last executing test programs: 3m3.604904009s ago: executing program 0 (id=671): pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x00\x00\x00+\x00\x00\x00\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) 3m3.379236941s ago: executing program 0 (id=674): mmap$auto(0x0, 0x20007, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004810}, 0x800) openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/fs/orangefs/slot_timeout_secs\x00', 0x102, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 3m3.051299928s ago: executing program 0 (id=677): mmap$auto(0x0, 0xa, 0xdb, 0x9b72, 0x5, 0x8000) r0 = openat$auto_fb_fops_fb_chrdev(0xffffffffffffff9c, &(0x7f0000001c80)='/dev/fb0\x00', 0x20401, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x4610, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/reg-dummy/regulator/regulator.0/requested_microamps\x00', 0x2500, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socket(0x2, 0x801, 0x106) socketpair$auto(0x8, 0x5, 0x3, 0x0) openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f000000e680), 0x68182, 0x0) mmap$auto(0x0, 0x8, 0x6, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0xa, 0x0) readv$auto(0x3, &(0x7f0000000000)={0x0, 0xffff}, 0x1) close_range$auto(0x2, 0xa, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000080), 0x6b) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r2 = socket(0xa, 0x5, 0x0) getsockopt$auto(r2, 0x84, 0x12, 0x0, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000140)=""/7, 0x7) 3m2.679821988s ago: executing program 0 (id=679): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) getcwd$auto(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x5, 0x0) getsockopt$auto(0x6, 0x40000000084, 0x6, 0xfffffffffffffffe, 0x0) r0 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) sendmsg$auto_NL80211_CMD_SET_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x440d1}, 0x4084) syz_genetlink_get_family_id$auto_ipvs(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket(0x11, 0x3, 0x9) capset$auto(0x0, &(0x7f0000000000)={0x1, 0x6, 0x4d}) sendmmsg$auto(r1, &(0x7f00000001c0)={{&(0x7f0000000000), 0x5aa, &(0x7f0000000100)={&(0x7f0000000040), 0x49}, 0x4, &(0x7f0000000180), 0x5, 0x1000}, 0x5}, 0x2, 0x100) setxattrat$auto(0xffffffffffffffff, 0x0, 0x6, 0x0, 0x0, 0x10) madvise$auto(0x0, 0xffffffffffff0001, 0x15) timer_create$auto(0xfffffff9, 0x0, 0x0) ioctl$auto_IOCTL_VMCI_INIT_CONTEXT(r0, 0x7a0, 0x0) 3m1.864154268s ago: executing program 0 (id=683): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x1eb842, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp1\x00', 0x20b42, 0x0) socket(0x21, 0x2, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r0, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x5, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0xfdef) 3m0.76362431s ago: executing program 0 (id=689): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/reg-dummy/regulator/regulator.0/requested_microamps\x00', 0x82500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/7, 0x7) 3m0.432090982s ago: executing program 32 (id=689): r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000200)='/sys/devices/platform/reg-dummy/regulator/regulator.0/requested_microamps\x00', 0x82500, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000000140)=""/7, 0x7) 2m58.004629476s ago: executing program 3 (id=705): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/dev_mcast\x00', 0x4000, 0x0) r1 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x161302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) read$auto(0x3, 0x0, 0x1f40) close_range$auto(r1, r1, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r3 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, 0x0, 0x141002, 0x0) r4 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usb_acecad/new_id\x00', 0x60301, 0x0) mmap$auto(0x8a, 0xe7f, 0x3, 0xeb1, r1, 0x9444) openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x103541, 0x0) read$auto(0xffffffffffffffff, 0x0, 0x3) write$auto(0x3, 0x0, 0xfdef) pwritev$auto(r3, &(0x7f0000000180)={0x0, 