last executing test programs: 2m29.958223908s ago: executing program 1 (id=901): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="afa72db57000ffdbdf250e00000008000300", @ANYRES32=r2], 0x1c}, 0x1, 0x0, 0x0, 0xb00}, 0x20000000) 2m29.440479087s ago: executing program 1 (id=907): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) prctl$auto(0x29, 0x0, 0x0, 0x0, 0x0) read$auto(r0, 0x0, 0x255) madvise$auto(0x0, 0x1010001, 0x100000003) 2m29.080292659s ago: executing program 1 (id=909): pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeep\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x2, 0x4, 0x3, 0x2, 0x8, 0xc, 0xe3, 0x400000000a, 0x3}, 0x6f4) bpf$auto(0x18, &(0x7f0000000040)=@bpf_attr_4={0x7, r0, 0x5, r0}, 0x92) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/oom_adj\x00', 0x0, 0x0) read$auto(r1, 0x0, 0x1f40) close_range$auto(0x2, 0x8, 0x0) (async) r2 = open(0x0, 0x163340, 0x2a) socket(0x2, 0x80802, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x6, 0x7) socket(0x2, 0x6, 0x0) (async) shutdown$auto(0x200000003, 0x2) recvmmsg$auto(0x3, 0x0, 0x10000, 0x300, 0x0) (async) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) (async) close_range$auto(0x2, 0x8, 0x0) (async) open(0x0, 0x22040, 0x74) (async) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) (async) mincore$auto(0x1000, 0x8001, 0x0) (async) r4 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/ubifs/chk_general\x00', 0x0, 0x0) ioctl$auto(r3, 0x400c4d09, r4) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f00000000c0), r5) sendmsg$auto_NFSD_CMD_THREADS_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYRES16=r1, @ANYRES16=r6, @ANYRESDEC=r2], 0x24}, 0x1, 0x0, 0x0, 0x20004044}, 0x840) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) (async) sendmmsg$auto(0x3, 0x0, 0xfffffff9, 0x1) (async) mmap$auto(0x0, 0x4020009, 0xe1, 0xeb1, 0x401, 0x8000) 2m28.945052465s ago: executing program 1 (id=910): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0x1701, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x844) (fail_nth: 1) 2m28.478993281s ago: executing program 1 (id=912): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x2, 0x0) mmap$auto(0x4, 0x8, 0x9, 0x4009b72, 0xffffffffffffffff, 0x40008000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000000)=0x1) move_pages$auto(0x1, 0x235, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000200), 0xffffffffffffffff) r3 = geteuid() setreuid$auto(r3, 0x0) statx$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x4, 0x2, &(0x7f0000000480)={0x5, 0xf, 0x7, 0x7, r3, 0xffffffffffffffff, 0x7, 0xa1c9, 0x8, 0x1ff, 0x2, 0x6, {0x9, 0x80}, {0x2, 0x1}, {0x9, 0xfffffc00}, {0x5, 0x2}, 0x11, 0xdfa, 0x7, 0x2, 0x4, 0x855a, 0x7f, 0xfffffffffffffff8, 0x4, 0x0, 0x87, 0x5, [0x8, 0x2d52, 0x8, 0x9, 0x0, 0x9, 0xfffffffffffffffc, 0x3, 0x3391]}) shmctl$auto_SHM_LOCK(0xfffffffd, 0xb, &(0x7f00000003c0)={{0x3, 0xee00, 0xee00, 0x6, 0xfff, 0x5, 0x4}, 0x0, 0x6, 0x5, 0x7fffffffffffffff, @inferred, @inferred=0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000240)="60d7b3e4fe5598d198048d56ba838ee050e36396a7d3a3e73520a18f08fd6478ec1749fc7456fedf6b89b3d7bb9e7b31e70da3f29c6d9454efdff9beee3ce8aaa771fe07e88f19d947b80aeb1fc3bd3899cca54f625b9767e1e29f866298c1bf3d3d14b17307c2a26a7ab494e6f58721b8eeeeb6136c9019bc083b7ea55670b3ac0578a99e28d160a7bf19ce70f5e740c183919f21a6ab9409ea5d62ad062456ce33f052770ae52958", &(0x7f0000000300)}) shmctl$auto_IPC_STAT(0x0, 0x2, &(0x7f0000000580)={{0x3, 0xffffffffffffffff, 0x0, 0xfffffff8, 0x8, 0xdc, 0x6}, 0xe, 0x1, 0x10, 0x6, @raw, @inferred=0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000480)="8ab83b3f8581bd38de9199a162e50a19a0ffb71c88a53471806bbc5343e6ab49b244dd6ad168310c5d8ebc5b10069d0b3e83766aa589259b7a6fa228ea82938369c4529bf7633ce5ee4aba4e55cc74152c06", &(0x7f0000000500)="2f9c5dbb6fcca0e99fd8fa625085c2c719e0d99c05f30f13f5bd016659f2bbcfb0799c240d9a0c59694a001ff79aa1cc970319dd342c33657e6609bb7132e3da932f3af8cc1cc07293bfb191cab8598f99a9"}) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000600)={0x884, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0xfffffffd}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0xe8, 0x3, 0x0, 0x1, [@typed={0xce, 0x6f, 0x0, 0x0, @binary="afae254572fd392ea8404d1f19250651e90c7037e3745b53ef1057c4417bf03ef5ce41b021c441fc26761060b3a59577bef82da5e488c7a2599058474511425063c00996c711cfd8ec5f777a3356e58cec500fe0fd28bcf28012a55429c2feef116e4711f2843a732464125dd38f839b85c6e1a5a27a5e2d9a82290b8ca1290bae9a10af8b528091da0f4daba0010691dbad7e92f48e82374f2054dc61d9421cc2e6c277068489c34c0637854426776889479e5489c6c4e378ac6b7e650b7ed04860106300805dcb9bb1"}, @nested={0x14, 0xf2, 0x0, 0x1, [@nested={0x4, 0x8e}, @nested={0x4, 0x4a}, @typed={0x8, 0x136, 0x0, 0x0, @fd=r0}]}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x401}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x222, 0x2, 0x0, 0x1, [@nested={0x132, 0x3e, 0x0, 0x1, [@nested={0x4, 0x83}, @typed={0x8, 0xb3, 0x0, 0x0, @ipv4=@broadcast}, @generic="23fbe6091117a3e20ed46d824af29cafb77711bdb5ac9a2087a07b5cd384f3f8e2853a37d4debaf741c39031919f728dfdc382cc318778403ec90f55c92b448ce29fc9ebe08d46b25ceb0fdfdb23139b8d19ebe446bd5f17c64ed8d22d4fa43cd4deb6bdd4f12e183dab3a7ee672f84e3249218997cb7716b6489747e6a8dd8212a47457ff73882c32e947bedf1dea880b1cc19ffd14698095", @typed={0xc, 0xf4, 0x0, 0x0, @u64=0x7}, @generic="4d464e6efbc59039b5e7371a60f24c23fa11c50aad6b50e6d4ec8cc9cab82e8cca746b2422ac7493cc7d81037f35fe2ad4c88e1f59ead521690ab0c93d996129e1740e578b724199849e6ee73a4b4b3b8a88415b7709a385969373788a904b22950215ad88be3c378afb7b8dbe", @nested={0x4, 0xc8}, @typed={0x7, 0xe5, 0x0, 0x0, @str='-(\x00'}, @typed={0x4, 0x33}]}, @generic="b021896d286c4cc385719bd194bbbecf6d0e60b8a81f961de4709f07fddd757ecfa4c91b78b5256dd5ccffe59f42291eb154bef7295c9cc00ae598eef159b667db3ae6ad9145471a4d63b86f4fecc1631a5c410403bf06936b63800f4c2a9ffe19c86039601fe5683774de21fbed8dba1fbbed36576f3d54266617d4abcd2471d56f9839930050fc550432fdb2c377353a57aff52d6ffd9a0aa9a510ee30bcea557e35a66219595d0288e14edff7de573e3ff058e98a006cf93847d99b893feab024e0ef8c1c09de01ed7d53bc4757669e73fbd338dc02a68ada23c1c19716e0275ea74450a7685b731a"]}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x15a, 0x2, 0x0, 0x1, [@nested={0x8d, 0xa7, 0x0, 0x1, [@generic="ee311882bfcb7cb58089e4e8e8538d35412d61025403974296ee96b621205249a578747b072ee859247c6aa2d769818d3715495d899b0adf08e7b70d475afda8210f5ba52994fcc139b166eb4e727b8eba4596f522ec4298a124233e60ff46893ad1082179740852db9134e30f9f54ed03e774ef48", @typed={0x14, 0x146, 0x0, 0x0, @ipv6=@local}]}, @nested={0x9b, 0xcf, 0x0, 0x1, [@nested={0x4, 0xa0}, @typed={0x8, 0x8e, 0x0, 0x0, @uid=r3}, @generic="a7ed8ccca81dc145075cafa80e9b49dd0f2687f9bc10a44cb551d55e6f60070edb1f93177b6ae18e41a2f0d5f90537a570471475954cb83c83a6424772c9c8a7c5d1112924d92fe87a021bc407e99498e9be8cef7de709", @typed={0x8, 0x142, 0x0, 0x0, @uid=0xee01}, @generic="b9620ad239dbbb01753534591624ac9df9bb76c2996d8dec99759f5c3ac9d2ca318a1d22", @nested={0x4, 0xeb}, @nested={0x4, 0x91}]}, @nested={0x18, 0x77, 0x0, 0x1, [@nested={0x4, 0x2d}, @typed={0x4, 0xe0}, @nested={0x4, 0x84}, @nested={0x4, 0x3b}, @nested={0x4, 0xbc}]}, @generic="c7514ab471748b7ad2f60eb7b3adb790c8b1"]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0xf}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x309, 0x3, 0x0, 0x1, [@generic="4fb7f5259316d160d39c61a8bf76d3068a8db434512bd3e7db", @nested={0xa9, 0xba, 0x0, 0x1, [@nested={0x4, 0xa4}, @generic="5523074d0bf0a0096ce0e8486628b8c0028b70ab4b6918f99a2df019f763f63e2ed8e96bc8d55bbdbdaca04120f19a775d047047450d97d32bf2e053dbaef3f896d344e86fe2600f12d451a3c1af5654afed77ae57d8f3d681e4b57591c03b80fb804f4018eb03899757360dd444b1c21fea5753656d90f314aee396b3cdc49e60134520138ab708b9739208a6", @typed={0x8, 0xd, 0x0, 0x0, @ipv4=@broadcast}, @typed={0xc, 0xe4, 0x0, 0x0, @u64=0x1}]}, @nested={0x23f, 0x146, 0x0, 0x1, [@generic="3a975df3965b99e82f4b998c883afeeabd4ae1303100f8b8c66af0ac7978b4b4eb07d93ae5f65ed660553d09896466c8c7235f1ae16a5c2c46c5b256c4ce17f6187da9cb62e3b8d68bc860c2f0e1d7d2e20405726431a85e19eac9a4b2dd2cd614fea98e6d8567681127ba895a8fa0f2563e9466acb4cc9d9d38f17aa3f5eed4391781d061938b4d570aa8edb555ab49c03f998f5f54353f099c0d8f34b3713936ad818b3bb17218b6d60b4641967fc5feccbe99d35ebd92b128de1545bc20dc44164c72", @typed={0x7b, 0x8a, 0x0, 0x0, @binary="632df069e50ce8011eb585c0e21acf007aa227007ea21c4d1339a9e2c274712341275e3035f6cc4c15c0e58b02820b229a650f04bd4e559d6d4b639153a5aaa0389ab8fb97fe8db9b23a5dde340b92333d635dffa79f422ba12c3d2ff856d7ed3d5cfe99834f326fba957a5b9f99d5aa2b3717ab8806bf"}, @generic="4b0c1469f24a2a44fb1617542d61059b56d1a894848973ccb6a88fcecd0f8ae228dd44c49367512ed18287d41f5d37bad15bbb623c54fffd0a39b33f5951d28a1c4d8bd10328b88e5f5acf74941b4bbd788b6718d45137b139e2eca9584656a8fe2f3e1f52217f14a943fcb4fe896221745f3a30adb518c32290118c967c1df0b471027acc7d85373e0db7354b1295d88aa49aa3560e434493ffe198f2fa6d2fc57ade134ef3cac22df870fc01b057399a6748a526ddd4c1f5324d47960f26a3ee8694b9f19b1dd8010017bc57a3b6f6c0359eb4e67d4fae65c32c1ac57f7ef2bfc29aecb0f565a65556400bb2248016fe76c69085dd75", @nested={0x4, 0xa8}]}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0xe1, 0x2, 0x0, 0x1, [@typed={0x19, 0xc0, 0x0, 0x0, @str='/dev/bus/usb/015/001\x00'}, @nested={0x10, 0xb3, 0x0, 0x1, [@typed={0x8, 0xef, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x73}]}, @typed={0x8, 0x13e, 0x0, 0x0, @uid=r4}, @typed={0x8, 0xb9, 0x0, 0x0, @pid}, @typed={0x2e, 0xfd, 0x0, 0x0, @binary="0cce815dcfc6deccc377099edd615218612293dc056c9da19582a028e91dff62d0c5302b86f5a800e04e"}, @generic="db546cc9bf437e2856f8cc6126340af105da2ecdd4d863cc6c0ceb3707d87618abf6a546b65707da7452acf34d3f9ad90a37b6d81e3bf8e17232a02349081bb903961b64afe941b72f12a3c3f2edce8f5a8381da6a98508bbc1292647166383f5e3d254a08bc919d35", @typed={0x8, 0x81, 0x0, 0x0, @uid=r5}]}]}, 0x884}}, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r6 = fsopen$auto(0x0, 0x1) fsconfig$auto(r6, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 2m28.132055883s ago: executing program 1 (id=915): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r1, 0x0, 0x80000000006) signalfd$auto(r1, 0x0, 0x8) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) read$auto(r2, &(0x7f0000000040)='/dev/ptyc9\x00', 0x9) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r2) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x404c014) socket$nl_generic(0x10, 0x3, 0x10) (async) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) (async) read$auto(r1, 0x0, 0x80000000006) (async) signalfd$auto(r1, 0x0, 0x8) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) read$auto(r2, &(0x7f0000000040)='/dev/ptyc9\x00', 0x9) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r2) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x404c014) (async) 2m12.616751196s ago: executing program 32 (id=915): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) read$auto(r1, 0x0, 0x80000000006) signalfd$auto(r1, 0x0, 0x8) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) read$auto(r2, &(0x7f0000000040)='/dev/ptyc9\x00', 0x9) r3 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r2) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x404c014) socket$nl_generic(0x10, 0x3, 0x10) (async) signalfd4$auto(0xffffffff, 0x0, 0x8, 0x0) (async) read$auto(r1, 0x0, 0x80000000006) (async) signalfd$auto(r1, 0x0, 0x8) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) read$auto(r2, &(0x7f0000000040)='/dev/ptyc9\x00', 0x9) (async) syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000000), r2) (async) sendmsg$auto_NFSD_CMD_THREADS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={0x24, r3, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NFSD_A_SERVER_THREADS={0x8, 0x1, 0x8}, @NFSD_A_SERVER_THREADS={0x8, 0x1, 0xffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x4002000}, 0x404c014) (async) 2m9.622326595s ago: executing program 2 (id=1032): bpf$auto(0x15, 0x0, 0x0) r0 = socket(0xa, 0x3, 0x3a) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0xcc, 0x0, 0x567) unshare$auto(0x40000080) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000500)={0x0, 0xfffffffffffffd9e, &(0x7f0000003040)={&(0x7f0000000580)={0x2c, 0x0, 0x2, 0x70bd6b, 0x25dfdbfd, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x5}]}, 0xff12}, 0x1, 0x0, 0x0, 0x2004c080}, 0x8080) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="18000000", @ANYBLOB="6a0051b1"], 0x1ac}, 0x1, 0x0, 0x0, 0x40814}, 0x2004c0c4) sendmmsg$auto(r1, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000100), r2) acct$auto(&(0x7f0000000080)='/proc/sys/kernel/sched_deadline\xdcBH\xc7H\xe2\x1d\b\x00ax_us\x00\xae\xb5\x86\xe9\xf6\xfe\x9b6\x91\x8f\x158\xe7qwI\t0\xc3\xd1\xcd\xf5\x04\xe0B\xe0U<\xb1\x1d\xda\xd2') r4 = prctl$auto_PR_SME_SET_VL(0x3f, 0x3, 0xffffffffffffffff, 0xd, 0x1fe3) shmctl$auto(0x6, 0x9, &(0x7f0000000400)={{0xd, 0xee01, 0xffffffffffffffff, 0x1, 0x7, 0x3ff, 0x9}, 0x8, 0x0, 0x8000000000000000, 0x3, @inferred, @inferred=0xffffffffffffffff, 0x6e, 0x0, &(0x7f0000000280)="35f56f76a8f0967f40cfb92653aaefa161de901bc1aaca99cdbf7267032f9e6de31dbec299f21a94656bfa93284a7d23acd3a3e636bfe02ae48cc2a6a51cc1fdb832", &(0x7f0000000340)="a5a71c0161588cd59bf75a2afda71cc27e8667a1a3a0d288f5a8004dc98ea741604ca61c15915a1cc0034dd832b32ed14fe8aecfb4e2fa9710adbfafdf94588f3e2465c6ce836e33e3df572e9ae16a356c627eed1d78a3564bc8bc8c35320c345dd31efad59fe55f24017fc08be00de34aa763cd3f9d0a587da404d6d0b58586a40f25788821b6f4399ae6548aca707f8d487f314dc64af9328141e7f1c5e4d1ce23e5f28f1285e713620a7bbaaa51ad4b8141864f4ee80ee50103ac52b9"}) sendmsg$auto_NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000480)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000001b80)=ANY=[@ANYBLOB="ffe50080c02eb7000000007b2ddeee1393ef8c4fb7d53b3c9771898bf61497307faac36f65da80fde838de03049d144ad0d5591cca75a88f1e3013675d2ff2f96232132c5d27e0", @ANYRES16=r3, @ANYBLOB="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", @ANYRES32=r5, @ANYBLOB="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"], 0x1340}, 0x1, 0x0, 0x0, 0x40800}, 0x20040041) removexattr$auto(0x0, 0x0) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/snd/controlC1\x00', 0x242800, 0x0) r6 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cec27\x00', 0x1c1901, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/cpu.weight\x00', 0x2, 0x0) write$auto_ocfs2_control_fops_stack_user(r7, &(0x7f0000003900)='>', 0x1) ioctl$auto_CEC_ADAP_S_LOG_ADDRS(r6, 0xc05c6104, 0x0) openat$auto_event_trigger_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/events/vmalloc/free_vmap_area_noflush/trigger\x00', 0x0, 0x0) 2m8.876730278s ago: executing program 2 (id=1036): socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) writev$auto(r0, &(0x7f0000002bc0)={0x0, 0x7}, 0x7) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto__dev_ioctl_fops_dev_ioctl(0xffffffffffffff9c, &(0x7f0000001440), 0x101000, 0x0) ioctl$auto(0x3, 0x541b, 0x7f) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000040)='/de\xad\xd34\xf2\x00\x00\x00\x00\x00\xba\x85\xb0m', 0x100000a3d9) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x5606, 0xffffffffffffffff) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snd/midiC2D3\x00', 0x20c00, 0x0) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x100000000) mmap$auto(0x0, 0x3, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r3 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r4 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r4, 0x2282, r3) write$auto(0xffffffffffffffff, 0x0, 0x4) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x40, 0x1, 0x948b, 0x3, 0x0, 0x3, 0x100000000003, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) sendmsg$auto_NL80211_CMD_EXTERNAL_AUTH(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)={0x23, 0x0, 0x10, 0x70bd2c, 0x25dfdbfe, {}, [@NL80211_ATTR_INACTIVITY_TIMEOUT={0x6, 0x96, 0xff12}, @NL80211_ATTR_ACL_POLICY={0x8, 0xa5, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x10) close_range$auto(0x2, 0x8, 0x0) 2m7.426711388s ago: executing program 2 (id=1039): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fadbdf250400fc0008000c000200000076cd35df35bdc791e646e3f69a70f4085acde7bb7e2cf2314a61791afc49089ffde12a29cc58288105780542323bd948e4074aaa360f9c7afbbf24f04b90a7dd68c501ed3d33865aa35f7c6bfccfdb5fd145d04ec7000000"], 0x1c}}, 0x4044820) 2m7.061649874s ago: executing program 2 (id=1042): mmap$auto(0x0, 0x400008, 0xe3, 0xbb72, 0x2, 0x8000) sysfs$auto(0x2, 0x10000000000048, 0x0) openat$auto_msr_fops_msr(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cpu/1/msr\x00', 0x30341, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4004000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$auto(0x2, 0x800000000, 0x8) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/asound/card0/pcm0p/info\x00', 0x1b04, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, 0x0, 0x0) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x7fffffff, 0x1d, 0x3000, 0x6, 0x6, 0x400a, 0xffffffffffffffff, [], {0x6, 0x6, 0x8c48, 0x29b, 0x3, 0x7f, 0x0, 0x6}, {0x100, 0x1, 0x52, 0x85, 0x2, 0x1a7b870a, 0x76c5, 0x8, 0x100000000}}) r1 = openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe\x00', 0x68200, 0x0) read$auto_tracing_pipe_fops_trace(r1, &(0x7f0000000040)=""/200, 0xc8) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) io_uring_register$auto(0x2, 0x1b, 0x0, 0x1) r2 = socket(0x11, 0x80003, 0x300) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(r2, 0x107, 0x14, 0x0, 0x4) sendto$auto(0x3, 0x0, 0x6, 0x2, &(0x7f0000000440)=@ethernet={0x1, @broadcast}, 0x1e) fcntl$auto_F_DUPFD_CLOEXEC(0xffffffffffffffff, 0x406, 0x0) 2m6.202737321s ago: executing program 2 (id=1046): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000280)='/sys/devices/platform/vhci_hcd.2/usb14/14-0:1.0/ep_81/wMaxPacketSize\x00', 0x8001, 0x0) mknod$auto(&(0x7f00000000c0)='./file0\x00', 0x1001, 0x804) open(0x0, 0x28400, 0x82) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) rt_sigprocmask$auto(0x0, 0x0, 0x0, 0x8) adjtimex$auto(&(0x7f00000004c0)={0x0, 0x0, 0x0, 0xfffffffffffffffd, 0xd1, 0x1, 0x6, 0x0, 0x5, 0x368e, 0x2, {0x5, 0x10000}, 0x5, 0x2, 0xfffffffffffffffd, 0x1008000, 0x0, 0x80000004, 0x5, 0xffffffffffff628e, 0xa747, 0x5, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer\x00', 0x521942, 0x0) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) openat$auto_zero_fops_mem(0xffffffffffffff9c, 0x0, 0x80300, 0x0) getsockopt$auto_SO_REUSEPORT(0xffffffffffffffff, 0x3, 0xf, 0x0, &(0x7f0000000080)=0x4) close_range$auto(r1, 0x8, 0x0) r2 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000000), 0x109002, 0x0) sendfile$auto(r2, r2, 0x0, 0x10000800000003) mmap$auto(0x7, 0x7, 0x7, 0x18, r0, 0x0) r3 = socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) socket(0x11, 0x80003, 0x300) ioctl$auto(0x3, 0x541b, 0x10000000000402) ioctl$auto_SNDRV_PCM_IOCTL_PAUSE2(r3, 0x40044145, &(0x7f0000000000)=0x2) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/nfs\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000100)=""/171, 0xab) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) msync$auto(0x0, 0x2000000005, 0x6) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(0xffffffffffffffff, 0x0, 0x400c800) open(&(0x7f0000000040)='./file0\x00', 0x40841, 0x8) poll$auto(0x0, 0x4, 0x100000) syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, 0x0, 0xc4) 2m4.91242378s ago: executing program 2 (id=1052): mmap$auto(0x0, 0x2000d, 0x4000000000e3, 0x400000000eb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="05f225bd7000fbdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r4, 0x40085507, &(0x7f0000000080)={0x1, 0x0, 0x9}) r5 = semctl$auto_GETVAL(0x0, 0x1, 0xc, 0x10000) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000180)={0x498, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x480, 0x1, 0x0, 0x1, [@nested={0x47b, 0x2f, 0x0, 0x1, [@typed={0x80, 0x122, 0x0, 0x0, @binary="3ee6e53c4c07ea5d20478f32b73dab93bda17a38691d14cc7389d7c01028c43754a4fb5f8a12d6b77f0cde3683abeb97f5bc35d14655c93dec83474ae0e23bc53f9ad75829e2b91ff11ac72fef15a647d6cccb3152fc263d3ebc8588a7c6dfef87cbec3a9363e1a83299887f7475c25579dcaa6f4489de497816a6b3"}, @generic="2b4d02edce816134154a0f50376a72eb39", @nested={0x4, 0x123}, @generic="2bb6aff7fd4518fa6c887404642bca085adf9254107dc13d7f96c6a28d9eaa420526606917801c72b9b0edfe259598cd016eab67d6df627fdb07e33f2bf9bd0ee803cec7fd8961f56f56293ea0409bafac66c0cccdda80c6bfb8d3ac80e4eea195ee24cfe81b6ea66000", @nested={0x378, 0x126, 0x0, 0x1, [@typed={0x8, 0x123, 0x0, 0x0, @pid=r5}, @nested={0x186, 0x13, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @ipv4=@multicast1}, @nested={0xf3, 0x35, 0x0, 0x1, [@generic="251833cbb52fb6e9a8a6c734d4b32e43485e1a777ff5d38ae7d38b165bdd0ada0d5fc84472c2824af615a5b9c9d4aef4847e6cd61f302c4c84d37c389d4aee42df3fde39d2471c974947269cd1e3e1fffd060286f1ef42c152732bc0e76652410a1b3faef2f661b3a01f96e963498e7e1680995aee71840cb8d56a573fccee540455ff19054a0bdc0e49fdb498bd369ace53d516de6b953bc1400b740fdbfd09863a8396786acc83b46f8af0a99ceedc581d0507f2ddfbfc3128e82296efda855e3c5c83606a8f8988ff87fc7d7366e2a4fa16d2fe496f8132cc740e20bd90d5de040e0989894a3b4ef44c9f4eb834"]}, @typed={0x8, 0x96, 0x0, 0x0, @fd=r2}, @nested={0x4, 0xe6}, @typed={0x8, 0x20, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x4, 0xc}, @generic="0f9d32d5079945ea8a0cbbfc8e5b5525d7e700d590fa4fb163be94295eb78970aa03c852df55ae144d3878d262da8fe7b20303dd048578017a985e4b453fd5238d53f95e41baf72169f537cb8afadd1818d300546a8674b85db33b6cb8e32f0d1a914f4b19ae0331beba", @nested={0x4, 0x2e}]}, @generic="34ffd86410324c53d21c1e5e71647d80bcc4a7d8049c8b174ab4269dcbd30585966befea69c7694d5c07d4029f4ede2ad39ce9cbb64e4f5fc72c5be01b4bf8c64da0bc6ff9f6f22b2cd76c796348536cef4e98d87d9d79b8bf4c56fa711ed70705bfe691e6b5e21c6962732f", @typed={0xc, 0x7b, 0x0, 0x0, @u64=0x800}, @typed={0x8, 0xdf, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}, @nested={0x14a, 0x8e, 0x0, 0x1, [@nested={0x4, 0x147}, @nested={0x4, 0x28}, @generic="bd6fb101464d18c26d462f7cc40384c8faefc4c11fd20df3bdecba20b6e0f9dff72c2e1c07912a62bdb2fc5add76ba15b437119b304ea69c543fba932fdaa8fd33929d2101975ad38b510edf06007ca73a", @typed={0x8, 0x25, 0x0, 0x0, @fd=r2}, @typed={0x4, 0x14a}, @generic="f87b9416806f64201a21270c0a3ff7b336f58a7b0b9018d9560bfbec945affd5dac9331511c6a463d7751882550b5a973531d670d3b1fabd9be47f231020225ee5c38bbc151f79175b29ad35f552640060228b90ef7e72a5eb3b7cfe4e604e302772050613d65a1983c85d091fbfd199cd7ac46da186efa6a0664282478ee3a362fc98609d7df18cfd5580a36e94eaaff631d7edc5e37b304de9cc2fa44fa1e7c01884a61f368712fb1ccebda65ea228e863f2ce24305412cee7907118a7134d26f019072232c5778fa5ae86c2ffefe2d0fa0cc82a3e32a2fbdd8841b26f3a0f2c"]}, @typed={0xc, 0xec, 0x0, 0x0, @u64}, @nested={0x9, 0x56, 0x0, 0x1, [@generic="382fc93a8d"]}]}]}]}]}, 0x498}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0xd5, 0x8, 0x4) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) writev$auto(0x8, &(0x7f0000000040)={0x0, 0x2000000000001}, 0xabc) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r6, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) ioctl$auto_SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvtap0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) io_uring_setup$auto(0x6, 0x0) r7 = socket(0x2, 0x6, 0x0) sendmmsg$auto(r7, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socketpair$auto(0x80001, 0x5, 0x8000000000000000, 0x0) 1m49.52761753s ago: executing program 33 (id=1052): mmap$auto(0x0, 0x2000d, 0x4000000000e3, 0x400000000eb1, 0xffffffffffffffff, 0x8000) unshare$auto(0x40000080) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_TUNNEL_INFO_GET(r0, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)={&(0x7f0000000f00)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="05f225bd7000fbdbdf251c000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x880) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_ct_limit(&(0x7f0000000080), 0xffffffffffffffff) r4 = openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x2081, 0x0) ioctl$auto_USB_RAW_IOCTL_EP_WRITE(r4, 0x40085507, &(0x7f0000000080)={0x1, 0x0, 0x9}) r5 = semctl$auto_GETVAL(0x0, 0x1, 0xc, 0x10000) sendmsg$auto_OVS_CT_LIMIT_CMD_DEL(r2, &(0x7f0000003480)={0x0, 0x0, &(0x7f0000003440)={&(0x7f0000000180)={0x498, r3, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x4}, @OVS_CT_LIMIT_ATTR_ZONE_LIMIT={0x480, 0x1, 0x0, 0x1, [@nested={0x47b, 0x2f, 0x0, 0x1, [@typed={0x80, 0x122, 0x0, 0x0, @binary="3ee6e53c4c07ea5d20478f32b73dab93bda17a38691d14cc7389d7c01028c43754a4fb5f8a12d6b77f0cde3683abeb97f5bc35d14655c93dec83474ae0e23bc53f9ad75829e2b91ff11ac72fef15a647d6cccb3152fc263d3ebc8588a7c6dfef87cbec3a9363e1a83299887f7475c25579dcaa6f4489de497816a6b3"}, @generic="2b4d02edce816134154a0f50376a72eb39", @nested={0x4, 