last executing test programs: 1m57.612704464s ago: executing program 2 (id=2162): mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) openat$auto_force_suspend_fops_hci_vhci(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/bluetooth/hci1/force_suspend\x00', 0x40800, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x4) socket(0x10, 0x3, 0x6) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1c00"], 0x1ac}, 0x1, 0x0, 0x0, 0x800}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 1m57.478739521s ago: executing program 2 (id=2163): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendto$auto(0x3, 0x0, 0xfef0, 0x101, &(0x7f0000000000)=@in={0x2, 0x4e22, @loopback}, 0x1c) 1m57.344546847s ago: executing program 2 (id=2164): mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) ioctl$auto_SG_GET_RESERVED_SIZE(0xffffffffffffffff, 0x4c05, 0x0) 1m57.278567778s ago: executing program 2 (id=2165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000100)='/proc/thread-self/mem\x00', 0x2001, 0x0) truncate$auto(&(0x7f00000000c0)='./cgroup\x00', 0x100000000000001) lseek$auto(r1, 0x8001, 0x4) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) lremovexattr$auto(0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = mq_open$auto(&(0x7f0000000000)='\xbe\xf2\x82\xe7\x14g\xb5\xeeMQ\x13\xa2_g\xbf\t\xfa\xf2_N\xb0{\xf9\xb57v\xeeG\xd9l\xbf\x86q w\x96\xd9\xe9\xa8\xe1\xf0\xc7\x1f\x1e\xc4\xc4\x89u\x83\xe8}\xbd\x7fO\x91\xc1UVW.\xb6\xad\x04u\x02w.\xec`O\xc1\x0e\x15\xe7:\xc9\x1bK\xcddY\x03\x95\xd1\xae\xc1\x9b\x96\x9faj\xd2\xfc\xfc\x1f7\xaf\xcan\xf6\xc0wK\xce\xe7Q\xae\xc9Hg\x01\xef\xda[\xe5\xa3\xa3%\'\x8f\xcf\x96X:\x04Dkt\x7f\xde\x80\x01\xddX\x91\x88\xa1\t\xc3\xf1\xfe[\x93$O8 b\xb4\x92\xf4\xbc\xc5\xb9\x989\xfcF\xec\xdc@\xdd\xdaeM\xe0U\xc8;\xf5\xe7$Q8\xd2\x87\xdd\xc5\x9d\xc5\xe8\xb5\xb5\xb8\xdfD\xd0\xe8t\x8aS\xaa\xbe\xaa\xba\x9e^0\x1a\xf8Y\xf5Jp\bu\xba\x98\x00\xf0H5\xa9u\x0e\xc4\x04\x13\xf58p\x9f\x11\xc07\xefS*|\xd87\x12\xd8\xce\xde0\xd82;\xcd\x18\r\xccI\x99\n\xd2\x86', 0xdd1, 0x8, 0x0) mq_notify$auto(r2, 0x0) unshare$auto(0x40000080) mmap$auto(0x0, 0x2020009, 0x3, 0xeb2, 0xfffffffffffffffb, 0x8000) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/block/ram5/trace/pid\x00', 0xa001, 0x0) write$auto(r3, &(0x7f0000000540)='7\x81=\"\xad\xff\x8d\xf9;\x18\xa4\xb0\xb4\xd9\x82=\xe1P~\x17\xfb&L\xeb=j\a\xf1y\xb3\"', 0x81) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) sysfs$auto(0x2, 0x0, 0x0) epoll_create$auto(0x4) epoll_ctl$auto(0x5, 0x1, 0x8000000000000000, 0x0) fcntl$auto(0x0, 0x407, 0x100000) openat$auto_snapshot_fops_user(0xffffffffffffff9c, &(0x7f0000000200), 0x400, 0x0) mlock$auto(0x7c89, 0x47fff) eventfd$auto(0x5) clone$auto(0x6, 0x3, 0x0, 0x0, 0xdd6) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) socket(0xa, 0x5, 0x0) r4 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_BEARER_SET(r0, &(0x7f0000002040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x44}, 0x40044) 1m56.569239636s ago: executing program 2 (id=2171): mmap$auto(0x0, 0xa00006, 0x2, 0x40eb1, 0x602, 0x300000000000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) syz_clone(0x40100100, 0x0, 0x0, 0x0, 0x0, 0x0) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) acct$auto(0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x0, 0x0) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7000000) sendmmsg$auto(0x4, 0x0, 0x9a6, 0x6) r0 = socket(0xa, 0x3, 0x3a) splice$auto(r0, &(0x7f00000001c0)=0x8000000000000001, r0, &(0x7f0000000200)=0x4, 0x3, 0xd2) kexec_load$auto(0x5, 0x2, &(0x7f0000000040)={@kbuf=0x0, 0x2aa7, 0x6c0000c000, 0xc000}, 0x4) kill$auto(0x0, 0x11) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) socket(0x2, 0x801, 0x100) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1\x00'}) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) io_uring_setup$auto(0x3ff, 0x0) 1m54.705639298s ago: executing program 2 (id=2181): openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000e40), 0x80d02, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x20000000000eb1, 0x401, 0x8000) move_pages$auto(0x0, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) recvmmsg$auto(0xffffffffffffffff, 0x0, 0xc1f, 0x9, 0x0) mmap$auto(0x0, 0x4000000000020009, 0x4000000000e1, 0x400ebf, r0, 0x7) unshare$auto(0x40800080) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0xd0800, 0x0) write$auto_fuse_dev_operations_fuse_i(r1, &(0x7f0000000440)="19000003d30000", 0x7) socket(0x2, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x1700000000000000, 0x53, 0x9) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r3, 0x5393, r2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='\x00'/12, 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x80000000000000d, 0x1, 0x948d, 0x6, 0x15f4da0a, 0x1, 0x8, 0x1000000, 0xfffffffffffffffd, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7a100ac}, 0x6) unshare$auto(0x40000080) mmap$auto(0x0, 0x7, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) 1m39.030656731s ago: executing program 32 (id=2181): openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f0000000e40), 0x80d02, 0x0) r0 = openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0x20000000000eb1, 0x401, 0x8000) move_pages$auto(0x0, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000004180)='/dev/snd/controlC1\x00', 0x28180, 0x0) ioctl$auto(0x3, 0x400454ca, 0x38) recvmmsg$auto(0xffffffffffffffff, 0x0, 0xc1f, 0x9, 0x0) mmap$auto(0x0, 0x4000000000020009, 0x4000000000e1, 0x400ebf, r0, 0x7) unshare$auto(0x40800080) socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000400)='/dev/cuse\x00', 0xd0800, 0x0) write$auto_fuse_dev_operations_fuse_i(r1, &(0x7f0000000440)="19000003d30000", 0x7) socket(0x2, 0x1, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x1700000000000000, 0x53, 0x9) set_mempolicy$auto(0x6, &(0x7f0000000000)=0x7e, 0x4) move_pages$auto(0x0, 0x1002, 0x0, 0x0, 0x0, 0x2) r2 = socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) r3 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sda\x00', 0x8001, 0x0) ioctl$auto(r3, 0x5393, r2) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f00000000c0)='\x00'/12, 0xa3d9) select$auto(0xe, 0x0, 0x0, &(0x7f00000002c0)={[0x1ff, 0x7, 0x80000000000000d, 0x1, 0x948d, 0x6, 0x15f4da0a, 0x1, 0x8, 0x1000000, 0xfffffffffffffffd, 0x7, 0x6d3c, 0x5, 0x2]}, 0x0) writev$auto(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x7a100ac}, 0x6) unshare$auto(0x40000080) mmap$auto(0x0, 0x7, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x1, 0x0) 1m17.18449281s ago: executing program 4 (id=2325): r0 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x100e42, 0x0) write$auto_sg_fops_sg(r0, &(0x7f00000001c0)="bf5b1a8c24000000dbcbc7a996eea7f3804ca6c7591afff657", 0x19) readv$auto(0x3, &(0x7f0000000a80)={0x0, 0xffff}, 0x1) 1m16.968154641s ago: executing program 4 (id=2328): r0 = socket(0x2, 0x2, 0x88) r1 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x3, 0x2) getsockopt$auto(r1, 0x0, 0xd0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) setsockopt$auto(r0, 0x1, 0x3e, 0x0, 0x6) connect$auto(0x3, &(0x7f00000000c0)=@in={0x2, 0x0, @rand_addr=0xfffffffe}, 0x55) sendmmsg$auto(0x3, 0x0, 0x3, 0x1c) 1m16.182320061s ago: executing program 4 (id=2333): r0 = socket(0x2, 0x1, 0x0) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) mmap$auto(0x1, 0x8000000000000001, 0xdf, 0x9b72, r0, 0x8000) r1 = socket(0xa, 0x5, 0x0) statmount$auto(&(0x7f00000000c0)={0x7e, @raw, 0x80000027, 0x8, 0x2}, 0x0, 0x223, 0x0) getsockopt$auto(r1, 0x84, 0x8, 0x0, 0x0) 1m15.848790398s ago: executing program 4 (id=2334): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sg0\x00', 0x8083, 0x0) openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) r0 = openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) ioctl$auto_SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000040)) ppoll$auto(&(0x7f0000000000)={r0, 0x40}, 0x2, 0x0, 0x0, 0x8) r2 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/devices/virtual/net/rose3/queues/tx-0/tx_maxrate\x00', 0x8402, 0x0) write$auto_kernfs_file_fops_kernfs_internal(r2, &(0x7f0000000040)='8', 0x1) read$auto_nsim_dev_trap_fa_cookie_fops_dev(r1, &(0x7f0000000200)=""/238, 0xee) ioctl$auto_SNDCTL_DSP_SYNC(r0, 0x5001, 0xfffffffffffffffc) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) unshare$auto(0x40000080) socket(0x1d, 0x2, 0x6) openat$auto_fops_blob_file(0xffffffffffffff9c, &(0x7f0000011500), 0x40002, 0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) openat$auto_proc_mounts_operations_mnt_namespace(0xffffffffffffff9c, 0x0, 0x121080, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x6) r4 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_THREADS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010028"], 0x14}, 0x1, 0x0, 0x0, 0x20004011}, 0x0) mmap$auto(0x0, 0x40000c, 0xdf, 0x9b72, 0x2, 0x8000) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x40d40, 0x1a0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ttyS2\x00', 0x101680, 0x0) ioctl$auto_TIOCSETD2(0xffffffffffffffff, 0x5423, 0x0) write$auto(0x3, 0x0, 0xffd8) madvise$auto(0x0, 0xffffffffffff0001, 0x15) semtimedop$auto(0x3, 0x0, 0x8, &(0x7f00000000c0)={0xf3c7, 0x5}) 1m13.826395482s ago: executing program 4 (id=2344): mmap$auto(0x0, 0x400008, 0xdd, 0x9b72, 0x2, 0x8000) mlockall$auto(0x8000000000000001) ioctl$auto_VHOST_SET_LOG_FD2(0xffffffffffffffff, 0x4004af07, &(0x7f00000005c0)=0xffffffffffffffff) madvise$auto(0x1000000000005, 0x8000000000000000, 0xfffffffd) read$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffffff, &(0x7f0000000480)=""/4096, 0x1000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) r1 = socket(0x15, 0x5, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) mbind$auto(0x20000000000005, 0x2, 0x3, 0x0, 0x80000000, 0x7f) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) sendmsg$auto(r1, &(0x7f0000000180)={&(0x7f0000000040), 0x7fc, 0x0, 0x8, 0x0, 0x1, 0x4}, 0x0) writev$auto(0x1, 0x0, 0x1) r2 = socket$nl_generic(0x10, 0x3, 0x10) readahead$auto(r2, 0x6, 0x2) r3 = socket(0x23, 0x5, 0x0) listen$auto(r3, 0x5ed) sendmsg$auto_NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x80) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp1\x00', 0x20b42, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm1p/sub1/xrun_injection\x00', 0x0, 0x0) read$auto_proc_reg_file_ops_compat_inode(0xffffffffffffffff, &(0x7f00000001c0)=""/65, 0x41) socket(0xa, 0x2, 0x0) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) shutdown$auto(0x200000003, 0x2) openat$dir(0xffffffffffffff9c, 0x0, 0x280000, 0x100) ioprio_set$auto(0xffffff81, 0x0, 0x5) r4 = syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_IPVS_CMD_FLUSH(r0, &(0x7f0000000840)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000800)={&(0x7f0000000680)={0x178, r4, 0x8, 0x70bd29, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_DAEMON={0x5e, 0x3, 0x0, 0x1, [@generic="73ee782565d7c13b14cb77887dc8998484935c0ba9daaaf98047a937267a81787b", @generic="a6763149a10118db16116b27a692c557211e137c48e2fcc3971f57e7b2d25cf9db58f597693aa11cd6a0fd41f6df2e719729fa8ff40643cf4a"]}, @IPVS_CMD_ATTR_DEST={0xea, 0x2, 0x0, 0x1, [@generic="276c81da47d9d9ea93bac9d4965f031f896afd9708fa4595bafed6263258562761cd76788193ae9ebced25036afaf3822c7ec15f32846080efa5a308abbd058bd7f10e39fc072eb7d8a587872a94b8f5109b467242293db6e36b77ff2b621281cf5571e8a019eb78896880ba4af509f61d43ff0e6d56ca3dd0e3289dd8301691d75b83bc4c0828ce30110c62540c1665a39c751ef60b4289169fd155997c124aa7cbc901db4552597428457ce9317a8f8c04e9881eea7f43efde107ee820c7539fe2bec7d979615a7ae5b926aeedaa86b4d2ef6d2b76c3441ef4a0757c2c6acb459fe029bde4"]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x178}, 0x1, 0x0, 0x0, 0x8080}, 0x4800) mprotect$auto(0x0, 0x4, 0x4) 1m9.823170176s ago: executing program 4 (id=2361): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/max_ratio\x00', 0xa001, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86) io_uring_register$auto(0x2, 0x6, &(0x7f0000000180), 0x86) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x200201, 0x0) msgrcv$auto(0x2, &(0x7f0000000080)={0x5, 0x6}, 0xffff, 0x26da, 0x5) 54.616710338s ago: executing program 33 (id=2361): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/bdi/250:0/max_ratio\x00', 0xa001, 0x0) openat$auto_tun_fops_tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0x3, 0x400454ca, 0x38) close_range$auto(0x2, 0xa, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x1, 0x0) io_uring_register$auto(0x2, 0x2, &(0x7f0000000040), 0x86) io_uring_register$auto(0x2, 0x6, &(0x7f0000000180), 0x86) write$auto(r0, &(0x7f0000000040)='7\x00\\\xa0\x04|\x03\xcb\x12\xfa\b\x1c\xc7k', 0x81) openat$auto_kernel_debug_fops_orangefs_debugfs(0xffffffffffffff9c, &(0x7f0000000640), 0x200201, 0x0) msgrcv$auto(0x2, &(0x7f0000000080)={0x5, 0x6}, 0xffff, 0x26da, 0x5) 6.474429023s ago: executing program 1 (id=2580): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/slab/kmalloc-64/total_objects\x00', 0x2400, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000180)=""/250, 0xfa) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xf, 0x2, 0x1) r1 = socket(0x2, 0x2, 0x88) setsockopt$auto(r1, 0x88, 0xa, &(0x7f0000000000)='\xba\xba\xd3\xc8[&P\x9c\xe7AJz\'\x91\xce=B}v+7n\xa2r0\x92\xc3\x0eE\x96\xf63\xec\xe0\xb2\f\xa86v\xeb\xf1\xcb\xd4\xa9\v\xe1\xcc\x18', 0x80000e) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x3ff, 0x8000) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc4) r2 = bpf$auto(0x0, 0x0, 0x10) io_uring_setup$auto(0x1, 0x0) eventfd$auto(0xb) socket(0x2, 0x2, 0x88) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) connect$auto(0x3, 0x0, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x18e2, 0x6, 0x3a55, 0x16, 0xffffffffffffffff, 0x200) ioctl$auto_RTC_IRQP_SET(r2, 0x4008700c, 0x0) select$auto(0x7, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x48, 0x15, 0x1000, 0x100000001, 0xc, 0xf, 0x0, 0x0, 0xe, 0xd59, 0x101, 0xff, 0x2, 0x1]}, 0x0, 0x0) poll$auto(0x0, 0x5, 0x49) write$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffffff, 0x0, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/virtual/workqueue/nvme-wq/nice\x00', 0x103080, 0x0) read$auto(r3, 0x0, 0x1) socket(0x10, 0x2, 0xc) 5.465263397s ago: executing program 1 (id=2585): r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f000000fc00), 0x2aa82, 0x0) r1 = getpid() r2 = gettid() rt_tgsigqueueinfo$auto(r1, r2, 0x21, &(0x7f0000000400)={@siginfo_0_0={0x3, 0x1c51, 0xfffffffe, @_sigsys={0x0, 0x2, 0xffffffff}}}) prctl$auto(0xd61, 0x3, r1, 0xc, 0x6) ioctl$auto_KVM_CREATE_VM(r0, 0x4018aee2, 0x88) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x1c, 0x9, 0x63, 0x0, 0x0, 0x0, 0xffc, 0x8, 0x80000000000000a, 0x40000402, 0x9, 0x9, 0xffffffff80000000, 0xd, 0x6, 0x200000100103}) socket$nl_generic(0x10, 0x3, 0x10) write$auto_uhid_fops_uhid(0xffffffffffffffff, &(0x7f0000000040)="cb9f1c4173d0", 0x6) shmget$auto(0x8, 0x10565, 0x7ff) openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/snd/controlC2\x00', 0x890000, 0x0) shmat$auto(0x0, &(0x7f0000000080)='\xf0\xa3\x10v\xae(\fr\xc9\x8f*\x1b\x00\x00\xfe(}\xeal\xd6\xcf\xcf\xaaB\xd0\xfe\x16\n\r\xb9\x9d\xb0\x1f\xee\xe7n\xb0\x0fo\xe2\xafH\xfa*\x1ac7\xc2b\xc3\x9b\x05!>\xc5\xb9\x05\xd2\x00\x997\x8c\x1a3qj|\x18\xe8\x03\b\xce\x91\x03\xec\xa3\x16;\x04\xa9\x80L\xf8r\vot\x04\xda\xf3\xc8\x90F\t\x00\x00\x00\xb8\xe8\x1cZ\xe2\x87\x87\xed\xdfl\xdd\x9d\xcc\xaf\xc8O\x99\xb3i\xe8\x05K\xfa\xa9\x05\xa6\xbej\xe4\xf5+\xf2\xc8rg\n>.\x00\xe9b~\x83\a^\x14\t\x00>n\xd7\xe9\x00\x9b\x90\xaa\xba\xe5.\xf6ek\xb2\x80\xb2o\xfb\xd1\x92\x91\x1f,6\xc6\xe8\"\xb4X\x04b\x80\xc3V \xf8l\xff+\r=*`h#\xeeu\t\x8aXh\x0f\x1b\xcf\xd6w|\x7f\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\xce\x99\x85\a\t\xcb\xca\x8c\x15\xd9w\xd7\xc4\xf7\x8e\xd7\xd6;\x13\x1c\xbc\xa6n\xa91\xf4\x04\v\xf1s\x90\xfb\x87j\x1c\xc5\xf9 _\x8e\xec\x9c~\b\xbe\xde:\x98\xf6\x03\xe0-w\xcf\xef_\xb1\xfal\x193\xf79\xc6\xc9\xc6\xc6-\xa9\xb7i<\xb0ZB\x9f\xb2&\x1b\xe9\x93\xad\x910\xde\x1c=I\x03U\x1c\xddU~\xff\xe3&\xad\xe4\x90\xcf|>\x1cJLIe\xcf\xa6#\x98\xcfT\v6\x16\x9d\xac\n\x86\x04\xe6\xa6\xc8\xdf\xb6W\xf3=s\xdeWTQ\xddf$\x95\x81\xc6', 0xfffffffa) kcmp$auto(0x1, 0x100000001, 0x1, 0x4, 0x24000) shmctl$auto(0x13000000, 0x0, 0xfffffffffffffffd) shmdt$auto(&(0x7f0000000000)='(\x00') prctl$auto_PR_GET_FPEMU(0x9, 0x8000000000000001, r2, 0x5, 0x2) 5.062014881s ago: executing program 5 (id=2587): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r0 = prctl$auto_PR_PAC_RESET_KEYS(0x36, 0x0, 0xffffffffffffffff, 0x6, 0x7) write$auto(r0, &(0x7f0000000000)='\'\x00', 0x4) mmap$auto(0x0, 0x2020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x8000) r1 = openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) write$auto(0x3, 0x0, 0xfffffdef) write$auto(0x3, 0x0, 0xfffffdef) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x10000000000e2, 0xeb1, 0x405, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x40000) getrandom$auto(0x0, 0x6000000, 0x3) r2 = semctl$auto_SEM_INFO(0x3, 0xfffffff9, 0x13, 0x8) r3 = prctl$auto_PR_SET_MM_START_STACK(0x46, 0x5, r2, 0xcd8, 0x100) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ram7\x00', 0x14f602, 0x0) madvise$auto(0x0, 0x20499d, 0x9) ioctl$auto(0xffffffffffffffff, 0x40046205, 0x9) r4 = socket$nl_generic(0x10, 0x3, 0x10) settimeofday$auto(&(0x7f0000000140)={0x4000000000000000, 0xa6}, &(0x7f00000001c0)={0xffffb776, 0x8}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="300000003fb33a0275ab7dacc9c57f343fd91e6a500966cab4a9a53cc812f15e264175412483d2461404190ca5f452fa2418a95072c1aa9448609585d8aa2c56cf79c3b5ce5d51475af54337f2db965510fb9b4828b8283eaf9160b80558c2f002b32b770926ce39ba3dc6e1ee159ef4269bec889c0945cfb1e5cde0b786b7260c12c738eaf629ff41f065", @ANYRES16, @ANYBLOB="010029bd700002dcdf25030000000400087918000180140010800c"], 0x30}, 0x1, 0x0, 0x0, 0x200400f0}, 0x800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$auto_MACSEC_CMD_UPD_RXSA(r6, &(0x7f0000006200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d00)=ANY=[@ANYBLOB='X$\x00\x00', @ANYRES16=r7, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="3701728004002d80f159787d2df35906dfd05b75b7b3bf2292e15ee653fb43337237dc5e192d4c29d930e614181a0631993db6171e63a24b924660031f6f27ccde96f60014ca9ef75f4035a769dc7a53ae3237ce88d29152f9188753e9b6ee67ce3592e0f390326b128438fd0f4ca29be4fa29e56eb308001400", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="0400a28004003580040036808b0013802cc2b178744899995d88eb742eb47049064b44b1bbf7e2ade9f7748f9c30c61bf3c1d63c60be89d4c3d27bf22827cdbf89c50ae21f329b0d1236f4e586d2f1df0ec25041de9748851400a82196ed6bf3a7800b91121ba3280d718c52fc6b0c5065d653f74f37d60971b0e2d367a019d159390afc4379e657e99bab8107ad5c07a80ef67362aeab008ebe9759059e27be454ce9aada981ef99dfff4522255a7d9babd5059b2b2c9be4017610000002c00bb8008003a00", @ANYRES32, @ANYBLOB="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"/4428, @ANYRES32=0x0, @ANYBLOB], 0x2458}, 0x1, 0x0, 0x0, 0x4008000}, 0x0) r8 = getsockopt$auto_SO_DOMAIN(r3, 0x0, 0x27, &(0x7f0000000240)='/dev/ram7\x00', &(0x7f0000000300)=0x21) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth1\x00', 0x0}) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r5, &(0x7f0000000cc0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1a0222}, 0xc, &(0x7f0000000380)={&(0x7f00000039c0)={0x8dc, r7, 0x300, 0x70bd26, 0x25dfdbff, {}, [@MACSEC_ATTR_SA_CONFIG={0x18, 0x3, 0x0, 0x1, [@typed={0x14, 0x124, 0x0, 0x0, @ipv6=@empty}]}, @MACSEC_ATTR_OFFLOAD={0x1c2, 0x9, 0x0, 0x1, [@generic="1b4e7e6458a2ea2c3b790df80b6ae919429669a113e1a6072133943f6f454b04f96889073225c831e7995d1acb6060ecc90a3cae69088303f4ebdf845fe7793f79e8fab83a2c1b3bdd805112d227888649b736045fb4b10713752d9c17ae97c34ac440a2e68db3cacb8644cec159644ea3dbb59b7486e302dcfa461dc8f634b1404edaa2042afb4c859125183e3b16175dc6c952ee598d56a26153f9f304a00db5d914326a56f4f15cfedddcf54011a708377478c0988dcfacec97a7c71862145c76347e7b46feea7f8447fb1c2ffe1f96c7f5e6f68e0f0d0ffaf247facab698bf78487e438bf19193cdb063d69eaee45005", @generic="65c33aadbc43974261f653b1d95687aed3fddb1279cda13f89fafc19918702d718118c7c69a3aafebe4cfcbb8eb299657077411c477b", @nested={0x6b, 0x8f, 0x0, 0x1, [@typed={0x8, 0x75, 0x0, 0x0, @fd=r8}, @generic="e7988d52faed500eb5f5ba9a3f14ba8a48fbd4dd6c4ccf092267abb71e50f10b9509db0c886e512c5301b1f43c71aff9395409803414d4c76d99b8270a3123c6065b1c43295e831e91a8788e8991bebb96ff54e900c4bfd34f1562", @nested={0x4, 0x95}]}, @generic="a9e893001f11690e998264c895d7ac3ef7af", @nested={0xc, 0xd4, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}]}, @nested={0x4, 0x70}, @generic, @typed={0x8, 0x64, 0x0, 0x0, @pid=0xffffffffffffffff}]}, @MACSEC_ATTR_IFINDEX={0x8, 0x1, r9}, @MACSEC_ATTR_RXSC_CONFIG={0x1a2, 0x2, 0x0, 0x1, [@typed={0x8, 0xa0, 0x0, 0x0, @ipv4=@empty}, @generic="77baee586ff4696c6b07eaa1aebc0e64fd8453587f3b80d378", @nested={0x27, 0x57, 0x0, 0x1, [@nested={0x4, 0x2b}, @nested={0x4, 0x6d}, @generic, @typed={0x8, 0x51, 0x0, 0x0, @u32=0x7}, @nested={0x4, 0x49}, @generic="a4eeeacaf932b9a910be9120a2dd10"]}, @nested={0x7b, 0xd1, 0x0, 0x1, [@generic="899ed5593007ce6ae5250b76e174006dfa46bf61dbd609de9ad44efab46d3995cfea59bbf0eb790dc6988b5b19cce98342bbcb07092265881127b202bd00dfb7c8d0c32245196c9901b775b354d2663dcf63595be3b62cc8b8f2792330168a1df34e398aa98c46f038e8eb61042edfed587ec6272530c8"]}, @generic="74841d09bab2aa4a05ee1f3b20243721d349bea459935c0efd504ec3a643c3f2b6bd9e89ce88329fc3dd537b55125b7a8138d4de8e4864f2cbda58700d2b309b94d553d57578641ca67674cc15645c2590c93b30b4f6dee23c9f4e31ae1fe7371bdc560832bd37a5c79c896fe9b8e96f28a003774b78ff8b55318da1429d108c0df2ecc580eca1152a61c2717dda38ac439f979af14a8d7881f8da00ee0117ff4fc52dc1fbf7b49e4c860217eedecf2ec841000268a280c5210e401422b4ce85784f0714eb335a919be1211e117b9c0381c0b307de330a974b"]}, @MACSEC_ATTR_SA_CONFIG={0x108, 0x3, 0x0, 0x1, [@typed={0x8, 0x140, 0x0, 0x0, @fd=r3}, @typed={0x8, 0xe9, 0x0, 0x0, @u32}, @generic="f1fa1af8570c8ef5880d343af0af0fe6ea9c4cf8e24e23d6d6d15f9d5d7afc3705d1d3002c6894837174a2e652b159de0611bf8d53cc7cf84a91dc2f77e8734aab58cba7a0126c7f6353f49f3087685c28c70bfc39cf5ba7b48dfd4693a252014021fa7512492bb1cd3bac94b89d1a27d1d9ca99656d30418bfe46d70943616209327ab3e33993451b97c9832b1e45cc7568a24b1cae0ae6aa9a8a1f462201b5473e589f8857b60f11f831d6afa0348b8d8f411a4d00db2d08c2367575393ea0898ff951a5f1526d", @typed={0x8, 0x8, 0x0, 0x0, @fd=r4}, @nested={0x24, 0x67, 0x0, 0x1, [@nested={0x20, 0x141, 0x0, 0x1, [@typed={0xc, 0xcf, 0x0, 0x0, @str=')$-+-!