0x9}, 0x837, 0xb6, 0x3) pwrite64$auto(r2, 0x0, 0x1, 0x2) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x24004854}, 0x800) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r4, @ANYRES16=0x0, @ANYBLOB="01002b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x40040a2) close_range$auto(0x2, r0, 0x89) r5 = socket(0x2, 0x80002, 0x73) socket(0x1d, 0x80000, 0x88) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r5, &(0x7f0000000080)=@llc={0x1a, 0x301, 0x8, 0x7, 0x3, 0xbe, @broadcast}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x4, 0x9}, 0x7}, 0x3, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000280)='/proc/asound/card1/pcm1c/sub2/xrun_injection\x00', 0x628002, 0x0) ioctl$auto(0x3, 0x8008551c, 0x38) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) 2m56.83598797s ago: executing program 3 (id=711): mmap$auto(0x0, 0x20006, 0x9, 0xeb1, 0x1, 0x0) socket(0xa, 0x2, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/security/tomoyo/manager\x00', 0x2, 0x0) write$auto_tomoyo_operations_securityfs_if(r0, &(0x7f00000000c0)="0a1b9a5c2a0f8262cd1aec49ec53c2efa01492586e163bb154d7886d8ea5c2574c58e9867ecec3371cadb848770dc8f745b2c76eedba12b9f694dabdbcf3401910bb733aca465c9bd40a", 0x4a) madvise$auto(0x0, 0xffffffffffff0005, 0x19) process_vm_readv$auto(0x0, 0x0, 0x80, 0x0, 0x7, 0x0) ioctl$auto(0xffffffffffffffff, 0x5522, 0xf15) close_range$auto(0x2, 0x8, 0x0) 2m56.230663611s ago: executing program 3 (id=717): close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) (async) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) membarrier$auto(0x4, 0x8000000000000000, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/lockdep\x00', 0xc0000, 0x0) r0 = openat$auto_adf_hb_cfg_fops_adf_heartbeat_dbgfs(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/ieee80211/phy4/aqm\x00', 0x200081, 0x0) write$auto(r0, 0x0, 0x4) sendfile$auto(0x2, 0x3, 0x0, 0xc3e0) 2m53.606168957s ago: executing program 3 (id=726): sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x4, 0x0, 0x1}, 0xed7138c}, 0x2, 0x9) unshare$auto(0x40000080) add_key$auto(0x0, 0x0, 0x0, 0x6, 0x100) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'dummy0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000000c0)=@bpf_attr_5={@target_ifindex=r0, 0xffffffffffffffff, 0x4, 0x1ff, 0xffffffffffffffff, @relative_fd, 0xe600}, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vlan0\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r1, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000080)={0x1c, r2, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01022abd7000fedbdf2503000000f8ff01800c0001000a0000000000000008000100", @ANYRES32=r6, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20004054}, 0x48010) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000ac0), r7) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0000a93a", @ANYRES16=r8, @ANYBLOB="a14c26bd7000fbdbdf252500000008000c000800000008000c00690e000008000c000900000008000c0006000000"], 0x34}, 0x1, 0x0, 0x0, 0x40804}, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r7, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000fddbdf25020000000c00018008000100", @ANYRES32, @ANYBLOB="ee6aa2f7d9b8c7a410edc0f6a70f00000e5e0b45303f0f1a552b376d1530003545dbef8a5005245e84928c309223f3902804628473396a2cec50337741c6aed29d3f1da214eb11177dea280c39c371984c066eea824ea9ce439e5ac6184a11f77e258f34158107559e7141ba04b078f068bbfbf49fbf091e0ef3dd1f439ccabc4a42225905c3581dc3dd97718915bbfa6a96506308b05a6455dfe43b901c304c7a502f5686b804e25daffa0d2df87c3b86c5becf28832a0aa1c40578d0f128285f93397afa609297aafe01721b2958a26d0d4f9535f07af3f16f941c8cedb5bacead463119af582a07d1bb1f35147a47d21a436d0cff"], 0x20}, 0x1, 0x0, 0x0, 0xc880}, 0x20000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r9 = open(&(0x7f00000000c0)='./file0\x00', 0xc2, 0x84) close$auto(r9) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x100, 0x104, 0x1}, 0x18) renameat$auto(r9, &(0x7f0000000040)='./file0\x00', r10, &(0x7f0000000100)='./file0\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 2m52.258440692s