0x123}, @generic="2bb6aff7fd4518fa6c887404642bca085adf9254107dc13d7f96c6a28d9eaa420526606917801c72b9b0edfe259598cd016eab67d6df627fdb07e33f2bf9bd0ee803cec7fd8961f56f56293ea0409bafac66c0cccdda80c6bfb8d3ac80e4eea195ee24cfe81b6ea66000", @nested={0x378, 0x126, 0x0, 0x1, [@typed={0x8, 0x123, 0x0, 0x0, @pid=r5}, @nested={0x186, 0x13, 0x0, 0x1, [@typed={0x8, 0x33, 0x0, 0x0, @ipv4=@multicast1}, @nested={0xf3, 0x35, 0x0, 0x1, [@generic="251833cbb52fb6e9a8a6c734d4b32e43485e1a777ff5d38ae7d38b165bdd0ada0d5fc84472c2824af615a5b9c9d4aef4847e6cd61f302c4c84d37c389d4aee42df3fde39d2471c974947269cd1e3e1fffd060286f1ef42c152732bc0e76652410a1b3faef2f661b3a01f96e963498e7e1680995aee71840cb8d56a573fccee540455ff19054a0bdc0e49fdb498bd369ace53d516de6b953bc1400b740fdbfd09863a8396786acc83b46f8af0a99ceedc581d0507f2ddfbfc3128e82296efda855e3c5c83606a8f8988ff87fc7d7366e2a4fa16d2fe496f8132cc740e20bd90d5de040e0989894a3b4ef44c9f4eb834"]}, @typed={0x8, 0x96, 0x0, 0x0, @fd=r2}, @nested={0x4, 0xe6}, @typed={0x8, 0x20, 0x0, 0x0, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @nested={0x4, 0xc}, @generic="0f9d32d5079945ea8a0cbbfc8e5b5525d7e700d590fa4fb163be94295eb78970aa03c852df55ae144d3878d262da8fe7b20303dd048578017a985e4b453fd5238d53f95e41baf72169f537cb8afadd1818d300546a8674b85db33b6cb8e32f0d1a914f4b19ae0331beba", @nested={0x4, 0x2e}]}, @generic="34ffd86410324c53d21c1e5e71647d80bcc4a7d8049c8b174ab4269dcbd30585966befea69c7694d5c07d4029f4ede2ad39ce9cbb64e4f5fc72c5be01b4bf8c64da0bc6ff9f6f22b2cd76c796348536cef4e98d87d9d79b8bf4c56fa711ed70705bfe691e6b5e21c6962732f", @typed={0xc, 0x7b, 0x0, 0x0, @u64=0x800}, @typed={0x8, 0xdf, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x2e}}, @nested={0x14a, 0x8e, 0x0, 0x1, [@nested={0x4, 0x147}, @nested={0x4, 0x28}, @generic="bd6fb101464d18c26d462f7cc40384c8faefc4c11fd20df3bdecba20b6e0f9dff72c2e1c07912a62bdb2fc5add76ba15b437119b304ea69c543fba932fdaa8fd33929d2101975ad38b510edf06007ca73a", @typed={0x8, 0x25, 0x0, 0x0, @fd=r2}, @typed={0x4, 0x14a}, @generic="f87b9416806f64201a21270c0a3ff7b336f58a7b0b9018d9560bfbec945affd5dac9331511c6a463d7751882550b5a973531d670d3b1fabd9be47f231020225ee5c38bbc151f79175b29ad35f552640060228b90ef7e72a5eb3b7cfe4e604e302772050613d65a1983c85d091fbfd199cd7ac46da186efa6a0664282478ee3a362fc98609d7df18cfd5580a36e94eaaff631d7edc5e37b304de9cc2fa44fa1e7c01884a61f368712fb1ccebda65ea228e863f2ce24305412cee7907118a7134d26f019072232c5778fa5ae86c2ffefe2d0fa0cc82a3e32a2fbdd8841b26f3a0f2c"]}, @typed={0xc, 0xec, 0x0, 0x0, @u64}, @nested={0x9, 0x56, 0x0, 0x1, [@generic="382fc93a8d"]}]}]}]}]}, 0x498}, 0x1, 0x0, 0x0, 0x40c4}, 0xc000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0xd5, 0x8, 0x4) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) writev$auto(0x8, &(0x7f0000000040)={0x0, 0x2000000000001}, 0xabc) close_range$auto(0x2, 0x8, 0x0) io_uring_register$auto(0x2, 0x16, &(0x7f0000000040), 0x1) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000080), 0xffffffffffffffff) r6 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) write$auto(r6, &(0x7f0000000040)='7\x00\\\x80\x04|\x03\xcb\x12\xfa\b\x1c\xc7k\x00\x0e\v9\xb5j\x00\x04\xc8\x1fa\x1c\x1a\x05 \xfdr/D\xbf\x98\x06\xe5\xf6\x8d\x1fX\xe5\xbc\xbc\"}$', 0x7fffffff) ioctl$auto_SNDCTL_DSP_SETFMT(r6, 0xc0045005, &(0x7f0000000040)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'macvtap0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) io_uring_setup$auto(0x6, 0x0) r7 = socket(0x2, 0x6, 0x0) sendmmsg$auto(r7, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socketpair$auto(0x80001, 0x5, 0x8000000000000000, 0x0) 6.951175672s ago: executing program 0 (id=1525): r0 = getsockopt$auto_SO_TYPE(0xffffffffffffffff, 0x7, 0x3, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=0x1) writev$auto(r0, &(0x7f00000002c0)={&(0x7f0000000200)="58754b577023add16eac737b2b9d7b9a3f26b99a7628888194ba9904a75dc7a978faa782485df1f788d1e7f208e4", 0x5}, 0x7fffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) io_uring_setup$auto(0x1, &(0x7f0000000240)={0x5, 0x482, 0xfffffffd, 0x2, 0xfcc5c64, 0x2, 0xffffffffffffffff, [0x6, 0x72a0fa25, 0xa], {0x202, 0x5, 0x200, 0x1, 0x1, 0x80000000, 0x7d9, 0x7, 0x5}, {0x81, 0x5, 0x2, 0x2, 0x1, 0x1, 0x2, 0x9, 0x46}}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/vxcan1/forwarding\x00', 0x82002, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) sendfile$auto(r1, r2, 0x0, 0x1) 5.893744702s ago: executing program 0 (id=1528): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{&(0x7f0000000100)="ba4cabc664df5d7b0e0536af8451f330ef703f7786edcff437e94c2f0420e167a15deaa1666085fe09f381832b6214f14a25347dbcdf92c5f8c3a514f4f6710c30b5867fcfd3875d2a3b4863667cded3083f4c980a8d19eb82a10ceef6b35b04b69d53b9adb269aff3286eb1224bdbd2dc306080fdecd372d454654a0d22fb48502b16b78cfbf3e37d0c467e21124b18adbf75447ee918e0a956cbd6646dea1c15b4513150d136df16ba3fdbc9d44b328ab0bed0c1b878b7da0e82", 0x8, &(0x7f00000001c0)={&(0x7f0000000300)="b7543fa45dcb9a97e0a6257ced148472d44570836ce830e5f7757a770dcc4068deb06d3ffb9fd2072640cf27e4b8c05eb15b165cf7684d7bfffab65815153f712448299d575c3979aafb65bc75012f2eec4d103c78c3d0a21d657dd3b87cef4d1739f461b667c464be08b5b566ec4720edca0706200cf7749f02adaf8ec4bb6d1736f3da929132396bc4c2c2eeb5f87a", 0x3}, 0x3488ff61, &(0x7f0000000480)="15aa39262458d9aaccbc416f2803b9c468915cb9b781fe03caa261c700b9aa281225b940dc5316586aaa08338cc6ab07a8f3d6480a0111d4a69be344d59743f750df4bc403d065baaa9f46c5bbe5bdf5568daeeecd8d65e3b7c5464d3bbc5a8a9581e2a1350cb96a8989904e312fc5599d0fe05c202ba22f29b9373dbef5ae3446a6c82cc4148e5a41eb9a0835f0da3b817bfd4558f33889c8b0c47a0c83151f8e0311d1effe3c670cee936027442233441c234a92f1019caf3c5513cfcfe8442acbea2ca5c3859c785ca955ae92a85a496d", 0x3, 0x8}, 0x8}, 0x5, 0x0) setsockopt$auto_SO_REUSEADDR(r0, 0x6, 0x2, &(0x7f0000000580)='\x00', 0x3) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DELAY(r3, 0x80084121, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x4, 0x6) socket(0x2, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) listen$auto(0x3, 0x83) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) r4 = epoll_create$auto(0x7) epoll_wait$auto(r4, 0x0, 0xe007, 0x1) r5 = prctl$auto_PR_SET_PDEATHSIG(0x1, 0xc164, 0x0, 0x8, 0x2) timerfd_settime$auto(r5, 0x2, &(0x7f0000000280)={{0x200000002, 0x5}, {0x4, 0x7fff}}, &(0x7f00000003c0)={{0x4a, 0x7}, {0x4, 0xffffffff}}) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/x86/boot_params/version\x00', 0x541, 0x0) ioctl$auto_TIOCSBRK2(r2, 0x5427, 0x0) r6 = socket(0x1e, 0x1, 0x0) bind$auto(r6, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}, 0xffffffff}}, 0x66) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) 5.893266954s ago: executing program 5 (id=1529): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{&(0x7f0000000100)="ba4cabc664df5d7b0e0536af8451f330ef703f7786edcff437e94c2f0420e167a15deaa1666085fe09f381832b6214f14a25347dbcdf92c5f8c3a514f4f6710c30b5867fcfd3875d2a3b4863667cded3083f4c980a8d19eb82a10ceef6b35b04b69d53b9adb269aff3286eb1224bdbd2dc306080fdecd372d454654a0d22fb48502b16b78cfbf3e37d0c467e21124b18adbf75447ee918e0a956cbd6646dea1c15b4513150d136df16ba3fdbc9d44b328ab0bed0c1b878b7da0e82", 0x8, &(0x7f00000001c0)={&(0x7f0000000300)="b7543fa45dcb9a97e0a6257ced148472d44570836ce830e5f7757a770dcc4068deb06d3ffb9fd2072640cf27e4b8c05eb15b165cf7684d7bfffab65815153f712448299d575c3979aafb65bc75012f2eec4d103c78c3d0a21d657dd3b87cef4d1739f461b667c464be08b5b566ec4720edca0706200cf7749f02adaf8ec4bb6d1736f3da929132396bc4c2c2eeb5f87a", 0x3}, 0x3488ff61, &(0x7f0000000480)="15aa39262458d9aaccbc416f2803b9c468915cb9b781fe03caa261c700b9aa281225b940dc5316586aaa08338cc6ab07a8f3d6480a0111d4a69be344d59743f750df4bc403d065baaa9f46c5bbe5bdf5568daeeecd8d65e3b7c5464d3bbc5a8a9581e2a1350cb96a8989904e312fc5599d0fe05c202ba22f29b9373dbef5ae3446a6c82cc4148e5a41eb9a0835f0da3b817bfd4558f33889c8b0c47a0c83151f8e0311d1effe3c670cee936027442233441c234a92f1019caf3c5513cfcfe8442acbea2ca5c3859c785ca955ae92a85a496d", 0x3, 0x8}, 0x8}, 0x5, 0x0) setsockopt$auto_SO_REUSEADDR(r0, 0x6, 0x2, &(0x7f0000000580)='\x00', 0x3) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DELAY(r3, 0x80084121, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x4, 0x6) socket(0x2, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) listen$auto(0x3, 0x83) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) r4 = epoll_create$auto(0x7) epoll_wait$auto(r4, 0x0, 0xe007, 0x1) r5 = prctl$auto_PR_SET_PDEATHSIG(0x1, 0xc164, 0x0, 0x8, 0x2) timerfd_settime$auto(r5, 0x2, &(0x7f0000000280)={{0x200000002, 0x5}, {0x4, 0x7fff}}, &(0x7f00000003c0)={{0x4a, 0x7}, {0x4, 0xffffffff}}) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/x86/boot_params/version\x00', 0x541, 0x0) ioctl$auto_TIOCSBRK2(r2, 0x5427, 0x0) r6 = socket(0x1e, 0x1, 0x0) bind$auto(r6, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}, 0xffffffff}}, 0x66) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) 5.044241634s ago: executing program 5 (id=1531): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r0, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)={0x51c, r1, 0x23, 0x70bd27, 0x25dfdbfe, {}, [@MACSEC_ATTR_SA_CONFIG={0x4}, @MACSEC_ATTR_RXSC_CONFIG={0x4}, @MACSEC_ATTR_RXSC_CONFIG={0x4fd, 0x2, 0x0, 0x1, [@generic="ccb330f496ef0d89a598b65a43694a270ddbae75d36dc5f32251f257c888bd46f1b8c73617205c08a4292d1a934e003ebf2b81a75bcfe167ec5b0b3d5e42cb4a6d41f79b6f07c357add90622cd2353c799479f61d90788ddef7fa5b90eba7f389e680832735377e8477e07024ba7e463e0110b1f86a5731158ac0276a09adf830c8f135f2091f61de7daa4e52ba158c3d5fe4e3ef579e8079decebb63223", @nested={0xcb, 0xd9, 0x0, 0x1, [@typed={0xc, 0x133, 0x0, 0x0, @u64=0xfffffffffffffffa}, @nested={0x4, 0xb1}, @generic="2a1c0400ccf4c87adc06417b6aa4910301126c634d33b3d20996869272a5b7e28d9f972aba856de20da1c6a9a2642646647ede5d6c53a0b0e840c199e891c781f8ca9eba2188aed151c650ebf648c8391185e399942bb29b9aa6e9ffe2b378c918954fb89c0994edd118b3f06393bb6a80acc1296fcb43278cb71461f5f32dbafb3a654a540e51ccf7b3579e70489a38a15b7d6e80623a4631e0944f5a549d5641226b21af67eeec924886398359cddd38974873063a1c"]}, @nested={0x7f, 0x49, 0x0, 0x1, [@generic="d6af18c48b9e13e968a4532a2923ba3a1582fbcc6b7a04a670832fdb91523caa3b6d02b42b4b5f151d36ce037e9eb8fe2d1e074f7f0f5d77a89bbc235daf452f5da4f62d97ad53614b9ae48ffa3e4c742eadc9280f1494904d4166", @typed={0x14, 0xa9, 0x0, 0x0, @ipv6=@private0={0xfc, 0x0, '\x00', 0x1}}, @typed={0x8, 0x90, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0x7d}]}, @nested={0xed, 0x50, 0x0, 0x1, [@generic="eb3fa66eceef6924d15819674cd7cce57fc2d444b6cfb3c566041a76912363876c5edd382015d9a4b244c77e81145acaa0302f9a611a90b501898d86683564eaf6058bcb7ebefe02bc5fbd479ea263860f60d0e595c9bc58ea27e4c9b7f60bdd538fc70fd6e583db6a69634710dbc9a1c5dc73b3df758461b4607c2e22d6b65759fdf7bfedbe0e4fd3f75ba61b7a79647f5af0b6094f638655682de35d39bfe6481de5090795cdfc60fcf4bc3391f34ddbf3537996a7315ab0ca835afdba22d7542722a844b5dfb260447e36fd7147d7fd0eece5df5a4bc55c7c99e1cfbebcb3c11538002c7287b57e"]}, @generic="d01ac1ac8747b9e103f17d39587b42b6f3c716097f7722eaba94b9ff6e6f1be5bc96c545c83cf14330be19f87b41535fa9d4ff678d52704fec64ce0c4ceae49b4ccfea65df84c8f93c85c450e70527876b224d33a53bfcfa14c2909ceda7f92c81d2d1aa71f71f16c1d8baadfc3d178a6b24fc4b8617b9588e30c944c6bd8bb6dd09edb8540f1ceee92fd9c3b7dac3fadcecc38b7c220a66a4248cbf26c814891653285873085e9a782914deffe3f08ef9920394902e406429a432595bab0690d098d170bf4f5f3c7fa5079bf49d99024f248b0b170534", @typed={0xda, 0x87, 0x0, 0x0, @binary="23ef13bfba8522e47459c750aef2136b11a0112bba60e2924b9d5f6e77bae1df1d877f3cd0ff5e1a39a6d96035072dbeb8d91ff40d434e8b61c852ba8f2a2275e0318e8bb67b07d61f82a8bd745af2226136c9d940e41c2916497101f224ef7d625257c2fd13a8a967dcc7b15a331a719ed1c048fa4bf436e4c3bb91024268646612c5ab23711c9590b00f0be317c0783f78616044e81af122fad409fd092ef8400256ca7ebe924a40d6e92012223be625d96ae9c1a02df75845cb348d9b0c1c5eec97b3bf682db113285b2cff801cdef4d632066156"}, @nested={0x6a, 0x29, 0x0, 0x1, [@typed={0x7, 0x51, 0x0, 0x0, @str='(#\x00'}, @generic="a7e9094fabd0663bc82b983fea8d89966f7b3f823f843a78ce5ae49611ad220e8d7c7e8a8fd340b42e4c04211af074b10fc90f76a8d61e54c0d8", @generic="1d4d3830fc53d66c37cdad10fa81384e80504ebd0dd2e65f837591e452441d25e76d3e17"]}]}]}, 0x51c}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) mmap$auto(0x0, 0x2020009, 0x5, 0xebd, r0, 0x2) sendmsg$auto_NFC_CMD_DEP_LINK_DOWN(0xffffffffffffffff, 0x0, 0x20000001) madvise$auto(0x0, 0x200007, 0x8) 4.655543648s ago: executing program 4 (id=1533): socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x10, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) bpf$auto(0x3, &(0x7f00000001c0)=@task_fd_query={0x0, 0x21eb, 0x8, 0x10007, 0x200000010007, 0x2, 0x5f, 0x20000000000803, 0x3}, 0x5) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB=' \x00\''], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) socketpair$auto(0x2, 0x4, 0x8000000000000000, 0x0) r0 = socket(0xa, 0x1, 0x84) r1 = epoll_create$auto(0x2) waitid$auto_P_PGID(0x2, r1, &(0x7f0000000040)={@_si_pad}, 0xe, &(0x7f00000000c0)={{0x80000001, 0x1}, {0x2, 0x36}, 0x7, 0xb, 0x4, 0xfffffffffffffff5, 0x8000, 0x4, 0x7, 0x8, 0x8001, 0x9, 0x9, 0x400, 0xde, 0x330e}) syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), r1) getsockopt$auto(r0, 0x0, 0x53, 0x0, 0x0) r2 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) fcntl$auto(r2, 0x400, 0x1) read$auto_ftrace_set_event_notrace_pid_fops_trace_events(r2, &(0x7f0000000100)=""/243, 0xf3) 4.490067456s ago: executing program 5 (id=1534): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x1f, 0x0, 0x1) socket(0x2b, 0x1, 0x1) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x2000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0xd5b, 0xc, 0x37, 0x948a, 0x2, 0x15f4da0a, 0x1, 0x3, 0x300000000000600, 0x40080000001, 0x7, 0x6d3c, 0x5, 0x9]}, 0x0) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x1, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f7) unshare$auto(0x40000080) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r1, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv6/conf/ip6gre0/ignore_routes_with_linkdown\x00', 0x202, 0x0) sendfile$auto(r3, r2, 0x0, 0x401) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0xf2, 0xffffffffffffffff, 0x0, 0x800}, 0x92) 4.280617812s ago: executing program 3 (id=1535): r0 = getsockopt$auto_SO_TYPE(0xffffffffffffffff, 0x7, 0x3, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=0x1) writev$auto(r0, &(0x7f00000002c0)={&(0x7f0000000200)="58754b577023add16eac737b2b9d7b9a3f26b99a7628888194ba9904a75dc7a978faa782485df1f788d1e7f208e4", 0x5}, 0x7fffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) io_uring_setup$auto(0x1, &(0x7f0000000240)={0x5, 0x482, 0xfffffffd, 0x2, 0xfcc5c64, 0x2, 0xffffffffffffffff, [0x6, 0x72a0fa25, 0xa], {0x202, 0x5, 0x200, 0x1, 0x1, 0x80000000, 0x7d9, 0x7, 0x5}, {0x81, 0x5, 0x2, 0x2, 0x1, 0x1, 0x2, 0x9, 0x46}}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x40000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x1d, 0x2, 0x7) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/vxcan1/forwarding\x00', 0x82002, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) sendfile$auto(r1, r2, 0x0, 0x1) 4.154614868s ago: executing program 4 (id=1536): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) (async) r0 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/irq/12/affinity_hint\x00', 0x82340, 0x0) read$auto(r0, &(0x7f0000000040)='a\x00p\x06\x04}S\xfd\xfe(\xa1a\x15O\xdd$\xc3!E\xd7L\xd4\xc9\x96\xc8\x03\xfa\xb9\xb3\x98\xc0\xa6\xad\x1a\xc5\xce\xf8\x11O\xdf\xce<\xc2\x81,\x97l\x93\xe0\xf86F\xce\f6\"\x8f\xac7\x83\x91 ', 0x80) semctl$auto(0x7ff, 0x2, 0x13, 0x3) (async) mbind$auto(0x0, 0x40, 0x4, 0x0, 0x3, 0x0) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x15) (async) madvise$auto(0x0, 0x8, 0x3) 3.832472095s ago: executing program 0 (id=1537): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r0 = io_uring_setup$auto(0x2, 0x0) mmap$auto(0x4, 0x8, 0x9, 0x4009b72, 0xffffffffffffffff, 0x40008000) r1 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, 0x0, 0xa901, 0x0) ioctl$auto_USBDEVFS_RELEASE_PORT(r1, 0x80045519, &(0x7f0000000000)=0x1) move_pages$auto(0x1, 0x235, 0x0, 0x0, 0x0, 0x8000000000000000) r2 = syz_genetlink_get_family_id$auto_mac802154_hwsim(&(0x7f0000000200), 0xffffffffffffffff) r3 = geteuid() setreuid$auto(r3, 0x0) statx$auto(0xffffffffffffffff, &(0x7f0000000340)='./file0\x00', 0x4, 0x2, &(0x7f0000000480)={0x5, 0xf, 0x7, 0x7, r3, 0xffffffffffffffff, 0x7, 0xa1c9, 0x8, 0x1ff, 0x2, 0x6, {0x9, 0x80}, {0x2, 0x1}, {0x9, 0xfffffc00}, {0x5, 0x2}, 0x11, 0xdfa, 0x7, 0x2, 0x4, 0x855a, 0x7f, 0xfffffffffffffff8, 0x4, 0x0, 0x87, 0x5, [0x8, 0x2d52, 0x8, 0x9, 0x0, 0x9, 0xfffffffffffffffc, 0x3, 0x3391]}) shmctl$auto_SHM_LOCK(0xfffffffd, 0xb, &(0x7f00000003c0)={{0x3, 0xee00, 0xee00, 0x6, 0xfff, 0x5, 0x4}, 0x0, 0x6, 0x5, 0x7fffffffffffffff, @inferred, @inferred=0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000240), &(0x7f0000000300)}) ioctl$auto_XFS_IOC_FREESP64(0xffffffffffffffff, 0x40305825, &(0x7f0000000440)={0x7f, 0x6, 0x8, 0x0, 0x1d64, 0xffffffffffffffff}) shmctl$auto_IPC_STAT(0x0, 0x2, &(0x7f0000000580)={{0x3, 0xffffffffffffffff, 0x0, 0xfffffff8, 0x8, 0xdc, 0x6}, 0xe, 0x1, 0x10, 0x6, @raw, @inferred=0xffffffffffffffff, 0x4, 0x0, &(0x7f0000000480)="8ab83b3f8581bd38de9199a162e50a19a0ffb71c88a53471806bbc5343e6ab49b244dd6ad168310c5d8ebc5b10069d0b3e83766aa589259b7a6fa228ea82938369c4529bf7633ce5ee4aba4e55cc74152c06", &(0x7f0000000500)="2f9c5dbb6fcca0e99fd8fa625085c2c719e0d99c05f30f13f5bd016659f2bbcfb0799c240d9a0c59694a001ff79aa1cc970319dd342c33657e6609bb7132e3da932f3af8cc1cc07293bfb191cab8598f99a9"}) sendmsg$auto_MAC802154_HWSIM_CMD_NEW_EDGE(0xffffffffffffffff, &(0x7f0000000f00)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000600)={0x884, r2, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0xfffffffd}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0xe8, 0x3, 0x0, 0x1, [@typed={0xce, 0x6f, 0x0, 0x0, @binary="afae254572fd392ea8404d1f19250651e90c7037e3745b53ef1057c4417bf03ef5ce41b021c441fc26761060b3a59577bef82da5e488c7a2599058474511425063c00996c711cfd8ec5f777a3356e58cec500fe0fd28bcf28012a55429c2feef116e4711f2843a732464125dd38f839b85c6e1a5a27a5e2d9a82290b8ca1290bae9a10af8b528091da0f4daba0010691dbad7e92f48e82374f2054dc61d9421cc2e6c277068489c34c0637854426776889479e5489c6c4e378ac6b7e650b7ed04860106300805dcb9bb1"}, @nested={0x14, 0xf2, 0x0, 0x1, [@nested={0x4, 0x8e}, @nested={0x4, 0x4a}, @typed={0x8, 0x136, 0x0, 0x0, @fd=r0}]}]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0x401}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x222, 0x2, 0x0, 0x1, [@nested={0x132, 0x3e, 0x0, 0x1, [@nested={0x4, 0x83}, @typed={0x8, 0xb3, 0x0, 0x0, @ipv4=@broadcast}, @generic="23fbe6091117a3e20ed46d824af29cafb77711bdb5ac9a2087a07b5cd384f3f8e2853a37d4debaf741c39031919f728dfdc382cc318778403ec90f55c92b448ce29fc9ebe08d46b25ceb0fdfdb23139b8d19ebe446bd5f17c64ed8d22d4fa43cd4deb6bdd4f12e183dab3a7ee672f84e3249218997cb7716b6489747e6a8dd8212a47457ff73882c32e947bedf1dea880b1cc19ffd14698095", @typed={0xc, 0xf4, 0x0, 0x0, @u64=0x7}, @generic="4d464e6efbc59039b5e7371a60f24c23fa11c50aad6b50e6d4ec8cc9cab82e8cca746b2422ac7493cc7d81037f35fe2ad4c88e1f59ead521690ab0c93d996129e1740e578b724199849e6ee73a4b4b3b8a88415b7709a385969373788a904b22950215ad88be3c378afb7b8dbe", @nested={0x4, 0xc8}, @typed={0x7, 0xe5, 0x0, 0x0, @str='-(\x00'}, @typed={0x4, 0x33}]}, @generic="b021896d286c4cc385719bd194bbbecf6d0e60b8a81f961de4709f07fddd757ecfa4c91b78b5256dd5ccffe59f42291eb154bef7295c9cc00ae598eef159b667db3ae6ad9145471a4d63b86f4fecc1631a5c410403bf06936b63800f4c2a9ffe19c86039601fe5683774de21fbed8dba1fbbed36576f3d54266617d4abcd2471d56f9839930050fc550432fdb2c377353a57aff52d6ffd9a0aa9a510ee30bcea557e35a66219595d0288e14edff7de573e3ff058e98a006cf93847d99b893feab024e0ef8c1c09de01ed7d53bc4757669e73fbd338dc02a68ada23c1c19716e0275ea74450a7685b731a"]}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0x15a, 0x2, 0x0, 0x1, [@nested={0x8d, 0xa7, 0x0, 0x1, [@generic="ee311882bfcb7cb58089e4e8e8538d35412d61025403974296ee96b621205249a578747b072ee859247c6aa2d769818d3715495d899b0adf08e7b70d475afda8210f5ba52994fcc139b166eb4e727b8eba4596f522ec4298a124233e60ff46893ad1082179740852db9134e30f9f54ed03e774ef48", @typed={0x14, 0x146, 0x0, 0x0, @ipv6=@local}]}, @nested={0x9b, 0xcf, 0x0, 0x1, [@nested={0x4, 0xa0}, @typed={0x8, 0x8e, 0x0, 0x0, @uid=r3}, @generic="a7ed8ccca81dc145075cafa80e9b49dd0f2687f9bc10a44cb551d55e6f60070edb1f93177b6ae18e41a2f0d5f90537a570471475954cb83c83a6424772c9c8a7c5d1112924d92fe87a021bc407e99498e9be8cef7de709", @typed={0x8, 0x142, 0x0, 0x0, @uid=0xee01}, @generic="b9620ad239dbbb01753534591624ac9df9bb76c2996d8dec99759f5c3ac9d2ca318a1d22", @nested={0x4, 0xeb}, @nested={0x4, 0x91}]}, @nested={0x18, 0x77, 0x0, 0x1, [@nested={0x4, 0x2d}, @typed={0x4, 0xe0}, @nested={0x4, 0x84}, @nested={0x4, 0x3b}, @nested={0x4, 0xbc}]}, @generic="c7514ab471748b7ad2f60eb7b3adb790c8b1"]}, @MAC802154_HWSIM_ATTR_RADIO_ID={0x8, 0x1, 0xf}, @MAC802154_HWSIM_ATTR_RADIO_EDGES={0x309, 0x3, 0x0, 0x1, [@generic="4fb7f5259316d160d39c61a8bf76d3068a8db434512bd3e7db", @nested={0xa9, 0xba, 0x0, 0x1, [@nested={0x4, 0xa4}, @generic="5523074d0bf0a0096ce0e8486628b8c0028b70ab4b6918f99a2df019f763f63e2ed8e96bc8d55bbdbdaca04120f19a775d047047450d97d32bf2e053dbaef3f896d344e86fe2600f12d451a3c1af5654afed77ae57d8f3d681e4b57591c03b80fb804f4018eb03899757360dd444b1c21fea5753656d90f314aee396b3cdc49e60134520138ab708b9739208a6", @typed={0x8, 0xd, 0x0, 0x0, @ipv4=@broadcast}, @typed={0xc, 0xe4, 0x0, 0x0, @u64=0x1}]}, @nested={0x23f, 0x146, 0x0, 0x1, [@generic="3a975df3965b99e82f4b998c883afeeabd4ae1303100f8b8c66af0ac7978b4b4eb07d93ae5f65ed660553d09896466c8c7235f1ae16a5c2c46c5b256c4ce17f6187da9cb62e3b8d68bc860c2f0e1d7d2e20405726431a85e19eac9a4b2dd2cd614fea98e6d8567681127ba895a8fa0f2563e9466acb4cc9d9d38f17aa3f5eed4391781d061938b4d570aa8edb555ab49c03f998f5f54353f099c0d8f34b3713936ad818b3bb17218b6d60b4641967fc5feccbe99d35ebd92b128de1545bc20dc44164c72", @typed={0x7b, 0x8a, 0x0, 0x0, @binary="632df069e50ce8011eb585c0e21acf007aa227007ea21c4d1339a9e2c274712341275e3035f6cc4c15c0e58b02820b229a650f04bd4e559d6d4b639153a5aaa0389ab8fb97fe8db9b23a5dde340b92333d635dffa79f422ba12c3d2ff856d7ed3d5cfe99834f326fba957a5b9f99d5aa2b3717ab8806bf"}, @generic="4b0c1469f24a2a44fb1617542d61059b56d1a894848973ccb6a88fcecd0f8ae228dd44c49367512ed18287d41f5d37bad15bbb623c54fffd0a39b33f5951d28a1c4d8bd10328b88e5f5acf74941b4bbd788b6718d45137b139e2eca9584656a8fe2f3e1f52217f14a943fcb4fe896221745f3a30adb518c32290118c967c1df0b471027acc7d85373e0db7354b1295d88aa49aa3560e434493ffe198f2fa6d2fc57ade134ef3cac22df870fc01b057399a6748a526ddd4c1f5324d47960f26a3ee8694b9f19b1dd8010017bc57a3b6f6c0359eb4e67d4fae65c32c1ac57f7ef2bfc29aecb0f565a65556400bb2248016fe76c69085dd75", @nested={0x4, 0xa8}]}]}, @MAC802154_HWSIM_ATTR_RADIO_EDGE={0xe1, 0x2, 0x0, 0x1, [@typed={0x19, 0xc0, 0x0, 0x0, @str='/dev/bus/usb/015/001\x00'}, @nested={0x10, 0xb3, 0x0, 0x1, [@typed={0x8, 0xef, 0x0, 0x0, @ipv4=@local}, @nested={0x4, 0x73}]}, @typed={0x8, 0x13e, 0x0, 0x0, @uid=r4}, @typed={0x8, 0xb9, 0x0, 0x0, @pid=r5}, @typed={0x2e, 0xfd, 0x0, 0x0, @binary="0cce815dcfc6deccc377099edd615218612293dc056c9da19582a028e91dff62d0c5302b86f5a800e04e"}, @generic="db546cc9bf437e2856f8cc6126340af105da2ecdd4d863cc6c0ceb3707d87618abf6a546b65707da7452acf34d3f9ad90a37b6d81e3bf8e17232a02349081bb903961b64afe941b72f12a3c3f2edce8f5a8381da6a98508bbc1292647166383f5e3d254a08bc919d35", @typed={0x8, 0x81, 0x0, 0x0, @uid=r6}]}]}, 0x884}}, 0x15) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) sysfs$auto(0x2, 0xd, 0x0) r7 = fsopen$auto(0x0, 0x1) fsconfig$auto(r7, 0x8, 0x0, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) 3.703132773s ago: executing program 4 (id=1538): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x1f, 0x0, 0x1) socket(0x2b, 0x1, 0x1) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x2000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0xd5b, 0xc, 0x37, 0x948a, 0x2, 0x15f4da0a, 0x1, 0x3, 0x300000000000600, 0x40080000001, 0x7, 0x6d3c, 0x5, 0x9]}, 0x0) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x1, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f7) unshare$auto(0x40000080) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r1, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv6/conf/ip6gre0/ignore_routes_with_linkdown\x00', 0x202, 0x0) sendfile$auto(r3, r2, 0x0, 0x401) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0xf2, 0xffffffffffffffff, 0x0, 0x800}, 0x92) 3.498100268s ago: executing program 3 (id=1539): r0 = getsockopt$auto_SO_TYPE(0xffffffffffffffff, 0x7, 0x3, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=0x1) writev$auto(r0, &(0x7f00000002c0)={&(0x7f0000000200)="58754b577023add16eac737b2b9d7b9a3f26b99a7628888194ba9904a75dc7a978faa782485df1f788d1e7f208e4", 