FAULT_INJECTION: forcing a failure. [ 1352.389707][T23575] name failslab, interval 1, probability 0, space 0, times 0 [ 1352.420512][T23575] CPU: 0 UID: 0 PID: 23575 Comm: syz.1.3367 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1352.420555][T23575] Tainted: [U]=USER [ 1352.420563][T23575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1352.420578][T23575] Call Trace: [ 1352.420586][T23575] [ 1352.420596][T23575] dump_stack_lvl+0x16c/0x1f0 [ 1352.420641][T23575] should_fail_ex+0x50a/0x650 [ 1352.420678][T23575] ? fs_reclaim_acquire+0xae/0x150 [ 1352.420719][T23575] should_failslab+0xc2/0x120 [ 1352.420749][T23575] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1352.420778][T23575] ? getname_flags.part.0+0x4c/0x550 [ 1352.420815][T23575] getname_flags.part.0+0x4c/0x550 [ 1352.420851][T23575] getname+0x8d/0xe0 [ 1352.420873][T23575] do_sys_openat2+0x104/0x1e0 [ 1352.420905][T23575] ? __pfx_do_sys_openat2+0x10/0x10 [ 1352.420937][T23575] ? fd_install+0x190/0x750 [ 1352.420969][T23575] __x64_sys_openat+0x175/0x210 [ 1352.421001][T23575] ? __pfx___x64_sys_openat+0x10/0x10 [ 1352.421045][T23575] do_syscall_64+0xcd/0x250 [ 1352.421070][T23575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1352.421102][T23575] RIP: 0033:0x7fe47fb8cde9 [ 1352.421122][T23575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1352.421147][T23575] RSP: 002b:00007fe4809f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1352.421170][T23575] RAX: ffffffffffffffda RBX: 00007fe47fda5fa0 RCX: 00007fe47fb8cde9 [ 1352.421186][T23575] RDX: 0000000000000180 RSI: 0000400000000100 RDI: ffffffffffffff9c [ 1352.421201][T23575] RBP: 00007fe47fc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1352.421215][T23575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1352.421230][T23575] R13: 0000000000000000 R14: 00007fe47fda5fa0 R15: 00007ffe0a33fea8 [ 1352.421262][T23575] [ 1352.893127][T23582] QAT: Stopping all acceleration devices. [ 1352.995908][T23586] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3371'. [ 1353.016088][T23586] block2mtd: error: cannot open device 3QI [ 1353.372151][T23601] FAULT_INJECTION: forcing a failure. [ 1353.372151][T23601] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1353.425089][T23601] CPU: 0 UID: 0 PID: 23601 Comm: syz.1.3378 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1353.425125][T23601] Tainted: [U]=USER [ 1353.425133][T23601] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1353.425145][T23601] Call Trace: [ 1353.425152][T23601] [ 1353.425161][T23601] dump_stack_lvl+0x16c/0x1f0 [ 1353.425200][T23601] should_fail_ex+0x50a/0x650 [ 1353.425234][T23601] ? __pfx___might_resched+0x10/0x10 [ 1353.425267][T23601] should_fail_alloc_page+0xe7/0x130 [ 1353.425297][T23601] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1353.425332][T23601] ? register_lock_class+0xb1/0x1240 [ 1353.425364][T23601] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 1353.425393][T23601] ? hlock_class+0x4e/0x130 [ 1353.425424][T23601] ? mark_lock+0xb5/0xc60 [ 1353.425452][T23601] ? __pfx_mark_lock+0x10/0x10 [ 1353.425481][T23601] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1353.425510][T23601] ? hlock_class+0x4e/0x130 [ 1353.425541][T23601] ? mark_lock+0xb5/0xc60 [ 1353.425565][T23601] ? hlock_class+0x4e/0x130 [ 1353.425604][T23601] ? hlock_class+0x4e/0x130 [ 1353.425634][T23601] ? __lock_acquire+0xcc5/0x3c40 [ 1353.425662][T23601] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1353.425693][T23601] ? policy_nodemask+0xea/0x4e0 [ 1353.425724][T23601] alloc_pages_mpol+0x1fc/0x540 [ 1353.425753][T23601] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1353.425781][T23601] ? __lock_acquire+0x15a9/0x3c40 [ 1353.425814][T23601] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1353.425848][T23601] vma_alloc_folio_noprof+0xee/0x1b0 [ 1353.425878][T23601] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1353.425910][T23601] ? find_held_lock+0x2d/0x110 [ 1353.425949][T23601] do_pte_missing+0x202f/0x3e10 [ 1353.425987][T23601] __handle_mm_fault+0x1166/0x2c60 [ 1353.426023][T23601] ? __pfx___handle_mm_fault+0x10/0x10 [ 1353.426046][T23601] ? follow_page_pte+0x3ac/0x1490 [ 1353.426070][T23601] ? __pfx_lock_release+0x10/0x10 [ 1353.426122][T23601] handle_mm_fault+0x3fa/0xaa0 [ 1353.426155][T23601] __get_user_pages+0x773/0x36f0 [ 1353.426188][T23601] ? __pfx_mt_find+0x10/0x10 [ 1353.426226][T23601] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1353.426252][T23601] ? __pfx___get_user_pages+0x10/0x10 [ 1353.426279][T23601] ? __mm_populate+0x21d/0x380 [ 1353.426310][T23601] populate_vma_page_range+0x27f/0x3a0 [ 1353.426338][T23601] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1353.426363][T23601] ? __pfx_find_vma_intersection+0x10/0x10 [ 1353.426399][T23601] ? vm_mmap_pgoff+0x29b/0x3a0 [ 1353.426428][T23601] __mm_populate+0x1d6/0x380 [ 1353.426455][T23601] ? __pfx___mm_populate+0x10/0x10 [ 1353.426483][T23601] ? up_write+0x1b2/0x520 [ 1353.426515][T23601] vm_mmap_pgoff+0x2d3/0x3a0 [ 1353.426544][T23601] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1353.426567][T23601] ? __fget_files+0x206/0x3a0 [ 1353.426601][T23601] ksys_mmap_pgoff+0x7d/0x5c0 [ 1353.426635][T23601] ? __pfx_ksys_write+0x10/0x10 [ 1353.426661][T23601] __x64_sys_mmap+0x125/0x190 [ 1353.426695][T23601] do_syscall_64+0xcd/0x250 [ 1353.426720][T23601] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.426749][T23601] RIP: 0033:0x7fe47fb8cde9 [ 1353.426767][T23601] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1353.426788][T23601] RSP: 002b:00007fe4809f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1353.426809][T23601] RAX: ffffffffffffffda RBX: 00007fe47fda5fa0 RCX: 00007fe47fb8cde9 [ 1353.426824][T23601] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1353.426837][T23601] RBP: 00007fe4809f6090 R08: 0000000000000002 R09: 0000000000008000 [ 1353.426851][T23601] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000002 [ 1353.426864][T23601] R13: 0000000000000001 R14: 00007fe47fda5fa0 R15: 00007ffe0a33fea8 [ 1353.426895][T23601] [ 1353.792008][ C0] vkms_vblank_simulate: vblank timer overrun [ 1353.889974][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 1353.896026][ T54] Bluetooth: hci4: command 0x0c1a tx timeout [ 1353.902495][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 1353.908648][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 1356.447544][T23659] QAT: Stopping all acceleration devices. [ 1356.607641][T23663] FAULT_INJECTION: forcing a failure. [ 1356.607641][T23663] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1356.644320][T23663] CPU: 0 UID: 0 PID: 23663 Comm: syz.2.3393 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1356.644360][T23663] Tainted: [U]=USER [ 1356.644367][T23663] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1356.644380][T23663] Call Trace: [ 1356.644387][T23663] [ 1356.644396][T23663] dump_stack_lvl+0x16c/0x1f0 [ 1356.644435][T23663] should_fail_ex+0x50a/0x650 [ 1356.644461][T23663] ? __pfx___might_resched+0x10/0x10 [ 1356.644494][T23663] should_fail_alloc_page+0xe7/0x130 [ 1356.644525][T23663] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1356.644560][T23663] ? hlock_class+0x4e/0x130 [ 1356.644597][T23663] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 1356.644629][T23663] ? __pfx_mark_lock+0x10/0x10 [ 1356.644656][T23663] ? hlock_class+0x4e/0x130 [ 1356.644686][T23663] ? mark_lock+0xb5/0xc60 [ 1356.644711][T23663] ? hlock_class+0x4e/0x130 [ 1356.644742][T23663] ? mark_lock+0xb5/0xc60 [ 1356.644767][T23663] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1356.644797][T23663] ? mark_lock+0xb5/0xc60 [ 1356.644820][T23663] ? lock_acquire.part.0+0x11b/0x380 [ 1356.644862][T23663] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1356.644894][T23663] ? policy_nodemask+0xea/0x4e0 [ 1356.644925][T23663] alloc_pages_mpol+0x1fc/0x540 [ 1356.644955][T23663] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1356.644983][T23663] ? find_held_lock+0x2d/0x110 [ 1356.645022][T23663] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1356.645056][T23663] shmem_alloc_folio+0x135/0x160 [ 1356.645093][T23663] shmem_alloc_and_add_folio+0x48e/0xc10 [ 1356.645131][T23663] ? shmem_huge_global_enabled+0x72/0x6b0 [ 1356.645161][T23663] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 1356.645196][T23663] ? shmem_allowable_huge_orders+0xd0/0x410 [ 1356.645236][T23663] shmem_get_folio_gfp+0x689/0x1530 [ 1356.645276][T23663] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 1356.645311][T23663] ? filemap_map_pages+0xf92/0x16b0 [ 1356.645349][T23663] shmem_fault+0x200/0xae0 [ 1356.645384][T23663] ? __pfx_shmem_fault+0x10/0x10 [ 1356.645422][T23663] ? do_pte_missing+0xde9/0x3e10 [ 1356.645447][T23663] ? __pfx_lock_release+0x10/0x10 [ 1356.645481][T23663] __do_fault+0x10a/0x490 [ 1356.645514][T23663] do_pte_missing+0xecf/0x3e10 [ 1356.645541][T23663] ? __pfx_lock_release+0x10/0x10 [ 1356.645575][T23663] __handle_mm_fault+0x1166/0x2c60 [ 1356.645611][T23663] ? __pfx___handle_mm_fault+0x10/0x10 [ 1356.645635][T23663] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1356.645682][T23663] ? find_vma+0xc0/0x140 [ 1356.645713][T23663] ? __pfx_find_vma+0x10/0x10 [ 1356.645750][T23663] handle_mm_fault+0x3fa/0xaa0 [ 1356.645783][T23663] do_user_addr_fault+0x7a3/0x13f0 [ 1356.645821][T23663] exc_page_fault+0x5c/0xc0 [ 1356.645853][T23663] asm_exc_page_fault+0x26/0x30 [ 1356.645883][T23663] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 1356.645910][T23663] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 1356.645928][T23663] RSP: 0018:ffffc9000557f768 EFLAGS: 00050202 [ 1356.645945][T23663] RAX: 0000000000000001 RBX: 000000000000ffbc RCX: 0000000000005f88 [ 1356.645957][T23663] RDX: ffffed100ccc1ffc RSI: 000000000001a000 RDI: ffff88806660a054 [ 1356.645970][T23663] RBP: ffffc9000557fd80 R08: 0000000000000001 R09: ffffed100ccc1ffb [ 1356.645983][T23663] R10: ffff88806660ffdb R11: 0000000000000000 R12: 000000000001ff88 [ 1356.645996][T23663] R13: 00007ffffffff000 R14: ffff888066600010 R15: 000000000000ffcc [ 1356.646029][T23663] _copy_from_iter+0x384/0x1400 [ 1356.646062][T23663] ? trace_lock_acquire+0x14e/0x1f0 [ 1356.646089][T23663] ? skb_put+0x138/0x1b0 [ 1356.646119][T23663] ? __pfx__copy_from_iter+0x10/0x10 [ 1356.646147][T23663] ? __virt_addr_valid+0x1a4/0x590 [ 1356.646173][T23663] ? __virt_addr_valid+0x5e/0x590 [ 1356.646193][T23663] ? __phys_addr+0xc6/0x150 [ 1356.646224][T23663] ? __phys_addr_symbol+0x30/0x80 [ 1356.646256][T23663] ? __check_object_size+0x488/0x710 [ 1356.646290][T23663] sctp_user_addto_chunk+0x87/0x230 [ 1356.646319][T23663] sctp_datamsg_from_user+0x5b3/0x1320 [ 1356.646370][T23663] sctp_sendmsg_to_asoc+0xafd/0x1ad0 [ 1356.646396][T23663] ? print_usage_bug.part.0+0x610/0x680 [ 1356.646435][T23663] ? __pfx_sctp_sendmsg_to_asoc+0x10/0x10 [ 1356.646462][T23663] ? sctp_sendmsg+0x575/0x1f10 [ 1356.646491][T23663] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 1356.646526][T23663] ? mark_held_locks+0x9f/0xe0 [ 1356.646552][T23663] ? sctp_sendmsg_check_sflags+0x176/0x320 [ 1356.646582][T23663] sctp_sendmsg+0x129c/0x1f10 [ 1356.646610][T23663] ? __pfx___lock_acquire+0x10/0x10 [ 1356.646647][T23663] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1356.646696][T23663] ? __pfx_aa_sk_perm+0x10/0x10 [ 1356.646721][T23663] ? __fget_files+0x206/0x3a0 [ 1356.646746][T23663] ? __pfx_sctp_sendmsg+0x10/0x10 [ 1356.646778][T23663] inet_sendmsg+0x119/0x140 [ 1356.646811][T23663] __sys_sendto+0x42a/0x4f0 [ 1356.646847][T23663] ? __pfx___sys_sendto+0x10/0x10 [ 1356.646909][T23663] ? ksys_write+0x1ba/0x250 [ 1356.646932][T23663] ? __pfx_ksys_write+0x10/0x10 [ 1356.646959][T23663] __x64_sys_sendto+0xe0/0x1c0 [ 1356.646991][T23663] ? do_syscall_64+0x91/0x250 [ 1356.647012][T23663] ? lockdep_hardirqs_on+0x7c/0x110 [ 1356.647044][T23663] do_syscall_64+0xcd/0x250 [ 1356.647067][T23663] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1356.647101][T23663] RIP: 0033:0x7facb1b8cde9 [ 1356.647120][T23663] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1356.647141][T23663] RSP: 002b:00007facb292e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 1356.647161][T23663] RAX: ffffffffffffffda RBX: 00007facb1da5fa0 RCX: 00007facb1b8cde9 [ 1356.647175][T23663] RDX: 000000000002000f RSI: 0000000000000000 RDI: 0000000000000003 [ 1356.647187][T23663] RBP: 00007facb292e090 R08: 0000000000000000 R09: 000000000000001c [ 1356.647202][T23663] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000002 [ 1356.647215][T23663] R13: 0000000000000000 R14: 00007facb1da5fa0 R15: 00007ffcc937c098 [ 1356.647246][T23663] [ 1357.223266][ C0] vkms_vblank_simulate: vblank timer overrun [ 1359.846190][T23731] QAT: Stopping all acceleration devices. [ 1360.240319][T23746] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3415'. [ 1360.263809][T23739] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3415'. [ 1360.298212][T23744] netlink: 338 bytes leftover after parsing attributes in process `syz.0.3415'. [ 1361.046535][T23761] FAULT_INJECTION: forcing a failure. [ 1361.046535][T23761] name failslab, interval 1, probability 0, space 0, times 0 [ 1361.098486][T23765] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3421'. [ 1361.108169][T23761] CPU: 0 UID: 0 PID: 23761 Comm: syz.1.3420 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1361.108207][T23761] Tainted: [U]=USER [ 1361.108215][T23761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1361.108230][T23761] Call Trace: [ 1361.108237][T23761] [ 1361.108247][T23761] dump_stack_lvl+0x16c/0x1f0 [ 1361.108289][T23761] should_fail_ex+0x50a/0x650 [ 1361.108317][T23761] ? fs_reclaim_acquire+0xae/0x150 [ 1361.108357][T23761] should_failslab+0xc2/0x120 [ 1361.108387][T23761] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1361.108415][T23761] ? getname_flags.part.0+0x4c/0x550 [ 1361.108460][T23761] getname_flags.part.0+0x4c/0x550 [ 1361.108495][T23761] getname+0x8d/0xe0 [ 1361.108517][T23761] do_sys_openat2+0x104/0x1e0 [ 1361.108548][T23761] ? __pfx_do_sys_openat2+0x10/0x10 [ 1361.108581][T23761] ? fd_install+0x190/0x750 [ 1361.108614][T23761] __x64_sys_openat+0x175/0x210 [ 1361.108645][T23761] ? __pfx___x64_sys_openat+0x10/0x10 [ 1361.108690][T23761] do_syscall_64+0xcd/0x250 [ 