last executing test programs: 52.432684541s ago: executing program 0 (id=122): openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x200, 0x0) mmap$auto(0x0, 0x10000002020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000080)={0x5, 0xffff3155, 0x3}) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r0 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/cgroup.threads\x00', 0x280303, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmsg$auto_ETHTOOL_MSG_RSS_GET(r0, 0x0, 0x8010) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x1}, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mq_notify$auto(0x4, &(0x7f0000000040)={@sival_ptr=0x0, @inferred, 0x1, @_tid}) sendmsg$auto_NL802154_CMD_DEL_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0}, 0x80) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) sendmmsg$auto(0xffffffffffffffff, &(0x7f00000000c0)={{0x0, 0x6, 0x0, 0xa7, &(0x7f0000000040)='~', 0x8000, 0x1}, 0x8}, 0x1, 0x9) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, 0x0, 0xff, 0x0, 0x1, 0x3}, 0xed7138c}, 0xb, 0x0) connect$auto(0x4, 0x0, 0x10) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/pts/ptmx\x00', 0x0, 0x0) mkdir$auto(&(0x7f0000000100)='}[,&*}\x00', 0x8001) mount$auto(0x0, &(0x7f00000000c0)='}[,&*}\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) open(&(0x7f0000000800)='./file0\x00', 0x22240, 0x154) execve$auto(&(0x7f0000000200)='}[,&*}\x00', 0x0, 0x0) mount$auto(&(0x7f0000000000), &(0x7f0000000080)='}[,&*}\x00', 0x0, 0x339, 0x0) socket(0x2, 0x1, 0x106) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f00000000c0)=""/228, 0xe4) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000240), 0x183440, 0x0) openat$auto_raw_fops_raw_gadget(0xffffffffffffff9c, &(0x7f0000000040), 0x12f040, 0x0) 51.262917782s ago: executing program 0 (id=127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000000", @ANYRES8=0x0, @ANYRES8=r0, @ANYRES8], 0x18}, 0x1, 0x1f00000000000000}, 0x200080c0) 51.062946s ago: executing program 0 (id=128): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) (async) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) (async) read$auto(r0, &(0x7f0000000100)='nl80211\x00', 0xbe62) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(r0, r0, 0x5) (async) close_range$auto(0x2, 0x8, 0x0) (async) socket(0x2, 0x3, 0x100) socket(0x10, 0x2, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf25030000000800030009000000060007000080000008000200", @ANYRES32=0x0, @ANYBLOB="0a00050000000000000000000a000100aaaaaaaaaabb00000a000500aaaaaaaaaa370000080004001000000008000200", @ANYRES32=0x0, @ANYBLOB="08001b"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) (async) write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) (async) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) (async) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000180), 0x101002, 0x0) write$auto_ucma_fops_ucma(r1, &(0x7f00000001c0)="d7d7e3fc3e47a70f", 0x8) (async) lsm_list_modules$auto(0x0, 0x0, 0x0) (async) r2 = socket(0x2, 0x801, 0x106) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt$auto(r2, 0x11c, 0x2, 0x0, 0x0) 50.58872018s ago: executing program 0 (id=130): r0 = prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_JOIN_MESH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)={0x28, r2, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@NL80211_ATTR_COLOR_CHANGE_COUNT={0x5, 0x12f, 0x1}, @NL80211_ATTR_AP_ISOLATE={0x5, 0x60, 0x60}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x840}, 0x20000800) sendmsg$auto_NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f0000001180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001140)={&(0x7f00000011c0)=ANY=[@ANYBLOB="0411e757cac0386043914a0cd2f145d0a650e0f84ad5b8a69f4cef3e077b295f02d6b0014852ff5b62f08477c6042146ff109bbe2d412c49f2936e46f9c32630e641b911fa96fb87d0d33ccd77a77874db466a2abd59de9b71d9f73a5eb8d1f1f4ae63c5f71553cee29c545cdc2a9d7d757cbd6e7bb8ee3b32f4de6a76561d2148e3d7904960cd6d9cb1ad747e8c4ed8d720cf9e7044bbf771fdd70fce02ac", @ANYRES16=r2, @ANYBLOB="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"], 0x10f8}, 0x1, 0x0, 0x0, 0x4000000}, 0x40) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) r4 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(r4, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x0, 0x401, 0x7}, 0x9, 0x0) landlock_restrict_self$auto(r4, 0x0) landlock_restrict_self$auto(r3, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r5, 0x5452, &(0x7f0000000880)=0x5) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) bpf$auto(0x0, &(0x7f0000000780)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) socket(0x2, 0x6, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) mknod$auto(&(0x7f0000000080)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x1081, 0x8) acct$auto(&(0x7f0000000480)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x0f\x18\xc5\x82-s\x83\xe6\xaeR\x81\r_\x0e\x19\x12\x85\bvf(e\xday)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbHL9aD\xb4\x80\xed\xba>\"\xb6\x7f\xa3f\x1d\a\xa1\x87\x84uA\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e') open(&(0x7f0000000840)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x22240, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) syz_genetlink_get_family_id$auto_batadv(0x0, 0xffffffffffffffff) socket(0x2, 0x1, 0x0) 48.285443567s ago: executing program 0 (id=141): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) mmap$auto(0x0, 0x40005, 0xdf, 0x9b72, 0x7, 0x28000) (async) move_pages$auto(0x0, 0x91, 0x0, 0x0, 0x0, 0x0) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) (async, rerun: 64) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) (rerun: 64) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/kernel/domainname\x00', 0x88042, 0x0) poll$auto(&(0x7f0000000080)={r2, 0x0, 0x5}, 0x5, 0x49) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) (async) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bdi/1:5/min_bytes\x00', 0x88282, 0x0) sendfile$auto(r3, r3, 0x0, 0x71) (async) r4 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000b00), 0x40042, 0x0) read$auto(r4, 0x0, 0x4) r5 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/mm/transparent_hugepage/khugepaged/alloc_sleep_millisecs\x00', 0x20681, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r5, &(0x7f00000000c0)='5', 0x1) (async, rerun: 64) tkill$auto(0x1, 0x7) (async, rerun: 64) msgrcv$auto(0xff, 0x0, 0x2400000000, 0x6, 0x6bc2cc7d) ioctl$auto_TIOCMBIC2(0xffffffffffffffff, 0x5417, &(0x7f0000000100)) (async) keyctl$auto_KEYCTL_SESSION_TO_PARENT(0x12, 0x0, 0x0, 0x2f5, 0x48eafc79) (async) read$auto(r0, &(0x7f0000000100)='nl80211\x00', 0xbe62) (async) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYRES8=0x0, @ANYRES16=0x0, @ANYBLOB="000226bd7000fedbdf250300000008000300047e4846020000060013000080000000000609a0d78ba90a0005009c00000000000010b3fc010000000000000000000a0001000100000000000000060006000500000008000200", @ANYRESDEC=r1, @ANYBLOB="080004000301"], 0x68}, 0x1, 0x0, 0x0, 0x40080}, 0x40090) (rerun: 64) socket(0x2, 0x3, 0x6) (async, rerun: 32) socket(0x10, 0x2, 0x0) (async, rerun: 32) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x0) bpf$auto(0x0, &(0x7f00000001c0)=@bpf_attr_0={0x1, 0xb5, 0x10, 0x4, 0x53000000, 0xffffffffffffffff, 0x9, "2af051b26b658a20d8dc6b36c83ce63f", 0x0, 0xffffffffffffffff, 0x5, 0x7, 0x7, 0x6}, 0x10) (async) bpf$auto(0x18, 0x0, 0x9) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="13"], 0x1ac}}, 0x4004) 44.699013551s ago: executing program 0 (id=152): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd43a6ac90df250300000004000800140001800800028004001d80080003"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x8, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4) r3 = ioctl$auto_dma_heap_fops_dma_heap(r2, 0x6, &(0x7f0000000000)="b07859c12fe7b77fc212ea0cf2079abb0aa5510ec1f1eb9aa834ecb463c15ae16627e1c304ceac15aed2320c46fedf3a9f9efd385c01fc7cf36f2b045bfdf217d14e1c35eb67a8b3b7fa08af5d66beff40d465a7b280099dec2a53f10a6c93b468305cd6ba593729373b496d44d2e499bcdb28e08a7996aee12a3f3febc89aaa00bbacf1f7e95cdc4f8c815092de1243555b1a12e5432bed434d9079a133b74aef22131b9063f919cf82265cea5cdca8c2500e1421b3915187aab5d4db184f2f17c8") r4 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_TYPE={0x8, 0x6, 0x2}, @THERMAL_GENL_ATTR_TZ_TEMP={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r5 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r5, 0x1a, 0xfffffffffffffffd, 0x1) bpf$auto(0x2, 0x0, 0x5) 44.146041773s ago: executing program 32 (id=152): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010029bd43a6ac90df250300000004000800140001800800028004001d80080003"], 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x800) close_range$auto(0x0, 0xfffffffffffff000, 0x2) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x2, 0x4, 0x8201, 0x8, 0x0, 0xc, 0xe3, 0x4e, 0x3}, 0x6f4) r3 = ioctl$auto_dma_heap_fops_dma_heap(r2, 0x6, &(0x7f0000000000)="b07859c12fe7b77fc212ea0cf2079abb0aa5510ec1f1eb9aa834ecb463c15ae16627e1c304ceac15aed2320c46fedf3a9f9efd385c01fc7cf36f2b045bfdf217d14e1c35eb67a8b3b7fa08af5d66beff40d465a7b280099dec2a53f10a6c93b468305cd6ba593729373b496d44d2e499bcdb28e08a7996aee12a3f3febc89aaa00bbacf1f7e95cdc4f8c815092de1243555b1a12e5432bed434d9079a133b74aef22131b9063f919cf82265cea5cdca8c2500e1421b3915187aab5d4db184f2f17c8") r4 = syz_genetlink_get_family_id$auto_thermal(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_THERMAL_GENL_CMD_CDEV_GET(r3, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x200, 0x70bd27, 0x25dfdbfc, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_TYPE={0x8, 0x6, 0x2}, @THERMAL_GENL_ATTR_TZ_TEMP={0x8, 0x3, 0xffffffff}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x40) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) r5 = io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(r5, 0x1a, 0xfffffffffffffffd, 0x1) bpf$auto(0x2, 0x0, 0x5) 9.925255301s ago: executing program 2 (id=257): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto_PR_SET_VMA(0x53564d41, 0x90, 0x0, 0x8002, 0x2) 9.69377454s ago: executing program 4 (id=258): rseq$auto(&(0x7f0000000100)={0xe, 0x400, 0x0, 0x20006, 0xffffffff, 0x2, "3adc8f861bc4a6a9a750f0c4b7154b4211a826cacfd47e9951f8b813e1aa66d73073eae7f7486d3083ff78263a5507fa26b6de528b2631df0ee47758171785ea99d9dee4c2a114bbde7161dc4032588c32c961b692517aa5011c698e6fd4fa556f1235f41e23ac6618682c574d21c6c2d2b85784b3c3e17eab8a102ccf775a6cec2579a3b9a48934420fdbf7dbdedf4285"}, 0xfffffff4, 0x0, 0x7) sysfs$auto(0x2, 0x10000000000002a, 0x0) socket(0x10, 0x2, 0x0) socket(0x2, 0x6, 0x0) mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x401, 0xfffffffffffffffd, 0xd4, 0x4, 0x28c, 0x0, 0x3, 0x368e, 0x9, {0xfffffffe, 0x10000}, 0x5, 0x6, 0xfffffffffff7fffd, 0x1007ffd, 0x0, 0xfe, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r0, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) stat$auto(&(0x7f0000000300)='./cgroup\x00', &(0x7f0000000340)={0x800000007, 0x8000, 0x6, 0x8001, 0xee00, 0xee01, 0x0, 0x187, 0x2, 0x8, 0x3, 0x5fd0, 0x7f, 0x6, 0xfff, 0x2003, 0x1}) setsockopt$auto(0x3, 0x0, 0x13, 0xffffffffffffffff, 0x0) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x3a600, 0x0) ioctl$auto_KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000000)=0x3) mmap$auto(0x9, 0x8, 0xdf, 0x9b72, 0x2, 0x3ff) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/rpc/nfs4.idtoname/channel\x00', 0x8f3b7a51b80ebd01, 0x0) rseq$auto(&(0x7f00000005c0)={0x1, 0x2, 0x3, 0x4, 0x6, 0x81, "0bef046e1ee1747859e944edf455014232d928e51199823497ef031683e8d1223293b823863e9568a350c085c7ce44d9ceb4a8c6d6f550b32c1cfe6af9c0ec6fb4089c477416a96cb286565685fce2fb382377a3159d8501243d9d96862bf175c55b7cb5c7656a5b553bd2d6796ea6b076229af673b01ed38bd5da1c9c154c66cf29b47bc2c7c915a2f8f1e5d1abd0f521074032001df822e68d4df8fead5d76cc2ad5b9e8f1077e2bd14d6dde961c6e922ebdb531e61bc244e129e7717464186946a8239801c44b713c51cbf5caf89af65a6c87de0d6bd2306ca3070eea1bcb82c3e78d7da61a1d48779453d54c840287248f75c6"}, 0x8, 0x101, 0x2) ioctl$auto_USBDEVFS_CONTROL32(r2, 0xc0105500, &(0x7f0000000080)={0x7a, 0x7d, 0x7, 0x4, 0x100, 0x7, 0xa}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) unshare$auto(0x40000080) r3 = socket(0x2, 0x3, 0x100) rseq$auto(&(0x7f0000000700)={0x80000000, 0x7, 0x6, 0x1, 0x99, 0x81, "4067f8ab83e9f4533d1a4616edd125fdcc7649b50d169226053826da0e001d5068fdd5026e09cca26f97f8adb7909e9ca7667c8771ce803c621afac6e3ce80dbe25f74e049f144b656ab866315eb9862ebd387575ceb3390e267b18371d231dee43dcf068fd8ee05fa850ffe53bc"}, 0x7b099a5f, 0x9059, 0x7ff) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000240)='/proc/fs/lockd/nlm_end_grace\x00', 0x8282, 0x0) write$auto(0x3, 0x0, 0x100082) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/bus/pci/drivers/gve/bind\x00', 0x84280, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x7}, 0x3) ioperm$auto(0x3, 0xe, 0x2000000000000149) socket(0x5, 0x2, 0x5800) 9.615584543s ago: executing program 2 (id=259): close_range$auto(0x2, 0x8, 0x10000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) unshare$auto(0x40000080) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/net/bond0/bonding/all_slaves_active\x00', 0xb02, 0x0) pwritev$auto(0x3, &(0x7f0000001000)={0x0, 0x8}, 0x5, 0x3, 0x9) read$auto(0x3, 0x0, 0xf34) write$auto(0x3, 0x0, 0xffd8) bpf$auto(0x0, &(0x7f0000000280)=@link_update={0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) sendmsg$auto_GTP_CMD_NEWPDP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8840}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x7, 0xfffffffffffffffd, 0x7ffffffb, 0x9, 0xffffffff7ffffffc, 0x9, 0x7, 0x200000100103}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) r3 = socket(0x12, 0x4, 0x440a) r4 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/adsp1\x00', 0x20b42, 0x0) ioctl$auto_SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000040)) socket(0x25, 0x5, 0x0) sendfile$auto(0x6, 0x3, 0x0, 0xfdef) openat$auto_rfkill_fops_core(0xffffffffffffff9c, 0x0, 0x400, 0x0) io_setup$auto(0x80002, 0x0) r5 = openat$auto_snd_pcm_f_ops_pcm1(0xffffffffffffff9c, 0x0, 0x20400, 0x0) ioctl$auto_SNDRV_PCM_IOCTL_FORWARD2(r1, 0x40084149, &(0x7f0000000080)=0x95) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, r5, 0x8000) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000900), r6) sendmsg$auto_OVS_VPORT_CMD_SET(r6, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000002640)={&(0x7f0000001240)={0x14, r7, 0x1, 0x70bd2b, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x4810}, 0x4) socket(0x11, 0x80003, 0x300) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NFC_CMD_STOP_POLL(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="44000000b005340aebe5fa82cc2cfe070efe7393c78775a7fbd06451a308b2d75dbbc9314b37f854d5b05ee476d92d1c76c634d55ec71ff7edaeb9bf870880443128469ecac1b937af2434186513ea1de2def6266f268232ae88a517c5deaaa2de423a78b504169c1bebb902000000604ce722008ad319166a88d492ae3a921f7fc0d05390e545cdac589a1717", @ANYRES16=0x0], 0x44}, 0x1, 0x0, 0x0, 0x20008050}, 0x4048041) 6.777042558s ago: executing program 4 (id=264): r0 = openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/config/nvmet/discovery_nqn\x00', 0x189002, 0x0) writev$auto(r0, &(0x7f0000000080)={&(0x7f0000000280)="7bae", 0x107}, 0x4) openat$auto_ftrace_set_event_pid_fops_trace_events(0xffffffffffffff9c, &(0x7f0000002640)='/sys/kernel/debug/tracing/set_event_pid\x00', 0x2002, 0x0) 6.004445619s ago: executing program 2 (id=266): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptyzd\x00', 0x601, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) write$auto(0x3, 0x0, 0x7fffffff) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000040)="13") openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000540)='/dev/ptyzd\x00', 