0x5}, 0x7fffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) io_uring_setup$auto(0x1, &(0x7f0000000240)={0x5, 0x482, 0xfffffffd, 0x2, 0xfcc5c64, 0x2, 0xffffffffffffffff, [0x6, 0x72a0fa25, 0xa], {0x202, 0x5, 0x200, 0x1, 0x1, 0x80000000, 0x7d9, 0x7, 0x5}, {0x81, 0x5, 0x2, 0x2, 0x1, 0x1, 0x2, 0x9, 0x46}}) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x40000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/vxcan1/forwarding\x00', 0x82002, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) sendfile$auto(r1, r2, 0x0, 0x1) 3.055667706s ago: executing program 0 (id=1540): r0 = getsockopt$auto_SO_TYPE(0xffffffffffffffff, 0x7, 0x3, &(0x7f0000000180)='\x00', &(0x7f00000001c0)=0x1) writev$auto(r0, &(0x7f00000002c0)={&(0x7f0000000200)="58754b577023add16eac737b2b9d7b9a3f26b99a7628888194ba9904a75dc7a978faa782485df1f788d1e7f208e4", 0x5}, 0x7fffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/conf/vxcan1/forwarding\x00', 0x82002, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv6/conf/virt_wifi0/ra_defrtr_metric\x00', 0x0, 0x0) capset$auto(&(0x7f0000000180)={0x19980330}, 0x0) sendfile$auto(r1, r2, 0x0, 0x1) 2.882809393s ago: executing program 5 (id=1541): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x1f, 0x0, 0x1) socket(0x2b, 0x1, 0x1) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x2000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0xd5b, 0xc, 0x37, 0x948a, 0x2, 0x15f4da0a, 0x1, 0x3, 0x300000000000600, 0x40080000001, 0x7, 0x6d3c, 0x5, 0x9]}, 0x0) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x1, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f7) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x11, 0xffffffffffffffff, 0x62) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r1, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv6/conf/ip6gre0/ignore_routes_with_linkdown\x00', 0x202, 0x0) sendfile$auto(r3, r2, 0x0, 0x401) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0xf2, 0xffffffffffffffff, 0x0, 0x800}, 0x92) 2.440830409s ago: executing program 4 (id=1542): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x2b, 0x1, 0x0) io_uring_register$auto(0xffffffffffffffff, 0x1f, 0x0, 0x1) socket(0x2b, 0x1, 0x1) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/tracing/per_cpu/cpu0/trace_pipe\x00', 0x2000, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYBLOB="2f212abd"], 0x14}}, 0x4000000) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x42, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000340)='/dev/snd/midiC2D3\x00', 0x2001, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f0000000180)={[0x1ff, 0xd5b, 0xc, 0x37, 0x948a, 0x2, 0x15f4da0a, 0x1, 0x3, 0x300000000000600, 0x40080000001, 0x7, 0x6d3c, 0x5, 0x9]}, 0x0) close_range$auto(0x2, 0x8, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0x7ffff000) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x00\rs\x1cJ\x99\x00:c\x14\r>\x94\x1a\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\xf1`\x9f\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2', 0x4e, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x1, 0x8, 0xc, 0xe3, 0x4000000002, 0x3}, 0x6f7) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x11, 0xffffffffffffffff, 0x62) openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0x1c1041, 0x0) r1 = openat$auto_proc_single_file_operations_base(0xffffffffffffff9c, &(0x7f0000000040)='/proc/meminfo\x00', 0x0, 0x0) ppoll$auto(&(0x7f00000000c0)={r1, 0xf81, 0x27f}, 0x3, 0x0, 0x0, 0x8) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/sys/net/ipv6/conf/ip6gre0/ignore_routes_with_linkdown\x00', 0x202, 0x0) sendfile$auto(r3, r2, 0x0, 0x401) bpf$auto(0x18, &(0x7f0000000040)=@raw_tracepoint={0xf2, 0xffffffffffffffff, 0x0, 0x800}, 0x92) 2.440709584s ago: executing program 3 (id=1543): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r0, &(0x7f00000002c0)={0x0, 0xe4, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000fadbdf250400fc0008000c000200000076cd35df35bdc791e646e3f69a70f4085acde7bb7e2cf2314a61791afc49089ffde12a29cc58288105780542323bd948e4074aaa360f9c7afbbf24f04b90a7dd68c501ed3d33865aa35f7c6bfccfdb5fd145d04ec7000000"], 0x1c}}, 0x4044820) 2.190531039s ago: executing program 5 (id=1544): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0x1701, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x844) (fail_nth: 5) 1.50777831s ago: executing program 3 (id=1545): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000140), 0xffffffffffffffff) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/bdi/7:11/read_ahead_kb\x00', 0x1a1942, 0x0) write$auto(r2, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/mtrr\x00', 0xc0000, 0x0) ioctl$auto(0x3, 0xc0585605, 0x38) sendmsg$auto_SEG6_CMD_DUMPHMAC(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB, @ANYRES16=r1, @ANYBLOB="01172cbd7000ffdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x844) 1.309848933s ago: executing program 4 (id=1546): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, 0x0, 0x4000000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{&(0x7f0000000100)="ba4cabc664df5d7b0e0536af8451f330ef703f7786edcff437e94c2f0420e167a15deaa1666085fe09f381832b6214f14a25347dbcdf92c5f8c3a514f4f6710c30b5867fcfd3875d2a3b4863667cded3083f4c980a8d19eb82a10ceef6b35b04b69d53b9adb269aff3286eb1224bdbd2dc306080fdecd372d454654a0d22fb48502b16b78cfbf3e37d0c467e21124b18adbf75447ee918e0a956cbd6646dea1c15b4513150d136df16ba3fdbc9d44b328ab0bed0c1b878b7da0e82", 0x8, &(0x7f00000001c0)={&(0x7f0000000300)="b7543fa45dcb9a97e0a6257ced148472d44570836ce830e5f7757a770dcc4068deb06d3ffb9fd2072640cf27e4b8c05eb15b165cf7684d7bfffab65815153f712448299d575c3979aafb65bc75012f2eec4d103c78c3d0a21d657dd3b87cef4d1739f461b667c464be08b5b566ec4720edca0706200cf7749f02adaf8ec4bb6d1736f3da929132396bc4c2c2eeb5f87a", 0x3}, 0x3488ff61, &(0x7f0000000480)="15aa39262458d9aaccbc416f2803b9c468915cb9b781fe03caa261c700b9aa281225b940dc5316586aaa08338cc6ab07a8f3d6480a0111d4a69be344d59743f750df4bc403d065baaa9f46c5bbe5bdf5568daeeecd8d65e3b7c5464d3bbc5a8a9581e2a1350cb96a8989904e312fc5599d0fe05c202ba22f29b9373dbef5ae3446a6c82cc4148e5a41eb9a0835f0da3b817bfd4558f33889c8b0c47a0c83151f8e0311d1effe3c670cee936027442233441c234a92f1019caf3c5513cfcfe8442acbea2ca5c3859c785ca955ae92a85a496d", 0x3, 0x8}, 0x8}, 0x5, 0x0) setsockopt$auto_SO_REUSEADDR(r0, 0x6, 0x2, &(0x7f0000000580)='\x00', 0x3) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DELAY(r3, 0x80084121, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x4, 0x6) socket(0x2, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) listen$auto(0x3, 0x83) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) r4 = epoll_create$auto(0x7) epoll_wait$auto(r4, 0x0, 0xe007, 0x1) r5 = prctl$auto_PR_SET_PDEATHSIG(0x1, 0xc164, 0x0, 0x8, 0x2) timerfd_settime$auto(r5, 0x2, &(0x7f0000000280)={{0x200000002, 0x5}, {0x4, 0x7fff}}, &(0x7f00000003c0)={{0x4a, 0x7}, {0x4, 0xffffffff}}) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/x86/boot_params/version\x00', 0x541, 0x0) ioctl$auto_TIOCSBRK2(r2, 0x5427, 0x0) r6 = socket(0x1e, 0x1, 0x0) bind$auto(r6, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}, 0xffffffff}}, 0x66) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) 1.309702875s ago: executing program 5 (id=1547): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, 0x0, 0x100, 0x0) prctl$auto(0x29, 0x0, 0x0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/bus/usb/drivers/smsusb/uevent\x00', 0x141c01, 0x0) write$auto(r1, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/rotate\x00', 0xe18) socket(0x10, 0x2, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x10, 0x2, 0x14) openat$auto_cgwb_debug_stats_fops_(0xffffffffffffff9c, &(0x7f00000010c0)='/sys/kernel/debug/bdi/1:15/wb_stats\x00', 0x40, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_ovs_packet(0x0, 0xffffffffffffffff) socket(0x2, 0x3, 0x100) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/fib_triestat\x00', 0x0, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) ioctl$auto_KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$auto(0x3, 0xae41, r3) ioctl$auto_KVM_CREATE_VM(r2, 0x4048aecb, 0x0) r4 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r5, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x20, r4, 0x101, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x60040440}, 0x0) read$auto(r0, 0x0, 0x255) madvise$auto(0x0, 0x1010001, 0x100000003) 1.255538155s ago: executing program 3 (id=1548): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x101000, 0x0) socket(0x18, 0x2, 0x0) socket(0xa, 0x6, 0x0) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) ioctl$auto_SG_GET_TIMEOUT2(0xffffffffffffffff, 0x2202, &(0x7f00000005c0)="a0fbdc0851dab68266775d6c3f1d81bbc8cf29db241f757b8c0e8681b2c8a891aa166c2da48690c8978741c85ee2fc5261f58290be915ecd58e43cde0a974f29ac63033ed4586b10374b2b35ac88951d3a234fc067910a058d57ce6605129889a397000f6f3d991dac1be47cf436af5503c3ef619ba8d1137943eb211cab670eb3a30cc6bf4d4ca1530dedf364f11b101140d1545d174d1c90090bce830f1c9e04882773") r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/midiC2D3\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket(0x15, 0x1, 0x0) socket(0x1d, 0x2, 0x6) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) clone$auto(0xffff, 0x7, 0xfffffffffffffffe, 0xffffffffffffffff, 0xffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_TCP_METRICS_CMD_GET(r1, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x20000000) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x806, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/ifb0/statistics/tx_fifo_errors\x00', 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x5, 0xdf, 0x9b72, 0x7, 0x28000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x55) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0)=@l2tp={0x2, 0x0, @multicast1}, 0x55) 948.50414ms ago: executing program 0 (id=1549): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/platform/vivid.0/video4linux/vbi18/power/autosuspend_delay_ms\x00', 0x34001, 0x0) mmap$auto(0x0, 0x400008, 0xdb, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/devices/virtual/net/bond0/queues/rx-9/rps_cpus\x00', 0x2002, 0x0) write$auto(r0, &(0x7f0000000040)='1\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) 288.571672ms ago: executing program 4 (id=1550): openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x80102, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x4000000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) sendmmsg$auto(r0, &(0x7f0000000200)={{&(0x7f0000000100)="ba4cabc664df5d7b0e0536af8451f330ef703f7786edcff437e94c2f0420e167a15deaa1666085fe09f381832b6214f14a25347dbcdf92c5f8c3a514f4f6710c30b5867fcfd3875d2a3b4863667cded3083f4c980a8d19eb82a10ceef6b35b04b69d53b9adb269aff3286eb1224bdbd2dc306080fdecd372d454654a0d22fb48502b16b78cfbf3e37d0c467e21124b18adbf75447ee918e0a956cbd6646dea1c15b4513150d136df16ba3fdbc9d44b328ab0bed0c1b878b7da0e82", 0x8, &(0x7f00000001c0)={&(0x7f0000000300)="b7543fa45dcb9a97e0a6257ced148472d44570836ce830e5f7757a770dcc4068deb06d3ffb9fd2072640cf27e4b8c05eb15b165cf7684d7bfffab65815153f712448299d575c3979aafb65bc75012f2eec4d103c78c3d0a21d657dd3b87cef4d1739f461b667c464be08b5b566ec4720edca0706200cf7749f02adaf8ec4bb6d1736f3da929132396bc4c2c2eeb5f87a", 0x3}, 0x3488ff61, &(0x7f0000000480)="15aa39262458d9aaccbc416f2803b9c468915cb9b781fe03caa261c700b9aa281225b940dc5316586aaa08338cc6ab07a8f3d6480a0111d4a69be344d59743f750df4bc403d065baaa9f46c5bbe5bdf5568daeeecd8d65e3b7c5464d3bbc5a8a9581e2a1350cb96a8989904e312fc5599d0fe05c202ba22f29b9373dbef5ae3446a6c82cc4148e5a41eb9a0835f0da3b817bfd4558f33889c8b0c47a0c83151f8e0311d1effe3c670cee936027442233441c234a92f1019caf3c5513cfcfe8442acbea2ca5c3859c785ca955ae92a85a496d", 0x3, 0x8}, 0x8}, 0x5, 0x0) setsockopt$auto_SO_REUSEADDR(r0, 0x6, 0x2, &(0x7f0000000580)='\x00', 0x3) r1 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r1, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) r2 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) r3 = openat$auto_snd_pcm_f_ops_pcm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/pcmC1D0p\x00', 0x0, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_DELAY(r3, 0x80084121, 0x0) rseq$auto(&(0x7f0000000300)={0xe, 0x401, 0x0, 0x6, 0xffffffff, 0x2}, 0x8000, 0x4, 0x6) socket(0x2, 0x1, 0x84) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) listen$auto(0x3, 0x83) accept$auto(0x3, 0xffffffffffffffff, 0xfffffffffffffffd) r4 = epoll_create$auto(0x7) epoll_wait$auto(r4, 0x0, 0xe007, 0x1) r5 = prctl$auto_PR_SET_PDEATHSIG(0x1, 0xc164, 0x0, 0x8, 0x2) timerfd_settime$auto(r5, 0x2, &(0x7f0000000280)={{0x200000002, 0x5}, {0x4, 0x7fff}}, &(0x7f00000003c0)={{0x4a, 0x7}, {0x4, 0xffffffff}}) ioctl$auto_IOCTL_VMCI_NOTIFICATIONS_RECEIVE(r2, 0x7a6, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) openat$auto_fops_x16_ro_(0xffffffffffffff9c, &(0x7f00000005c0)='/sys/kernel/debug/x86/boot_params/version\x00', 0x541, 0x0) ioctl$auto_TIOCSBRK2(r2, 0x5427, 0x0) r6 = socket(0x1e, 0x1, 0x0) bind$auto(r6, &(0x7f0000000040)=@tipc=@name={0x1e, 0x2, 0x0, {{0x2}, 0xffffffff}}, 0x66) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) 26.007066ms ago: executing program 3 (id=1551): socket(0xa, 0x2, 0x0) unshare$auto(0x40000080) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ip6_mr_vif\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f00000000c0)=""/4087, 0xff7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x0, 0x8000) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/mm/transparent_hugepage/shrink_underused\x00', 0x200, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/12, 0xc) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/block/nbd3/queue/iosched/write_expire\x00', 0x20681, 0x0) r3 = open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) r4 = openat$auto_buffer_percent_fops_trace(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/tracing/buffer_percent\x00', 0x1, 0x0) writev$auto(r4, &(0x7f00000035c0)={0x0, 0x4}, 0x9) fcntl$auto(r3, 0x400, 0x1) r5 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r5, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x100110d, 0xffff, 0x6, "e9277803000000e92fe8ec7a46cbb766439daa1ee1aa00000000e1800000000000000004040000660e070100", @raw=0xfff}, 0x6, 0x0, 0x4, @raw=0x404, @integer64={0x6, 0x8, 0x6}, "a4699d30a05edbe0d28473c399a7dc920b153e9b1675451d7de94b4123f970bedd3460c667373fcc59b584d81592f6ab606c276852295e00af49e6de6e768034"}) brk$auto(0x8) execve$auto(&(0x7f00000000c0)='./file0\x00', 0x0, 0x0) execve$auto(&(0x7f0000000180)='./file0\x00', 0x0, 0x0) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/locks\x00', 0x0, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f00000000c0)='-7', 0x2) close_range$auto(0x2, 0x8, 0x0) 0s ago: executing program 0 (id=1552): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000080), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'batadv0\x00'}) sendmsg$auto_BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xb00}, 0x20000000) kernel console output (not intermixed with test programs): 111.579953][ T6373] should_fail_ex+0x50a/0x650 [ 111.579991][ T6373] ? fs_reclaim_acquire+0xae/0x150 [ 111.580024][ T6373] should_failslab+0xc2/0x120 [ 111.580048][ T6373] __kmalloc_node_noprof+0xd1/0x510 [ 111.580084][ T6373] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 111.580122][ T6373] __kvmalloc_node_noprof+0xad/0x1a0 [ 111.580156][ T6373] __v4l2_subdev_state_alloc+0x1a3/0x3f0 [ 111.580195][ T6373] subdev_open+0xa6/0x560 [ 111.580230][ T6373] v4l2_open+0x222/0x490 [ 111.580257][ T6373] ? __pfx_v4l2_open+0x10/0x10 [ 111.580281][ T6373] chrdev_open+0x237/0x6a0 [ 111.580314][ T6373] ? __pfx_apparmor_file_open+0x10/0x10 [ 111.580343][ T6373] ? __pfx_chrdev_open+0x10/0x10 [ 111.580379][ T6373] ? file_set_fsnotify_mode_from_watchers+0x163/0x640 [ 111.580416][ T6373] do_dentry_open+0x735/0x1c40 [ 111.580448][ T6373] ? __pfx_chrdev_open+0x10/0x10 [ 111.580482][ T6373] ? inode_permission+0xdd/0x5f0 [ 111.580511][ T6373] vfs_open+0x82/0x3f0 [ 111.580533][ T6373] ? may_open+0x1f2/0x400 [ 111.580562][ T6373] path_openat+0x1e88/0x2d80 [ 111.580600][ T6373] ? __pfx_path_openat+0x10/0x10 [ 111.580632][ T6373] ? __pfx___lock_acquire+0x10/0x10 [ 111.580661][ T6373] ? lock_acquire.part.0+0x11b/0x380 [ 111.580690][ T6373] ? find_held_lock+0x2d/0x110 [ 111.580715][ T6373] do_filp_open+0x20c/0x470 [ 111.580745][ T6373] ? __pfx_do_filp_open+0x10/0x10 [ 111.580773][ T6373] ? find_held_lock+0x2d/0x110 [ 111.580831][ T6373] ? alloc_fd+0x41f/0x760 [ 111.580874][ T6373] do_sys_openat2+0x17a/0x1e0 [ 111.580900][ T6373] ? __pfx_do_sys_openat2+0x10/0x10 [ 111.580929][ T6373] ? __pfx___might_resched+0x10/0x10 [ 111.580971][ T6373] __x64_sys_openat+0x175/0x210 [ 111.580996][ T6373] ? __pfx___x64_sys_openat+0x10/0x10 [ 111.581034][ T6373] do_syscall_64+0xcd/0x250 [ 111.581068][ T6373] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.581101][ T6373] RIP: 0033:0x7fddfd58d169 [ 111.581122][ T6373] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.581144][ T6373] RSP: 002b:00007fddfe3ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 111.581170][ T6373] RAX: ffffffffffffffda RBX: 00007fddfd7a5fa0 RCX: 00007fddfd58d169 [ 111.581186][ T6373] RDX: 0000000000000280 RSI: 0000400000000000 RDI: ffffffffffffff9c [ 111.581202][ T6373] RBP: 00007fddfd60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 111.581217][ T6373] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 111.581232][ T6373] R13: 0000000000000000 R14: 00007fddfd7a5fa0 R15: 00007fff8041ac08 [ 111.581263][ T6373] [ 114.271715][ T6429] snd_virmidi snd_virmidi.0: control 3:6:1068:IAJ:127 is already present [ 117.387270][ T6467] snd_aloop snd_aloop.0: control 772:1:8:1Õ…:-4095 is already present [ 119.842894][ T6513] program syz.3.163 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 119.900976][ T6513] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 120.585925][ T6518] snd_aloop snd_aloop.0: control 772:1:8:1Õ…:-4095 is already present [ 120.982601][ T6527] snd_aloop snd_aloop.0: control 772:1:8:1Õ…:-4095 is already present [ 122.914017][ T6557] snd_virmidi snd_virmidi.0: control 3:6:1068:IAJ:127 is already present [ 123.337936][ T6563] FAULT_INJECTION: forcing a failure. [ 123.337936][ T6563] name fail_futex, interval 1, probability 0, space 0, times 1 [ 123.375683][ T6563] CPU: 0 UID: 0 PID: 6563 Comm: syz.2.176 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 123.375717][ T6563] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 123.375730][ T6563] Call Trace: [ 123.375737][ T6563] [ 123.375745][ T6563] dump_stack_lvl+0x16c/0x1f0 [ 123.375781][ T6563] should_fail_ex+0x50a/0x650 [ 123.375814][ T6563] ? __lock_acquire+0x15a9/0x3c40 [ 123.375848][ T6563] get_futex_key+0x4a3/0x1000 [ 123.375878][ T6563] ? __pfx_get_futex_key+0x10/0x10 [ 123.375915][ T6563] futex_wake+0xe8/0x4e0 [ 123.375948][ T6563] ? __pfx_futex_wake+0x10/0x10 [ 123.375991][ T6563] ? find_held_lock+0x2d/0x110 [ 123.376032][ T6563] do_futex+0x1e5/0x350 [ 123.376059][ T6563] ? __pfx_do_futex+0x10/0x10 [ 123.376085][ T6563] ? __might_fault+0xe3/0x190 [ 123.376109][ T6563] ? __might_fault+0xe3/0x190 [ 123.376148][ T6563] mm_release+0x24e/0x300 [ 123.376180][ T6563] do_exit+0x886/0x2d70 [ 123.376206][ T6563] ? get_signal+0x8f7/0x26c0 [ 123.376238][ T6563] ? __pfx_do_exit+0x10/0x10 [ 123.376261][ T6563] ? do_raw_spin_lock+0x12d/0x2c0 [ 123.376284][ T6563] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 123.376310][ T6563] do_group_exit+0xd3/0x2a0 [ 123.376337][ T6563] get_signal+0x24ed/0x26c0 [ 123.376380][ T6563] ? __pfx_get_signal+0x10/0x10 [ 123.376415][ T6563] ? __pfx_do_futex+0x10/0x10 [ 123.376445][ T6563] arch_do_signal_or_restart+0x90/0x7e0 [ 123.376472][ T6563] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 123.376509][ T6563] ? rcu_is_watching+0x12/0xc0 [ 123.376539][ T6563] syscall_exit_to_user_mode+0x150/0x2a0 [ 123.376570][ T6563] do_syscall_64+0xda/0x250 [ 123.376601][ T6563] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.376629][ T6563] RIP: 0033:0x7f66f118d169 [ 123.376646][ T6563] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.376669][ T6563] RSP: 002b:00007f66f205c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 123.376689][ T6563] RAX: fffffffffffffe00 RBX: 00007f66f13a5fa8 RCX: 00007f66f118d169 [ 123.376703][ T6563] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f66f13a5fa8 [ 123.376716][ T6563] RBP: 00007f66f13a5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 123.376729][ T6563] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f66f13a5fac [ 123.376742][ T6563] R13: 0000000000000000 R14: 00007fff4bfe2410 R15: 00007fff4bfe24f8 [ 123.376772][ T6563] [ 124.070311][ T6575] netlink: 64 bytes leftover after parsing attributes in process `syz.0.181'. [ 124.123040][ T6572] netlink: 28 bytes leftover after parsing attributes in process `syz.1.180'. [ 126.061863][ T6601] Invalid ELF header magic: != ELF [ 126.452460][ T6604] snd_aloop snd_aloop.0: control 772:1:8:1Õ…:-4095 is already present [ 127.705833][ T6623] netlink: 326 bytes leftover after parsing attributes in process `syz.1.194'. [ 127.978449][ T6621] snd_virmidi snd_virmidi.0: control 3:6:1068:IAJ:127 is already present [ 129.704814][ T6658] snd_virmidi snd_virmidi.0: control 3:6:1068:IAJ:127 is already present [ 131.894291][ T6695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.220'. [ 133.308513][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.314924][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.093083][ T6749] tipc: Trying to set illegal importance in message [ 135.122942][ T6785] netlink: 'syz.2.252': attribute type 1 has an invalid length. [ 135.315438][ T6792] netlink: 28 bytes leftover after parsing attributes in process `syz.0.253'. [ 135.337682][ T6792] netlink: 8 bytes leftover after parsing attributes in process `syz.0.253'. [ 135.883242][ T6805] netlink: 4 bytes leftover after parsing attributes in process `syz.3.258'. [ 135.911803][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.2.259'. [ 137.154472][ T6833] netlink: 28 bytes leftover after parsing attributes in process `syz.3.270'. [ 138.439529][ T6874] netlink: 28 bytes leftover after parsing attributes in process `syz.2.288'. [ 140.523277][ T6921] netlink: 28 bytes leftover after parsing attributes in process `syz.2.308'. [ 140.856684][ T6931] sp0: Synchronizing with TNC [ 141.358892][ T6940] netlink: 28 bytes leftover after parsing attributes in process `syz.3.315'. [ 141.458815][ T6939] netlink: 8 bytes leftover after parsing attributes in process `syz.3.315'. [ 141.476779][ T6939] ima: policy update failed [ 141.491869][ T30] audit: type=1802 audit(6036464700.475:2): pid=6939 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.3.315" res=0 errno=0 [ 141.805700][ T6960] sp0: Synchronizing with TNC [ 142.381944][ T6981] netlink: 28 bytes leftover after parsing attributes in process `syz.3.328'. [ 149.018503][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz.2.367'. [ 150.579729][ T7133] netlink: 342 bytes leftover after parsing attributes in process `syz.1.376'. [ 150.965052][ T7145] netlink: 4 bytes leftover after parsing attributes in process `syz.1.378'. [ 150.997519][ T7145] netlink: 354 bytes leftover after parsing attributes in process `syz.1.378'. [ 156.135874][ T7227] lo: entered allmulticast mode [ 156.269100][ T7231] netlink: 350 bytes leftover after parsing attributes in process `syz.1.397'. [ 156.377534][ T7230] lo: left allmulticast mode [ 160.452084][ T7270] FAULT_INJECTION: forcing a failure. [ 160.452084][ T7270] name fail_futex, interval 1, probability 0, space 0, times 0 [ 160.495774][ T7270] CPU: 1 UID: 0 PID: 7270 Comm: syz.2.411 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 160.495811][ T7270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 160.495824][ T7270] Call Trace: [ 160.495832][ T7270] [ 160.495841][ T7270] dump_stack_lvl+0x16c/0x1f0 [ 160.495882][ T7270] should_fail_ex+0x50a/0x650 [ 160.495923][ T7270] get_futex_key+0x4a3/0x1000 [ 160.495956][ T7270] ? __pfx_get_futex_key+0x10/0x10 [ 160.495996][ T7270] futex_wake+0xe8/0x4e0 [ 160.496029][ T7270] ? __pfx_futex_wake+0x10/0x10 [ 160.496066][ T7270] ? kmem_cache_free+0x2e2/0x4d0 [ 160.496099][ T7270] ? putname+0x13c/0x180 [ 160.496128][ T7270] do_futex+0x1e5/0x350 [ 160.496157][ T7270] ? __pfx_do_futex+0x10/0x10 [ 160.496184][ T7270] ? __pfx_do_sys_openat2+0x10/0x10 [ 160.496217][ T7270] __x64_sys_futex+0x1e1/0x4c0 [ 160.496250][ T7270] ? __pfx___x64_sys_futex+0x10/0x10 [ 160.496297][ T7270] ? __pfx___x64_sys_open+0x10/0x10 [ 160.496337][ T7270] do_syscall_64+0xcd/0x250 [ 160.496373][ T7270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 160.496407][ T7270] RIP: 0033:0x7f66f118d169 [ 160.496427][ T7270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 160.496449][ T7270] RSP: 002b:00007f66f205c0e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 160.496472][ T7270] RAX: ffffffffffffffda RBX: 00007f66f13a5fa8 RCX: 00007f66f118d169 [ 160.496488][ T7270] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f66f13a5fac [ 160.496502][ T7270] RBP: 00007f66f13a5fa0 R08: 00007f66f205d000 R09: 0000000000000000 [ 160.496517][ T7270] R10: 0000000000000004 R11: 0000000000000246 R12: 00007f66f13a5fac [ 160.496532][ T7270] R13: 0000000000000000 R14: 00007fff4bfe2410 R15: 00007fff4bfe24f8 [ 160.496562][ T7270] [ 161.650844][ T7289] FAULT_INJECTION: forcing a failure. [ 161.650844][ T7289] name failslab, interval 1, probability 0, space 0, times 0 [ 161.666377][ T7289] CPU: 1 UID: 0 PID: 7289 Comm: syz.1.416 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 161.666413][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.666427][ T7289] Call Trace: [ 161.666435][ T7289] [ 161.666445][ T7289] dump_stack_lvl+0x16c/0x1f0 [ 161.666485][ T7289] should_fail_ex+0x50a/0x650 [ 161.666523][ T7289] ? fs_reclaim_acquire+0xae/0x150 [ 161.666557][ T7289] should_failslab+0xc2/0x120 [ 161.666581][ T7289] __kmalloc_cache_node_noprof+0x6e/0x420 [ 161.666617][ T7289] ? __alloc_workqueue+0x694/0x1810 [ 161.666649][ T7289] __alloc_workqueue+0x694/0x1810 [ 161.666689][ T7289] alloc_workqueue+0xd3/0x200 [ 161.666716][ T7289] ? __pfx_alloc_workqueue+0x10/0x10 [ 161.666749][ T7289] ? rcu_is_watching+0x12/0xc0 [ 161.666775][ T7289] ? trace_kmalloc+0x2d/0xd0 [ 161.666800][ T7289] ? __kmalloc_noprof+0x23b/0x510 [ 161.666840][ T7289] ? __pfx_lock_release+0x10/0x10 [ 161.666873][ T7289] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 161.666918][ T7289] ieee80211_register_hw+0x1e3b/0x4060 [ 161.666966][ T7289] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 161.666998][ T7289] ? net_generic+0xea/0x2a0 [ 161.667029][ T7289] ? lockdep_init_map_type+0x16d/0x7d0 [ 161.667066][ T7289] ? __asan_memset+0x23/0x50 [ 161.667096][ T7289] ? __hrtimer_init+0x106/0x2c0 [ 161.667134][ T7289] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 161.667190][ T7289] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 161.667235][ T7289] hwsim_new_radio_nl+0xb42/0x12b0 [ 161.667272][ T7289] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 161.667317][ T7289] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 161.667356][ T7289] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 161.667401][ T7289] genl_family_rcv_msg_doit+0x202/0x2f0 [ 161.667440][ T7289] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 161.667476][ T7289] ? trace_cap_capable+0x1a2/0x210 [ 161.667512][ T7289] ? bpf_lsm_capable+0x9/0x10 [ 161.667537][ T7289] ? security_capable+0x7e/0x260 [ 161.667563][ T7289] ? ns_capable+0xd7/0x110 [ 161.667599][ T7289] genl_rcv_msg+0x565/0x800 [ 161.667639][ T7289] ? __pfx_genl_rcv_msg+0x10/0x10 [ 161.667676][ T7289] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 161.667728][ T7289] netlink_rcv_skb+0x16b/0x440 [ 161.667763][ T7289] ? __pfx_genl_rcv_msg+0x10/0x10 [ 161.667803][ T7289] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 161.667879][ T7289] ? down_read+0xc9/0x330 [ 161.667914][ T7289] ? __pfx_down_read+0x10/0x10 [ 161.667950][ T7289] ? netlink_deliver_tap+0x1ae/0xd30 [ 161.667987][ T7289] genl_rcv+0x28/0x40 [ 161.668019][ T7289] netlink_unicast+0x53c/0x7f0 [ 161.668055][ T7289] ? __pfx_netlink_unicast+0x10/0x10 [ 161.668088][ T7289] ? __phys_addr_symbol+0x30/0x80 [ 161.668113][ T7289] ? __check_object_size+0x488/0x710 [ 161.668142][ T7289] netlink_sendmsg+0x8b8/0xd70 [ 161.668181][ T7289] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.668228][ T7289] ____sys_sendmsg+0xaaf/0xc90 [ 161.668255][ T7289] ? copy_msghdr_from_user+0x10b/0x160 [ 161.668289][ T7289] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.668333][ T7289] ___sys_sendmsg+0x135/0x1e0 [ 161.668370][ T7289] ? __pfx____sys_sendmsg+0x10/0x10 [ 161.668418][ T7289] ? __pfx_lock_release+0x10/0x10 [ 161.668449][ T7289] ? trace_lock_acquire+0x14e/0x1f0 [ 161.668489][ T7289] ? __fget_files+0x206/0x3a0 [ 161.668532][ T7289] __sys_sendmsg+0x16e/0x220 [ 161.668567][ T7289] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.668600][ T7289] ? __x64_sys_futex+0x1e1/0x4c0 [ 161.668652][ T7289] do_syscall_64+0xcd/0x250 [ 161.668687][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.668719][ T7289] RIP: 0033:0x7fddfd58d169 [ 161.668740][ T7289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.668761][ T7289] RSP: 002b:00007fddfe3ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.668784][ T7289] RAX: ffffffffffffffda RBX: 00007fddfd7a5fa0 RCX: 00007fddfd58d169 [ 161.668798][ T7289] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000006 [ 161.668811][ T7289] RBP: 00007fddfd60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 161.668839][ T7289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 161.668851][ T7289] R13: 0000000000000000 R14: 00007fddfd7a5fa0 R15: 00007fff8041ac08 [ 161.668880][ T7289] [ 162.838554][ T7274] kexec: Could not allocate control_code_buffer [ 167.015840][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! syzkaller syzkaller login: [ 169.555609][ T7388] snd_aloop snd_aloop.0: control 1:6:6:¢¸è_ÅheºRŸª:0 is already present [ 170.147005][ T7421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.459'. [ 170.421279][ T7428] netlink: 342 bytes leftover after parsing attributes in process `syz.2.461'. [ 172.672644][ T7469] lo: entered allmulticast mode [ 172.732197][ T7469] lo: left allmulticast mode [ 172.832784][ T7472] netlink: 350 bytes leftover after parsing attributes in process `syz.0.474'. [ 174.140373][ T7498] sd 0:0:1:0: device reset [ 176.011685][ T7522] netlink: 28 bytes leftover after parsing attributes in process `syz.0.488'. [ 177.828208][ T7539] snd_aloop snd_aloop.0: control 772:1:8:1Õ…:-4095 is already present [ 180.623232][ T7583] Invalid ELF header magic: != ELF [ 182.709110][ T7610] snd_aloop snd_aloop.0: control 772:1:8:1Õ…:-4095 is already present [ 185.930674][ T7659] netlink: 326 bytes leftover after parsing attributes in process `syz.1.537'. [ 192.266243][ T7760] usb usb32: usbfs: process 7760 (syz.3.573) did not claim interface 0 before use [ 194.769156][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.776114][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.826164][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 196.832780][ T5148] Bluetooth: hci1: command 0x0406 tx timeout [ 196.841135][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 196.847271][ T5148] Bluetooth: hci0: command 0x0406 tx timeout [ 210.131231][ T8090] netlink: 28 bytes leftover after parsing attributes in process `syz.2.692'. [ 211.938232][ T8110] netlink: 28 bytes leftover after parsing attributes in process `syz.3.700'. [ 225.479891][ T8309] FAULT_INJECTION: forcing a failure. [ 225.479891][ T8309] name failslab, interval 1, probability 0, space 0, times 0 [ 225.523209][ T8309] CPU: 1 UID: 0 PID: 8309 Comm: syz.3.772 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 225.523243][ T8309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 225.523255][ T8309] Call Trace: [ 225.523262][ T8309] [ 225.523270][ T8309] dump_stack_lvl+0x16c/0x1f0 [ 225.523306][ T8309] should_fail_ex+0x50a/0x650 [ 225.523339][ T8309] ? fs_reclaim_acquire+0xae/0x150 [ 225.523369][ T8309] ? tomoyo_realpath_from_path+0xb9/0x720 [ 225.523398][ T8309] should_failslab+0xc2/0x120 [ 225.523421][ T8309] __kmalloc_noprof+0xcb/0x510 [ 225.523452][ T8309] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 225.523490][ T8309] tomoyo_realpath_from_path+0xb9/0x720 [ 225.523519][ T8309] ? tomoyo_path_number_perm+0x235/0x590 [ 225.523547][ T8309] ? tomoyo_path_number_perm+0x235/0x590 [ 225.523577][ T8309] tomoyo_path_number_perm+0x248/0x590 [ 225.523601][ T8309] ? tomoyo_path_number_perm+0x235/0x590 [ 225.523631][ T8309] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 225.523690][ T8309] ? __pfx_lock_release+0x10/0x10 [ 225.523718][ T8309] ? trace_lock_acquire+0x14e/0x1f0 [ 225.523747][ T8309] ? lock_acquire+0x2f/0xb0 [ 225.523774][ T8309] ? __fget_files+0x40/0x3a0 [ 225.523809][ T8309] ? __fget_files+0x206/0x3a0 [ 225.523845][ T8309] security_file_ioctl+0x9b/0x240 [ 225.523871][ T8309] __x64_sys_ioctl+0xb7/0x200 [ 225.523902][ T8309] do_syscall_64+0xcd/0x250 [ 225.523930][ T8309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.523956][ T8309] RIP: 0033:0x7f5cf258d169 [ 225.523971][ T8309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.523988][ T8309] RSP: 002b:00007f5cf333a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 225.524006][ T8309] RAX: ffffffffffffffda RBX: 00007f5cf27a5fa0 RCX: 00007f5cf258d169 [ 225.524018][ T8309] RDX: 0000000000000000 RSI: 0000000080046f45 RDI: 0000000000000003 [ 225.524029][ T8309] RBP: 00007f5cf333a090 R08: 0000000000000000 R09: 0000000000000000 [ 225.524039][ T8309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.524050][ T8309] R13: 0000000000000000 R14: 00007f5cf27a5fa0 R15: 00007ffea923e5c8 [ 225.524074][ T8309] [ 225.524089][ T8309] ERROR: Out of memory at tomoyo_realpath_from_path. [ 225.804141][ T8315] FAULT_INJECTION: forcing a failure. [ 225.804141][ T8315] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 225.845317][ T8315] CPU: 1 UID: 0 PID: 8315 Comm: syz.2.774 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 225.845349][ T8315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 225.845361][ T8315] Call Trace: [ 225.845368][ T8315] [ 225.845377][ T8315] dump_stack_lvl+0x16c/0x1f0 [ 225.845412][ T8315] should_fail_ex+0x50a/0x650 [ 225.845450][ T8315] _copy_from_user+0x2e/0xd0 [ 225.845475][ T8315] io_register_pbuf_ring+0x123/0x830 [ 225.845502][ T8315] ? __pfx_io_register_pbuf_ring+0x10/0x10 [ 225.845528][ T8315] ? __lock_acquire+0xcc5/0x3c40 [ 225.845562][ T8315] ? lock_acquire.part.0+0x11b/0x380 [ 225.845600][ T8315] ? __mutex_trylock_common+0xea/0x250 [ 225.845632][ T8315] ? __pfx___mutex_trylock_common+0x10/0x10 [ 225.845668][ T8315] __io_uring_register+0xb69/0x22f0 [ 225.845697][ T8315] ? trace_contention_end+0xee/0x140 [ 225.845729][ T8315] ? __pfx___io_uring_register+0x10/0x10 [ 225.845755][ T8315] ? __mutex_lock+0x1cc/0xb10 [ 225.845795][ T8315] ? __fget_files+0x1fc/0x3a0 [ 225.845825][ T8315] ? __x64_sys_io_uring_register+0x15b/0x280 [ 225.845852][ T8315] ? __pfx_lock_release+0x10/0x10 [ 225.845883][ T8315] ? __pfx___mutex_lock+0x10/0x10 [ 225.845914][ T8315] ? __fget_files+0x40/0x3a0 [ 225.845949][ T8315] ? __fget_files+0x206/0x3a0 [ 225.845986][ T8315] __x64_sys_io_uring_register+0x16c/0x280 [ 225.846017][ T8315] do_syscall_64+0xcd/0x250 [ 225.846048][ T8315] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.846078][ T8315] RIP: 0033:0x7f66f118d169 [ 225.846097][ T8315] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.846116][ T8315] RSP: 002b:00007f66f205c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 225.846138][ T8315] RAX: ffffffffffffffda RBX: 00007f66f13a5fa0 RCX: 00007f66f118d169 [ 225.846153][ T8315] RDX: 0000400000000040 RSI: 0000000000000016 RDI: 0000000000000002 [ 225.846167][ T8315] RBP: 00007f66f205c090 R08: 0000000000000000 R09: 0000000000000000 [ 225.846180][ T8315] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 225.846193][ T8315] R13: 0000000000000000 R14: 00007f66f13a5fa0 R15: 00007fff4bfe24f8 [ 225.846224][ T8315] [ 226.901394][ T8337] netlink: 'syz.0.781': attribute type 1 has an invalid length. [ 226.944022][ T8340] FAULT_INJECTION: forcing a failure. [ 226.944022][ T8340] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 226.970651][ T8340] CPU: 1 UID: 0 PID: 8340 Comm: syz.3.782 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 226.970681][ T8340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 226.970693][ T8340] Call Trace: [ 226.970700][ T8340] [ 226.970709][ T8340] dump_stack_lvl+0x16c/0x1f0 [ 226.970751][ T8340] should_fail_ex+0x50a/0x650 [ 226.970791][ T8340] _copy_to_user+0x32/0xd0 [ 226.970818][ T8340] tomoyo_flush+0x168/0x500 [ 226.970856][ T8340] tomoyo_set_string+0xaf/0xe0 [ 226.970889][ T8340] tomoyo_read_exception+0x282/0xc30 [ 226.970935][ T8340] tomoyo_read_control+0x2a0/0x550 [ 226.970973][ T8340] ? __pfx_tomoyo_read+0x10/0x10 [ 226.971004][ T8340] vfs_read+0x1df/0xbf0 [ 226.971035][ T8340] ? __fget_files+0x1fc/0x3a0 [ 226.971066][ T8340] ? __pfx___mutex_lock+0x10/0x10 [ 226.971097][ T8340] ? __pfx_vfs_read+0x10/0x10 [ 226.971136][ T8340] ? __fget_files+0x206/0x3a0 [ 226.971177][ T8340] ksys_read+0x12b/0x250 [ 226.971206][ T8340] ? __pfx_ksys_read+0x10/0x10 [ 226.971249][ T8340] do_syscall_64+0xcd/0x250 [ 226.971282][ T8340] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.971312][ T8340] RIP: 0033:0x7f5cf258d169 [ 226.971330][ T8340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.971349][ T8340] RSP: 002b:00007f5cf333a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 226.971371][ T8340] RAX: ffffffffffffffda RBX: 00007f5cf27a5fa0 RCX: 00007f5cf258d169 [ 226.971386][ T8340] RDX: 000000000000b4d3 RSI: 0000000000000000 RDI: 0000000000000003 [ 226.971399][ T8340] RBP: 00007f5cf333a090 R08: 0000000000000000 R09: 0000000000000000 [ 226.971413][ T8340] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.971426][ T8340] R13: 0000000000000000 R14: 00007f5cf27a5fa0 R15: 00007ffea923e5c8 [ 226.971459][ T8340] [ 228.136240][ T8380] FAULT_INJECTION: forcing a failure. [ 228.136240][ T8380] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 228.215351][ T8380] CPU: 0 UID: 0 PID: 8380 Comm: syz.2.794 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 228.215384][ T8380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 228.215400][ T8380] Call Trace: [ 228.215407][ T8380] [ 228.215415][ T8380] dump_stack_lvl+0x16c/0x1f0 [ 228.215448][ T8380] should_fail_ex+0x50a/0x650 [ 228.215483][ T8380] strncpy_from_user+0x3b/0x2d0 [ 228.215514][ T8380] getname_flags.part.0+0x8f/0x550 [ 228.215542][ T8380] getname+0x8d/0xe0 [ 228.215568][ T8380] do_sys_openat2+0x104/0x1e0 [ 228.215591][ T8380] ? __pfx_do_sys_openat2+0x10/0x10 [ 228.215617][ T8380] ? __fget_files+0x206/0x3a0 [ 228.215651][ T8380] __x64_sys_openat+0x175/0x210 [ 228.215673][ T8380] ? __pfx___x64_sys_openat+0x10/0x10 [ 228.215695][ T8380] ? ksys_write+0x1ba/0x250 [ 228.215731][ T8380] do_syscall_64+0xcd/0x250 [ 228.215762][ T8380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.215792][ T8380] RIP: 0033:0x7f66f118bad0 [ 228.215811][ T8380] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 49 94 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 9c 94 02 00 8b 44 [ 228.215836][ T8380] RSP: 002b:00007f66f205bf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 228.215856][ T8380] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f66f118bad0 [ 228.215869][ T8380] RDX: 0000000000000002 RSI: 00007f66f205bfa0 RDI: 00000000ffffff9c [ 228.215882][ T8380] RBP: 00007f66f205bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 228.215895][ T8380] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 228.215907][ T8380] R13: 0000000000000001 R14: 00007f66f13a5fa0 R15: 00007fff4bfe24f8 [ 228.215932][ T8380] [ 230.523658][ T8420] FAULT_INJECTION: forcing a failure. [ 230.523658][ T8420] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.543100][ T8420] CPU: 0 UID: 0 PID: 8420 Comm: syz.2.804 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 230.543131][ T8420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.543142][ T8420] Call Trace: [ 230.543148][ T8420] [ 230.543157][ T8420] dump_stack_lvl+0x16c/0x1f0 [ 230.543192][ T8420] should_fail_ex+0x50a/0x650 [ 230.543230][ T8420] _copy_to_iter+0x2a1/0x1560 [ 230.543256][ T8420] ? trace_lock_acquire+0x14e/0x1f0 [ 230.543282][ T8420] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 230.543315][ T8420] ? __pfx__copy_to_iter+0x10/0x10 [ 230.543336][ T8420] ? __virt_addr_valid+0x1a4/0x590 [ 230.543365][ T8420] ? __virt_addr_valid+0x5e/0x590 [ 230.543387][ T8420] ? __phys_addr_symbol+0x30/0x80 [ 230.543406][ T8420] ? __check_object_size+0x488/0x710 [ 230.543433][ T8420] seq_read_iter+0x725/0x12b0 [ 230.543474][ T8420] proc_reg_read_iter+0x21d/0x310 [ 230.543506][ T8420] vfs_read+0x886/0xbf0 [ 230.543538][ T8420] ? __pfx_vfs_read+0x10/0x10 [ 230.543568][ T8420] ? lock_acquire+0x2f/0xb0 [ 230.543594][ T8420] ? __fget_files+0x40/0x3a0 [ 230.543635][ T8420] __x64_sys_pread64+0x1f6/0x250 [ 230.543681][ T8420] ? __pfx___x64_sys_pread64+0x10/0x10 [ 230.543721][ T8420] do_syscall_64+0xcd/0x250 [ 230.543753][ T8420] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.543782][ T8420] RIP: 0033:0x7f66f118d169 [ 230.543801][ T8420] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.543821][ T8420] RSP: 002b:00007f66f205c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 230.543841][ T8420] RAX: ffffffffffffffda RBX: 00007f66f13a5fa0 RCX: 00007f66f118d169 [ 230.543854][ T8420] RDX: 0000008100000041 RSI: 0000400000000000 RDI: 0000000000000003 [ 230.543867][ T8420] RBP: 00007f66f205c090 R08: 0000000000000000 R09: 0000000000000000 [ 230.543879][ T8420] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000001 [ 230.543892][ T8420] R13: 0000000000000000 R14: 00007f66f13a5fa0 R15: 00007fff4bfe24f8 [ 230.543920][ T8420] [ 233.139554][ T8467] netlink: 16 bytes leftover after parsing attributes in process `syz.3.822'. [ 233.317065][ T8477] FAULT_INJECTION: forcing a failure. [ 233.317065][ T8477] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.355532][ T8477] CPU: 0 UID: 0 PID: 8477 Comm: syz.2.823 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 233.355567][ T8477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 233.355580][ T8477] Call Trace: [ 233.355586][ T8477] [ 233.355596][ T8477] dump_stack_lvl+0x16c/0x1f0 [ 233.355633][ T8477] should_fail_ex+0x50a/0x650 [ 233.355673][ T8477] _copy_from_user+0x2e/0xd0 [ 233.355699][ T8477] __sys_bpf+0x21c/0x49c0 [ 233.355732][ T8477] ? __pfx_lock_release+0x10/0x10 [ 233.355764][ T8477] ? __pfx___sys_bpf+0x10/0x10 [ 233.355796][ T8477] ? vfs_write+0x306/0x1150 [ 233.355832][ T8477] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 233.355881][ T8477] ? fput+0x67/0x440 [ 233.355904][ T8477] ? ksys_write+0x1ba/0x250 [ 233.355934][ T8477] ? __pfx_ksys_write+0x10/0x10 [ 233.355969][ T8477] __x64_sys_bpf+0x78/0xc0 [ 233.355990][ T8477] ? lockdep_hardirqs_on+0x7c/0x110 [ 233.356018][ T8477] do_syscall_64+0xcd/0x250 [ 233.356050][ T8477] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.356080][ T8477] RIP: 0033:0x7f66f118d169 [ 233.356100][ T8477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.356120][ T8477] RSP: 002b:00007f66f203b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.356142][ T8477] RAX: ffffffffffffffda RBX: 00007f66f13a6080 RCX: 00007f66f118d169 [ 233.356157][ T8477] RDX: 000000000000000c RSI: 00004000000001c0 RDI: 0000000000000003 [ 233.356170][ T8477] RBP: 00007f66f203b090 R08: 0000000000000000 R09: 0000000000000000 [ 233.356198][ T8477] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.356211][ T8477] R13: 0000000000000000 R14: 00007f66f13a6080 R15: 00007fff4bfe24f8 [ 233.356241][ T8477] [ 234.565399][ T8494] FAULT_INJECTION: forcing a failure. [ 234.565399][ T8494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 234.583887][ T8494] CPU: 0 UID: 0 PID: 8494 Comm: syz.1.830 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 234.583922][ T8494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 234.583935][ T8494] Call Trace: [ 234.583943][ T8494] [ 234.583953][ T8494] dump_stack_lvl+0x16c/0x1f0 [ 234.583988][ T8494] should_fail_ex+0x50a/0x650 [ 234.584027][ T8494] _copy_from_user+0x2e/0xd0 [ 234.584053][ T8494] io_register_pbuf_ring+0x123/0x830 [ 234.584090][ T8494] ? __pfx_io_register_pbuf_ring+0x10/0x10 [ 234.584117][ T8494] ? __lock_acquire+0xcc5/0x3c40 [ 234.584153][ T8494] ? lock_acquire.part.0+0x11b/0x380 [ 234.584190][ T8494] ? __mutex_trylock_common+0xea/0x250 [ 234.584223][ T8494] ? __pfx___mutex_trylock_common+0x10/0x10 [ 234.584259][ T8494] __io_uring_register+0xb69/0x22f0 [ 234.584290][ T8494] ? trace_contention_end+0xee/0x140 [ 234.584322][ T8494] ? __pfx___io_uring_register+0x10/0x10 [ 234.584348][ T8494] ? __mutex_lock+0x1cc/0xb10 [ 234.584379][ T8494] ? __fget_files+0x1fc/0x3a0 [ 234.584409][ T8494] ? __x64_sys_io_uring_register+0x15b/0x280 [ 234.584436][ T8494] ? __pfx_lock_release+0x10/0x10 [ 234.584467][ T8494] ? __pfx___mutex_lock+0x10/0x10 [ 234.584499][ T8494] ? __fget_files+0x40/0x3a0 [ 234.584534][ T8494] ? __fget_files+0x206/0x3a0 [ 234.584574][ T8494] __x64_sys_io_uring_register+0x16c/0x280 [ 234.584607][ T8494] do_syscall_64+0xcd/0x250 [ 234.584640][ T8494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 234.584670][ T8494] RIP: 0033:0x7fddfd58d169 [ 234.584689][ T8494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 234.584708][ T8494] RSP: 002b:00007fddfe3ad038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 234.584730][ T8494] RAX: ffffffffffffffda RBX: 00007fddfd7a5fa0 RCX: 00007fddfd58d169 [ 234.584745][ T8494] RDX: 0000400000000040 RSI: 0000000000000016 RDI: 0000000000000002 [ 234.584759][ T8494] RBP: 00007fddfe3ad090 R08: 0000000000000000 R09: 0000000000000000 [ 234.584772][ T8494] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 234.584785][ T8494] R13: 0000000000000000 R14: 00007fddfd7a5fa0 R15: 00007fff8041ac08 [ 234.584817][ T8494] [ 234.718332][ T8498] input: jJǸ-¶š9ã%vø“û¨lÐQ  J86Ö‘ as /devices/virtual/input/input5 [ 235.057036][ T8513] FAULT_INJECTION: forcing a failure. [ 235.057036][ T8513] name failslab, interval 1, probability 0, space 0, times 0 [ 235.090701][ T8513] CPU: 0 UID: 0 PID: 8513 Comm: syz.3.837 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 235.090732][ T8513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 235.090745][ T8513] Call Trace: [ 235.090752][ T8513] [ 235.090762][ T8513] dump_stack_lvl+0x16c/0x1f0 [ 235.090797][ T8513] should_fail_ex+0x50a/0x650 [ 235.090830][ T8513] ? fs_reclaim_acquire+0xae/0x150 [ 235.090861][ T8513] should_failslab+0xc2/0x120 [ 235.090884][ T8513] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 235.090918][ T8513] ? getname_flags.part.0+0x4c/0x550 [ 235.090944][ T8513] ? vfs_write+0x306/0x1150 [ 235.090977][ T8513] getname_flags.part.0+0x4c/0x550 [ 235.091006][ T8513] getname+0x8d/0xe0 [ 235.091033][ T8513] do_sys_openat2+0x104/0x1e0 [ 235.091056][ T8513] ? __pfx_do_sys_openat2+0x10/0x10 [ 235.091084][ T8513] ? __fget_files+0x206/0x3a0 [ 235.091120][ T8513] __x64_sys_openat+0x175/0x210 [ 235.091145][ T8513] ? __pfx___x64_sys_openat+0x10/0x10 [ 235.091167][ T8513] ? ksys_write+0x1ba/0x250 [ 235.091206][ T8513] do_syscall_64+0xcd/0x250 [ 235.091236][ T8513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.091267][ T8513] RIP: 0033:0x7f5cf258d169 [ 235.091293][ T8513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 235.091313][ T8513] RSP: 002b:00007f5cf333a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 235.091332][ T8513] RAX: ffffffffffffffda RBX: 00007f5cf27a5fa0 RCX: 00007f5cf258d169 [ 235.091347][ T8513] RDX: 0000000000000000 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 235.091361][ T8513] RBP: 00007f5cf333a090 R08: 0000000000000000 R09: 0000000000000000 [ 235.091374][ T8513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.091387][ T8513] R13: 0000000000000001 R14: 00007f5cf27a5fa0 R15: 00007ffea923e5c8 [ 235.091413][ T8513] [ 236.961203][ T8556] netlink: 'syz.2.846': attribute type 4 has an invalid length. [ 237.096208][ T8559] FAULT_INJECTION: forcing a failure. [ 237.096208][ T8559] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 237.125011][ T8559] CPU: 1 UID: 0 PID: 8559 Comm: syz.1.847 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 237.125044][ T8559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 237.125056][ T8559] Call Trace: [ 237.125063][ T8559] [ 237.125072][ T8559] dump_stack_lvl+0x16c/0x1f0 [ 237.125109][ T8559] should_fail_ex+0x50a/0x650 [ 237.125148][ T8559] _copy_from_user+0x2e/0xd0 [ 237.125173][ T8559] copy_msghdr_from_user+0x99/0x160 [ 237.125207][ T8559] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 237.125253][ T8559] ___sys_sendmsg+0xff/0x1e0 [ 237.125284][ T8559] ? __pfx____sys_sendmsg+0x10/0x10 [ 237.125327][ T8559] ? __pfx_lock_release+0x10/0x10 [ 237.125356][ T8559] ? trace_lock_acquire+0x14e/0x1f0 [ 237.125392][ T8559] ? __fget_files+0x206/0x3a0 [ 237.125432][ T8559] __sys_sendmsg+0x16e/0x220 [ 237.125464][ T8559] ? __pfx___sys_sendmsg+0x10/0x10 [ 237.125517][ T8559] do_syscall_64+0xcd/0x250 [ 237.125549][ T8559] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.125579][ T8559] RIP: 0033:0x7fddfd58d169 [ 237.125597][ T8559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.125617][ T8559] RSP: 002b:00007fddfe3ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 237.125639][ T8559] RAX: ffffffffffffffda RBX: 00007fddfd7a5fa0 RCX: 00007fddfd58d169 [ 237.125654][ T8559] RDX: 0000000000008000 RSI: 0000400000002c40 RDI: 0000000000000003 [ 237.125668][ T8559] RBP: 00007fddfe3ad090 R08: 0000000000000000 R09: 0000000000000000 [ 237.125681][ T8559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.125694][ T8559] R13: 0000000000000000 R14: 00007fddfd7a5fa0 R15: 00007fff8041ac08 [ 237.125724][ T8559] [ 239.424627][ T8602] FAULT_INJECTION: forcing a failure. [ 239.424627][ T8602] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 239.453281][ T8602] CPU: 0 UID: 0 PID: 8602 Comm: syz.2.860 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 239.453315][ T8602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 239.453328][ T8602] Call Trace: [ 239.453335][ T8602] [ 239.453345][ T8602] dump_stack_lvl+0x16c/0x1f0 [ 239.453379][ T8602] should_fail_ex+0x50a/0x650 [ 239.453419][ T8602] _copy_to_user+0x32/0xd0 [ 239.453447][ T8602] simple_read_from_buffer+0xd0/0x160 [ 239.453480][ T8602] proc_fail_nth_read+0x198/0x270 [ 239.453509][ T8602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.453539][ T8602] ? rw_verify_area+0xcf/0x680 [ 239.453567][ T8602] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 239.453594][ T8602] vfs_read+0x1df/0xbf0 [ 239.453623][ T8602] ? __fget_files+0x1fc/0x3a0 [ 239.453654][ T8602] ? __pfx___mutex_lock+0x10/0x10 [ 239.453684][ T8602] ? __pfx_vfs_read+0x10/0x10 [ 239.453722][ T8602] ? __fget_files+0x206/0x3a0 [ 239.453763][ T8602] ksys_read+0x12b/0x250 [ 239.453791][ T8602] ? __pfx_ksys_read+0x10/0x10 [ 239.453831][ T8602] do_syscall_64+0xcd/0x250 [ 239.453862][ T8602] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 239.453892][ T8602] RIP: 0033:0x7f66f118bb7c [ 239.453912][ T8602] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 239.453932][ T8602] RSP: 002b:00007f66f205c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 239.453963][ T8602] RAX: ffffffffffffffda RBX: 00007f66f13a5fa0 RCX: 00007f66f118bb7c [ 239.453979][ T8602] RDX: 000000000000000f RSI: 00007f66f205c0a0 RDI: 0000000000000006 [ 239.453992][ T8602] RBP: 00007f66f205c090 R08: 0000000000000000 R09: 0000000000000000 [ 239.454005][ T8602] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 239.454019][ T8602] R13: 0000000000000000 R14: 00007f66f13a5fa0 R15: 00007fff4bfe24f8 [ 239.454050][ T8602] [ 239.677766][ T8610] netlink: 4489 bytes leftover after parsing attributes in process `syz.0.861'. [ 240.389547][ T8623] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 240.402638][ T8623] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 241.417000][ T8643] netlink: 330 bytes leftover after parsing attributes in process `syz.2.871'. [ 242.461079][ T8685] netlink: 146 bytes leftover after parsing attributes in process `syz.1.887'. [ 242.953556][ T8699] FAULT_INJECTION: forcing a failure. [ 242.953556][ T8699] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 242.980772][ T8699] CPU: 1 UID: 0 PID: 8699 Comm: syz.1.890 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 242.980807][ T8699] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 242.980820][ T8699] Call Trace: [ 242.980827][ T8699] [ 242.980835][ T8699] dump_stack_lvl+0x16c/0x1f0 [ 242.980871][ T8699] should_fail_ex+0x50a/0x650 [ 242.980910][ T8699] _copy_from_user+0x2e/0xd0 [ 242.980940][ T8699] copy_msghdr_from_user+0x99/0x160 [ 242.980976][ T8699] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 242.981007][ T8699] ? __lock_acquire+0xcc5/0x3c40 [ 242.981053][ T8699] ___sys_sendmsg+0xff/0x1e0 [ 242.981087][ T8699] ? __pfx____sys_sendmsg+0x10/0x10 [ 242.981133][ T8699] ? trace_lock_acquire+0x14e/0x1f0 [ 242.981181][ T8699] __sys_sendmmsg+0x201/0x420 [ 242.981219][ T8699] ? __pfx___sys_sendmmsg+0x10/0x10 [ 242.981262][ T8699] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 242.981306][ T8699] ? fput+0x67/0x440 [ 242.981330][ T8699] ? ksys_write+0x1ba/0x250 [ 242.981359][ T8699] ? __pfx_ksys_write+0x10/0x10 [ 242.981393][ T8699] __x64_sys_sendmmsg+0x9c/0x100 [ 242.981424][ T8699] ? lockdep_hardirqs_on+0x7c/0x110 [ 242.981453][ T8699] do_syscall_64+0xcd/0x250 [ 242.981485][ T8699] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.981516][ T8699] RIP: 0033:0x7fddfd58d169 [ 242.981536][ T8699] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.981556][ T8699] RSP: 002b:00007fddfe3ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 242.981578][ T8699] RAX: ffffffffffffffda RBX: 00007fddfd7a5fa0 RCX: 00007fddfd58d169 [ 242.981594][ T8699] RDX: 0000000000000002 RSI: 00004000000001c0 RDI: 0000000000000003 [ 242.981607][ T8699] RBP: 00007fddfe3ad090 R08: 0000000000000000 R09: 0000000000000000 [ 242.981621][ T8699] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 242.981634][ T8699] R13: 0000000000000000 R14: 00007fddfd7a5fa0 R15: 00007fff8041ac08 [ 242.981670][ T8699] [ 243.597400][ T8715] FAULT_INJECTION: forcing a failure. [ 243.597400][ T8715] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 243.638499][ T8715] CPU: 0 UID: 0 PID: 8715 Comm: syz.1.894 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 243.638531][ T8715] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 243.638544][ T8715] Call Trace: [ 243.638550][ T8715] [ 243.638560][ T8715] dump_stack_lvl+0x16c/0x1f0 [ 243.638595][ T8715] should_fail_ex+0x50a/0x650 [ 243.638634][ T8715] _copy_from_user+0x2e/0xd0 [ 243.638656][ T8715] copy_msghdr_from_user+0x99/0x160 [ 243.638690][ T8715] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 243.638720][ T8715] ? __lock_acquire+0xcc5/0x3c40 [ 243.638765][ T8715] ___sys_sendmsg+0xff/0x1e0 [ 243.638799][ T8715] ? __pfx____sys_sendmsg+0x10/0x10 [ 243.638845][ T8715] ? trace_lock_acquire+0x14e/0x1f0 [ 243.638894][ T8715] __sys_sendmmsg+0x201/0x420 [ 243.638929][ T8715] ? __pfx___sys_sendmmsg+0x10/0x10 [ 243.638972][ T8715] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 243.639015][ T8715] ? fput+0x67/0x440 [ 243.639038][ T8715] ? ksys_write+0x1ba/0x250 [ 243.639066][ T8715] ? __pfx_ksys_write+0x10/0x10 [ 243.639100][ T8715] __x64_sys_sendmmsg+0x9c/0x100 [ 243.639132][ T8715] ? lockdep_hardirqs_on+0x7c/0x110 [ 243.639160][ T8715] do_syscall_64+0xcd/0x250 [ 243.639191][ T8715] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.639222][ T8715] RIP: 0033:0x7fddfd58d169 [ 243.639241][ T8715] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.639261][ T8715] RSP: 002b:00007fddfe3ad038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 243.639283][ T8715] RAX: ffffffffffffffda RBX: 00007fddfd7a5fa0 RCX: 00007fddfd58d169 [ 243.639298][ T8715] RDX: 0000000000000003 RSI: 0000400000000080 RDI: 0000000000000003 [ 243.639312][ T8715] RBP: 00007fddfe3ad090 R08: 0000000000000000 R09: 0000000000000000 [ 243.639325][ T8715] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.639338][ T8715] R13: 0000000000000000 R14: 00007fddfd7a5fa0 R15: 00007fff8041ac08 [ 243.639368][ T8715] [ 244.096433][ T8723] FAULT_INJECTION: forcing a failure. [ 244.096433][ T8723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.179051][ T8723] CPU: 0 UID: 0 PID: 8723 Comm: syz.2.897 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 244.179082][ T8723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 244.179095][ T8723] Call Trace: [ 244.179101][ T8723] [ 244.179110][ T8723] dump_stack_lvl+0x16c/0x1f0 [ 244.179146][ T8723] should_fail_ex+0x50a/0x650 [ 244.179184][ T8723] _copy_from_user+0x2e/0xd0 [ 244.179210][ T8723] copy_msghdr_from_user+0x99/0x160 [ 244.179243][ T8723] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 244.179273][ T8723] ? __lock_acquire+0xcc5/0x3c40 [ 244.179328][ T8723] ___sys_sendmsg+0xff/0x1e0 [ 244.179361][ T8723] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.179407][ T8723] ? trace_lock_acquire+0x14e/0x1f0 [ 244.179454][ T8723] __sys_sendmmsg+0x201/0x420 [ 244.179490][ T8723] ? __pfx___sys_sendmmsg+0x10/0x10 [ 244.179533][ T8723] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 244.179575][ T8723] ? fput+0x67/0x440 [ 244.179599][ T8723] ? ksys_write+0x1ba/0x250 [ 244.179628][ T8723] ? __pfx_ksys_write+0x10/0x10 [ 244.179663][ T8723] __x64_sys_sendmmsg+0x9c/0x100 [ 244.179694][ T8723] ? lockdep_hardirqs_on+0x7c/0x110 [ 244.179723][ T8723] do_syscall_64+0xcd/0x250 [ 244.179755][ T8723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.179785][ T8723] RIP: 0033:0x7f66f118d169 [ 244.179804][ T8723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.179824][ T8723] RSP: 002b:00007f66f205c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 244.179846][ T8723] RAX: ffffffffffffffda RBX: 00007f66f13a5fa0 RCX: 00007f66f118d169 [ 244.179861][ T8723] RDX: 0000000000000003 RSI: 0000400000000080 RDI: 0000000000000003 [ 244.179875][ T8723] RBP: 00007f66f205c090 R08: 0000000000000000 R09: 0000000000000000 [ 244.179888][ T8723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.179901][ T8723] R13: 0000000000000000 R14: 00007f66f13a5fa0 R15: 00007fff4bfe24f8 [ 244.179931][ T8723] [ 244.529741][ T8734] FAULT_INJECTION: forcing a failure. [ 244.529741][ T8734] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.543562][ T8734] CPU: 0 UID: 0 PID: 8734 Comm: syz.2.902 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 244.543597][ T8734] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 244.543610][ T8734] Call Trace: [ 244.543617][ T8734] [ 244.543626][ T8734] dump_stack_lvl+0x16c/0x1f0 [ 244.543660][ T8734] should_fail_ex+0x50a/0x650 [ 244.543699][ T8734] _copy_from_user+0x2e/0xd0 [ 244.543725][ T8734] copy_msghdr_from_user+0x99/0x160 [ 244.543758][ T8734] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 244.543806][ T8734] ___sys_sendmsg+0xff/0x1e0 [ 244.543839][ T8734] ? __pfx____sys_sendmsg+0x10/0x10 [ 244.543884][ T8734] ? __pfx_lock_release+0x10/0x10 [ 244.543913][ T8734] ? trace_lock_acquire+0x14e/0x1f0 [ 244.543950][ T8734] ? __fget_files+0x206/0x3a0 [ 244.543989][ T8734] __sys_sendmsg+0x16e/0x220 [ 244.544020][ T8734] ? __pfx___sys_sendmsg+0x10/0x10 [ 244.544070][ T8734] do_syscall_64+0xcd/0x250 [ 244.544103][ T8734] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.544133][ T8734] RIP: 0033:0x7f66f118d169 [ 244.544151][ T8734] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 244.544170][ T8734] RSP: 002b:00007f66f205c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 244.544191][ T8734] RAX: ffffffffffffffda RBX: 00007f66f13a5fa0 RCX: 00007f66f118d169 [ 244.544206][ T8734] RDX: 0000000020000000 RSI: 0000400000000040 RDI: 0000000000000003 [ 244.544219][ T8734] RBP: 00007f66f205c090 R08: 0000000000000000 R09: 0000000000000000 [ 244.544233][ T8734] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 244.544245][ T8734] R13: 0000000000000000 R14: 00007f66f13a5fa0 R15: 00007fff4bfe24f8 [ 244.544274][ T8734] [ 245.175949][ T8746] netlink: 334 bytes leftover after parsing attributes in process `syz.2.904'. [ 245.490908][ T8755] delete_channel: no stack [ 245.660176][ T8765] FAULT_INJECTION: forcing a failure. [ 245.660176][ T8765] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.690917][ T8765] CPU: 0 UID: 0 PID: 8765 Comm: syz.1.910 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 245.690951][ T8765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 245.690963][ T8765] Call Trace: [ 245.690970][ T8765] [ 245.690980][ T8765] dump_stack_lvl+0x16c/0x1f0 [ 245.691016][ T8765] should_fail_ex+0x50a/0x650 [ 245.691054][ T8765] _copy_from_user+0x2e/0xd0 [ 245.691080][ T8765] copy_msghdr_from_user+0x99/0x160 [ 245.691113][ T8765] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 245.691161][ T8765] ___sys_sendmsg+0xff/0x1e0 [ 245.691194][ T8765] ? __pfx____sys_sendmsg+0x10/0x10 [ 245.691238][ T8765] ? __pfx_lock_release+0x10/0x10 [ 245.691267][ T8765] ? trace_lock_acquire+0x14e/0x1f0 [ 245.691304][ T8765] ? __fget_files+0x206/0x3a0 [ 245.691344][ T8765] __sys_sendmsg+0x16e/0x220 [ 245.691376][ T8765] ? __pfx___sys_sendmsg+0x10/0x10 [ 245.691428][ T8765] do_syscall_64+0xcd/0x250 [ 245.691469][ T8765] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.691499][ T8765] RIP: 0033:0x7fddfd58d169 [ 245.691518][ T8765] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 245.691538][ T8765] RSP: 002b:00007fddfe3ad038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 245.691560][ T8765] RAX: ffffffffffffffda RBX: 00007fddfd7a5fa0 RCX: 00007fddfd58d169 [ 245.691575][ T8765] RDX: 0000000000000844 RSI: 0000400000000200 RDI: 0000000000000003 [ 245.691589][ T8765] RBP: 00007fddfe3ad090 R08: 0000000000000000 R09: 0000000000000000 [ 245.691602][ T8765] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.691615][ T8765] R13: 0000000000000000 R14: 00007fddfd7a5fa0 R15: 00007fff8041ac08 [ 245.691645][ T8765] [ 246.542588][ T8744] kexec: Could not allocate control_code_buffer [ 248.513245][ T8830] FAULT_INJECTION: forcing a failure. [ 248.513245][ T8830] name failslab, interval 1, probability 0, space 0, times 0 [ 248.542363][ T8830] CPU: 1 UID: 0 PID: 8830 Comm: syz.3.928 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 248.542397][ T8830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 248.542410][ T8830] Call Trace: [ 248.542417][ T8830] [ 248.542426][ T8830] dump_stack_lvl+0x16c/0x1f0 [ 248.542462][ T8830] should_fail_ex+0x50a/0x650 [ 248.542497][ T8830] ? fs_reclaim_acquire+0xae/0x150 [ 248.542529][ T8830] ? io_sqe_buffer_register+0x118/0x1b20 [ 248.542557][ T8830] should_failslab+0xc2/0x120 [ 248.542580][ T8830] __kmalloc_cache_noprof+0x68/0x410 [ 248.542619][ T8830] io_sqe_buffer_register+0x118/0x1b20 [ 248.542665][ T8830] ? copy_iovec_from_user+0x138/0x170 [ 248.542690][ T8830] ? __pfx_io_sqe_buffer_register+0x10/0x10 [ 248.542721][ T8830] ? iovec_from_user.part.0+0x7e/0x130 [ 248.542755][ T8830] io_sqe_buffers_register+0x1fa/0x740 [ 248.542794][ T8830] ? __pfx_io_sqe_buffers_register+0x10/0x10 [ 248.542834][ T8830] ? __pfx___mutex_trylock_common+0x10/0x10 [ 248.542871][ T8830] __io_uring_register+0x2111/0x22f0 [ 248.542901][ T8830] ? trace_contention_end+0xee/0x140 [ 248.542933][ T8830] ? __pfx___io_uring_register+0x10/0x10 [ 248.542960][ T8830] ? __mutex_lock+0x1cc/0xb10 [ 248.542990][ T8830] ? __fget_files+0x1fc/0x3a0 [ 248.543020][ T8830] ? __x64_sys_io_uring_register+0x15b/0x280 [ 248.543048][ T8830] ? __pfx_lock_release+0x10/0x10 [ 248.543080][ T8830] ? __pfx___mutex_lock+0x10/0x10 [ 248.543111][ T8830] ? __fget_files+0x40/0x3a0 [ 248.543145][ T8830] ? __fget_files+0x206/0x3a0 [ 248.543185][ T8830] __x64_sys_io_uring_register+0x16c/0x280 [ 248.543219][ T8830] do_syscall_64+0xcd/0x250 [ 248.543259][ T8830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 248.543290][ T8830] RIP: 0033:0x7f5cf258d169 [ 248.543310][ T8830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 248.543331][ T8830] RSP: 002b:00007f5cf333a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ab [ 248.543353][ T8830] RAX: ffffffffffffffda RBX: 00007f5cf27a5fa0 RCX: 00007f5cf258d169 [ 248.543368][ T8830] RDX: 0000400000000000 RSI: 0000000000000000 RDI: 0000000000000002 [ 248.543381][ T8830] RBP: 00007f5cf333a090 R08: 0000000000000000 R09: 0000000000000000 [ 248.543394][ T8830] R10: 0000000000000003 R11: 0000000000000246 R12: 0000000000000001 [ 248.543407][ T8830] R13: 0000000000000000 R14: 00007f5cf27a5fa0 R15: 00007ffea923e5c8 [ 248.543438][ T8830] [ 251.296091][ T9] Process accounting resumed [ 252.891350][ T8936] syz.0.956 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 253.645528][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 253.653894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 253.966848][ T8950] FAULT_INJECTION: forcing a failure. [ 253.966848][ T8950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 253.996163][ T8950] CPU: 1 UID: 0 PID: 8950 Comm: syz.3.959 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 253.996197][ T8950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 253.996211][ T8950] Call Trace: [ 253.996218][ T8950] [ 253.996227][ T8950] dump_stack_lvl+0x16c/0x1f0 [ 253.996264][ T8950] should_fail_ex+0x50a/0x650 [ 253.996304][ T8950] strncpy_from_user+0x3b/0x2d0 [ 253.996339][ T8950] getname_flags.part.0+0x8f/0x550 [ 253.996371][ T8950] getname+0x8d/0xe0 [ 253.996400][ T8950] do_sys_openat2+0x104/0x1e0 [ 253.996424][ T8950] ? __pfx_do_sys_openat2+0x10/0x10 [ 253.996452][ T8950] ? __fget_files+0x206/0x3a0 [ 253.996490][ T8950] __x64_sys_openat+0x175/0x210 [ 253.996514][ T8950] ? __pfx___x64_sys_openat+0x10/0x10 [ 253.996538][ T8950] ? ksys_write+0x1ba/0x250 [ 253.996590][ T8950] do_syscall_64+0xcd/0x250 [ 253.996624][ T8950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.996655][ T8950] RIP: 0033:0x7f5cf258d169 [ 253.996674][ T8950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.996694][ T8950] RSP: 002b:00007f5cf333a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 253.996715][ T8950] RAX: ffffffffffffffda RBX: 00007f5cf27a5fa0 RCX: 00007f5cf258d169 [ 253.996731][ T8950] RDX: 0000000000000000 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 253.996745][ T8950] RBP: 00007f5cf333a090 R08: 0000000000000000 R09: 0000000000000000 [ 253.996758][ T8950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.996771][ T8950] R13: 0000000000000001 R14: 00007f5cf27a5fa0 R15: 00007ffea923e5c8 [ 253.996801][ T8950] [ 255.778294][ T8987] FAULT_INJECTION: forcing a failure. [ 255.778294][ T8987] name failslab, interval 1, probability 0, space 0, times 0 [ 255.791606][ T8987] CPU: 0 UID: 0 PID: 8987 Comm: syz.3.971 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 255.791638][ T8987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 255.791660][ T8987] Call Trace: [ 255.791668][ T8987] [ 255.791678][ T8987] dump_stack_lvl+0x16c/0x1f0 [ 255.791719][ T8987] should_fail_ex+0x50a/0x650 [ 255.791754][ T8987] ? fs_reclaim_acquire+0xae/0x150 [ 255.791786][ T8987] ? memcg_list_lru_alloc+0x29f/0x730 [ 255.791812][ T8987] should_failslab+0xc2/0x120 [ 255.791835][ T8987] __kmalloc_noprof+0xcb/0x510 [ 255.791870][ T8987] ? class_attr_show+0x6f/0xa0 [ 255.791908][ T8987] memcg_list_lru_alloc+0x29f/0x730 [ 255.791942][ T8987] ? __pfx_memcg_list_lru_alloc+0x10/0x10 [ 255.791968][ T8987] ? trace_lock_acquire+0x14e/0x1f0 [ 255.791996][ T8987] ? lock_acquire+0x2f/0xb0 [ 255.792026][ T8987] ? get_mem_cgroup_from_objcg+0xe1/0x210 [ 255.792061][ T8987] __memcg_slab_post_alloc_hook+0x12c/0x9b0 [ 255.792086][ T8987] ? kasan_save_track+0x14/0x30 [ 255.792131][ T8987] kmem_cache_alloc_lru_noprof+0x363/0x3d0 [ 255.792169][ T8987] ? bdev_alloc_inode+0x26/0x90 [ 255.792195][ T8987] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 255.792228][ T8987] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 255.792252][ T8987] bdev_alloc_inode+0x26/0x90 [ 255.792273][ T8987] ? __pfx_bdev_alloc_inode+0x10/0x10 [ 255.792294][ T8987] alloc_inode+0x5d/0x230 [ 255.792318][ T8987] new_inode+0x22/0x210 [ 255.792341][ T8987] ? rcu_is_watching+0x12/0xc0 [ 255.792370][ T8987] bdev_alloc+0x2b/0x420 [ 255.792398][ T8987] __alloc_disk_node+0x10c/0x610 [ 255.792423][ T8987] ? blk_alloc_queue+0x1a3/0x700 [ 255.792450][ T8987] __blk_alloc_disk+0xd8/0x170 [ 255.792477][ T8987] ? __pfx___blk_alloc_disk+0x10/0x10 [ 255.792521][ T8987] ? __pfx_idr_alloc+0x10/0x10 [ 255.792553][ T8987] ? __raw_spin_lock_init+0x3a/0x110 [ 255.792583][ T8987] ? __pfx_hot_add_show+0x10/0x10 [ 255.792616][ T8987] zram_add+0x160/0x6b0 [ 255.792660][ T8987] ? __pfx_zram_add+0x10/0x10 [ 255.792718][ T8987] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 255.792755][ T8987] ? rcu_is_watching+0x12/0xc0 [ 255.792787][ T8987] ? __pfx_hot_add_show+0x10/0x10 [ 255.792821][ T8987] hot_add_show+0x21/0x80 [ 255.792855][ T8987] class_attr_show+0x6f/0xa0 [ 255.792887][ T8987] ? __pfx_class_attr_show+0x10/0x10 [ 255.792916][ T8987] sysfs_kf_seq_show+0x23e/0x410 [ 255.792954][ T8987] seq_read_iter+0x4f4/0x12b0 [ 255.793001][ T8987] kernfs_fop_read_iter+0x414/0x580 [ 255.793028][ T8987] ? rw_verify_area+0xcf/0x680 [ 255.793062][ T8987] vfs_read+0x886/0xbf0 [ 255.793100][ T8987] ? __pfx_vfs_read+0x10/0x10 [ 255.793171][ T8987] ksys_read+0x12b/0x250 [ 255.793205][ T8987] ? __pfx_ksys_read+0x10/0x10 [ 255.793250][ T8987] do_syscall_64+0xcd/0x250 [ 255.793286][ T8987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.793318][ T8987] RIP: 0033:0x7f5cf258d169 [ 255.793339][ T8987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.793361][ T8987] RSP: 002b:00007f5cf333a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 255.793384][ T8987] RAX: ffffffffffffffda RBX: 00007f5cf27a5fa0 RCX: 00007f5cf258d169 [ 255.793401][ T8987] RDX: 0000000000001000 RSI: 0000400000000ec0 RDI: 0000000000000008 [ 255.793414][ T8987] RBP: 00007f5cf260e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 255.793428][ T8987] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 255.793442][ T8987] R13: 0000000000000000 R14: 00007f5cf27a5fa0 R15: 00007ffea923e5c8 [ 255.793477][ T8987] [ 256.188060][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.195121][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.216916][ T8987] zram: Error allocating disk structure for device 1 [ 256.476047][ T55] Bluetooth: hci2: unexpected subevent 0x01 length: 123 > 18 [ 256.495686][ T8983] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 256.503250][ T8983] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 256.554937][ T8983] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 256.569122][ T8983] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 256.578549][ T8983] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 256.584810][ T8983] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 256.633748][ T8983] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 256.659444][ T8983] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 257.675808][ T9020] netlink: 28 bytes leftover after parsing attributes in process `syz.3.981'. [ 257.684917][ T9020] veth0_to_bond: entered promiscuous mode [ 257.876337][ T9023] FAULT_INJECTION: forcing a failure. [ 257.876337][ T9023] name failslab, interval 1, probability 0, space 0, times 0 [ 257.891973][ T9023] CPU: 0 UID: 0 PID: 9023 Comm: syz.3.982 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 257.891999][ T9023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 257.892009][ T9023] Call Trace: [ 257.892015][ T9023] [ 257.892022][ T9023] dump_stack_lvl+0x16c/0x1f0 [ 257.892052][ T9023] should_fail_ex+0x50a/0x650 [ 257.892081][ T9023] ? fs_reclaim_acquire+0xae/0x150 [ 257.892107][ T9023] should_failslab+0xc2/0x120 [ 257.892126][ T9023] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 257.892154][ T9023] ? __alloc_skb+0x2b1/0x380 [ 257.892184][ T9023] __alloc_skb+0x2b1/0x380 [ 257.892208][ T9023] ? __pfx___alloc_skb+0x10/0x10 [ 257.892236][ T9023] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 257.892270][ T9023] netlink_alloc_large_skb+0x69/0x130 [ 257.892298][ T9023] netlink_sendmsg+0x689/0xd70 [ 257.892327][ T9023] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.892361][ T9023] ____sys_sendmsg+0xaaf/0xc90 [ 257.892382][ T9023] ? copy_msghdr_from_user+0x10b/0x160 [ 257.892409][ T9023] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.892428][ T9023] ? __lock_acquire+0xcc5/0x3c40 [ 257.892464][ T9023] ___sys_sendmsg+0x135/0x1e0 [ 257.892498][ T9023] ? __pfx____sys_sendmsg+0x10/0x10 [ 257.892535][ T9023] ? trace_lock_acquire+0x14e/0x1f0 [ 257.892573][ T9023] __sys_sendmmsg+0x201/0x420 [ 257.892602][ T9023] ? __pfx___sys_sendmmsg+0x10/0x10 [ 257.892637][ T9023] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 257.892671][ T9023] ? fput+0x67/0x440 [ 257.892690][ T9023] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 257.892715][ T9023] ? syscall_user_dispatch+0x7a/0x130 [ 257.892749][ T9023] __x64_sys_sendmmsg+0x9c/0x100 [ 257.892777][ T9023] do_syscall_64+0xcd/0x250 [ 257.892811][ T9023] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.892836][ T9023] RIP: 0033:0x7f5cf258d169 [ 257.892853][ T9023] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.892872][ T9023] RSP: 002b:00007f5cf333a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 257.892890][ T9023] RAX: ffffffffffffffda RBX: 00007f5cf27a5fa0 RCX: 00007f5cf258d169 [ 257.892902][ T9023] RDX: 0000000000000003 RSI: 0000400000000080 RDI: 0000000000000003 [ 257.892913][ T9023] RBP: 00007f5cf333a090 R08: 0000000000000000 R09: 0000000000000000 [ 257.892924][ T9023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.892935][ T9023] R13: 0000000000000000 R14: 00007f5cf27a5fa0 R15: 00007ffea923e5c8 [ 257.892958][ T9023] [ 258.345445][ T55] Bluetooth: hci0: command 0x0406 tx timeout [ 258.585426][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 258.592723][ T5842] Bluetooth: hci1: command 0x0406 tx timeout [ 258.673969][ T55] Bluetooth: hci3: command 0x0406 tx timeout [ 258.695817][ T9045] FAULT_INJECTION: forcing a failure. [ 258.695817][ T9045] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 258.716640][ T9045] CPU: 1 UID: 0 PID: 9045 Comm: syz.2.989 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 258.716675][ T9045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 258.716688][ T9045] Call Trace: [ 258.716695][ T9045] [ 258.716704][ T9045] dump_stack_lvl+0x16c/0x1f0 [ 258.716740][ T9045] should_fail_ex+0x50a/0x650 [ 258.716778][ T9045] _copy_from_user+0x2e/0xd0 [ 258.716803][ T9045] copy_msghdr_from_user+0x99/0x160 [ 258.716837][ T9045] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 258.716884][ T9045] ___sys_sendmsg+0xff/0x1e0 [ 258.716917][ T9045] ? __pfx____sys_sendmsg+0x10/0x10 [ 258.716962][ T9045] ? __pfx_lock_release+0x10/0x10 [ 258.716992][ T9045] ? trace_lock_acquire+0x14e/0x1f0 [ 258.717029][ T9045] ? __fget_files+0x206/0x3a0 [ 258.717069][ T9045] __sys_sendmsg+0x16e/0x220 [ 258.717101][ T9045] ? __pfx___sys_sendmsg+0x10/0x10 [ 258.717153][ T9045] do_syscall_64+0xcd/0x250 [ 258.717192][ T9045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.717222][ T9045] RIP: 0033:0x7f66f118d169 [ 258.717241][ T9045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.717261][ T9045] RSP: 002b:00007f66f205c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 258.717283][ T9045] RAX: ffffffffffffffda RBX: 00007f66f13a5fa0 RCX: 00007f66f118d169 [ 258.717299][ T9045] RDX: 0000000004004040 RSI: 0000400000000280 RDI: 0000000000000003 [ 258.717313][ T9045] RBP: 00007f66f205c090 R08: 0000000000000000 R09: 0000000000000000 [ 258.717326][ T9045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.717339][ T9045] R13: 0000000000000000 R14: 00007f66f13a5fa0 R15: 00007fff4bfe24f8 [ 258.717370][ T9045] [ 260.425812][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 260.673419][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 260.679613][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 260.745381][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 262.219049][ T9120] FAULT_INJECTION: forcing a failure. [ 262.219049][ T9120] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.233534][ T55] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 262.243481][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 262.253640][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 262.254889][ T9120] CPU: 0 UID: 0 PID: 9120 Comm: syz.2.1016 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 262.254930][ T9120] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 262.254943][ T9120] Call Trace: [ 262.254951][ T9120] [ 262.254965][ T9120] dump_stack_lvl+0x16c/0x1f0 [ 262.254999][ T9120] should_fail_ex+0x50a/0x650 [ 262.255038][ T9120] _copy_from_user+0x2e/0xd0 [ 262.255064][ T9120] move_addr_to_kernel+0x68/0x160 [ 262.255092][ T9120] __copy_msghdr+0x386/0x470 [ 262.255123][ T9120] copy_msghdr_from_user+0xc2/0x160 [ 262.255153][ T9120] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 262.255183][ T9120] ? __lock_acquire+0xcc5/0x3c40 [ 262.255230][ T9120] ___sys_sendmsg+0xff/0x1e0 [ 262.255262][ T9120] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.255306][ T9120] ? trace_lock_acquire+0x14e/0x1f0 [ 262.255350][ T9120] __sys_sendmmsg+0x201/0x420 [ 262.255384][ T9120] ? __pfx___sys_sendmmsg+0x10/0x10 [ 262.255426][ T9120] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 262.255466][ T9120] ? fput+0x67/0x440 [ 262.255489][ T9120] ? ksys_write+0x1ba/0x250 [ 262.255534][ T9120] ? __pfx_ksys_write+0x10/0x10 [ 262.255568][ T9120] __x64_sys_sendmmsg+0x9c/0x100 [ 262.255598][ T9120] ? lockdep_hardirqs_on+0x7c/0x110 [ 262.255625][ T9120] do_syscall_64+0xcd/0x250 [ 262.255656][ T9120] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.255685][ T9120] RIP: 0033:0x7f66f118d169 [ 262.255705][ T9120] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.255725][ T9120] RSP: 002b:00007f66f205c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 262.255746][ T9120] RAX: ffffffffffffffda RBX: 00007f66f13a5fa0 RCX: 00007f66f118d169 [ 262.255761][ T9120] RDX: 0000000000000002 RSI: 00004000000001c0 RDI: 0000000000000003 [ 262.255774][ T9120] RBP: 00007f66f205c090 R08: 0000000000000000 R09: 0000000000000000 [ 262.255787][ T9120] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 262.255800][ T9120] R13: 0000000000000000 R14: 00007f66f13a5fa0 R15: 00007fff4bfe24f8 [ 262.255828][ T9120] [ 262.481590][ T55] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 262.489426][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 262.497997][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 262.852423][ T9141] FAULT_INJECTION: forcing a failure. [ 262.852423][ T9141] name failslab, interval 1, probability 0, space 0, times 0 [ 262.883102][ T9117] chnl_net:caif_netlink_parms(): no params data found [ 262.900968][ T9141] CPU: 0 UID: 0 PID: 9141 Comm: syz.2.1022 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 262.900998][ T9141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 262.901008][ T9141] Call Trace: [ 262.901014][ T9141] [ 262.901021][ T9141] dump_stack_lvl+0x16c/0x1f0 [ 262.901051][ T9141] should_fail_ex+0x50a/0x650 [ 262.901080][ T9141] ? fs_reclaim_acquire+0xae/0x150 [ 262.901117][ T9141] should_failslab+0xc2/0x120 [ 262.901135][ T9141] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 262.901165][ T9141] ? __alloc_skb+0x2b1/0x380 [ 262.901196][ T9141] __alloc_skb+0x2b1/0x380 [ 262.901224][ T9141] ? __pfx___alloc_skb+0x10/0x10 [ 262.901256][ T9141] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 262.901290][ T9141] netlink_alloc_large_skb+0x69/0x130 [ 262.901320][ T9141] netlink_sendmsg+0x689/0xd70 [ 262.901355][ T9141] ? __pfx_netlink_sendmsg+0x10/0x10 [ 262.901392][ T9141] ____sys_sendmsg+0xaaf/0xc90 [ 262.901416][ T9141] ? copy_msghdr_from_user+0x10b/0x160 [ 262.901445][ T9141] ? __pfx_____sys_sendmsg+0x10/0x10 [ 262.901466][ T9141] ? __lock_acquire+0xcc5/0x3c40 [ 262.901511][ T9141] ___sys_sendmsg+0x135/0x1e0 [ 262.901543][ T9141] ? __pfx____sys_sendmsg+0x10/0x10 [ 262.901589][ T9141] ? trace_lock_acquire+0x14e/0x1f0 [ 262.901634][ T9141] __sys_sendmmsg+0x201/0x420 [ 262.901669][ T9141] ? __pfx___sys_sendmmsg+0x10/0x10 [ 262.901710][ T9141] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 262.901752][ T9141] ? fput+0x67/0x440 [ 262.901774][ T9141] ? ksys_write+0x1ba/0x250 [ 262.901803][ T9141] ? __pfx_ksys_write+0x10/0x10 [ 262.901837][ T9141] __x64_sys_sendmmsg+0x9c/0x100 [ 262.901866][ T9141] ? lockdep_hardirqs_on+0x7c/0x110 [ 262.901894][ T9141] do_syscall_64+0xcd/0x250 [ 262.901924][ T9141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.901953][ T9141] RIP: 0033:0x7f66f118d169 [ 262.901972][ T9141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.901996][ T9141] RSP: 002b:00007f66f205c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 262.902018][ T9141] RAX: ffffffffffffffda RBX: 00007f66f13a5fa0 RCX: 00007f66f118d169 [ 262.902033][ T9141] RDX: 0000000000000003 RSI: 0000400000000080 RDI: 0000000000000003 [ 262.902047][ T9141] RBP: 00007f66f205c090 R08: 0000000000000000 R09: 0000000000000000 [ 262.902060][ T9141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.902073][ T9141] R13: 0000000000000000 R14: 00007f66f13a5fa0 R15: 00007fff4bfe24f8 [ 262.902109][ T9141] [ 263.522383][ T9117] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.529874][ T9117] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.537295][ T9117] bridge_slave_0: entered allmulticast mode [ 263.544566][ T9117] bridge_slave_0: entered promiscuous mode [ 263.552757][ T9117] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.560184][ T9117] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.567503][ T9117] bridge_slave_1: entered allmulticast mode [ 263.574712][ T9117] bridge_slave_1: entered promiscuous mode [ 263.691644][ T9117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.714072][ T9117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.898886][ T9117] team0: Port device team_slave_0 added [ 264.042240][ T9117] team0: Port device team_slave_1 added [ 264.082955][ T9156] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 264.090229][ T9156] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 264.098103][ T9156] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 264.104197][ T9156] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 264.129863][ T9156] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 264.148937][ T9156] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 264.175846][ T9117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.217463][ T9117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.244510][ T9156] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 264.259675][ T9117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.357672][ T9117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.364677][ T9117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.412943][ T9117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.580563][ T9117] hsr_slave_0: entered promiscuous mode [ 264.595172][ T9117] hsr_slave_1: entered promiscuous mode [ 264.610875][ T9117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.620852][ T9117] Cannot create hsr debugfs directory [ 264.765940][ T9175] FAULT_INJECTION: forcing a failure. [ 264.765940][ T9175] name failslab, interval 1, probability 0, space 0, times 0 [ 264.792291][ T9175] CPU: 1 UID: 0 PID: 9175 Comm: syz.3.1030 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 264.792324][ T9175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 264.792336][ T9175] Call Trace: [ 264.792343][ T9175] [ 264.792351][ T9175] dump_stack_lvl+0x16c/0x1f0 [ 264.792386][ T9175] should_fail_ex+0x50a/0x650 [ 264.792419][ T9175] ? fs_reclaim_acquire+0xae/0x150 [ 264.792448][ T9175] should_failslab+0xc2/0x120 [ 264.792468][ T9175] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 264.792499][ T9175] ? __alloc_skb+0x2b1/0x380 [ 264.792533][ T9175] __alloc_skb+0x2b1/0x380 [ 264.792562][ T9175] ? __pfx___alloc_skb+0x10/0x10 [ 264.792594][ T9175] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 264.792629][ T9175] netlink_alloc_large_skb+0x69/0x130 [ 264.792660][ T9175] netlink_sendmsg+0x689/0xd70 [ 264.792693][ T9175] ? __pfx_netlink_sendmsg+0x10/0x10 [ 264.792735][ T9175] ____sys_sendmsg+0xaaf/0xc90 [ 264.792760][ T9175] ? copy_msghdr_from_user+0x10b/0x160 [ 264.792792][ T9175] ? __pfx_____sys_sendmsg+0x10/0x10 [ 264.792814][ T9175] ? __lock_acquire+0xcc5/0x3c40 [ 264.792867][ T9175] ___sys_sendmsg+0x135/0x1e0 [ 264.792898][ T9175] ? __pfx____sys_sendmsg+0x10/0x10 [ 264.792948][ T9175] ? trace_lock_acquire+0x14e/0x1f0 [ 264.792994][ T9175] __sys_sendmmsg+0x201/0x420 [ 264.793030][ T9175] ? __pfx___sys_sendmmsg+0x10/0x10 [ 264.793073][ T9175] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 264.793117][ T9175] ? fput+0x67/0x440 [ 264.793141][ T9175] ? ksys_write+0x1ba/0x250 [ 264.793170][ T9175] ? __pfx_ksys_write+0x10/0x10 [ 264.793204][ T9175] __x64_sys_sendmmsg+0x9c/0x100 [ 264.793236][ T9175] ? lockdep_hardirqs_on+0x7c/0x110 [ 264.793265][ T9175] do_syscall_64+0xcd/0x250 [ 264.793296][ T9175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.793327][ T9175] RIP: 0033:0x7f5cf258d169 [ 264.793346][ T9175] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.793366][ T9175] RSP: 002b:00007f5cf333a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 264.793388][ T9175] RAX: ffffffffffffffda RBX: 00007f5cf27a5fa0 RCX: 00007f5cf258d169 [ 264.793403][ T9175] RDX: 0000000000000003 RSI: 0000400000000080 RDI: 0000000000000003 [ 264.793416][ T9175] RBP: 00007f5cf333a090 R08: 0000000000000000 R09: 0000000000000000 [ 264.793429][ T9175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.793442][ T9175] R13: 0000000000000000 R14: 00007f5cf27a5fa0 R15: 00007ffea923e5c8 [ 264.793471][ T9175] [ 265.281886][ T9117] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 265.318822][ T9117] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 265.340404][ T9117] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 265.361198][ T9117] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 265.489432][ T9117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.737935][ T9117] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.787510][ T5842] Bluetooth: hci0: command 0x0406 tx timeout [ 265.894672][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.901890][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.187492][ T5842] Bluetooth: hci4: command 0x041b tx timeout [ 266.194323][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 266.201405][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 266.207617][ T55] Bluetooth: hci1: command 0x0406 tx timeout [ 266.213865][ T8915] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.221152][ T8915] bridge0: port 2(bridge_slave_1) entered forwarding state [ 267.209174][ T9117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.267159][ T5842] Bluetooth: hci4: command 0x041b tx timeout [ 268.314703][ T9239] netlink: 334 bytes leftover after parsing attributes in process `syz.0.1045'. [ 268.349345][ T9117] veth0_vlan: entered promiscuous mode [ 268.421667][ T9117] veth1_vlan: entered promiscuous mode [ 268.491894][ T9117] veth0_macvtap: entered promiscuous mode [ 268.529981][ T9117] veth1_macvtap: entered promiscuous mode [ 268.577246][ T9117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.615427][ T9117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.645366][ T9117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.659646][ T9117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.682630][ T9117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.713573][ T9117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.731281][ T9117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 268.755767][ T9117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.786603][ T9117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 268.800108][ T9117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.862895][ T9117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.883472][ T9117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.894734][ T9117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.925657][ T9117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.936657][ T9117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.955704][ T9117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 268.973604][ T9117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 268.987879][ T9117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.031514][ T9117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.046661][ T9117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.061062][ T9117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.105340][ T9117] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.288536][ T8923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.296700][ T8923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.373206][ T8923] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 269.384647][ T8923] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.737081][ T9269] netlink: zone id is out of range [ 269.746340][ T9268] FAULT_INJECTION: forcing a failure. [ 269.746340][ T9268] name failslab, interval 1, probability 0, space 0, times 0 [ 269.762283][ T9269] netlink: zone id is out of range [ 269.768801][ T9268] CPU: 1 UID: 0 PID: 9268 Comm: syz.4.1012 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 269.768833][ T9268] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 269.768846][ T9268] Call Trace: [ 269.768853][ T9268] [ 269.768863][ T9268] dump_stack_lvl+0x16c/0x1f0 [ 269.768904][ T9268] should_fail_ex+0x50a/0x650 [ 269.768943][ T9268] ? fs_reclaim_acquire+0xae/0x150 [ 269.768980][ T9268] ? zram_add+0xed/0x6b0 [ 269.769013][ T9268] should_failslab+0xc2/0x120 [ 269.769038][ T9268] __kmalloc_cache_noprof+0x68/0x410 [ 269.769068][ T9268] ? hot_add_show+0x1c/0x80 [ 269.769103][ T9268] ? __pfx_hot_add_show+0x10/0x10 [ 269.769136][ T9268] zram_add+0xed/0x6b0 [ 269.769169][ T9268] ? __pfx_zram_add+0x10/0x10 [ 269.769225][ T9268] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 269.769262][ T9268] ? rcu_is_watching+0x12/0xc0 [ 269.769294][ T9268] ? __pfx_hot_add_show+0x10/0x10 [ 269.769329][ T9268] hot_add_show+0x21/0x80 [ 269.769362][ T9268] class_attr_show+0x6f/0xa0 [ 269.769406][ T9268] ? __pfx_class_attr_show+0x10/0x10 [ 269.769438][ T9268] sysfs_kf_seq_show+0x23e/0x410 [ 269.769477][ T9268] seq_read_iter+0x4f4/0x12b0 [ 269.769527][ T9268] kernfs_fop_read_iter+0x414/0x580 [ 269.769553][ T9268] ? rw_verify_area+0xcf/0x680 [ 269.769586][ T9268] vfs_read+0x886/0xbf0 [ 269.769625][ T9268] ? __pfx_vfs_read+0x10/0x10 [ 269.769682][ T9268] ksys_read+0x12b/0x250 [ 269.769714][ T9268] ? __pfx_ksys_read+0x10/0x10 [ 269.769757][ T9268] do_syscall_64+0xcd/0x250 [ 269.769794][ T9268] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 269.769829][ T9268] RIP: 0033:0x7f710958d169 [ 269.769849][ T9268] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 269.769872][ T9268] RSP: 002b:00007f710a448038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 269.769895][ T9268] RAX: ffffffffffffffda RBX: 00007f71097a5fa0 RCX: 00007f710958d169 [ 269.769912][ T9268] RDX: 0000000000001000 RSI: 0000400000000ec0 RDI: 0000000000000008 [ 269.769927][ T9268] RBP: 00007f710960e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 269.769939][ T9268] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 269.769950][ T9268] R13: 0000000000000000 R14: 00007f71097a5fa0 R15: 00007ffe975e1d48 [ 269.769981][ T9268] [ 269.775001][ T9269] netlink: zone id is out of range [ 269.928987][ T9269] netlink: zone id is out of range [ 270.049893][ T9269] netlink: zone id is out of range [ 270.061588][ T9269] netlink: zone id is out of range [ 270.084960][ T9269] netlink: zone id is out of range [ 270.135331][ T9269] netlink: zone id is out of range [ 270.160799][ T9269] netlink: zone id is out of range [ 270.182717][ T9269] netlink: zone id is out of range [ 270.355940][ T5842] Bluetooth: hci4: command 0x041b tx timeout [ 271.082661][ T9284] netlink: 334 bytes leftover after parsing attributes in process `syz.3.1055'. [ 272.425362][ T5842] Bluetooth: hci4: command 0x041b tx timeout [ 274.505861][ T5842] Bluetooth: hci4: command 0x041b tx timeout [ 275.584296][ T9352] FAULT_INJECTION: forcing a failure. [ 275.584296][ T9352] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 275.640689][ T9352] CPU: 1 UID: 0 PID: 9352 Comm: syz.3.1076 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 275.640722][ T9352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 275.640735][ T9352] Call Trace: [ 275.640742][ T9352] [ 275.640751][ T9352] dump_stack_lvl+0x16c/0x1f0 [ 275.640787][ T9352] should_fail_ex+0x50a/0x650 [ 275.640826][ T9352] _copy_to_user+0x32/0xd0 [ 275.640854][ T9352] simple_read_from_buffer+0xd0/0x160 [ 275.640884][ T9352] proc_fail_nth_read+0x198/0x270 [ 275.640912][ T9352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.640943][ T9352] ? rw_verify_area+0xcf/0x680 [ 275.640968][ T9352] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 275.640996][ T9352] vfs_read+0x1df/0xbf0 [ 275.641025][ T9352] ? __fget_files+0x1fc/0x3a0 [ 275.641057][ T9352] ? __pfx___mutex_lock+0x10/0x10 [ 275.641088][ T9352] ? __pfx_vfs_read+0x10/0x10 [ 275.641134][ T9352] ? __fget_files+0x206/0x3a0 [ 275.641174][ T9352] ksys_read+0x12b/0x250 [ 275.641202][ T9352] ? __pfx_ksys_read+0x10/0x10 [ 275.641242][ T9352] do_syscall_64+0xcd/0x250 [ 275.641275][ T9352] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.641306][ T9352] RIP: 0033:0x7f5cf258bb7c [ 275.641324][ T9352] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 275.641343][ T9352] RSP: 002b:00007f5cf333a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 275.641361][ T9352] RAX: ffffffffffffffda RBX: 00007f5cf27a5fa0 RCX: 00007f5cf258bb7c [ 275.641373][ T9352] RDX: 000000000000000f RSI: 00007f5cf333a0a0 RDI: 0000000000000004 [ 275.641386][ T9352] RBP: 00007f5cf333a090 R08: 0000000000000000 R09: 0000000000000000 [ 275.641399][ T9352] R10: 0000000000000101 R11: 0000000000000246 R12: 0000000000000001 [ 275.641413][ T9352] R13: 0000000000000000 R14: 00007f5cf27a5fa0 R15: 00007ffea923e5c8 [ 275.641445][ T9352] [ 275.830843][ C1] vkms_vblank_simulate: vblank timer overrun [ 276.605341][ T5842] Bluetooth: hci4: command 0x041b tx timeout [ 278.390164][ T9411] zero sized request [ 285.543971][ T55] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 285.556860][ T55] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 285.572252][ T55] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 285.595887][ T55] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 285.616051][ T55] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 285.624660][ T55] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 286.341426][ T8924] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.594464][ T8924] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.676871][ T9468] random: crng reseeded on system resumption [ 287.083788][ T8924] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.159194][ T9450] chnl_net:caif_netlink_parms(): no params data found [ 287.442572][ T8924] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.666836][ T5842] Bluetooth: hci4: unexpected subevent 0x1d length: 5 < 14 [ 287.717542][ T5842] Bluetooth: hci5: command tx timeout [ 287.975106][ T9450] bridge0: port 1(bridge_slave_0) entered blocking state [ 287.994310][ T9450] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.003606][ T9476] netlink: 2080 bytes leftover after parsing attributes in process `syz.4.1105'. [ 288.019887][ T9450] bridge_slave_0: entered allmulticast mode [ 288.040434][ T9450] bridge_slave_0: entered promiscuous mode [ 288.306307][ T9450] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.336473][ T9450] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.360593][ T9450] bridge_slave_1: entered allmulticast mode [ 288.381917][ T9450] bridge_slave_1: entered promiscuous mode [ 288.441853][ T8924] bridge_slave_1: left allmulticast mode [ 288.450664][ T8924] bridge_slave_1: left promiscuous mode [ 288.475433][ T8924] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.539979][ T8924] bridge_slave_0: left allmulticast mode [ 288.562712][ T8924] bridge_slave_0: left promiscuous mode [ 288.573011][ T8924] bridge0: port 1(bridge_slave_0) entered disabled state [ 289.780911][ T8924] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.795365][ T5842] Bluetooth: hci5: command tx timeout [ 289.811448][ T8924] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.822564][ T8924] bond0 (unregistering): Released all slaves [ 289.923614][ T9450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.984333][ T9450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 290.376724][ T9450] team0: Port device team_slave_0 added [ 290.409157][ T9450] team0: Port device team_slave_1 added [ 290.773738][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 290.794012][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 290.829039][ T9450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 290.971186][ T9450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.001901][ T9450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.092017][ T9450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 291.485425][ T9450] hsr_slave_0: entered promiscuous mode [ 291.507499][ T9450] hsr_slave_1: entered promiscuous mode [ 291.535009][ T9450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 291.557867][ T9450] Cannot create hsr debugfs directory [ 291.866033][ T5842] Bluetooth: hci5: command tx timeout [ 292.384883][ T9450] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 292.527994][ T9450] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 292.542062][ T9540] Invalid ELF header magic: != ELF [ 292.639779][ T9450] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 