ago: executing program 3 (id=733): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x1eb842, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp1\x00', 0x20b42, 0x0) socket(0x21, 0x2, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r0, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x5, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0xfdef) 2m51.714912751s ago: executing program 4 (id=735): set_mempolicy$auto(0x4006, &(0x7f0000000000)=0xc, 0x7) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) unshare$auto(0x40000080) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mlock$auto(0xfbe8, 0xc) r0 = gettid() r1 = pidfd_open$auto(r0, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x20000001) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0x28, 0x5, 0x0) select$auto(0x3, 0x0, &(0x7f0000000100)={[0xd, 0x7, 0x0, 0xc, 0x9, 0x3, 0x6, 0x2, 0x9, 0x5e58296f, 0x4000000000000000, 0xa, 0x4, 0x5, 0x8, 0x6]}, 0x0, 0x0) connect$auto(0x3, 0x0, 0x55) sendmsg$auto_NL80211_CMD_DEL_PMK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB="800068f5", @ANYBLOB], 0x5a8}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) pipe2$auto(0x0, 0x80) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0xa, 0x2, 0x3a) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_nbd(&(0x7f0000001d00), 0xffffffffffffffff) sendmsg$auto_NBD_CMD_CONNECT(r3, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001dc0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c009700", @ANYRES16=r4, @ANYBLOB="010025bd7000fdcbdf2501000000100007800c00018008000180000000000c0002000700e800000000000c5d44908e5eee6b911214520c4643d8d6961689ddf5f1ffcf71948da538ff36d8693b0fb0091bcb152a3ac8a8d5d5a9f7cb717e63c08f45649a32f5ea7497e9d8401e37adcc"], 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x48080) keyctl$auto(0x200000000000020, 0xffffffffffffffff, 0x5, 0x5, 0x8) close_range$auto(r1, r2, 0x80001) mmap$auto(0x0, 0x8000002020009, 0x7, 0xeb1, 0xfffffffffffffffa, 0x7fff) getrandom$auto(0x0, 0x6000000, 0x3) ioctl$auto(0xffffffffffffffff, 0x400454d9, 0x5c8c) mlockall$auto(0x7) 2m51.380030295s ago: executing program 3 (id=739): ioctl$auto_VHOST_GET_BACKEND_FEATURES2(0xffffffffffffffff, 0x8008af26, &(0x7f0000000340)=0x4) syz_clone(0x80000000, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x8e7, 0x2c89, 0x104, 0x5, 0xffffffffffffffff, 0xee01, 0x0, 0x973, 0x6, 0x4, 0x61, 0xffffffffffffff1d, 0x4, 0x2976, 0xfffffffffffffff9, 0x5}) socket(0x22, 0x3, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6b) madvise$auto(0x0, 0x6, 0xe) syslog$auto(0x4, 0x0, 0xffffff7f) r0 = getpgrp(0x0) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00') r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) ioctl$auto(r2, 0x5646, r2) write$auto(0xffffffffffffffff, &(0x7f0000000500)='\xcd\x12M\xa4\\\x9c<\xc2\x7f\xfb\b\x8c\x93\x85vV\b\x8a\xd0\x83\xf7\x11\xbc\x03\x91\x1b\xb8\x86\xceh\xa8c:g\xe9F^aG\\\x0e\xa0,\xd4V\xf3/\x80\xe4\x83\xc0W\xcd%\xd6Q\x83\xf1\xe7XR\x88\x03B \x814\xfb\xd4\x15\xbd\xaf\xa3AX\xa3\x19C\x06\xd5\x15\xf0\xc7:`\xdb\xa6I\xfaU*t#\xdb\x98\xa1v\xd4a\x7f\xc8\xf5\xb6d\x95\vFb&\x8d\x1f\xb0`\xd7T\x90P\xe2\x18;>\xe3\xe6%\xbc\x1aM\x95\xbd\x175\xed%?z\xed;\xb6\x19s\xdb,\xbb\xf3\xa4\x99:\x7fh\xeb\xfe\xcf\fS\xba\x97\x9f\x86|\xad?', 0xf04) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x0, 0x5, 0x3, 0x2000000000210006, 0x3, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x80000002, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4bfc, 0x77, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc06f, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x107, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x80000000000]}, 0x1fe, 0x81) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) prctl$auto(0x35, 0x8, 0xec, 0x2, 0x80000000) socket(0x10, 0x4, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) lseek$auto(r1, 0x81, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) pread64$auto(r1, &(0x7f0000000240)=',(&^-#]}\\', 0x4, 0x6a) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) 2m51.053798345s ago: executing program 