0x601, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x0) (async) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/nullb0\x00', 0x60742, 0x0) (async) write$auto(0x3, 0x0, 0x7fffffff) (async) ioctl$auto_TIOCSTI2(r0, 0x5412, &(0x7f0000000040)="13") (async) 5.996480921s ago: executing program 4 (id=273): epoll_create1$auto(0x0) socket(0x2, 0x801, 0x6) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyu3\x00', 0x1, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, &(0x7f0000000080)="f5c94556d7b994ee4c7d6b000087cfce41d8b86d8574badcc9a0191d856056") mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x60742, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio1\x00', 0x80502, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f00000000c0)) write$auto(0xffffffffffffffff, 0x0, 0x7) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, 0x0, 0x228001, 0x0) sendmsg$auto_NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=ANY=[@ANYRES16=0x0, @ANYBLOB="2f212abd7800fddb"], 0x14}}, 0x4000000) openat$auto_snd_seq_f_ops_seq_clientmgr(0xffffffffffffff9c, &(0x7f00000011c0), 0xa2741, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) openat$auto_tap_fops_tap(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x8, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x6d3f, 0x9, 0x2, 0xfffffffffffffffe]}, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x8]}, 0x0) syz_genetlink_get_family_id$auto_ovs_vport(0xfffffffffffffffe, r2) unshare$auto(0x40000080) close_range$auto(0x2, r1, 0x0) write$auto(0x3, 0x0, 0xfdef) madvise$auto(0x0, 0x2003f0, 0x15) getresgid$auto(0x0, &(0x7f0000000a40)=0x1ff, 0x0) 5.980810714s ago: executing program 3 (id=267): r0 = openat$auto_loop_ctl_fops_loop(0xffffffffffffff9c, &(0x7f0000000440), 0x20100, 0x0) ioctl$auto_LOOP_CTL_REMOVE(r0, 0x4c81, 0x0) openat$auto_mtd_fops_mtdchar(0xffffffffffffff9c, 0x0, 0x28082, 0x0) socket(0x1e, 0x80000, 0x5c) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000001cc0), 0x101440, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000140)={{0x0, 0x2, 0x200800, 0x1, 0xfffffffb}, "0dd7fd004929347eeeccdf0732f77b1f6de0d6d51768a257a97ca5e1ca6300ea"}) ioctl$auto_SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/fs/cifs/cifsFYI\x00', 0x40c01, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, 0x0, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_PAUSE(r1, 0x54a3, 0x0) mmap$auto(0x0, 0x9, 0xdf, 0x1000000eb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) clock_nanosleep$auto(0x0, 0x1000, 0x0, &(0x7f0000000040)={0x9, 0x1000000000004}) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TIOCSTI2(r3, 0x545c, 0x0) ioctl$auto_TIOCVHANGUP2(r3, 0x5437, 0x0) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_REMOVE_LINK_STA(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYRES32=r4, @ANYRES16=r4, @ANYRESDEC=r0], 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000) ppoll$auto(&(0x7f0000003600)={0x8, 0x800, 0x1}, 0xd6, &(0x7f0000003640)={0x7fffffffffffffff, 0x489}, 0x0, 0x8) madvise$auto(0x0, 0xfffffffffffefffd, 0x17) sendmsg$auto_NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x3a8044}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYRES64, @ANYRES16=r4, @ANYBLOB="000028bd7000fbdbdf25490000000800a4000002000015023380061748a31e9559a89a4fc849603b836e17cc1ad03c2d358b7cd98671dcce5d23f89f762f92570b697347f18346ef4250cb71b9fa43d9c5e1de71dd871f6df113cb2671f1cb1b0d163b7e91fddd9b004caf256d76bc7f70ebd40ead7e4a1dda77abc34766febcd56585a1ccc4f87709a6d3a0cc905aaa2927fc8f44c979e5efafb09ea37cd512f1a83098177aa0f2909efa3d84ee934dfbed7e0d4ff5ba59245273d073052da52bdae7de371030594c3a920526175ee507f1b12dcbfd6666653205ab0b404aa78364b908e93fe5de707725065b141aa24268fbb3f9534f4e64235b12a87b44bc4c4a9fc4c6b86cde80d40f601251bad939cd850f194b28d9ff8146805b0fe3d9b8b2962127ecb8cc2b488541601f66136480fc5d29bd9bb7b948492abe285fee16b5e0fbe0caf6c4c356d5d5e65f279a385650a40b5d6dbccc16c8262108e9796de764b942e7eba5f24b55fc37a525cd43a930261ac3fe4f64253d2c6863b0c4957b963d3d707659f7a48c2ce767f0cd23a8f0f659adcf9aacc8004a485e48002a1e511aff423af9082b89855f98218ffbf94478b42e64d23973aa862f33be95b2a26c33120ea700c2c51130a2cabbd5e21a8f75755c9836c67b1f800e847f28850493f1488e1a299f111a063bf1386c570adb51caee0d88ad9a639a69b986e411eec9394f3886dc205db362e7647de5dfc919cbded6063aba8bbf4d60836b2bc5d8b2b8e0040001000000000600ed0009000000060096000700000004008b000600fb00ff000000060066004e2200000000"], 0x258}, 0x1, 0x0, 0x0, 0xc814}, 0x10) madvise$auto(0x0, 0x20499d, 0x9) syz_genetlink_get_family_id$auto_nl802154(0x0, 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000000), 0xffffffffffffffff) madvise$auto(0x4, 0x6, 0x2000007) sendmsg$auto_ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="0800009c", @ANYRES16=r5, @ANYBLOB="010026bd7000fbdbdf250300000005000500dc0000000500050001000000"], 0x24}, 0x1, 0x0, 0x0, 0x20040041}, 0x2000c840) sendmsg$auto_NL802154_CMD_SET_TX_POWER(0xffffffffffffffff, 0x0, 0x810) madvise$auto(0x2, 0x98, 0x101) madvise$auto(0x108000, 0x800034, 0x4) 4.654610991s ago: executing program 2 (id=268): r0 = openat$auto_ima_measure_policy_ops_ima_fs(0xffffffffffffff9c, &(0x7f0000000000), 0x48001, 0x0) write$auto(r0, &(0x7f0000000800)='0\"\xfb]$|\xcb1j\xeb0B|d\x1e\x99\xb9\xfd\xd3\x89O\x9f\xac+\xf6\xd7/\xc9\xe9x\xd4\xf3\xc8\xf5\x7fW\xd3\xa6\x96\xd3^\xb8\xb4gq%H\xcc\x88r\xeaO\x8e\x10\t\xc7 P\xcf\xa7H\b\x04\x87\x98\x16`\xa3S\xd46\x10Wf\xc9<7\xcf\xc9\xf1\b\x9b\x8c\x9fu;\xc48(u\xf9Bx\n\xafW%/bBT\xa9\a\xed\xd2H4\x96\xa3U\xca\xf1\xef\x14dU\x15\x16\xa7\xdd\x01\x0e\xda\xc8\xd3\x00\xc5\b\x1a\xb0mN\x01\xb1\xc8B.U\xd1\x02\'\x9a\'\xf1;\xedJ\xf6@\xac\a\xf5\xf5 |\x1ex\xb7@=\xad\xe7\xff\xd6\xc1\xcf\x11\x0f\x99+v\x873\xc4\x17]\x17!]ct\xff\t\xb2A\x0f\x91\x02\xca&\x91n\xc1\x9e\xcb\x1b\xec\x972\xa9\x00', 0x4000002) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c7"], 0x2c}, 0x1, 0x0, 0x0, 0x24}, 0x400c000) r1 = socket(0x10, 0x2, 0xc) socket(0x11, 0x3, 0x300) socket(0x11, 0x3, 0x6) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/thread-self/net/ptype\x00', 0x101000, 0x0) pread64$auto(r2, 0x0, 0x8, 0xffff) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="58a97c8ab9bfc948f377d07fcce67d9862f61f4bebc374b22852089e961edf2634b352430701310f073d4aa0dd09daf34cf4685b2c7f6a9783a5ce82f533feac4984a8e7e401c12f57b74fd8127778048f2f6e4b625b61fc0912ee3a936d0c514b2a389351003670c47f1c3f43babb5f3e6a1ffeb84483f272ddf38f00ba2121c49ca570993393bbd3955c0eeb3df23b1d702f5c0c47d6fb20658785f677fb842a4e1202461c0bd6ae2bd4f1a83d1c42101061bed864940684d1408fd4085d3df7faae8418341e2e2832ca1a342609bfab261f45036f0f036aec9929fb1f37c4c5b0dc0feb85", @ANYRES8=r1, @ANYBLOB="01"], 0x18}, 0x1, 0x0, 0x0, 0x60000804}, 0x80) 4.32322195s ago: executing program 3 (id=270): r0 = openat$auto_proc_environ_operations_base(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/environ\x00', 0x2000, 0x0) (async) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async) readv$auto(0xffffffffffffffff, 0x0, 0x400) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async, rerun: 64) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty0\x00', 0xa2180, 0x0) r1 = openat$auto_dvb_demux_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000140), 0x8040, 0x0) ioctl$auto_dvb_demux_fops_dmxdev(r1, 0x403c6f2b, 0x0) (async) read$auto_proc_environ_operations_base(r0, 0x0, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) close_range$auto(0x2, 0x8, 0x0) (async) mmap$auto(0x0, 0x200006, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) (async) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x48000}, 0x0) io_uring_setup$auto(0x1, 0x0) (async) msgctl$auto_MSG_STAT_ANY(0x4, 0xd, &(0x7f0000000100)={{0x9, 0xee00, 0xee00, 0x3, 0x97a, 0x9f, 0x3}, &(0x7f0000000040)=0x8e, &(0x7f00000000c0)=0x40, 0xd6, 0x7, 0x4, 0x81, 0x1, 0x4, 0x9, 0x2, @raw=0xfbed0000, @raw=0xfffff004}) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) r3 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/virt_wifi0/router_solicitations\x00', 0x101202, 0x0) (async) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv6/conf/all/disable_policy\x00', 0x202, 0x0) (async, rerun: 64) bpf$auto(0x1, &(0x7f0000000540)=@link_create={@prog_fd=r0, @target_ifindex, 0x0, 0x7, @perf_event={0x8}}, 0x3) (rerun: 64) sendfile$auto(r4, r3, 0x0, 0x48) (async, rerun: 64) mmap$auto(0x2, 0x2000a, 0x5, 0xeb2, 0x401, 0x7fff) (async, rerun: 64) syz_clone(0xa300100, 0x0, 0x0, 0x0, 0x0, 0x0) (async) shmctl$auto_SHM_LOCK(0xac6, 0xb, &(0x7f00000002c0)={{0x0, 0x0, 0xffffffffffffffff, 0x4, 0xd9}, 0xfffffc00, 0x3, 0x5, 0x6, @raw=0x8, @raw=0x201, 0x4, 0x0, &(0x7f0000000180), &(0x7f00000001c0)="9665d61804696ab62bde66a62307b69444c6dc9e775d4b4407afbc2c181920d474e19dc4cff52ed741474221b00b58bcde9884d13a5143529d8c3c57f7b84d1b79c023d1113151c7c0e16e10d4cf888cf37ba970759326edb105bd465da5913bc8be1b2e371a27f61e0b079fe4dd0d554c81a6046ec2d747dd8d314773b059a1d9a92629a39c1ee5d7fd747be24c9e60b97a10d6353616d0e2de1cab52767a20614a28d64cce11f6347bc544c30f2a2c3c7211ee8f39f2fde5c6997290a34cd5e99ef6d3a27838f38a488f08e210ff2da8c6f2479afda72b8034e2fb0297812043a9da34b859a4ffd8b61e59ab2556"}) r6 = getpgid$auto(0xffffffffffffffff) shmctl$auto_IPC_RMID(0x1, 0x0, &(0x7f00000004c0)={{0x4, r2, r5, 0x5, 0x7ff, 0x1}, 0x5, 0xfff, 0x8, 0x5, @raw=0x1, @inferred=r6, 0xd69, 0x0, &(0x7f0000000340)="0e9b1f8a9f2d3d3c0c24454d879bd405ae3eed8a51fae20acf5cfb1cf36176841dcb4432f273315c460460e1533cc5895ae9813677ac27e70b0925c871de1e0e6c96347bb2438e0b613bcb7da493c4e87521cf9d53dafda627c82e8a834b87a9860a8117b2fe8751c2839752658dd46a2f0bc74500da10667c8b3749df1460e1bfa4e16c9add9b6ee39f780c83e188cc47c3f6c1ab29d150db1b309d8c8b2fabca07e4117e4a8b84654a6032f75093fdda8f5af14286a9b1fa086c3ad9e9569cc1c6a706590ccc248e53c0351f7a45c12617333ccfff", &(0x7f0000000440)="108cea25fb64e2f6a105bddd4622712d06f5bae8398a46bbaef09f94b0f502f89d2c0501a70417e535331b13d24a453c73a014ff5c66c24548c0bc4b4f6d56a8320af2be0ceedb198ffd001328d1b4c1d44e06120bba651a83a25c375bdee888256a06045bf35ace"}) (async) r7 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) ioctl$auto_TCFLSH2(r7, 0x5453, 0x0) (async) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) io_uring_register$auto(0x2, 0x0, &(0x7f0000000000), 0x3) (async) r8 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r8, 0x5606, 0x7) 3.879456881s ago: executing program 2 (id=271): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mlockall$auto(0x7) mremap$auto(0x300, 0x4, 0x4, 0x7, 0x100000000) 3.777548048s ago: executing program 4 (id=272): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) rt_tgsigqueueinfo$auto(0x0, 0x0, 0x21, &(0x7f0000000400)={@siginfo_0_0={0xc4, 0xc, 0x80, @_sigsys={0x0, 0xffff, 0x7}}}) r0 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x14be02, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) listen$auto(r0, 0x0) 3.729872291s ago: executing program 1 (id=274): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1, 0x1, 0x0) waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000000)={@_si_pad}, 0x4, &(0x7f0000000080)={{0x2, 0x70ab3317}, {0x1}, 0x1, 0xee26, 0x0, 0x5, 0x3, 0xfffffffffffffffe, 0x0, 0x8, 0x6, 0x2, 0x3126, 0x101, 0x1, 0x8}) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) 3.616719955s ago: executing program 3 (id=275): r0 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_PHY_GET(0xffffffffffffffff, &(0x7f0000003200)={0x0, 0x0, &(0x7f00000031c0)={&(0x7f0000000180)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010326"], 0x20}, 0x1, 0x0, 0x0, 0x2404c012}, 0x80) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 3.29629566s ago: executing program 3 (id=276): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1, 0x1, 0x0) r0 = waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000000)={@_si_pad}, 0x4, &(0x7f0000000080)={{0x2, 0x70ab3317}, {0x1}, 0x1, 0xee26, 0x0, 0x5, 0x3, 0xfffffffffffffffe, 0x0, 0x8, 0x6, 0x2, 0x3126, 0x101, 0x1, 0x8}) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x121900, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) fcntl$auto(0x3, 0x4004, r0) 2.86720336s ago: executing program 2 (id=277): unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x4000eb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x3, 0x7) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)={0x40, 0x20, 0x7}, 0x18) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sg0\x00', 0x8081, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) memfd_create$auto(0x0, 0xe) mbind$auto(0x2000, 0x100000004, 0x100002000, 0x0, 0x5, 0x2) r0 = socket(0x2, 0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r1 = memfd_create$auto(0x0, 0xe) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x31}}, 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x7}, 0x5, 0x20000000) recvfrom$auto(0x3, 0x0, 0x800000000e, 0x11f, 0x0, 0xfffffffffffffffd) socket(0x2, 0x801, 0x106) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdf3) write$auto(0x3, 0x0, 0xfffffdef) connect$auto(0x3, 0x0, 0x51) socket(0x28, 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r1, &(0x7f00000000c0)=""/5, 0x5) sendmsg$auto_TIPC_NL_LINK_GET(r2, &(0x7f0000003e80)={0x0, 0x0, &(0x7f0000003e40)={&(0x7f0000003300)={0x18, 0x0, 0x1, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}}, 0x8040) read$auto(0x3, 0x0, 0x80) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r3, &(0x7f0000000040)="4c91f2c3a82746fae08d5fc5e51fd9800e9b58", 0x13) close_range$auto(0x2, 0xa, 0x0) 2.486253149s ago: executing program 1 (id=278): statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x1ff, 0x7, 0x1f, 0x7181, 0x1ffde, 0x7, 0x2, 0x9, 0x9, 0x3, 0x4, 0x1, 0xb4, 0x9, 0x8, 0x10003, 0x80, 0x4, 0x0, 0xa, 0x22000, 0x200, 0x0, 0x84, 0x0, 0x0, 0x4, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000000000]}, 0x1fe, 0xd) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1e00df45"], 0x1ac}}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x500, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) 2.284734135s ago: executing program 1 (id=279): socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x5, 0x2000000000002) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket(0xa, 0x801, 0x106) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x5, 0x6, 0x1) close_range$auto(0x2, 0x8000, 0x0) socket(0x1, 0x5, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/mnt\x00') socket(0x80000000000000a, 0x2, 0x0) bpf$auto(0x0, &(0x7f0000000300)=@link_update={r0, @new_prog_fd=r1, 0x100, @old_map_fd=r1}, 0x10) bpf$auto(0x110000, 0x0, 0x80000) 2.092857517s ago: executing program 3 (id=280): mmap$auto(0x0, 0x40000a, 0xde, 0x9b72, 0x2, 0x8000) mlockall$auto(0x7) r0 = timerfd_create$auto_CLOCK_BOOTTIME_ALARM(0x9, 0xb) read$auto_gpiolib_fops_(r0, &(0x7f0000000000)=""/94, 0x5e) r1 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer2\x00', 0x1c8340, 0x0) ioctl$auto(r1, 0xc0045401, 0xffffffffffffffff) mmap$auto(0x0, 0xfb1, 0xffffffff, 0x9b72, 0x2, 0x8000) mlockall$auto(0xff) close_range$auto(0x0, r0, 0x80) fanotify_init$auto(0x5, 0x2000000000002) ioctl$auto_IOC_PR_RELEASE(r0, 0x401070ca, &(0x7f0000000080)={0x7, 0x10, 0x3}) socket$nl_generic(0x10, 0x3, 0x10) socket(0x26, 0x80805, 0x0) clone$auto(0x20003b46, 0x7, 0x0, 0x0, 0x2) ioctl$auto(0x3, 0xff0a, 0x0) mlockall$auto(0xdf) madvise$auto(0x0, 0x200007, 0x19) 1.923561394s ago: executing program 1 (id=281): mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) socket(0x1, 0x1, 0x0) waitid$auto_P_PGID(0x2, 0xffffffffffffffff, &(0x7f0000000000)={@_si_pad}, 0x4, &(0x7f0000000080)={{0x2, 0x70ab3317}, {0x1}, 0x1, 0xee26, 0x0, 0x5, 0x3, 0xfffffffffffffffe, 0x0, 0x8, 0x6, 0x2, 0x3126, 0x101, 0x1, 0x8}) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x200, 0x0) openat$auto_lru_gen_rw_fops_vmscan(0xffffffffffffff9c, &(0x7f0000000200)='/sys/kernel/debug/lru_gen\x00', 0xc0000, 0x0) socket(0x1e, 0x1, 0x0) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket(0x11, 0x3, 0x9) prctl$auto(0x3e, 0x1, 0x0, 0x1, 0x0) select$auto(0xe, 0x0, 0x0, &(0x7f0000000040)={[0x1ff, 0x7, 0xd, 0x8fd6, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x80000001, 0x7, 0x1, 0x9, 0x1, 0xfffffffffffffffe]}, 0x0) write$auto(r0, &(0x7f00000000c0)='/Eev/audio1\x00VI\xa3\xaa\xb1;\x9dJ\xc6\xc0\'\xdbV\xd4\xee\xc2\xdd\xa7\xee$\x8d\xc4\xe9d\x03\rF\xec\xb8\xb1Z|\xffGP\x97)\xcf\a\xfb\\n\x89C:\x84D\x1du\xb4\x9ab\xce\xa7tU\x14w\xb4\x14\x1dU\x9d\x8b\xa4U\x953.O\xab\"4\x8a\xbbY8@Z5`\xa4m\xffb\x17\xbb\x7f\xea4*\xa4\xf4\xb4\x90\xc0\xbf\xd4m\xbf\xc7\x15\xbe\x01\x98\xd7lD\x97)}\xfaK\xdf>f\xb8&\x959-\n\xccWw\xe2\x9cK\fE\a\xca\xd36\xe8\xcb?