1361.108715][T23761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1361.108748][T23761] RIP: 0033:0x7fe47fb8cde9 [ 1361.108766][T23761] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1361.108790][T23761] RSP: 002b:00007fe4809f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1361.108813][T23761] RAX: ffffffffffffffda RBX: 00007fe47fda5fa0 RCX: 00007fe47fb8cde9 [ 1361.108829][T23761] RDX: 0000000000000180 RSI: 0000400000000100 RDI: ffffffffffffff9c [ 1361.108844][T23761] RBP: 00007fe47fc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1361.108858][T23761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1361.108872][T23761] R13: 0000000000000000 R14: 00007fe47fda5fa0 R15: 00007ffe0a33fea8 [ 1361.108903][T23761] [ 1361.299065][ C0] vkms_vblank_simulate: vblank timer overrun [ 1361.360634][T23754] ima: policy update failed [ 1361.378013][ T29] audit: type=1802 audit(4294968525.995:9): pid=23754 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.3418" res=0 errno=0 [ 1361.868587][T23775] netlink: 'syz.0.3423': attribute type 1 has an invalid length. [ 1362.073842][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.080301][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1362.184096][T23782] zswap: compressor not available [ 1363.330751][T23811] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3433'. [ 1364.468832][T23836] QAT: Stopping all acceleration devices. [ 1366.801956][T23874] QAT: Stopping all acceleration devices. [ 1367.067799][T23872] FAULT_INJECTION: forcing a failure. [ 1367.067799][T23872] name failslab, interval 1, probability 0, space 0, times 0 [ 1367.175513][T23872] CPU: 0 UID: 0 PID: 23872 Comm: syz.2.3449 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1367.175554][T23872] Tainted: [U]=USER [ 1367.175562][T23872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1367.175577][T23872] Call Trace: [ 1367.175584][T23872] [ 1367.175593][T23872] dump_stack_lvl+0x16c/0x1f0 [ 1367.175635][T23872] should_fail_ex+0x50a/0x650 [ 1367.175663][T23872] ? fs_reclaim_acquire+0xae/0x150 [ 1367.175703][T23872] should_failslab+0xc2/0x120 [ 1367.175739][T23872] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1367.175769][T23872] ? mas_alloc_nodes+0x18b/0x880 [ 1367.175807][T23872] mas_alloc_nodes+0x18b/0x880 [ 1367.175846][T23872] mas_node_count_gfp+0x105/0x130 [ 1367.175880][T23872] mas_preallocate+0x53f/0xce0 [ 1367.175910][T23872] ? __pfx_mas_preallocate+0x10/0x10 [ 1367.175947][T23872] ? anon_vma_name+0x75/0x100 [ 1367.175981][T23872] __split_vma+0x474/0x1210 [ 1367.176012][T23872] ? __pfx___split_vma+0x10/0x10 [ 1367.176044][T23872] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 1367.176073][T23872] ? find_held_lock+0x2d/0x110 [ 1367.176111][T23872] vms_gather_munmap_vmas+0x1c3/0x1730 [ 1367.176137][T23872] ? mark_held_locks+0x9f/0xe0 [ 1367.176167][T23872] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1367.176191][T23872] ? smp_call_function_many_cond+0x3ae/0x12c0 [ 1367.176219][T23872] ? __pfx_flush_tlb_func+0x10/0x10 [ 1367.176241][T23872] ? __pfx_should_flush_tlb+0x10/0x10 [ 1367.176261][T23872] ? page_table_check_set.part.0+0x3b8/0x550 [ 1367.176289][T23872] ? find_held_lock+0x2d/0x110 [ 1367.176313][T23872] ? find_held_lock+0x2d/0x110 [ 1367.176346][T23872] do_vmi_align_munmap+0x27f/0x890 [ 1367.176376][T23872] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1367.176399][T23872] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1367.176470][T23872] do_vmi_munmap+0x208/0x3e0 [ 1367.176500][T23872] move_vma+0x8f5/0x1c50 [ 1367.176541][T23872] ? __pfx_move_vma+0x10/0x10 [ 1367.176575][T23872] ? __pfx_mtree_load+0x10/0x10 [ 1367.176616][T23872] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 1367.176641][T23872] ? cap_mmap_addr+0x4b/0x120 [ 1367.176675][T23872] ? bpf_lsm_mmap_addr+0x9/0x10 [ 1367.176701][T23872] ? security_mmap_addr+0x6c/0x1e0 [ 1367.176740][T23872] __do_sys_mremap+0x1007/0x1630 [ 1367.176782][T23872] ? __pfx___do_sys_mremap+0x10/0x10 [ 1367.176812][T23872] ? fd_install+0x190/0x750 [ 1367.176840][T23872] ? __x64_sys_futex+0x1e1/0x4c0 [ 1367.176867][T23872] ? xfd_validate_state+0x5d/0x180 [ 1367.176896][T23872] ? rcu_is_watching+0x12/0xc0 [ 1367.176936][T23872] do_syscall_64+0xcd/0x250 [ 1367.176960][T23872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1367.176991][T23872] RIP: 0033:0x7facb1b8cde9 [ 1367.177010][T23872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1367.177032][T23872] RSP: 002b:00007facb292e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1367.177054][T23872] RAX: ffffffffffffffda RBX: 00007facb1da5fa0 RCX: 00007facb1b8cde9 [ 1367.177071][T23872] RDX: 0000000000003fd6 RSI: 000000000000fee0 RDI: 00000000001ff000 [ 1367.177086][T23872] RBP: 00007facb1c0e2a0 R08: 00000000fffff000 R09: 0000000000000000 [ 1367.177101][T23872] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1367.177116][T23872] R13: 0000000000000000 R14: 00007facb1da5fa0 R15: 00007ffcc937c098 [ 1367.177147][T23872] [ 1367.208516][T23882] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3452'. [ 1369.374967][T23918] QAT: Stopping all acceleration devices. [ 1370.366065][T23944] FAULT_INJECTION: forcing a failure. [ 1370.366065][T23944] name failslab, interval 1, probability 0, space 0, times 0 [ 1370.397993][T23944] CPU: 1 UID: 0 PID: 23944 Comm: syz.3.3467 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1370.398032][T23944] Tainted: [U]=USER [ 1370.398039][T23944] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1370.398052][T23944] Call Trace: [ 1370.398058][T23944] [ 1370.398067][T23944] dump_stack_lvl+0x16c/0x1f0 [ 1370.398116][T23944] should_fail_ex+0x50a/0x650 [ 1370.398143][T23944] ? fs_reclaim_acquire+0xae/0x150 [ 1370.398181][T23944] should_failslab+0xc2/0x120 [ 1370.398211][T23944] __kmalloc_noprof+0xce/0x4f0 [ 1370.398238][T23944] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1370.398266][T23944] ? tomoyo_realpath_from_path+0xbf/0x710 [ 1370.398296][T23944] ? rcu_is_watching+0x12/0xc0 [ 1370.398332][T23944] tomoyo_realpath_from_path+0xbf/0x710 [ 1370.398371][T23944] tomoyo_check_open_permission+0x2ad/0x3c0 [ 1370.398397][T23944] ? __pfx_tomoyo_check_open_permission+0x10/0x10 [ 1370.398441][T23944] ? __pfx___lock_acquire+0x10/0x10 [ 1370.398489][T23944] ? __pfx_hook_file_open+0x10/0x10 [ 1370.398516][T23944] ? lock_acquire+0x2f/0xb0 [ 1370.398545][T23944] tomoyo_file_open+0x6b/0x90 [ 1370.398577][T23944] security_file_open+0x84/0x1e0 [ 1370.398605][T23944] do_dentry_open+0x57c/0x1c40 [ 1370.398635][T23944] ? inode_permission+0xdd/0x5f0 [ 1370.398669][T23944] vfs_open+0x82/0x3f0 [ 1370.398697][T23944] ? may_open+0x1f2/0x400 [ 1370.398731][T23944] path_openat+0x1e88/0x2d80 [ 1370.398770][T23944] ? __pfx_path_openat+0x10/0x10 [ 1370.398795][T23944] ? __pfx___lock_acquire+0x10/0x10 [ 1370.398820][T23944] ? lock_acquire.part.0+0x11b/0x380 [ 1370.398848][T23944] ? find_held_lock+0x2d/0x110 [ 1370.398887][T23944] do_filp_open+0x20c/0x470 [ 1370.398913][T23944] ? __pfx_do_filp_open+0x10/0x10 [ 1370.398936][T23944] ? find_held_lock+0x2d/0x110 [ 1370.398994][T23944] ? alloc_fd+0x41f/0x760 [ 1370.399028][T23944] do_sys_openat2+0x17a/0x1e0 [ 1370.399059][T23944] ? __pfx_do_sys_openat2+0x10/0x10 [ 1370.399099][T23944] ? fd_install+0x190/0x750 [ 1370.399132][T23944] __x64_sys_openat+0x175/0x210 [ 1370.399165][T23944] ? __pfx___x64_sys_openat+0x10/0x10 [ 1370.399212][T23944] do_syscall_64+0xcd/0x250 [ 1370.399238][T23944] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1370.399271][T23944] RIP: 0033:0x7fd8cd98cde9 [ 1370.399290][T23944] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1370.399313][T23944] RSP: 002b:00007fd8ce896038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1370.399334][T23944] RAX: ffffffffffffffda RBX: 00007fd8cdba6080 RCX: 00007fd8cd98cde9 [ 1370.399350][T23944] RDX: 0000000000000180 RSI: 0000400000000100 RDI: ffffffffffffff9c [ 1370.399365][T23944] RBP: 00007fd8cda0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1370.399380][T23944] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1370.399395][T23944] R13: 0000000000000000 R14: 00007fd8cdba6080 R15: 00007ffe2d364a88 [ 1370.399427][T23944] [ 1370.399436][T23944] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1370.947614][T23951] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3469'. [ 1372.635388][T23970] Process accounting paused [ 1372.669787][T23973] QAT: Stopping all acceleration devices. [ 1375.832118][T24005] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 1375.850265][T24005] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 1375.869934][T24005] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1375.898139][T24005] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1377.665504][T24047] FAULT_INJECTION: forcing a failure. [ 1377.665504][T24047] name failslab, interval 1, probability 0, space 0, times 0 [ 1377.756585][T24047] CPU: 0 UID: 0 PID: 24047 Comm: syz.2.3494 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1377.756624][T24047] Tainted: [U]=USER [ 1377.756631][T24047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1377.756644][T24047] Call Trace: [ 1377.756650][T24047] [ 1377.756660][T24047] dump_stack_lvl+0x16c/0x1f0 [ 1377.756700][T24047] should_fail_ex+0x50a/0x650 [ 1377.756727][T24047] ? fs_reclaim_acquire+0xae/0x150 [ 1377.756763][T24047] should_failslab+0xc2/0x120 [ 1377.756791][T24047] __kmalloc_noprof+0xce/0x4f0 [ 1377.756814][T24047] ? d_absolute_path+0x137/0x1b0 [ 1377.756842][T24047] ? tomoyo_encode2+0x100/0x3e0 [ 1377.756875][T24047] tomoyo_encode2+0x100/0x3e0 [ 1377.756904][T24047] tomoyo_realpath_from_path+0x1a7/0x710 [ 1377.756939][T24047] tomoyo_path_number_perm+0x248/0x5b0 [ 1377.756960][T24047] ? tomoyo_path_number_perm+0x235/0x5b0 [ 1377.756987][T24047] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1377.757041][T24047] ? __pfx_lock_release+0x10/0x10 [ 1377.757068][T24047] ? trace_lock_acquire+0x14e/0x1f0 [ 1377.757093][T24047] ? lock_acquire+0x2f/0xb0 [ 1377.757117][T24047] ? __fget_files+0x40/0x3a0 [ 1377.757144][T24047] ? __fget_files+0x206/0x3a0 [ 1377.757172][T24047] security_file_ioctl+0x9b/0x240 [ 1377.757199][T24047] __x64_sys_ioctl+0xb7/0x200 [ 1377.757233][T24047] do_syscall_64+0xcd/0x250 [ 1377.757257][T24047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1377.757288][T24047] RIP: 0033:0x7facb1b8cde9 [ 1377.757306][T24047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1377.757327][T24047] RSP: 002b:00007facb290d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1377.757349][T24047] RAX: ffffffffffffffda RBX: 00007facb1da6080 RCX: 00007facb1b8cde9 [ 1377.757364][T24047] RDX: 0000400000000040 RSI: 00000000c0045002 RDI: 0000000000000003 [ 1377.757378][T24047] RBP: 00007facb290d090 R08: 0000000000000000 R09: 0000000000000000 [ 1377.757398][T24047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1377.757410][T24047] R13: 0000000000000001 R14: 00007facb1da6080 R15: 00007ffcc937c098 [ 1377.757441][T24047] [ 1377.757459][T24047] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1377.896548][T21487] Bluetooth: hci0: command 0x0c1a tx timeout [ 1377.900218][ T54] Bluetooth: hci1: command 0x0c1a tx timeout [ 1377.904345][T21487] Bluetooth: hci2: command 0x0c1a tx timeout [ 1377.904391][T21487] Bluetooth: hci4: command 0x0c1a tx timeout [ 1378.480579][T24052] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3495'. [ 1383.139312][T24098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3507'. [ 1386.325109][T24136] FAULT_INJECTION: forcing a failure. [ 1386.325109][T24136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1386.403691][T24136] CPU: 1 UID: 0 PID: 24136 Comm: syz.1.3521 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1386.403730][T24136] Tainted: [U]=USER [ 1386.403737][T24136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1386.403750][T24136] Call Trace: [ 1386.403756][T24136] [ 1386.403765][T24136] dump_stack_lvl+0x16c/0x1f0 [ 1386.403803][T24136] should_fail_ex+0x50a/0x650 [ 1386.403834][T24136] _copy_from_iter+0x29b/0x1400 [ 1386.403869][T24136] ? _copy_from_iter+0x159/0x1400 [ 1386.403899][T24136] ? __pfx__copy_from_iter+0x10/0x10 [ 1386.403933][T24136] ? __pfx__copy_from_iter+0x10/0x10 [ 1386.403961][T24136] ? __virt_addr_valid+0x1a4/0x590 [ 1386.403991][T24136] copy_page_from_iter+0xa5/0x120 [ 1386.404026][T24136] skb_copy_datagram_from_iter+0x29b/0x710 [ 1386.404071][T24136] tun_get_user+0x197f/0x3e40 [ 1386.404113][T24136] ? __pfx_tun_get_user+0x10/0x10 [ 1386.404140][T24136] ? find_held_lock+0x2d/0x110 [ 1386.404178][T24136] ? __pfx_lock_release+0x10/0x10 [ 1386.404220][T24136] tun_chr_write_iter+0xdc/0x210 [ 1386.404256][T24136] vfs_write+0x5ae/0x1150 [ 1386.404280][T24136] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1386.404309][T24136] ? __pfx_lock_release+0x10/0x10 [ 1386.404334][T24136] ? __pfx_vfs_write+0x10/0x10 [ 1386.404358][T24136] ? lock_acquire+0x2f/0xb0 [ 1386.404382][T24136] ? __fget_files+0x40/0x3a0 [ 1386.404419][T24136] __x64_sys_pwrite64+0x1f6/0x250 [ 1386.404443][T24136] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 1386.404475][T24136] do_syscall_64+0xcd/0x250 [ 1386.404498][T24136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1386.404527][T24136] RIP: 0033:0x7fe47fb8cde9 [ 1386.404545][T24136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1386.404567][T24136] RSP: 002b:00007fe4809f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1386.404588][T24136] RAX: ffffffffffffffda RBX: 00007fe47fda5fa0 RCX: 00007fe47fb8cde9 [ 1386.404603][T24136] RDX: 000000000000fdf2 RSI: 0000400000000040 RDI: 00000000000000c8 [ 1386.404617][T24136] RBP: 00007fe4809f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1386.404631][T24136] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000002 [ 1386.404644][T24136] R13: 0000000000000000 R14: 00007fe47fda5fa0 R15: 00007ffe0a33fea8 [ 1386.404674][T24136] [ 1388.120130][T24167] FAULT_INJECTION: forcing a failure. [ 1388.120130][T24167] name failslab, interval 1, probability 0, space 0, times 0 [ 1388.138250][T24167] CPU: 0 UID: 0 PID: 24167 Comm: syz.3.3529 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1388.138289][T24167] Tainted: [U]=USER [ 1388.138296][T24167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1388.138309][T24167] Call Trace: [ 1388.138316][T24167] [ 