33 (id=739): ioctl$auto_VHOST_GET_BACKEND_FEATURES2(0xffffffffffffffff, 0x8008af26, &(0x7f0000000340)=0x4) syz_clone(0x80000000, 0x0, 0x0, &(0x7f00000004c0), 0x0, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x8e7, 0x2c89, 0x104, 0x5, 0xffffffffffffffff, 0xee01, 0x0, 0x973, 0x6, 0x4, 0x61, 0xffffffffffffff1d, 0x4, 0x2976, 0xfffffffffffffff9, 0x5}) socket(0x22, 0x3, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6b) madvise$auto(0x0, 0x6, 0xe) syslog$auto(0x4, 0x0, 0xffffff7f) r0 = getpgrp(0x0) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00') r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) ioctl$auto(r2, 0x5646, r2) write$auto(0xffffffffffffffff, &(0x7f0000000500)='\xcd\x12M\xa4\\\x9c<\xc2\x7f\xfb\b\x8c\x93\x85vV\b\x8a\xd0\x83\xf7\x11\xbc\x03\x91\x1b\xb8\x86\xceh\xa8c:g\xe9F^aG\\\x0e\xa0,\xd4V\xf3/\x80\xe4\x83\xc0W\xcd%\xd6Q\x83\xf1\xe7XR\x88\x03B \x814\xfb\xd4\x15\xbd\xaf\xa3AX\xa3\x19C\x06\xd5\x15\xf0\xc7:`\xdb\xa6I\xfaU*t#\xdb\x98\xa1v\xd4a\x7f\xc8\xf5\xb6d\x95\vFb&\x8d\x1f\xb0`\xd7T\x90P\xe2\x18;>\xe3\xe6%\xbc\x1aM\x95\xbd\x175\xed%?z\xed;\xb6\x19s\xdb,\xbb\xf3\xa4\x99:\x7fh\xeb\xfe\xcf\fS\xba\x97\x9f\x86|\xad?', 0xf04) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x0, 0x5, 0x3, 0x2000000000210006, 0x3, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x80000002, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4bfc, 0x77, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc06f, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x107, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x80000000000]}, 0x1fe, 0x81) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) prctl$auto(0x35, 0x8, 0xec, 0x2, 0x80000000) socket(0x10, 0x4, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) lseek$auto(r1, 0x81, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) pread64$auto(r1, &(0x7f0000000240)=',(&^-#]}\\', 0x4, 0x6a) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) 2m50.649205784s ago: executing program 4 (id=743): socket(0xa, 0x801, 0x84) openat$auto_rfcomm_dlc_debugfs_fops_(0xffffffffffffff9c, &(0x7f0000000040), 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x15, 0x5, 0x0) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYBLOB="18000074", @ANYRES8=r1, @ANYRES8=r0, @ANYRES32], 0x18}}, 0x80) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x10048884) 2m50.540113468s ago: executing program 4 (id=744): openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/dev_mcast\x00', 0x4000, 0x0) r0 = openat$auto_proc_oom_adj_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/oom_adj\x00', 0x161302, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x8, 0x8000) read$auto(0x3, 0x0, 0x1f40) close_range$auto(r0, r0, 0x0) r1 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv6/conf/all/forwarding\x00', 0x42a81, 0x0) r2 = openat$auto_proc_coredump_filter_operations_base(0xffffffffffffff9c, 0x0, 0x141002, 0x0) r3 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/bus/usb/drivers/usb_acecad/new_id\x00', 0x60301, 0x0) mmap$auto(0x8a, 0xe7f, 0x3, 0x14, 0xffffffffffffffff, 0x9446) r4 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/netfilter/nf_conntrack_buckets\x00', 0x103541, 0x0) read$auto(r4, 0x0, 0x1ff) write$auto(0x3, 0x0, 0xfdef) pwritev$auto(r2, &(0x7f0000000180)={0x0, 0x9}, 0x1, 0xb6, 0x3) pwrite64$auto(r1, 0x0, 0x1, 0x2) openat$auto_tracing_cpumask_fops_trace(0xffffffffffffff9c, 0x0, 0x8002, 0x0) write$auto(0x3, 0x0, 0xfdef) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_ETHTOOL_MSG_STATS_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYRES64=r3, @ANYRES16=0x0, @ANYBLOB="01002b00"/14], 0x14}, 0x1, 0x0, 0x0, 0x4000040}, 0x40040a2) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x4, 0x9}, 0x7}, 0x3, 0x0) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/asound/card1/pcm1c/sub2/xrun_injection\x00', 0x2, 0x0) ioctl$auto(0x3, 0x8008551c, 0x38) unshare$auto(0x40000080) mmap$auto(0x0, 0x2000c, 0xdf, 0x20eb1, 0xff1, 0x8000) 2m50.15804482s ago: executing program 4 (id=747): close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x10, 