\\\x00'}, @typed={0xc, 0x2f, 0x0, 0x0, @str='}^%\xcd$.&\x00'}, @typed={0x4, 0xc7}]}]}]}, @MACSEC_ATTR_OFFLOAD={0x19c, 0x9, 0x0, 0x1, [@typed={0xe, 0x5c, 0x0, 0x0, @str='/dev/ram7\x00'}, @typed={0x8, 0x12, 0x0, 0x0, @u32}, @typed={0x8, 0xd1, 0x0, 0x0, @pid=r2}, @generic="fbeee240e3634f4e5a26bdd772618c36e001b3fdb60c28933a9c6bb1e50a40b68415eb382eaf5b0ebf0e78ec49c479812873e60080926c62d17cbf0937e082c225ce0faa41e4e29248e67ca433f90fb458dd3fb44ea67d5cf3fcb009b3a131332452475c31d43c128e84ed3004da5e0632ddaf07548f7f143c02721f", @nested={0xfc, 0x9b, 0x0, 0x1, [@nested={0x4, 0x50}, @typed={0xc, 0x4, 0x0, 0x0, @u64=0x5}, @generic="d7aac435c94baed9fd64e1acaf3880c90bcee58fc8b60eb9a3628a96ec79e30699fe6782b9386ee0422e9ccdc6f03f883ca831474e32ec58ee8ecffb8937f280a872805d1fd8ecdd491c92fdbb09cc9edf3e0a81f55cab55203d03bcb801e39c3a3596dba982f0ce2e1d1dd935df2dfab44f8843b84cd1dbf20c2fd3937eb2dd55530502f361199f46ffd363a72a8e1558302e6bb84da07e3f6decba651cf28fed828ffd7ffc2b3cf098b6d5ee6cb6cd26a89019898adbc9ff2de4e0aca25a0272aa87", @generic="cb20e4e5ea61e298c9aaa0664a34b0e9a76bafaa01d9059520c1fab378", @typed={0x8, 0x6e, 0x0, 0x0, @pid=r2}]}]}, @MACSEC_ATTR_OFFLOAD={0x29c, 0x9, 0x0, 0x1, [@nested={0x1b0, 0x13c, 0x0, 0x1, [@generic="034bb87e4cc4803b7d55e9c0902ce043dd75aa30640c758c2fb09b40ba58a985ae6bfd650c6772fc81d258e2b7fa3b0facb1eaf1ab7ca917e1f056b8a079c870c9a90f9b3c81af7f39eeba6613708f7ae3115423e939011298d395d9a37f0dcabf1caf0a2e7d6ef85c372fa950ac4648f0", @typed={0x8, 0xb2, 0x0, 0x0, @pid=r2}, @nested={0x4, 0x9a}, @generic="b4f858528018436174c22c77352bc8fe16ff4d9c34326e6ed442b393e26e95dbe2b4f84b534ced92c9db64b5eaacdda9f61ed0f84d51f95777096a7be3f7af2bf518ded57ad40f0ea5415a2d44bbb8a1aa3c85248d80fee1c1c2e86960c3cd59d2fa824928de55", @generic="e0205f6780f961acd4e9bdc56b39584e512dd2feaa71889c746ee89b1fa148b7750266c6c008ea211aa265fd6f00108c99888153b67dd809fd0bb5980031208af82cf07a66c0dd2447e3afba17b4471c3126fb26981cdd15dd9a22eb80304501ace5878e94c1781a87e35c1919426ce1a1dffa2e3d39e2a607b96fdc2b6ba5dd46cdb01fba59f29760e0e78c58614ec8caef21f03c6604051692df16c9d5128a5023e437e7fa86afd2a5f983381c3ce9806dc0ea83a63ecb", @nested={0x4, 0x123}, @typed={0x8, 0x127, 0x0, 0x0, @fd=r1}, @nested={0x4, 0xe8}]}, @nested={0x24, 0x25, 0x0, 0x1, [@typed={0x20, 0x106, 0x0, 0x0, @binary="a2ca55e3d8a41139f5a969763048b23e2bd334e5b85d906631243b88"}]}, @nested={0x4, 0x122}, @generic, @nested={0xc0, 0x2d, 0x0, 0x1, [@nested={0xbb, 0x22, 0x0, 0x1, [@typed={0xc, 0x39, 0x0, 0x0, @str=')$-+-!\\\x00'}, @typed={0xe, 0x66, 0x0, 0x0, @binary="5b580ada8438f6994fd4"}, @generic="bebf84fbd274f4832e62d0f2fe7267193c14ea086612d599328c564bae0341804e0f6b98b6de96a349b8412ce0668730f8714cb5c503873fb7201df4653f631e7e66f454481a23bd5aad4c206f01c5c9140d72e56334395735d0943164062abcb0ae034392fc55ee2d0915ba43f74decc161922fc592a390ca832c57717e03c056ce6a2489991a05702d36f7d4de4a00afdfc03ebca064e3b7dc97"]}]}]}]}, 0x8dc}, 0x1, 0x0, 0x0, 0x40}, 0x40088c1) sendmmsg$auto(r5, &(0x7f00000000c0)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000002c0), 0x3, 0xa505}, 0x7ff}, 0x7, 0x4008) r10 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x18, r10, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x40000}, 0x4044820) 4.980688882s ago: executing program 1 (id=2588): mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) r0 = io_uring_setup$auto(0x1, 0x0) r1 = bpf$auto(0x5, 0x0, 0x102) mmap$auto(0x0, 0xc, 0x9c0f, 0x44eb2, 0x10006, 0x300000000000) ptrace$auto(0x10, 0x0, 0x400, 0x2) r2 = fanotify_init$auto(0x7a, 0x80000000000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYRES16=r0, @ANYBLOB="06acae4b11b09ba5170e697d45a9a1f1dc31e045e858a3665aae3abdc209d64fca4cb4ac021f5782732da47d5e00a6b5702083fd6ffcbb0c21bbc178dd61ee013fc5e5d6090b66cb22e23cb2f1259d5e34ced7c1ea2c3fb54e8be8c12f46d3c9785a540b3534aea149127ae78da3ad1f1491ca24044ed1537df854ec919fa6a080936f1a4909cda3ec1555a60d2616ef3b2662bb81b516796c17c732117c211d1d", @ANYRESHEX=r2, @ANYRES8=r0, @ANYRESDEC=r0, @ANYRESDEC=r2, @ANYRES16=r0, @ANYRES8=0x0, @ANYRES32=0x0, @ANYRES8=r1], 0x1ac}}, 0x40000) r3 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000280)='/proc/thread-self/oom_adj\x00', 0x14a502, 0x0) writev$auto(r3, &(0x7f00000001c0)={0x0}, 0x5) read$auto_uinput_fops_uinput(r1, &(0x7f0000000000)=""/34, 0x22) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) unshare$auto(0x2b8) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x2, 0x8, 0x0) socket(0x10, 0x2, 0x0) r4 = socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) splice$auto(0x4, 0x0, r4, 0x0, 0x1000, 0xf) fcntl$auto(r4, 0x408, 0xffffffff80000000) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) 4.976378403s ago: executing program 3 (id=2589): syz_genetlink_get_family_id$auto_netdev(0x0, 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_DEV_GET(0xffffffffffffffff, 0x0, 0x24040050) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x2, 0x0) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x1, 0x106) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0xffff, @remote}, 0x6a) socket(0x2, 0x1, 0x106) listen$auto(0x3, 0x81) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20008dff) 4.713183921s ago: executing program 3 (id=2590): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$auto(r0, 0x1ff, 0xfc9c, &(0x7f0000000040)='/dev/audio1\x00', 0x4589dc41) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0x15) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1300"], 0x1ac}}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) openat$auto_stats_seq_fops_netdebug(0xffffffffffffff9c, 0x0, 0x40840, 0x0) openat$auto_percpu_stats_fops_(0xffffffffffffff9c, 0x0, 0x6a2803, 0x0) statx$auto(0xffffffffffffffff, 0x0, 0x7, 0xe747042, 0x0) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) futex$auto(0xfffffffffffffffd, 0x5, 0xfffffffffffffffc, 0xfffffffffffffffc, 0xfffffffffffffffc, 0x18ad42a8) mount$auto(0x0, &(0x7f00000000c0)='.\x00', &(0x7f00000001c0)='nfsd\x00\xee\x1a\x8f\xa2~?\xe2\x82fg\xb3G\xbe\xc8\x12\xae\xc3\xc0@[\x99\xec\xbf(\xec\xc3\xb2\xf2\x15Zi\xc4S6\'\x14\x05\t\x8c\xd5?\xa0\x00\xd8\xe4\xafW\xcc\xa3\xce\tI\x95\xe12\xaclJ\xba\xeb\xe4\x83Z\xaev\xd7\xd9\xdd_\x14O\x84\xaa\x13W\xb7\x06\'fvQ\x95\xc5\xd1\x98\xe3T\xcdfk\xc7\xe9\x96\r\x91\xb0\xc46\xf2\xfc\xef\xfe\xa0\xc9d\xb3h$\xeb\xad\xa4P\x8f\xc3bM{4RQ\x00\x9d)_\xd81(\x03\xfd\rw\xca1\x88|\xe5\x1e\x10\x89X\x01\xe9\xf6g\x95xx\xaf\xa9~m\x05\xe1\xa8\xda\x80\xc5\x8f\xb41\x81\xf0\xa3\xa2\xe4\x81\xb9\x92\xda\x13\xfe5\xfb\xc6\xd8>\x01\xd4\x14', 0x5, 0x0) umount2$auto(&(0x7f0000000040)='.\x00', 0x4) mmap$auto(0x0, 0x5, 0x6, 0xeb1, 0xfffffffffffffffa, 0x8000) readv$auto(0x3, 0x0, 0x6) umount2$auto(&(0x7f0000000000)='.\x00', 0x4) ioctl$auto_SNDCTL_DSP_SETTRIGGER(0xffffffffffffffff, 0x40045010, 0x0) timer_settime$auto(0x3, 0x0, 0xfffffffffffffffd, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio1\x00', 0x20b42, 0x0) close_range$auto(0x2, 0x8, 0x0) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm0c/sub0/sw_params\x00', 0x400, 0x0) pread64$auto(r2, 0x0, 0x1fe, 0x9) 4.267323056s ago: executing program 1 (id=2592): mmap$auto(0x800000000000000, 0x4020009, 0x6, 0xeb1, 0x401, 0x8005) sysfs$auto(0x2, 0x8, 0x0) fsopen$auto(0x0, 0x1) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0) read$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000080)=""/4096, 0x1000) read$auto(r0, &(0x7f0000001200)='\xefI5\x1d\xc4~\xd0>\xd2;\xbcj\xce\x18+\x9blE\x18\xa1>V\n\xa4\x90cgy\x98O\xf4\x7f\xe0\xbf\xbb\x9f\xfc\xfb\x870l0\xcf\xb4\rx\xcb\bpgr0}) r2 = prctl$auto_PR_GET_SHADOW_STACK_STATUS(0x4a, 0xfff, r1, 0xfffffffffffffff8, 0xc) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/uevent_seqnum\x00', 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r3, &(0x7f0000001dc0)=""/195, 0xc3) syz_clone3(&(0x7f0000001180)={0x8a200080, 0x0, 0x0, 0x0, {0x19}, 0x0, 0x0, 0x0, 0x0, 0x0, {r2}}, 0x58) r4 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/ubifs/chk_lprops\x00', 0x40aa2, 0x0) write$auto_dfs_global_fops_debug(r4, &(0x7f0000000d80)='0', 0x1) read$auto_trace_time_stamp_mode_fops_trace(r2, &(0x7f0000000000)=""/36, 0x24) r5 = socket(0x8, 0x1, 0xffffffff) r6 = getsockopt$auto(r5, 0x84, 0x9, 0x0, 0x0) setsockopt$auto_SO_PROTOCOL(r6, 0x3, 0x26, &(0x7f0000000040)='/sys/kernel/uevent_seqnum\x00', 0x4) 3.492786435s ago: executing program 0 (id=2594): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x200008000) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/nfc/nfc0/rfkill0/soft\x00', 0x8081, 0x0) r1 = open(&(0x7f0000000480)='./cgroup.cpu/cgroup.procs\x00', 0x80842, 0x91) read$auto(r1, 0x0, 0x1) write$auto(r0, 0x0, 0xe) socket(0x29, 0x5, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) syz_genetlink_get_family_id$auto_l2tp(&(0x7f0000000180), 0xffffffffffffffff) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x697b}, 0xed7138c}, 0x9a6, 0xe000) 3.48736002s ago: executing program 5 (id=2595): mmap$auto(0x0, 0x400008, 0xdf, 0x4009b72, 0x2, 0x8000) socket(0xa, 0x801, 0x100) prctl$auto(0x1000000003b, 0x1, 0x4, 0x2, 0x8) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) open(&(0x7f0000000300)='./file0\x00', 0x7ffd, 0x12) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001480), r0) sendmsg$auto_ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001c80)={&(0x7f0000000140)={0x34, r1, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x8800}, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x0) r2 = prctl$auto_PR_SET_MM_ARG_END(0xc, 0x9, 0x0, 0x1, 0x4) sendto$auto(r2, &(0x7f00000000c0), 0xff, 0x7fff, &(0x7f0000000100)=@ax25={0x3, @bcast, 0x1}, 0x7fff) r3 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000400), 0x189002, 0x0) ioctl$auto_PPPIOCSMRU(r3, 0xc004743e, 0x0) socket(0x18, 0x2, 0x0) adjtimex$auto(&(0x7f00000004c0)={0xf332b6e, 0x0, 0x0, 0xfffffffffffffffd, 0xd4, 0x3, 0x6, 0x0, 0x200000000000001, 0x368e, 0x2, {0x100000000, 0x4}, 0xff, 0x6, 0xfffffffffffffffd, 0x1008000, 0x0, 0x8000000c, 0x81, 0xffffffffffff628e, 0xa747, 0xdeb1, 0x804}) socket(0x2b, 0x1, 0x1) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) r4 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x1, 0x0) write$auto(r4, &(0x7f0000000400)='/dev/audio1\x00', 0xa3d9) socket(0x2, 0x1, 0x0) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) r6 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000240)='/sys/devices/platform/dummy_hcd.7/usb8/power/level\x00', 0x2881, 0x0) r7 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000001c0)='/sys/devices/virtual/net/lapb4/ifalias\x00', 0x1a1842, 0x0) write$auto(r7, &(0x7f0000000000)='9\x00d1L\xff\x15\xba\xa17=(\xc1\xf8\xff\xff\v\xb5^\xa1/[', 0x4) write$auto_kernfs_file_fops_kernfs_internal(r6, &(0x7f00000002c0), 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24004080}, 0x20040894) 3.129874381s ago: executing program 1 (id=2596): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) mremap$auto(0x0, 0x4, 0x4, 0x7, 0x4021000) 2.888402037s ago: executing program 1 (id=2597): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x4) mmap$auto(0x0, 0x20006, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) io_uring_setup$auto(0x6, 0x0) r0 = socket(0x2b, 0x1, 0x0) sendmsg$auto_NLBL_CIPSOV4_C_REMOVE(r0, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x80}, 0x2404c040) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) connect$auto(0x3, 0x0, 0x55) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0x4) select$auto(0x4, 0x0, &(0x7f0000000080)={[0x209c, 0xe9e, 0x1, 0xd, 0x250, 0x100000001, 0x3, 0x2017d, 0x4, 0x40, 0xd, 0xd59, 0xfb, 0xff, 0x21, 0x100000001]}, 0x0, 0x0) lchown$auto(&(0x7f0000000000)='.\x00', 0x0, 0x6) 2.835650099s ago: executing program 0 (id=2598): openat$auto_fops_blob_file(0xffffffffffffff9c, 0x0, 0xca981, 0x0) socket$nl_generic(0x10, 0x3, 0x10) adjtimex$auto(&(0x7f00000004c0)={0x7fffffff, 0x0, 0x7d, 0xfffffffffffffffd, 0xd4, 0x4, 0x4, 0x0, 0x1, 0x368e, 0x5, {0xc, 0x10000}, 0x5, 0xa, 0xfffffffffffffffd, 0xd, 0x0, 0x80000004, 0x10081, 0xffffffffffff628e, 0x4, 0x0, 0x800}) r0 = openat$auto_snd_rawmidi_f_ops_rawmidi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snd/midiC2D0\x00', 0x80102, 0x0) socket(0x28, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x1, 0x106) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x2, 0x0) write$auto(r0, &(0x7f00000001c0)='/dev/audio1\x00JR\xe7\xae\xd27M0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000080), {0x1a}, &(0x7f00000000c0)=""/124, 0x7c, &(0x7f0000000140)=""/55, &(0x7f0000000180)=[0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff], 0xa}, 0x58) getsockopt$auto(r0, 0x4, 0x5, &(0x7f0000000380)='\x00', &(0x7f00000003c0)=0x9f11) mmap$auto(0x0, 0xf9, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x4, 0x0) socket(0x2b, 0x1, 0x1) setsockopt$auto(0x3, 0x8000000000000006, 0x25, 0x0, 0x7ffffc) waitid$auto_P_ALL(0x0, r0, &(0x7f0000000240)={@_si_pad}, 0x6, &(0x7f00000002c0)={{0xff, 0xb}, {0x6, 0x5}, 0x7, 0x2, 0x7, 0x3, 0x8, 0x5, 0x8, 0x6, 0xd, 0x625369de, 0x8000, 0x1, 0xfff, 0xffffffffffffffff}) 1.875608184s ago: executing program 5 (id=2601): mmap$auto(0x5, 0x2020009, 0x8, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 64) r0 = socketpair$auto(0x1e, 0x4, 0x8000000000000000, 0x0) (async, rerun: 64) mmap$auto(0x0, 0x2000a, 0x10000000000df, 0xeb2, 0x401, 0x8000) (async) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) (async) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000005600)='/proc/sys/dev/parport/default/timeslice\x00', 0x88281, 0x0) (async, rerun: 32) write$auto(0x3, 0x0, 0xfdef) (async, rerun: 32) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/smaps_rollup\x00', 0x40000, 0x0) (async) socket(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) read$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000240)=""/129, 0x81) (rerun: 32) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/device_info\x00', 0x8002, 0x0) (async, rerun: 32) openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) (rerun: 32) fstat$auto(0x2, 0x0) (async) sysfs$auto(0x2, 0x10000000000048, 0x0) close_range$auto(0x2, 0x8, 0x0) (async) r1 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0x8c00, 0x0) ioctl$auto_KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$auto(0x3, 0xae03, 0xffffffffffffffff) (async) open(&(0x7f0000000800)='./file0\x00', 0x6a9183, 0x165) (async) execve$auto(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) (async) mount$auto(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) (async) mount$auto(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='nfsd\x00', 0xf, 0x0) 1.505446198s ago: executing program 3 (id=2602): r0 = openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x8200, 0x0) pread64$auto(r0, 0x0, 0xa5, 0x7) r1 = socket$nl_generic(0x10, 0x3, 0x10) fsconfig$auto(r1, 0x1, &(0x7f0000000200)='I\xee\"\xe3\xb7\xcfD\xe5\xb1\x05\x1e#\xff1<\xd9h[e\xdf\xc0M\xa2\x00\v\x97\xb5\xd4\x94\x99u\x9e\xf4O\x1a\xb1\x05\xb8\xcb\x96\fd\xa3\xf9&\xc9~\x10\x06X\a\xc8\xb7\x97\xc7M\x83\'^\xc9\x9e\xccAsv\xce8sw\v\xac\xcd\xa2B\xf8.\xce\xe6n\xfe\xd6\xc8^W>Rz`C+\x0e\x8c<\xc5\x8f\xe6\x0f\x14\xfa\x9ea4>\xd8O[{\xede\xfd\xbc\xc7\xbd4_\xbc\xc6\x06\xe5h\x9e\xf5/4\xe8\xcfc\x95\xbb~\xd9.\xb3\x84\xb8K\xa7\xca\xda\xc8\x11u\xa1\x1d\x9d\xe1%\xc0m\xf6%1\xba\xe7^\xed0\xdc\x86\xeaG)?p,Up \xe9\b\x14\xaf\xbf\xd9\xc3,\xb8\x17\x10\x9f\x92\x95@),A\xb4\x92Q\x86\xbe\xed=p\x1b\x9d\xd4\x99_]K\xce.\x00\x00\x00\x8eDv\x0fl\xed\x93ey\xf9\x19\xf0\x9d\xf5\xfe\xed\xc7Q\xc0ZJ\xc9*7\xf2\x1a\xa7\xb3\xc6v\v\xe1u\x16:\x15\xefel\xf0\x8c/\xa2\x95\xc1\xacd\xc9\a\xe5\x888F\xaa\xce\x94\xa2zsx\xea\x96\x7f~]\xdbj\xd1#\x94K\xcf\x11l\xe5Z\xec\xa6B\x90\xb6\xa3`\x88\xd4\x87\x17\x8a\xedFx\x95#\x83\x99\x00\xc6Z\x1au\x8e\xa7}\xa7\xe9\x83X\xa3\xad\xe2T\xea\xa0\xba\xd7R8T\x00\x8e0h\x8ck4\x15\xf3sh0\xd3\x1e\xedU@\xab\xc0g\xeeT\xc5\x8d\x9b\x188x)\xf0i]\xdcf\xdd\xf9\xffA\"ZQ\x8d\x15\xff\xf3WYX\x8a/\xb36\x1d\x8e7\xb2d3\xe8\xf4\x1e3\xec\xfe\xbf\xbbo\xbb\xd2Z\x89:\xa2\xc8n8k\xa8\xba\xa5E\x9f\xbe>3,\xcb\xa2\xa7q \xe2', &(0x7f0000000280), 0x0) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = fcntl$getown(r0, 0x9) sendmsg$auto_NL80211_CMD_SET_MCAST_RATE(r1, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x84804022}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x290, r2, 0x20, 0x70bd28, 0x25dfdbff, {}, [@NL80211_ATTR_SCAN_FREQUENCIES={0x3c, 0x2c, 0x0, 0x1, [@nested={0x38, 0xa7, 0x0, 0x1, [@typed={0x8, 0x73, 0x0, 0x0, @pid=r3}, @typed={0xc, 0x57, 0x0, 0x0, @u64=0x3}, @nested={0x4, 0x46}, @typed={0x8, 0x3a, 0x0, 0x0, @pid=0xffffffffffffffff}, @typed={0x8, 0x146, 0x0, 0x0, @ipv4=@empty}, @nested={0x4, 0xf0}, @nested={0x4, 0x11d}, @nested={0x4, 0x100}]}]}, @NL80211_ATTR_CNTDWN_OFFS_PRESP={0xb1, 0xbb, "c19b944e692217bfdaf2f3e8fd37776f5c91c0d82dd65626ce31f2e737fa41d921c515c2a91a1e69cdc8ce2d7c4f35279e2d0fc96ca9284edc425169ea19c6145d2be85036610a4bf165ff9b0e953cb2e6f483e80bd4dafc720c3082a72881acbc58c48c4e64e185024edaaec3eba65cb5b90c3cbfb43f827d3c2a73881f8c3d88c171652bd49a0ac18f6ee513407f2e593fadcb0b5c8617f9e3184e1707cf83fb938e38edc3af7adbcecdf0c4"}, @NL80211_ATTR_MEASUREMENT_DURATION={0x6, 0xeb, 0xfff8}, @NL80211_ATTR_FILS_ERP_REALM={0x8b, 0xfa, "a09d18611e0b9cb4cb21dbf240da474ec3810e07e848fb5bf227839d6a54af8035df36934a658a4c7c69afa138e4f94e75a77f6282accd4fac18b148a5626bcadb49746bdafcf57ef725b948bbe5d7be4d879abc23fde41de1673522679eb7d3d41bb23362ce877d6fc81b8e86030e0e032583bdcf36391ff08887597f9ba55c8a3852c651a045"}, @NL80211_ATTR_NAN_FUNC={0xf8, 0xf0, 0x0, 0x1, [@nested={0xe8, 0x88, 0x0, 0x1, [@nested={0x4, 0x14c}, @nested={0x4, 0x2c}, @nested={0x4, 0x29}, @generic="b91fe5cfeb340394973d575fe5b110e8164a74a2f5333b139cf3df217186edfc7b54504ef3e367bea1aa96c8307002cb3b622d7cb30a4152ecf425788394f6f46755deaa9a96ea296fd90b88623a06c86849e2273f91eebafb7fd366d0d7733034fc6a7b3907fd0a7949dbc5526fa6ca917292cc5407a2c75d91e30b42e2dc2f58d60b78c9fc0fda73185ab6f471700293d55f8b129307ba803d213dc14e799e8873a9536d773d93e0374101b055080efb0d240007edb3655e5f4f103df51216274b96fb8515176d9f742c88f19b9a408d6ea378", @nested={0x4, 0x29}]}, @typed={0x4, 0xed}, @nested={0x8, 0x63, 0x0, 0x1, [@nested={0x4, 0x48}]}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x4000800}, 0x4040044) 1.500902684s ago: executing program 0 (id=2603): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r0, &(0x7f0000004380)={0x0, 0x0, &(0x7f0000004340)={&(0x7f0000004300)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB='\v'], 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x810) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), r0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) read$auto(r0, &(0x7f0000000000)='\x00', 0x91e2) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40080}, 0x40090) socket(0x2, 0x3, 0x100) r1 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0x0}, 0x20008000) setsockopt$auto_SO_DETACH_REUSEPORT_BPF(r1, 0x7f, 0x44, &(0x7f0000000100)='$%{^\xf4)\'){(@\'\x00', 0x18a6) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) r2 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/tty12\x00', 0x800, 0x0) ioctl$auto(r2, 0x5607, r2) 1.026320481s ago: executing program 3 (id=2604): madvise$auto(0x0, 0x7fffffffffffffff, 0xa) (async) r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm0c/sub2/xrun_injection\x00', 