1388.138325][T24167] dump_stack_lvl+0x16c/0x1f0 [ 1388.138365][T24167] should_fail_ex+0x50a/0x650 [ 1388.138404][T24167] should_failslab+0xc2/0x120 [ 1388.138433][T24167] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1388.138462][T24167] ? skb_clone+0x190/0x3f0 [ 1388.138491][T24167] skb_clone+0x190/0x3f0 [ 1388.138517][T24167] netlink_deliver_tap+0xafd/0xca0 [ 1388.138554][T24167] netlink_unicast+0x5e1/0x7f0 [ 1388.138590][T24167] ? __pfx_netlink_unicast+0x10/0x10 [ 1388.138622][T24167] ? __phys_addr_symbol+0x30/0x80 [ 1388.138654][T24167] ? __check_object_size+0x488/0x710 [ 1388.138687][T24167] netlink_sendmsg+0x8b8/0xd70 [ 1388.138724][T24167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1388.138768][T24167] ____sys_sendmsg+0x9ae/0xb40 [ 1388.138805][T24167] ? copy_msghdr_from_user+0x10b/0x160 [ 1388.138829][T24167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1388.138874][T24167] ___sys_sendmsg+0x135/0x1e0 [ 1388.138901][T24167] ? __pfx____sys_sendmsg+0x10/0x10 [ 1388.138941][T24167] ? __pfx_lock_release+0x10/0x10 [ 1388.138967][T24167] ? trace_lock_acquire+0x14e/0x1f0 [ 1388.139001][T24167] ? __fget_files+0x206/0x3a0 [ 1388.139033][T24167] __sys_sendmsg+0x16e/0x220 [ 1388.139058][T24167] ? __pfx___sys_sendmsg+0x10/0x10 [ 1388.139105][T24167] do_syscall_64+0xcd/0x250 [ 1388.139129][T24167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1388.139159][T24167] RIP: 0033:0x7fd8cd98cde9 [ 1388.139176][T24167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1388.139197][T24167] RSP: 002b:00007fd8ce8b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1388.139218][T24167] RAX: ffffffffffffffda RBX: 00007fd8cdba5fa0 RCX: 00007fd8cd98cde9 [ 1388.139233][T24167] RDX: 0000000000000080 RSI: 0000400000000180 RDI: 0000000000000002 [ 1388.139246][T24167] RBP: 00007fd8ce8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1388.139259][T24167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1388.139272][T24167] R13: 0000000000000000 R14: 00007fd8cdba5fa0 R15: 00007ffe2d364a88 [ 1388.139303][T24167] [ 1388.139325][T24167] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3529'. [ 1390.313445][T24205] QAT: Stopping all acceleration devices. [ 1391.100444][T24215] FAULT_INJECTION: forcing a failure. [ 1391.100444][T24215] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1391.135893][ T29] audit: type=1326 audit(4294968577.758:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=24208 comm="syz.3.3536" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd8cd98cde9 code=0x0 [ 1391.148404][T24215] CPU: 1 UID: 0 PID: 24215 Comm: syz.2.3537 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1391.148442][T24215] Tainted: [U]=USER [ 1391.148449][T24215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1391.148461][T24215] Call Trace: [ 1391.148468][T24215] [ 1391.148476][T24215] dump_stack_lvl+0x16c/0x1f0 [ 1391.148515][T24215] should_fail_ex+0x50a/0x650 [ 1391.148540][T24215] ? __pfx___might_resched+0x10/0x10 [ 1391.148573][T24215] should_fail_alloc_page+0xe7/0x130 [ 1391.148602][T24215] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1391.148641][T24215] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 1391.148679][T24215] ? hlock_class+0x4e/0x130 [ 1391.148709][T24215] ? mark_lock+0xb5/0xc60 [ 1391.148737][T24215] ? __pfx_mark_lock+0x10/0x10 [ 1391.148764][T24215] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1391.148792][T24215] ? hlock_class+0x4e/0x130 [ 1391.148821][T24215] ? mark_lock+0xb5/0xc60 [ 1391.148845][T24215] ? hlock_class+0x4e/0x130 [ 1391.148881][T24215] ? hlock_class+0x4e/0x130 [ 1391.148911][T24215] ? __lock_acquire+0xcc5/0x3c40 [ 1391.148937][T24215] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1391.148967][T24215] ? policy_nodemask+0xea/0x4e0 [ 1391.148996][T24215] alloc_pages_mpol+0x1fc/0x540 [ 1391.149024][T24215] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1391.149050][T24215] ? __lock_acquire+0x15a9/0x3c40 [ 1391.149082][T24215] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1391.149114][T24215] vma_alloc_folio_noprof+0xee/0x1b0 [ 1391.149144][T24215] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1391.149173][T24215] ? find_held_lock+0x2d/0x110 [ 1391.149211][T24215] do_pte_missing+0x202f/0x3e10 [ 1391.149247][T24215] __handle_mm_fault+0x1166/0x2c60 [ 1391.149280][T24215] ? __pfx___handle_mm_fault+0x10/0x10 [ 1391.149303][T24215] ? follow_page_pte+0x3ac/0x1490 [ 1391.149326][T24215] ? __pfx_lock_release+0x10/0x10 [ 1391.149374][T24215] handle_mm_fault+0x3fa/0xaa0 [ 1391.149404][T24215] __get_user_pages+0x773/0x36f0 [ 1391.149436][T24215] ? __pfx_mt_find+0x10/0x10 [ 1391.149466][T24215] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1391.149492][T24215] ? __pfx___get_user_pages+0x10/0x10 [ 1391.149518][T24215] ? __mm_populate+0x21d/0x380 [ 1391.149547][T24215] populate_vma_page_range+0x27f/0x3a0 [ 1391.149574][T24215] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1391.149598][T24215] ? __pfx_find_vma_intersection+0x10/0x10 [ 1391.149632][T24215] ? vm_mmap_pgoff+0x29b/0x3a0 [ 1391.149664][T24215] __mm_populate+0x1d6/0x380 [ 1391.149690][T24215] ? __pfx___mm_populate+0x10/0x10 [ 1391.149717][T24215] ? up_write+0x1b2/0x520 [ 1391.149747][T24215] vm_mmap_pgoff+0x2d3/0x3a0 [ 1391.149775][T24215] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1391.149798][T24215] ? __fget_files+0x206/0x3a0 [ 1391.149829][T24215] ksys_mmap_pgoff+0x7d/0x5c0 [ 1391.149862][T24215] ? __pfx_ksys_write+0x10/0x10 [ 1391.149886][T24215] __x64_sys_mmap+0x125/0x190 [ 1391.149920][T24215] do_syscall_64+0xcd/0x250 [ 1391.149943][T24215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1391.149972][T24215] RIP: 0033:0x7facb1b8cde9 [ 1391.149988][T24215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1391.150009][T24215] RSP: 002b:00007facb292e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1391.150029][T24215] RAX: ffffffffffffffda RBX: 00007facb1da5fa0 RCX: 00007facb1b8cde9 [ 1391.150044][T24215] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 1391.150056][T24215] RBP: 00007facb292e090 R08: 0000000000000002 R09: 0000000000008000 [ 1391.150069][T24215] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000002 [ 1391.150081][T24215] R13: 0000000000000001 R14: 00007facb1da5fa0 R15: 00007ffcc937c098 [ 1391.150111][T24215] [ 1392.589847][T24237] cougar: G6 mapped to space [ 1393.156619][T24244] sd 0:0:1:0: PR command failed: 1026 [ 1393.167640][T24244] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 1393.218236][T24244] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 1394.043330][T24256] FAULT_INJECTION: forcing a failure. [ 1394.043330][T24256] name failslab, interval 1, probability 0, space 0, times 0 [ 1394.119275][T24256] CPU: 1 UID: 0 PID: 24256 Comm: syz.1.3546 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1394.119315][T24256] Tainted: [U]=USER [ 1394.119324][T24256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1394.119337][T24256] Call Trace: [ 1394.119344][T24256] [ 1394.119353][T24256] dump_stack_lvl+0x16c/0x1f0 [ 1394.119398][T24256] should_fail_ex+0x50a/0x650 [ 1394.119426][T24256] ? fs_reclaim_acquire+0xae/0x150 [ 1394.119465][T24256] should_failslab+0xc2/0x120 [ 1394.119497][T24256] kmem_cache_alloc_bulk_noprof+0x85/0xb10 [ 1394.119526][T24256] ? rcu_is_watching+0x12/0xc0 [ 1394.119561][T24256] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 1394.119595][T24256] ? kmem_cache_alloc_noprof+0x21b/0x3b0 [ 1394.119623][T24256] ? mas_alloc_nodes+0x18b/0x880 [ 1394.119656][T24256] ? mas_alloc_nodes+0x2f1/0x880 [ 1394.119686][T24256] mas_alloc_nodes+0x2f1/0x880 [ 1394.119726][T24256] mas_node_count_gfp+0x105/0x130 [ 1394.119759][T24256] mas_preallocate+0x53f/0xce0 [ 1394.119788][T24256] ? __pfx_mas_preallocate+0x10/0x10 [ 1394.119824][T24256] ? anon_vma_name+0x75/0x100 [ 1394.119858][T24256] __split_vma+0x474/0x1210 [ 1394.119891][T24256] ? __pfx___split_vma+0x10/0x10 [ 1394.119923][T24256] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 1394.119953][T24256] ? find_held_lock+0x2d/0x110 [ 1394.119991][T24256] vms_gather_munmap_vmas+0x1c3/0x1730 [ 1394.120022][T24256] ? mark_held_locks+0x9f/0xe0 [ 1394.120053][T24256] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1394.120081][T24256] ? smp_call_function_many_cond+0x3ae/0x12c0 [ 1394.120116][T24256] ? __pfx_flush_tlb_func+0x10/0x10 [ 1394.120139][T24256] ? __pfx_should_flush_tlb+0x10/0x10 [ 1394.120161][T24256] ? page_table_check_set.part.0+0x3b8/0x550 [ 1394.120192][T24256] ? find_held_lock+0x2d/0x110 [ 1394.120224][T24256] ? find_held_lock+0x2d/0x110 [ 1394.120265][T24256] do_vmi_align_munmap+0x27f/0x890 [ 1394.120305][T24256] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1394.120332][T24256] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1394.120408][T24256] do_vmi_munmap+0x208/0x3e0 [ 1394.120442][T24256] move_vma+0x8f5/0x1c50 [ 1394.120481][T24256] ? __pfx_move_vma+0x10/0x10 [ 1394.120516][T24256] ? __pfx_mtree_load+0x10/0x10 [ 1394.120554][T24256] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 1394.120579][T24256] ? cap_mmap_addr+0x4b/0x120 [ 1394.120613][T24256] ? bpf_lsm_mmap_addr+0x9/0x10 [ 1394.120639][T24256] ? security_mmap_addr+0x6c/0x1e0 [ 1394.120672][T24256] __do_sys_mremap+0x1007/0x1630 [ 1394.120713][T24256] ? __pfx___do_sys_mremap+0x10/0x10 [ 1394.120742][T24256] ? fd_install+0x190/0x750 [ 1394.120770][T24256] ? __x64_sys_futex+0x1e1/0x4c0 [ 1394.120798][T24256] ? xfd_validate_state+0x5d/0x180 [ 1394.120828][T24256] ? rcu_is_watching+0x12/0xc0 [ 1394.120868][T24256] do_syscall_64+0xcd/0x250 [ 1394.120891][T24256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1394.120920][T24256] RIP: 0033:0x7fe47fb8cde9 [ 1394.120939][T24256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1394.120962][T24256] RSP: 002b:00007fe4809d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1394.120985][T24256] RAX: ffffffffffffffda RBX: 00007fe47fda6080 RCX: 00007fe47fb8cde9 [ 1394.121005][T24256] RDX: 0000000000003fd6 RSI: 000000000000fee0 RDI: 00000000001ff000 [ 1394.121021][T24256] RBP: 00007fe47fc0e2a0 R08: 00000000fffff000 R09: 0000000000000000 [ 1394.121036][T24256] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1394.121050][T24256] R13: 0000000000000000 R14: 00007fe47fda6080 R15: 00007ffe0a33fea8 [ 1394.121084][T24256] [ 1394.539960][ T29] audit: type=1800 audit(4294968581.168:11): pid=24254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.3549" name=03 dev="tmpfs" ino=1585 res=0 errno=0 [ 1394.981234][T24262] FAULT_INJECTION: forcing a failure. [ 1394.981234][T24262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1395.004764][T24262] CPU: 1 UID: 0 PID: 24262 Comm: syz.2.3550 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1395.004801][T24262] Tainted: [U]=USER [ 1395.004808][T24262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1395.004821][T24262] Call Trace: [ 1395.004842][T24262] [ 1395.004851][T24262] dump_stack_lvl+0x16c/0x1f0 [ 1395.004889][T24262] should_fail_ex+0x50a/0x650 [ 1395.004921][T24262] _copy_from_iter+0x4a5/0x1400 [ 1395.004956][T24262] ? _copy_from_iter+0x159/0x1400 [ 1395.004986][T24262] ? __pfx__copy_from_iter+0x10/0x10 [ 1395.005020][T24262] ? __pfx__copy_from_iter+0x10/0x10 [ 1395.005048][T24262] ? __virt_addr_valid+0x1a4/0x590 [ 1395.005078][T24262] copy_page_from_iter+0xa5/0x120 [ 1395.005112][T24262] skb_copy_datagram_from_iter+0x29b/0x710 [ 1395.005162][T24262] packet_sendmsg+0x220f/0x56c0 [ 1395.005206][T24262] ? __pfx___might_resched+0x10/0x10 [ 1395.005234][T24262] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1395.005269][T24262] ? __pfx_packet_sendmsg+0x10/0x10 [ 1395.005296][T24262] ? aa_label_xaudit+0x2b0/0x570 [ 1395.005327][T24262] ? __might_fault+0xe3/0x190 [ 1395.005356][T24262] ? __might_fault+0xe3/0x190 [ 1395.005391][T24262] ____sys_sendmsg+0x9ae/0xb40 [ 1395.005424][T24262] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1395.005450][T24262] ? __lock_acquire+0xcc5/0x3c40 [ 1395.005491][T24262] ___sys_sendmsg+0x135/0x1e0 [ 1395.005517][T24262] ? __pfx____sys_sendmsg+0x10/0x10 [ 1395.005554][T24262] ? trace_lock_acquire+0x14e/0x1f0 [ 1395.005596][T24262] __sys_sendmmsg+0x201/0x420 [ 1395.005623][T24262] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1395.005658][T24262] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1395.005704][T24262] ? fput+0x67/0x440 [ 1395.005732][T24262] ? ksys_write+0x1ba/0x250 [ 1395.005754][T24262] ? __pfx_ksys_write+0x10/0x10 [ 1395.005793][T24262] __x64_sys_sendmmsg+0x9c/0x100 [ 1395.005817][T24262] ? lockdep_hardirqs_on+0x7c/0x110 [ 1395.005849][T24262] do_syscall_64+0xcd/0x250 [ 1395.005872][T24262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1395.005903][T24262] RIP: 0033:0x7facb1b8cde9 [ 1395.005922][T24262] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1395.005944][T24262] RSP: 002b:00007facb292e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1395.005965][T24262] RAX: ffffffffffffffda RBX: 00007facb1da5fa0 RCX: 00007facb1b8cde9 [ 1395.005980][T24262] RDX: 0000000000000002 RSI: 00004000000001c0 RDI: 0000000000000003 [ 1395.005993][T24262] RBP: 00007facb292e090 R08: 0000000000000000 R09: 0000000000000000 [ 1395.006006][T24262] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000002 [ 1395.006020][T24262] R13: 0000000000000000 R14: 00007facb1da5fa0 R15: 00007ffcc937c098 [ 1395.006048][T24262] [ 1397.465197][T24294] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3558'. [ 1397.930319][T24297] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3559'. [ 1400.939125][T24342] QAT: Stopping all acceleration devices. [ 1401.485359][T24347] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3572'. [ 1402.724412][T24356] Process accounting resumed [ 1402.956920][T24363] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3576'. [ 1404.109714][T24384] QAT: Stopping all acceleration devices. [ 1404.475701][T24390] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3583'. [ 1404.880656][T24398] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3585'. [ 1405.142073][T24410] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3587'. [ 1405.153431][T24410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1405.168888][T24410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1405.209122][T24406] FAULT_INJECTION: forcing a failure. [ 1405.209122][T24406] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1405.237802][T24410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1405.287745][T24410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1405.298405][T24406] CPU: 1 UID: 0 PID: 24406 Comm: syz.2.3588 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1405.298445][T24406] Tainted: [U]=USER [ 1405.298453][T24406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1405.298468][T24406] Call Trace: [ 1405.298476][T24406] [ 1405.298485][T24406] dump_stack_lvl+0x16c/0x1f0 [ 1405.298527][T24406] should_fail_ex+0x50a/0x650 [ 1405.298562][T24406] get_futex_key+0x4a3/0x1000 [ 1405.298602][T24406] ? __fget_files+0x1fc/0x3a0 [ 1405.298627][T24406] ? __pfx_get_futex_key+0x10/0x10 [ 1405.298668][T24406] ? lock_acquire+0x2f/0xb0 [ 1405.298695][T24406] ? __fget_files+0x40/0x3a0 [ 1405.298724][T24406] futex_wake+0xe8/0x4e0 [ 1405.298757][T24406] ? __pfx_futex_wake+0x10/0x10 [ 1405.298800][T24406] do_futex+0x1e5/0x350 [ 1405.298825][T24406] ? __pfx_do_futex+0x10/0x10 [ 1405.298864][T24406] __x64_sys_futex+0x1e1/0x4c0 [ 1405.298894][T24406] ? __pfx___x64_sys_futex+0x10/0x10 [ 1405.298921][T24406] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 1405.298969][T24406] do_syscall_64+0xcd/0x250 [ 1405.298995][T24406] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1405.299028][T24406] RIP: 0033:0x7facb1b8cde9 [ 1405.299047][T24406] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1405.299070][T24406] RSP: 002b:00007facb292e0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1405.299093][T24406] RAX: ffffffffffffffda RBX: 00007facb1da5fa8 RCX: 00007facb1b8cde9 [ 1405.299109][T24406] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007facb1da5fac [ 1405.299124][T24406] RBP: 00007facb1da5fa0 R08: 00007facb292f000 R09: 0000000000000000 [ 1405.299139][T24406] R10: ffffffffffffffff R11: 0000000000000246 R12: 00007facb1da5fac [ 1405.299154][T24406] R13: 0000000000000000 R14: 00007ffcc937bfb0 R15: 00007ffcc937c098 [ 1405.299186][T24406] [ 1405.936157][T24423] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3589'. [ 1406.045702][T24425] netlink: 342 bytes leftover after parsing attributes in process `syz.0.3591'. [ 1407.170069][T24447] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3594'. [ 1407.554840][T24450] FAULT_INJECTION: forcing a failure. [ 1407.554840][T24450] name failslab, interval 1, probability 0, space 0, times 0 [ 1407.588021][T24450] CPU: 0 UID: 0 PID: 24450 Comm: syz.0.3596 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1407.588062][T24450] Tainted: [U]=USER [ 1407.588069][T24450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1407.588084][T24450] Call Trace: [ 1407.588092][T24450] [ 1407.588101][T24450] dump_stack_lvl+0x16c/0x1f0 [ 1407.588142][T24450] should_fail_ex+0x50a/0x650 [ 1407.588169][T24450] ? fs_reclaim_acquire+0xae/0x150 [ 1407.588219][T24450] should_failslab+0xc2/0x120 [ 1407.588249][T24450] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1407.588278][T24450] ? mas_alloc_nodes+0x18b/0x880 [ 1407.588315][T24450] mas_alloc_nodes+0x18b/0x880 [ 1407.588354][T24450] mas_node_count_gfp+0x105/0x130 [ 1407.588388][T24450] mas_preallocate+0x53f/0xce0 [ 1407.588423][T24450] ? __pfx_mas_preallocate+0x10/0x10 [ 1407.588461][T24450] ? anon_vma_name+0x75/0x100 [ 1407.588496][T24450] __split_vma+0x474/0x1210 [ 1407.588528][T24450] ? __pfx___split_vma+0x10/0x10 [ 1407.588558][T24450] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 1407.588587][T24450] ? find_held_lock+0x2d/0x110 [ 1407.588625][T24450] vms_gather_munmap_vmas+0x1c3/0x1730 [ 1407.588656][T24450] ? mark_held_locks+0x9f/0xe0 [ 1407.588688][T24450] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1407.588715][T24450] ? smp_call_function_many_cond+0x3ae/0x12c0 [ 1407.588749][T24450] ? __pfx_flush_tlb_func+0x10/0x10 [ 1407.588772][T24450] ? __pfx_should_flush_tlb+0x10/0x10 [ 1407.588794][T24450] ? page_table_check_set.part.0+0x3b8/0x550 [ 1407.588823][T24450] ? find_held_lock+0x2d/0x110 [ 1407.588853][T24450] ? find_held_lock+0x2d/0x110 [ 1407.588894][T24450] do_vmi_align_munmap+0x27f/0x890 [ 1407.588926][T24450] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1407.588951][T24450] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1407.589024][T24450] do_vmi_munmap+0x208/0x3e0 [ 1407.589057][T24450] move_vma+0x8f5/0x1c50 [ 1407.589095][T24450] ? __pfx_move_vma+0x10/0x10 [ 1407.589129][T24450] ? __pfx_mtree_load+0x10/0x10 [ 1407.589167][T24450] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 1407.589192][T24450] ? cap_mmap_addr+0x4b/0x120 [ 1407.589248][T24450] ? bpf_lsm_mmap_addr+0x9/0x10 [ 1407.589277][T24450] ? security_mmap_addr+0x6c/0x1e0 [ 1407.589310][T24450] __do_sys_mremap+0x1007/0x1630 [ 1407.589351][T24450] ? __pfx___do_sys_mremap+0x10/0x10 [ 1407.589379][T24450] ? fd_install+0x190/0x750 [ 1407.589407][T24450] ? __x64_sys_futex+0x1e1/0x4c0 [ 1407.589435][T24450] ? xfd_validate_state+0x5d/0x180 [ 1407.589465][T24450] ? rcu_is_watching+0x12/0xc0 [ 1407.589509][T24450] do_syscall_64+0xcd/0x250 [ 1407.589534][T24450] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1407.589566][T24450] RIP: 0033:0x7f505738cde9 [ 1407.589585][T24450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1407.589608][T24450] RSP: 002b:00007f50551f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1407.589629][T24450] RAX: ffffffffffffffda RBX: 00007f50575a5fa0 RCX: 00007f505738cde9 [ 1407.589645][T24450] RDX: 0000000000003fd6 RSI: 000000000000fee0 RDI: 00000000001ff000 [ 1407.589660][T24450] RBP: 00007f505740e2a0 R08: 00000000fffff000 R09: 0000000000000000 [ 1407.589674][T24450] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1407.589687][T24450] R13: 0000000000000000 R14: 00007f50575a5fa0 R15: 00007ffc4437b058 [ 1407.589719][T24450] [ 1408.738687][T24462] FAULT_INJECTION: forcing a failure. [ 1408.738687][T24462] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1408.759806][T24462] CPU: 0 UID: 0 PID: 24462 Comm: syz.0.3607 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1408.759846][T24462] Tainted: [U]=USER [ 1408.759854][T24462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1408.759868][T24462] Call Trace: [ 1408.759875][T24462] [ 1408.759885][T24462] dump_stack_lvl+0x16c/0x1f0 [ 1408.759927][T24462] should_fail_ex+0x50a/0x650 [ 1408.759960][T24462] get_futex_key+0x4a3/0x1000 [ 1408.760002][T24462] ? __pfx_get_futex_key+0x10/0x10 [ 1408.760039][T24462] ? find_held_lock+0x2d/0x110 [ 1408.760094][T24462] futex_wake+0xe8/0x4e0 [ 1408.760125][T24462] ? __pfx_futex_wake+0x10/0x10 [ 1408.760155][T24462] ? up_write+0x1b2/0x520 [ 1408.760192][T24462] do_futex+0x1e5/0x350 [ 1408.760217][T24462] ? __pfx_do_futex+0x10/0x10 [ 1408.760242][T24462] ? __pfx___do_sys_mremap+0x10/0x10 [ 1408.760271][T24462] ? fd_install+0x190/0x750 [ 1408.760300][T24462] __x64_sys_futex+0x1e1/0x4c0 [ 1408.760330][T24462] ? __pfx___x64_sys_futex+0x10/0x10 [ 1408.760353][T24462] ? rcu_is_watching+0x12/0xc0 [ 1408.760395][T24462] do_syscall_64+0xcd/0x250 [ 1408.760415][T24462] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1408.760445][T24462] RIP: 0033:0x7f505738cde9 [ 1408.760463][T24462] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1408.760485][T24462] RSP: 002b:00007f50551f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1408.760508][T24462] RAX: ffffffffffffffda RBX: 00007f50575a5fa8 RCX: 00007f505738cde9 [ 1408.760524][T24462] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f50575a5fac [ 1408.760539][T24462] RBP: 00007f50575a5fa0 R08: 00007f50580df000 R09: 0000000000000000 [ 1408.760553][T24462] R10: 00000000fffff000 R11: 0000000000000246 R12: 00007f50575a5fac [ 1408.760567][T24462] R13: 0000000000000000 R14: 00007ffc4437af70 R15: 00007ffc4437b058 [ 1408.760593][T24462] [ 1409.060561][T24466] GUP no longer grows the stack in syz.3.3597 (24466): 200000-401000 (1f0000) [ 1409.070999][T24466] CPU: 0 UID: 0 PID: 24466 Comm: syz.3.3597 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1409.071042][T24466] Tainted: [U]=USER [ 1409.071049][T24466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1409.071061][T24466] Call Trace: [ 1409.071068][T24466] [ 1409.071076][T24466] dump_stack_lvl+0x16c/0x1f0 [ 1409.071116][T24466] gup_vma_lookup+0x1d2/0x220 [ 1409.071154][T24466] __get_user_pages+0x236/0x36f0 [ 1409.071178][T24466] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 1409.071209][T24466] ? find_held_lock+0x2d/0x110 [ 1409.071239][T24466] ? get_dump_page+0xb6/0x230 [ 1409.071265][T24466] ? get_dump_page+0xb6/0x230 [ 1409.071292][T24466] ? __pfx___get_user_pages+0x10/0x10 [ 1409.071314][T24466] ? down_read_killable+0xcc/0x380 [ 1409.071338][T24466] ? __pfx_down_read_killable+0x10/0x10 [ 1409.071372][T24466] get_dump_page+0xff/0x230 [ 1409.071396][T24466] ? __pfx_get_dump_page+0x10/0x10 [ 1409.071425][T24466] ? __pfx___might_resched+0x10/0x10 [ 1409.071461][T24466] dump_user_range+0x135/0x8c0 [ 1409.071499][T24466] ? __pfx_dump_user_range+0x10/0x10 [ 1409.071532][T24466] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 1409.071569][T24466] ? __pfx_writenote+0x10/0x10 [ 1409.071610][T24466] elf_core_dump+0x2787/0x3880 [ 1409.071659][T24466] ? __pfx_elf_core_dump+0x10/0x10 [ 1409.071690][T24466] ? kasan_save_stack+0x42/0x60 [ 1409.071712][T24466] ? kasan_save_stack+0x33/0x60 [ 1409.071734][T24466] ? kasan_save_track+0x14/0x30 [ 1409.071755][T24466] ? __kasan_kmalloc+0xaa/0xb0 [ 1409.071778][T24466] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 1409.071800][T24466] ? do_coredump+0x1764/0x45d0 [ 1409.071827][T24466] ? get_signal+0x23f3/0x2610 [ 1409.071878][T24466] ? mas_ascend+0x519/0x930 [ 1409.071935][T24466] ? rcu_is_watching+0x12/0xc0 [ 1409.071967][T24466] ? trace_lock_acquire+0x14e/0x1f0 [ 1409.071988][T24466] ? __pfx_sort+0x10/0x10 [ 1409.072016][T24466] ? get_signal+0x23f3/0x2610 [ 1409.072057][T24466] ? do_coredump+0x304f/0x45d0 [ 1409.072086][T24466] do_coredump+0x304f/0x45d0 [ 1409.072129][T24466] ? __pfx_do_coredump+0x10/0x10 [ 1409.072157][T24466] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 1409.072254][T24466] get_signal+0x23f3/0x2610 [ 1409.072296][T24466] ? __pfx_get_signal+0x10/0x10 [ 1409.072326][T24466] ? rcu_is_watching+0x12/0xc0 [ 1409.072357][T24466] ? trace_irq_disable.constprop.0+0xea/0x140 [ 1409.072391][T24466] arch_do_signal_or_restart+0x90/0x7e0 [ 1409.072417][T24466] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1409.072451][T24466] ? do_user_addr_fault+0xa4b/0x13f0 [ 1409.072488][T24466] irqentry_exit_to_user_mode+0x13f/0x280 [ 1409.072522][T24466] asm_exc_page_fault+0x26/0x30 [ 1409.072551][T24466] RIP: 0033:0x401000 [ 1409.072568][T24466] Code: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 <00> 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 1409.072588][T24466] RSP: 002b:000000000000000a EFLAGS: 00010202 [ 1409.072606][T24466] RAX: 0000000000000000 RBX: 00007fd8cdba5fa0 RCX: 00007fd8cd98cde9 [ 1409.072620][T24466] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000020003b46 [ 1409.072633][T24466] RBP: 00007fd8cda0e2a0 R08: 0000000000000002 R09: 0000000000000000 [ 1409.072646][T24466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1409.072659][T24466] R13: 0000000000000000 R14: 00007fd8cdba5fa0 R15: 00007ffe2d364a88 [ 1409.072689][T24466] [ 1409.916276][T24472] FAULT_INJECTION: forcing a failure. [ 1409.916276][T24472] name fail_futex, interval 1, probability 0, space 0, times 0 [ 1410.047988][T24472] CPU: 1 UID: 0 PID: 24472 Comm: syz.1.3599 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1410.048029][T24472] Tainted: [U]=USER [ 1410.048037][T24472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1410.048050][T24472] Call Trace: [ 1410.048056][T24472] [ 1410.048066][T24472] dump_stack_lvl+0x16c/0x1f0 [ 1410.048123][T24472] should_fail_ex+0x50a/0x650 [ 1410.048155][T24472] get_futex_key+0x4a3/0x1000 [ 1410.048195][T24472] ? __pfx_get_futex_key+0x10/0x10 [ 1410.048239][T24472] futex_wake+0xe8/0x4e0 [ 1410.048261][T24472] ? __pfx___lock_acquire+0x10/0x10 [ 1410.048286][T24472] ? lockdep_init_map_type+0x16d/0x7d0 [ 1410.048317][T24472] ? __pfx_futex_wake+0x10/0x10 [ 1410.048346][T24472] ? lock_acquire.part.0+0x11b/0x380 [ 1410.048372][T24472] ? find_held_lock+0x2d/0x110 [ 1410.048409][T24472] do_futex+0x1e5/0x350 [ 1410.048430][T24472] ? __pfx_do_futex+0x10/0x10 [ 1410.048458][T24472] __x64_sys_futex+0x1e1/0x4c0 [ 1410.048482][T24472] ? __sys_socket+0xad/0x260 [ 1410.048509][T24472] ? __pfx___x64_sys_futex+0x10/0x10 [ 1410.048532][T24472] ? rcu_is_watching+0x12/0xc0 [ 1410.048570][T24472] do_syscall_64+0xcd/0x250 [ 1410.048593][T24472] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.048620][T24472] RIP: 0033:0x7fe47fb8cde9 [ 1410.048636][T24472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1410.048657][T24472] RSP: 002b:00007fe4809d50e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1410.048680][T24472] RAX: ffffffffffffffda RBX: 00007fe47fda6088 RCX: 00007fe47fb8cde9 [ 1410.048697][T24472] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fe47fda608c [ 1410.048713][T24472] RBP: 00007fe47fda6080 R08: 00007fe4809f7000 R09: 0000000000000000 [ 1410.048728][T24472] R10: 0000000000000002 R11: 0000000000000246 R12: 00007fe47fda608c [ 1410.048741][T24472] R13: 0000000000000000 R14: 00007ffe0a33fdc0 R15: 00007ffe0a33fea8 [ 1410.048765][T24472] [ 1410.349336][T24477] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1410.366223][T24477] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1411.168643][T24459] delete_channel: no stack [ 1412.494753][T24511] FAULT_INJECTION: forcing a failure. [ 1412.494753][T24511] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1412.521362][T24511] CPU: 1 UID: 0 PID: 24511 Comm: syz.3.3611 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1412.521401][T24511] Tainted: [U]=USER [ 1412.521407][T24511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1412.521420][T24511] Call Trace: [ 1412.521426][T24511] [ 1412.521435][T24511] dump_stack_lvl+0x16c/0x1f0 [ 1412.521475][T24511] should_fail_ex+0x50a/0x650 [ 1412.521507][T24511] _copy_from_user+0x2e/0xd0 [ 1412.521538][T24511] set_selection_user+0x84/0x150 [ 1412.521568][T24511] ? __pfx_set_selection_user+0x10/0x10 [ 1412.521597][T24511] ? get_user_pages_remote+0x8f0/0xb30 [ 1412.521622][T24511] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1412.521653][T24511] tioclinux+0x36d/0x5d0 [ 1412.521686][T24511] vt_ioctl+0x1fc2/0x2fd0 [ 1412.521716][T24511] ? __pfx_vt_ioctl+0x10/0x10 [ 1412.521742][T24511] ? tomoyo_path_number_perm+0x46d/0x5b0 [ 1412.521772][T24511] ? tomoyo_path_number_perm+0x190/0x5b0 [ 1412.521798][T24511] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1412.521821][T24511] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1412.521851][T24511] ? do_vfs_ioctl+0x513/0x1950 [ 1412.521888][T24511] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1412.521918][T24511] ? tty_jobctrl_ioctl+0x152/0xe00 [ 1412.521944][T24511] ? __pfx_vt_ioctl+0x10/0x10 [ 1412.521971][T24511] tty_ioctl+0x651/0x1640 [ 1412.522005][T24511] ? __pfx_tty_ioctl+0x10/0x10 [ 1412.522046][T24511] ? fd_install+0x242/0x750 [ 1412.522084][T24511] ? __pfx_tty_ioctl+0x10/0x10 [ 1412.522116][T24511] __x64_sys_ioctl+0x190/0x200 [ 1412.522151][T24511] do_syscall_64+0xcd/0x250 [ 1412.522174][T24511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1412.522205][T24511] RIP: 0033:0x7fd8cd98cde9 [ 1412.522223][T24511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1412.522245][T24511] RSP: 002b:00007fd8ce8b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1412.522267][T24511] RAX: ffffffffffffffda RBX: 00007fd8cdba5fa0 RCX: 00007fd8cd98cde9 [ 1412.522282][T24511] RDX: 0000000000000000 RSI: 000000000000541c RDI: 0000000000000001 [ 1412.522295][T24511] RBP: 00007fd8ce8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1412.522308][T24511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1412.522321][T24511] R13: 0000000000000000 R14: 00007fd8cdba5fa0 R15: 00007ffe2d364a88 [ 1412.522350][T24511] [ 1414.117716][T24528] QAT: Stopping all acceleration devices. [ 1416.847218][T24561] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3626'. [ 1417.069413][T24566] QAT: Stopping all acceleration devices. [ 1417.444871][T24570] FAULT_INJECTION: forcing a failure. [ 1417.444871][T24570] name failslab, interval 1, probability 0, space 0, times 0 [ 1417.458158][T24570] CPU: 1 UID: 0 PID: 24570 Comm: syz.0.3628 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1417.458194][T24570] Tainted: [U]=USER [ 1417.458200][T24570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1417.458214][T24570] Call Trace: [ 1417.458222][T24570] [ 1417.458231][T24570] dump_stack_lvl+0x16c/0x1f0 [ 1417.458270][T24570] should_fail_ex+0x50a/0x650 [ 1417.458304][T24570] should_failslab+0xc2/0x120 [ 1417.458333][T24570] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1417.458359][T24570] ? trace_lock_acquire+0x14e/0x1f0 [ 1417.458381][T24570] ? skb_clone+0x190/0x3f0 [ 1417.458412][T24570] skb_clone+0x190/0x3f0 [ 1417.458438][T24570] dev_queue_xmit_nit+0x38f/0xbc0 [ 1417.458474][T24570] dev_hard_start_xmit+0x283/0x7b0 [ 1417.458513][T24570] __dev_queue_xmit+0x7f0/0x43e0 [ 1417.458560][T24570] ? __pfx___dev_queue_xmit+0x10/0x10 [ 1417.458620][T24570] ? rcu_is_watching+0x12/0xc0 [ 1417.458652][T24570] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 1417.458685][T24570] ? __copy_skb_header+0x2e8/0x5b0 [ 1417.458721][T24570] ? __skb_clone+0x570/0x760 [ 1417.458763][T24570] netlink_deliver_tap+0xa61/0xca0 [ 1417.458802][T24570] netlink_unicast+0x5e1/0x7f0 [ 1417.458837][T24570] ? __pfx_netlink_unicast+0x10/0x10 [ 1417.458870][T24570] ? __phys_addr_symbol+0x30/0x80 [ 1417.458903][T24570] ? __check_object_size+0x488/0x710 [ 1417.458937][T24570] netlink_sendmsg+0x8b8/0xd70 [ 1417.458981][T24570] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1417.459027][T24570] ____sys_sendmsg+0x9ae/0xb40 [ 1417.459059][T24570] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1417.459107][T24570] ___sys_sendmsg+0x135/0x1e0 [ 1417.459134][T24570] ? __pfx____sys_sendmsg+0x10/0x10 [ 1417.459175][T24570] ? trace_lock_acquire+0x14e/0x1f0 [ 1417.459211][T24570] ? __pfx_lock_release+0x10/0x10 [ 1417.459237][T24570] ? proc_fail_nth_write+0xa0/0x250 [ 1417.459267][T24570] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 1417.459304][T24570] __sys_sendmmsg+0x201/0x420 [ 1417.459333][T24570] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1417.459368][T24570] ? do_sys_openat2+0xb1/0x1e0 [ 1417.459397][T24570] ? __pfx_do_sys_openat2+0x10/0x10 [ 1417.459445][T24570] ? ksys_write+0x1ba/0x250 [ 1417.459468][T24570] ? __pfx_ksys_write+0x10/0x10 [ 1417.459498][T24570] __x64_sys_sendmmsg+0x9c/0x100 [ 1417.459522][T24570] ? lockdep_hardirqs_on+0x7c/0x110 [ 1417.459555][T24570] do_syscall_64+0xcd/0x250 [ 1417.459579][T24570] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1417.459610][T24570] RIP: 0033:0x7f505738cde9 [ 1417.459628][T24570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1417.459650][T24570] RSP: 002b:00007f50551f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1417.459672][T24570] RAX: ffffffffffffffda RBX: 00007f50575a5fa0 RCX: 00007f505738cde9 [ 1417.459687][T24570] RDX: 0000000000000007 RSI: 0000400000000200 RDI: 0000000000000000 [ 1417.459701][T24570] RBP: 00007f50551f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1417.459715][T24570] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 1417.459728][T24570] R13: 0000000000000000 R14: 00007f50575a5fa0 R15: 00007ffc4437b058 [ 1417.459762][T24570] [ 1417.838157][T24570] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3628'. [ 1421.092460][T24627] QAT: Stopping all acceleration devices. [ 1423.501626][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.508707][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 1423.704243][T24665] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 1423.724420][T24665] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 1423.782157][T24663] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3654'. [ 1423.954438][T24677] FAULT_INJECTION: forcing a failure. [ 1423.954438][T24677] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1423.973382][T24677] CPU: 0 UID: 0 PID: 24677 Comm: syz.2.3657 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1423.973423][T24677] Tainted: [U]=USER [ 1423.973431][T24677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1423.973444][T24677] Call Trace: [ 1423.973451][T24677] [ 1423.973461][T24677] dump_stack_lvl+0x16c/0x1f0 [ 1423.973501][T24677] should_fail_ex+0x50a/0x650 [ 1423.973528][T24677] ? __pfx___might_resched+0x10/0x10 [ 1423.973562][T24677] should_fail_alloc_page+0xe7/0x130 [ 1423.973594][T24677] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1423.973636][T24677] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 1423.973666][T24677] ? hlock_class+0x4e/0x130 [ 1423.973699][T24677] ? mark_lock+0xb5/0xc60 [ 1423.973728][T24677] ? __pfx_mark_lock+0x10/0x10 [ 1423.973758][T24677] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1423.973787][T24677] ? hlock_class+0x4e/0x130 [ 1423.973819][T24677] ? mark_lock+0xb5/0xc60 [ 1423.973844][T24677] ? hlock_class+0x4e/0x130 [ 1423.973883][T24677] ? hlock_class+0x4e/0x130 [ 1423.973914][T24677] ? __lock_acquire+0xcc5/0x3c40 [ 1423.973941][T24677] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1423.973973][T24677] ? policy_nodemask+0xea/0x4e0 [ 1423.974005][T24677] alloc_pages_mpol+0x1fc/0x540 [ 1423.974035][T24677] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1423.974064][T24677] ? __lock_acquire+0x15a9/0x3c40 [ 1423.974097][T24677] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1423.974131][T24677] vma_alloc_folio_noprof+0xee/0x1b0 [ 1423.974162][T24677] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1423.974193][T24677] ? find_held_lock+0x2d/0x110 [ 1423.974240][T24677] do_pte_missing+0x202f/0x3e10 [ 1423.974278][T24677] __handle_mm_fault+0x1166/0x2c60 [ 1423.974313][T24677] ? __pfx___handle_mm_fault+0x10/0x10 [ 1423.974337][T24677] ? follow_page_pte+0x3ac/0x1490 [ 1423.974364][T24677] ? __pfx_lock_release+0x10/0x10 [ 1423.974416][T24677] handle_mm_fault+0x3fa/0xaa0 [ 1423.974449][T24677] __get_user_pages+0x773/0x36f0 [ 1423.974482][T24677] ? __pfx_mt_find+0x10/0x10 [ 1423.974514][T24677] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1423.974542][T24677] ? __pfx___get_user_pages+0x10/0x10 [ 1423.974570][T24677] ? __mm_populate+0x21d/0x380 [ 1423.974602][T24677] populate_vma_page_range+0x27f/0x3a0 [ 1423.974630][T24677] ? __pfx_populate_vma_page_range+0x10/0x10 [ 1423.974655][T24677] ? __pfx_find_vma_intersection+0x10/0x10 [ 1423.974692][T24677] ? vm_mmap_pgoff+0x29b/0x3a0 [ 1423.974721][T24677] __mm_populate+0x1d6/0x380 [ 1423.974748][T24677] ? __pfx___mm_populate+0x10/0x10 [ 1423.974778][T24677] ? up_write+0x1b2/0x520 [ 1423.974811][T24677] vm_mmap_pgoff+0x2d3/0x3a0 [ 1423.974840][T24677] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 1423.974869][T24677] ? __x64_sys_futex+0x1e1/0x4c0 [ 1423.974891][T24677] ? __x64_sys_futex+0x1ea/0x4c0 [ 1423.974920][T24677] ksys_mmap_pgoff+0x7d/0x5c0 [ 1423.974953][T24677] ? rcu_is_watching+0x12/0xc0 [ 1423.974989][T24677] __x64_sys_mmap+0x125/0x190 [ 1423.975025][T24677] do_syscall_64+0xcd/0x250 [ 1423.975050][T24677] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1423.975080][T24677] RIP: 0033:0x7facb1b8cde9 [ 1423.975099][T24677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1423.975121][T24677] RSP: 002b:00007facb290d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 1423.975143][T24677] RAX: ffffffffffffffda RBX: 00007facb1da6080 RCX: 00007facb1b8cde9 [ 1423.975159][T24677] RDX: 00000000000000df RSI: 0000000000040009 RDI: 0000000000000000 [ 1423.975173][T24677] RBP: 00007facb1c0e2a0 R08: 0000000000000007 R09: 0000000000028000 [ 1423.975187][T24677] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 1423.975201][T24677] R13: 0000000000000000 R14: 00007facb1da6080 R15: 00007ffcc937c098 [ 1423.975238][T24677] [ 1424.342366][ C0] vkms_vblank_simulate: vblank timer overrun [ 1424.867684][T24683] FAULT_INJECTION: forcing a failure. [ 1424.867684][T24683] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1424.958047][T24683] CPU: 0 UID: 0 PID: 24683 Comm: syz.2.3658 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1424.958085][T24683] Tainted: [U]=USER [ 1424.958093][T24683] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1424.958107][T24683] Call Trace: [ 1424.958114][T24683] [ 1424.958122][T24683] dump_stack_lvl+0x16c/0x1f0 [ 1424.958163][T24683] should_fail_ex+0x50a/0x650 [ 1424.958194][T24683] _copy_from_iter+0x29b/0x1400 [ 1424.958230][T24683] ? _copy_from_iter+0x159/0x1400 [ 1424.958262][T24683] ? __pfx__copy_from_iter+0x10/0x10 [ 1424.958295][T24683] ? __pfx__copy_from_iter+0x10/0x10 [ 1424.958324][T24683] ? __virt_addr_valid+0x1a4/0x590 [ 1424.958354][T24683] copy_page_from_iter+0xa5/0x120 [ 1424.958386][T24683] skb_copy_datagram_from_iter+0x29b/0x710 [ 1424.958428][T24683] tun_get_user+0x197f/0x3e40 [ 1424.958471][T24683] ? __pfx_tun_get_user+0x10/0x10 [ 1424.958497][T24683] ? find_held_lock+0x2d/0x110 [ 1424.958536][T24683] ? __pfx_lock_release+0x10/0x10 [ 1424.958578][T24683] tun_chr_write_iter+0xdc/0x210 [ 1424.958609][T24683] vfs_write+0x5ae/0x1150 [ 1424.958633][T24683] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 1424.958662][T24683] ? __pfx_lock_release+0x10/0x10 [ 1424.958688][T24683] ? __pfx_vfs_write+0x10/0x10 [ 1424.958714][T24683] ? lock_acquire+0x2f/0xb0 [ 1424.958738][T24683] ? __fget_files+0x40/0x3a0 [ 1424.958780][T24683] __x64_sys_pwrite64+0x1f6/0x250 [ 1424.958805][T24683] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 1424.958838][T24683] do_syscall_64+0xcd/0x250 [ 1424.958862][T24683] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1424.958893][T24683] RIP: 0033:0x7facb1b8cde9 [ 1424.958912][T24683] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1424.958933][T24683] RSP: 002b:00007facb292e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 1424.958954][T24683] RAX: ffffffffffffffda RBX: 00007facb1da5fa0 RCX: 00007facb1b8cde9 [ 1424.958969][T24683] RDX: 000000000000fdf2 RSI: 0000400000000040 RDI: 00000000000000c8 [ 1424.958984][T24683] RBP: 00007facb292e090 R08: 0000000000000000 R09: 0000000000000000 [ 1424.958997][T24683] R10: 000000000000003a R11: 0000000000000246 R12: 0000000000000002 [ 1424.959017][T24683] R13: 0000000000000000 R14: 00007facb1da5fa0 R15: 00007ffcc937c098 [ 1424.959048][T24683] [ 1426.600357][T24704] QAT: Stopping all acceleration devices. [ 1427.929459][T24728] nbd2: detected capacity change from 0 to 68719476736 [ 1427.979355][T24369] block nbd2: Send control failed (result -22) [ 1428.007426][T24369] block nbd2: Request send failed, requeueing [ 1428.038163][T19898] block nbd2: Dead connection, failed to find a fallback [ 1428.045258][T19898] block nbd2: shutting down sockets [ 1428.052548][T19898] blk_print_req_error: 24 callbacks suppressed [ 1428.052565][T19898] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1428.069303][T19898] buffer_io_error: 23 callbacks suppressed [ 1428.069322][T19898] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1428.086337][T24369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1428.101337][T24369] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1428.109729][T24369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1428.120110][T24369] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1428.128256][T24369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1428.137419][T24369] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1428.145595][T24369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1428.154992][T24369] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1428.163151][T24369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1428.176219][T24730] mkiss: ax0: crc mode is auto. [ 1428.176823][T24369] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1428.189987][T24369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1428.201642][T24369] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1428.209891][T24369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1428.220314][T24369] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1428.228433][T24369] ldm_validate_partition_table(): Disk read failed. [ 1428.235279][T24369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1428.265938][T24369] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1428.303017][T24369] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1428.328057][T24369] Buffer