0x3, 0x6) r0 = socket(0x10, 0x2, 0xc) socket(0xa, 0x2, 0x0) openat$auto_proc_mountinfo_operations_mnt_namespace(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mountinfo\x00', 0xe0000, 0x0) syz_clone(0x80000000, &(0x7f0000000000)="085a1056b6aa2f10d8ddee0633aea682a5ff", 0x12, 0x0, 0x0, 0x0) mmap$auto(0x0, 0x4020009, 0x6, 0xeb1, 0x401, 0x8000) io_uring_setup$auto(0x6, 0x0) r1 = socket(0x10, 0x2, 0xa) setsockopt$auto(r1, 0x104000000000010e, 0x1, 0x0, 0x16) r2 = socket(0x10, 0x2, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001400c72da808bf8d5feacf8510"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c001) write$auto(r2, &(0x7f0000000000)='-\x00', 0x2fb) r3 = socket(0x10, 0x2, 0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000340)=ANY=[@ANYBLOB="14000000", @ANYBLOB="0100df"], 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x40) socket(0x2, 0x6, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=r4, @ANYRES8=r5], 0x18}, 0x1, 0x0, 0x0, 0x60008004}, 0x84) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x4000000) 2m49.994677268s ago: executing program 4 (id=748): openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000000)='/sys/module/damon_reclaim/parameters/enabled\x00', 0x1eb842, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000180)='/dev/dsp1\x00', 0x20b42, 0x0) socket(0x21, 0x2, 0x2) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) r0 = socket(0x2, 0x80802, 0x0) setsockopt$auto(r0, 0x11, 0x67, 0x0, 0x8) setsockopt$auto(0x3, 0x5, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x0, @multicast1}, 0x55) sendmmsg$auto(0x3, 0x0, 0x3, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) madvise$auto(0x0, 0xffffffffffff0001, 0x15) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) read$auto(0x3, 0x0, 0x80) write$auto(0x3, 0x0, 0xfdef) 2m47.953845482s ago: executing program 4 (id=754): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) fcntl$auto(0x8000000000000001, 0x5, 0x8) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) sched_rr_get_interval$auto(r0, &(0x7f0000000000)={0x6, 0x4}) 2m47.622310262s ago: executing program 34 (id=754): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0xfffffffffffffffe, 0x8000) fcntl$auto(0x8000000000000001, 0x5, 0x8) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = getpid() process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f00000000c0), 0xffffffff}, 0x6, 0x0) sched_rr_get_interval$auto(r0, &(0x7f0000000000)={0x6, 0x4}) 3.527497732s ago: executing program 1 (id=1760): openat$auto_trace_clock_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_clock\x00', 0x28801, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x0) madvise$auto(0x9, 0xbce0, 0x4) socket(0xa, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000003e40)='/sys/devices/system/cpu/cpu0/topology/core_siblings\x00', 0x101000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r0, &(0x7f0000003e80)=""/246, 0xf6) socket(0x1, 0x5, 0x0) recvmmsg$auto(0x3, 0x0, 0x8, 0x0, 0x0) setrlimit$auto(0x2, &(0x7f0000000080)={0x0, 0x800000000000006}) mprotect$auto(0x20000000, 0xeb, 0x6) r1 = io_uring_setup$auto(0x5, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r2 = openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000000)='/dev/binderfs/binder0\x00', 0x1, 0x0) ppoll$auto(&(0x7f0000000080)={r2, 0x4, 0x5}, 0x1, 0x0, 0x0, 0x8) ioctl$auto(r2, 0xc0306201, 0x9) r3 = syz_genetlink_get_family_id$auto_nbd(&(0x7f00000000c0), r1) r4 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/ip6_tables_names\x00', 0x20200, 0x0) read$auto_proc_reg_file_ops_compat_inode(r4, &(0x7f0000000e80)=""/215, 0xd7) sendmsg$auto_NBD_CMD_CONNECT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="abe642c80620000000", @ANYRES16=r3, @ANYBLOB="040029bd7000fedbdf25010000000c0002000700000000000000"], 0x20}, 0x1, 0x0, 0x0, 0x4c00}, 0x40000) 3.44097146s ago: executing program 5 (id=1761): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000040)='/dev/swradio0\x00', 0x1600, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket(0x11, 