0x282440, 0x0) (async, rerun: 32) mlockall$auto(0x7) (async, rerun: 32) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) (async, rerun: 64) madvise$auto(0x0, 0x2000040080000004, 0xe) (async, rerun: 64) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) (async, rerun: 32) mmap$auto(0xfffffffffffffffe, 0x400, 0x4000000000de, 0xeb1, 0xffffffffffffffff, 0x3ff) (rerun: 32) remap_file_pages$auto(0x6a27, 0x1000, 0x0, 0x6, 0x4) r1 = socket(0xa, 0x1, 0x56) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$auto_nbd(&(0x7f0000000340), 0xffffffffffffffff) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000200), r2) (async, rerun: 64) r5 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r6 = getpgid(0x0) kcmp$auto(r6, r5, 0x1, 0xffffffffffffffff, 0xffffffffffffffff) (async) sendmsg$auto_NL80211_CMD_SET_QOS_MAP(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000580)=ANY=[@ANYBLOB="9c0b0000", @ANYRES16=r4, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0800f800", @ANYRES32=r5, @ANYBLOB="b500f7800c00a00005000000000000000e004200403a255b23272e2c2a00000008005600", @ANYRES32=r1, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB='\b\x00K\x00', @ANYRES32=0x0, @ANYBLOB="00000f0028800800a200", @ANYRES32=r0, @ANYBLOB="a78cb90008008800", @ANYRES32=r3, @ANYBLOB="00000004002b80c25faa73bf97721b2e7fe95143b1df4243d7a1b6348b90f3b218e0a0770aa4e1b489e623f5ff856b54ee388a6b8dadd4eb04a864cdf396473de29b75a83c23a8ce87bf44d70bf9971e4409565bc21af82f56b6d475070ce56758b3532cdf5ec33066243ecb9f67a02f473e4c11b433fa9117a2982c99e2e1e725d3000800b7006e626400f9fdc0c5945932bd7447f0aa76f34cd714f2627427203721a1a08598074811ffdead229c3054f96414552cf17d7bef033dc742dc994c0594fe8718a2adc408d8229e37c110a9d9766a3608007600", @ANYRES32=r5, @ANYBLOB="e7fed39ede5a371933e7fd1b87624b55242ce4d8eab04a041132fca87ae98fd6f3816f22b7375da30264a7fac13ac1b2f59c9532f047221377b5a8dd820d71d88349fcb2f489f09ba9b5b50d2ab37fe61d64ed2877e38d6d0000060096000400000008004200070000001400f9001ebf9b13f793f1fdfd9ad73771ccb3a6"], 0xb9c}, 0x1, 0x0, 0x0, 0x48080}, 0x20000010) syz_genetlink_get_family_id$auto_nlbl_mgmt(&(0x7f0000000040), r2) sendmsg$auto_NBD_CMD_CONNECT(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000009400)=ANY=[], 0x2c}, 0x1, 0x0, 0x0, 0x44080}, 0x20040000) (async) semctl$auto(0x8, 0x806, 0x13, 0x46) (async) r7 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000540)='/proc/sys/kernel/kexec_load_limit_panic\x00', 0x40141, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r7, 0x0, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xffffffffffffffff, 0x8000) (async) r8 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/007/001\x00', 0xa901, 0x0) ioctl$auto_USBDEVFS_SUBMITURB32(r8, 0x802c550a, &(0x7f0000000300)=ANY=[@ANYBLOB="020000060000e6ff040000000100400008"]) openat$auto_dvb_dvr_fops_dmxdev(0xffffffffffffff9c, &(0x7f0000000100), 0x1a3540, 0x0) (async) ioctl$auto_USBDEVFS_CLAIM_PORT(r8, 0x80045518, &(0x7f0000000080)=0x53) ioctl$auto(r8, 0x4008550d, r8) (async) socket(0x2b, 0x1, 0x1) mmap$auto(0x0, 0x20009, 0xe3, 0x100000eb1, 0x40000000000a1, 0x8000) 978.961209ms ago: executing program 5 (id=2605): mmap$auto(0x800000000000000, 0x4020009, 0x6, 0xeb1, 0x401, 0x8005) sysfs$auto(0x2, 0x8, 0x0) fsopen$auto(0x0, 0x1) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/domain_policy\x00', 0x0, 0x0) read$auto_tomoyo_operations_securityfs_if(r0, &(0x7f0000000080)=""/4096, 0x1000) read$auto(r0, &(0x7f0000001200)='\xefI5\x1d\xc4~\xd0>\xd2;\xbcj\xce\x18+\x9blE\x18\xa1>V\n\xa4\x90cgy\x98O\xf4\x7f\xe0\xbf\xbb\x9f\xfc\xfb\x870l0\xcf\xb4\rx\xcb\bpg0xa, @new_map_fd=0x5, 0x4007, @old_prog_fd=0x13b}, 0xa3) mmap$auto(0x0, 0x20009, 0x20004000010000df, 0xeb2, r4, 0x8000) read$auto_v4l2_fops_v4l2_dev(r5, &(0x7f00000000c0)=""/33, 0x18) close_range$auto(0x2, 0x8, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyy6\x00', 0x2, 0x0) ioctl$auto(r1, 0x5602, 0xffffffffffffffff) openat$auto_mousedev_fops_mousedev(0xffffffffffffff9c, 0x0, 0x1a1382, 0x0) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x2, 0x100) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r6, &(0x7f0000001400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="20a675f3", @ANYRESOCT=r3, @ANYBLOB="01002bbd7000fcdbdf25040000000400100008000c0001000000"], 0x20}, 0x1, 0x0, 0x0, 0x24040000}, 0x18800) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4001) socket(0x10, 0x2, 0xc) 0s ago: executing program 5 (id=2609): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/devices/netdevsim3/sriov_numvfs\x00', 0x10b142, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x5, 0x8000) mmap$auto(0xfffffffffffffff9, 0x400009, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) madvise$auto(0x0, 0x2, 0x8) openat$auto_nsim_dev_hwstats_l3_disable_fops_hwstats(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/netdevsim/netdevsim3/hwstats/l3/disable_ifindex\x00', 0x841, 0x0) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) write$auto(r0, 0x0, 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f00000000c0), r1) sendmsg$auto_SMC_NETLINK_GET_DEV_SMCD(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xb0, r2, 0x400, 0x70bd2b, 0x25dfdbfd, {}, "a7f67c10f9f2f68f69b563763527bdf664ecc5f554b680e2d9d06175dd2f6d06a85e438f9f8f8cb41db663f236f483ab3c944ad5cd5ed9fcd29ee7d1100c8e1360eeb508cbe1422f4e85fa74e1830b94a763fa26bd5fe09df5c611ce642cd9736ea4cb66533d8ebf4fd6cc73f64d68918c1eb8c3ed6661b6f621c66634dc0a09bb87eecc20b7729899c34ced93051d0dfc9870323fa01f3563653ce5"}, 0xb0}, 0x1, 0x0, 0x0, 0x840}, 0x0) kernel console output (not intermixed with test programs): 240 [ 430.141252][T13203] __x64_sys_ioctl+0xb7/0x200 [ 430.141282][T13203] do_syscall_64+0xcd/0x250 [ 430.141314][T13203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.141345][T13203] RIP: 0033:0x7ff655d8d169 [ 430.141363][T13203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.141383][T13203] RSP: 002b:00007ff656cc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 430.141405][T13203] RAX: ffffffffffffffda RBX: 00007ff655fa5fa0 RCX: 00007ff655d8d169 [ 430.141420][T13203] RDX: 0000000000000003 RSI: 0000000040104d04 RDI: 0000000000000003 [ 430.141434][T13203] RBP: 00007ff656cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 430.141447][T13203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.141460][T13203] R13: 0000000000000000 R14: 00007ff655fa5fa0 R15: 00007fff540ee5d8 [ 430.141488][T13203] [ 430.141497][T13203] ERROR: Out of memory at tomoyo_realpath_from_path. [ 430.314321][ C1] vkms_vblank_simulate: vblank timer overrun [ 430.382662][T13203] MTRR 1 not used [ 430.680228][T13213] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2009'. [ 430.723305][T13213] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2009'. [ 433.126187][T13246] FAULT_INJECTION: forcing a failure. [ 433.126187][T13246] name failslab, interval 1, probability 0, space 0, times 0 [ 433.139020][T13246] CPU: 1 UID: 0 PID: 13246 Comm: syz.2.2016 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 433.139068][T13246] Tainted: [U]=USER [ 433.139075][T13246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 433.139087][T13246] Call Trace: [ 433.139094][T13246] [ 433.139103][T13246] dump_stack_lvl+0x16c/0x1f0 [ 433.139136][T13246] should_fail_ex+0x50a/0x650 [ 433.139170][T13246] ? fs_reclaim_acquire+0xae/0x150 [ 433.139200][T13246] ? tomoyo_realpath_from_path+0xb9/0x720 [ 433.139229][T13246] should_failslab+0xc2/0x120 [ 433.139252][T13246] __kmalloc_noprof+0xcb/0x510 [ 433.139284][T13246] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 433.139321][T13246] tomoyo_realpath_from_path+0xb9/0x720 [ 433.139351][T13246] ? tomoyo_path_number_perm+0x235/0x590 [ 433.139379][T13246] ? tomoyo_path_number_perm+0x235/0x590 [ 433.139408][T13246] tomoyo_path_number_perm+0x248/0x590 [ 433.139433][T13246] ? tomoyo_path_number_perm+0x235/0x590 [ 433.139463][T13246] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 433.139526][T13246] ? __pfx_lock_release+0x10/0x10 [ 433.139555][T13246] ? trace_lock_acquire+0x14e/0x1f0 [ 433.139584][T13246] ? lock_acquire+0x2f/0xb0 [ 433.139611][T13246] ? __fget_files+0x40/0x3a0 [ 433.139645][T13246] ? __fget_files+0x206/0x3a0 [ 433.139681][T13246] security_file_ioctl+0x9b/0x240 [ 433.139710][T13246] __x64_sys_ioctl+0xb7/0x200 [ 433.139740][T13246] do_syscall_64+0xcd/0x250 [ 433.139771][T13246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.139801][T13246] RIP: 0033:0x7f669358d169 [ 433.139819][T13246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.139840][T13246] RSP: 002b:00007f66943eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 433.139862][T13246] RAX: ffffffffffffffda RBX: 00007f66937a5fa0 RCX: 00007f669358d169 [ 433.139877][T13246] RDX: 0000000000000000 RSI: 00000000c0686611 RDI: 0000000000000005 [ 433.139891][T13246] RBP: 00007f66943eb090 R08: 0000000000000000 R09: 0000000000000000 [ 433.139904][T13246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 433.139917][T13246] R13: 0000000000000000 R14: 00007f66937a5fa0 R15: 00007fffcd2ed568 [ 433.139947][T13246] [ 433.140811][T13246] ERROR: Out of memory at tomoyo_realpath_from_path. [ 433.767014][T13236] kexec: Could not allocate control_code_buffer [ 433.859063][T13250] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2018'. [ 433.892427][T13250] veth0_to_bond: entered promiscuous mode [ 433.997612][T13256] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2019'. [ 434.051760][T13259] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2019'. [ 436.153129][T13265] kexec: Could not allocate control_code_buffer [ 437.383481][T13319] FAULT_INJECTION: forcing a failure. [ 437.383481][T13319] name failslab, interval 1, probability 0, space 0, times 0 [ 437.458355][T13319] CPU: 0 UID: 0 PID: 13319 Comm: syz.2.2033 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 437.458401][T13319] Tainted: [U]=USER [ 437.458408][T13319] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 437.458420][T13319] Call Trace: [ 437.458427][T13319] [ 437.458436][T13319] dump_stack_lvl+0x16c/0x1f0 [ 437.458470][T13319] should_fail_ex+0x50a/0x650 [ 437.458503][T13319] ? fs_reclaim_acquire+0xae/0x150 [ 437.458533][T13319] ? tomoyo_realpath_from_path+0xb9/0x720 [ 437.458563][T13319] should_failslab+0xc2/0x120 [ 437.458585][T13319] __kmalloc_noprof+0xcb/0x510 [ 437.458618][T13319] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 437.458654][T13319] tomoyo_realpath_from_path+0xb9/0x720 [ 437.458702][T13319] ? tomoyo_path_perm+0x262/0x460 [ 437.458729][T13319] ? tomoyo_path_perm+0x262/0x460 [ 437.458758][T13319] tomoyo_path_perm+0x276/0x460 [ 437.458781][T13319] ? tomoyo_path_perm+0x262/0x460 [ 437.458809][T13319] ? __pfx_tomoyo_path_perm+0x10/0x10 [ 437.458838][T13319] ? ksys_write+0x12b/0x250 [ 437.458896][T13319] ? do_sys_openat2+0xb1/0x1e0 [ 437.458920][T13319] ? __pfx_do_sys_openat2+0x10/0x10 [ 437.458950][T13319] security_file_truncate+0x84/0x1e0 [ 437.458979][T13319] do_ftruncate+0x21a/0x960 [ 437.459010][T13319] ? __pfx_native_tss_update_io_bitmap+0x10/0x10 [ 437.459042][T13319] ? __pfx_do_ftruncate+0x10/0x10 [ 437.459071][T13319] ? ksys_write+0x1ba/0x250 [ 437.459100][T13319] ? __pfx_ksys_write+0x10/0x10 [ 437.459140][T13319] do_sys_ftruncate+0x61/0xb0 [ 437.459172][T13319] do_syscall_64+0xcd/0x250 [ 437.459203][T13319] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 437.459232][T13319] RIP: 0033:0x7f669358d169 [ 437.459251][T13319] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 437.459270][T13319] RSP: 002b:00007f66943eb038 EFLAGS: 00000246 ORIG_RAX: 000000000000004d [ 437.459292][T13319] RAX: ffffffffffffffda RBX: 00007f66937a5fa0 RCX: 00007f669358d169 [ 437.459307][T13319] RDX: 0000000000000000 RSI: 0000000008800000 RDI: 0000000000000000 [ 437.459321][T13319] RBP: 00007f66943eb090 R08: 0000000000000000 R09: 0000000000000000 [ 437.459334][T13319] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 437.459347][T13319] R13: 0000000000000000 R14: 00007f66937a5fa0 R15: 00007fffcd2ed568 [ 437.459378][T13319] [ 437.459387][T13319] ERROR: Out of memory at tomoyo_realpath_from_path. [ 438.024113][T13324] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2034'. [ 438.096635][T13324] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2034'. [ 438.179849][T13303] kexec: Could not allocate control_code_buffer [ 438.603810][T13329] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 438.676731][T13342] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2040'. [ 439.638679][T13361] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2045'. [ 439.662793][T13361] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2045'. [ 440.426002][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.432411][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.177148][T13365] kexec: Could not allocate control_code_buffer [ 442.345090][T13419] FAULT_INJECTION: forcing a failure. [ 442.345090][T13419] name failslab, interval 1, probability 0, space 0, times 0 [ 442.380573][T13424] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2064'. [ 442.383840][T13419] CPU: 0 UID: 0 PID: 13419 Comm: syz.1.2061 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 442.383875][T13419] Tainted: [U]=USER [ 442.383882][T13419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 442.383894][T13419] Call Trace: [ 442.383901][T13419] [ 442.383909][T13419] dump_stack_lvl+0x16c/0x1f0 [ 442.383943][T13419] should_fail_ex+0x50a/0x650 [ 442.383976][T13419] ? fs_reclaim_acquire+0xae/0x150 [ 442.384005][T13419] should_failslab+0xc2/0x120 [ 442.384026][T13419] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 442.384056][T13419] ? lock_acquire+0x2f/0xb0 [ 442.384085][T13419] ? getname_flags.part.0+0x4c/0x550 [ 442.384114][T13419] getname_flags.part.0+0x4c/0x550 [ 442.384146][T13419] getname_flags+0x93/0xf0 [ 442.384174][T13419] user_path_at+0x24/0x60 [ 442.384203][T13419] __x64_sys_open_tree+0x28a/0x440 [ 442.384237][T13419] ? __pfx___x64_sys_open_tree+0x10/0x10 [ 442.384268][T13419] ? syscall_user_dispatch+0x7a/0x130 [ 442.384309][T13419] do_syscall_64+0xcd/0x250 [ 442.384339][T13419] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 442.384368][T13419] RIP: 0033:0x7f38d918d169 [ 442.384385][T13419] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 442.384405][T13419] RSP: 002b:00007f38da097038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 442.384426][T13419] RAX: ffffffffffffffda RBX: 00007f38d93a5fa0 RCX: 00007f38d918d169 [ 442.384448][T13419] RDX: 0000000000001001 RSI: 0000000000000000 RDI: 0000000000000003 [ 442.384460][T13419] RBP: 00007f38da097090 R08: 0000000000000000 R09: 0000000000000000 [ 442.384473][T13419] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 442.384486][T13419] R13: 0000000000000000 R14: 00007f38d93a5fa0 R15: 00007ffe2aa699b8 [ 442.384514][T13419] [ 442.500715][T13426] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2063'. [ 442.625337][T13424] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2064'. [ 442.654650][T13425] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2063'. [ 442.976222][T13446] block mtdblock0: the capability attribute has been deprecated. [ 443.752407][T13469] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2078'. [ 443.777555][T13469] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2078'. [ 443.846029][T13470] netlink: 322 bytes leftover after parsing attributes in process `syz.3.2076'. [ 445.503790][T13486] kexec: Could not allocate control_code_buffer [ 445.597986][T13503] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2088'. [ 445.621249][T13503] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2088'. [ 446.540673][T13525] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2095'. [ 446.566113][T13525] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2095'. [ 446.637453][T13527] FAULT_INJECTION: forcing a failure. [ 446.637453][T13527] name failslab, interval 1, probability 0, space 0, times 0 [ 446.677477][T13527] CPU: 0 UID: 0 PID: 13527 Comm: syz.1.2089 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 446.677521][T13527] Tainted: [U]=USER [ 446.677530][T13527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 446.677545][T13527] Call Trace: [ 446.677552][T13527] [ 446.677562][T13527] dump_stack_lvl+0x16c/0x1f0 [ 446.677601][T13527] should_fail_ex+0x50a/0x650 [ 446.677639][T13527] ? fs_reclaim_acquire+0xae/0x150 [ 446.677672][T13527] ? xfrm_hash_alloc+0xd1/0x100 [ 446.677707][T13527] should_failslab+0xc2/0x120 [ 446.677732][T13527] __kmalloc_noprof+0xcb/0x510 [ 446.677766][T13527] ? xfrm_state_init+0x378/0x630 [ 446.677798][T13527] ? xfrm_state_init+0x321/0x630 [ 446.677836][T13527] xfrm_hash_alloc+0xd1/0x100 [ 446.677888][T13527] xfrm_net_init+0x35e/0xcb0 [ 446.677933][T13527] ? __pfx_xfrm_net_init+0x10/0x10 [ 446.677970][T13527] ops_init+0x1df/0x5f0 [ 446.678011][T13527] setup_net+0x21f/0x860 [ 446.678047][T13527] ? __pfx_setup_net+0x10/0x10 [ 446.678080][T13527] ? down_read_killable+0xcc/0x380 [ 446.678115][T13527] ? __pfx_down_read_killable+0x10/0x10 [ 446.678147][T13527] ? __raw_spin_lock_init+0x3a/0x110 [ 446.678188][T13527] ? debug_mutex_init+0x37/0x70 [ 446.678217][T13527] copy_net_ns+0x2a6/0x5f0 [ 446.678245][T13527] create_new_namespaces+0x3ea/0xad0 [ 446.678290][T13527] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 446.678338][T13527] ksys_unshare+0x45d/0xa40 [ 446.678365][T13527] ? __pfx_ksys_unshare+0x10/0x10 [ 446.678404][T13527] __x64_sys_unshare+0x31/0x40 [ 446.678428][T13527] do_syscall_64+0xcd/0x250 [ 446.678461][T13527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 446.678492][T13527] RIP: 0033:0x7f38d918d169 [ 446.678512][T13527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 446.678534][T13527] RSP: 002b:00007f38da097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 446.678557][T13527] RAX: ffffffffffffffda RBX: 00007f38d93a5fa0 RCX: 00007f38d918d169 [ 446.678573][T13527] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 446.678588][T13527] RBP: 00007f38d920e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 446.678602][T13527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 446.678617][T13527] R13: 0000000000000000 R14: 00007f38d93a5fa0 R15: 00007ffe2aa699b8 [ 446.678650][T13527] [ 447.293038][T13545] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2100'. [ 447.324735][T13545] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2100'. [ 447.671382][T13552] netlink: 350 bytes leftover after parsing attributes in process `syz.1.2101'. [ 447.803543][T13534] kexec: Could not allocate control_code_buffer [ 448.869326][T13593] __nla_validate_parse: 2 callbacks suppressed [ 448.869346][T13593] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2114'. [ 448.870116][T13593] netlink: 504 bytes leftover after parsing attributes in process `syz.2.2114'. [ 449.861759][T13595] kexec: Could not allocate control_code_buffer [ 450.276584][T13612] netlink: del zone limit has 8 unknown bytes [ 450.329192][T13618] FAULT_INJECTION: forcing a failure. [ 450.329192][T13618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 450.351448][T13618] CPU: 1 UID: 0 PID: 13618 Comm: syz.1.2130 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 450.351485][T13618] Tainted: [U]=USER [ 450.351492][T13618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 450.351505][T13618] Call Trace: [ 450.351512][T13618] [ 450.351521][T13618] dump_stack_lvl+0x16c/0x1f0 [ 450.351553][T13618] should_fail_ex+0x50a/0x650 [ 450.351590][T13618] _copy_to_user+0x32/0xd0 [ 450.351616][T13618] simple_read_from_buffer+0xd0/0x160 [ 450.351647][T13618] proc_fail_nth_read+0x198/0x270 [ 450.351671][T13618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.351698][T13618] ? rw_verify_area+0xcf/0x680 [ 450.351725][T13618] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 450.351747][T13618] vfs_read+0x1df/0xbf0 [ 450.351775][T13618] ? __fget_files+0x1fc/0x3a0 [ 450.351806][T13618] ? __pfx___mutex_lock+0x10/0x10 [ 450.351834][T13618] ? __pfx_vfs_read+0x10/0x10 [ 450.351868][T13618] ? __fget_files+0x206/0x3a0 [ 450.351908][T13618] ksys_read+0x12b/0x250 [ 450.351935][T13618] ? __pfx_ksys_read+0x10/0x10 [ 450.351972][T13618] do_syscall_64+0xcd/0x250 [ 450.352011][T13618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 450.352041][T13618] RIP: 0033:0x7f38d918bb7c [ 450.352060][T13618] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 450.352080][T13618] RSP: 002b:00007f38da076030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 450.352102][T13618] RAX: ffffffffffffffda RBX: 00007f38d93a6080 RCX: 00007f38d918bb7c [ 450.352118][T13618] RDX: 000000000000000f RSI: 00007f38da0760a0 RDI: 0000000000000004 [ 450.352131][T13618] RBP: 00007f38da076090 