292.675860][ T9450] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 292.935832][ T9549] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1113'. [ 293.957440][ T5842] Bluetooth: hci5: command tx timeout [ 294.777128][ T9450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 294.796680][ T9450] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.174446][ T8915] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.181699][ T8915] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.266386][ T8917] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.273589][ T8917] bridge0: port 2(bridge_slave_1) entered forwarding state [ 295.752221][ T8924] hsr_slave_0: left promiscuous mode [ 295.759337][ T8924] hsr_slave_1: left promiscuous mode [ 295.795626][ T8924] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.803175][ T8924] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.836550][ T8924] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.844071][ T8924] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.914518][ T8924] veth1_macvtap: left promiscuous mode [ 295.935605][ T8924] veth0_macvtap: left promiscuous mode [ 298.075158][ T8924] team0 (unregistering): Port device team_slave_1 removed [ 298.184268][ T8924] team0 (unregistering): Port device team_slave_0 removed [ 299.367898][ T9450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 299.930748][ T9450] veth0_vlan: entered promiscuous mode [ 299.962551][ T9450] veth1_vlan: entered promiscuous mode [ 300.059064][ T9450] veth0_macvtap: entered promiscuous mode [ 300.082807][ T9450] veth1_macvtap: entered promiscuous mode [ 300.172687][ T9450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.183957][ T9450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.201989][ T9450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.212924][ T9450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.229554][ T9450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.242701][ T9450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.257609][ T9450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 300.279999][ T9450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.293678][ T9450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.333012][ T9450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.356076][ T9450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.371032][ T9450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.387499][ T9450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.411557][ T9450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.435961][ T9450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.468435][ T9450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 300.511182][ T9450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 300.526395][ T9450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.551730][ T9450] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.580552][ T9450] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.595326][ T9450] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.604099][ T9450] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.822388][ T8923] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.853016][ T8923] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.888782][ T8911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.903563][ T8911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.245683][ T55] Bluetooth: hci1: unexpected subevent 0x1d length: 5 < 14 [ 302.925614][ T9716] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(12) [ 303.111336][ T9705] netlink: 2080 bytes leftover after parsing attributes in process `syz.0.1131'. [ 303.258444][ T9727] sd 0:0:1:0: PR command failed: 1026 [ 303.264074][ T9727] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 303.343179][ T9727] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 303.405439][ T9727] sd 0:0:1:0: PR command failed: 1026 [ 303.427493][ T9727] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 303.463736][ T9727] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 303.491719][ T9727] sd 0:0:1:0: PR command failed: 1026 [ 303.497377][ T9727] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 303.526314][ T9727] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 303.553685][ T9727] sd 0:0:1:0: PR command failed: 1026 [ 303.585331][ T9727] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 303.592579][ T9727] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 303.647590][ T9727] sd 0:0:1:0: PR command failed: 1026 [ 303.653086][ T9727] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 303.675347][ T9727] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 303.683529][ T9727] sd 0:0:1:0: PR command failed: 1026 [ 303.705382][ T9727] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 303.715653][ T9727] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 303.754645][ T9727] sd 0:0:1:0: PR command failed: 1026 [ 303.777713][ T9727] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 303.784519][ T9727] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 303.812211][ T9727] sd 0:0:1:0: PR command failed: 1026 [ 303.855314][ T9727] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 303.862094][ T9727] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 303.888617][ T9727] sd 0:0:1:0: PR command failed: 1026 [ 303.910112][ T9727] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 303.920608][ T9727] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 303.939765][ T9727] sd 0:0:1:0: PR command failed: 1026 [ 303.955329][ T9727] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 304.005343][ T9727] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 304.031519][ T9727] sd 0:0:1:0: PR command failed: 1026 [ 304.065732][ T9727] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 304.072552][ T9727] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 304.731490][ T9756] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1145'. [ 305.125287][ T9774] netlink: 346 bytes leftover after parsing attributes in process `syz.3.1148'. [ 306.394769][ T9798] snd_virmidi snd_virmidi.0: control 3:6:1068:IAJ:127 is already present [ 306.915300][ T9795] capability: warning: `syz.0.1155' uses 32-bit capabilities (legacy support in use) [ 308.969275][ C1] vcan0: j1939_tp_rxtimer: 0xffff888049a10800: rx timeout, send abort [ 309.118813][ T9854] random: crng reseeded on system resumption [ 309.478908][ C1] vcan0: j1939_tp_rxtimer: 0xffff888049a10800: abort rx timeout. Force session deactivation [ 311.371902][ T9915] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1181'. [ 312.726655][ T9935] net_ratelimit: 84 callbacks suppressed [ 312.726677][ T9935] netlink: set zone limit has 8 unknown bytes [ 313.299651][ T9946] netlink: 93 bytes leftover after parsing attributes in process `syz.0.1197'. [ 315.238336][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 315.995833][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802794bc00: rx timeout, send abort [ 316.504237][ C0] vcan0: j1939_tp_rxtimer: 0xffff88802794bc00: abort rx timeout. Force session deactivation [ 317.633301][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.642954][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.042690][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 318.625750][T10078] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1217'. [ 318.970849][T10087] kmem.limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 319.636272][T10094] netlink: 93 bytes leftover after parsing attributes in process `syz.3.1219'. [ 321.138477][T10157] netlink: set zone limit has 8 unknown bytes [ 323.588664][T10219] netlink: 93 bytes leftover after parsing attributes in process `syz.5.1235'. [ 324.298657][T10235] nbd: illegal input index 2147483647 [ 324.390148][T10235] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 324.596890][T10238] netlink: set zone limit has 8 unknown bytes [ 326.002091][T10263] FAULT_INJECTION: forcing a failure. [ 326.002091][T10263] name failslab, interval 1, probability 0, space 0, times 0 [ 326.075503][T10263] CPU: 1 UID: 0 PID: 10263 Comm: syz.4.1252 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 326.075536][T10263] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 326.075548][T10263] Call Trace: [ 326.075554][T10263] [ 326.075563][T10263] dump_stack_lvl+0x16c/0x1f0 [ 326.075599][T10263] should_fail_ex+0x50a/0x650 [ 326.075634][T10263] ? fs_reclaim_acquire+0xae/0x150 [ 326.075666][T10263] should_failslab+0xc2/0x120 [ 326.075690][T10263] kmem_cache_alloc_node_noprof+0x72/0x3c0 [ 326.075725][T10263] ? __alloc_skb+0x2b1/0x380 [ 326.075760][T10263] __alloc_skb+0x2b1/0x380 [ 326.075790][T10263] ? __pfx___alloc_skb+0x10/0x10 [ 326.075819][T10263] ? __lock_acquire+0xcc5/0x3c40 [ 326.075860][T10263] alloc_skb_with_frags+0xe4/0x850 [ 326.075884][T10263] ? __pfx___lock_acquire+0x10/0x10 [ 326.075913][T10263] ? hlock_class+0x4e/0x130 [ 326.075941][T10263] sock_alloc_send_pskb+0x7f1/0x980 [ 326.075974][T10263] ? find_held_lock+0x2d/0x110 [ 326.076005][T10263] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 326.076039][T10263] ? lock_acquire+0x2f/0xb0 [ 326.076067][T10263] ? sock_cmsg_send+0x1a0/0x280 [ 326.076104][T10263] packet_sendmsg+0x1fd3/0x56c0 [ 326.076156][T10263] ? __pfx___might_resched+0x10/0x10 [ 326.076201][T10263] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 326.076242][T10263] ? __pfx_packet_sendmsg+0x10/0x10 [ 326.076277][T10263] ? aa_label_match+0xad0/0x2740 [ 326.076300][T10263] ? __might_fault+0xe3/0x190 [ 326.076325][T10263] ? __might_fault+0xe3/0x190 [ 326.076356][T10263] ____sys_sendmsg+0xaaf/0xc90 [ 326.076384][T10263] ? __pfx_____sys_sendmsg+0x10/0x10 [ 326.076407][T10263] ? __lock_acquire+0xcc5/0x3c40 [ 326.076451][T10263] ___sys_sendmsg+0x135/0x1e0 [ 326.076485][T10263] ? __pfx____sys_sendmsg+0x10/0x10 [ 326.076535][T10263] ? trace_lock_acquire+0x14e/0x1f0 [ 326.076582][T10263] __sys_sendmmsg+0x201/0x420 [ 326.076618][T10263] ? __pfx___sys_sendmmsg+0x10/0x10 [ 326.076666][T10263] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 326.076710][T10263] ? fput+0x67/0x440 [ 326.076733][T10263] ? ksys_write+0x1ba/0x250 [ 326.076762][T10263] ? __pfx_ksys_write+0x10/0x10 [ 326.076798][T10263] __x64_sys_sendmmsg+0x9c/0x100 [ 326.076829][T10263] ? lockdep_hardirqs_on+0x7c/0x110 [ 326.076858][T10263] do_syscall_64+0xcd/0x250 [ 326.076889][T10263] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.076920][T10263] RIP: 0033:0x7f710958d169 [ 326.076940][T10263] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.076962][T10263] RSP: 002b:00007f710a448038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 326.076985][T10263] RAX: ffffffffffffffda RBX: 00007f71097a5fa0 RCX: 00007f710958d169 [ 326.077000][T10263] RDX: 0000000000000002 RSI: 00004000000001c0 RDI: 0000000000000003 [ 326.077014][T10263] RBP: 00007f710a448090 R08: 0000000000000000 R09: 0000000000000000 [ 326.077028][T10263] R10: 0000000000000100 R11: 0000000000000246 R12: 0000000000000001 [ 326.077042][T10263] R13: 0000000000000000 R14: 00007f71097a5fa0 R15: 00007ffe975e1d48 [ 326.077072][T10263] [ 329.547502][T10312] FAULT_INJECTION: forcing a failure. [ 329.547502][T10312] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.645396][T10312] CPU: 1 UID: 0 PID: 10312 Comm: syz.4.1268 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 329.645430][T10312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 329.645443][T10312] Call Trace: [ 329.645450][T10312] [ 329.645459][T10312] dump_stack_lvl+0x16c/0x1f0 [ 329.645494][T10312] should_fail_ex+0x50a/0x650 [ 329.645533][T10312] _copy_from_iter+0x2a1/0x1560 [ 329.645559][T10312] ? trace_lock_acquire+0x14e/0x1f0 [ 329.645587][T10312] ? __alloc_skb+0x1fe/0x380 [ 329.645618][T10312] ? __pfx__copy_from_iter+0x10/0x10 [ 329.645648][T10312] ? __virt_addr_valid+0x1a4/0x590 [ 329.645677][T10312] ? __virt_addr_valid+0x5e/0x590 [ 329.645700][T10312] ? __phys_addr_symbol+0x30/0x80 [ 329.645722][T10312] ? __check_object_size+0x488/0x710 [ 329.645751][T10312] netlink_sendmsg+0x813/0xd70 [ 329.645788][T10312] ? __pfx_netlink_sendmsg+0x10/0x10 [ 329.645831][T10312] ____sys_sendmsg+0xaaf/0xc90 [ 329.645858][T10312] ? copy_msghdr_from_user+0x10b/0x160 [ 329.645889][T10312] ? __pfx_____sys_sendmsg+0x10/0x10 [ 329.645930][T10312] ___sys_sendmsg+0x135/0x1e0 [ 329.645964][T10312] ? __pfx____sys_sendmsg+0x10/0x10 [ 329.646009][T10312] ? __pfx_lock_release+0x10/0x10 [ 329.646038][T10312] ? trace_lock_acquire+0x14e/0x1f0 [ 329.646075][T10312] ? __fget_files+0x206/0x3a0 [ 329.646115][T10312] __sys_sendmsg+0x16e/0x220 [ 329.646147][T10312] ? __pfx___sys_sendmsg+0x10/0x10 [ 329.646200][T10312] do_syscall_64+0xcd/0x250 [ 329.646232][T10312] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.646263][T10312] RIP: 0033:0x7f710958d169 [ 329.646282][T10312] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 329.646303][T10312] RSP: 002b:00007f710a448038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 329.646326][T10312] RAX: ffffffffffffffda RBX: 00007f71097a5fa0 RCX: 00007f710958d169 [ 329.646342][T10312] RDX: 0000000020000000 RSI: 0000400000000040 RDI: 0000000000000003 [ 329.646356][T10312] RBP: 00007f710a448090 R08: 0000000000000000 R09: 0000000000000000 [ 329.646371][T10312] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.646384][T10312] R13: 0000000000000000 R14: 00007f71097a5fa0 R15: 00007ffe975e1d48 [ 329.646415][T10312] [ 332.375787][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 332.384374][ T0] NOHZ tick-stop error: local softirq work is pending, handler #210!!! [ 344.443894][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 346.556489][T10530] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1332'. [ 347.124115][T10548] FAULT_INJECTION: forcing a failure. [ 347.124115][T10548] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 347.155482][T10548] CPU: 0 UID: 0 PID: 10548 Comm: syz.5.1340 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 347.155521][T10548] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 347.155535][T10548] Call Trace: [ 347.155542][T10548] [ 347.155551][T10548] dump_stack_lvl+0x16c/0x1f0 [ 347.155587][T10548] should_fail_ex+0x50a/0x650 [ 347.155623][T10548] _copy_to_user+0x32/0xd0 [ 347.155651][T10548] tomoyo_flush+0x168/0x500 [ 347.155689][T10548] tomoyo_set_string+0xaf/0xe0 [ 347.155721][T10548] tomoyo_read_exception+0x313/0xc30 [ 347.155764][T10548] tomoyo_read_control+0x2a0/0x550 [ 347.155802][T10548] ? __pfx_tomoyo_read+0x10/0x10 [ 347.155834][T10548] vfs_read+0x1df/0xbf0 [ 347.155866][T10548] ? __fget_files+0x1fc/0x3a0 [ 347.155896][T10548] ? __pfx___mutex_lock+0x10/0x10 [ 347.155925][T10548] ? __pfx_vfs_read+0x10/0x10 [ 347.155963][T10548] ? __fget_files+0x206/0x3a0 [ 347.155998][T10548] ksys_read+0x12b/0x250 [ 347.156022][T10548] ? __pfx_ksys_read+0x10/0x10 [ 347.156054][T10548] do_syscall_64+0xcd/0x250 [ 347.156081][T10548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.156107][T10548] RIP: 0033:0x7f4834f8d169 [ 347.156122][T10548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.156140][T10548] RSP: 002b:00007f4835d67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 347.156159][T10548] RAX: ffffffffffffffda RBX: 00007f48351a5fa0 RCX: 00007f4834f8d169 [ 347.156171][T10548] RDX: 000000000000b4d3 RSI: 0000000000000000 RDI: 0000000000000003 [ 347.156182][T10548] RBP: 00007f4835d67090 R08: 0000000000000000 R09: 0000000000000000 [ 347.156192][T10548] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.156204][T10548] R13: 0000000000000000 R14: 00007f48351a5fa0 R15: 00007ffd07cf0248 [ 347.156229][T10548] [ 348.636879][T10571] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1345'. [ 349.300914][T10588] snd_virmidi snd_virmidi.0: control 3:6:1068:IAJ:127 is already present [ 355.253437][T10686] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 355.274953][T10686] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 359.270120][T10762] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1404'. [ 361.721432][T10792] usb usb38: Requested nonsensical USBDEVFS_URB_SHORT_NOT_OK. [ 361.732342][T10792] vhci_hcd: default hub control req: 0000 v0000 i0000 l0 [ 369.560696][T10918] FAULT_INJECTION: forcing a failure. [ 369.560696][T10918] name failslab, interval 1, probability 0, space 0, times 0 [ 369.620878][T10918] CPU: 0 UID: 0 PID: 10918 Comm: syz.4.1446 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 369.620912][T10918] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 369.620927][T10918] Call Trace: [ 369.620936][T10918] [ 369.620946][T10918] dump_stack_lvl+0x16c/0x1f0 [ 369.620984][T10918] should_fail_ex+0x50a/0x650 [ 369.621019][T10918] ? fs_reclaim_acquire+0xae/0x150 [ 369.621053][T10918] ? tomoyo_realpath_from_path+0xb9/0x720 [ 369.621087][T10918] should_failslab+0xc2/0x120 [ 369.621113][T10918] __kmalloc_noprof+0xcb/0x510 [ 369.621147][T10918] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 369.621188][T10918] tomoyo_realpath_from_path+0xb9/0x720 [ 369.621219][T10918] ? tomoyo_path_perm+0x262/0x460 [ 369.621249][T10918] ? tomoyo_path_perm+0x262/0x460 [ 369.621280][T10918] tomoyo_path_perm+0x276/0x460 [ 369.621306][T10918] ? tomoyo_path_perm+0x262/0x460 [ 369.621338][T10918] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 369.621407][T10918] ? __pfx_ima_file_check+0x10/0x10 [ 369.621452][T10918] security_file_truncate+0x84/0x1e0 [ 369.621484][T10918] path_openat+0xc8c/0x2d80 [ 369.621532][T10918] ? __pfx_path_openat+0x10/0x10 [ 369.621565][T10918] ? __pfx___lock_acquire+0x10/0x10 [ 369.621595][T10918] ? lock_acquire.part.0+0x11b/0x380 [ 369.621626][T10918] ? find_held_lock+0x2d/0x110 [ 369.621657][T10918] do_filp_open+0x20c/0x470 [ 369.621691][T10918] ? __pfx_do_filp_open+0x10/0x10 [ 369.621722][T10918] ? find_held_lock+0x2d/0x110 [ 369.621771][T10918] ? __pfx_kfree_link+0x10/0x10 [ 369.621812][T10918] ? alloc_fd+0x41f/0x760 [ 369.621857][T10918] do_sys_openat2+0x17a/0x1e0 [ 369.621885][T10918] ? __pfx_do_sys_openat2+0x10/0x10 [ 369.621926][T10918] __x64_sys_openat+0x175/0x210 [ 369.621952][T10918] ? __pfx___x64_sys_openat+0x10/0x10 [ 369.621994][T10918] do_syscall_64+0xcd/0x250 [ 369.622029][T10918] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.622061][T10918] RIP: 0033:0x7f710958d169 [ 369.622082][T10918] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.622122][T10918] RSP: 002b:00007f710a448038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 369.622147][T10918] RAX: ffffffffffffffda RBX: 00007f71097a5fa0 RCX: 00007f710958d169 [ 369.622165][T10918] RDX: 0000000000080a42 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 369.622181][T10918] RBP: 00007f710960e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 369.622197][T10918] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 369.622212][T10918] R13: 0000000000000000 R14: 00007f71097a5fa0 R15: 00007ffe975e1d48 [ 369.622247][T10918] [ 369.623079][T10918] ERROR: Out of memory at tomoyo_realpath_from_path. [ 370.285931][T10936] FAULT_INJECTION: forcing a failure. [ 370.285931][T10936] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 370.309526][T10936] CPU: 0 UID: 0 PID: 10936 Comm: syz.4.1451 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 370.309560][T10936] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 370.309574][T10936] Call Trace: [ 370.309583][T10936] [ 370.309593][T10936] dump_stack_lvl+0x16c/0x1f0 [ 370.309629][T10936] should_fail_ex+0x50a/0x650 [ 370.309667][T10936] _copy_from_iter+0x2a1/0x1560 [ 370.309694][T10936] ? trace_lock_acquire+0x14e/0x1f0 [ 370.309728][T10936] ? __alloc_skb+0x1fe/0x380 [ 370.309759][T10936] ? __pfx__copy_from_iter+0x10/0x10 [ 370.309782][T10936] ? __virt_addr_valid+0x1a4/0x590 [ 370.309810][T10936] ? __virt_addr_valid+0x5e/0x590 [ 370.309833][T10936] ? __phys_addr_symbol+0x30/0x80 [ 370.309855][T10936] ? __check_object_size+0x488/0x710 [ 370.309884][T10936] netlink_sendmsg+0x813/0xd70 [ 370.309922][T10936] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.309965][T10936] ____sys_sendmsg+0xaaf/0xc90 [ 370.309992][T10936] ? copy_msghdr_from_user+0x10b/0x160 [ 370.310024][T10936] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.310065][T10936] ___sys_sendmsg+0x135/0x1e0 [ 370.310097][T10936] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.310137][T10936] ? __pfx_lock_release+0x10/0x10 [ 370.310164][T10936] ? trace_lock_acquire+0x14e/0x1f0 [ 370.310198][T10936] ? __fget_files+0x206/0x3a0 [ 370.310236][T10936] __sys_sendmsg+0x16e/0x220 [ 370.310269][T10936] ? __pfx___sys_sendmsg+0x10/0x10 [ 370.310321][T10936] do_syscall_64+0xcd/0x250 [ 370.310353][T10936] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.310384][T10936] RIP: 0033:0x7f710958d169 [ 370.310402][T10936] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.310424][T10936] RSP: 002b:00007f710a448038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.310447][T10936] RAX: ffffffffffffffda RBX: 00007f71097a5fa0 RCX: 00007f710958d169 [ 370.310463][T10936] RDX: 0000000004004040 RSI: 0000400000000280 RDI: 0000000000000003 [ 370.310477][T10936] RBP: 00007f710a448090 R08: 0000000000000000 R09: 0000000000000000 [ 370.310491][T10936] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 370.310505][T10936] R13: 0000000000000000 R14: 00007f71097a5fa0 R15: 00007ffe975e1d48 [ 370.310535][T10936] [ 371.037757][T10940] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807fe0bc00 pfn:0x7fe08 [ 371.068262][T10940] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 371.113286][T10940] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 371.174314][T10940] raw: ffff88807fe0bc00 0000000000000000 00000001ffffffff 0000000000000000 [ 371.197911][T10940] page dumped because: unmovable page [ 371.218300][T10940] page_owner tracks the page as allocated [ 371.236014][T10940] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), pid 9264, tgid 9263 (syz.2.1052), ts 270199814197, free_ts 269594419786 [ 371.273892][T10940] post_alloc_hook+0x181/0x1b0 [ 371.283471][T10940] get_page_from_freelist+0xfce/0x2f80 [ 371.294886][T10940] __alloc_frozen_pages_noprof+0x221/0x2470 [ 371.308062][T10940] alloc_pages_mpol+0x1fc/0x540 [ 371.320422][T10940] alloc_pages_noprof+0x131/0x390 [ 371.330269][T10940] __vmalloc_node_range_noprof+0x721/0x1530 [ 371.343345][T10940] vmalloc_noprof+0x6b/0x90 [ 371.371502][T10940] __snd_dma_alloc_pages+0x50/0x90 [ 371.404982][T10940] snd_dma_alloc_dir_pages+0x151/0x240 [ 371.424224][T10940] do_alloc_pages+0x115/0x270 [ 371.438062][T10940] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 371.451769][T10940] snd_pcm_hw_params+0x15e6/0x1b20 [ 371.466157][T10940] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 371.485327][T10940] snd_pcm_oss_change_params_locked+0x1406/0x3a60 [ 371.502338][T10940] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 371.515301][T10940] snd_pcm_oss_write+0x4a3/0xa00 [ 371.530586][T10940] page last free pid 5840 tgid 5840 stack trace: [ 371.537309][T10940] free_frozen_pages+0x6db/0xfb0 [ 371.542327][T10940] __put_partials+0x14c/0x170 [ 371.547229][T10940] qlist_free_all+0x4e/0x120 [ 371.552134][T10940] kasan_quarantine_reduce+0x195/0x1e0 [ 371.558431][T10940] __kasan_slab_alloc+0x69/0x90 [ 371.563365][T10940] kmem_cache_alloc_noprof+0x226/0x3d0 [ 371.569422][T10940] vm_area_dup+0x21/0x2f0 [ 371.583015][T10940] copy_process+0x776f/0x8c50 [ 371.588083][T10940] kernel_clone+0xfd/0x960 [ 371.592766][T10940] __do_sys_clone+0xcf/0x120 [ 371.597682][T10940] do_syscall_64+0xcd/0x250 [ 371.602284][T10940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.190893][T10984] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88807fe0bc00 pfn:0x7fe08 [ 373.211083][T10984] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 373.255810][T10984] raw: 00fff00000000000 0000000000000000 dead000000000122 0000000000000000 [ 373.265851][T10984] raw: ffff88807fe0bc00 0000000000000000 00000001ffffffff 0000000000000000 [ 373.274573][T10984] page dumped because: unmovable page [ 373.283653][T10984] page_owner tracks the page as allocated [ 373.289863][T10984] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2cc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_NOWARN), pid 9264, tgid 9263 (syz.2.1052), ts 270199814197, free_ts 269594419786 [ 373.309026][T10984] post_alloc_hook+0x181/0x1b0 [ 373.314156][T10984] get_page_from_freelist+0xfce/0x2f80 [ 373.321587][T10984] __alloc_frozen_pages_noprof+0x221/0x2470 [ 373.327874][T10984] alloc_pages_mpol+0x1fc/0x540 [ 373.332778][T10984] alloc_pages_noprof+0x131/0x390 [ 373.338194][T10984] __vmalloc_node_range_noprof+0x721/0x1530 [ 373.344194][T10984] vmalloc_noprof+0x6b/0x90 [ 373.349074][T10984] __snd_dma_alloc_pages+0x50/0x90 [ 373.356204][T10984] snd_dma_alloc_dir_pages+0x151/0x240 [ 373.361763][T10984] do_alloc_pages+0x115/0x270 [ 373.366833][T10984] snd_pcm_lib_malloc_pages+0x3df/0x980 [ 373.372464][T10984] snd_pcm_hw_params+0x15e6/0x1b20 [ 373.377918][T10984] snd_pcm_kernel_ioctl+0x147/0x2e0 [ 373.383221][T10984] snd_pcm_oss_change_params_locked+0x1406/0x3a60 [ 373.390149][T10984] snd_pcm_oss_make_ready_locked+0xb7/0x130 [ 373.396354][T10984] snd_pcm_oss_write+0x4a3/0xa00 [ 373.401349][T10984] page last free pid 5840 tgid 5840 stack trace: [ 373.408233][T10984] free_frozen_pages+0x6db/0xfb0 [ 373.413255][T10984] __put_partials+0x14c/0x170 [ 373.418507][T10984] qlist_free_all+0x4e/0x120 [ 373.423666][T10984] kasan_quarantine_reduce+0x195/0x1e0 [ 373.429706][T10984] __kasan_slab_alloc+0x69/0x90 [ 373.434634][T10984] kmem_cache_alloc_noprof+0x226/0x3d0 [ 373.440686][T10984] vm_area_dup+0x21/0x2f0 [ 373.445099][T10984] copy_process+0x776f/0x8c50 [ 373.450358][T10984] kernel_clone+0xfd/0x960 [ 373.465679][T10984] __do_sys_clone+0xcf/0x120 [ 373.470400][T10984] do_syscall_64+0xcd/0x250 [ 373.474973][T10984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.321835][T11021] FAULT_INJECTION: forcing a failure. [ 375.321835][T11021] name failslab, interval 1, probability 0, space 0, times 0 [ 375.340147][T11021] CPU: 0 UID: 0 PID: 11021 Comm: syz.5.1474 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 375.340184][T11021] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 375.340199][T11021] Call Trace: [ 375.340207][T11021] [ 375.340217][T11021] dump_stack_lvl+0x16c/0x1f0 [ 375.340255][T11021] should_fail_ex+0x50a/0x650 [ 375.340290][T11021] ? fs_reclaim_acquire+0xae/0x150 [ 375.340324][T11021] should_failslab+0xc2/0x120 [ 375.340348][T11021] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 375.340385][T11021] ? seq_open+0x55/0x170 [ 375.340413][T11021] ? proc_id_map_open+0x23a/0x700 [ 375.340444][T11021] seq_open+0x55/0x170 [ 375.340471][T11021] proc_id_map_open+0x2a8/0x700 [ 375.340504][T11021] do_dentry_open+0x735/0x1c40 [ 375.340538][T11021] ? __pfx_proc_gid_map_open+0x10/0x10 [ 375.340567][T11021] ? inode_permission+0xdd/0x5f0 [ 375.340593][T11021] vfs_open+0x82/0x3f0 [ 375.340613][T11021] ? may_open+0x1f2/0x400 [ 375.340640][T11021] path_openat+0x1e88/0x2d80 [ 375.340683][T11021] ? __pfx_path_openat+0x10/0x10 [ 375.340711][T11021] ? __pfx___lock_acquire+0x10/0x10 [ 375.340736][T11021] ? lock_acquire.part.0+0x11b/0x380 [ 375.340761][T11021] ? find_held_lock+0x2d/0x110 [ 375.340784][T11021] do_filp_open+0x20c/0x470 [ 375.340810][T11021] ? __pfx_do_filp_open+0x10/0x10 [ 375.340835][T11021] ? find_held_lock+0x2d/0x110 [ 375.340862][T11021] ? __pfx_kfree_link+0x10/0x10 [ 375.340891][T11021] ? alloc_fd+0x41f/0x760 [ 375.340924][T11021] do_sys_openat2+0x17a/0x1e0 [ 375.340943][T11021] ? __pfx_do_sys_openat2+0x10/0x10 [ 375.340973][T11021] __x64_sys_openat+0x175/0x210 [ 375.340994][T11021] ? __pfx___x64_sys_openat+0x10/0x10 [ 375.341024][T11021] do_syscall_64+0xcd/0x250 [ 375.341061][T11021] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.341090][T11021] RIP: 0033:0x7f4834f8d169 [ 375.341107][T11021] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.341125][T11021] RSP: 002b:00007f4835d67038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 375.341144][T11021] RAX: ffffffffffffffda RBX: 00007f48351a5fa0 RCX: 00007f4834f8d169 [ 375.341157][T11021] RDX: 0000000000080a42 RSI: 0000400000000040 RDI: ffffffffffffff9c [ 375.341169][T11021] RBP: 00007f483500e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 375.341180][T11021] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.341192][T11021] R13: 0000000000000000 R14: 00007f48351a5fa0 R15: 00007ffd07cf0248 [ 375.341217][T11021] [ 377.136786][T11055] can: request_module (can-proto-4) failed. [ 379.075150][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.081566][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.256099][T11112] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1498'. [ 380.412140][T11119] FAULT_INJECTION: forcing a failure. [ 380.412140][T11119] name failslab, interval 1, probability 0, space 0, times 0 [ 380.425525][T11119] CPU: 0 UID: 0 PID: 11119 Comm: syz.3.1507 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 380.425556][T11119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 380.425569][T11119] Call Trace: [ 380.425576][T11119] [ 380.425585][T11119] dump_stack_lvl+0x16c/0x1f0 [ 380.425620][T11119] should_fail_ex+0x50a/0x650 [ 380.425665][T11119] ? fs_reclaim_acquire+0xae/0x150 [ 380.425695][T11119] should_failslab+0xc2/0x120 [ 380.425718][T11119] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 380.425752][T11119] ? getname_flags.part.0+0x4c/0x550 [ 380.425779][T11119] ? vfs_write+0x306/0x1150 [ 380.425809][T11119] getname_flags.part.0+0x4c/0x550 [ 380.425836][T11119] getname+0x8d/0xe0 [ 380.425862][T11119] do_sys_openat2+0x104/0x1e0 [ 380.425885][T11119] ? __pfx_do_sys_openat2+0x10/0x10 [ 380.425911][T11119] ? __fget_files+0x206/0x3a0 [ 380.425947][T11119] __x64_sys_openat+0x175/0x210 [ 380.425972][T11119] ? __pfx___x64_sys_openat+0x10/0x10 [ 380.425995][T11119] ? ksys_write+0x1ba/0x250 [ 380.426035][T11119] do_syscall_64+0xcd/0x250 [ 380.426068][T11119] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 380.426098][T11119] RIP: 0033:0x7f5cf258d169 [ 380.426118][T11119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 380.426139][T11119] RSP: 002b:00007f5cf333a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 380.426161][T11119] RAX: ffffffffffffffda RBX: 00007f5cf27a5fa0 RCX: 00007f5cf258d169 [ 380.426177][T11119] RDX: 0000000000000000 RSI: 0000400000000000 RDI: ffffffffffffff9c [ 380.426191][T11119] RBP: 00007f5cf333a090 R08: 0000000000000000 R09: 0000000000000000 [ 380.426205][T11119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 380.426218][T11119] R13: 0000000000000001 R14: 00007f5cf27a5fa0 R15: 00007ffea923e5c8 [ 380.426249][T11119] [ 389.870529][T11244] netlink: 338 bytes leftover after parsing attributes in process `syz.4.1533'. [ 392.583717][T11285] FAULT_INJECTION: forcing a failure. [ 392.583717][T11285] name failslab, interval 1, probability 0, space 0, times 0 [ 392.629330][T11285] CPU: 1 UID: 0 PID: 11285 Comm: syz.5.1544 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 392.629364][T11285] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 392.629378][T11285] Call Trace: [ 392.629385][T11285] [ 392.629395][T11285] dump_stack_lvl+0x16c/0x1f0 [ 392.629430][T11285] should_fail_ex+0x50a/0x650 [ 392.629469][T11285] should_failslab+0xc2/0x120 [ 392.629492][T11285] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 392.629527][T11285] ? skb_clone+0x190/0x3f0 [ 392.629566][T11285] skb_clone+0x190/0x3f0 [ 392.629600][T11285] netlink_deliver_tap+0xabd/0xd30 [ 392.629638][T11285] netlink_unicast+0x5e1/0x7f0 [ 392.629674][T11285] ? __pfx_netlink_unicast+0x10/0x10 [ 392.629715][T11285] ? __phys_addr_symbol+0x30/0x80 [ 392.629739][T11285] ? __check_object_size+0x488/0x710 [ 392.629767][T11285] netlink_sendmsg+0x8b8/0xd70 [ 392.629804][T11285] ? __pfx_netlink_sendmsg+0x10/0x10 [ 392.629848][T11285] ____sys_sendmsg+0xaaf/0xc90 [ 392.629875][T11285] ? copy_msghdr_from_user+0x10b/0x160 [ 392.629908][T11285] ? __pfx_____sys_sendmsg+0x10/0x10 [ 392.629948][T11285] ___sys_sendmsg+0x135/0x1e0 [ 392.629983][T11285] ? __pfx____sys_sendmsg+0x10/0x10 [ 392.630030][T11285] ? __pfx_lock_release+0x10/0x10 [ 392.630059][T11285] ? trace_lock_acquire+0x14e/0x1f0 [ 392.630095][T11285] ? __fget_files+0x206/0x3a0 [ 392.630135][T11285] __sys_sendmsg+0x16e/0x220 [ 392.630168][T11285] ? __pfx___sys_sendmsg+0x10/0x10 [ 392.630223][T11285] do_syscall_64+0xcd/0x250 [ 392.630255][T11285] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 392.630286][T11285] RIP: 0033:0x7f4834f8d169 [ 392.630305][T11285] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 392.630327][T11285] RSP: 002b:00007f4835d67038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 392.630350][T11285] RAX: ffffffffffffffda RBX: 00007f48351a5fa0 RCX: 00007f4834f8d169 [ 392.630365][T11285] RDX: 0000000000000844 RSI: 0000400000000200 RDI: 0000000000000003 [ 392.630380][T11285] RBP: 00007f4835d67090 R08: 0000000000000000 R09: 0000000000000000 [ 392.630394][T11285] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 392.630408][T11285] R13: 0000000000000000 R14: 00007f48351a5fa0 R15: 00007ffd07cf0248 [ 392.630440][T11285] [ 393.745482][T11291] synth uevent: /bus/usb/drivers/smsusb: unknown uevent action string [ 394.444187][ T31] INFO: task syz.1.915:8783 blocked for more than 143 seconds. [ 394.485380][ T31] Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 394.493246][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 394.590743][ T31] task:syz.1.915 state:D stack:27264 pid:8783 tgid:8777 ppid:5830 task_flags:0x400140 flags:0x00000004 [ 394.686784][ T31] Call Trace: [ 394.712419][ T31] [ 394.730560][ T31] __schedule+0xf43/0x5890 [ 394.756670][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 394.798870][ T31] ? __pfx___lock_acquire+0x10/0x10 [ 394.825741][ T31] ? __pfx___schedule+0x10/0x10 [ 394.845934][ T31] ? schedule+0x298/0x350 [ 394.870407][ T31] ? __pfx_lock_release+0x10/0x10 [ 394.901596][ T31] ? __mutex_trylock_common+0x78/0x250 [ 394.927725][ T31] ? lock_acquire+0x2f/0xb0 [ 394.942645][ T31] ? schedule+0x1fd/0x350 [ 394.954536][ T31] schedule+0xe7/0x350 [ 394.966265][ T31] schedule_preempt_disabled+0x13/0x30 [ 394.974251][ T31] __mutex_lock+0x6bd/0xb10 [ 394.987899][ T31] ? nfsd_nl_threads_set_doit+0x694/0xbe0 [ 395.018320][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 395.030201][ T31] ? __pfx_lock_release+0x10/0x10 [ 395.049371][ T31] ? nfsd_nl_threads_set_doit+0x694/0xbe0 [ 395.076513][ T31] nfsd_nl_threads_set_doit+0x694/0xbe0 [ 395.093569][ T31] genl_family_rcv_msg_doit+0x202/0x2f0 [ 395.105046][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 395.120908][ T31] ? trace_cap_capable+0x1a2/0x210 [ 395.142554][ T31] ? bpf_lsm_capable+0x9/0x10 [ 395.158667][ T31] ? security_capable+0x7e/0x260 [ 395.168335][ T31] genl_rcv_msg+0x565/0x800 [ 395.175561][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.191368][ T31] ? __pfx_nfsd_nl_threads_set_doit+0x10/0x10 [ 395.201219][ T31] netlink_rcv_skb+0x16b/0x440 [ 395.209683][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 395.218044][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 395.226880][ T31] ? down_read+0xc9/0x330 [ 395.233658][ T31] ? __pfx_down_read+0x10/0x10 [ 395.244475][ T31] ? netlink_deliver_tap+0x1ae/0xd30 [ 395.252509][ T31] genl_rcv+0x28/0x40 [ 395.260081][ T31] netlink_unicast+0x53c/0x7f0 [ 395.268147][ T31] ? __pfx_netlink_unicast+0x10/0x10 [ 395.277175][ T31] ? __phys_addr_symbol+0x30/0x80 [ 395.284629][ T31] ? __check_object_size+0x488/0x710 [ 395.293520][ T31] netlink_sendmsg+0x8b8/0xd70 [ 395.301955][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 395.307607][ T31] ____sys_sendmsg+0xaaf/0xc90 [ 395.312778][ T31] ? copy_msghdr_from_user+0x10b/0x160 [ 395.318432][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 395.324115][ T31] ___sys_sendmsg+0x135/0x1e0 [ 395.329131][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 395.334572][ T31] ? __pfx_lock_release+0x10/0x10 [ 395.340433][ T31] ? trace_lock_acquire+0x14e/0x1f0 [ 395.346088][ T31] ? __fget_files+0x206/0x3a0 [ 395.350929][ T31] __sys_sendmsg+0x16e/0x220 [ 395.365335][ T31] ? __pfx___sys_sendmsg+0x10/0x10 [ 395.371554][ T31] ? __x64_sys_futex+0x1e1/0x4c0 [ 395.380054][ T31] do_syscall_64+0xcd/0x250 [ 395.387198][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.397252][ T31] RIP: 0033:0x7fddfd58d169 [ 395.404077][ T31] RSP: 002b:00007fddfe38c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 395.418682][ T31] RAX: ffffffffffffffda RBX: 00007fddfd7a6080 RCX: 00007fddfd58d169 [ 395.427065][ T31] RDX: 000000000404c014 RSI: 00004000000000c0 RDI: 0000000000000003 [ 395.435529][ T31] RBP: 00007fddfd60e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 395.444551][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.453331][ T31] R13: 0000000000000000 R14: 00007fddfd7a6080 R15: 00007fff8041ac08 [ 395.463728][ T31] [ 395.467311][ T31] [ 395.467311][ T31] Showing all locks held in the system: [ 395.505385][ T31] 1 lock held by khungtaskd/31: [ 395.517286][ T31] #0: ffffffff8e1bd0c0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x7f/0x390 [ 395.538807][ T31] 5 locks held by kworker/u8:5/190: [ 395.545908][ T31] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 395.556830][ T31] #1: ffffc90002f67d18 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 395.575604][ T31] #2: ffffffff8fee3f10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xca/0xb30 [ 395.590125][ T31] #3: ffffffff8fef9c28 (rtnl_mutex){+.+.}-{4:4}, at: cleanup_net+0x512/0xb30 [ 395.599704][ T31] #4: ffffffff8e1c8538 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x282/0x3b0 [ 395.610438][ T31] 2 locks held by getty/7409: [ 395.615554][ T31] #0: ffff888035f920a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x24/0x80 [ 395.665657][ T31] #1: ffffc900049022f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0xfba/0x1480 [ 395.681115][ T31] 2 locks held by syz.1.915/8778: [ 395.686509][ T31] #0: ffffffff8ff9a9b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.694788][ T31] #1: ffffffff8e5c0448 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x694/0xbe0 [ 395.705430][ T31] 2 locks held by syz.1.915/8783: [ 395.710499][ T31] #0: ffffffff8ff9a9b0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 395.725206][ T31] #1: ffffffff8e5c0448 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_set_doit+0x694/0xbe0 [ 395.735805][ T31] 3 locks held by syz.0.1532/11215: [ 395.741046][ T31] 3 locks held by syz.0.1532/11216: [ 395.755612][ T31] [ 395.757996][ T31] ============================================= [ 395.757996][ T31] [ 395.775338][ T31] NMI backtrace for cpu 1 [ 395.775357][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 395.775384][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 395.775397][ T31] Call Trace: [ 395.775403][ T31] [ 395.775412][ T31] dump_stack_lvl+0x116/0x1f0 [ 395.775454][ T31] nmi_cpu_backtrace+0x27b/0x390 [ 395.775480][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 395.775511][ T31] nmi_trigger_cpumask_backtrace+0x29c/0x300 [ 395.775538][ T31] watchdog+0xf62/0x12b0 [ 395.775575][ T31] ? __pfx_watchdog+0x10/0x10 [ 395.775604][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 395.775634][ T31] ? __kthread_parkme+0x148/0x220 [ 395.775657][ T31] ? __pfx_watchdog+0x10/0x10 [ 395.775689][ T31] kthread+0x3af/0x750 [ 395.775716][ T31] ? __pfx_kthread+0x10/0x10 [ 395.775747][ T31] ? __pfx_kthread+0x10/0x10 [ 395.775780][ T31] ret_from_fork+0x45/0x80 [ 395.775807][ T31] ? __pfx_kthread+0x10/0x10 [ 395.775833][ T31] ret_from_fork_asm+0x1a/0x30 [ 395.775872][ T31] [ 395.775880][ T31] Sending NMI from CPU 1 to CPUs 0: [ 395.892899][ C0] NMI backtrace for cpu 0 [ 395.892915][ C0] CPU: 0 UID: 0 PID: 11215 Comm: syz.0.1532 Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 395.892943][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 395.892957][ C0] RIP: 0010:lock_is_held_type+0x9f/0x150 [ 395.892993][ C0] Code: 74 41 8b 84 24 e8 0a 00 00 85 c0 7f 17 e9 92 00 00 00 41 83 c7 01 45 3b bc 24 e8 0a 00 00 0f 8d 80 00 00 00 49 63 c7 48 89 ee <48> 8d 04 80 49 8d 5c c5 00 48 89 df e8 80 fe ff ff 85 c0 74 d3 41 [ 395.893014][ C0] RSP: 0018:ffffc9000bc36598 EFLAGS: 00000006 [ 395.893032][ C0] RAX: 0000000000000000 RBX: ffff888030e21e80 RCX: 0000000000000001 [ 395.893047][ C0] RDX: 0000000000000000 RSI: ffff8880b863ed58 RDI: ffffffff8bd35820 [ 395.893061][ C0] RBP: ffff8880b863ed58 R08: ffff88802eb50120 R09: 0000000000000000 [ 395.893076][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffff888030e21e00 [ 395.893090][ C0] R13: ffff888030e228f0 R14: 00000000ffffffff R15: 0000000000000000 [ 395.893105][ C0] FS: 00007f5c825b46c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 395.893127][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 395.893142][ C0] CR2: 0000001b3068dff8 CR3: 0000000028cf0000 CR4: 00000000003526f0 [ 395.893157][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 395.893170][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 395.893184][ C0] Call Trace: [ 395.893191][ C0] [ 395.893199][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 395.893225][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 395.893255][ C0] ? nmi_handle+0x1ac/0x5d0 [ 395.893287][ C0] ? lock_is_held_type+0x9f/0x150 [ 395.893316][ C0] ? default_do_nmi+0x6a/0x160 [ 395.893337][ C0] ? exc_nmi+0x170/0x1e0 [ 395.893358][ C0] ? end_repeat_nmi+0xf/0x53 [ 395.893394][ C0] ? lock_is_held_type+0x9f/0x150 [ 395.893423][ C0] ? lock_is_held_type+0x9f/0x150 [ 395.893452][ C0] ? lock_is_held_type+0x9f/0x150 [ 395.893480][ C0] [ 395.893487][ C0] [ 395.893496][ C0] update_curr_se+0x8b/0x220 [ 395.893531][ C0] update_curr+0x75/0x800 [ 395.893556][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 395.893590][ C0] put_prev_entity+0x123/0x260 [ 395.893629][ C0] pick_next_task_fair+0x8f7/0x1280 [ 395.893662][ C0] __pick_next_task+0xf1/0x6c0 [ 395.893692][ C0] ? preempt_schedule_notrace+0x62/0xe0 [ 395.893721][ C0] __schedule+0x4cc/0x5890 [ 395.893748][ C0] ? hlock_class+0x4e/0x130 [ 395.893771][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 395.893803][ C0] ? __pfx___schedule+0x10/0x10 [ 395.893827][ C0] ? mark_held_locks+0x9f/0xe0 [ 395.893858][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 395.893889][ C0] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 395.893921][ C0] preempt_schedule_notrace+0x62/0xe0 [ 395.893949][ C0] preempt_schedule_notrace_thunk+0x1a/0x30 [ 395.893981][ C0] local_clock+0x23/0x30 [ 395.894013][ C0] __set_page_owner+0x7f/0x560 [ 395.894045][ C0] ? mark_held_locks+0x9f/0xe0 [ 395.894075][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 395.894106][ C0] ? bad_range+0x23d/0x490 [ 395.894132][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 395.894160][ C0] ? get_page_from_freelist+0xfae/0x2f80 [ 395.894195][ C0] post_alloc_hook+0x181/0x1b0 [ 395.894227][ C0] get_page_from_freelist+0xfce/0x2f80 [ 395.894265][ C0] ? __pfx___might_resched+0x10/0x10 [ 395.894301][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 395.894334][ C0] ? should_fail_alloc_page+0xee/0x130 [ 395.894356][ C0] ? prepare_alloc_pages.constprop.0+0x16f/0x560 [ 395.894389][ C0] __alloc_frozen_pages_noprof+0x221/0x2470 [ 395.894425][ C0] ? __pfx_mark_lock+0x10/0x10 [ 395.894454][ C0] ? lock_acquire.part.0+0x11b/0x380 [ 395.894486][ C0] ? hlock_class+0x4e/0x130 [ 395.894509][ C0] ? __lock_acquire+0x15a9/0x3c40 [ 395.894539][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 395.894575][ C0] ? mark_lock+0xb5/0xc60 [ 395.894614][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 395.894649][ C0] ? policy_nodemask+0xea/0x4e0 [ 395.894671][ C0] alloc_pages_mpol+0x1fc/0x540 [ 395.894692][ C0] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 395.894714][ C0] ? find_held_lock+0x2d/0x110 [ 395.894740][ C0] folio_alloc_mpol_noprof+0x36/0x2f0 [ 395.894766][ C0] shmem_alloc_folio+0x135/0x160 [ 395.894801][ C0] shmem_alloc_and_add_folio+0x48e/0xc10 [ 395.894828][ C0] ? shmem_huge_global_enabled+0x72/0x6b0 [ 395.894853][ C0] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 395.894879][ C0] ? shmem_allowable_huge_orders+0xd0/0x410 [ 395.894909][ C0] shmem_get_folio_gfp+0x689/0x1530 [ 395.894937][ C0] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 395.894963][ C0] ? find_held_lock+0x2d/0x110 [ 395.894988][ C0] shmem_write_begin+0x161/0x300 [ 395.895015][ C0] ? __pfx_shmem_write_begin+0x10/0x10 [ 395.895040][ C0] ? timestamp_truncate+0x21f/0x2e0 [ 395.895075][ C0] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 395.895114][ C0] generic_perform_write+0x2ba/0x920 [ 395.895143][ C0] ? __pfx_generic_perform_write+0x10/0x10 [ 395.895170][ C0] ? inode_needs_update_time.part.0+0x191/0x270 [ 395.895204][ C0] shmem_file_write_iter+0x10e/0x140 [ 395.895231][ C0] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 395.895257][ C0] __kernel_write_iter+0x318/0xa90 [ 395.895285][ C0] ? __pfx___kernel_write_iter+0x10/0x10 [ 395.895311][ C0] ? get_dump_page+0x15b/0x230 [ 395.895341][ C0] ? __pfx___might_resched+0x10/0x10 [ 395.895372][ C0] dump_user_range+0x389/0x8c0 [ 395.895398][ C0] ? __pfx_dump_user_range+0x10/0x10 [ 395.895422][ C0] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 395.895452][ C0] ? __pfx_writenote+0x10/0x10 [ 395.895479][ C0] elf_core_dump+0x287c/0x3a50 [ 395.895509][ C0] ? __pfx_elf_core_dump+0x10/0x10 [ 395.895533][ C0] ? kasan_save_stack+0x33/0x60 [ 395.895559][ C0] ? kasan_save_track+0x14/0x30 [ 395.895585][ C0] ? __kasan_kmalloc+0xaa/0xb0 [ 395.895616][ C0] ? __kmalloc_node_noprof+0x21f/0x510 [ 395.895645][ C0] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 395.895671][ C0] ? get_signal+0x230b/0x26c0 [ 395.895699][ C0] ? arch_do_signal_or_restart+0x90/0x7e0 [ 395.895721][ C0] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 395.895749][ C0] ? 0xffffffffff600000 [ 395.895776][ C0] ? rcu_is_watching+0x12/0xc0 [ 395.895796][ C0] ? trace_lock_acquire+0x14e/0x1f0 [ 395.895818][ C0] ? get_signal+0x230b/0x26c0 [ 395.895848][ C0] ? do_coredump+0x3166/0x4410 [ 395.895869][ C0] do_coredump+0x3166/0x4410 [ 395.895891][ C0] ? __pfx_do_coredump+0x10/0x10 [ 395.895905][ C0] ? stack_trace_save+0x95/0xd0 [ 395.895919][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 395.895932][ C0] ? hlock_class+0x4e/0x130 [ 395.895944][ C0] ? stack_depot_save_flags+0x28/0x9c0 [ 395.895967][ C0] ? kmem_cache_free+0x2e2/0x4d0 [ 395.895983][ C0] ? __sigqueue_free+0xba/0x2a0 [ 395.895996][ C0] ? get_signal+0xcbc/0x26c0 [ 395.896012][ C0] ? arch_do_signal_or_restart+0x90/0x7e0 [ 395.896025][ C0] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 395.896049][ C0] ? find_held_lock+0x2d/0x110 [ 395.896062][ C0] ? proc_coredump_connector+0x2d2/0x4f0 [ 395.896082][ C0] ? __pfx_proc_coredump_connector+0x10/0x10 [ 395.896104][ C0] get_signal+0x230b/0x26c0 [ 395.896123][ C0] ? __pfx_get_signal+0x10/0x10 [ 395.896141][ C0] ? rcu_is_watching+0x12/0xc0 [ 395.896153][ C0] ? trace_irq_disable.constprop.0+0xea/0x140 [ 395.896172][ C0] arch_do_signal_or_restart+0x90/0x7e0 [ 395.896186][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 395.896202][ C0] ? do_user_addr_fault+0xa4b/0x13f0 [ 395.896221][ C0] irqentry_exit_to_user_mode+0x13f/0x280 [ 395.896258][ C0] asm_exc_page_fault+0x26/0x30 [ 395.896274][ C0] RIP: 0033:0x0 [ 395.896282][ C0] Code: Unable to access opcode bytes at 0xffffffffffffffd6. [ 395.896288][ C0] RSP: 002b:00000000000000d3 EFLAGS: 00010217 [ 395.896297][ C0] RAX: 0000000000000000 RBX: 00007f5c849a6160 RCX: 00007f5c8478d169 [ 395.896305][ C0] RDX: 0000000000000000 RSI: 00000000000000cb RDI: 0000000020003b45 [ 395.896313][ C0] RBP: 00007f5c8480e2a0 R08: 0000000000000009 R09: 0000000000000000 [ 395.896320][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 395.896327][ C0] R13: 0000000000000000 R14: 00007f5c849a6160 R15: 00007ffeec136048 [ 395.896338][ C0] [ 395.903378][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 395.903400][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.14.0-rc5-syzkaller-00234-gb7c90e3e717a #0 [ 395.903428][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 395.903442][ T31] Call Trace: [ 395.903450][ T31] [ 395.903461][ T31] dump_stack_lvl+0x3d/0x1f0 [ 395.903498][ T31] panic+0x71d/0x800 [ 395.903524][ T31] ? __pfx_panic+0x10/0x10 [ 395.903549][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 395.903584][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 395.903614][ T31] ? preempt_schedule_thunk+0x1a/0x30 [ 395.903645][ T31] ? watchdog+0xdcc/0x12b0 [ 395.903677][ T31] ? watchdog+0xdbf/0x12b0 [ 395.903713][ T31] watchdog+0xddd/0x12b0 [ 395.903751][ T31] ? __pfx_watchdog+0x10/0x10 [ 395.903782][ T31] ? lockdep_hardirqs_on+0x7c/0x110 [ 395.903813][ T31] ? __kthread_parkme+0x148/0x220 [ 395.903839][ T31] ? __pfx_watchdog+0x10/0x10 [ 395.903872][ T31] kthread+0x3af/0x750 [ 395.903900][ T31] ? __pfx_kthread+0x10/0x10 [ 395.903933][ T31] ? __pfx_kthread+0x10/0x10 [ 395.903960][ T31] ret_from_fork+0x45/0x80 [ 395.903989][ T31] ? __pfx_kthread+0x10/0x10 [ 395.904017][ T31] ret_from_fork_asm+0x1a/0x30 [ 395.904054][ T31] [ 396.827007][ T31] Kernel Offset: disabled [ 396.831363][ T31] Rebooting in 86400 seconds..