0x80003, 0x300) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptyua\x00', 0x20804, 0x0) openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ttyua\x00', 0x10d000, 0x0) poll$auto(&(0x7f0000000480)={r0, 0xffff, 0x29}, 0x6, 0x8) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r1 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x2, 0x8000, 0x0) openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x202, 0x0) ioctl$auto(0x3, 0x80000541b, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_tipcv2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_PEER_REMOVE(r2, &(0x7f00000110c0)={0x0, 0x0, &(0x7f0000011080)={&(0x7f000000e000)=ANY=[@ANYBLOB="18200000", @ANYRES16=r3, @ANYBLOB="010026bd7000fedbdf251400000004000780"], 0x18}, 0x1, 0x0, 0x0, 0x104}, 0x40) syz_genetlink_get_family_id$auto_nl80211(0x0, r1) 3.124070204s ago: executing program 5 (id=1766): pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x00\x00\x00\x00\x00?\x00\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) 3.022958329s ago: executing program 2 (id=1767): ioctl$auto_VHOST_GET_BACKEND_FEATURES2(0xffffffffffffffff, 0x8008af26, &(0x7f0000000340)=0x4) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x8e7, 0x2c89, 0x104, 0x5, 0xffffffffffffffff, 0xee01, 0x0, 0x973, 0x6, 0x4, 0x61, 0xffffffffffffff1d, 0x4, 0x2976, 0xfffffffffffffff9, 0x5}) socket(0x22, 0x3, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6b) madvise$auto(0x0, 0x6, 0xe) syslog$auto(0x4, 0x0, 0xffffff7f) r0 = getpgrp(0x0) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00') r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) ioctl$auto(r2, 0x5646, r2) write$auto(0xffffffffffffffff, &(0x7f0000000500)='\xcd\x12M\xa4\\\x9c<\xc2\x7f\xfb\b\x8c\x93\x85vV\b\x8a\xd0\x83\xf7\x11\xbc\x03\x91\x1b\xb8\x86\xceh\xa8c:g\xe9F^aG\\\x0e\xa0,\xd4V\xf3/\x80\xe4\x83\xc0W\xcd%\xd6Q\x83\xf1\xe7XR\x88\x03B \x814\xfb\xd4\x15\xbd\xaf\xa3AX\xa3\x19C\x06\xd5\x15\xf0\xc7:`\xdb\xa6I\xfaU*t#\xdb\x98\xa1v\xd4a\x7f\xc8\xf5\xb6d\x95\vFb&\x8d\x1f\xb0`\xd7T\x90P\xe2\x18;>\xe3\xe6%\xbc\x1aM\x95\xbd\x175\xed%?z\xed;\xb6\x19s\xdb,\xbb\xf3\xa4\x99:\x7fh\xeb\xfe\xcf\fS\xba\x97\x9f\x86|\xad?', 0xf04) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x0, 0x5, 0x3, 0x2000000000210006, 0x3, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x80000002, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4bfc, 0x77, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc06f, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x107, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x80000000000]}, 0x1fe, 0x81) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) prctl$auto(0x35, 0x8, 0xec, 0x2, 0x80000000) socket(0x10, 0x4, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="72010000", @ANYBLOB="3e14a9a92d6804137b15575b473fb76b4540b79131d53b37e82edefb15ef99f65dfea8cf45972e37785c3c296d125b3e3b59840d0c5590c304fa38548ba09e38770e5c9548"], 0x1ac}}, 0x40010) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) lseek$auto(r1, 0x81, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) pread64$auto(r1, &(0x7f0000000240)=',(&^-#]}\\', 0x4, 0x6a) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) 2.766466363s ago: executing program 5 (id=1768): mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) getdents64$auto(0x0, 0x0, 0x41) getdents$auto(0x0, 0x0, 0x100) r0 = socket(0xb, 0x1, 0x5) setsockopt$auto(r0, 0x10f, 0x87, 0x0, 0x14) close_range$auto(0x0, 0xfffffffffffff001, 0x2) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x0, 0x7b7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0xffffffffffffffff, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x163340, 0x6a) socket(0x2, 0x80802, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f0000000140)=@in={0x2, 0x4, @multicast2}, 0x55) sendmmsg$auto(0x3, 0x0, 0x9a6, 0x7fffffe) io_uring_setup$auto(0x9e6, 0x0) setsockopt$auto(0x3, 0xffffffff, 0x3d, 0x0, 0x29) r1 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1402, 0x0) readv$auto(r1, &(0x7f0000001640)={0x0, 0x4}, 0x2) swapon$auto(&(0x7f0000000040)='/dev/ocfs2_control\x00', 