R08: 0000000000000000 R09: 0000000000000000 [ 450.352145][T13618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 450.352158][T13618] R13: 0000000000000000 R14: 00007f38d93a6080 R15: 00007ffe2aa699b8 [ 450.352188][T13618] [ 450.544045][ C1] vkms_vblank_simulate: vblank timer overrun [ 453.110998][T13650] kexec: Could not allocate control_code_buffer [ 453.368468][T13674] Invalid ELF header magic: != ELF [ 456.020389][T13713] delete_channel: no stack [ 456.053135][T13722] kexec: Could not allocate control_code_buffer [ 456.473468][T13737] Invalid ELF header magic: != ELF [ 457.053961][T13752] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2155'. [ 457.068253][T13752] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2155'. [ 458.383130][T13768] kexec: Could not allocate control_code_buffer [ 459.358024][T13805] FAULT_INJECTION: forcing a failure. [ 459.358024][T13805] name failslab, interval 1, probability 0, space 0, times 0 [ 459.412867][T13805] CPU: 1 UID: 0 PID: 13805 Comm: syz.1.2169 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 459.412913][T13805] Tainted: [U]=USER [ 459.412921][T13805] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 459.412934][T13805] Call Trace: [ 459.412941][T13805] [ 459.412950][T13805] dump_stack_lvl+0x16c/0x1f0 [ 459.412985][T13805] should_fail_ex+0x50a/0x650 [ 459.413019][T13805] ? fs_reclaim_acquire+0xae/0x150 [ 459.413051][T13805] should_failslab+0xc2/0x120 [ 459.413073][T13805] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 459.413105][T13805] ? __pfx___might_resched+0x10/0x10 [ 459.413138][T13805] ? __anon_vma_prepare+0xae/0x5e0 [ 459.413174][T13805] __anon_vma_prepare+0xae/0x5e0 [ 459.413204][T13805] ? __pfx___pte_alloc+0x10/0x10 [ 459.413234][T13805] __vmf_anon_prepare+0x11c/0x240 [ 459.413265][T13805] do_pte_missing+0x1032/0x3e10 [ 459.413309][T13805] __handle_mm_fault+0x1166/0x2c60 [ 459.413350][T13805] ? __pfx___handle_mm_fault+0x10/0x10 [ 459.413411][T13805] handle_mm_fault+0x3fa/0xaa0 [ 459.413450][T13805] __get_user_pages+0x773/0x36f0 [ 459.413490][T13805] ? __pfx_mt_find+0x10/0x10 [ 459.413519][T13805] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 459.413550][T13805] ? __pfx___get_user_pages+0x10/0x10 [ 459.413584][T13805] ? __mm_populate+0x21d/0x380 [ 459.413622][T13805] populate_vma_page_range+0x27f/0x3a0 [ 459.413658][T13805] ? __pfx_populate_vma_page_range+0x10/0x10 [ 459.413689][T13805] ? __pfx_find_vma_intersection+0x10/0x10 [ 459.413720][T13805] ? vm_mmap_pgoff+0x29b/0x3a0 [ 459.413755][T13805] __mm_populate+0x1d6/0x380 [ 459.413788][T13805] ? __pfx___mm_populate+0x10/0x10 [ 459.413823][T13805] ? up_write+0x1b2/0x520 [ 459.413859][T13805] vm_mmap_pgoff+0x2d3/0x3a0 [ 459.413901][T13805] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 459.413932][T13805] ? __fget_files+0x206/0x3a0 [ 459.413973][T13805] ksys_mmap_pgoff+0x7d/0x5c0 [ 459.414000][T13805] ? __pfx_ksys_write+0x10/0x10 [ 459.414034][T13805] __x64_sys_mmap+0x125/0x190 [ 459.414071][T13805] do_syscall_64+0xcd/0x250 [ 459.414103][T13805] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.414136][T13805] RIP: 0033:0x7f38d918d169 [ 459.414153][T13805] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 459.414172][T13805] RSP: 002b:00007f38da097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 459.414191][T13805] RAX: ffffffffffffffda RBX: 00007f38d93a5fa0 RCX: 00007f38d918d169 [ 459.414204][T13805] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000000000 [ 459.414216][T13805] RBP: 00007f38da097090 R08: 0000000000000002 R09: 0000000000008000 [ 459.414229][T13805] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000001 [ 459.414241][T13805] R13: 0000000000000000 R14: 00007f38d93a5fa0 R15: 00007ffe2aa699b8 [ 459.414272][T13805] [ 461.452016][T13830] kexec: Could not allocate control_code_buffer [ 461.925962][T13866] netlink: 350 bytes leftover after parsing attributes in process `syz.3.2183'. [ 464.445000][T13906] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2192'. [ 464.954374][T13900] kexec: Could not allocate control_code_buffer [ 465.393526][T13914] svc: failed to register nfsdv3 RPC service (errno 111). [ 465.444638][T13914] svc: failed to register nfsaclv3 RPC service (errno 111). [ 465.509244][T13919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2195'. [ 466.959502][T13938] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2206'. [ 466.976498][T13940] netlink: 274 bytes leftover after parsing attributes in process `syz.0.2206'. [ 467.274571][T13946] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2198'. [ 467.283586][T13946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.324264][T13946] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.355036][T13946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.362516][T13946] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 468.748565][T13966] kexec: Could not allocate control_code_buffer [ 468.796594][T13976] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2207'. [ 469.185900][T13982] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2209'. [ 469.507842][T13968] delete_channel: no stack [ 469.780583][T13991] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2213'. [ 469.855106][T13991] netlink: 504 bytes leftover after parsing attributes in process `syz.0.2213'. [ 471.176104][T14025] netlink: 'syz.1.2222': attribute type 4 has an invalid length. [ 471.184879][T14022] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2221'. [ 471.381951][T14027] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2224'. [ 471.405102][T14027] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2224'. [ 472.087195][T14048] netlink: 330 bytes leftover after parsing attributes in process `syz.3.2228'. [ 473.130304][T14074] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2236'. [ 473.165212][T14074] netlink: 504 bytes leftover after parsing attributes in process `syz.1.2236'. [ 473.240798][T14072] FAULT_INJECTION: forcing a failure. [ 473.240798][T14072] name failslab, interval 1, probability 0, space 0, times 0 [ 473.265595][T14072] CPU: 1 UID: 0 PID: 14072 Comm: syz.0.2235 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 473.265638][T14072] Tainted: [U]=USER [ 473.265646][T14072] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 473.265662][T14072] Call Trace: [ 473.265669][T14072] [ 473.265679][T14072] dump_stack_lvl+0x16c/0x1f0 [ 473.265718][T14072] should_fail_ex+0x50a/0x650 [ 473.265755][T14072] ? fs_reclaim_acquire+0xae/0x150 [ 473.265789][T14072] should_failslab+0xc2/0x120 [ 473.265812][T14072] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 473.265848][T14072] ? proc_alloc_inode+0x25/0x200 [ 473.265886][T14072] ? __pfx_proc_alloc_inode+0x10/0x10 [ 473.265918][T14072] proc_alloc_inode+0x25/0x200 [ 473.265948][T14072] alloc_inode+0x5d/0x230 [ 473.265972][T14072] new_inode+0x22/0x210 [ 473.266007][T14072] proc_get_inode+0x1d/0x7d0 [ 473.266045][T14072] proc_lookup_de+0x253/0x320 [ 473.266084][T14072] ? __pfx_proc_tgid_net_lookup+0x10/0x10 [ 473.266111][T14072] proc_tgid_net_lookup+0x75/0x120 [ 473.266138][T14072] lookup_open.isra.0+0x4d9/0x1580 [ 473.266172][T14072] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 473.266209][T14072] ? path_openat+0x88a/0x2d80 [ 473.266253][T14072] ? lookup_fast+0x153/0x5f0 [ 473.266287][T14072] path_openat+0x904/0x2d80 [ 473.266332][T14072] ? __pfx_path_openat+0x10/0x10 [ 473.266364][T14072] ? __pfx___lock_acquire+0x10/0x10 [ 473.266394][T14072] ? lock_acquire.part.0+0x11b/0x380 [ 473.266424][T14072] ? find_held_lock+0x2d/0x110 [ 473.266453][T14072] do_filp_open+0x20c/0x470 [ 473.266486][T14072] ? __pfx_do_filp_open+0x10/0x10 [ 473.266514][T14072] ? find_held_lock+0x2d/0x110 [ 473.266549][T14072] ? __pfx_kfree_link+0x10/0x10 [ 473.266584][T14072] ? alloc_fd+0x41f/0x760 [ 473.266625][T14072] do_sys_openat2+0x17a/0x1e0 [ 473.266651][T14072] ? __pfx_do_sys_openat2+0x10/0x10 [ 473.266674][T14072] ? fput+0x67/0x440 [ 473.266695][T14072] ? __sys_sendmsg+0x19a/0x220 [ 473.266735][T14072] __x64_sys_openat+0x175/0x210 [ 473.266759][T14072] ? __pfx___x64_sys_openat+0x10/0x10 [ 473.266797][T14072] do_syscall_64+0xcd/0x250 [ 473.266827][T14072] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 473.266856][T14072] RIP: 0033:0x7ff655d8d169 [ 473.266877][T14072] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 473.266899][T14072] RSP: 002b:00007ff656cc6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 473.266921][T14072] RAX: ffffffffffffffda RBX: 00007ff655fa5fa0 RCX: 00007ff655d8d169 [ 473.266936][T14072] RDX: 0000000000000080 RSI: 0000400000000000 RDI: ffffffffffffff9c [ 473.266951][T14072] RBP: 00007ff655e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 473.266965][T14072] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 473.266982][T14072] R13: 0000000000000000 R14: 00007ff655fa5fa0 R15: 00007fff540ee5d8 [ 473.267021][T14072] [ 474.216392][T14080] FAULT_INJECTION: forcing a failure. [ 474.216392][T14080] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 474.284735][T14080] CPU: 0 UID: 0 PID: 14080 Comm: syz.0.2238 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 474.284779][T14080] Tainted: [U]=USER [ 474.284787][T14080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 474.284801][T14080] Call Trace: [ 474.284808][T14080] [ 474.284817][T14080] dump_stack_lvl+0x16c/0x1f0 [ 474.284857][T14080] should_fail_ex+0x50a/0x650 [ 474.284892][T14080] ? __pfx___might_resched+0x10/0x10 [ 474.284935][T14080] should_fail_alloc_page+0xe7/0x130 [ 474.284961][T14080] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 474.284999][T14080] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 474.285038][T14080] ? __pfx_mark_lock+0x10/0x10 [ 474.285071][T14080] ? lock_acquire.part.0+0x11b/0x380 [ 474.285107][T14080] ? hlock_class+0x4e/0x130 [ 474.285131][T14080] ? __lock_acquire+0x15a9/0x3c40 [ 474.285159][T14080] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 474.285209][T14080] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 474.285244][T14080] ? policy_nodemask+0xea/0x4e0 [ 474.285280][T14080] alloc_pages_mpol+0x1fc/0x540 [ 474.285300][T14080] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 474.285322][T14080] ? find_held_lock+0x2d/0x110 [ 474.285349][T14080] folio_alloc_mpol_noprof+0x36/0x2f0 [ 474.285376][T14080] shmem_alloc_folio+0x135/0x160 [ 474.285410][T14080] shmem_alloc_and_add_folio+0x48e/0xc10 [ 474.285439][T14080] ? shmem_huge_global_enabled+0x72/0x6b0 [ 474.285463][T14080] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 474.285494][T14080] ? shmem_allowable_huge_orders+0xd0/0x410 [ 474.285528][T14080] shmem_get_folio_gfp+0x689/0x1530 [ 474.285559][T14080] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 474.285596][T14080] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 474.285616][T14080] ? __pfx___might_resched+0x10/0x10 [ 474.285653][T14080] shmem_fallocate+0x7c0/0xfb0 [ 474.285690][T14080] ? __pfx_shmem_fallocate+0x10/0x10 [ 474.285720][T14080] ? __pfx___lock_acquire+0x10/0x10 [ 474.285752][T14080] ? __pfx_futex_wake+0x10/0x10 [ 474.285792][T14080] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 474.285822][T14080] ? rcu_is_watching+0x12/0xc0 [ 474.285843][T14080] ? trace_lock_acquire+0x14e/0x1f0 [ 474.285868][T14080] ? __x64_sys_fallocate+0xd5/0x150 [ 474.285903][T14080] ? __pfx_shmem_fallocate+0x10/0x10 [ 474.285930][T14080] vfs_fallocate+0x60d/0x10d0 [ 474.285962][T14080] ? __pfx_vfs_fallocate+0x10/0x10 [ 474.285989][T14080] ? __fget_files+0x206/0x3a0 [ 474.286029][T14080] __x64_sys_fallocate+0xd5/0x150 [ 474.286064][T14080] do_syscall_64+0xcd/0x250 [ 474.286095][T14080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 474.286126][T14080] RIP: 0033:0x7ff655d8d169 [ 474.286144][T14080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 474.286165][T14080] RSP: 002b:00007ff656cc6038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 474.286188][T14080] RAX: ffffffffffffffda RBX: 00007ff655fa5fa0 RCX: 00007ff655d8d169 [ 474.286203][T14080] RDX: 000000000000000d RSI: 0000000000000000 RDI: 8000000000000003 [ 474.286218][T14080] RBP: 00007ff655e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 474.286231][T14080] R10: 00000000000cbd5d R11: 0000000000000246 R12: 0000000000000000 [ 474.286244][T14080] R13: 0000000000000000 R14: 00007ff655fa5fa0 R15: 00007fff540ee5d8 [ 474.286276][T14080] [ 476.611887][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 476.622671][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 476.632273][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 476.644301][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 476.653108][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 476.661159][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 476.951280][ T7266] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.011682][T14124] netlink: 342 bytes leftover after parsing attributes in process `syz.0.2252'. [ 477.177972][ T7266] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.277268][T14127] chnl_net:caif_netlink_parms(): no params data found [ 477.547041][ T7266] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.800778][ T7266] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 477.829792][T14147] ecryptfs_parse_packet_length: Error parsing packet length [ 477.850729][T14147] ecryptfs_miscdev_write: Error parsing packet length; rc = [-22] [ 477.859377][T14127] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.879944][T14127] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.898384][T14127] bridge_slave_0: entered allmulticast mode [ 477.935397][T14127] bridge_slave_0: entered promiscuous mode [ 477.965402][T14127] bridge0: port 2(bridge_slave_1) entered blocking state [ 477.972549][T14127] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.076167][T14127] bridge_slave_1: entered allmulticast mode [ 478.083244][T14127] bridge_slave_1: entered promiscuous mode [ 478.210077][T14127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.214974][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 478.229700][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 478.240011][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 478.248520][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 478.257769][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 478.265611][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 478.289600][T14127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.646682][T14127] team0: Port device team_slave_0 added [ 478.691719][ T7266] bridge_slave_1: left allmulticast mode [ 478.698175][ T7266] bridge_slave_1: left promiscuous mode [ 478.707069][ T7266] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.745134][ T5850] Bluetooth: hci2: command tx timeout [ 478.754352][ T7266] bridge_slave_0: left allmulticast mode [ 478.760074][ T7266] bridge_slave_0: left promiscuous mode [ 478.766406][ T7266] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.977363][ T7266] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 479.998385][ T7266] bond0 (unregistering): Released all slaves [ 480.038326][T14127] team0: Port device team_slave_1 added [ 480.276751][T14127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 480.299954][T14127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.325939][ C0] vkms_vblank_simulate: vblank timer overrun [ 480.346492][ T5850] Bluetooth: hci4: command tx timeout [ 480.394503][T14127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.475532][T14127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.506926][T14127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.544285][T14127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.786927][T14127] hsr_slave_0: entered promiscuous mode [ 480.793370][T14127] hsr_slave_1: entered promiscuous mode [ 480.825474][ T5850] Bluetooth: hci2: command tx timeout [ 480.848912][T14127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.884401][T14127] Cannot create hsr debugfs directory [ 481.306472][ T7266] hsr_slave_0: left promiscuous mode [ 481.331749][ T7266] hsr_slave_1: left promiscuous mode [ 481.372919][ T7266] veth1_macvtap: left promiscuous mode [ 481.401664][ T7266] veth0_macvtap: left promiscuous mode [ 481.407584][ T7266] veth1_vlan: left promiscuous mode [ 481.422610][ T7266] veth0_vlan: left promiscuous mode [ 482.426368][ T5850] Bluetooth: hci4: command tx timeout [ 482.631167][T14201] kexec: Could not allocate control_code_buffer [ 482.696677][ T7266] team0 (unregistering): Port device team_slave_1 removed [ 482.789488][ T7266] team0 (unregistering): Port device team_slave_0 removed [ 482.904594][ T5850] Bluetooth: hci2: command tx timeout [ 483.809057][T14153] chnl_net:caif_netlink_parms(): no params data found [ 484.123564][T14207] kexec: Could not allocate control_code_buffer [ 484.439604][T14153] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.457820][T14219] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2267'. [ 484.479143][T14153] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.491569][T14153] bridge_slave_0: entered allmulticast mode [ 484.504229][T14153] bridge_slave_0: entered promiscuous mode [ 484.519274][ T5850] Bluetooth: hci4: command tx timeout [ 484.525840][T14223] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 484.554651][T14153] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.561779][T14153] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.575221][T14153] bridge_slave_1: entered allmulticast mode [ 484.575251][T14223] CIFS mount error: No usable UNC path provided in device string! [ 484.575251][T14223] [ 484.582387][T14153] bridge_slave_1: entered promiscuous mode [ 484.607026][T14223] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 484.914349][T14153] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.945627][T14153] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.984347][ T5850] Bluetooth: hci2: command tx timeout [ 485.068810][T14153] team0: Port device team_slave_0 added [ 485.079546][T14153] team0: Port device team_slave_1 added [ 485.212908][T14231] netlink: 'syz.1.2268': attribute type 1 has an invalid length. [ 485.220917][T14231] nbd: error processing sock list [ 485.236313][T14153] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 485.243316][T14153] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.292238][T14153] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.420523][T14153] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.439975][T14153] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.486817][T14153] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.814256][T14127] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 485.875891][T14153] hsr_slave_0: entered promiscuous mode [ 485.907976][T14153] hsr_slave_1: entered promiscuous mode [ 485.933709][T14153] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.959494][T14153] Cannot create hsr debugfs directory [ 486.014504][T14127] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 486.047901][T14127] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 486.243740][T14127] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 486.584383][ T5850] Bluetooth: hci4: command tx timeout [ 487.026301][T14127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.047483][T14277] FAULT_INJECTION: forcing a failure. [ 487.047483][T14277] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 487.129604][T14277] CPU: 0 UID: 0 PID: 14277 Comm: syz.1.2275 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 487.129641][T14277] Tainted: [U]=USER [ 487.129648][T14277] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 487.129659][T14277] Call Trace: [ 487.129665][T14277] [ 487.129674][T14277] dump_stack_lvl+0x16c/0x1f0 [ 487.129707][T14277] should_fail_ex+0x50a/0x650 [ 487.129739][T14277] ? __pfx___might_resched+0x10/0x10 [ 487.129787][T14277] should_fail_alloc_page+0xe7/0x130 [ 487.129811][T14277] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 487.129847][T14277] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 487.129885][T14277] ? __pfx_mark_lock+0x10/0x10 [ 487.129914][T14277] ? __pfx___lock_acquire+0x10/0x10 [ 487.129940][T14277] ? mark_lock+0xb5/0xc60 [ 487.129966][T14277] ? find_held_lock+0x2d/0x110 [ 487.129989][T14277] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 487.130040][T14277] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 487.130077][T14277] ? policy_nodemask+0xea/0x4e0 [ 487.130113][T14277] alloc_pages_mpol+0x1fc/0x540 [ 487.130136][T14277] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 487.130158][T14277] ? find_held_lock+0x2d/0x110 [ 487.130188][T14277] folio_alloc_mpol_noprof+0x36/0x2f0 [ 