(\xfaI\xe2\xae,\x95k8\x83\xcf\xc5D\xcc', 0x100000a3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0xd, 0x1, 0x948b, 0x3, 0x15f4da0a, 0x3, 0x3, 0x62, 0x8000001f, 0x7, 0x6d3e, 0x9, 0x2, 0x6]}, 0x0) 854.004155ms ago: executing program 1 (id=282): r0 = openat$auto_btrfs_dir_file_operations_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/bluetooth/hci7/hci7:201\x00', 0x100000, 0x0) ioctl$auto_BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f0000000280)={0x10, 0x81, [0x4, 0x88c5, 0x8001, 0x6, 0x8, 0x6]}) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x20342, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/platform/vkms/graphics/fb0/blank\x00', 0xa001, 0x0) write$auto(r1, &(0x7f0000000140)='7\x00\xb1\x9a\xc0\xf9\xc0e\xd2T\xbe\xb6I\x9d\xd9\x18\xf5\x91\xbfq\xfe\xf2\x9a\x02\x9fC0xb\xccW(\xc1n+\n|5\xa5\x9c=^\xf1\x11H\x1c\xf73\x16\xd2\a\xfaw\xcc\xf1\xff7\xab\xa1\xeaF\x04\x17\x99\xd3\xd1\x83\xccG^\xbbdC\x8a\n\x88\xbcW@+\xafD\xd1\x8a\xc13W\xf66\x86\xe5\xee\xa7\x1d\x0f\x90\x00\xcf\xdb\xf5\xbf\xd4\xc8\x84\xb3\xeeb\xb0\xc7kN\x80\x93\xfd\x89\xe1\xc9tp\xd4jm\x7f\xf0a\xc3\x02\x14\xcf\xcf\\e!\a\x82\t,\xa7\x00\xbd&\xcax\xf8P\xc1\x8f\x87\x83\x0f\x93z', 0x81) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x6, 0x0) io_uring_register$auto(0x2, 0x13, &(0x7f00000001c0), 0x2) write$auto(r1, &(0x7f0000000100)='%\x00', 0x38f) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/LNXSYSTM:00/LNXSYBUS:00/PNP0A03:00/device:08/adr\x00', 0x0, 0x0) read$auto(r2, 0x0, 0x7) r3 = openat$auto_proc_fail_nth_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/fail-nth\x00', 0x802, 0x0) writev$auto(r3, &(0x7f0000000200)={0x0, 0x7}, 0x3) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r4 = socketpair$auto(0x1, 0x8, 0x8000000000000000, 0x0) r5 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101e81, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000002c00), 0xffffffffffffffff) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$auto_TIPC_NL_BEARER_ENABLE(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={0x0, 0x14}}, 0x4000) ioctl$auto_TIOCSETD2(r5, 0x5423, 0x0) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x30}, 0x1, 0x0, 0x0, 0x881}, 0x8000) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000140)='/sys/devices/virtual/cpuid/cpu0/power/control\x00', 0x1d1100, 0x0) openat$auto_cachefiles_daemon_fops_internal(0xffffffffffffff9c, &(0x7f0000000d00), 0x48900, 0x0) select$auto(0xd, 0x0, &(0x7f0000000100)={[0x20000000000d, 0x203, 0x0, 0xc, 0x5, 0x3, 0xff, 0x2000000000000002, 0x9, 0x8, 0x103, 0xa, 0x4, 0xaab, 0x5, 0x4006]}, 0x0, 0x0) sendfile$auto(r6, r6, 0x0, 0x3) 736.625755ms ago: executing program 3 (id=283): close_range$auto(0x0, 0xfffffffffffff000, 0x2) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x2) landlock_create_ruleset$auto(&(0x7f0000000000)={0x6, 0x400, 0x7}, 0x8, 0x0) bpf$auto(0x5, 0x0, 0x7) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb2, 0x403, 0x8000) landlock_restrict_self$auto(r0, 0x0) (fail_nth: 5) 415.257333ms ago: executing program 4 (id=284): prctl$auto_PR_SCHED_CORE_CREATE(0x8, 0x1, 0x0, 0x2, 0x3) setuid$auto(0xe) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ttyS0\x00', 0x541e82, 0x0) ioctl$auto(r0, 0x540b, 0x2) 13.833212ms ago: executing program 4 (id=285): mmap$auto(0x0, 0x4020006, 0x7f, 0xeb1, 0x401, 0x8000) r0 = socket(0x2, 0x2, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x23, 0x80805, 0x0) open(&(0x7f0000000840)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x22240, 0x0) io_uring_setup$auto(0x1, 0x0) socket(0x2, 0x3, 0xa) setsockopt$auto(r0, 0x1, 0x6, 0x0, 0xc089) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x5) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e22, @broadcast}, 0x55) write$auto(0x3, 0x0, 0xfdf3) mmap$auto(0x0, 0x4020006, 0x7f, 0xeb1, 0x401, 0x8000) (async) socket(0x2, 0x2, 0x0) (async) close_range$auto(0x0, 0xfffffffffffff000, 0x2) (async) socket(0x23, 0x80805, 0x0) (async) open(&(0x7f0000000840)='u[,&*}\x00\a\x00\x00\x00?\xa4\x1fN\xa1~5Z\xc7\r\f}M4\xa8m\xe6\x19[11\xab\xff-E\xac9(\xb4O\xa0t4h\x9f-gn\x1f\x01\x00\x00\x00\x00\x00\x00\x00\xaeR\x81\r_\x0e\x19\b\x85\bvv(e\xdax)\t\x15\xf6\xc8\xee\x04\x16\xc1\x9a!\x87I7\x8cD&zg\xb0a\xab|E\xde\x14\xee[\xc8\xc0\xa8Nh\x0f\xa3\xdbT\xb3\xb8\xd2F\xa0\xc4]\xaf\xc43&\xe4\x01\x05\xd2\x15\xf8\xf1!\x9d\x92\xbbH\xd3^aD\x87\xd8\xe7\xd2\xf3[r\xc5S&}D[\x97\xf1\xd9\xf8Y\x1c\x03\x84\xb4\xd7\x16\x19\xe5\x17\x10\xd8fcG:\xfbY8\x17w\x98?\x03@\xe5\x02\x05\x93h\xb9\xf7\xef\x84\x8aGlN\a\x1e\x00\x00\x00\x00\x00\x00\x00\xf1p\xeb\xe9(%\x89\xef\x85\xdfr\xce\x00\x00\x00\x00\xff\x00\xa2M\'d\x12\x1c\x12\xca\xa5_\x8d\xdf\xc5\x8d\x19?\xfc~\xb3X\x14\xa7\xa9M\x87\xfcTW\x1bR\xbci\x8d\x8aNEO\xb3~~\xa8\xa6\x894\x80;s\xb7\xa3V\x1b\x14|\x9e\xd4\x05\x85\x0f!\xab-E\'\x97Y\xb7\xe8fMv_\xf8\xa0S\xef\xb7\b\xe7!T.g\x92\x87\t$\x06\xa4\xfb\x83\x8c\x17^\x82\xe7\xd3\xf6q\x1a\xa0\xf82[W\x90\xdd\xe3\xde\xa9\xde\x94`-\x9a\x1e}\xebO*\xb85,v.\xfc5\xba?vlt\xda%\x06a\x15I\x1f\xe3\x05+\x810T2\xf9\x9b\xc7\xd1\t\x03\xf2\x8d\x8a\x90\xb54\bH<9\xf1\x91 D\x85g,\xaa\xca\xcd\xd5\xcb\x9a\xb1j\xf2F\xce\x14\x92\xf9\xd7\xec\xc5\x1e\x8aq2\xce\x881f\xd7\xd4\x9e\xf6\xb6P\x01\xe8T\xb5X\xb9d-I\xd6\x91\xc3\xe2\x88S\x82l=\x02t$p\t\x8cY\x06\r\x83\xb0\x86\xc6\x84\x1c\xce\xb6\xf0\xdfC\x9fj<\xfe\xa4\x1f\x82L\xe4\x13+H\x00\x00\x00\x00\x00\x00\x00\x01M\x16\xa0\xbeB6\xfb\xa2-\x17\x93Q\x9fKusl5\xa2$M\xb4\x18\x1db\xf3\xce\x8c\xe5Rna\xd5\xbbQ\xc7\xa7+\vH\xc1l\x1bIv\xe8_\x00', 0x22240, 0x0) (async) io_uring_setup$auto(0x1, 0x0) (async) socket(0x2, 0x3, 0xa) (async) setsockopt$auto(r0, 0x1, 0x6, 0x0, 0xc089) (async) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x5) (async) connect$auto(0x3, &(0x7f0000000000)=@in={0x2, 0x4e22, @broadcast}, 0x55) (async) write$auto(0x3, 0x0, 0xfdf3) (async) 0s ago: executing program 1 (id=286): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/devices/platform/dummy_udc.3/udc/dummy_udc.3/is_selfpowered\x00', 0x800, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000000)=""/45, 0x2d) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f00000005c0), 0x2000, 0x0) ioctl$auto_SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1, 0x0) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, r0, 0x8000) r2 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x402a42, 0x195) read$auto(r2, 0x0, 0x1) r3 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/thread-self/net/rpc/use-gss-proxy\x00', 0x48041, 0x0) write$auto(r3, 0x0, 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. [ 92.504322][ T5826] cgroup: Unknown subsys name 'net' [ 92.644490][ T5826] cgroup: Unknown subsys name 'cpuset' [ 92.654284][ T5826] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 94.549986][ T5826] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 97.130605][ T1207] cfg80211: failed to load regulatory.db [ 97.345189][ T5151] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.358101][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 97.366760][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 97.369962][ T5151] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.375839][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 97.382021][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.389392][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 97.400095][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 97.409070][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.410212][ T5151] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.417315][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 97.431903][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 97.432546][ T5151] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 97.442562][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.448552][ T5151] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 97.454290][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.461760][ T5151] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 97.470245][ T55] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.484416][ T55] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.492500][ T55] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.102845][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 98.182427][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 98.195394][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 98.395512][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 98.497406][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.505844][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.513497][ T5840] bridge_slave_0: entered allmulticast mode [ 98.521766][ T5840] bridge_slave_0: entered promiscuous mode [ 98.531249][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.538436][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.545802][ T5839] bridge_slave_0: entered allmulticast mode [ 98.553685][ T5839] bridge_slave_0: entered promiscuous mode [ 98.573955][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.581410][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.589509][ T5837] bridge_slave_0: entered allmulticast mode [ 98.596923][ T5837] bridge_slave_0: entered promiscuous mode [ 98.605463][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.612940][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.620971][ T5840] bridge_slave_1: entered allmulticast mode [ 98.628995][ T5840] bridge_slave_1: entered promiscuous mode [ 98.636292][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.643863][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.652104][ T5839] bridge_slave_1: entered allmulticast mode [ 98.659741][ T5839] bridge_slave_1: entered promiscuous mode [ 98.694480][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.701822][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.709145][ T5837] bridge_slave_1: entered allmulticast mode [ 98.716600][ T5837] bridge_slave_1: entered promiscuous mode [ 98.813864][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.843444][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.858359][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.874447][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.886869][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.913704][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.017871][ T5839] team0: Port device team_slave_0 added [ 99.028036][ T5839] team0: Port device team_slave_1 added [ 99.035309][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.044173][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.051780][ T5838] bridge_slave_0: entered allmulticast mode [ 99.059980][ T5838] bridge_slave_0: entered promiscuous mode [ 99.085637][ T5840] team0: Port device team_slave_0 added [ 99.107741][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.115131][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.123472][ T5838] bridge_slave_1: entered allmulticast mode [ 99.131035][ T5838] bridge_slave_1: entered promiscuous mode [ 99.141776][ T5837] team0: Port device team_slave_0 added [ 99.165326][ T5840] team0: Port device team_slave_1 added [ 99.201663][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.209241][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.235744][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.252527][ T5837] team0: Port device team_slave_1 added [ 99.259820][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.266806][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.293804][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.364197][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.379153][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.390302][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.397296][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.423836][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.452731][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.460633][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.487923][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.519939][ T5842] Bluetooth: hci3: command tx timeout [ 99.519944][ T5841] Bluetooth: hci2: command tx timeout [ 99.534889][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.543664][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.573056][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.593404][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.600716][ T5841] Bluetooth: hci0: command tx timeout [ 99.606885][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.633611][ T5841] Bluetooth: hci1: command tx timeout [ 99.635105][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.654191][ T5838] team0: Port device team_slave_0 added [ 99.664070][ T5838] team0: Port device team_slave_1 added [ 99.761511][ T5839] hsr_slave_0: entered promiscuous mode [ 99.768328][ T5839] hsr_slave_1: entered promiscuous mode [ 99.793792][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.801026][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.827646][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.846429][ T5840] hsr_slave_0: entered promiscuous mode [ 99.853299][ T5840] hsr_slave_1: entered promiscuous mode [ 99.860032][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.867992][ T5840] Cannot create hsr debugfs directory [ 99.889977][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.897164][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.924630][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.988522][ T5837] hsr_slave_0: entered promiscuous mode [ 99.996161][ T5837] hsr_slave_1: entered promiscuous mode [ 100.003579][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.011824][ T5837] Cannot create hsr debugfs directory [ 100.175969][ T5838] hsr_slave_0: entered promiscuous mode [ 100.183330][ T5838] hsr_slave_1: entered promiscuous mode [ 100.190603][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.198462][ T5838] Cannot create hsr debugfs directory [ 100.626306][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 100.655883][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 100.676503][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 100.690418][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 100.744035][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 100.764426][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 100.802217][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 100.827873][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 100.900268][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 100.927757][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 100.942645][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 100.974158][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 101.134495][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.152021][ T5838] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.166941][ T5838] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.179796][ T5838] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.194968][ T5838] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.247433][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.302513][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.310557][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.337842][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.345139][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.387972][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.472442][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.501240][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.508830][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.542524][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.549778][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.571232][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.600126][ T5841] Bluetooth: hci2: command tx timeout [ 101.602354][ T5842] Bluetooth: hci3: command tx timeout [ 101.652997][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.679259][ T5842] Bluetooth: hci1: command tx timeout [ 101.680501][ T5841] Bluetooth: hci0: command tx timeout [ 101.759712][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.776546][ T78] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.783822][ T78] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.803941][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.833038][ T5839] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.855527][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.862888][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.882744][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.890316][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.944409][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.951806][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.098397][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.283827][ T5837] veth0_vlan: entered promiscuous mode [ 102.320031][ T5837] veth1_vlan: entered promiscuous mode [ 102.415420][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.445365][ T5837] veth0_macvtap: entered promiscuous mode [ 102.502791][ T5837] veth1_macvtap: entered promiscuous mode [ 102.616250][ T5839] veth0_vlan: entered promiscuous mode [ 102.636756][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.662321][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.674166][ T5839] veth1_vlan: entered promiscuous mode [ 102.687031][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.718571][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.730582][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.740223][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.749160][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.776572][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.862452][ T5839] veth0_macvtap: entered promiscuous mode [ 102.908258][ T5838] veth0_vlan: entered promiscuous mode [ 102.931147][ T5839] veth1_macvtap: entered promiscuous mode [ 102.967772][ T5838] veth1_vlan: entered promiscuous mode [ 103.010281][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.031376][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.066609][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.082824][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.094861][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.103481][ T5840] veth0_vlan: entered promiscuous mode [ 103.141250][ T5840] veth1_vlan: entered promiscuous mode [ 103.151875][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.163552][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.178131][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.191055][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.191149][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.211136][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.221391][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.221945][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.230977][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.341286][ T5838] veth0_macvtap: entered promiscuous mode [ 103.367638][ T5838] veth1_macvtap: entered promiscuous mode [ 103.405698][ T5840] veth0_macvtap: entered promiscuous mode [ 103.443667][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.478428][ T5840] veth1_macvtap: entered promiscuous mode [ 103.511791][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.523691][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.534188][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.544864][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.559495][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.593597][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.618994][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.649087][ T5838] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 103.669078][ T5838] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.679449][ T5841] Bluetooth: hci2: command tx timeout [ 103.679539][ T5841] Bluetooth: hci3: command tx timeout [ 103.695192][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.711276][ T2956] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.727648][ T2956] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.759167][ T5842] Bluetooth: hci0: command tx timeout [ 103.759756][ T5841] Bluetooth: hci1: command tx timeout [ 103.794347][ T5838] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.806948][ T5838] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.818047][ T5838] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.828314][ T5838] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.852381][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.866534][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.877113][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.889043][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.900297][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 103.911267][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 103.923456][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.963858][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.973714][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.016916][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.032234][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.042806][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.056263][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.072044][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.089079][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.102616][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.115141][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.124233][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.133324][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.146041][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.417794][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.446411][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.732042][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.747200][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.867298][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.877665][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.107451][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.126774][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.169721][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 105.231062][ T5917] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 105.318208][ T5917] Zero length message leads to an empty skb [ 105.760214][ T5841] Bluetooth: hci3: command tx timeout [ 105.760271][ T5842] Bluetooth: hci2: command tx timeout [ 105.839715][ T5842] Bluetooth: hci1: command tx timeout [ 105.839724][ T5841] Bluetooth: hci0: command tx timeout [ 105.869272][ T5930] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 105.908999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.060528][ T5842] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 106.255162][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.271854][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 106.640715][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 108.423980][ T5842] Bluetooth: hci0: unexpected event 0x1d length: 6 > 5 [ 108.460008][ T5842] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 109.438243][ T5960] perf: Dynamic interrupt throttling disabled, can hang your system! [ 109.525757][ T5960] netlink: 4 bytes leftover after parsing attributes in process `syz.1.12'. [ 109.627943][ T5956] zswap: compressor not available [ 109.659380][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.730390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 109.739294][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 110.765446][ T5842] Bluetooth: hci2: unexpected event 0x1d length: 6 > 5 [ 110.768855][ T5974] netlink: 326 bytes leftover after parsing attributes in process `syz.0.15'. [ 112.019510][ T5981] process 'syz.0.16' launched '/dev/fd/8' with NULL argv: empty string added [ 112.681436][ T5988] netlink: 'syz.3.17': attribute type 11 has an invalid length. [ 112.698749][ T5988] netlink: 112 bytes leftover after parsing attributes in process `syz.3.17'. [ 114.571208][ T5967] kexec: Could not allocate control_code_buffer [ 114.792390][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.908964][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 114.918366][ T0] NOHZ tick-stop error: local softirq work is pending, handler #240!!! [ 116.475836][ T5842] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 117.079314][ T6040] netlink: 186 bytes leftover after parsing attributes in process `syz.0.25'. [ 117.260199][ T6035] sp0: Synchronizing with TNC [ 119.429421][ T5842] Bluetooth: hci3: unexpected event 0x1d length: 6 > 5 [ 123.078862][ T5842] Bluetooth: hci1: unexpected event 0x1d length: 6 > 5 [ 125.016259][ T6114] FAULT_INJECTION: forcing a failure. [ 125.016259][ T6114] name failslab, interval 1, probability 0, space 0, times 1 [ 125.036110][ T6114] CPU: 1 UID: 0 PID: 6114 Comm: syz.0.41 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 125.036148][ T6114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 125.036170][ T6114] Call Trace: [ 125.036180][ T6114] [ 125.036196][ T6114] dump_stack_lvl+0x16c/0x1f0 [ 125.036248][ T6114] should_fail_ex+0x512/0x640 [ 125.036286][ T6114] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 125.036330][ T6114] should_failslab+0xc2/0x120 [ 125.036373][ T6114] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 125.036413][ T6114] ? mas_alloc_nodes+0x18b/0x8b0 [ 125.036460][ T6114] mas_alloc_nodes+0x18b/0x8b0 [ 125.036509][ T6114] mas_node_count_gfp+0x105/0x130 [ 125.036555][ T6114] mas_preallocate+0x53e/0xcd0 [ 125.036593][ T6114] ? __pfx_mas_preallocate+0x10/0x10 [ 125.036634][ T6114] ? vm_area_alloc+0x1f/0x160 [ 125.036676][ T6114] ? lockdep_init_map_type+0x5c/0x280 [ 125.036737][ T6114] __mmap_region+0x139b/0x27c0 [ 125.036782][ T6114] ? __pfx___mmap_region+0x10/0x10 [ 125.036819][ T6114] ? bpf_ksym_find+0x124/0x1c0 [ 125.036881][ T6114] ? lockdep_unlock+0x64/0xe0 [ 125.036958][ T6114] ? trace_cap_capable+0x18d/0x200 [ 125.036996][ T6114] ? cap_capable+0xb3/0x250 [ 125.037035][ T6114] mmap_region+0x1ab/0x3f0 [ 125.037082][ T6114] do_mmap+0xd8e/0x11b0 [ 125.037140][ T6114] ? __pfx_do_mmap+0x10/0x10 [ 125.037190][ T6114] ? __pfx_down_write_killable+0x10/0x10 [ 125.037250][ T6114] vm_mmap_pgoff+0x281/0x450 [ 125.037306][ T6114] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 125.037362][ T6114] ? __fget_files+0x20e/0x3c0 [ 125.037399][ T6114] ksys_mmap_pgoff+0x32c/0x5c0 [ 125.037443][ T6114] ? __pfx_ksys_write+0x10/0x10 [ 125.037474][ T6114] ? rcu_is_watching+0x12/0xc0 [ 125.037511][ T6114] __x64_sys_mmap+0x125/0x190 [ 125.037551][ T6114] do_syscall_64+0xcd/0x230 [ 125.037601][ T6114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.037632][ T6114] RIP: 0033:0x7fc29d38e169 [ 125.037664][ T6114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 125.037695][ T6114] RSP: 002b:00007fc29e115038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 125.037735][ T6114] RAX: ffffffffffffffda RBX: 00007fc29d5b5fa0 RCX: 00007fc29d38e169 [ 125.037755][ T6114] RDX: 0000000000009cad RSI: 0000000000000009 RDI: 0000000000000000 [ 125.037772][ T6114] RBP: 00007fc29e115090 R08: 0000000000000003 R09: 0000000000008000 [ 125.037790][ T6114] R10: 0000000000008012 R11: 0000000000000246 R12: 0000000000000001 [ 125.037807][ T6114] R13: 0000000000000000 R14: 00007fc29d5b5fa0 R15: 00007ffc3cc53298 [ 125.037846][ T6114] [ 125.483073][ T6112] netlink: 186 bytes leftover after parsing attributes in process `syz.3.40'. [ 129.043325][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022bd6400: rx timeout, send abort [ 129.052825][ C0] vcan0: j1939_tp_rxtimer: 0xffff888022bd6800: rx timeout, send abort [ 129.061728][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888022bd6400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 129.076987][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff888022bd6800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 129.790462][ T6165] FAULT_INJECTION: forcing a failure. [ 129.790462][ T6165] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 129.839296][ T6165] CPU: 0 UID: 0 PID: 6165 Comm: syz.2.54 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 129.839342][ T6165] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 129.839360][ T6165] Call Trace: [ 129.839370][ T6165] [ 129.839381][ T6165] dump_stack_lvl+0x16c/0x1f0 [ 129.839431][ T6165] should_fail_ex+0x512/0x640 [ 129.839479][ T6165] _copy_from_user+0x2e/0xd0 [ 129.839523][ T6165] old_deviceless+0x193/0x700 [ 129.839563][ T6165] ? __pfx___mutex_lock+0x10/0x10 [ 129.839610][ T6165] ? __pfx_old_deviceless+0x10/0x10 [ 129.839654][ T6165] ? __pfx___might_resched+0x10/0x10 [ 129.839706][ T6165] br_ioctl_stub+0x3e8/0x4c0 [ 129.839741][ T6165] ? br_ioctl_call+0x34/0xa0 [ 129.839773][ T6165] ? __pfx_br_ioctl_stub+0x10/0x10 [ 129.839810][ T6165] ? __pfx___mutex_lock+0x10/0x10 [ 129.839880][ T6165] ? __pfx_br_ioctl_stub+0x10/0x10 [ 129.839920][ T6165] br_ioctl_call+0x50/0xa0 [ 129.839953][ T6165] sock_ioctl+0x365/0x6b0 [ 129.839985][ T6165] ? __pfx_sock_ioctl+0x10/0x10 [ 129.840013][ T6165] ? hook_file_ioctl_common+0x145/0x410 [ 129.840069][ T6165] ? __pfx_sock_ioctl+0x10/0x10 [ 129.840102][ T6165] __x64_sys_ioctl+0x190/0x200 [ 129.840151][ T6165] do_syscall_64+0xcd/0x230 [ 129.840209][ T6165] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 129.840241][ T6165] RIP: 0033:0x7f0a3398e169 [ 129.840265][ T6165] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 129.840294][ T6165] RSP: 002b:00007f0a34779038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 129.840322][ T6165] RAX: ffffffffffffffda RBX: 00007f0a33bb5fa0 RCX: 00007f0a3398e169 [ 129.840341][ T6165] RDX: 0000000000000004 RSI: 0000000000008941 RDI: 0000000000000000 [ 129.840358][ T6165] RBP: 00007f0a34779090 R08: 0000000000000000 R09: 0000000000000000 [ 129.840376][ T6165] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 129.840392][ T6165] R13: 0000000000000000 R14: 00007f0a33bb5fa0 R15: 00007ffd8b659aa8 [ 129.840432][ T6165] [ 130.398507][ T6167] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(4) [ 130.827124][ T6170] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 133.128072][ T6211] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 133.970767][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.72'. [ 134.472266][ T6237] Invalid ELF header magic: != ELF [ 135.719310][ T6260] syz.1.80 uses obsolete (PF_INET,SOCK_PACKET) [ 135.875140][ T6262] netlink: 'syz.3.81': attribute type 11 has an invalid length. [ 135.905325][ T6264] IPVS: length: 150994944 != 15703474184 [ 136.067961][ T6269] netlink: 330 bytes leftover after parsing attributes in process `syz.0.82'. [ 136.983326][ T30] audit: type=1326 audit(4294967303.430:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6285 comm="syz.1.87" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff70cb8e169 code=0x0 [ 137.205517][ T6287] netlink: 342 bytes leftover after parsing attributes in process `syz.1.87'. [ 137.283133][ T6287] netlink: 274 bytes leftover after parsing attributes in process `syz.1.87'. [ 138.086851][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 138.096319][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 138.920002][ T6322] mmap: syz.2.94 (6322) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 140.745028][ T6351] FAULT_INJECTION: forcing a failure. [ 140.745028][ T6351] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.826056][ T6351] CPU: 1 UID: 0 PID: 6351 Comm: syz.0.104 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 140.826102][ T6351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 140.826121][ T6351] Call Trace: [ 140.826130][ T6351] [ 140.826142][ T6351] dump_stack_lvl+0x16c/0x1f0 [ 140.826211][ T6351] should_fail_ex+0x512/0x640 [ 140.826255][ T6351] strncpy_from_user+0x3b/0x2e0 [ 140.826293][ T6351] getname_flags.part.0+0x8f/0x550 [ 140.826344][ T6351] getname_flags+0x93/0xf0 [ 140.826375][ T6351] do_sys_openat2+0xb8/0x1d0 [ 140.826421][ T6351] ? __pfx_do_sys_openat2+0x10/0x10 [ 140.826482][ T6351] __x64_sys_openat+0x174/0x210 [ 140.826530][ T6351] ? __pfx___x64_sys_openat+0x10/0x10 [ 140.826580][ T6351] ? rcu_is_watching+0x12/0xc0 [ 140.826624][ T6351] do_syscall_64+0xcd/0x230 [ 140.826675][ T6351] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.826708][ T6351] RIP: 0033:0x7fc29d38e169 [ 140.826733][ T6351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.826764][ T6351] RSP: 002b:00007fc29e115038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 140.826794][ T6351] RAX: ffffffffffffffda RBX: 00007fc29d5b5fa0 RCX: 00007fc29d38e169 [ 140.826814][ T6351] RDX: 0000000000000000 RSI: 0000200000000140 RDI: ffffffffffffff9c [ 140.826833][ T6351] RBP: 00007fc29d410a68 R08: 0000000000000000 R09: 0000000000000000 [ 140.826851][ T6351] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 140.826868][ T6351] R13: 0000000000000000 R14: 00007fc29d5b5fa0 R15: 00007ffc3cc53298 [ 140.826907][ T6351] [ 141.049399][ T6349] device-mapper: ioctl: ioctl interface mismatch: kernel(4.49.0), user(0.0.0), cmd(7) [ 141.250820][ T6357] netlink: 4 bytes leftover after parsing attributes in process `syz.0.106'. [ 141.283557][ T6357] netlink: 354 bytes leftover after parsing attributes in process `syz.0.106'. [ 142.715161][ T6380] FAULT_INJECTION: forcing a failure. [ 142.715161][ T6380] name failslab, interval 1, probability 0, space 0, times 0 [ 142.764398][ T6380] CPU: 1 UID: 0 PID: 6380 Comm: syz.2.113 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 142.764444][ T6380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.764461][ T6380] Call Trace: [ 142.764472][ T6380] [ 142.764483][ T6380] dump_stack_lvl+0x16c/0x1f0 [ 142.764539][ T6380] should_fail_ex+0x512/0x640 [ 142.764575][ T6380] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 142.764613][ T6380] should_failslab+0xc2/0x120 [ 142.764655][ T6380] __kmalloc_cache_noprof+0x6a/0x3e0 [ 142.764690][ T6380] ? getname_flags.part.0+0x292/0x550 [ 142.764741][ T6380] getname_flags.part.0+0x292/0x550 [ 142.764791][ T6380] getname_flags+0x93/0xf0 [ 142.764822][ T6380] user_path_at+0x24/0x60 [ 142.764855][ T6380] vfs_open_tree+0x2ca/0x910 [ 142.764891][ T6380] ? __pfx_vfs_open_tree+0x10/0x10 [ 142.764927][ T6380] ? __pfx_ksys_write+0x10/0x10 [ 142.764958][ T6380] ? rcu_is_watching+0x12/0xc0 [ 142.764997][ T6380] __x64_sys_open_tree+0x84/0x130 [ 142.765035][ T6380] do_syscall_64+0xcd/0x230 [ 142.765085][ T6380] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.765117][ T6380] RIP: 0033:0x7f0a3398e169 [ 142.765142][ T6380] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.765171][ T6380] RSP: 002b:00007f0a34779038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 142.765200][ T6380] RAX: ffffffffffffffda RBX: 00007f0a33bb5fa0 RCX: 00007f0a3398e169 [ 142.765227][ T6380] RDX: 0000000000001001 RSI: 0000000000000000 RDI: 0000000000000004 [ 142.765244][ T6380] RBP: 00007f0a34779090 R08: 0000000000000000 R09: 0000000000000000 [ 142.765262][ T6380] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.765279][ T6380] R13: 0000000000000000 R14: 00007f0a33bb5fa0 R15: 00007ffd8b659aa8 [ 142.765318][ T6380] [ 142.809833][ T6357] x86/mm: Checked W+X mappings: passed, no W+X pages found. [ 142.850407][ T6381] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 142.992219][ T6381] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 143.545333][ T5842] Bluetooth: hci2: unexpected event 0x23 length: 127 > 13 [ 143.700331][ T6381] syz.3.112 (6381) used greatest stack depth: 20712 bytes left [ 145.372121][ T6426] netlink: 4 bytes leftover after parsing attributes in process `syz.0.127'. [ 145.629523][ T6431] netlink: 'syz.0.128': attribute type 10 has an invalid length. [ 145.657167][ T6431] netlink: 230 bytes leftover after parsing attributes in process `syz.0.128'. [ 145.757601][ T6431] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 145.934777][ T6428] ptrace attach of "./syz-executor exec"[5839] was attempted by "./syz-executor exec"[6428] [ 146.244177][ T6446] netlink: 'syz.0.130': attribute type 11 has an invalid length. [ 147.243162][ T6453] nfs4: Unknown parameter 'nfsd' [ 147.289740][ T6455] i2c i2c-0: new_device: Missing parameters [ 148.714708][ T6476] FAULT_INJECTION: forcing a failure. [ 148.714708][ T6476] name failslab, interval 1, probability 0, space 0, times 0 [ 148.779899][ T6476] CPU: 0 UID: 0 PID: 6476 Comm: syz.2.140 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 148.779944][ T6476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.779962][ T6476] Call Trace: [ 148.779973][ T6476] [ 148.779984][ T6476] dump_stack_lvl+0x16c/0x1f0 [ 148.780035][ T6476] should_fail_ex+0x512/0x640 [ 148.780072][ T6476] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 148.780115][ T6476] should_failslab+0xc2/0x120 [ 148.780156][ T6476] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 148.780195][ T6476] ? __pmd_alloc+0xc3/0x870 [ 148.780250][ T6476] __pmd_alloc+0xc3/0x870 [ 148.780297][ T6476] ? find_held_lock+0x2b/0x80 [ 148.780332][ T6476] __handle_mm_fault+0x948/0x2a40 [ 148.780386][ T6476] ? __pfx___handle_mm_fault+0x10/0x10 [ 148.780445][ T6476] ? find_vma+0xbf/0x140 [ 148.780488][ T6476] ? __pfx_find_vma+0x10/0x10 [ 148.780531][ T6476] ? get_pid_task+0xfc/0x250 [ 148.780580][ T6476] handle_mm_fault+0x3fe/0xad0 [ 148.780620][ T6476] do_user_addr_fault+0x7a6/0x1370 [ 148.780660][ T6476] ? rcu_is_watching+0x12/0xc0 [ 148.780695][ T6476] exc_page_fault+0x5c/0xc0 [ 148.780737][ T6476] asm_exc_page_fault+0x26/0x30 [ 148.780767][ T6476] RIP: 0010:rep_movs_alternative+0x30/0x90 [ 148.780802][ T6476] Code: 83 f9 08 73 25 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 66 2e 0f 1f 84 00 00 00 00 00 66 90 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 db 83 f9 08 [ 148.780831][ T6476] RSP: 0018:ffffc9000fa77e10 EFLAGS: 00050216 [ 148.780857][ T6476] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000030 [ 148.780874][ T6476] RDX: fffff52001f4efd6 RSI: 0000000000000000 RDI: ffffc9000fa77e80 [ 148.780893][ T6476] RBP: 0000000000000030 R08: 0000000000000001 R09: fffff52001f4efd5 [ 148.780910][ T6476] R10: ffffc9000fa77eaf R11: 0000000000000000 R12: 0000000000000000 [ 148.780932][ T6476] R13: ffffc9000fa77e80 R14: 0000000000000001 R15: 0000000000000001 [ 148.780973][ T6476] _copy_from_user+0x98/0xd0 [ 148.781017][ T6476] __x64_sys_rt_sigqueueinfo+0xff/0x260 [ 148.781069][ T6476] ? __pfx___x64_sys_rt_sigqueueinfo+0x10/0x10 [ 148.781116][ T6476] ? fput+0x70/0xf0 [ 148.781173][ T6476] do_syscall_64+0xcd/0x230 [ 148.781221][ T6476] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.781252][ T6476] RIP: 0033:0x7f0a3398e169 [ 148.781276][ T6476] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.781304][ T6476] RSP: 002b:00007f0a34779038 EFLAGS: 00000246 ORIG_RAX: 0000000000000081 [ 148.781331][ T6476] RAX: ffffffffffffffda RBX: 00007f0a33bb5fa0 RCX: 00007f0a3398e169 [ 148.781351][ T6476] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000096 [ 148.781368][ T6476] RBP: 00007f0a34779090 R08: 0000000000000000 R09: 0000000000000000 [ 148.781393][ T6476] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.781411][ T6476] R13: 0000000000000000 R14: 00007f0a33bb5fa0 R15: 00007ffd8b659aa8 [ 148.781451][ T6476] [ 149.603284][ T6482] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 149.648960][ T6482] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 149.858296][ T6482] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 149.976206][ T6482] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 150.003447][ T6482] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 150.159893][ T6482] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 150.259408][ T6482] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 150.339050][ T6482] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 150.406009][ T6482] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 150.859927][ T6513] FAULT_INJECTION: forcing a failure. [ 150.859927][ T6513] name failslab, interval 1, probability 0, space 0, times 0 [ 150.872889][ T6513] CPU: 0 UID: 0 PID: 6513 Comm: syz.3.147 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 150.872928][ T6513] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.872945][ T6513] Call Trace: [ 150.872955][ T6513] [ 150.872966][ T6513] dump_stack_lvl+0x16c/0x1f0 [ 150.873014][ T6513] should_fail_ex+0x512/0x640 [ 150.873057][ T6513] should_failslab+0xc2/0x120 [ 150.873099][ T6513] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 150.873140][ T6513] ? radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 150.873195][ T6513] radix_tree_node_alloc.constprop.0+0x7c/0x350 [ 150.873241][ T6513] idr_get_free+0x528/0xa30 [ 150.873296][ T6513] idr_alloc_u32+0x190/0x2f0 [ 150.873338][ T6513] ? __pfx_idr_alloc_u32+0x10/0x10 [ 150.873376][ T6513] ? do_raw_spin_lock+0x12c/0x2b0 [ 150.873407][ T6513] ? net_generic+0xea/0x2a0 [ 150.873446][ T6513] l2tp_tunnel_register+0xf8/0xbe0 [ 150.873487][ T6513] ? __pfx___debug_object_init+0x10/0x10 [ 150.873533][ T6513] ? sprintf+0xcc/0x100 [ 150.873573][ T6513] ? __pfx_l2tp_tunnel_register+0x10/0x10 [ 150.873620][ T6513] ? lockdep_init_map_type+0x5c/0x280 [ 150.873664][ T6513] ? lockdep_init_map_type+0x5c/0x280 [ 150.873707][ T6513] ? l2tp_tunnel_create+0x2cf/0x460 [ 150.873739][ T6513] ? l2tp_tunnel_create+0x37d/0x460 [ 150.873777][ T6513] pppol2tp_tunnel_get.constprop.0+0x3f0/0x540 [ 150.873826][ T6513] ? __pfx_pppol2tp_tunnel_get.constprop.0+0x10/0x10 [ 150.873895][ T6513] pppol2tp_connect+0xb1b/0x1ce0 [ 150.873935][ T6513] ? __pfx___might_resched+0x10/0x10 [ 150.873973][ T6513] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 150.874020][ T6513] ? __pfx_pppol2tp_connect+0x10/0x10 [ 150.874059][ T6513] ? aa_sk_perm+0x200/0xb10 [ 150.874102][ T6513] ? __pfx_aa_sk_perm+0x10/0x10 [ 150.874154][ T6513] ? __pfx_pppol2tp_connect+0x10/0x10 [ 150.874204][ T6513] __sys_connect_file+0x13e/0x1a0 [ 150.874244][ T6513] __sys_connect+0x14d/0x170 [ 150.874279][ T6513] ? __pfx___sys_connect+0x10/0x10 [ 150.874329][ T6513] ? __pfx_ksys_write+0x10/0x10 [ 150.874358][ T6513] ? rcu_is_watching+0x12/0xc0 [ 150.874396][ T6513] __x64_sys_connect+0x72/0xb0 [ 150.874430][ T6513] ? lockdep_hardirqs_on+0x7c/0x110 [ 150.874471][ T6513] do_syscall_64+0xcd/0x230 [ 150.874519][ T6513] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.874548][ T6513] RIP: 0033:0x7f2f3a18e169 [ 150.874571][ T6513] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.874598][ T6513] RSP: 002b:00007f2f37ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 150.874626][ T6513] RAX: ffffffffffffffda RBX: 00007f2f3a3b5fa0 RCX: 00007f2f3a18e169 [ 150.874646][ T6513] RDX: 000000000000003a RSI: 0000200000000000 RDI: 0000000000000001 [ 150.874664][ T6513] RBP: 00007f2f37ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 150.874664][ T6514] FAULT_INJECTION: forcing a failure. [ 150.874664][ T6514] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 150.874682][ T6513] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.874699][ T6513] R13: 0000000000000000 R14: 00007f2f3a3b5fa0 R15: 00007fff42e2e0d8 [ 150.874736][ T6513] [ 151.198895][ T6514] CPU: 0 UID: 0 PID: 6514 Comm: syz.1.146 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 151.198939][ T6514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 151.198956][ T6514] Call Trace: [ 151.198966][ T6514] [ 151.198978][ T6514] dump_stack_lvl+0x16c/0x1f0 [ 151.199027][ T6514] should_fail_ex+0x512/0x640 [ 151.199088][ T6514] _copy_to_user+0x32/0xd0 [ 151.199131][ T6514] simple_read_from_buffer+0xcb/0x170 [ 151.199184][ T6514] proc_fail_nth_read+0x197/0x270 [ 151.199233][ T6514] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.199282][ T6514] ? rw_verify_area+0xcf/0x680 [ 151.199331][ T6514] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 151.199379][ T6514] vfs_read+0x1de/0xc70 [ 151.199417][ T6514] ? __pfx___mutex_lock+0x10/0x10 [ 151.199463][ T6514] ? __pfx_vfs_read+0x10/0x10 [ 151.199505][ T6514] ? __fget_files+0x20e/0x3c0 [ 151.199546][ T6514] ksys_read+0x12a/0x240 [ 151.199578][ T6514] ? __pfx_ksys_read+0x10/0x10 [ 151.199623][ T6514] do_syscall_64+0xcd/0x230 [ 151.199671][ T6514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.199702][ T6514] RIP: 0033:0x7ff70cb8cb7c [ 151.199726][ T6514] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 151.199755][ T6514] RSP: 002b:00007ff70dacf030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 151.199783][ T6514] RAX: ffffffffffffffda RBX: 00007ff70cdb5fa0 RCX: 00007ff70cb8cb7c [ 151.199802][ T6514] RDX: 000000000000000f RSI: 00007ff70dacf0a0 RDI: 0000000000000004 [ 151.199819][ T6514] RBP: 00007ff70dacf090 R08: 0000000000000000 R09: 0000000000000000 [ 151.199836][ T6514] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 151.199853][ T6514] R13: 0000000000000000 R14: 00007ff70cdb5fa0 R15: 00007ffd66edf148 [ 151.199892][ T6514] [ 151.486258][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 152.008714][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 152.318807][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 153.519582][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 153.625210][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.666383][ T78] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.677486][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.688231][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.696735][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.704804][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 154.079031][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 154.235849][ T78] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.398716][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 154.706307][ T78] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.005085][ T78] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.443869][ T6564] chnl_net:caif_netlink_parms(): no params data found [ 155.605897][ T5842] Bluetooth: hci1: command 0x0c1a tx timeout [ 155.724664][ T78] bridge_slave_1: left allmulticast mode [ 155.738837][ T78] bridge_slave_1: left promiscuous mode [ 155.745710][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.763393][ T5842] Bluetooth: hci0: command tx timeout [ 