0x1) write$auto(0x3, 0x0, 0x1) 2.517788504s ago: executing program 1 (id=1769): mmap$auto(0x0, 0x3, 0xdf, 0xeb1, 0x401, 0x8000) mkdir$auto(&(0x7f00000001c0)='}[,&*}\x00', 0xc001) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ovs_datapath(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_DP_CMD_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x80) fcntl$auto(r0, 0x0, 0x9) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0xa, 0x5, 0x0) mq_open$auto(&(0x7f00000002c0)='\x11\xf9\xbc\x9a8\x97\xc9S\xfep\x16\xb0Ex\x95\x1eYX\x83\xaeg\x14\xbbh\xcf|lH\x9b\x01\xfc\xfa\x14\xc2\xec\x06\xe6\x95\xbf9.\x1bKg\x02\xa0\xa9\xef\xfeP\x0e\xe6n\xd6\xa4L\x8f\x9a\x1e\xef]X\xdbF\xa6\xd0\x00\x00\x00\x00\x00\x00I\xec\x03\xbc\f\x97>\xdf\xe7\x86\x01\xd7\xda\xc4\x04X\xa9\xf9\xdc\xa2\x84\xda\xf3q\x15r\xb9\xdf\xb2\x19\x8cB\xc5\xd9\xa6\x18\xc3r\xe1j\xfb\x91\x12\xb4\xc8\xe4@\xf3\xc6\xbb\xf9X\xcf\v\x18\xa6\xa4\xe3\xcd\xdbcI\xc2\xf8\xab\xea\'\xf7\xf3\t3\xb1!h\x9a^\xeaZ\xba\xf3\xe7tK?L\xcb?\xe9\x03t:\xd5\x90\x1ci\xa2\f\f\xc3\xbd\aD\x80\xe8\x932\xa1)s/\xa9Z@\\\xf3\x11\xf7\xa5R/aV\xf7\x1c\xa20\x87\xd0\x9b\xe5F', 0xdeb, 0xb, 0x0) mq_open$auto(&(0x7f0000000280)='#)-\\&[}\x00', 0x5, 0x10, 0x0) mmap$auto(0x0, 0x8001, 0x4000000000df, 0x610, 0x6, 0x300000000000) io_uring_setup$auto(0xa, 0x0) mmap$auto(0x3, 0x43, 0xdf, 0x17, 0x7, 0x40000000028000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_gtp(&(0x7f0000000000), r2) sendmsg$auto_GTP_CMD_NEWPDP(r0, 0x0, 0x88) gettid() mremap$auto(0x4000, 0xfee0, 0x3fd6, 0x3, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) sendmmsg$auto(0xffffffffffffffff, 0x0, 0x1, 0x9) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, 0x0, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYRES8=r1], 0x1ac}, 0x1, 0x0, 0x0, 0x4000000}, 0x20040000) unshare$auto(0x40000080) mmap$auto(0x5, 0x40000a, 0xdf, 0xffffffffffffffff, 0x2, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, 0x0, 0x0) mprotect$auto(0x2000001ffff000, 0x8000000000000001, 0x9) 2.498192898s ago: executing program 6 (id=1770): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x2000000008000) sendmsg$auto_NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000d80)=ANY=[@ANYBLOB="cc040000", @ANYRES16=0x0, @ANYBLOB="100026bd7000fedbdf250600000044040e809c0002001c545c25dfd3ba94a28c81c723e3a15fbcf19371aab30a54f5a0a8413fe3a0348895bf4d66d84c7133a322ae533b63e130969f95bc9fb7c4e0f7d0cc73c631976be661cc459eeecc0a9b93ac0e13a4828c03b84ac29b61535d5d5483c414c793cfe5eb24149a943c556693600cb031d6211dc7d642b502a6cec56d53ee4429dc6dbeefa882f06fe22073fe40053a04321a97cc0d4a9fe8d5a30003005244ec77844b65a25b157483e047ce4951265563b6a99af7093710407ab8c036410e89cabd88038cef2c4cfe958fcb4b1a0e3704f5a4e49a543f5402cc0249b6f13774c403177cf65b38998c09249540c636ad55306279f325686facdb4219a9d017828538bea4ade61011b6901a1f51af6aa9a1e0e8326e2911078ed0fa5e2dda750ee919546620934a92fc43f26fc0aa2d0925d1d5e810ec831a2bdb3e9b00fc00020076ddbe2e2f125b3065091cbbc161b85814d9445070ee063822d820ffb9931328f407dc6c61cb1d41fb94bf98ab1a9855da9a7f766c3b671057ffd2828ec9d1434d9b6482cdf96ed2e1ecf7012c0a44a6526c4c6b1337cc8814d01f49ccd04c44450271c09a7b79da4b5b30edda84ffb5bd8e72517042ff3ad34daabad9798b54d1c494257ec9cb32c8afa238d2ee0436f10e00000000000000d7a8ee1995b3eca9227539f6a2b3e5de0378fdf3772c6ff96c249a34ec369b7ac269b8f6fceb2cc23222cc950e755658100016bb2247430055359293ffe6ff94d3a57b30ea928c9ab0224670dcddd5c93a06ff58f06dee78148a0fb751625f84000200a674dfa20c7dffb40d4033bc61d747e249ffffff58606ddb617bfd267017e7408b13a87bd0d13712ead9829412932b3dc73249fc7c14a20b01e2301d5458f88070a24bcd22991b8ea37339306822238670fa127b5b53996c34047857dd62f850e3941e779860ce141e3f8da2df2b16d9fe990400010086000200afbb415677925993d1b8105ba41c61287a71f5a6d3519c1d83d14b7fdbf23fbb27df52d47e914df572fd2f843047647478c392115581991d143404e5cbe9be1bada58623cc69330d0fc6368c991f89e079aa4ad0ef828190288eb24aafe2dc80258f7626eff077483cde268bbb727ac35c07e9e4d34c239bc176f79f759ccce7f78700005d00020041ceb6104a3ee60f0587541765080ff088fbb22b68cf12f8d072fa3cba825fa2327117b4f8a3fbad7fa3e8c6948e7957957ac18c5d277929cd68808