487.130216][T14277] shmem_alloc_folio+0x135/0x160 [ 487.130252][T14277] shmem_alloc_and_add_folio+0x48e/0xc10 [ 487.130284][T14277] ? shmem_huge_global_enabled+0x72/0x6b0 [ 487.130309][T14277] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 487.130339][T14277] ? shmem_allowable_huge_orders+0xd0/0x410 [ 487.130373][T14277] shmem_get_folio_gfp+0x689/0x1530 [ 487.130406][T14277] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 487.130435][T14277] ? filemap_map_pages+0xf92/0x16b0 [ 487.130466][T14277] shmem_fault+0x200/0xae0 [ 487.130495][T14277] ? __pfx_shmem_fault+0x10/0x10 [ 487.130526][T14277] ? do_pte_missing+0xde9/0x3e10 [ 487.130558][T14277] ? __pfx_lock_release+0x10/0x10 [ 487.130592][T14277] __do_fault+0x10a/0x490 [ 487.130618][T14277] do_pte_missing+0xecf/0x3e10 [ 487.130650][T14277] ? do_raw_spin_unlock+0x172/0x230 [ 487.130674][T14277] ? __pmd_alloc+0x3c2/0x870 [ 487.130703][T14277] __handle_mm_fault+0x1166/0x2c60 [ 487.130742][T14277] ? __pfx___handle_mm_fault+0x10/0x10 [ 487.130780][T14277] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 487.130831][T14277] ? find_vma+0xc0/0x140 [ 487.130856][T14277] ? __pfx_find_vma+0x10/0x10 [ 487.130886][T14277] handle_mm_fault+0x3fa/0xaa0 [ 487.130923][T14277] do_user_addr_fault+0x7a3/0x13f0 [ 487.130962][T14277] exc_page_fault+0x5c/0xc0 [ 487.130990][T14277] asm_exc_page_fault+0x26/0x30 [ 487.131017][T14277] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 487.131040][T14277] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 487.131061][T14277] RSP: 0018:ffffc90003017d40 EFLAGS: 00050206 [ 487.131080][T14277] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 00000000000004c8 [ 487.131094][T14277] RDX: ffffed100c74d699 RSI: 0000000000000000 RDI: ffff888063a6b000 [ 487.131109][T14277] RBP: 00000000000004c8 R08: 0000000000000001 R09: ffffed100c74d698 [ 487.131123][T14277] R10: ffff888063a6b4c7 R11: 0000000000000000 R12: 0000000000000000 [ 487.131137][T14277] R13: ffff888063a6b000 R14: ffff8880262dd600 R15: 0000000000000000 [ 487.131169][T14277] _copy_from_user+0x98/0xd0 [ 487.131196][T14277] memdup_user+0x71/0xd0 [ 487.131223][T14277] snd_ctl_ioctl+0x1e8/0x1310 [ 487.131259][T14277] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 487.131294][T14277] ? __pfx_lock_release+0x10/0x10 [ 487.131323][T14277] ? trace_lock_acquire+0x14e/0x1f0 [ 487.131361][T14277] ? __fget_files+0x206/0x3a0 [ 487.131398][T14277] ? __pfx_snd_ctl_ioctl+0x10/0x10 [ 487.131433][T14277] __x64_sys_ioctl+0x190/0x200 [ 487.131464][T14277] do_syscall_64+0xcd/0x250 [ 487.131495][T14277] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.131523][T14277] RIP: 0033:0x7f38d918d169 [ 487.131541][T14277] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 487.131561][T14277] RSP: 002b:00007f38da097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 487.131582][T14277] RAX: ffffffffffffffda RBX: 00007f38d93a5fa0 RCX: 00007f38d918d169 [ 487.131597][T14277] RDX: 0000000000000000 RSI: 00000000c4c85513 RDI: 0000000000000003 [ 487.131611][T14277] RBP: 00007f38da097090 R08: 0000000000000000 R09: 0000000000000000 [ 487.131625][T14277] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 487.131638][T14277] R13: 0000000000000000 R14: 00007f38d93a5fa0 R15: 00007ffe2aa699b8 [ 487.131670][T14277] [ 487.581080][ C0] vkms_vblank_simulate: vblank timer overrun [ 487.591398][T14127] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.603592][ T7263] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.610755][ T7263] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.676491][T14153] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 487.799922][T14153] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 487.826899][T14284] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2276'. [ 487.839757][ T7263] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.846937][ T7263] bridge0: port 2(bridge_slave_1) entered forwarding state [ 487.922956][T14285] CIFS mount error: No usable UNC path provided in device string! [ 487.922956][T14285] [ 487.933261][T14285] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 487.988526][T14153] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 487.998988][T14153] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 488.400910][T14153] 8021q: adding VLAN 0 to HW filter on device bond0 [ 488.478820][T14153] 8021q: adding VLAN 0 to HW filter on device team0 [ 488.509421][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 488.516599][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 488.551312][T14127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.563578][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 488.570753][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.661183][T14300] kAFS: Invalid Command on /proc/fs/afs/cells file [ 489.180944][T14127] veth0_vlan: entered promiscuous mode [ 489.287665][T14127] veth1_vlan: entered promiscuous mode [ 489.467153][T14127] veth0_macvtap: entered promiscuous mode [ 489.706806][T14127] veth1_macvtap: entered promiscuous mode [ 489.945732][T14127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.985418][T14127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.024803][T14127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.052405][T14127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.080322][T14127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.156760][T14127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.180389][T14127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.200905][T14127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 490.229364][T14127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.255086][T14127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 490.268870][T14153] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 490.323938][T14127] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.354628][T14127] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.363385][T14127] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.395271][T14127] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.691201][ T3008] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.759277][ T3008] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.881370][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.919544][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 491.318953][T14153] veth0_vlan: entered promiscuous mode [ 491.434607][T14153] veth1_vlan: entered promiscuous mode [ 491.550740][T14153] veth0_macvtap: entered promiscuous mode [ 491.590613][T14153] veth1_macvtap: entered promiscuous mode [ 491.632999][T14153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.658134][T14153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.688331][T14153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.737207][T14153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.854227][T14153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 491.875374][T14153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 491.909398][T14153] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 491.946937][T14153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 491.981694][T14153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.018843][T14153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.041047][T14153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.090411][T14153] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 492.142242][T14153] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 492.183972][T14153] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 492.217400][T14153] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.264214][T14153] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.273157][T14153] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.300906][T14153] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 492.333216][T14349] kexec: Could not allocate control_code_buffer [ 492.580384][ T7341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.624328][ T7341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 492.732740][ T7341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 492.814961][ T7341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.257115][T14393] netlink: 226 bytes leftover after parsing attributes in process `syz.3.2297'. [ 494.680092][T14404] FAULT_INJECTION: forcing a failure. [ 494.680092][T14404] name failslab, interval 1, probability 0, space 0, times 0 [ 494.729307][T14404] CPU: 0 UID: 0 PID: 14404 Comm: syz.4.2300 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 494.729350][T14404] Tainted: [U]=USER [ 494.729357][T14404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 494.729370][T14404] Call Trace: [ 494.729376][T14404] [ 494.729386][T14404] dump_stack_lvl+0x16c/0x1f0 [ 494.729421][T14404] should_fail_ex+0x50a/0x650 [ 494.729450][T14404] ? fs_reclaim_acquire+0xae/0x150 [ 494.729479][T14404] should_failslab+0xc2/0x120 [ 494.729499][T14404] __kmalloc_node_noprof+0xd1/0x510 [ 494.729532][T14404] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 494.729567][T14404] __kvmalloc_node_noprof+0xad/0x1a0 [ 494.729597][T14404] alloc_netdev_mqs+0xd57/0x15d0 [ 494.729638][T14404] alloc_candev_mqs+0x69/0x490 [ 494.729673][T14404] slcan_open+0x9f/0x530 [ 494.729696][T14404] ? __pfx_slcan_open+0x10/0x10 [ 494.729719][T14404] tty_ldisc_open+0x9c/0x120 [ 494.729742][T14404] tty_set_ldisc+0x318/0x720 [ 494.729767][T14404] tty_ioctl+0xbd0/0x15d0 [ 494.729793][T14404] ? __pfx_tty_ioctl+0x10/0x10 [ 494.729826][T14404] ? __pfx_lock_release+0x10/0x10 [ 494.729854][T14404] ? trace_lock_acquire+0x14e/0x1f0 [ 494.729892][T14404] ? __fget_files+0x206/0x3a0 [ 494.729928][T14404] ? __pfx_tty_ioctl+0x10/0x10 [ 494.729957][T14404] __x64_sys_ioctl+0x190/0x200 [ 494.729986][T14404] do_syscall_64+0xcd/0x250 [ 494.730018][T14404] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.730055][T14404] RIP: 0033:0x7f6aea38d169 [ 494.730073][T14404] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 494.730093][T14404] RSP: 002b:00007f6aeb237038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.730116][T14404] RAX: ffffffffffffffda RBX: 00007f6aea5a5fa0 RCX: 00007f6aea38d169 [ 494.730131][T14404] RDX: 0000000000000000 RSI: 0000000000005423 RDI: 0000000000000011 [ 494.730144][T14404] RBP: 00007f6aeb237090 R08: 0000000000000000 R09: 0000000000000000 [ 494.730157][T14404] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 494.730171][T14404] R13: 0000000000000000 R14: 00007f6aea5a5fa0 R15: 00007ffe73cbd328 [ 494.730203][T14404] [ 497.591572][T14465] FAULT_INJECTION: forcing a failure. [ 497.591572][T14465] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 497.609268][T14469] Invalid ELF header magic: != ELF [ 497.794334][T14465] CPU: 1 UID: 0 PID: 14465 Comm: syz.4.2316 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 497.794375][T14465] Tainted: [U]=USER [ 497.794384][T14465] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 497.794398][T14465] Call Trace: [ 497.794406][T14465] [ 497.794415][T14465] dump_stack_lvl+0x16c/0x1f0 [ 497.794456][T14465] should_fail_ex+0x50a/0x650 [ 497.794493][T14465] ? __pfx___might_resched+0x10/0x10 [ 497.794534][T14465] should_fail_alloc_page+0xe7/0x130 [ 497.794561][T14465] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 497.794601][T14465] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 497.794644][T14465] ? __pfx_mark_lock+0x10/0x10 [ 497.794675][T14465] ? hlock_class+0x4e/0x130 [ 497.794699][T14465] ? mark_lock+0xb5/0xc60 [ 497.794730][T14465] ? __mod_memcg_lruvec_state+0x53c/0x750 [ 497.794763][T14465] ? __pfx_mark_lock+0x10/0x10 [ 497.794804][T14465] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 497.794866][T14465] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 497.794907][T14465] ? policy_nodemask+0xea/0x4e0 [ 497.794948][T14465] alloc_pages_mpol+0x1fc/0x540 [ 497.794973][T14465] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 497.794997][T14465] ? find_held_lock+0x2d/0x110 [ 497.795031][T14465] folio_alloc_mpol_noprof+0x36/0x2f0 [ 497.795061][T14465] shmem_alloc_folio+0x135/0x160 [ 497.795100][T14465] shmem_alloc_and_add_folio+0x48e/0xc10 [ 497.795133][T14465] ? shmem_huge_global_enabled+0x72/0x6b0 [ 497.795160][T14465] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 497.795192][T14465] ? shmem_allowable_huge_orders+0xd0/0x410 [ 497.795228][T14465] shmem_get_folio_gfp+0x689/0x1530 [ 497.795264][T14465] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 497.795292][T14465] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 497.795317][T14465] ? __pfx___might_resched+0x10/0x10 [ 497.795362][T14465] shmem_fallocate+0x7c0/0xfb0 [ 497.795404][T14465] ? __pfx_shmem_fallocate+0x10/0x10 [ 497.795436][T14465] ? __pfx___lock_acquire+0x10/0x10 [ 497.795471][T14465] ? __pfx_futex_wake+0x10/0x10 [ 497.795518][T14465] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 497.795552][T14465] ? rcu_is_watching+0x12/0xc0 [ 497.795577][T14465] ? trace_lock_acquire+0x14e/0x1f0 [ 497.795605][T14465] ? __x64_sys_fallocate+0xd5/0x150 [ 497.795641][T14465] ? __pfx_shmem_fallocate+0x10/0x10 [ 497.795671][T14465] vfs_fallocate+0x60d/0x10d0 [ 497.795706][T14465] ? __pfx_vfs_fallocate+0x10/0x10 [ 497.795738][T14465] ? __fget_files+0x206/0x3a0 [ 497.795788][T14465] __x64_sys_fallocate+0xd5/0x150 [ 497.795828][T14465] do_syscall_64+0xcd/0x250 [ 497.795865][T14465] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.795900][T14465] RIP: 0033:0x7f6aea38d169 [ 497.795921][T14465] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.795943][T14465] RSP: 002b:00007f6aeb237038 EFLAGS: 00000246 ORIG_RAX: 000000000000011d [ 497.795966][T14465] RAX: ffffffffffffffda RBX: 00007f6aea5a5fa0 RCX: 00007f6aea38d169 [ 497.795983][T14465] RDX: 000000000000000d RSI: 0000000000000000 RDI: 8000000000000003 [ 497.795998][T14465] RBP: 00007f6aea40e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 497.796013][T14465] R10: 00000000000cbd5d R11: 0000000000000246 R12: 0000000000000000 [ 497.796027][T14465] R13: 0000000000000000 R14: 00007f6aea5a5fa0 R15: 00007ffe73cbd328 [ 497.796060][T14465] [ 501.874574][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.881065][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.956539][T14540] FAULT_INJECTION: forcing a failure. [ 501.956539][T14540] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 502.014248][T14540] CPU: 1 UID: 0 PID: 14540 Comm: syz.0.2340 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 502.014285][T14540] Tainted: [U]=USER [ 502.014292][T14540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 502.014303][T14540] Call Trace: [ 502.014310][T14540] [ 502.014319][T14540] dump_stack_lvl+0x16c/0x1f0 [ 502.014354][T14540] should_fail_ex+0x50a/0x650 [ 502.014403][T14540] _copy_to_user+0x32/0xd0 [ 502.014431][T14540] simple_read_from_buffer+0xd0/0x160 [ 502.014463][T14540] proc_fail_nth_read+0x198/0x270 [ 502.014492][T14540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 502.014523][T14540] ? rw_verify_area+0xcf/0x680 [ 502.014549][T14540] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 502.014581][T14540] vfs_read+0x1df/0xbf0 [ 502.014611][T14540] ? __fget_files+0x1fc/0x3a0 [ 502.014643][T14540] ? __pfx___mutex_lock+0x10/0x10 [ 502.014672][T14540] ? __pfx_vfs_read+0x10/0x10 [ 502.014711][T14540] ? __fget_files+0x206/0x3a0 [ 502.014751][T14540] ksys_read+0x12b/0x250 [ 502.014779][T14540] ? __pfx_ksys_read+0x10/0x10 [ 502.014819][T14540] do_syscall_64+0xcd/0x250 [ 502.014850][T14540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.014881][T14540] RIP: 0033:0x7ff655d8bb7c [ 502.014900][T14540] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 502.014920][T14540] RSP: 002b:00007ff656cc6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 502.014942][T14540] RAX: ffffffffffffffda RBX: 00007ff655fa5fa0 RCX: 00007ff655d8bb7c [ 502.014958][T14540] RDX: 000000000000000f RSI: 00007ff656cc60a0 RDI: 0000000000000004 [ 502.014971][T14540] RBP: 00007ff656cc6090 R08: 0000000000000000 R09: 0000000000000000 [ 502.014985][T14540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 502.014999][T14540] R13: 0000000000000000 R14: 00007ff655fa5fa0 R15: 00007fff540ee5d8 [ 502.015030][T14540] [ 502.769786][T14553] FAULT_INJECTION: forcing a failure. [ 502.769786][T14553] name failslab, interval 1, probability 0, space 0, times 0 [ 502.846495][T14553] CPU: 1 UID: 0 PID: 14553 Comm: syz.1.2345 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 502.846530][T14553] Tainted: [U]=USER [ 502.846536][T14553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 502.846548][T14553] Call Trace: [ 502.846555][T14553] [ 502.846563][T14553] dump_stack_lvl+0x16c/0x1f0 [ 502.846596][T14553] should_fail_ex+0x50a/0x650 [ 502.846628][T14553] ? fs_reclaim_acquire+0xae/0x150 [ 502.846658][T14553] ? copy_splice_read+0x1a8/0xb80 [ 502.846684][T14553] should_failslab+0xc2/0x120 [ 502.846705][T14553] __kmalloc_noprof+0xcb/0x510 [ 502.846743][T14553] copy_splice_read+0x1a8/0xb80 [ 502.846778][T14553] ? __pfx_copy_splice_read+0x10/0x10 [ 502.846803][T14553] ? find_held_lock+0x2d/0x110 [ 502.846832][T14553] ? splice_direct_to_actor+0x346/0xa40 [ 502.846872][T14553] ? __pfx_copy_splice_read+0x10/0x10 [ 502.846898][T14553] do_splice_read+0x282/0x370 [ 502.846930][T14553] splice_direct_to_actor+0x2a4/0xa40 [ 502.846960][T14553] ? __pfx_direct_splice_actor+0x10/0x10 [ 502.846995][T14553] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 502.847028][T14553] ? __fget_files+0x1fc/0x3a0 [ 502.847062][T14553] do_splice_direct+0x178/0x250 [ 502.847092][T14553] ? __pfx_do_splice_direct+0x10/0x10 [ 502.847121][T14553] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 502.847155][T14553] ? rw_verify_area+0xcf/0x680 [ 502.847184][T14553] do_sendfile+0xafb/0xe40 [ 502.847217][T14553] ? __pfx_do_sendfile+0x10/0x10 [ 502.847246][T14553] ? __fget_files+0x206/0x3a0 [ 502.847284][T14553] __x64_sys_sendfile64+0x1da/0x220 [ 502.847304][T14553] ? ksys_write+0x1ba/0x250 [ 502.847330][T14553] ? __pfx___x64_sys_sendfile64+0x10/0x10 [ 502.847366][T14553] do_syscall_64+0xcd/0x250 [ 502.847396][T14553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 502.847423][T14553] RIP: 0033:0x7f38d918d169 [ 502.847441][T14553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 502.847462][T14553] RSP: 002b:00007f38da097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 502.847485][T14553] RAX: ffffffffffffffda RBX: 00007f38d93a5fa0 RCX: 00007f38d918d169 [ 502.847500][T14553] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000003 [ 502.847513][T14553] RBP: 00007f38da097090 R08: 0000000000000000 R09: 0000000000000000 [ 502.847527][T14553] R10: 0000000000000ef0 R11: 0000000000000246 R12: 0000000000000001 [ 502.847541][T14553] R13: 0000000000000000 R14: 00007f38d93a5fa0 R15: 00007ffe2aa699b8 [ 502.847571][T14553] [ 504.057920][T14575] FAULT_INJECTION: forcing a failure. [ 504.057920][T14575] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 504.116129][T14575] CPU: 0 UID: 0 PID: 14575 Comm: syz.1.2352 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 504.116169][T14575] Tainted: [U]=USER [ 504.116177][T14575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 504.116192][T14575] Call Trace: [ 504.116199][T14575] [ 504.116208][T14575] dump_stack_lvl+0x16c/0x1f0 [ 504.116247][T14575] should_fail_ex+0x50a/0x650 [ 504.116284][T14575] ? __pfx___might_resched+0x10/0x10 [ 504.116325][T14575] should_fail_alloc_page+0xe7/0x130 [ 504.116351][T14575] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 504.116391][T14575] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 504.116429][T14575] ? hlock_class+0x4e/0x130 [ 504.116453][T14575] ? mark_lock+0xb5/0xc60 [ 504.116487][T14575] ? __pfx_mark_lock+0x10/0x10 [ 504.116521][T14575] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 504.116559][T14575] ? hlock_class+0x4e/0x130 [ 504.116584][T14575] ? __asan_memcpy+0x3c/0x60 [ 504.116622][T14575] ? __pfx_interleave_nid+0x10/0x10 [ 504.116656][T14575] ? hlock_class+0x4e/0x130 [ 504.116680][T14575] ? __lock_acquire+0xcc5/0x3c40 [ 504.116717][T14575] ? policy_nodemask+0xea/0x4e0 [ 504.116754][T14575] alloc_pages_mpol+0x1fc/0x540 [ 504.116779][T14575] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 504.116803][T14575] ? __lock_acquire+0x15a9/0x3c40 [ 504.116842][T14575] folio_alloc_mpol_noprof+0x36/0x2f0 [ 504.116872][T14575] vma_alloc_folio_noprof+0xee/0x1b0 [ 504.116899][T14575] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 504.116927][T14575] ? find_held_lock+0x2d/0x110 [ 504.116965][T14575] do_pte_missing+0x202f/0x3e10 [ 504.117015][T14575] __handle_mm_fault+0x1166/0x2c60 [ 504.117060][T14575] ? __pfx___handle_mm_fault+0x10/0x10 [ 