155.803107][ T78] bridge_slave_0: left allmulticast mode [ 155.809011][ T78] bridge_slave_0: left promiscuous mode [ 155.815126][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.163837][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 156.385495][ T6582] FAULT_INJECTION: forcing a failure. [ 156.385495][ T6582] name failslab, interval 1, probability 0, space 0, times 0 [ 156.425863][ T6582] CPU: 0 UID: 0 PID: 6582 Comm: syz.2.160 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 156.425907][ T6582] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.425925][ T6582] Call Trace: [ 156.425935][ T6582] [ 156.425947][ T6582] dump_stack_lvl+0x16c/0x1f0 [ 156.425998][ T6582] should_fail_ex+0x512/0x640 [ 156.426035][ T6582] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 156.426078][ T6582] should_failslab+0xc2/0x120 [ 156.426121][ T6582] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 156.426160][ T6582] ? mas_alloc_nodes+0x18b/0x8b0 [ 156.426215][ T6582] mas_alloc_nodes+0x18b/0x8b0 [ 156.426264][ T6582] mas_node_count_gfp+0x105/0x130 [ 156.426306][ T6582] mas_preallocate+0x53e/0xcd0 [ 156.426344][ T6582] ? __pfx_mas_preallocate+0x10/0x10 [ 156.426384][ T6582] ? vm_area_alloc+0x1f/0x160 [ 156.426450][ T6582] ? lockdep_init_map_type+0x5c/0x280 [ 156.426501][ T6582] __mmap_region+0x139b/0x27c0 [ 156.426545][ T6582] ? __pfx___mmap_region+0x10/0x10 [ 156.426582][ T6582] ? bpf_ksym_find+0x124/0x1c0 [ 156.426622][ T6582] ? __kernel_text_address+0xd/0x40 [ 156.426653][ T6582] ? unwind_get_return_address+0x59/0xa0 [ 156.426756][ T6582] ? trace_cap_capable+0x18d/0x200 [ 156.426804][ T6582] ? cap_capable+0xb3/0x250 [ 156.426843][ T6582] mmap_region+0x32b/0x3f0 [ 156.426894][ T6582] do_mmap+0xd8e/0x11b0 [ 156.426952][ T6582] ? __pfx_do_mmap+0x10/0x10 [ 156.427002][ T6582] ? __pfx_down_write_killable+0x10/0x10 [ 156.427061][ T6582] vm_mmap_pgoff+0x281/0x450 [ 156.427119][ T6582] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 156.427177][ T6582] ? __fget_files+0x20e/0x3c0 [ 156.427215][ T6582] ksys_mmap_pgoff+0x32c/0x5c0 [ 156.427263][ T6582] ? __pfx_ksys_write+0x10/0x10 [ 156.427294][ T6582] ? rcu_is_watching+0x12/0xc0 [ 156.427330][ T6582] __x64_sys_mmap+0x125/0x190 [ 156.427370][ T6582] do_syscall_64+0xcd/0x230 [ 156.427420][ T6582] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.427451][ T6582] RIP: 0033:0x7f0a3398e169 [ 156.427484][ T6582] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.427513][ T6582] RSP: 002b:00007f0a34779038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 156.427541][ T6582] RAX: ffffffffffffffda RBX: 00007f0a33bb5fa0 RCX: 00007f0a3398e169 [ 156.427560][ T6582] RDX: 0000000000000ffb RSI: 0000000000810004 RDI: 0000000000000000 [ 156.427577][ T6582] RBP: 00007f0a34779090 R08: 0000000000000003 R09: 0000000000008000 [ 156.427594][ T6582] R10: 0008000000008011 R11: 0000000000000246 R12: 0000000000000001 [ 156.427611][ T6582] R13: 0000000000000000 R14: 00007f0a33bb5fa0 R15: 00007ffd8b659aa8 [ 156.427650][ T6582] [ 156.700015][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 157.060409][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.085841][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.130722][ T78] bond0 (unregistering): Released all slaves [ 157.177339][ T6573] bridge0: port 3(team0) entered blocking state [ 157.206449][ T6573] bridge0: port 3(team0) entered disabled state [ 157.214996][ T6573] team0: entered allmulticast mode [ 157.220971][ T6573] team_slave_0: entered allmulticast mode [ 157.226833][ T6573] team_slave_1: entered allmulticast mode [ 157.249683][ T6573] team0: entered promiscuous mode [ 157.258838][ T6573] team_slave_0: entered promiscuous mode [ 157.264980][ T6573] team_slave_1: entered promiscuous mode [ 157.272364][ T6573] bridge0: port 3(team0) entered blocking state [ 157.279029][ T6573] bridge0: port 3(team0) entered forwarding state [ 157.420596][ T6591] netlink: 4 bytes leftover after parsing attributes in process `syz.2.161'. [ 157.455121][ T6591] netlink: 25 bytes leftover after parsing attributes in process `syz.2.161'. [ 157.839795][ T5842] Bluetooth: hci0: command tx timeout [ 157.862316][ T6600] FAULT_INJECTION: forcing a failure. [ 157.862316][ T6600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 157.979054][ T6600] CPU: 1 UID: 0 PID: 6600 Comm: syz.3.163 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 157.979098][ T6600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 157.979115][ T6600] Call Trace: [ 157.979125][ T6600] [ 157.979137][ T6600] dump_stack_lvl+0x16c/0x1f0 [ 157.979186][ T6600] should_fail_ex+0x512/0x640 [ 157.979229][ T6600] _copy_to_iter+0x477/0x15a0 [ 157.979279][ T6600] ? __pfx__copy_to_iter+0x10/0x10 [ 157.979321][ T6600] ? c_show+0x115/0x300 [ 157.979356][ T6600] ? find_held_lock+0x2b/0x80 [ 157.979391][ T6600] ? cache_seq_stop_rcu+0x31/0xb0 [ 157.979428][ T6600] ? cache_seq_next_rcu+0xad/0x280 [ 157.979469][ T6600] seq_read_iter+0xcf8/0x12c0 [ 157.979542][ T6600] seq_read+0x39e/0x4e0 [ 157.979590][ T6600] ? __pfx_seq_read+0x10/0x10 [ 157.979646][ T6600] ? get_pid_task+0xfc/0x250 [ 157.979709][ T6600] ? __pfx_seq_read+0x10/0x10 [ 157.979763][ T6600] proc_reg_read+0x23d/0x330 [ 157.979797][ T6600] ? __pfx_proc_reg_read+0x10/0x10 [ 157.979835][ T6600] vfs_read+0x1de/0xc70 [ 157.979875][ T6600] ? __pfx___mutex_lock+0x10/0x10 [ 157.979921][ T6600] ? __pfx_vfs_read+0x10/0x10 [ 157.979966][ T6600] ? __fget_files+0x20e/0x3c0 [ 157.980008][ T6600] ksys_read+0x12a/0x240 [ 157.980050][ T6600] ? __pfx_ksys_read+0x10/0x10 [ 157.980085][ T6600] ? rcu_is_watching+0x12/0xc0 [ 157.980130][ T6600] do_syscall_64+0xcd/0x230 [ 157.980179][ T6600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 157.980212][ T6600] RIP: 0033:0x7f2f3a18e169 [ 157.980236][ T6600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 157.980266][ T6600] RSP: 002b:00007f2f37ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 157.980294][ T6600] RAX: ffffffffffffffda RBX: 00007f2f3a3b5fa0 RCX: 00007f2f3a18e169 [ 157.980314][ T6600] RDX: 00000000000000f4 RSI: 0000200000001080 RDI: 0000000000000003 [ 157.980332][ T6600] RBP: 00007f2f37ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 157.980350][ T6600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 157.980367][ T6600] R13: 0000000000000000 R14: 00007f2f3a3b5fa0 R15: 00007fff42e2e0d8 [ 157.980407][ T6600] [ 158.359164][ T6564] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.411343][ T6564] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.484460][ T6564] bridge_slave_0: entered allmulticast mode [ 158.549065][ T6564] bridge_slave_0: entered promiscuous mode [ 158.566781][ T6564] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.579882][ T6564] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.587160][ T6564] bridge_slave_1: entered allmulticast mode [ 158.610855][ T6564] bridge_slave_1: entered promiscuous mode [ 159.110413][ T6564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.127176][ T6618] netlink: 28 bytes leftover after parsing attributes in process `syz.1.165'. [ 159.132728][ T6564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.322186][ T6618] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 159.447874][ T6564] team0: Port device team_slave_0 added [ 159.539387][ T6564] team0: Port device team_slave_1 added [ 159.680608][ T78] hsr_slave_0: left promiscuous mode [ 159.700960][ T78] hsr_slave_1: left promiscuous mode [ 159.707258][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.728990][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.748011][ T78] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.755879][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.807048][ T78] veth1_macvtap: left promiscuous mode [ 159.828939][ T78] veth0_macvtap: left promiscuous mode [ 159.835089][ T78] veth1_vlan: left promiscuous mode [ 159.848903][ T78] veth0_vlan: left promiscuous mode [ 159.919097][ T5842] Bluetooth: hci0: command tx timeout [ 160.846644][ T78] team0 (unregistering): Port device team_slave_1 removed [ 160.895214][ T78] team0 (unregistering): Port device team_slave_0 removed [ 161.390734][ T6564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.398052][ T6564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.426637][ T6564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.477461][ T6564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.485384][ T6564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.513912][ T6564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.781287][ T6564] hsr_slave_0: entered promiscuous mode [ 161.788394][ T6564] hsr_slave_1: entered promiscuous mode [ 161.800481][ T6564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.812682][ T6564] Cannot create hsr debugfs directory [ 162.001914][ T5842] Bluetooth: hci0: command tx timeout [ 162.390104][ T6641] FAULT_INJECTION: forcing a failure. [ 162.390104][ T6641] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 162.406790][ T6641] CPU: 1 UID: 0 PID: 6641 Comm: syz.3.168 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 162.406833][ T6641] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 162.406851][ T6641] Call Trace: [ 162.406861][ T6641] [ 162.406873][ T6641] dump_stack_lvl+0x16c/0x1f0 [ 162.406921][ T6641] should_fail_ex+0x512/0x640 [ 162.406964][ T6641] _copy_from_user+0x2e/0xd0 [ 162.407006][ T6641] copy_from_sockptr_offset.constprop.0+0x153/0x1a0 [ 162.407062][ T6641] ? __pfx_copy_from_sockptr_offset.constprop.0+0x10/0x10 [ 162.407123][ T6641] do_ipv6_getsockopt+0x217/0x2ec0 [ 162.407176][ T6641] ? __pfx_do_ipv6_getsockopt+0x10/0x10 [ 162.407223][ T6641] ? _kstrtoull+0x145/0x200 [ 162.407274][ T6641] ? aa_label_sk_perm+0x19b/0x5a0 [ 162.407320][ T6641] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 162.407359][ T6641] ? __lock_acquire+0x5ca/0x1ba0 [ 162.407426][ T6641] ? ipv6_getsockopt+0x126/0x280 [ 162.407469][ T6641] ipv6_getsockopt+0x126/0x280 [ 162.407518][ T6641] ? __pfx_ipv6_getsockopt+0x10/0x10 [ 162.407574][ T6641] rawv6_getsockopt+0xb2/0x4c0 [ 162.407614][ T6641] ? __pfx_rawv6_getsockopt+0x10/0x10 [ 162.407661][ T6641] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 162.407715][ T6641] do_sock_getsockopt+0x3fc/0x800 [ 162.407769][ T6641] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 162.407818][ T6641] ? __fget_files+0x204/0x3c0 [ 162.407868][ T6641] __sys_getsockopt+0x123/0x1a0 [ 162.407918][ T6641] __x64_sys_getsockopt+0xbd/0x160 [ 162.407957][ T6641] ? do_syscall_64+0x91/0x230 [ 162.408000][ T6641] ? lockdep_hardirqs_on+0x7c/0x110 [ 162.408043][ T6641] do_syscall_64+0xcd/0x230 [ 162.408098][ T6641] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.408130][ T6641] RIP: 0033:0x7f2f3a18e169 [ 162.408156][ T6641] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.408185][ T6641] RSP: 002b:00007f2f37ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 162.408213][ T6641] RAX: ffffffffffffffda RBX: 00007f2f3a3b5fa0 RCX: 00007f2f3a18e169 [ 162.408232][ T6641] RDX: 0000000000000018 RSI: 0000000000000029 RDI: 0000000000000003 [ 162.408250][ T6641] RBP: 00007f2f37ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 162.408267][ T6641] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.408283][ T6641] R13: 0000000000000000 R14: 00007f2f3a3b5fa0 R15: 00007fff42e2e0d8 [ 162.408322][ T6641] [ 163.324693][ T6564] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 163.355531][ T6564] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 163.440270][ T6564] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 163.467588][ T6564] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 164.694873][ T6564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.777704][ T6564] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.833338][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.841465][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.908001][ T78] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.915402][ T78] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.010669][ T6678] FAULT_INJECTION: forcing a failure. [ 165.010669][ T6678] name failslab, interval 1, probability 0, space 0, times 0 [ 165.030793][ T6678] CPU: 1 UID: 0 PID: 6678 Comm: syz.2.173 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 165.030836][ T6678] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.030854][ T6678] Call Trace: [ 165.030864][ T6678] [ 165.030876][ T6678] dump_stack_lvl+0x16c/0x1f0 [ 165.030924][ T6678] should_fail_ex+0x512/0x640 [ 165.030960][ T6678] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 165.031001][ T6678] should_failslab+0xc2/0x120 [ 165.031051][ T6678] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 165.031088][ T6678] ? __pmd_alloc+0xc3/0x870 [ 165.031142][ T6678] __pmd_alloc+0xc3/0x870 [ 165.031196][ T6678] __handle_mm_fault+0x948/0x2a40 [ 165.031242][ T6678] ? __pfx___handle_mm_fault+0x10/0x10 [ 165.031278][ T6678] ? mtree_load+0x309/0xa40 [ 165.031351][ T6678] handle_mm_fault+0x3fe/0xad0 [ 165.031392][ T6678] __get_user_pages+0x771/0x36f0 [ 165.031432][ T6678] ? get_pid_task+0x106/0x250 [ 165.031481][ T6678] ? __pfx___get_user_pages+0x10/0x10 [ 165.031512][ T6678] ? __lock_acquire+0xaa4/0x1ba0 [ 165.031568][ T6678] faultin_page_range+0x249/0x980 [ 165.031610][ T6678] madvise_do_behavior+0x233/0x3b0 [ 165.031658][ T6678] ? __pfx_madvise_do_behavior+0x10/0x10 [ 165.031718][ T6678] ? fput+0x70/0xf0 [ 165.031763][ T6678] do_madvise+0x10b/0x170 [ 165.031812][ T6678] __x64_sys_madvise+0xa9/0x110 [ 165.031857][ T6678] ? lockdep_hardirqs_on+0x7c/0x110 [ 165.031900][ T6678] do_syscall_64+0xcd/0x230 [ 165.031945][ T6678] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.031976][ T6678] RIP: 0033:0x7f0a3398e169 [ 165.032001][ T6678] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.032036][ T6678] RSP: 002b:00007f0a34779038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 165.032062][ T6678] RAX: ffffffffffffffda RBX: 00007f0a33bb5fa0 RCX: 00007f0a3398e169 [ 165.032081][ T6678] RDX: 0000000000000017 RSI: 00000000002003f0 RDI: 0000000000000000 [ 165.032097][ T6678] RBP: 00007f0a34779090 R08: 0000000000000000 R09: 0000000000000000 [ 165.032113][ T6678] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.032128][ T6678] R13: 0000000000000000 R14: 00007f0a33bb5fa0 R15: 00007ffd8b659aa8 [ 165.032162][ T6678] [ 165.524128][ T6694] FAULT_INJECTION: forcing a failure. [ 165.524128][ T6694] name failslab, interval 1, probability 0, space 0, times 0 [ 165.551583][ T6694] CPU: 1 UID: 0 PID: 6694 Comm: syz.2.177 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 165.551624][ T6694] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.551642][ T6694] Call Trace: [ 165.551652][ T6694] [ 165.551662][ T6694] dump_stack_lvl+0x16c/0x1f0 [ 165.551717][ T6694] should_fail_ex+0x512/0x640 [ 165.551753][ T6694] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 165.551795][ T6694] should_failslab+0xc2/0x120 [ 165.551837][ T6694] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 165.551876][ T6694] ? __alloc_skb+0x2b2/0x380 [ 165.551923][ T6694] __alloc_skb+0x2b2/0x380 [ 165.551962][ T6694] ? __pfx___alloc_skb+0x10/0x10 [ 165.552005][ T6694] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 165.552049][ T6694] ? __lock_acquire+0xaa4/0x1ba0 [ 165.552100][ T6694] netlink_alloc_large_skb+0x69/0x130 [ 165.552149][ T6694] netlink_sendmsg+0x6a1/0xdd0 [ 165.552201][ T6694] ? __pfx_netlink_sendmsg+0x10/0x10 [ 165.552264][ T6694] ____sys_sendmsg+0xa95/0xc70 [ 165.552295][ T6694] ? copy_msghdr_from_user+0x10a/0x160 [ 165.552338][ T6694] ? __pfx_____sys_sendmsg+0x10/0x10 [ 165.552387][ T6694] ___sys_sendmsg+0x134/0x1d0 [ 165.552433][ T6694] ? __pfx____sys_sendmsg+0x10/0x10 [ 165.552524][ T6694] __sys_sendmsg+0x16d/0x220 [ 165.552568][ T6694] ? __pfx___sys_sendmsg+0x10/0x10 [ 165.552622][ T6694] ? rcu_is_watching+0x12/0xc0 [ 165.552666][ T6694] do_syscall_64+0xcd/0x230 [ 165.552724][ T6694] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.552756][ T6694] RIP: 0033:0x7f0a3398e169 [ 165.552780][ T6694] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.552809][ T6694] RSP: 002b:00007f0a34779038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 165.552838][ T6694] RAX: ffffffffffffffda RBX: 00007f0a33bb5fa0 RCX: 00007f0a3398e169 [ 165.552857][ T6694] RDX: 0000000000040000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 165.552874][ T6694] RBP: 00007f0a34779090 R08: 0000000000000000 R09: 0000000000000000 [ 165.552890][ T6694] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.552907][ T6694] R13: 0000000000000000 R14: 00007f0a33bb5fa0 R15: 00007ffd8b659aa8 [ 165.552953][ T6694] [ 166.428542][ T6564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.926250][ T6732] FAULT_INJECTION: forcing a failure. [ 166.926250][ T6732] name failslab, interval 1, probability 0, space 0, times 0 [ 166.953042][ T6732] CPU: 1 UID: 0 PID: 6732 Comm: syz.2.181 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 166.953085][ T6732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 166.953102][ T6732] Call Trace: [ 166.953111][ T6732] [ 166.953121][ T6732] dump_stack_lvl+0x16c/0x1f0 [ 166.953168][ T6732] should_fail_ex+0x512/0x640 [ 166.953204][ T6732] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 166.953247][ T6732] should_failslab+0xc2/0x120 [ 166.953288][ T6732] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 166.953326][ T6732] ? __alloc_skb+0x2b2/0x380 [ 166.953370][ T6732] __alloc_skb+0x2b2/0x380 [ 166.953407][ T6732] ? __pfx___alloc_skb+0x10/0x10 [ 166.953450][ T6732] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 166.953495][ T6732] ? __lock_acquire+0xaa4/0x1ba0 [ 166.953555][ T6732] netlink_alloc_large_skb+0x69/0x130 [ 166.953603][ T6732] netlink_sendmsg+0x6a1/0xdd0 [ 166.953656][ T6732] ? __pfx_netlink_sendmsg+0x10/0x10 [ 166.953717][ T6732] ____sys_sendmsg+0xa95/0xc70 [ 166.953748][ T6732] ? copy_msghdr_from_user+0x10a/0x160 [ 166.953790][ T6732] ? __pfx_____sys_sendmsg+0x10/0x10 [ 166.953828][ T6732] ? __pfx__kstrtoull+0x10/0x10 [ 166.953889][ T6732] ___sys_sendmsg+0x134/0x1d0 [ 166.953934][ T6732] ? __pfx____sys_sendmsg+0x10/0x10 [ 166.953996][ T6732] ? find_held_lock+0x2b/0x80 [ 166.954055][ T6732] __sys_sendmmsg+0x200/0x420 [ 166.954104][ T6732] ? __pfx___sys_sendmmsg+0x10/0x10 [ 166.954160][ T6732] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 166.954223][ T6732] ? fput+0x70/0xf0 [ 166.954261][ T6732] ? ksys_write+0x1b9/0x240 [ 166.954294][ T6732] ? __pfx_ksys_write+0x10/0x10 [ 166.954325][ T6732] ? rcu_is_watching+0x12/0xc0 [ 166.954364][ T6732] __x64_sys_sendmmsg+0x9c/0x100 [ 166.954406][ T6732] ? lockdep_hardirqs_on+0x7c/0x110 [ 166.954449][ T6732] do_syscall_64+0xcd/0x230 [ 166.954499][ T6732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.954544][ T6732] RIP: 0033:0x7f0a3398e169 [ 166.954568][ T6732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.954597][ T6732] RSP: 002b:00007f0a34779038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 166.954626][ T6732] RAX: ffffffffffffffda RBX: 00007f0a33bb5fa0 RCX: 00007f0a3398e169 [ 166.954646][ T6732] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 166.954664][ T6732] RBP: 00007f0a34779090 R08: 0000000000000000 R09: 0000000000000000 [ 166.954681][ T6732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 166.954698][ T6732] R13: 0000000000000000 R14: 00007f0a33bb5fa0 R15: 00007ffd8b659aa8 [ 166.954737][ T6732] [ 167.673201][ T6564] veth0_vlan: entered promiscuous mode [ 167.750806][ T6564] veth1_vlan: entered promiscuous mode [ 167.916803][ T6564] veth0_macvtap: entered promiscuous mode [ 168.029607][ T6564] veth1_macvtap: entered promiscuous mode [ 168.417007][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.457551][ T6753] FAULT_INJECTION: forcing a failure. [ 168.457551][ T6753] name failslab, interval 1, probability 0, space 0, times 0 [ 168.469874][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.484779][ T6753] CPU: 0 UID: 0 PID: 6753 Comm: syz.3.187 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 168.484824][ T6753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 168.484842][ T6753] Call Trace: [ 168.484852][ T6753] [ 168.484864][ T6753] dump_stack_lvl+0x16c/0x1f0 [ 168.484913][ T6753] should_fail_ex+0x512/0x640 [ 168.484950][ T6753] ? __kmalloc_noprof+0xbf/0x510 [ 168.484992][ T6753] ? do_handle_open+0x585/0xb70 [ 168.485036][ T6753] should_failslab+0xc2/0x120 [ 168.485078][ T6753] __kmalloc_noprof+0xd2/0x510 [ 168.485125][ T6753] do_handle_open+0x585/0xb70 [ 168.485171][ T6753] ? __fget_files+0x20e/0x3c0 [ 168.485202][ T6753] ? __pfx_do_handle_open+0x10/0x10 [ 168.485279][ T6753] ? ksys_write+0x1b9/0x240 [ 168.485310][ T6753] ? rcu_is_watching+0x12/0xc0 [ 168.485352][ T6753] ? do_syscall_64+0xcd/0x230 [ 168.485397][ T6753] do_syscall_64+0xcd/0x230 [ 168.485446][ T6753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 168.485478][ T6753] RIP: 0033:0x7f2f3a18e169 [ 168.485502][ T6753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 168.485531][ T6753] RSP: 002b:00007f2f37ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 168.485560][ T6753] RAX: ffffffffffffffda RBX: 00007f2f3a3b5fa0 RCX: 00007f2f3a18e169 [ 168.485580][ T6753] RDX: 00000000fffffff9 RSI: 0000200000000180 RDI: 0000000000000003 [ 168.485598][ T6753] RBP: 00007f2f37ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 168.485615][ T6753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 168.485632][ T6753] R13: 0000000000000000 R14: 00007f2f3a3b5fa0 R15: 00007fff42e2e0d8 [ 168.485671][ T6753] [ 168.498740][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.708836][ T6751] netlink: 252 bytes leftover after parsing attributes in process `syz.1.186'. [ 168.729514][ T6751] netlink: 252 bytes leftover after parsing attributes in process `syz.1.186'. [ 168.748744][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.768341][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 168.788757][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.811608][ T6564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.832524][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.838444][ T6754] netlink: 28 bytes leftover after parsing attributes in process `syz.2.185'. [ 168.859255][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.876881][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.908840][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.933352][ T6564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 168.950866][ T6564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.969058][ T6564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.100574][ T6754] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 169.281495][ T6564] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.316353][ T6564] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.352304][ T6564] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.381332][ T6564] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.351193][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.386431][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.419263][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.427115][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.981084][ T6796] FAULT_INJECTION: forcing a failure. [ 170.981084][ T6796] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 171.076496][ T6796] CPU: 1 UID: 0 PID: 6796 Comm: syz.3.193 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 171.076540][ T6796] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.076559][ T6796] Call Trace: [ 171.076569][ T6796] [ 171.076581][ T6796] dump_stack_lvl+0x16c/0x1f0 [ 171.076631][ T6796] should_fail_ex+0x512/0x640 [ 171.076675][ T6796] _copy_to_user+0x32/0xd0 [ 171.076720][ T6796] do_pages_stat+0x608/0x800 [ 171.076779][ T6796] ? __pfx_do_pages_stat+0x10/0x10 [ 171.076862][ T6796] ? do_raw_spin_unlock+0x172/0x230 [ 171.076899][ T6796] kernel_move_pages+0xfd5/0x13a0 [ 171.076960][ T6796] ? __pfx_kernel_move_pages+0x10/0x10 [ 171.077009][ T6796] ? __fget_files+0x20e/0x3c0 [ 171.077046][ T6796] ? fput+0x70/0xf0 [ 171.077085][ T6796] ? ksys_write+0x1b9/0x240 [ 171.077117][ T6796] ? __pfx_ksys_write+0x10/0x10 [ 171.077147][ T6796] ? rcu_is_watching+0x12/0xc0 [ 171.077185][ T6796] __x64_sys_move_pages+0xe0/0x1c0 [ 171.077230][ T6796] ? do_syscall_64+0x91/0x230 [ 171.077275][ T6796] ? lockdep_hardirqs_on+0x7c/0x110 [ 171.077317][ T6796] do_syscall_64+0xcd/0x230 [ 171.077373][ T6796] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.077404][ T6796] RIP: 0033:0x7f2f3a18e169 [ 171.077428][ T6796] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.077458][ T6796] RSP: 002b:00007f2f37fd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000117 [ 171.077486][ T6796] RAX: ffffffffffffffda RBX: 00007f2f3a3b6080 RCX: 00007f2f3a18e169 [ 171.077506][ T6796] RDX: 0000000000000000 RSI: 0002000000000003 RDI: 0000000000000001 [ 171.077523][ T6796] RBP: 00007f2f37fd5090 R08: 0000000000000000 R09: 8000400000000000 [ 171.077542][ T6796] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.077558][ T6796] R13: 0000000000000000 R14: 00007f2f3a3b6080 R15: 00007fff42e2e0d8 [ 171.077598][ T6796] [ 171.721382][ T6809] netlink: 20 bytes leftover after parsing attributes in process `syz.4.153'. [ 171.789855][ T6813] netlink: 28 bytes leftover after parsing attributes in process `syz.3.195'. [ 171.969198][ T6813] bond0: (slave bond_slave_1): Releasing backup interface [ 172.021154][ T6806] ima: policy update failed [ 172.033715][ T30] audit: type=1802 audit(4294967338.480:3): pid=6806 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.4.153" res=0 errno=0 [ 172.044208][ T6819] FAULT_INJECTION: forcing a failure. [ 172.044208][ T6819] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 172.095757][ T6819] CPU: 1 UID: 0 PID: 6819 Comm: syz.1.196 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 172.095799][ T6819] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 172.095817][ T6819] Call Trace: [ 172.095826][ T6819] [ 172.095836][ T6819] dump_stack_lvl+0x16c/0x1f0 [ 172.095884][ T6819] should_fail_ex+0x512/0x640 [ 172.095925][ T6819] _copy_from_user+0x2e/0xd0 [ 172.095968][ T6819] ____sys_sendmsg+0x607/0xc70 [ 172.096009][ T6819] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.096044][ T6819] ? __pfx__kstrtoull+0x10/0x10 [ 172.096098][ T6819] ___sys_sendmsg+0x134/0x1d0 [ 172.096149][ T6819] ? __pfx____sys_sendmsg+0x10/0x10 [ 172.096208][ T6819] ? find_held_lock+0x2b/0x80 [ 172.096273][ T6819] __sys_sendmmsg+0x200/0x420 [ 172.096319][ T6819] ? __pfx___sys_sendmmsg+0x10/0x10 [ 172.096384][ T6819] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 172.096450][ T6819] ? xfd_validate_state+0x5d/0x180 [ 172.096485][ T6819] ? rcu_is_watching+0x12/0xc0 [ 172.096525][ T6819] __x64_sys_sendmmsg+0x9c/0x100 [ 172.096567][ T6819] ? lockdep_hardirqs_on+0x7c/0x110 [ 172.096610][ T6819] do_syscall_64+0xcd/0x230 [ 172.096658][ T6819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.096689][ T6819] RIP: 0033:0x7ff70cb8e169 [ 172.096714][ T6819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.096743][ T6819] RSP: 002b:00007ff70dacf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 172.096772][ T6819] RAX: ffffffffffffffda RBX: 00007ff70cdb5fa0 RCX: 00007ff70cb8e169 [ 172.096792][ T6819] RDX: 0000000000000007 RSI: 0000200000000200 RDI: 0000000000000003 [ 172.096810][ T6819] RBP: 00007ff70dacf090 R08: 0000000000000000 R09: 0000000000000000 [ 172.096829][ T6819] R10: 0000000000004008 R11: 0000000000000246 R12: 0000000000000001 [ 172.096846][ T6819] R13: 0000000000000000 R14: 00007ff70cdb5fa0 R15: 00007ffd66edf148 [ 172.096886][ T6819] [ 173.914630][ T6859] FAULT_INJECTION: forcing a failure. [ 173.914630][ T6859] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 174.096011][ T6859] CPU: 0 UID: 0 PID: 6859 Comm: syz.3.205 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 174.096054][ T6859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 174.096071][ T6859] Call Trace: [ 174.096081][ T6859] [ 174.096093][ T6859] dump_stack_lvl+0x16c/0x1f0 [ 174.096144][ T6859] should_fail_ex+0x512/0x640 [ 174.096189][ T6859] _copy_from_user+0x2e/0xd0 [ 174.096232][ T6859] kstrtouint_from_user+0xd6/0x1d0 [ 174.096262][ T6859] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 174.096289][ T6859] ? __lock_acquire+0xaa4/0x1ba0 [ 174.096351][ T6859] proc_fail_nth_write+0x83/0x250 [ 174.096400][ T6859] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 174.096460][ T6859] vfs_write+0x25c/0x1180 [ 174.096491][ T6859] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 174.096542][ T6859] ? __pfx___mutex_lock+0x10/0x10 [ 174.096586][ T6859] ? __pfx_vfs_write+0x10/0x10 [ 174.096629][ T6859] ? __fget_files+0x20e/0x3c0 [ 174.096672][ T6859] ksys_write+0x12a/0x240 [ 174.096706][ T6859] ? __pfx_ksys_write+0x10/0x10 [ 174.096752][ T6859] do_syscall_64+0xcd/0x230 [ 174.096802][ T6859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 174.096834][ T6859] RIP: 0033:0x7f2f3a18cc1f [ 174.096858][ T6859] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 174.096888][ T6859] RSP: 002b:00007f2f37fb4030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 174.096925][ T6859] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2f3a18cc1f [ 174.096944][ T6859] RDX: 0000000000000001 RSI: 00007f2f37fb40a0 RDI: 0000000000000006 [ 174.096963][ T6859] RBP: 00007f2f37fb4090 R08: 0000000000000000 R09: 0000000000000000 [ 174.096981][ T6859] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 174.096999][ T6859] R13: 0000000000000000 R14: 00007f2f3a3b6160 R15: 00007fff42e2e0d8 [ 174.097040][ T6859] [ 174.290564][ T6856] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 174.487361][ T6856] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 174.496102][ T6856] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 174.502934][ T6856] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 174.510012][ T6856] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 174.569881][ T6856] Bluetooth: hci0: Opcode 0x0406 failed: -4 [ 175.161938][ T6872] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 175.179249][ T6872] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 175.191990][ T6872] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 175.206880][ T6872] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 175.842230][ T6888] netlink: 342 bytes leftover after parsing attributes in process `syz.3.209'. [ 176.243171][ T6894] FAULT_INJECTION: forcing a failure. [ 176.243171][ T6894] name failslab, interval 1, probability 0, space 0, times 0 [ 176.269659][ T6894] CPU: 0 UID: 0 PID: 6894 Comm: syz.2.210 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 176.269704][ T6894] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 176.269721][ T6894] Call Trace: [ 176.269731][ T6894] [ 176.269743][ T6894] dump_stack_lvl+0x16c/0x1f0 [ 176.269793][ T6894] should_fail_ex+0x512/0x640 [ 176.269830][ T6894] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 176.269872][ T6894] should_failslab+0xc2/0x120 [ 176.269914][ T6894] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 176.269961][ T6894] ? __alloc_skb+0x2b2/0x380 [ 176.270006][ T6894] __alloc_skb+0x2b2/0x380 [ 176.270044][ T6894] ? __pfx___alloc_skb+0x10/0x10 [ 176.270088][ T6894] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 176.270133][ T6894] ? __lock_acquire+0xaa4/0x1ba0 [ 176.270183][ T6894] netlink_alloc_large_skb+0x69/0x130 [ 176.270231][ T6894] netlink_sendmsg+0x6a1/0xdd0 [ 176.270285][ T6894] ? __pfx_netlink_sendmsg+0x10/0x10 [ 176.270347][ T6894] ____sys_sendmsg+0xa95/0xc70 [ 176.270378][ T6894] ? copy_msghdr_from_user+0x10a/0x160 [ 176.270418][ T6894] ? __pfx_____sys_sendmsg+0x10/0x10 [ 176.270455][ T6894] ? __pfx__kstrtoull+0x10/0x10 [ 176.270514][ T6894] ___sys_sendmsg+0x134/0x1d0 [ 176.270559][ T6894] ? __pfx____sys_sendmsg+0x10/0x10 [ 176.270621][ T6894] ? find_held_lock+0x2b/0x80 [ 176.270679][ T6894] __sys_sendmmsg+0x200/0x420 [ 176.270728][ T6894] ? __pfx___sys_sendmmsg+0x10/0x10 [ 176.270784][ T6894] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 176.270848][ T6894] ? fput+0x70/0xf0 [ 176.270886][ T6894] ? ksys_write+0x1b9/0x240 [ 176.270918][ T6894] ? __pfx_ksys_write+0x10/0x10 [ 176.270954][ T6894] ? rcu_is_watching+0x12/0xc0 [ 176.270992][ T6894] __x64_sys_sendmmsg+0x9c/0x100 [ 176.271034][ T6894] ? lockdep_hardirqs_on+0x7c/0x110 [ 176.271077][ T6894] do_syscall_64+0xcd/0x230 [ 176.271126][ T6894] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 176.271157][ T6894] RIP: 0033:0x7f0a3398e169 [ 176.271182][ T6894] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 176.271211][ T6894] RSP: 002b:00007f0a34779038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 176.271239][ T6894] RAX: ffffffffffffffda RBX: 00007f0a33bb5fa0 RCX: 00007f0a3398e169 [ 176.271257][ T6894] RDX: 0000000000000003 RSI: 0000200000000080 RDI: 0000000000000003 [ 176.271273][ T6894] RBP: 00007f0a34779090 R08: 0000000000000000 R09: 0000000000000000 [ 176.271289][ T6894] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 176.271304][ T6894] R13: 0000000000000000 R14: 00007f0a33bb5fa0 R15: 00007ffd8b659aa8 [ 176.271340][ T6894] [ 176.670176][ T5842] Bluetooth: hci3: Malformed Event: 0x02 [ 177.211224][ T5842] Bluetooth: hci3: command 0x0c1a tx timeout [ 177.217331][ T5842] Bluetooth: hci2: command 0x0c1a tx timeout [ 177.224251][ T5841] Bluetooth: hci1: command 0x0c1a tx timeout [ 177.278791][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 177.551271][ T6926] netlink: 'syz.3.218': attribute type 11 has an invalid length. [ 177.787874][ T6914] delete_channel: no stack [ 179.373860][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.450239][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.454207][ T7011] netlink: 342 bytes leftover after parsing attributes in process `syz.3.238'. [ 181.636964][ T7002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'. [ 181.661945][ T7002] veth0_macvtap: left promiscuous mode [ 181.687811][ T7002] macvtap0: entered promiscuous mode [ 181.708818][ T7002] macvtap0: entered allmulticast mode [ 181.984833][ T5827] Process accounting resumed [ 185.719454][ T7092] netlink: 28 bytes leftover after parsing attributes in process `syz.4.251'. [ 185.787584][ T7092] veth0_macvtap: left promiscuous mode [ 185.859746][ T7092] macvtap0: entered promiscuous mode [ 185.888642][ T7092] macvtap0: entered allmulticast mode [ 188.442836][ T7132] bridge0: port 3(team0) entered blocking state [ 188.493474][ T7132] bridge0: port 3(team0) entered disabled state [ 188.606680][ T7132] team0: entered allmulticast mode [ 188.676973][ T7132] team_slave_0: entered allmulticast mode [ 188.764278][ T7132] team_slave_1: entered allmulticast mode [ 188.853565][ T7132] team0: entered promiscuous mode [ 188.896465][ T7132] team_slave_0: entered promiscuous mode [ 188.951852][ T7132] team_slave_1: entered promiscuous mode [ 188.999589][ T7132] bridge0: port 3(team0) entered blocking state [ 189.006291][ T7132] bridge0: port 3(team0) entered forwarding state [ 189.853327][ T30] audit: type=1800 audit(4294967356.300:4): pid=7151 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.264" name="discovery_nqn" dev="configfs" ino=11237 res=0 errno=0 [ 191.109084][ T7189] netlink: 28 bytes leftover after parsing attributes in process `syz.1.265'. [ 191.193340][ T7189] veth0_macvtap: left promiscuous mode [ 191.273029][ T7189] macvtap0: entered promiscuous mode [ 191.278386][ T7189] macvtap0: entered allmulticast mode [ 192.220561][ T30] audit: type=1807 audit(4294967358.670:5): UNKNOWN=0"û]$|Ë1jë0B|d™¹ýÓ‰OŸ¬+ö×/ÉéxÔóÈõWÓ¦–Ó^¸´gq%ḦrêOŽ res=0 [ 192.267874][ T7205] ima: policy update failed [ 192.277702][ T30] audit: type=1802 audit(4294967358.670:6): pid=7207 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.2.268" res=0 errno=0 [ 192.348800][ T30] audit: type=1802 audit(4294967358.780:7): pid=7205 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.2.268" res=0 errno=0 [ 194.156452][ T7257] netlink: 338 bytes leftover after parsing attributes in process `syz.1.278'. [ 195.881434][ T7284] FAULT_INJECTION: forcing a failure. [ 195.881434][ T7284] name failslab, interval 1, probability 0, space 0, times 0 [ 195.919845][ T7284] CPU: 0 UID: 0 PID: 7284 Comm: syz.1.282 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 195.919895][ T7284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.919914][ T7284] Call Trace: [ 195.919925][ T7284] [ 195.919938][ T7284] dump_stack_lvl+0x16c/0x1f0 [ 195.920000][ T7284] should_fail_ex+0x512/0x640 [ 195.920039][ T7284] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 195.920085][ T7284] should_failslab+0xc2/0x120 [ 195.920129][ T7284] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 195.920168][ T7284] ? __asan_memcpy+0x3c/0x60 [ 195.920199][ T7284] ? __kernfs_new_node+0xd2/0x8a0 [ 195.920239][ T7284] __kernfs_new_node+0xd2/0x8a0 [ 195.920278][ T7284] ? __pfx___kernfs_new_node+0x10/0x10 [ 195.920322][ T7284] ? find_held_lock+0x2b/0x80 [ 195.920357][ T7284] ? kernfs_root+0xee/0x2a0 [ 195.920398][ T7284] kernfs_new_node+0x13c/0x1e0 [ 195.920437][ T7284] ? net_ns_get_ownership+0xf8/0x1b0 [ 195.920486][ T7284] kernfs_create_dir_ns+0x4c/0x1a0 [ 195.920531][ T7284] sysfs_create_dir_ns+0x13a/0x2b0 [ 195.920563][ T7284] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 195.920591][ T7284] ? find_held_lock+0x2b/0x80 [ 195.920628][ T7284] ? net_namespace+0x12/0x50 [ 195.920673][ T7284] ? device_namespace+0x76/0xa0 [ 195.920710][ T7284] kobject_add_internal+0x2c4/0x9b0 [ 195.920770][ T7284] kobject_add+0x16e/0x240 [ 195.920799][ T7284] ? __pfx_kobject_add+0x10/0x10 [ 195.920831][ T7284] ? get_device_parent+0x1c5/0x4e0 [ 195.920863][ T7284] ? kobject_put+0xab/0x5a0 [ 195.920925][ T7284] device_add+0x288/0x1a70 [ 195.920969][ T7284] ? __pfx_dev_set_name+0x10/0x10 [ 195.921010][ T7284] ? __pfx_device_add+0x10/0x10 [ 195.921047][ T7284] ? lockdep_init_map_type+0x5c/0x280 [ 195.921094][ T7284] ? __init_waitqueue_head+0xca/0x150 [ 195.921137][ T7284] netdev_register_kobject+0x182/0x3a0 [ 195.921193][ T7284] register_netdevice+0x13dc/0x2270 [ 195.921260][ T7284] ? __pfx_register_netdevice+0x10/0x10 [ 195.921323][ T7284] slip_open+0xb86/0x1150 [ 195.921366][ T7284] ? __pfx_slip_open+0x10/0x10 [ 195.921400][ T7284] ? down_write+0x14d/0x200 [ 195.921453][ T7284] ? __pfx_slip_open+0x10/0x10 [ 195.921487][ T7284] tty_ldisc_open+0x9c/0x120 [ 195.921541][ T7284] tty_set_ldisc+0x32b/0x780 [ 195.921595][ T7284] tty_ioctl+0xc42/0x1610 [ 195.921625][ T7284] ? __pfx_tty_ioctl+0x10/0x10 [ 195.921664][ T7284] ? fdget+0x187/0x210 [ 195.921693][ T7284] ? __sys_sendmsg+0x199/0x220 [ 195.921733][ T7284] ? hook_file_ioctl_common+0x145/0x410 [ 195.921781][ T7284] ? xfd_validate_state+0x5d/0x180 [ 195.921819][ T7284] ? __pfx_tty_ioctl+0x10/0x10 [ 195.921851][ T7284] __x64_sys_ioctl+0x190/0x200 [ 195.921902][ T7284] do_syscall_64+0xcd/0x230 [ 195.921970][ T7284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.922005][ T7284] RIP: 0033:0x7ff70cb8e169 [ 195.922030][ T7284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.922060][ T7284] RSP: 002b:00007ff70dacf038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 195.922091][ T7284] RAX: ffffffffffffffda RBX: 00007ff70cdb5fa0 RCX: 00007ff70cb8e169 [ 195.922112][ T7284] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000001 [ 195.922131][ T7284] RBP: 00007ff70cc10a68 R08: 0000000000000000 R09: 0000000000000000 [ 195.922150][ T7284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 195.922167][ T7284] R13: 0000000000000000 R14: 00007ff70cdb5fa0 R15: 00007ffd66edf148 [ 195.922209][ T7284] [ 195.922250][ T7284] kobject: kobject_add_internal failed for sl0 (error: -12 parent: net) [ 196.289474][ T7284] Falling back ldisc for ttyS2. [ 196.327500][ T7289] FAULT_INJECTION: forcing a failure. [ 196.327500][ T7289] name failslab, interval 1, probability 0, space 0, times 0 [ 196.363317][ T7289] CPU: 1 UID: 0 PID: 7289 Comm: syz.3.283 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 196.363362][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.363380][ T7289] Call Trace: [ 196.363390][ T7289] [ 196.363402][ T7289] dump_stack_lvl+0x16c/0x1f0 [ 196.363450][ T7289] should_fail_ex+0x512/0x640 [ 196.363486][ T7289] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 196.363524][ T7289] should_failslab+0xc2/0x120 [ 196.363566][ T7289] __kmalloc_cache_noprof+0x6a/0x3e0 [ 196.363597][ T7289] ? get_mm_exe_file+0x8a/0x1a0 [ 196.363638][ T7289] ? landlock_init_hierarchy_log+0xa7/0x870 [ 196.363688][ T7289] landlock_init_hierarchy_log+0xa7/0x870 [ 196.363737][ T7289] landlock_merge_ruleset+0x6e1/0x870 [ 196.363770][ T7289] ? prepare_creds+0x583/0x7d0 [ 196.363822][ T7289] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 196.363880][ T7289] do_syscall_64+0xcd/0x230 [ 196.363937][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.363969][ T7289] RIP: 0033:0x7f2f3a18e169 [ 196.363994][ T7289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.364023][ T7289] RSP: 002b:00007f2f37ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 196.364051][ T7289] RAX: ffffffffffffffda RBX: 00007f2f3a3b5fa0 RCX: 00007f2f3a18e169 [ 196.364071][ T7289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.364089][ T7289] RBP: 00007f2f37ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 196.364107][ T7289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.364125][ T7289] R13: 0000000000000000 R14: 00007f2f3a3b5fa0 R15: 00007fff42e2e0d8 [ 196.364165][ T7289] [ 196.365789][ T7289] ------------[ cut here ]------------ [ 196.548068][ T7289] WARNING: CPU: 1 PID: 7289 at security/landlock/domain.h:133 free_ruleset+0x226/0x270 [ 196.557842][ T7289] Modules linked in: [ 196.561842][ T7289] CPU: 1 UID: 0 PID: 7289 Comm: syz.3.283 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 196.574432][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.584944][ T7289] RIP: 0010:free_ruleset+0x226/0x270 [ 196.590349][ T7289] Code: 84 61 ff ff ff 48 89 eb e9 12 ff ff ff e8 b2 2f 2d fd be 03 00 00 00 4c 89 f7 e8 55 f3 3e 00 e9 42 ff ff ff e8 9b 2f 2d fd 90 <0f> 0b 90 eb af e8 20 b0 91 fd e9 4a fe ff ff 48 89 df e8 13 b0 91 [ 196.610286][ T7289] RSP: 0018:ffffc90003bf7e38 EFLAGS: 00010293 [ 196.616610][ T7289] RAX: 0000000000000000 RBX: ffff888027ba3500 RCX: ffffffff848e710f [ 196.625599][ T7289] RDX: ffff888027699e00 RSI: ffffffff848d79f5 RDI: 0000000000000005 [ 196.634586][ T7289] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 196.642988][ T7289] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807d5f1c00 [ 196.651279][ T7289] R13: dffffc0000000000 R14: ffff888027ba3520 R15: fffffffffffffff4 [ 196.659382][ T7289] FS: 00007f2f37ff66c0(0000) GS:ffff888124abf000(0000) knlGS:0000000000000000 [ 196.668378][ T7289] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 196.677727][ T7289] CR2: 0000000000000000 CR3: 00000000338d2000 CR4: 00000000003526f0 [ 196.685899][ T7289] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 196.694006][ T7289] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 196.702097][ T7289] Call Trace: [ 196.705430][ T7289] [ 196.708409][ T7289] landlock_put_ruleset+0xa5/0xb0 [ 196.713838][ T7289] landlock_merge_ruleset+0x218/0x870 [ 196.719355][ T7289] ? prepare_creds+0x583/0x7d0 [ 196.724909][ T7289] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 196.731885][ T7289] do_syscall_64+0xcd/0x230 [ 196.736711][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.742916][ T7289] RIP: 0033:0x7f2f3a18e169 [ 196.747444][ T7289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.767464][ T7289] RSP: 002b:00007f2f37ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 196.776158][ T7289] RAX: ffffffffffffffda RBX: 00007f2f3a3b5fa0 RCX: 00007f2f3a18e169 [ 196.784287][ T7289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 196.792355][ T7289] RBP: 00007f2f37ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 196.800666][ T7289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.808752][ T7289] R13: 0000000000000000 R14: 00007f2f3a3b5fa0 R15: 00007fff42e2e0d8 [ 196.816807][ T7289] [ 196.819921][ T7289] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 196.827247][ T7289] CPU: 1 UID: 0 PID: 7289 Comm: syz.3.283 Not tainted 6.15.0-rc2-syzkaller-00404-g8560697b23dc #0 PREEMPT(full) [ 196.839307][ T7289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.849420][ T7289] Call Trace: [ 196.852724][ T7289] [ 196.855674][ T7289] dump_stack_lvl+0x3d/0x1f0 [ 196.860306][ T7289] panic+0x71c/0x800 [ 196.864240][ T7289] ? __pfx_panic+0x10/0x10 [ 196.868701][ T7289] ? show_trace_log_lvl+0x29b/0x3e0 [ 196.873935][ T7289] ? check_panic_on_warn+0x1f/0xb0 [ 196.879174][ T7289] ? free_ruleset+0x226/0x270 [ 196.883872][ T7289] check_panic_on_warn+0xab/0xb0 [ 196.888851][ T7289] __warn+0xf6/0x3c0 [ 196.892770][ T7289] ? free_ruleset+0x226/0x270 [ 196.897467][ T7289] report_bug+0x3c3/0x580 [ 196.901848][ T7289] ? free_ruleset+0x226/0x270 [ 196.906570][ T7289] handle_bug+0x184/0x210 [ 196.910955][ T7289] exc_invalid_op+0x17/0x50 [ 196.915782][ T7289] asm_exc_invalid_op+0x1a/0x20 [ 196.920661][ T7289] RIP: 0010:free_ruleset+0x226/0x270 [ 196.926078][ T7289] Code: 84 61 ff ff ff 48 89 eb e9 12 ff ff ff e8 b2 2f 2d fd be 03 00 00 00 4c 89 f7 e8 55 f3 3e 00 e9 42 ff ff ff e8 9b 2f 2d fd 90 <0f> 0b 90 eb af e8 20 b0 91 fd e9 4a fe ff ff 48 89 df e8 13 b0 91 [ 196.946006][ T7289] RSP: 0018:ffffc90003bf7e38 EFLAGS: 00010293 [ 196.952106][ T7289] RAX: 0000000000000000 RBX: ffff888027ba3500 RCX: ffffffff848e710f [ 196.960103][ T7289] RDX: ffff888027699e00 RSI: ffffffff848d79f5 RDI: 0000000000000005 [ 196.968271][ T7289] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 196.976262][ T7289] R10: 0000000000000000 R11: 0000000000000000 R12: ffff88807d5f1c00 [ 196.984354][ T7289] R13: dffffc0000000000 R14: ffff888027ba3520 R15: fffffffffffffff4 [ 196.992370][ T7289] ? landlock_log_drop_domain+0x5f/0x1e0 [ 196.998128][ T7289] ? free_ruleset+0x225/0x270 [ 197.002832][ T7289] ? free_ruleset+0x225/0x270 [ 197.007531][ T7289] landlock_put_ruleset+0xa5/0xb0 [ 197.012580][ T7289] landlock_merge_ruleset+0x218/0x870 [ 197.017979][ T7289] ? prepare_creds+0x583/0x7d0 [ 197.022784][ T7289] __do_sys_landlock_restrict_self+0x2a2/0x910 [ 197.029010][ T7289] do_syscall_64+0xcd/0x230 [ 197.033656][ T7289] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.039669][ T7289] RIP: 0033:0x7f2f3a18e169 [ 197.044109][ T7289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.063762][ T7289] RSP: 002b:00007f2f37ff6038 EFLAGS: 00000246 ORIG_RAX: 00000000000001be [ 197.072381][ T7289] RAX: ffffffffffffffda RBX: 00007f2f3a3b5fa0 RCX: 00007f2f3a18e169 [ 197.080391][ T7289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 197.088488][ T7289] RBP: 00007f2f37ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 197.096569][ T7289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 197.105445][ T7289] R13: 0000000000000000 R14: 00007f2f3a3b5fa0 R15: 00007fff42e2e0d8 [ 197.113470][ T7289] [ 197.116650][ T7289] Kernel Offset: disabled [ 197.121081][ T7289] Rebooting in 86400 seconds..