I/O error on dev nbd2, logical block 0, async page read [ 1428.358251][T24369] Dev nbd2: unable to read RDB block 0 [ 1428.364203][T24369] nbd2: unable to read partition table [ 1428.401014][T24369] ldm_validate_partition_table(): Disk read failed. [ 1428.418515][T24369] Dev nbd2: unable to read RDB block 0 [ 1428.425299][T24369] nbd2: unable to read partition table [ 1428.609212][T24743] QAT: Stopping all acceleration devices. [ 1429.054687][T24748] FAULT_INJECTION: forcing a failure. [ 1429.054687][T24748] name failslab, interval 1, probability 0, space 0, times 0 [ 1429.092479][T24748] CPU: 0 UID: 0 PID: 24748 Comm: syz.2.3680 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1429.092519][T24748] Tainted: [U]=USER [ 1429.092526][T24748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1429.092539][T24748] Call Trace: [ 1429.092545][T24748] [ 1429.092555][T24748] dump_stack_lvl+0x16c/0x1f0 [ 1429.092594][T24748] should_fail_ex+0x50a/0x650 [ 1429.092620][T24748] ? fs_reclaim_acquire+0xae/0x150 [ 1429.092659][T24748] should_failslab+0xc2/0x120 [ 1429.092687][T24748] __kmalloc_node_noprof+0xd1/0x520 [ 1429.092714][T24748] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 1429.092744][T24748] __kvmalloc_node_noprof+0xad/0x1a0 [ 1429.092769][T24748] seq_read_iter+0x82a/0x12b0 [ 1429.092816][T24748] seq_read+0x39f/0x4e0 [ 1429.092849][T24748] ? __pfx_seq_read+0x10/0x10 [ 1429.092900][T24748] ? rw_verify_area+0xcf/0x680 [ 1429.092932][T24748] ? __pfx_seq_read+0x10/0x10 [ 1429.092966][T24748] vfs_read+0x1df/0xbf0 [ 1429.092989][T24748] ? __fget_files+0x1fc/0x3a0 [ 1429.093013][T24748] ? __pfx___mutex_lock+0x10/0x10 [ 1429.093047][T24748] ? __pfx_vfs_read+0x10/0x10 [ 1429.093079][T24748] ? __fget_files+0x206/0x3a0 [ 1429.093114][T24748] ksys_read+0x12b/0x250 [ 1429.093136][T24748] ? __pfx_ksys_read+0x10/0x10 [ 1429.093169][T24748] do_syscall_64+0xcd/0x250 [ 1429.093193][T24748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1429.093224][T24748] RIP: 0033:0x7facb1b8cde9 [ 1429.093242][T24748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1429.093263][T24748] RSP: 002b:00007facb292e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1429.093284][T24748] RAX: ffffffffffffffda RBX: 00007facb1da5fa0 RCX: 00007facb1b8cde9 [ 1429.093299][T24748] RDX: 0000000000400000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1429.093313][T24748] RBP: 00007facb292e090 R08: 0000000000000000 R09: 0000000000000000 [ 1429.093326][T24748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1429.093339][T24748] R13: 0000000000000000 R14: 00007facb1da5fa0 R15: 00007ffcc937c098 [ 1429.093370][T24748] [ 1431.366115][T24799] netlink: 334 bytes leftover after parsing attributes in process `syz.2.3697'. [ 1432.417181][T24816] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 1433.262083][T24821] Process accounting paused [ 1433.405439][T24837] QAT: Stopping all acceleration devices. [ 1435.108896][T24849] nbd0: detected capacity change from 0 to 68719476736 [ 1435.117450][T24369] block nbd0: Send control failed (result -22) [ 1435.140176][T24369] block nbd0: Request send failed, requeueing [ 1435.177154][ T5967] block nbd0: Dead connection, failed to find a fallback [ 1435.185358][ T5967] block nbd0: shutting down sockets [ 1435.191303][ T5967] blk_print_req_error: 24 callbacks suppressed [ 1435.191321][ T5967] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1435.206816][ T5967] buffer_io_error: 23 callbacks suppressed [ 1435.206834][ T5967] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1435.221023][T24369] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1435.244812][T24369] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1435.253005][T24369] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1435.263066][T24369] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1435.271061][T24369] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1435.280317][T24369] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1435.289367][T24369] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1435.298561][T24369] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1435.306475][T24369] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1435.315691][T24369] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1435.323692][T24369] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1435.332916][T24369] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1435.340927][T24369] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1435.350130][T24369] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1435.358569][T24369] ldm_validate_partition_table(): Disk read failed. [ 1435.365411][T24369] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1435.374669][T24369] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1435.382750][T24369] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1435.393289][T24369] Buffer I/O error on dev nbd0, logical block 0, async page read [ 1435.428368][T24369] Dev nbd0: unable to read RDB block 0 [ 1435.446328][T24369] nbd0: unable to read partition table [ 1435.461242][T24369] ldm_validate_partition_table(): Disk read failed. [ 1435.478412][T24369] Dev nbd0: unable to read RDB block 0 [ 1435.500651][T24369] nbd0: unable to read partition table [ 1435.793367][T24866] QAT: Stopping all acceleration devices. [ 1436.297770][T24869] nvme_fabrics: unknown parameter or missing value '7' in ctrl creation request [ 1436.969408][T24884] FAULT_INJECTION: forcing a failure. [ 1436.969408][T24884] name failslab, interval 1, probability 0, space 0, times 0 [ 1436.982130][T24884] CPU: 0 UID: 0 PID: 24884 Comm: syz.0.3722 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1436.982169][T24884] Tainted: [U]=USER [ 1436.982178][T24884] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1436.982193][T24884] Call Trace: [ 1436.982201][T24884] [ 1436.982212][T24884] dump_stack_lvl+0x16c/0x1f0 [ 1436.982255][T24884] should_fail_ex+0x50a/0x650 [ 1436.982285][T24884] ? fs_reclaim_acquire+0xae/0x150 [ 1436.982324][T24884] should_failslab+0xc2/0x120 [ 1436.982356][T24884] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1436.982385][T24884] ? getname_flags.part.0+0x4c/0x550 [ 1436.982422][T24884] getname_flags.part.0+0x4c/0x550 [ 1436.982457][T24884] getname+0x8d/0xe0 [ 1436.982479][T24884] do_sys_openat2+0x104/0x1e0 [ 1436.982511][T24884] ? __pfx_do_sys_openat2+0x10/0x10 [ 1436.982546][T24884] ? __pfx___might_resched+0x10/0x10 [ 1436.982585][T24884] __x64_sys_openat+0x175/0x210 [ 1436.982617][T24884] ? __pfx___x64_sys_openat+0x10/0x10 [ 1436.982662][T24884] do_syscall_64+0xcd/0x250 [ 1436.982693][T24884] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.982727][T24884] RIP: 0033:0x7f505738cde9 [ 1436.982747][T24884] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1436.982771][T24884] RSP: 002b:00007f50551f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 1436.982794][T24884] RAX: ffffffffffffffda RBX: 00007f50575a5fa0 RCX: 00007f505738cde9 [ 1436.982810][T24884] RDX: 0000000000000000 RSI: 0000400000000200 RDI: ffffffffffffff9c [ 1436.982826][T24884] RBP: 00007f505740e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1436.982842][T24884] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1436.982857][T24884] R13: 0000000000000000 R14: 00007f50575a5fa0 R15: 00007ffc4437b058 [ 1436.982889][T24884] [ 1437.849290][T24896] nbd4: detected capacity change from 0 to 68719476736 [ 1437.871325][T24369] block nbd4: Send control failed (result -22) [ 1437.877543][T24369] block nbd4: Request send failed, requeueing [ 1437.902270][ T54] block nbd4: Receive control failed (result -32) [ 1437.902386][T19898] block nbd4: Dead connection, failed to find a fallback [ 1437.916192][T19898] block nbd4: shutting down sockets [ 1437.928130][T24369] ldm_validate_partition_table(): Disk read failed. [ 1437.935161][T24369] Dev nbd4: unable to read RDB block 0 [ 1437.970240][T24369] nbd4: unable to read partition table [ 1438.003392][T24369] ldm_validate_partition_table(): Disk read failed. [ 1438.026491][T24369] Dev nbd4: unable to read RDB block 0 [ 1438.063792][T24369] nbd4: unable to read partition table [ 1438.495608][T24910] Invalid ELF header magic: != ELF [ 1439.539897][T24925] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3734'. [ 1439.865152][T24929] FAULT_INJECTION: forcing a failure. [ 1439.865152][T24929] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1439.908132][T24932] nbd5: detected capacity change from 0 to 68719476736 [ 1439.909160][T24929] CPU: 0 UID: 0 PID: 24929 Comm: syz.3.3736 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1439.909195][T24929] Tainted: [U]=USER [ 1439.909203][T24929] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1439.909216][T24929] Call Trace: [ 1439.909223][T24929] [ 1439.909232][T24929] dump_stack_lvl+0x16c/0x1f0 [ 1439.909271][T24929] should_fail_ex+0x50a/0x650 [ 1439.909302][T24929] _copy_from_iter+0x4a5/0x1400 [ 1439.909339][T24929] ? __pfx__copy_from_iter+0x10/0x10 [ 1439.909371][T24929] ? __pfx__copy_from_iter+0x10/0x10 [ 1439.909399][T24929] ? __virt_addr_valid+0x1a4/0x590 [ 1439.909428][T24929] copy_page_from_iter+0xa5/0x120 [ 1439.909462][T24929] skb_copy_datagram_from_iter+0x29b/0x710 [ 1439.909505][T24929] packet_sendmsg+0x220f/0x56c0 [ 1439.909547][T24929] ? __pfx___might_resched+0x10/0x10 [ 1439.909575][T24929] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1439.909609][T24929] ? __pfx_packet_sendmsg+0x10/0x10 [ 1439.909635][T24929] ? aa_label_xaudit+0x2b0/0x570 [ 1439.909667][T24929] ? __might_fault+0xe3/0x190 [ 1439.909695][T24929] ? __might_fault+0xe3/0x190 [ 1439.909731][T24929] ____sys_sendmsg+0x9ae/0xb40 [ 1439.909761][T24929] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1439.909788][T24929] ? __lock_acquire+0xcc5/0x3c40 [ 1439.909827][T24929] ___sys_sendmsg+0x135/0x1e0 [ 1439.909853][T24929] ? __pfx____sys_sendmsg+0x10/0x10 [ 1439.909889][T24929] ? trace_lock_acquire+0x14e/0x1f0 [ 1439.909930][T24929] __sys_sendmmsg+0x201/0x420 [ 1439.909957][T24929] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1439.909990][T24929] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1439.910035][T24929] ? fput+0x67/0x440 [ 1439.910061][T24929] ? ksys_write+0x1ba/0x250 [ 1439.910082][T24929] ? __pfx_ksys_write+0x10/0x10 [ 1439.910114][T24929] __x64_sys_sendmmsg+0x9c/0x100 [ 1439.910137][T24929] ? lockdep_hardirqs_on+0x7c/0x110 [ 1439.910168][T24929] do_syscall_64+0xcd/0x250 [ 1439.910191][T24929] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1439.910219][T24929] RIP: 0033:0x7fd8cd98cde9 [ 1439.910237][T24929] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1439.910258][T24929] RSP: 002b:00007fd8ce8b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1439.910279][T24929] RAX: ffffffffffffffda RBX: 00007fd8cdba5fa0 RCX: 00007fd8cd98cde9 [ 1439.910294][T24929] RDX: 0000000000000002 RSI: 00004000000001c0 RDI: 0000000000000003 [ 1439.910308][T24929] RBP: 00007fd8ce8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1439.910320][T24929] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000002 [ 1439.910334][T24929] R13: 0000000000000000 R14: 00007fd8cdba5fa0 R15: 00007ffe2d364a88 [ 1439.910363][T24929] [ 1440.193550][T24369] block nbd5: Send control failed (result -22) [ 1440.201089][T24369] block nbd5: Request send failed, requeueing [ 1440.210539][ T54] block nbd5: Receive control failed (result -32) [ 1440.211509][ T5967] block nbd5: Dead connection, failed to find a fallback [ 1440.224799][ T5967] block nbd5: shutting down sockets [ 1440.230396][ T5967] blk_print_req_error: 58 callbacks suppressed [ 1440.230412][ T5967] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1440.246326][ T5967] buffer_io_error: 56 callbacks suppressed [ 1440.246342][ T5967] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1440.260230][T24369] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1440.269401][T24369] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1440.277936][T24369] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1440.287040][T24369] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1440.295334][T24369] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1440.306228][T24369] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1440.314291][T24369] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1440.323434][T24369] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1440.331451][T24369] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1440.340575][T24369] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1440.348633][T24369] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1440.357706][T24369] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1440.365726][T24369] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1440.375579][T24369] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1440.383556][T24369] ldm_validate_partition_table(): Disk read failed. [ 1440.390409][T24369] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1440.399716][T24369] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1440.408591][T24369] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 1440.417703][T24369] Buffer I/O error on dev nbd5, logical block 0, async page read [ 1440.426471][T24369] Dev nbd5: unable to read RDB block 0 [ 1440.438427][T24369] nbd5: unable to read partition table [ 1440.449069][T24369] ldm_validate_partition_table(): Disk read failed. [ 1440.456048][T24369] Dev nbd5: unable to read RDB block 0 [ 1440.468416][T24369] nbd5: unable to read partition table [ 1442.176381][T24973] QAT: Stopping all acceleration devices. [ 1442.772469][T24979] QAT: Stopping all acceleration devices. [ 1443.017484][T24976] bond0: option all_slaves_active: invalid value () [ 1443.154227][T24976] openvswitch: netlink: IP tunnel TTL not specified. [ 1444.227304][T24987] FAULT_INJECTION: forcing a failure. [ 1444.227304][T24987] name failslab, interval 1, probability 0, space 0, times 0 [ 1444.262662][T24987] CPU: 1 UID: 0 PID: 24987 Comm: syz.3.3752 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1444.262706][T24987] Tainted: [U]=USER [ 1444.262714][T24987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1444.262729][T24987] Call Trace: [ 1444.262737][T24987] [ 