504.117092][T14575] ? follow_page_pte+0x3ac/0x1490 [ 504.117124][T14575] ? __pfx_lock_release+0x10/0x10 [ 504.117186][T14575] handle_mm_fault+0x3fa/0xaa0 [ 504.117227][T14575] __get_user_pages+0x773/0x36f0 [ 504.117270][T14575] ? __pfx_mt_find+0x10/0x10 [ 504.117300][T14575] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 504.117334][T14575] ? __pfx___get_user_pages+0x10/0x10 [ 504.117373][T14575] ? __mm_populate+0x21d/0x380 [ 504.117412][T14575] populate_vma_page_range+0x27f/0x3a0 [ 504.117449][T14575] ? __pfx_populate_vma_page_range+0x10/0x10 [ 504.117483][T14575] ? __pfx_find_vma_intersection+0x10/0x10 [ 504.117514][T14575] ? vm_mmap_pgoff+0x29b/0x3a0 [ 504.117551][T14575] __mm_populate+0x1d6/0x380 [ 504.117587][T14575] ? __pfx___mm_populate+0x10/0x10 [ 504.117624][T14575] ? up_write+0x1b2/0x520 [ 504.117662][T14575] vm_mmap_pgoff+0x2d3/0x3a0 [ 504.117697][T14575] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 504.117734][T14575] ? __x64_sys_futex+0x1e1/0x4c0 [ 504.117761][T14575] ? __x64_sys_futex+0x1ea/0x4c0 [ 504.117793][T14575] ksys_mmap_pgoff+0x7d/0x5c0 [ 504.117820][T14575] ? rcu_is_watching+0x12/0xc0 [ 504.117846][T14575] __x64_sys_mmap+0x125/0x190 [ 504.117880][T14575] do_syscall_64+0xcd/0x250 [ 504.117910][T14575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.117942][T14575] RIP: 0033:0x7f38d918d169 [ 504.117969][T14575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.117994][T14575] RSP: 002b:00007f38da097038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 504.118019][T14575] RAX: ffffffffffffffda RBX: 00007f38d93a5fa0 RCX: 00007f38d918d169 [ 504.118036][T14575] RDX: 00000000000000df RSI: 0000000000400008 RDI: 0000000000200000 [ 504.118052][T14575] RBP: 00007f38d920e2a0 R08: 0000000000000002 R09: 0000000000008000 [ 504.118067][T14575] R10: 0000000000009b72 R11: 0000000000000246 R12: 0000000000000000 [ 504.118082][T14575] R13: 0000000000000000 R14: 00007f38d93a5fa0 R15: 00007ffe2aa699b8 [ 504.118115][T14575] [ 505.829450][T14595] FAULT_INJECTION: forcing a failure. [ 505.829450][T14595] name failslab, interval 1, probability 0, space 0, times 0 [ 505.858532][T14595] CPU: 1 UID: 0 PID: 14595 Comm: syz.1.2358 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 505.858578][T14595] Tainted: [U]=USER [ 505.858585][T14595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 505.858598][T14595] Call Trace: [ 505.858604][T14595] [ 505.858614][T14595] dump_stack_lvl+0x16c/0x1f0 [ 505.858657][T14595] should_fail_ex+0x50a/0x650 [ 505.858693][T14595] ? fs_reclaim_acquire+0xae/0x150 [ 505.858722][T14595] should_failslab+0xc2/0x120 [ 505.858742][T14595] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 505.858776][T14595] ? ptlock_alloc+0x1f/0x70 [ 505.858819][T14595] ptlock_alloc+0x1f/0x70 [ 505.858849][T14595] pte_alloc_one+0x74/0x390 [ 505.858881][T14595] do_pte_missing+0x1aff/0x3e10 [ 505.858914][T14595] ? do_raw_spin_unlock+0x172/0x230 [ 505.858939][T14595] ? __pmd_alloc+0x3c2/0x870 [ 505.858970][T14595] __handle_mm_fault+0x1166/0x2c60 [ 505.859015][T14595] ? __pfx___handle_mm_fault+0x10/0x10 [ 505.859052][T14595] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 505.859106][T14595] ? find_vma+0xc0/0x140 [ 505.859132][T14595] ? __pfx_find_vma+0x10/0x10 [ 505.859166][T14595] handle_mm_fault+0x3fa/0xaa0 [ 505.859204][T14595] do_user_addr_fault+0x7a3/0x13f0 [ 505.859241][T14595] exc_page_fault+0x5c/0xc0 [ 505.859270][T14595] asm_exc_page_fault+0x26/0x30 [ 505.859298][T14595] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 505.859328][T14595] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 505.859349][T14595] RSP: 0018:ffffc90003657e58 EFLAGS: 00050202 [ 505.859371][T14595] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 000000000000000c [ 505.859384][T14595] RDX: fffff520006cafd7 RSI: 0000000000000000 RDI: ffffc90003657eb0 [ 505.859399][T14595] RBP: 000000000000000c R08: 0000000000000001 R09: fffff520006cafd7 [ 505.859412][T14595] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000000000000 [ 505.859424][T14595] R13: ffffc90003657eb0 R14: 0000000000000001 R15: 0000000000000001 [ 505.859455][T14595] _copy_from_user+0x98/0xd0 [ 505.859481][T14595] __x64_sys_epoll_ctl+0x132/0x1e0 [ 505.859516][T14595] ? __pfx___x64_sys_epoll_ctl+0x10/0x10 [ 505.859554][T14595] do_syscall_64+0xcd/0x250 [ 505.859590][T14595] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.859619][T14595] RIP: 0033:0x7f38d918d169 [ 505.859637][T14595] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.859658][T14595] RSP: 002b:00007f38da097038 EFLAGS: 00000246 ORIG_RAX: 00000000000000e9 [ 505.859678][T14595] RAX: ffffffffffffffda RBX: 00007f38d93a5fa0 RCX: 00007f38d918d169 [ 505.859693][T14595] RDX: 8000000000000000 RSI: 0000000000000001 RDI: 0000000000000001 [ 505.859707][T14595] RBP: 00007f38da097090 R08: 0000000000000000 R09: 0000000000000000 [ 505.859719][T14595] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.859735][T14595] R13: 0000000000000000 R14: 00007f38d93a5fa0 R15: 00007ffe2aa699b8 [ 505.859763][T14595] [ 507.242723][T14613] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2365'. [ 507.302335][T14613] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2365'. [ 507.451604][T14615] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2366'. [ 508.664776][T14636] FAULT_INJECTION: forcing a failure. [ 508.664776][T14636] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 508.684232][T14636] CPU: 0 UID: 0 PID: 14636 Comm: syz.1.2370 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 508.684271][T14636] Tainted: [U]=USER [ 508.684279][T14636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 508.684291][T14636] Call Trace: [ 508.684298][T14636] [ 508.684308][T14636] dump_stack_lvl+0x16c/0x1f0 [ 508.684343][T14636] should_fail_ex+0x50a/0x650 [ 508.684382][T14636] core_sys_select+0x4cf/0xb80 [ 508.684420][T14636] ? __pfx_core_sys_select+0x10/0x10 [ 508.684456][T14636] ? find_held_lock+0x2d/0x110 [ 508.684510][T14636] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 508.684548][T14636] kern_select+0x15e/0x1e0 [ 508.684578][T14636] ? __pfx_kern_select+0x10/0x10 [ 508.684612][T14636] ? __pfx_ksys_write+0x10/0x10 [ 508.684648][T14636] __x64_sys_select+0xbd/0x160 [ 508.684681][T14636] ? do_syscall_64+0x91/0x250 [ 508.684710][T14636] ? lockdep_hardirqs_on+0x7c/0x110 [ 508.684738][T14636] do_syscall_64+0xcd/0x250 [ 508.684769][T14636] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 508.684800][T14636] RIP: 0033:0x7f38d918d169 [ 508.684824][T14636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 508.684845][T14636] RSP: 002b:00007f38da076038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 508.684868][T14636] RAX: ffffffffffffffda RBX: 00007f38d93a6080 RCX: 00007f38d918d169 [ 508.684883][T14636] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 508.684897][T14636] RBP: 00007f38da076090 R08: 0000000000000000 R09: 0000000000000000 [ 508.684911][T14636] R10: 0000400000000180 R11: 0000000000000246 R12: 0000000000000001 [ 508.684925][T14636] R13: 0000000000000000 R14: 00007f38d93a6080 R15: 00007ffe2aa699b8 [ 508.684956][T14636] [ 509.626223][T14640] HfR: entered promiscuous mode [ 509.659282][T14640] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2373'. [ 509.684339][T14640] HfR: left promiscuous mode [ 510.204047][ T9211] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 510.470859][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 510.490904][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 510.499657][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 510.516743][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 510.524547][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 510.531804][T14650] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2377'. [ 510.531844][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 510.615093][T14650] netlink: 504 bytes leftover after parsing attributes in process `syz.3.2377'. [ 510.748830][ T3008] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.070907][ T3008] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.239170][ T3008] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.281158][T14658] raw_sendmsg: syz.3.2379 forgot to set AF_INET. Fix it! [ 511.440971][ T3008] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 511.915139][T14661] Invalid ELF header magic: != ELF [ 512.021178][T14647] chnl_net:caif_netlink_parms(): no params data found [ 512.072765][ T3008] bridge_slave_1: left allmulticast mode [ 512.085970][ T3008] bridge_slave_1: left promiscuous mode [ 512.115074][ T3008] bridge0: port 2(bridge_slave_1) entered disabled state [ 512.187182][ T3008] bridge_slave_0: left allmulticast mode [ 512.192883][ T3008] bridge_slave_0: left promiscuous mode [ 512.224531][ T3008] bridge0: port 1(bridge_slave_0) entered disabled state [ 512.584318][ T5850] Bluetooth: hci1: command tx timeout [ 513.302007][ T3008] erspan0 (unregistering): left allmulticast mode [ 514.533683][ T3008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.557074][ T3008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.577601][ T3008] bond0 (unregistering): Released all slaves [ 514.674771][ T5850] Bluetooth: hci1: command tx timeout [ 515.001714][T14647] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.017040][T14647] bridge0: port 1(bridge_slave_0) entered disabled state [ 515.034913][T14647] bridge_slave_0: entered allmulticast mode [ 515.042030][T14647] bridge_slave_0: entered promiscuous mode [ 515.241952][T14703] kexec: Could not allocate control_code_buffer [ 515.250823][T14647] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.292856][T14647] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.313184][T14647] bridge_slave_1: entered allmulticast mode [ 515.337677][T14647] bridge_slave_1: entered promiscuous mode [ 515.481794][T14647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.556363][T14647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.742780][T14647] team0: Port device team_slave_0 added [ 515.821635][T14647] team0: Port device team_slave_1 added [ 515.933323][T14647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.973789][T14647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.113028][T14647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 516.744858][ T5850] Bluetooth: hci1: command tx timeout [ 516.805968][T14647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 516.812961][T14647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 516.894220][T14647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 517.145349][T14647] hsr_slave_0: entered promiscuous mode [ 517.164787][T14647] hsr_slave_1: entered promiscuous mode [ 517.174309][T14647] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 517.181910][T14647] Cannot create hsr debugfs directory [ 517.314301][ T3008] hsr_slave_0: left promiscuous mode [ 517.358414][ T3008] hsr_slave_1: left promiscuous mode [ 517.368408][ T3008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 517.400535][ T3008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 517.439795][ T3008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 517.473908][ T3008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 517.543537][ T3008] veth1_macvtap: left promiscuous mode [ 517.565895][ T3008] veth0_macvtap: left promiscuous mode [ 517.571579][ T3008] veth1_vlan: left promiscuous mode [ 517.635847][T14744] FAULT_INJECTION: forcing a failure. [ 517.635847][T14744] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 517.691480][T14744] CPU: 0 UID: 0 PID: 14744 Comm: syz.0.2392 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 517.691520][T14744] Tainted: [U]=USER [ 517.691528][T14744] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 517.691541][T14744] Call Trace: [ 517.691548][T14744] [ 517.691557][T14744] dump_stack_lvl+0x16c/0x1f0 [ 517.691593][T14744] should_fail_ex+0x50a/0x650 [ 517.691643][T14744] ? __pfx___might_resched+0x10/0x10 [ 517.691682][T14744] should_fail_alloc_page+0xe7/0x130 [ 517.691707][T14744] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 517.691744][T14744] __alloc_frozen_pages_noprof+0x18e/0x2470 [ 517.691781][T14744] ? __pfx___lock_acquire+0x10/0x10 [ 517.691810][T14744] ? __pfx_mark_lock+0x10/0x10 [ 517.691844][T14744] ? hlock_class+0x4e/0x130 [ 517.691867][T14744] ? __lock_acquire+0x15a9/0x3c40 [ 517.691899][T14744] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 517.691954][T14744] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 517.691991][T14744] ? policy_nodemask+0xea/0x4e0 [ 517.692028][T14744] alloc_pages_mpol+0x1fc/0x540 [ 517.692058][T14744] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 517.692078][T14744] ? __pollwait+0x26d/0x4c0 [ 517.692105][T14744] ? __pfx_lock_release+0x10/0x10 [ 517.692133][T14744] ? lock_acquire+0x2f/0xb0 [ 517.692161][T14744] ? add_wait_queue+0x45/0x230 [ 517.692193][T14744] alloc_pages_noprof+0x131/0x390 [ 517.692216][T14744] ? __pfx___pollwait+0x10/0x10 [ 517.692243][T14744] get_free_pages_noprof+0xc/0x40 [ 517.692267][T14744] __pollwait+0x291/0x4c0 [ 517.692294][T14744] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 517.692323][T14744] ? __pfx___pollwait+0x10/0x10 [ 517.692351][T14744] snd_seq_pool_poll_wait+0x58/0x140 [ 517.692380][T14744] snd_seq_kernel_client_write_poll+0xf9/0x1a0 [ 517.692420][T14744] snd_seq_oss_poll+0x17d/0x1d0 [ 517.692448][T14744] ? __pfx_odev_poll+0x10/0x10 [ 517.692468][T14744] odev_poll+0x4a/0x90 [ 517.692490][T14744] do_select+0xd88/0x17e0 [ 517.692543][T14744] ? __pfx_do_select+0x10/0x10 [ 517.692571][T14744] ? __pfx_mark_lock+0x10/0x10 [ 517.692598][T14744] ? mark_lock+0xb5/0xc60 [ 517.692627][T14744] ? __pfx___pollwait+0x10/0x10 [ 517.692661][T14744] ? __pfx_pollwake+0x10/0x10 [ 517.692693][T14744] ? __pfx_pollwake+0x10/0x10 [ 517.692724][T14744] ? __pfx_pollwake+0x10/0x10 [ 517.692755][T14744] ? __pfx_pollwake+0x10/0x10 [ 517.692786][T14744] ? __pfx_pollwake+0x10/0x10 [ 517.692817][T14744] ? __pfx_pollwake+0x10/0x10 [ 517.692849][T14744] ? __pfx_pollwake+0x10/0x10 [ 517.692880][T14744] ? __pfx_pollwake+0x10/0x10 [ 517.692912][T14744] ? __pfx_pollwake+0x10/0x10 [ 517.692942][T14744] ? trace_lock_acquire+0x14e/0x1f0 [ 517.692971][T14744] ? lock_acquire+0x2f/0xb0 [ 517.692999][T14744] ? __might_fault+0xe3/0x190 [ 517.693023][T14744] ? __might_fault+0xe3/0x190 [ 517.693058][T14744] ? core_sys_select+0x459/0xb80 [ 517.693087][T14744] core_sys_select+0x459/0xb80 [ 517.693124][T14744] ? __pfx_core_sys_select+0x10/0x10 [ 517.693160][T14744] ? find_held_lock+0x2d/0x110 [ 517.693208][T14744] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 517.693246][T14744] kern_select+0x15e/0x1e0 [ 517.693276][T14744] ? __pfx_kern_select+0x10/0x10 [ 517.693311][T14744] ? __pfx_ksys_write+0x10/0x10 [ 517.693345][T14744] __x64_sys_select+0xbd/0x160 [ 517.693373][T14744] ? do_syscall_64+0x91/0x250 [ 517.693401][T14744] ? lockdep_hardirqs_on+0x7c/0x110 [ 517.693429][T14744] do_syscall_64+0xcd/0x250 [ 517.693460][T14744] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.693492][T14744] RIP: 0033:0x7ff655d8d169 [ 517.693510][T14744] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.693531][T14744] RSP: 002b:00007ff656ca5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000017 [ 517.693554][T14744] RAX: ffffffffffffffda RBX: 00007ff655fa6080 RCX: 00007ff655d8d169 [ 517.693569][T14744] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000e [ 517.693582][T14744] RBP: 00007ff656ca5090 R08: 0000000000000000 R09: 0000000000000000 [ 517.693596][T14744] R10: 00004000000002c0 R11: 0000000000000246 R12: 0000000000000001 [ 517.693610][T14744] R13: 0000000000000001 R14: 00007ff655fa6080 R15: 00007fff540ee5d8 [ 517.693640][T14744] [ 517.760012][ T3008] veth0_vlan: left promiscuous mode [ 518.840213][ T5850] Bluetooth: hci1: command tx timeout [ 520.130959][ T3008] team0 (unregistering): Port device team_slave_1 removed [ 520.263403][ T3008] team0 (unregistering): Port device team_slave_0 removed [ 522.448004][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 522.457916][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 522.466250][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 522.476238][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 522.483926][ T5844] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 522.491544][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 523.658359][T14775] chnl_net:caif_netlink_parms(): no params data found [ 523.749953][T14774] kexec: Could not allocate control_code_buffer [ 524.585036][ T5844] Bluetooth: hci3: command tx timeout [ 524.617592][ T3008] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.924441][ T3008] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.180451][T14775] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.194993][T14775] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.202293][T14775] bridge_slave_0: entered allmulticast mode [ 525.217491][T14775] bridge_slave_0: entered promiscuous mode [ 525.314806][ T3008] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.399888][T14775] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.417576][T14775] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.440185][T14775] bridge_slave_1: entered allmulticast mode [ 525.461992][T14775] bridge_slave_1: entered promiscuous mode [ 525.595854][ T3008] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.757502][T14647] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 525.777270][T14647] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 525.802685][T14775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.820032][T14647] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 525.865969][T14647] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 525.880016][T14775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 526.065729][T14775] team0: Port device team_slave_0 added [ 526.107300][T14775] team0: Port device team_slave_1 added [ 526.179000][ T3008] bond0: left allmulticast mode [ 526.185380][ T3008] bond_slave_0: left allmulticast mode [ 526.191226][ T3008] bond_slave_1: left allmulticast mode [ 526.222791][ T3008] bond0: left promiscuous mode [ 526.234753][ T3008] bond_slave_0: left promiscuous mode [ 526.240357][ T3008] bond_slave_1: left promiscuous mode [ 526.274672][ T3008] bridge0: port 3(bond0) entered disabled state [ 526.299991][ T3008] bridge_slave_1: left allmulticast mode [ 526.305970][ T3008] bridge_slave_1: left promiscuous mode [ 526.311712][ T3008] bridge0: port 2(bridge_slave_1) entered disabled state [ 526.393151][ T3008] bridge_slave_0: left allmulticast mode [ 526.399302][ T3008] bridge_slave_0: left promiscuous mode [ 526.412950][ T3008] bridge0: port 1(bridge_slave_0) entered disabled state [ 526.664427][ T5844] Bluetooth: hci3: command tx timeout [ 527.688431][T14819] netlink: 'syz.0.2406': attribute type 1 has an invalid length. [ 528.328571][ T3008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.341615][ T3008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.353717][ T3008] bond0 (unregistering): Released all slaves [ 528.389208][T14775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.414185][T14775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.484379][T14775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.607665][T14775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.636349][T14775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.679336][T14775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.746347][ T5844] Bluetooth: hci3: command tx timeout [ 528.921365][T14775] hsr_slave_0: entered promiscuous mode [ 528.939350][T14775] hsr_slave_1: entered promiscuous mode [ 528.959349][T14775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 528.970847][T14775] Cannot create hsr debugfs directory [ 529.213253][T14647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 529.669409][ T3008] hsr_slave_0: left promiscuous mode [ 529.687993][ T3008] hsr_slave_1: left promiscuous mode [ 529.704442][ T3008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 529.717305][ T3008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 529.739922][ T3008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 529.758998][ T3008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 529.904218][ T3008] veth1_macvtap: left promiscuous mode [ 530.022559][ T3008] veth0_macvtap: left promiscuous mode [ 530.110835][ T3008] veth1_vlan: left promiscuous mode [ 530.204508][ T3008] veth0_vlan: left promiscuous mode [ 530.824362][ T5844] Bluetooth: hci3: command tx timeout [ 531.341814][ T3008] team0 (unregistering): Port device team_slave_1 removed [ 531.409060][ T3008] team0 (unregistering): Port device team_slave_0 removed [ 532.131184][T14647] 8021q: adding VLAN 0 to HW filter on device team0 [ 532.169226][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.176377][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 532.287044][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.294223][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 532.455375][T14775] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 532.513409][T14775] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 532.558456][T14775] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 532.601950][T14775] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 532.957679][T14775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 533.032319][T14775] 8021q: adding VLAN 0 to HW filter on device team0 [ 533.081922][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 533.089183][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 533.231674][ T3008] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.310971][ T51] bridge0: port 2(bridge_slave_1) entered blocking state [ 533.318178][ T51] bridge0: port 2(bridge_slave_1) entered forwarding state [ 533.394434][ T3008] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.447857][T14647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 533.484050][ T3008] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.602707][ T3008] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 533.691070][T14647] veth0_vlan: entered promiscuous mode [ 533.761165][T14647] veth1_vlan: entered promiscuous mode [ 533.991981][ T3008] bridge_slave_1: left allmulticast mode [ 534.008883][ T3008] bridge_slave_1: left promiscuous mode [ 534.029214][ T3008] bridge0: port 2(bridge_slave_1) entered disabled state [ 534.067371][ T3008] bridge_slave_0: left allmulticast mode [ 534.073363][ T3008] bridge_slave_0: left promiscuous mode [ 534.104828][ T3008] bridge0: port 1(bridge_slave_0) entered disabled state [ 534.636505][ T3008] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 534.646974][ T3008] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 534.659714][ T3008] bond0 (unregistering): Released all slaves [ 534.782959][T14775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 534.909778][T14647] veth0_macvtap: entered promiscuous mode [ 534.927935][T14647] veth1_macvtap: entered promiscuous mode [ 535.051805][T14647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.079049][T14647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.093162][T14647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 535.106016][T14647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.118732][T14647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 535.266501][T14647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.282566][T14647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.293282][T14647] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 535.309910][T14647] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 535.325843][T14647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 535.366485][T14647] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.388319][T14647] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.434331][T14647] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.445500][T14647] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 535.565333][ T3008] hsr_slave_0: left promiscuous mode [ 535.581641][ T3008] hsr_slave_1: left promiscuous mode [ 535.610559][ T3008] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 535.628968][ T3008] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.652731][ T3008] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 535.672665][ T3008] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 535.785083][ T3008] veth1_macvtap: left promiscuous mode [ 535.790665][ T3008] veth0_macvtap: left promiscuous mode [ 535.803905][ T3008] veth1_vlan: left promiscuous mode [ 535.814826][ T3008] veth0_vlan: left promiscuous mode [ 536.439248][ T3008] team0 (unregistering): Port device team_slave_1 removed [ 536.488407][ T3008] team0 (unregistering): Port device team_slave_0 removed [ 537.051287][T14775] veth0_vlan: entered promiscuous mode [ 537.104941][T14775] veth1_vlan: entered promiscuous mode [ 537.155407][ T7263] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.163369][ T7263] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.256026][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.305596][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 537.309909][T14775] veth0_macvtap: entered promiscuous mode [ 537.348370][T14775] veth1_macvtap: entered promiscuous mode [ 537.383368][T14775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.402013][T14775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.422402][T14775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 537.433636][T14775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.455315][T14775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.511323][T14775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.555135][T14775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.594186][T14775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 537.606533][T14775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 537.618179][T14775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.658479][T14775] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.694376][T14775] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.720901][T14775] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.748002][T14775] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.976782][T15044] HfR: entered promiscuous mode [ 538.064569][ T7341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.072704][ T7341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.185019][ T7341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.193210][ T7341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.663319][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 540.682279][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 540.691875][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 540.700773][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 540.712968][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 540.720425][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 541.436266][T15117] chnl_net:caif_netlink_parms(): no params data found [ 541.802888][T15117] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.820522][T15117] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.829409][T15117] bridge_slave_0: entered allmulticast mode [ 541.841528][T15117] bridge_slave_0: entered promiscuous mode [ 541.960108][T15117] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.977718][T15117] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.994345][T15117] bridge_slave_1: entered allmulticast mode [ 542.002818][T15117] bridge_slave_1: entered promiscuous mode [ 542.158330][T15117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 542.200691][T15117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 542.293971][T15117] team0: Port device team_slave_0 added [ 542.319508][T15117] team0: Port device team_slave_1 added [ 542.378360][T15117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.399959][T15117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.457368][T15117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.483442][T15117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.491100][T15117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.517068][ C0] vkms_vblank_simulate: vblank timer overrun [ 542.550971][T15117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.640626][T15117] hsr_slave_0: entered promiscuous mode [ 542.691094][T15117] hsr_slave_1: entered promiscuous mode [ 542.825927][ T5844] Bluetooth: hci4: command tx timeout [ 543.034918][T15186] device-mapper: ioctl: Unable to rename non-existent device, to „ [ 543.153243][T15190] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2450'. [ 543.203914][T15117] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.248309][T15190] zram: Added device: zram1 [ 543.401768][T15117] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 543.556749][T15117] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 544.189189][T15117] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 544.274189][T15117] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 544.323092][T15117] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 544.448170][T15117] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 544.712095][T15236] cougar: G6 mapped to space [ 544.904276][ T5844] Bluetooth: hci4: command tx timeout [ 544.958759][T15117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 545.131650][T15117] 8021q: adding VLAN 0 to HW filter on device team0 [ 545.178875][ T3008] bridge0: port 1(bridge_slave_0) entered blocking state [ 545.186047][ T3008] bridge0: port 1(bridge_slave_0) entered forwarding state [ 545.244827][ T3008] bridge0: port 2(bridge_slave_1) entered blocking state [ 545.252004][ T3008] bridge0: port 2(bridge_slave_1) entered forwarding state [ 545.810713][T15117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 546.023796][T15270] zram: Removed device: zram0 [ 546.246092][T15117] veth0_vlan: entered promiscuous mode [ 546.298968][T15281] [ 546.299847][T15117] veth1_vlan: entered promiscuous mode [ 546.494297][T15117] veth0_macvtap: entered promiscuous mode [ 546.518460][T15290] FAULT_INJECTION: forcing a failure. [ 546.518460][T15290] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 546.533834][T15290] CPU: 0 UID: 0 PID: 15290 Comm: syz.5.2468 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 546.533869][T15290] Tainted: [U]=USER [ 546.533876][T15290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 546.533888][T15290] Call Trace: [ 546.533895][T15290] [ 546.533904][T15290] dump_stack_lvl+0x16c/0x1f0 [ 546.533937][T15290] should_fail_ex+0x50a/0x650 [ 546.533971][T15290] _copy_to_user+0x32/0xd0 [ 546.533995][T15290] simple_read_from_buffer+0xd0/0x160 [ 546.534024][T15290] proc_fail_nth_read+0x198/0x270 [ 546.534050][T15290] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.534078][T15290] ? rw_verify_area+0xcf/0x680 [ 546.534105][T15290] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 546.534131][T15290] vfs_read+0x1df/0xbf0 [ 546.534159][T15290] ? find_held_lock+0x2d/0x110 [ 546.534184][T15290] ? __pfx_vfs_read+0x10/0x10 [ 546.534207][T15290] ? __do_sys_close_range+0x203/0x700 [ 546.534238][T15290] ? __pfx_lock_release+0x10/0x10 [ 546.534266][T15290] ? do_raw_spin_lock+0x12d/0x2c0 [ 546.534294][T15290] ? do_raw_spin_unlock+0x172/0x230 [ 546.534321][T15290] ksys_read+0x12b/0x250 [ 546.534348][T15290] ? __pfx_ksys_read+0x10/0x10 [ 546.534386][T15290] do_syscall_64+0xcd/0x250 [ 546.534417][T15290] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 546.534448][T15290] RIP: 0033:0x7f8e7498bb7c [ 546.534467][T15290] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 546.534494][T15290] RSP: 002b:00007f8e727d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 546.534515][T15290] RAX: ffffffffffffffda RBX: 00007f8e74ba6080 RCX: 00007f8e7498bb7c [ 546.534531][T15290] RDX: 000000000000000f RSI: 00007f8e727d50a0 RDI: 0000000000000000 [ 546.534545][T15290] RBP: 00007f8e727d5090 R08: 0000000000000000 R09: 0000000000000000 [ 546.534558][T15290] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 546.534572][T15290] R13: 0000000000000000 R14: 00007f8e74ba6080 R15: 00007ffe9b59a7f8 [ 546.534601][T15290] [ 546.735358][ C0] vkms_vblank_simulate: vblank timer overrun [ 546.791388][T15117] veth1_macvtap: entered promiscuous mode [ 546.984338][ T5844] Bluetooth: hci4: command tx timeout [ 547.226821][T15117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.243446][T15117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.293701][T15117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.326938][T15117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.354343][T15117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 547.372792][T15117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.422076][T15117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 547.735902][T15117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.822377][T15117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.852772][T15117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.881923][T15117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.915491][T15117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 547.939016][T15117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 547.944615][T15323] netlink: 'syz.1.2475': attribute type 1 has an invalid length. [ 547.966565][T15117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 548.063833][T15117] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.087771][T15117] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.124173][T15117] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.153808][T15117] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 548.355389][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.363363][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 548.444468][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 548.476852][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 549.064320][ T5844] Bluetooth: hci4: command tx timeout [ 549.671194][T15374] FAULT_INJECTION: forcing a failure. [ 549.671194][T15374] name fail_futex, interval 1, probability 0, space 0, times 0 [ 549.728244][T15374] CPU: 0 UID: 0 PID: 15374 Comm: syz.5.2486 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 549.728286][T15374] Tainted: [U]=USER [ 549.728295][T15374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 549.728308][T15374] Call Trace: [ 549.728316][T15374] [ 549.728325][T15374] dump_stack_lvl+0x16c/0x1f0 [ 549.728361][T15374] should_fail_ex+0x50a/0x650 [ 549.728402][T15374] get_futex_key+0x4a3/0x1000 [ 549.728435][T15374] ? __pfx_get_futex_key+0x10/0x10 [ 549.728460][T15374] ? _parse_integer_limit+0x17f/0x1d0 [ 549.728497][T15374] ? _kstrtoull+0x146/0x200 [ 549.728532][T15374] futex_wait_setup+0x78/0x290 [ 549.728574][T15374] __futex_wait+0x267/0x3c0 [ 549.728609][T15374] ? __pfx___futex_wait+0x10/0x10 [ 549.728650][T15374] ? __pfx_futex_wake_mark+0x10/0x10 [ 549.728687][T15374] ? find_held_lock+0x2d/0x110 [ 549.728725][T15374] futex_wait+0xe9/0x380 [ 549.728758][T15374] ? __pfx_futex_wait+0x10/0x10 [ 549.728815][T15374] ? vfs_write+0x306/0x1150 [ 549.728858][T15374] do_futex+0x22b/0x350 [ 549.728887][T15374] ? __pfx_do_futex+0x10/0x10 [ 549.728926][T15374] __x64_sys_futex+0x1e1/0x4c0 [ 549.728956][T15374] ? fput+0x67/0x440 [ 549.728978][T15374] ? __pfx___x64_sys_futex+0x10/0x10 [ 549.729007][T15374] ? ksys_write+0x1ba/0x250 [ 549.729037][T15374] ? __pfx_ksys_write+0x10/0x10 [ 549.729079][T15374] do_syscall_64+0xcd/0x250 [ 549.729112][T15374] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 549.729145][T15374] RIP: 0033:0x7f8e7498d169 [ 549.729165][T15374] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 549.729188][T15374] RSP: 002b:00007f8e727f60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 549.729221][T15374] RAX: ffffffffffffffda RBX: 00007f8e74ba5fa8 RCX: 00007f8e7498d169 [ 549.729239][T15374] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f8e74ba5fa8 [ 549.729255][T15374] RBP: 00007f8e74ba5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 549.729271][T15374] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8e74ba5fac [ 549.729286][T15374] R13: 0000000000000000 R14: 00007ffe9b59a710 R15: 00007ffe9b59a7f8 [ 549.729318][T15374] [ 549.950747][ C0] vkms_vblank_simulate: vblank timer overrun [ 551.500746][T15428] kfence: disabled [ 551.545571][T15421] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2494'. [ 551.595142][T15421] netlink: 354 bytes leftover after parsing attributes in process `syz.0.2494'. [ 551.750557][T15433] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2497'. [ 555.610780][T15537] i2c i2c-0: dtv_property_process_set: SET cmd 0x00000000 undefined [ 555.722258][T15545] netlink: 342 bytes leftover after parsing attributes in process `syz.1.2516'. [ 556.070456][T15555] FAULT_INJECTION: forcing a failure. [ 556.070456][T15555] name failslab, interval 1, probability 0, space 0, times 0 [ 556.099450][T15555] CPU: 0 UID: 0 PID: 15555 Comm: syz.3.2519 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 556.099488][T15555] Tainted: [U]=USER [ 556.099496][T15555] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 556.099508][T15555] Call Trace: [ 556.099515][T15555] [ 556.099524][T15555] dump_stack_lvl+0x16c/0x1f0 [ 556.099558][T15555] should_fail_ex+0x50a/0x650 [ 556.099592][T15555] ? fs_reclaim_acquire+0xae/0x150 [ 556.099622][T15555] ? tomoyo_encode2+0x100/0x3e0 [ 556.099649][T15555] should_failslab+0xc2/0x120 [ 556.099669][T15555] __kmalloc_noprof+0xcb/0x510 [ 556.099698][T15555] ? d_absolute_path+0x137/0x1b0 [ 556.099719][T15555] ? rcu_is_watching+0x12/0xc0 [ 556.099743][T15555] tomoyo_encode2+0x100/0x3e0 [ 556.099772][T15555] tomoyo_encode+0x29/0x50 [ 556.099797][T15555] tomoyo_realpath_from_path+0x19d/0x720 [ 556.099833][T15555] tomoyo_path_number_perm+0x248/0x590 [ 556.099856][T15555] ? tomoyo_path_number_perm+0x235/0x590 [ 556.099883][T15555] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 556.099932][T15555] ? __pfx_lock_release+0x10/0x10 [ 556.099971][T15555] ? trace_lock_acquire+0x14e/0x1f0 [ 556.099998][T15555] ? lock_acquire+0x2f/0xb0 [ 556.100023][T15555] ? __fget_files+0x40/0x3a0 [ 556.100055][T15555] ? __fget_files+0x206/0x3a0 [ 556.100089][T15555] security_file_ioctl+0x9b/0x240 [ 556.100118][T15555] __x64_sys_ioctl+0xb7/0x200 [ 556.100147][T15555] do_syscall_64+0xcd/0x250 [ 556.100177][T15555] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.100207][T15555] RIP: 0033:0x7fa8bc98d169 [ 556.100225][T15555] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.100245][T15555] RSP: 002b:00007fa8bd758038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 556.100266][T15555] RAX: ffffffffffffffda RBX: 00007fa8bcba5fa0 RCX: 00007fa8bc98d169 [ 556.100281][T15555] RDX: 0000000000000038 RSI: 000000008008551c RDI: 0000000000000003 [ 556.100293][T15555] RBP: 00007fa8bd758090 R08: 0000000000000000 R09: 0000000000000000 [ 556.100305][T15555] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 556.100316][T15555] R13: 0000000000000000 R14: 00007fa8bcba5fa0 R15: 00007ffc7b2692e8 [ 556.100346][T15555] [ 556.103118][T15555] ERROR: Out of memory at tomoyo_realpath_from_path. [ 556.618023][T15564] FAULT_INJECTION: forcing a failure. [ 556.618023][T15564] name failslab, interval 1, probability 0, space 0, times 0 [ 556.694309][T15564] CPU: 1 UID: 0 PID: 15564 Comm: syz.0.2520 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 556.694351][T15564] Tainted: [U]=USER [ 556.694359][T15564] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 556.694374][T15564] Call Trace: [ 556.694382][T15564] [ 556.694391][T15564] dump_stack_lvl+0x16c/0x1f0 [ 556.694426][T15564] should_fail_ex+0x50a/0x650 [ 556.694462][T15564] ? fs_reclaim_acquire+0xae/0x150 [ 556.694494][T15564] should_failslab+0xc2/0x120 [ 556.694517][T15564] kmem_cache_alloc_noprof+0x6e/0x3d0 [ 556.694549][T15564] ? __x64_sys_futex+0x1ea/0x4c0 [ 556.694588][T15564] ? getname_flags.part.0+0x4c/0x550 [ 556.694622][T15564] getname_flags.part.0+0x4c/0x550 [ 556.694653][T15564] getname+0x8d/0xe0 [ 556.694682][T15564] __x64_sys_execve+0x72/0xb0 [ 556.694712][T15564] do_syscall_64+0xcd/0x250 [ 556.694742][T15564] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 556.694773][T15564] RIP: 0033:0x7f8c34f8d169 [ 556.694792][T15564] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 556.694815][T15564] RSP: 002b:00007f8c35dbb038 EFLAGS: 00000246 ORIG_RAX: 000000000000003b [ 556.694839][T15564] RAX: ffffffffffffffda RBX: 00007f8c351a5fa0 RCX: 00007f8c34f8d169 [ 556.694857][T15564] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000400000000000 [ 556.694871][T15564] RBP: 00007f8c3500e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 556.694883][T15564] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 556.694897][T15564] R13: 0000000000000000 R14: 00007f8c351a5fa0 R15: 00007ffe4b2fa6e8 [ 556.694927][T15564] [ 556.916054][T15569] netlink: 'syz.5.2523': attribute type 16 has an invalid length. [ 556.923913][T15569] netlink: 330 bytes leftover after parsing attributes in process `syz.5.2523'. [ 558.180425][T15600] FAULT_INJECTION: forcing a failure. [ 558.180425][T15600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.224377][T15600] CPU: 1 UID: 0 PID: 15600 Comm: syz.1.2529 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 