1444.262747][T24987] dump_stack_lvl+0x16c/0x1f0 [ 1444.262792][T24987] should_fail_ex+0x50a/0x650 [ 1444.262822][T24987] ? fs_reclaim_acquire+0xae/0x150 [ 1444.262864][T24987] should_failslab+0xc2/0x120 [ 1444.262896][T24987] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 1444.262925][T24987] ? acpi_os_release_object+0x1c/0x30 [ 1444.262952][T24987] ? acpi_ps_alloc_op+0x25f/0x310 [ 1444.262993][T24987] acpi_ps_alloc_op+0x25f/0x310 [ 1444.263028][T24987] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1444.263062][T24987] acpi_ps_get_next_arg+0x4cd/0x14d0 [ 1444.263098][T24987] ? acpi_ps_complete_op+0x61f/0xbb0 [ 1444.263136][T24987] acpi_ps_parse_loop+0x621/0x1ce0 [ 1444.263180][T24987] ? __pfx_acpi_ps_parse_loop+0x10/0x10 [ 1444.263211][T24987] ? acpi_ns_get_normalized_pathname+0x97/0xd0 [ 1444.263239][T24987] ? acpi_ds_call_control_method+0x96/0x6d0 [ 1444.263281][T24987] acpi_ps_parse_aml+0x3c1/0xcb0 [ 1444.263318][T24987] acpi_ps_execute_method+0x55a/0xb30 [ 1444.263343][T24987] ? acpi_ut_acquire_mutex+0x125/0x1d0 [ 1444.263370][T24987] acpi_ns_evaluate+0x76c/0xca0 [ 1444.263393][T24987] ? kasan_save_track+0x14/0x30 [ 1444.263423][T24987] acpi_evaluate_object+0x1fb/0xa90 [ 1444.263461][T24987] ? __lock_acquire+0xcc5/0x3c40 [ 1444.263502][T24987] ? __pfx_acpi_evaluate_object+0x10/0x10 [ 1444.263550][T24987] acpi_evaluate_integer+0xde/0x200 [ 1444.263580][T24987] ? __pfx___lock_acquire+0x10/0x10 [ 1444.263609][T24987] ? __pfx_acpi_evaluate_integer+0x10/0x10 [ 1444.263639][T24987] ? rcu_is_watching+0x12/0xc0 [ 1444.263677][T24987] ? trace_contention_end+0xee/0x140 [ 1444.263722][T24987] ? __pfx_status_show+0x10/0x10 [ 1444.263757][T24987] status_show+0xa1/0x120 [ 1444.263792][T24987] ? __pfx_status_show+0x10/0x10 [ 1444.263838][T24987] dev_attr_show+0x53/0xe0 [ 1444.263871][T24987] ? __pfx_dev_attr_show+0x10/0x10 [ 1444.263902][T24987] sysfs_kf_seq_show+0x223/0x3e0 [ 1444.263944][T24987] seq_read_iter+0x4f4/0x12b0 [ 1444.263997][T24987] kernfs_fop_read_iter+0x414/0x580 [ 1444.264028][T24987] ? rw_verify_area+0xcf/0x680 [ 1444.264067][T24987] vfs_read+0x886/0xbf0 [ 1444.264098][T24987] ? __pfx_vfs_read+0x10/0x10 [ 1444.264148][T24987] ksys_read+0x12b/0x250 [ 1444.264172][T24987] ? __pfx_ksys_read+0x10/0x10 [ 1444.264208][T24987] do_syscall_64+0xcd/0x250 [ 1444.264235][T24987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1444.264269][T24987] RIP: 0033:0x7fd8cd98cde9 [ 1444.264289][T24987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1444.264312][T24987] RSP: 002b:00007fd8ce8b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1444.264336][T24987] RAX: ffffffffffffffda RBX: 00007fd8cdba5fa0 RCX: 00007fd8cd98cde9 [ 1444.264353][T24987] RDX: 0000000000000070 RSI: 0000400000000000 RDI: 000000000000000d [ 1444.264369][T24987] RBP: 00007fd8cda0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1444.264384][T24987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1444.264399][T24987] R13: 0000000000000000 R14: 00007fd8cdba5fa0 R15: 00007ffe2d364a88 [ 1444.264435][T24987] [ 1444.592876][ C1] vkms_vblank_simulate: vblank timer overrun [ 1444.605559][T24987] ACPI Error: Aborting method \_SB.IQST due to previous error (AE_NO_MEMORY) (20240827/psparse-529) [ 1444.620538][T24987] ACPI Error: Aborting method \_SB.LNKA._STA due to previous error (AE_NO_MEMORY) (20240827/psparse-529) [ 1444.836448][T24994] openvswitch: netlink: Key type 123 is out of range max 32 [ 1445.450504][T24999] FAULT_INJECTION: forcing a failure. [ 1445.450504][T24999] name failslab, interval 1, probability 0, space 0, times 0 [ 1445.488438][T24999] CPU: 1 UID: 0 PID: 24999 Comm: syz.1.3758 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1445.488479][T24999] Tainted: [U]=USER [ 1445.488487][T24999] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1445.488502][T24999] Call Trace: [ 1445.488510][T24999] [ 1445.488520][T24999] dump_stack_lvl+0x16c/0x1f0 [ 1445.488564][T24999] should_fail_ex+0x50a/0x650 [ 1445.488608][T24999] ? fs_reclaim_acquire+0xae/0x150 [ 1445.488652][T24999] should_failslab+0xc2/0x120 [ 1445.488684][T24999] kmem_cache_alloc_bulk_noprof+0x85/0xb10 [ 1445.488717][T24999] ? rcu_is_watching+0x12/0xc0 [ 1445.488752][T24999] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 1445.488787][T24999] ? kmem_cache_alloc_noprof+0x21b/0x3b0 [ 1445.488816][T24999] ? mas_alloc_nodes+0x18b/0x880 [ 1445.488853][T24999] ? mas_alloc_nodes+0x2f1/0x880 [ 1445.488885][T24999] mas_alloc_nodes+0x2f1/0x880 [ 1445.488925][T24999] mas_node_count_gfp+0x105/0x130 [ 1445.488962][T24999] mas_preallocate+0x53f/0xce0 [ 1445.488993][T24999] ? __pfx_mas_preallocate+0x10/0x10 [ 1445.489032][T24999] ? anon_vma_name+0x75/0x100 [ 1445.489068][T24999] __split_vma+0x474/0x1210 [ 1445.489100][T24999] ? __pfx___split_vma+0x10/0x10 [ 1445.489133][T24999] ? __pfx_native_flush_tlb_one_user+0x10/0x10 [ 1445.489165][T24999] ? find_held_lock+0x2d/0x110 [ 1445.489205][T24999] vms_gather_munmap_vmas+0x1c3/0x1730 [ 1445.489237][T24999] ? mark_held_locks+0x9f/0xe0 [ 1445.489268][T24999] ? __pfx_vms_gather_munmap_vmas+0x10/0x10 [ 1445.489297][T24999] ? smp_call_function_many_cond+0x3ae/0x12c0 [ 1445.489333][T24999] ? __pfx_flush_tlb_func+0x10/0x10 [ 1445.489356][T24999] ? __pfx_should_flush_tlb+0x10/0x10 [ 1445.489379][T24999] ? page_table_check_set.part.0+0x3b8/0x550 [ 1445.489411][T24999] ? find_held_lock+0x2d/0x110 [ 1445.489445][T24999] ? find_held_lock+0x2d/0x110 [ 1445.489488][T24999] do_vmi_align_munmap+0x27f/0x890 [ 1445.489521][T24999] ? __pfx_flush_tlb_mm_range+0x10/0x10 [ 1445.489548][T24999] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1445.489632][T24999] do_vmi_munmap+0x208/0x3e0 [ 1445.489669][T24999] move_vma+0x8f5/0x1c50 [ 1445.489711][T24999] ? __pfx_move_vma+0x10/0x10 [ 1445.489749][T24999] ? __pfx_mtree_load+0x10/0x10 [ 1445.489790][T24999] ? mm_get_unmapped_area_vmflags+0x97/0xe0 [ 1445.489815][T24999] ? cap_mmap_addr+0x4b/0x120 [ 1445.489850][T24999] ? bpf_lsm_mmap_addr+0x9/0x10 [ 1445.489878][T24999] ? security_mmap_addr+0x6c/0x1e0 [ 1445.489911][T24999] __do_sys_mremap+0x1007/0x1630 [ 1445.489954][T24999] ? __pfx___do_sys_mremap+0x10/0x10 [ 1445.489982][T24999] ? fd_install+0x190/0x750 [ 1445.490012][T24999] ? __x64_sys_futex+0x1e1/0x4c0 [ 1445.490041][T24999] ? xfd_validate_state+0x5d/0x180 [ 1445.490074][T24999] ? rcu_is_watching+0x12/0xc0 [ 1445.490119][T24999] do_syscall_64+0xcd/0x250 [ 1445.490144][T24999] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1445.490177][T24999] RIP: 0033:0x7fe47fb8cde9 [ 1445.490197][T24999] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1445.490220][T24999] RSP: 002b:00007fe4809f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000019 [ 1445.490243][T24999] RAX: ffffffffffffffda RBX: 00007fe47fda5fa0 RCX: 00007fe47fb8cde9 [ 1445.490261][T24999] RDX: 0000000000003fd6 RSI: 000000000000fee0 RDI: 00000000001ff000 [ 1445.490277][T24999] RBP: 00007fe47fc0e2a0 R08: 00000000fffff000 R09: 0000000000000000 [ 1445.490292][T24999] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000000 [ 1445.490308][T24999] R13: 0000000000000000 R14: 00007fe47fda5fa0 R15: 00007ffe0a33fea8 [ 1445.490342][T24999] [ 1445.908110][T25005] zswap: compressor not available [ 1445.942487][T25008] Setting dangerous option i915.request_timeout_ms - tainting kernel [ 1447.043295][T25043] QAT: Stopping all acceleration devices. [ 1447.551762][T25052] FAULT_INJECTION: forcing a failure. [ 1447.551762][T25052] name failslab, interval 1, probability 0, space 0, times 0 [ 1447.599080][T25052] CPU: 0 UID: 0 PID: 25052 Comm: syz.3.3770 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1447.599122][T25052] Tainted: [U]=USER [ 1447.599140][T25052] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1447.599155][T25052] Call Trace: [ 1447.599163][T25052] [ 1447.599174][T25052] dump_stack_lvl+0x16c/0x1f0 [ 1447.599218][T25052] should_fail_ex+0x50a/0x650 [ 1447.599247][T25052] ? fs_reclaim_acquire+0xae/0x150 [ 1447.599282][T25052] ? device_create_groups_vargs+0x8a/0x270 [ 1447.599312][T25052] should_failslab+0xc2/0x120 [ 1447.599340][T25052] __kmalloc_cache_noprof+0x68/0x420 [ 1447.599361][T25052] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1447.599389][T25052] ? __debug_object_init+0x2dd/0x3e0 [ 1447.599424][T25052] device_create_groups_vargs+0x8a/0x270 [ 1447.599455][T25052] device_create+0xe9/0x130 [ 1447.599483][T25052] ? __pfx_device_create+0x10/0x10 [ 1447.599509][T25052] ? rcu_is_watching+0x12/0xc0 [ 1447.599540][T25052] ? do_init_timer+0xc9/0x110 [ 1447.599572][T25052] ? ieee80211_roc_setup+0x136/0x270 [ 1447.599602][T25052] ? ieee80211_alloc_hw_nm+0x231/0x2260 [ 1447.599630][T25052] mac80211_hwsim_new_radio+0x3df/0x56d0 [ 1447.599661][T25052] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.599707][T25052] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 1447.599746][T25052] hwsim_new_radio_nl+0xb42/0x12b0 [ 1447.599780][T25052] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1447.599822][T25052] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 1447.599856][T25052] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 1447.599894][T25052] genl_family_rcv_msg_doit+0x202/0x2f0 [ 1447.599928][T25052] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 1447.599958][T25052] ? trace_cap_capable+0x1a2/0x210 [ 1447.599995][T25052] ? bpf_lsm_capable+0x9/0x10 [ 1447.600021][T25052] ? security_capable+0x7e/0x260 [ 1447.600051][T25052] ? ns_capable+0xd7/0x110 [ 1447.600079][T25052] genl_rcv_msg+0x565/0x800 [ 1447.600101][T25052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1447.600122][T25052] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 1447.600171][T25052] netlink_rcv_skb+0x165/0x410 [ 1447.600202][T25052] ? __pfx_genl_rcv_msg+0x10/0x10 [ 1447.600226][T25052] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 1447.600269][T25052] ? down_read+0xc9/0x330 [ 1447.600289][T25052] ? __pfx_down_read+0x10/0x10 [ 1447.600310][T25052] ? netlink_deliver_tap+0x1ae/0xca0 [ 1447.600341][T25052] genl_rcv+0x28/0x40 [ 1447.600369][T25052] netlink_unicast+0x53c/0x7f0 [ 1447.600401][T25052] ? __pfx_netlink_unicast+0x10/0x10 [ 1447.600431][T25052] ? __phys_addr_symbol+0x30/0x80 [ 1447.600461][T25052] ? __check_object_size+0x488/0x710 [ 1447.600490][T25052] netlink_sendmsg+0x8b8/0xd70 [ 1447.600522][T25052] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1447.600560][T25052] ____sys_sendmsg+0x9ae/0xb40 [ 1447.600587][T25052] ? copy_msghdr_from_user+0x10b/0x160 [ 1447.600609][T25052] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1447.600648][T25052] ___sys_sendmsg+0x135/0x1e0 [ 1447.600671][T25052] ? __pfx____sys_sendmsg+0x10/0x10 [ 1447.600704][T25052] ? __pfx_lock_release+0x10/0x10 [ 1447.600727][T25052] ? trace_lock_acquire+0x14e/0x1f0 [ 1447.600755][T25052] ? __fget_files+0x206/0x3a0 [ 1447.600784][T25052] __sys_sendmsg+0x16e/0x220 [ 1447.600806][T25052] ? __pfx___sys_sendmsg+0x10/0x10 [ 1447.600826][T25052] ? __x64_sys_futex+0x1e1/0x4c0 [ 1447.600864][T25052] do_syscall_64+0xcd/0x250 [ 1447.600885][T25052] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1447.600911][T25052] RIP: 0033:0x7fd8cd98cde9 [ 1447.600929][T25052] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1447.600948][T25052] RSP: 002b:00007fd8ce8b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1447.600967][T25052] RAX: ffffffffffffffda RBX: 00007fd8cdba5fa0 RCX: 00007fd8cd98cde9 [ 1447.600982][T25052] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000007 [ 1447.600995][T25052] RBP: 00007fd8cda0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1447.601008][T25052] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1447.601021][T25052] R13: 0000000000000000 R14: 00007fd8cdba5fa0 R15: 00007ffe2d364a88 [ 1447.601049][T25052] [ 1449.288409][T25082] QAT: Stopping all acceleration devices. [ 1449.644742][T25091] FAULT_INJECTION: forcing a failure. [ 1449.644742][T25091] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1449.677970][T25091] CPU: 1 UID: 0 PID: 25091 Comm: syz.1.3780 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1449.678008][T25091] Tainted: [U]=USER [ 1449.678015][T25091] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1449.678029][T25091] Call Trace: [ 1449.678036][T25091] [ 1449.678046][T25091] dump_stack_lvl+0x16c/0x1f0 [ 1449.678091][T25091] should_fail_ex+0x50a/0x650 [ 1449.678124][T25091] _copy_to_user+0x32/0xd0 [ 1449.678157][T25091] simple_read_from_buffer+0xd0/0x160 [ 1449.678195][T25091] proc_fail_nth_read+0x198/0x270 [ 1449.678227][T25091] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1449.678261][T25091] ? rw_verify_area+0xcf/0x680 [ 1449.678293][T25091] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 1449.678324][T25091] vfs_read+0x1df/0xbf0 [ 1449.678347][T25091] ? __fget_files+0x1fc/0x3a0 [ 1449.678369][T25091] ? __pfx___mutex_lock+0x10/0x10 [ 1449.678403][T25091] ? __pfx_vfs_read+0x10/0x10 [ 1449.678434][T25091] ? __fget_files+0x206/0x3a0 [ 1449.678466][T25091] ksys_read+0x12b/0x250 [ 1449.678487][T25091] ? __pfx_ksys_read+0x10/0x10 [ 1449.678519][T25091] do_syscall_64+0xcd/0x250 [ 1449.678542][T25091] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1449.678573][T25091] RIP: 0033:0x7fe47fb8b7fc [ 1449.678591][T25091] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 1449.678613][T25091] RSP: 002b:00007fe4809f6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1449.678634][T25091] RAX: ffffffffffffffda RBX: 00007fe47fda5fa0 RCX: 00007fe47fb8b7fc [ 1449.678649][T25091] RDX: 000000000000000f RSI: 00007fe4809f60a0 RDI: 0000000000000005 [ 1449.678662][T25091] RBP: 00007fe4809f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1449.678675][T25091] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1449.678687][T25091] R13: 0000000000000000 R14: 00007fe47fda5fa0 R15: 00007ffe0a33fea8 [ 1449.678715][T25091] [ 1450.281227][T25100] openvswitch: netlink: Key type 123 is out of range max 32 [ 1451.121320][T25120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3787'. [ 1451.423742][T25128] QAT: Stopping all acceleration devices. [ 1451.597767][T25132] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3791'. [ 1452.479821][T25147] zswap: compressor not available [ 1452.485989][T25150] Setting dangerous option i915.request_timeout_ms - tainting kernel [ 1452.809950][T25158] FAULT_INJECTION: forcing a failure. [ 1452.809950][T25158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1452.891186][T25158] CPU: 0 UID: 0 PID: 25158 Comm: syz.0.3797 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1452.891224][T25158] Tainted: [U]=USER [ 1452.891232][T25158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1452.891245][T25158] Call Trace: [ 1452.891251][T25158] [ 1452.891261][T25158] dump_stack_lvl+0x16c/0x1f0 [ 1452.891300][T25158] should_fail_ex+0x50a/0x650 [ 1452.891333][T25158] _copy_from_user+0x2e/0xd0 [ 1452.891366][T25158] copy_msghdr_from_user+0x99/0x160 [ 1452.891391][T25158] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1452.891419][T25158] ? hlock_class+0x4e/0x130 [ 1452.891452][T25158] ? __lock_acquire+0x15a9/0x3c40 [ 1452.891486][T25158] ___sys_sendmsg+0xff/0x1e0 [ 1452.891512][T25158] ? __pfx____sys_sendmsg+0x10/0x10 [ 1452.891534][T25158] ? __pfx___lock_acquire+0x10/0x10 [ 1452.891590][T25158] ? __pfx___might_resched+0x10/0x10 [ 1452.891618][T25158] ? __might_fault+0xe3/0x190 [ 1452.891663][T25158] __sys_sendmmsg+0x201/0x420 [ 1452.891691][T25158] ? __pfx___sys_sendmmsg+0x10/0x10 [ 1452.891724][T25158] ? do_sys_openat2+0xb1/0x1e0 [ 1452.891754][T25158] ? __pfx_do_sys_openat2+0x10/0x10 [ 1452.891799][T25158] ? ksys_write+0x1ba/0x250 [ 1452.891822][T25158] ? __pfx_ksys_write+0x10/0x10 [ 1452.891850][T25158] __x64_sys_sendmmsg+0x9c/0x100 [ 1452.891874][T25158] ? lockdep_hardirqs_on+0x7c/0x110 [ 1452.891907][T25158] do_syscall_64+0xcd/0x250 [ 1452.891931][T25158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1452.891962][T25158] RIP: 0033:0x7f505738cde9 [ 1452.891981][T25158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1452.892003][T25158] RSP: 002b:00007f50551f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 1452.892025][T25158] RAX: ffffffffffffffda RBX: 00007f50575a5fa0 RCX: 00007f505738cde9 [ 1452.892040][T25158] RDX: 0000000000000007 RSI: 0000400000000200 RDI: 0000000000000000 [ 1452.892054][T25158] RBP: 00007f50551f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1452.892069][T25158] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000002 [ 1452.892082][T25158] R13: 0000000000000000 R14: 00007f50575a5fa0 R15: 00007ffc4437b058 [ 1452.892113][T25158] [ 1453.114203][ C0] vkms_vblank_simulate: vblank timer overrun [ 1453.286705][T25154] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 1453.706468][T25168] FAULT_INJECTION: forcing a failure. [ 1453.706468][T25168] name failslab, interval 1, probability 0, space 0, times 0 [ 1453.728029][T25168] CPU: 1 UID: 0 PID: 25168 Comm: syz.1.3801 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1453.728071][T25168] Tainted: [U]=USER [ 1453.728080][T25168] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1453.728094][T25168] Call Trace: [ 1453.728100][T25168] [ 1453.728110][T25168] dump_stack_lvl+0x16c/0x1f0 [ 1453.728154][T25168] should_fail_ex+0x50a/0x650 [ 1453.728183][T25168] ? fs_reclaim_acquire+0xae/0x150 [ 1453.728223][T25168] should_failslab+0xc2/0x120 [ 1453.728253][T25168] __kmalloc_noprof+0xce/0x4f0 [ 1453.728289][T25168] ? __register_sysctl_table+0xb4/0x18c0 [ 1453.728325][T25168] __register_sysctl_table+0xb4/0x18c0 [ 1453.728352][T25168] ? net_generic+0xea/0x2a0 [ 1453.728381][T25168] ? __pfx_lock_release+0x10/0x10 [ 1453.728409][T25168] ? trace_lock_acquire+0x14e/0x1f0 [ 1453.728434][T25168] ? __pfx___register_sysctl_table+0x10/0x10 [ 1453.728461][T25168] ? is_module_address+0x2a/0x50 [ 1453.728490][T25168] ? register_net_sysctl_sz+0x228/0x3e0 [ 1453.728533][T25168] brnf_init_net+0x289/0x450 [ 1453.728565][T25168] ? __pfx_brnf_init_net+0x10/0x10 [ 1453.728595][T25168] ops_init+0x1df/0x5f0 [ 1453.728626][T25168] setup_net+0x21f/0x860 [ 1453.728655][T25168] ? __pfx_setup_net+0x10/0x10 [ 1453.728679][T25168] ? down_read_killable+0xcc/0x380 [ 1453.728704][T25168] ? __pfx_down_read_killable+0x10/0x10 [ 1453.728732][T25168] ? debug_mutex_init+0x37/0x70 [ 1453.728772][T25168] copy_net_ns+0x2b4/0x6c0 [ 1453.728804][T25168] create_new_namespaces+0x3ea/0xad0 [ 1453.728845][T25168] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 1453.728881][T25168] ksys_unshare+0x45d/0xa40 [ 1453.728917][T25168] ? __pfx_ksys_unshare+0x10/0x10 [ 1453.728950][T25168] ? xfd_validate_state+0x5d/0x180 [ 1453.728992][T25168] __x64_sys_unshare+0x31/0x40 [ 1453.729032][T25168] do_syscall_64+0xcd/0x250 [ 1453.729058][T25168] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1453.729090][T25168] RIP: 0033:0x7fe47fb8cde9 [ 1453.729110][T25168] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1453.729134][T25168] RSP: 002b:00007fe4809f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1453.729157][T25168] RAX: ffffffffffffffda RBX: 00007fe47fda5fa0 RCX: 00007fe47fb8cde9 [ 1453.729174][T25168] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 1453.729189][T25168] RBP: 00007fe47fc0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 1453.729204][T25168] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1453.729218][T25168] R13: 0000000000000000 R14: 00007fe47fda5fa0 R15: 00007ffe0a33fea8 [ 1453.729250][T25168] [ 1457.152905][T25212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3812'. [ 1457.574770][T25223] FAULT_INJECTION: forcing a failure. [ 1457.574770][T25223] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 1457.623469][T25223] CPU: 0 UID: 0 PID: 25223 Comm: syz.1.3815 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1457.623509][T25223] Tainted: [U]=USER [ 1457.623517][T25223] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1457.623530][T25223] Call Trace: [ 1457.623537][T25223] [ 1457.623546][T25223] dump_stack_lvl+0x16c/0x1f0 [ 1457.623585][T25223] should_fail_ex+0x50a/0x650 [ 1457.623610][T25223] ? __pfx___might_resched+0x10/0x10 [ 1457.623643][T25223] should_fail_alloc_page+0xe7/0x130 [ 1457.623674][T25223] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 1457.623710][T25223] ? find_held_lock+0x2d/0x110 [ 1457.623746][T25223] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 1457.623777][T25223] ? hlock_class+0x4e/0x130 [ 1457.623807][T25223] ? mark_lock+0xb5/0xc60 [ 1457.623833][T25223] ? hlock_class+0x4e/0x130 [ 1457.623863][T25223] ? mark_lock+0xb5/0xc60 [ 1457.623888][T25223] ? __pfx_mark_lock+0x10/0x10 [ 1457.623916][T25223] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 1457.623950][T25223] ? hlock_class+0x4e/0x130 [ 1457.623989][T25223] ? hlock_class+0x4e/0x130 [ 1457.624020][T25223] ? __lock_acquire+0xcc5/0x3c40 [ 1457.624048][T25223] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 1457.624081][T25223] ? policy_nodemask+0xea/0x4e0 [ 1457.624113][T25223] alloc_pages_mpol+0x1fc/0x540 [ 1457.624149][T25223] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 1457.624175][T25223] ? hlock_class+0x4e/0x130 [ 1457.624205][T25223] ? __lock_acquire+0xcc5/0x3c40 [ 1457.624239][T25223] folio_alloc_mpol_noprof+0x36/0x2f0 [ 1457.624272][T25223] vma_alloc_folio_noprof+0xee/0x1b0 [ 1457.624303][T25223] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 1457.624338][T25223] ? find_held_lock+0x2d/0x110 [ 1457.624377][T25223] do_pte_missing+0x202f/0x3e10 [ 1457.624416][T25223] __handle_mm_fault+0x1166/0x2c60 [ 1457.624447][T25223] ? lock_vma_under_rcu+0x6b9/0x980 [ 1457.624472][T25223] ? __pfx___handle_mm_fault+0x10/0x10 [ 1457.624528][T25223] handle_mm_fault+0x3fa/0xaa0 [ 1457.624561][T25223] do_user_addr_fault+0x60d/0x13f0 [ 1457.624598][T25223] exc_page_fault+0x5c/0xc0 [ 1457.624633][T25223] asm_exc_page_fault+0x26/0x30 [ 1457.624663][T25223] RIP: 0033:0x7fe47fa58b7b [ 1457.624682][T25223] Code: 00 00 00 48 8d 3d 9d 33 19 00 48 89 c1 31 c0 e8 0b 44 ff ff eb d2 66 0f 1f 84 00 00 00 00 00 55 31 c0 53 48 81 ec 68 10 00 00 <48> 89 7c 24 08 48 8d 3d d1 33 19 00 48 89 34 24 48 8b 14 24 48 8b [ 1457.624703][T25223] RSP: 002b:00007fe4809f4fb0 EFLAGS: 00010202 [ 1457.624721][T25223] RAX: 0000000000000000 RBX: 00007fe47fda5fa0 RCX: 0000000000000000 [ 1457.624735][T25223] RDX: 0000000000000000 RSI: ffffffffffffffff RDI: 0000000000000000 [ 1457.624749][T25223] RBP: 00007fe4809f6090 R08: 0000000000000000 R09: 0000000000000000 [ 1457.624763][T25223] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000001 [ 1457.624776][T25223] R13: 0000000000000000 R14: 00007fe47fda5fa0 R15: 00007ffe0a33fea8 [ 1457.624809][T25223] [ 1457.626023][T25223] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 1458.677268][T25241] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3822'. [ 1461.717077][T25331] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3838'. [ 1461.933686][T25340] FAULT_INJECTION: forcing a failure. [ 1461.933686][T25340] name failslab, interval 1, probability 0, space 0, times 0 [ 1461.946742][T25340] CPU: 0 UID: 0 PID: 25340 Comm: syz.0.3839 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1461.946777][T25340] Tainted: [U]=USER [ 1461.946785][T25340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1461.946798][T25340] Call Trace: [ 1461.946805][T25340] [ 1461.946814][T25340] dump_stack_lvl+0x16c/0x1f0 [ 1461.946853][T25340] should_fail_ex+0x50a/0x650 [ 1461.946880][T25340] ? fs_reclaim_acquire+0xae/0x150 [ 1461.946918][T25340] ? s_start+0x7b/0x310 [ 1461.946942][T25340] should_failslab+0xc2/0x120 [ 1461.946970][T25340] __kmalloc_cache_noprof+0x68/0x420 [ 1461.946994][T25340] ? trace_kmalloc+0x2d/0xd0 [ 1461.947023][T25340] ? __kmalloc_node_noprof+0x23d/0x520 [ 1461.947055][T25340] s_start+0x7b/0x310 [ 1461.947085][T25340] seq_read_iter+0x2ab/0x12b0 [ 1461.947134][T25340] seq_read+0x39f/0x4e0 [ 1461.947167][T25340] ? __pfx_seq_read+0x10/0x10 [ 1461.947219][T25340] ? rw_verify_area+0xcf/0x680 [ 1461.947252][T25340] ? __pfx_seq_read+0x10/0x10 [ 1461.947285][T25340] vfs_read+0x1df/0xbf0 [ 1461.947307][T25340] ? __fget_files+0x1fc/0x3a0 [ 1461.947332][T25340] ? __pfx___mutex_lock+0x10/0x10 [ 1461.947366][T25340] ? __pfx_vfs_read+0x10/0x10 [ 1461.947398][T25340] ? __fget_files+0x206/0x3a0 [ 1461.947432][T25340] ksys_read+0x12b/0x250 [ 1461.947454][T25340] ? __pfx_ksys_read+0x10/0x10 [ 1461.947487][T25340] do_syscall_64+0xcd/0x250 [ 1461.947517][T25340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1461.947549][T25340] RIP: 0033:0x7f505738cde9 [ 1461.947567][T25340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1461.947589][T25340] RSP: 002b:00007f50551d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1461.947611][T25340] RAX: ffffffffffffffda RBX: 00007f50575a6080 RCX: 00007f505738cde9 [ 1461.947626][T25340] RDX: 0000000000400000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1461.947639][T25340] RBP: 00007f50551d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1461.947653][T25340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1461.947666][T25340] R13: 0000000000000000 R14: 00007f50575a6080 R15: 00007ffc4437b058 [ 1461.947699][T25340] [ 1461.947710][T25340] [ 1462.165414][T25340] ===================================== [ 1462.170945][T25340] WARNING: bad unlock balance detected! [ 1462.176475][T25340] 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 Tainted: G U [ 1462.185052][T25340] ------------------------------------- [ 1462.190584][T25340] syz.0.3839/25340 is trying to release lock (event_mutex) at: [ 1462.198128][T25340] [] seq_read_iter+0x5ff/0x12b0 [ 1462.204555][T25340] but there are no more locks to release! [ 1462.210274][T25340] [ 1462.210274][T25340] other info that might help us debug this: [ 1462.218325][T25340] 2 locks held by syz.0.3839/25340: [ 1462.223513][T25340] #0: ffff888034bff438 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x267/0x390 [ 1462.232575][T25340] #1: ffff88802f6770a0 (&p->lock){+.+.}-{4:4}, at: seq_read_iter+0xd8/0x12b0 [ 1462.241465][T25340] [ 1462.241465][T25340] stack backtrace: [ 1462.247350][T25340] CPU: 0 UID: 0 PID: 25340 Comm: syz.0.3839 Tainted: G U 6.14.0-rc1-syzkaller-00276-g69b54314c975 #0 [ 1462.247378][T25340] Tainted: [U]=USER [ 1462.247385][T25340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1462.247397][T25340] Call Trace: [ 1462.247404][T25340] [ 1462.247412][T25340] dump_stack_lvl+0x116/0x1f0 [ 1462.247443][T25340] ? seq_read_iter+0x5ff/0x12b0 [ 1462.247470][T25340] print_unlock_imbalance_bug+0x1aa/0x1f0 [ 1462.247498][T25340] lock_release+0x525/0x6f0 [ 1462.247519][T25340] ? seq_read_iter+0x5ff/0x12b0 [ 1462.247545][T25340] ? __pfx_lock_release+0x10/0x10 [ 1462.247566][T25340] ? s_start+0x7b/0x310 [ 1462.247587][T25340] ? mark_held_locks+0x9f/0xe0 [ 1462.247608][T25340] ? dump_stack_lvl+0x185/0x1f0 [ 1462.247635][T25340] ? lockdep_hardirqs_on+0x7c/0x110 [ 1462.247664][T25340] __mutex_unlock_slowpath+0xa3/0x6a0 [ 1462.247694][T25340] ? rcu_is_watching+0x12/0xc0 [ 1462.247721][T25340] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1462.247750][T25340] ? __kmalloc_cache_noprof+0x261/0x420 [ 1462.247770][T25340] ? rcu_is_watching+0x12/0xc0 [ 1462.247797][T25340] ? kfree+0x260/0x4d0 [ 1462.247813][T25340] ? s_start+0x27d/0x310 [ 1462.247835][T25340] seq_read_iter+0x5ff/0x12b0 [ 1462.247866][T25340] seq_read+0x39f/0x4e0 [ 1462.247894][T25340] ? __pfx_seq_read+0x10/0x10 [ 1462.247927][T25340] ? rw_verify_area+0xcf/0x680 [ 1462.247954][T25340] ? __pfx_seq_read+0x10/0x10 [ 1462.247980][T25340] vfs_read+0x1df/0xbf0 [ 1462.247998][T25340] ? __fget_files+0x1fc/0x3a0 [ 1462.248018][T25340] ? __pfx___mutex_lock+0x10/0x10 [ 1462.248045][T25340] ? __pfx_vfs_read+0x10/0x10 [ 1462.248066][T25340] ? __fget_files+0x206/0x3a0 [ 1462.248088][T25340] ksys_read+0x12b/0x250 [ 1462.248105][T25340] ? __pfx_ksys_read+0x10/0x10 [ 1462.248125][T25340] do_syscall_64+0xcd/0x250 [ 1462.248144][T25340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1462.248170][T25340] RIP: 0033:0x7f505738cde9 [ 1462.248186][T25340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1462.248204][T25340] RSP: 002b:00007f50551d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 1462.248222][T25340] RAX: ffffffffffffffda RBX: 00007f50575a6080 RCX: 00007f505738cde9 [ 1462.248235][T25340] RDX: 0000000000400000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1462.248247][T25340] RBP: 00007f50551d5090 R08: 0000000000000000 R09: 0000000000000000 [ 1462.248259][T25340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1462.248271][T25340] R13: 0000000000000000 R14: 00007f50575a6080 R15: 00007ffc4437b058 [ 1462.248289][T25340]