558.224414][T15600] Tainted: [U]=USER [ 558.224422][T15600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 558.224437][T15600] Call Trace: [ 558.224444][T15600] [ 558.224453][T15600] dump_stack_lvl+0x16c/0x1f0 [ 558.224488][T15600] should_fail_ex+0x50a/0x650 [ 558.224527][T15600] _copy_to_user+0x32/0xd0 [ 558.224554][T15600] simple_read_from_buffer+0xd0/0x160 [ 558.224587][T15600] proc_fail_nth_read+0x198/0x270 [ 558.224616][T15600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 558.224646][T15600] ? rw_verify_area+0xcf/0x680 [ 558.224673][T15600] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 558.224700][T15600] vfs_read+0x1df/0xbf0 [ 558.224729][T15600] ? __fget_files+0x1fc/0x3a0 [ 558.224760][T15600] ? __pfx___mutex_lock+0x10/0x10 [ 558.224789][T15600] ? __pfx_vfs_read+0x10/0x10 [ 558.224827][T15600] ? __fget_files+0x206/0x3a0 [ 558.224866][T15600] ksys_read+0x12b/0x250 [ 558.224894][T15600] ? __pfx_ksys_read+0x10/0x10 [ 558.224933][T15600] do_syscall_64+0xcd/0x250 [ 558.224964][T15600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.224994][T15600] RIP: 0033:0x7f596f98bb7c [ 558.225013][T15600] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 558.225034][T15600] RSP: 002b:00007f5970884030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 558.225056][T15600] RAX: ffffffffffffffda RBX: 00007f596fba5fa0 RCX: 00007f596f98bb7c [ 558.225071][T15600] RDX: 000000000000000f RSI: 00007f59708840a0 RDI: 0000000000000007 [ 558.225085][T15600] RBP: 00007f5970884090 R08: 0000000000000000 R09: 0000000000000000 [ 558.225099][T15600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 558.225113][T15600] R13: 0000000000000000 R14: 00007f596fba5fa0 R15: 00007ffe50b4c9e8 [ 558.225144][T15600] [ 558.866526][T15615] [U] [ 558.869286][T15615] [U] [ 558.872004][T15615] [U] [ 558.874734][T15615] [U] [ 558.923722][T15615] [U] [ 558.926523][T15615] [U] [ 558.929245][T15615] [U] [ 558.931958][T15615] [U] [ 559.099347][T15615] [U] [ 559.102111][T15615] [U] [ 559.104839][T15615] [U] [ 559.107569][T15615] [U] [ 559.126903][T15615] [U] [ 559.129657][T15615] [U] [ 559.132382][T15615] [U] [ 559.135115][T15615] [U] [ 559.151360][T15615] [U] [ 559.154127][T15615] [U] [ 559.156857][T15615] [U] [ 559.159584][T15615] [U] [ 559.271740][T15615] [U] [ 559.274504][T15615] [U] [ 559.277231][T15615] [U] [ 559.279957][T15615] [U] [ 559.319172][T15615] [U] [ 559.321943][T15615] [U] [ 559.324668][T15615] [U] [ 559.327382][T15615] [U] [ 559.367995][T15615] [U] [ 559.370753][T15615] [U] [ 559.373475][T15615] [U] [ 559.376193][T15615] [U] [ 559.452853][T15615] [U] [ 559.455618][T15615] [U] [ 559.458336][T15615] [U] [ 559.461053][T15615] [U] [ 559.472895][T15615] [U] [ 559.477451][T15615] [U] [ 559.480190][T15615] [U] [ 559.482935][T15615] [U] [ 559.519134][T15615] [U] [ 559.521907][T15615] [U] [ 559.524637][T15615] [U] [ 559.527362][T15615] [U] [ 559.564492][T15615] [U] [ 559.567258][T15615] [U] [ 559.569990][T15615] [U] [ 559.572711][T15615] [U] [ 559.644303][T15615] [U] [ 559.983106][T15624] Invalid ELF header magic: != ELF [ 561.236870][T15650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2541'. [ 561.302343][T15648] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2540'. [ 561.602366][T15661] bridge0: port 3(bond0) entered blocking state [ 561.634311][T15661] bridge0: port 3(bond0) entered disabled state [ 561.656438][T15661] bond0: entered allmulticast mode [ 561.661614][T15661] bond_slave_0: entered allmulticast mode [ 561.701878][T15661] bond_slave_1: entered allmulticast mode [ 561.714899][T15661] bond0: entered promiscuous mode [ 561.723458][T15661] bond_slave_0: entered promiscuous mode [ 561.732193][T15661] bond_slave_1: entered promiscuous mode [ 561.740754][T15661] bridge0: port 3(bond0) entered blocking state [ 561.740846][T15661] bridge0: port 3(bond0) entered forwarding state [ 561.802069][T15659] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2543'. [ 563.221723][T15705] CIFS: VFS: Invalid SecurityFlags: a [ 563.307452][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.314446][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.921395][T15716] FAULT_INJECTION: forcing a failure. [ 563.921395][T15716] name fail_futex, interval 1, probability 0, space 0, times 0 [ 563.944830][T15716] CPU: 0 UID: 0 PID: 15716 Comm: syz.1.2553 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 563.944873][T15716] Tainted: [U]=USER [ 563.944880][T15716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 563.944893][T15716] Call Trace: [ 563.944900][T15716] [ 563.944910][T15716] dump_stack_lvl+0x16c/0x1f0 [ 563.944942][T15716] should_fail_ex+0x50a/0x650 [ 563.944971][T15716] ? trace_lock_acquire+0x14e/0x1f0 [ 563.945001][T15716] get_futex_key+0x4a3/0x1000 [ 563.945026][T15716] ? lock_acquire+0x2f/0xb0 [ 563.945056][T15716] ? bpf_ksym_find+0x124/0x1c0 [ 563.945078][T15716] ? __pfx_get_futex_key+0x10/0x10 [ 563.945101][T15716] ? kernel_text_address+0x8d/0x100 [ 563.945131][T15716] ? __kernel_text_address+0xd/0x40 [ 563.945156][T15716] ? unwind_get_return_address+0x59/0xa0 [ 563.945195][T15716] futex_wait_setup+0x78/0x290 [ 563.945234][T15716] __futex_wait+0x267/0x3c0 [ 563.945267][T15716] ? __pfx___futex_wait+0x10/0x10 [ 563.945306][T15716] ? __pfx_futex_wake_mark+0x10/0x10 [ 563.945348][T15716] futex_wait+0xe9/0x380 [ 563.945378][T15716] ? __pfx_futex_wait+0x10/0x10 [ 563.945420][T15716] do_futex+0x22b/0x350 [ 563.945443][T15716] ? __pfx_do_futex+0x10/0x10 [ 563.945463][T15716] ? kasan_quarantine_put+0x10a/0x240 [ 563.945494][T15716] ? lockdep_hardirqs_on+0x7c/0x110 [ 563.945525][T15716] __x64_sys_futex+0x1e1/0x4c0 [ 563.945551][T15716] ? __pfx___x64_sys_futex+0x10/0x10 [ 563.945580][T15716] ? __pfx___x64_sys_mount+0x10/0x10 [ 563.945624][T15716] do_syscall_64+0xcd/0x250 [ 563.945656][T15716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 563.945691][T15716] RIP: 0033:0x7f596f98d169 [ 563.945713][T15716] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 563.945740][T15716] RSP: 002b:00007f59708630e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 563.945770][T15716] RAX: ffffffffffffffda RBX: 00007f596fba6088 RCX: 00007f596f98d169 [ 563.945787][T15716] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f596fba6088 [ 563.945802][T15716] RBP: 00007f596fba6080 R08: 0000000000000000 R09: 0000000000000000 [ 563.945816][T15716] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f596fba608c [ 563.945831][T15716] R13: 0000000000000000 R14: 00007ffe50b4c900 R15: 00007ffe50b4c9e8 [ 563.945861][T15716] [ 564.338761][T15736] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2555'. [ 564.574688][T15746] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2555'. [ 565.031753][T15736] team0: Port device team_slave_1 removed [ 567.189908][T15811] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2569'. [ 567.215314][T15811] netlink: 338 bytes leftover after parsing attributes in process `syz.5.2569'. [ 567.246911][T15811] netlink: 134 bytes leftover after parsing attributes in process `syz.5.2569'. [ 567.679003][ T29] audit: type=1800 audit(4294967396.020:6): pid=15825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.2573" name="lu_gp_id" dev="configfs" ino=56777 res=0 errno=0 [ 568.204897][T15850] FAULT_INJECTION: forcing a failure. [ 568.204897][T15850] name failslab, interval 1, probability 0, space 0, times 0 [ 568.320243][T15850] CPU: 0 UID: 0 PID: 15850 Comm: syz.5.2576 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 568.320286][T15850] Tainted: [U]=USER [ 568.320295][T15850] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 568.320310][T15850] Call Trace: [ 568.320317][T15850] [ 568.320327][T15850] dump_stack_lvl+0x16c/0x1f0 [ 568.320368][T15850] should_fail_ex+0x50a/0x650 [ 568.320405][T15850] ? fs_reclaim_acquire+0xae/0x150 [ 568.320440][T15850] ? __alloc_workqueue+0xd4c/0x1810 [ 568.320466][T15850] should_failslab+0xc2/0x120 [ 568.320491][T15850] __kmalloc_noprof+0xcb/0x510 [ 568.320534][T15850] __alloc_workqueue+0xd4c/0x1810 [ 568.320573][T15850] alloc_workqueue+0xd3/0x200 [ 568.320607][T15850] ? __pfx_alloc_workqueue+0x10/0x10 [ 568.320639][T15850] ? rcu_is_watching+0x12/0xc0 [ 568.320666][T15850] ? trace_kmalloc+0x2d/0xd0 [ 568.320691][T15850] ? __kmalloc_noprof+0x23b/0x510 [ 568.320723][T15850] ? __pfx_lock_release+0x10/0x10 [ 568.320754][T15850] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 568.320796][T15850] ieee80211_register_hw+0x1e3b/0x4060 [ 568.320843][T15850] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 568.320874][T15850] ? net_generic+0xea/0x2a0 [ 568.320905][T15850] ? lockdep_init_map_type+0x16d/0x7d0 [ 568.320943][T15850] ? __asan_memset+0x23/0x50 [ 568.320973][T15850] ? __hrtimer_init+0x106/0x2c0 [ 568.321009][T15850] mac80211_hwsim_new_radio+0x304e/0x54e0 [ 568.321060][T15850] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 568.321100][T15850] hwsim_new_radio_nl+0xb42/0x12b0 [ 568.321133][T15850] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 568.321174][T15850] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 568.321209][T15850] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 568.321266][T15850] genl_family_rcv_msg_doit+0x202/0x2f0 [ 568.321314][T15850] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 568.321359][T15850] ? trace_cap_capable+0x1a2/0x210 [ 568.321403][T15850] ? bpf_lsm_capable+0x9/0x10 [ 568.321429][T15850] ? security_capable+0x7e/0x260 [ 568.321455][T15850] ? ns_capable+0xd7/0x110 [ 568.321491][T15850] genl_rcv_msg+0x565/0x800 [ 568.321534][T15850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 568.321570][T15850] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 568.321627][T15850] netlink_rcv_skb+0x16b/0x440 [ 568.321659][T15850] ? __pfx_genl_rcv_msg+0x10/0x10 [ 568.321697][T15850] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 568.321742][T15850] ? down_read+0xc9/0x330 [ 568.321774][T15850] ? __pfx_down_read+0x10/0x10 [ 568.321808][T15850] ? netlink_deliver_tap+0x1ae/0xd30 [ 568.321843][T15850] genl_rcv+0x28/0x40 [ 568.321873][T15850] netlink_unicast+0x53c/0x7f0 [ 568.321912][T15850] ? __pfx_netlink_unicast+0x10/0x10 [ 568.321946][T15850] ? __phys_addr_symbol+0x30/0x80 [ 568.321969][T15850] ? __check_object_size+0x488/0x710 [ 568.321997][T15850] netlink_sendmsg+0x8b8/0xd70 [ 568.322034][T15850] ? __pfx_netlink_sendmsg+0x10/0x10 [ 568.322077][T15850] ____sys_sendmsg+0xaaf/0xc90 [ 568.322103][T15850] ? copy_msghdr_from_user+0x10b/0x160 [ 568.322136][T15850] ? __pfx_____sys_sendmsg+0x10/0x10 [ 568.322175][T15850] ___sys_sendmsg+0x135/0x1e0 [ 568.322206][T15850] ? __pfx____sys_sendmsg+0x10/0x10 [ 568.322251][T15850] ? __pfx_lock_release+0x10/0x10 [ 568.322282][T15850] ? trace_lock_acquire+0x14e/0x1f0 [ 568.322322][T15850] ? __fget_files+0x206/0x3a0 [ 568.322362][T15850] __sys_sendmsg+0x16e/0x220 [ 568.322396][T15850] ? __pfx___sys_sendmsg+0x10/0x10 [ 568.322429][T15850] ? __x64_sys_futex+0x1e1/0x4c0 [ 568.322479][T15850] do_syscall_64+0xcd/0x250 [ 568.322513][T15850] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 568.322545][T15850] RIP: 0033:0x7f8e7498d169 [ 568.322565][T15850] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 568.322596][T15850] RSP: 002b:00007f8e727f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 568.322620][T15850] RAX: ffffffffffffffda RBX: 00007f8e74ba5fa0 RCX: 00007f8e7498d169 [ 568.322636][T15850] RDX: 00000000040000c0 RSI: 0000400000000300 RDI: 0000000000000007 [ 568.322649][T15850] RBP: 00007f8e74a0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 568.322664][T15850] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 568.322679][T15850] R13: 0000000000000000 R14: 00007f8e74ba5fa0 R15: 00007ffe9b59a7f8 [ 568.322713][T15850] [ 569.082310][T15846] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2570'. [ 570.014948][T15881] FAULT_INJECTION: forcing a failure. [ 570.014948][T15881] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.151879][T15881] CPU: 1 UID: 0 PID: 15881 Comm: syz.0.2582 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 570.151917][T15881] Tainted: [U]=USER [ 570.151925][T15881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 570.151936][T15881] Call Trace: [ 570.151943][T15881] [ 570.151953][T15881] dump_stack_lvl+0x16c/0x1f0 [ 570.151987][T15881] should_fail_ex+0x50a/0x650 [ 570.152026][T15881] _copy_from_user+0x2e/0xd0 [ 570.152051][T15881] mon_bin_ioctl+0x168/0xcd0 [ 570.152090][T15881] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 570.152134][T15881] ? __fget_files+0x206/0x3a0 [ 570.152169][T15881] ? __pfx_mon_bin_ioctl+0x10/0x10 [ 570.152204][T15881] __x64_sys_ioctl+0x190/0x200 [ 570.152234][T15881] do_syscall_64+0xcd/0x250 [ 570.152264][T15881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.152292][T15881] RIP: 0033:0x7f8c34f8d169 [ 570.152310][T15881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.152329][T15881] RSP: 002b:00007f8c35dbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 570.152349][T15881] RAX: ffffffffffffffda RBX: 00007f8c351a5fa0 RCX: 00007f8c34f8d169 [ 570.152364][T15881] RDX: 0000000000000000 RSI: 00000000c0109207 RDI: 0000000000000003 [ 570.152378][T15881] RBP: 00007f8c35dbb090 R08: 0000000000000000 R09: 0000000000000000 [ 570.152391][T15881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.152403][T15881] R13: 0000000000000000 R14: 00007f8c351a5fa0 R15: 00007ffe4b2fa6e8 [ 570.152430][T15881] [ 570.581976][T15900] FAULT_INJECTION: forcing a failure. [ 570.581976][T15900] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 570.631666][T15900] CPU: 0 UID: 0 PID: 15900 Comm: syz.5.2583 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 570.631707][T15900] Tainted: [U]=USER [ 570.631715][T15900] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 570.631727][T15900] Call Trace: [ 570.631732][T15900] [ 570.631740][T15900] dump_stack_lvl+0x16c/0x1f0 [ 570.631772][T15900] should_fail_ex+0x50a/0x650 [ 570.631808][T15900] _copy_from_user+0x2e/0xd0 [ 570.631832][T15900] do_procmap_query+0x1e6/0x1030 [ 570.631859][T15900] ? do_vfs_ioctl+0x513/0x1990 [ 570.631884][T15900] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 570.631909][T15900] ? __pfx_do_procmap_query+0x10/0x10 [ 570.631967][T15900] procfs_procmap_ioctl+0x7d/0xb0 [ 570.631993][T15900] ? __pfx_procfs_procmap_ioctl+0x10/0x10 [ 570.632019][T15900] __x64_sys_ioctl+0x190/0x200 [ 570.632045][T15900] do_syscall_64+0xcd/0x250 [ 570.632075][T15900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 570.632104][T15900] RIP: 0033:0x7f8e7498d169 [ 570.632122][T15900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 570.632141][T15900] RSP: 002b:00007f8e727f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 570.632161][T15900] RAX: ffffffffffffffda RBX: 00007f8e74ba5fa0 RCX: 00007f8e7498d169 [ 570.632184][T15900] RDX: 0000400000000080 RSI: 00000000c0686611 RDI: 0000000000000005 [ 570.632197][T15900] RBP: 00007f8e727f6090 R08: 0000000000000000 R09: 0000000000000000 [ 570.632210][T15900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 570.632223][T15900] R13: 0000000000000000 R14: 00007f8e74ba5fa0 R15: 00007ffe9b59a7f8 [ 570.632252][T15900] [ 571.169606][ T29] audit: type=1800 audit(4294967399.510:7): pid=15911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2585" name="SYSV00000008" dev="tmpfs" ino=0 res=0 errno=0 [ 572.025806][T15934] netlink: 146 bytes leftover after parsing attributes in process `syz.3.2590'. [ 572.447407][T15932] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2587'. [ 574.591942][T16014] TCP: TCP_TX_DELAY enabled [ 576.253573][T16070] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000e: 0000 [#1] PREEMPT SMP KASAN PTI [ 576.266218][T16070] KASAN: null-ptr-deref in range [0x0000000000000070-0x0000000000000077] [ 576.274651][T16070] CPU: 0 UID: 0 PID: 16070 Comm: syz.0.2608 Tainted: G U 6.14.0-rc4-syzkaller-00278-gece144f151ac #0 [ 576.286921][T16070] Tainted: [U]=USER [ 576.290742][T16070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 576.300820][T16070] RIP: 0010:__mutex_lock+0x151/0xb10 [ 576.306151][T16070] Code: d0 7c 08 84 d2 0f 85 71 07 00 00 8b 35 68 14 35 0f 85 f6 75 29 48 8d 7b 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 59 07 00 00 48 3b 5b 60 0f 85 e7 01 00 00 bf 01 [ 576.325964][T16070] RSP: 0018:ffffc9000bd17a80 EFLAGS: 00010202 [ 576.332181][T16070] RAX: dffffc0000000000 RBX: 0000000000000010 RCX: 1ffffffff3517314 [ 576.340169][T16070] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000070 [ 576.348157][T16070] RBP: ffffc9000bd17bc0 R08: ffffffff8a5f6627 R09: ffffed10085f1340 [ 576.356133][T16070] R10: ffffc9000bd17bd8 R11: 0000000000000000 R12: dffffc0000000000 [ 576.364108][T16070] R13: 0000000000000002 R14: 0000000000000000 R15: ffffc9000bd17b00 [ 576.372083][T16070] FS: 00007f8c35dbb6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 576.381016][T16070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 576.387598][T16070] CR2: 0000001b32f0fff8 CR3: 0000000070dee000 CR4: 00000000003526f0 [ 576.395572][T16070] Call Trace: [ 576.398846][T16070] [ 576.401772][T16070] ? die_addr+0x3b/0xa0 [ 576.405939][T16070] ? exc_general_protection+0x155/0x230 [ 576.411498][T16070] ? asm_exc_general_protection+0x26/0x30 [ 576.417227][T16070] ? hci_devcd_register+0x47/0x170 [ 576.422343][T16070] ? __mutex_lock+0x151/0xb10 [ 576.427025][T16070] ? trace_kmem_cache_alloc+0x2d/0xd0 [ 576.432401][T16070] ? kmem_cache_alloc_node_noprof+0x272/0x3c0 [ 576.438476][T16070] ? hci_devcd_register+0x47/0x170 [ 576.443590][T16070] ? __pfx___mutex_lock+0x10/0x10 [ 576.448615][T16070] ? __asan_memset+0x23/0x50 [ 576.453217][T16070] ? __build_skb_around+0x278/0x3b0 [ 576.458420][T16070] ? __pfx___alloc_skb+0x10/0x10 [ 576.463364][T16070] ? __might_fault+0xe3/0x190 [ 576.468042][T16070] ? __pfx_vhci_coredump+0x10/0x10 [ 576.473156][T16070] ? __pfx_vhci_coredump_hdr+0x10/0x10 [ 576.478612][T16070] ? hci_devcd_register+0x47/0x170 [ 576.483724][T16070] hci_devcd_register+0x47/0x170 [ 576.488662][T16070] force_devcd_write+0x173/0x330 [ 576.493596][T16070] ? __pfx_force_devcd_write+0x10/0x10 [ 576.499080][T16070] ? rcu_is_watching+0x12/0xc0 [ 576.503871][T16070] ? trace_lock_acquire+0x14e/0x1f0 [ 576.509083][T16070] full_proxy_write+0x13c/0x200 [ 576.513947][T16070] ? __pfx_full_proxy_write+0x10/0x10 [ 576.519322][T16070] vfs_write+0x24c/0x1150 [ 576.523656][T16070] ? __fget_files+0x1fc/0x3a0 [ 576.528336][T16070] ? __pfx___mutex_lock+0x10/0x10 [ 576.533361][T16070] ? __pfx_vfs_write+0x10/0x10 [ 576.538127][T16070] ? __fget_files+0x206/0x3a0 [ 576.542828][T16070] ksys_write+0x12b/0x250 [ 576.547171][T16070] ? __pfx_ksys_write+0x10/0x10 [ 576.552030][T16070] do_syscall_64+0xcd/0x250 [ 576.556541][T16070] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 576.562441][T16070] RIP: 0033:0x7f8c34f8d169 [ 576.566850][T16070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 576.586489][T16070] RSP: 002b:00007f8c35dbb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 576.594906][T16070] RAX: ffffffffffffffda RBX: 00007f8c351a5fa0 RCX: 00007f8c34f8d169 [ 576.602878][T16070] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000005 [ 576.610861][T16070] RBP: 00007f8c3500e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 576.618832][T16070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 576.626798][T16070] R13: 0000000000000000 R14: 00007f8c351a5fa0 R15: 00007ffe4b2fa6e8 [ 576.634773][T16070] [ 576.637784][T16070] Modules linked in: [ 576.642452][T16070] ---[ end trace 0000000000000000 ]--- [ 576.760244][T16070] RIP: 0010:__mutex_lock+0x151/0xb10 [ 576.781287][T16070] Code: d0 7c 08 84 d2 0f 85 71 07 00 00 8b 35 68 14 35 0f 85 f6 75 29 48 8d 7b 60 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 59 07 00 00 48 3b 5b 60 0f 85 e7 01 00 00 bf 01 [ 576.893522][T16070] RSP: 0018:ffffc9000bd17a80 EFLAGS: 00010202 [ 577.034159][T16070] RAX: dffffc0000000000 RBX: 0000000000000010 RCX: 1ffffffff3517314 [ 577.065369][T16070] RDX: 000000000000000e RSI: 0000000000000000 RDI: 0000000000000070 [ 577.144299][T16070] RBP: ffffc9000bd17bc0 R08: ffffffff8a5f6627 R09: ffffed10085f1340 [ 577.177935][T16070] R10: ffffc9000bd17bd8 R11: 0000000000000000 R12: dffffc0000000000 [ 577.198468][T16070] R13: 0000000000000002 R14: 0000000000000000 R15: ffffc9000bd17b00 [ 577.228193][T16070] FS: 00007f8c35dbb6c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 577.251962][T16070] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 577.277823][T16070] CR2: 0000556124909138 CR3: 0000000070dee000 CR4: 00000000003526f0 [ 577.308426][T16070] Kernel panic - not syncing: Fatal exception [ 577.314670][T16070] Kernel Offset: disabled [ 577.318986][T16070] Rebooting in 86400 seconds..