ecfe84e745a2a9cbdedff71ab1cfc4db840ab6daecad23e2134193f1a5100000009000200f868b94d960000008600020005c19932603a226178d73071537334c97150144de1a6af3d2cfd9153f309dcbbfa5f5201a499fc52a5496c6c21c362f23f64d3ea0be51b9f24be10086c2455453f2bc86e4d498bb41e21e9742d802084a6f2dc1d4e08528f86c237a701774ab7f1e8fdd9428fe62ed1f178e5b09c7bf90ec44da1a33789f29efc71341139999b28e600005d001501cb0156096d8110d25cf0ba082d92c8d323492cbc67dc202eaf99deb62706612e5306dc89aaf807f5ef1dce57a799baa4846a231c832b5f3c77fcab1db45094689bf8b772d54be0dcb744e0e11e244bfad04248239b4de803820000000400d10005000800ed0000000500e400000000001c58164df8bf36a81254300842bc50b6e2dada3d2519ca377d78c227d6a3f012bdb514534a07fcef28b7cbf720820e777a035e8cc32bccb9b1c1570871f3e858eedd1185b9b5e99d330290f96ce9da566fcc952c481eec23137b3159235187e6b82ae91d59172ba6ed71"], 0x4cc}, 0x1, 0x0, 0x0, 0x1}, 0x10) r0 = socket(0x2, 0x3, 0x6) lsm_list_modules$auto(0x0, 0x0, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/devices/virtual/net/bond0/bonding/ad_actor_key\x00', 0x40000, 0x0) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000000040)=""/44, 0x2c) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x5, 0x0) open(0x0, 0x22240, 0x154) ioctl$sock_SIOCGIFINDEX(r0, 0x401c5820, 0x0) r2 = fcntl$auto(0x3, 0x4, 0xa553) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sda\x00', 0x14f602, 0x0) r3 = open(&(0x7f0000000280)='./cgroup\x00', 0x105040, 0x0) open_by_handle_at$auto(r3, &(0x7f0000000500)={0x8, 0xfe, "0100000000000000"}, 0xffffffff) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) name_to_handle_at$auto(r2, &(0x7f0000000380)='\xb03\a\x82C\x8d!\r\x8fR\xb7\\\x9c\x93\t\xad\x9bR\x7f\xcc\x04\x96q\fW\xd4V\xb9}\xad\x06\x1b\xd3\xf4j\xdd\x8f4T\xa6)\xd1\x1f\xaa\xa8\xb6\x06\xd5\x1e\x84\x12\xe4\xfbq6\xc5\xa0D\xc2q94\xa4D\xd1\xf2\xa0\xa1\xc8\xba\t\xe4RY\a\x87\xe2\xf1[\xd7\xc1N\xe59f{yq\xf8\x1f\xf5\xcf\xc8g/\xfa\x9d\x1ac\x84\x8e\xeb:~\xc5\xce\x8d\x12\xce\xdf\x17', &(0x7f0000000140)={0x4d, 0x5, "83c3539b6e7d65014f333a49391652f786e3bc6c89f59d5c9ab12fdd09f8809011878237a012e788b89048bde7d29e72e962b93e07694f1b8a64f143ea24567a568cce3a56846652738b14c47c"}, &(0x7f00000001c0)="5bdd326c7b18036dc9be3780f804db34ac30c5ffea3a17d4d3b04b4fa0ac6cab0a6c0be561dbff33007ff3a8cd25bf4c55fecf7bdd89f2c4ce470f951a16b1398037fa6388eb2ca2be5eefdf919b969888307128d0f65bce7b5a8b7f6069b224289d27299d1c47b88bb810ef6cf7c3653a79692d9c2f157f12e5190b5cd30b5eaef6053edae5b64db019dcbac20bbb", 0xeb8) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff001, 0x2) socket(0x2, 0x1, 0x0) socket(0x1e, 0x1, 0x0) socket(0x10, 0x2, 0x0) memfd_create$auto(0x0, 0x4) mmap$auto(0x8000000, 0x8, 0x1000000016, 0x12, 0x3, 0x180000000) fallocate$auto(0x3, 0x3, 0xe, 0x8000008ec5) mmap$auto(0x0, 0x40009, 0x3, 0x9b72, 0x7, 0x28000) ioctl$auto_TIOCMSET2(r4, 0x5418, 0x0) r5 = socket(0xa, 0x3, 0x3a) getsockopt$auto(r5, 0x29, 0xd1, 0x0, 0x0) mmap$auto(0x0, 0x810004, 0xffb, 0x8000000008011, 0x3, 0x8000) madvise$auto(0x0, 0x454, 0x9) 2.249188812s ago: executing program 5 (id=1771): r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000000)={0x20, r0, 0x1, 0x70bd23, 0x25dfdbfe, {}, [@HWSIM_ATTR_IFTYPE_SUPPORT={0x8}, @HWSIM_ATTR_SUPPORT_P2P_DEVICE={0x4}]}, 0x20}, 0x1, 0x0, 0xff07, 0x40c8}, 0x4048000) 2.155053216s ago: executing program 2 (id=1772): mmap$auto(0x0, 0x2020009, 0xa, 0x400eb1, 0xffffffffffffffff, 0x8000) (async) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) select$auto(0x40, 0x0, &(0x7f0000000100)={[0x0, 0x8000000000000000, 0x4cf, 0xfffffffffffffe01, 0x2, 0x400000000000000, 0x5, 0x37, 0x7, 0x2, 0x3, 0xfbe2, 0xfffffffffffff0be, 0x3c, 0x7, 0x3]}, 0x0, 0x0) (async) close_range$auto(0x2, 0xffffffffffffffff, 0x0) (async) r0 = io_uring_setup$auto(0x3, 0x0) io_uring_register$auto(0x2, 0x14, &(0x7f0000000140), 0x7) (async) r1 = prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) (async) r2 = socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) connect$auto(0x3, 0x0, 0x55) (async) sendmsg$auto_WG_CMD_SET_DEVICE(r2, &(0x7f0000000fc0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000340)=ANY=[@ANYBLOB="ebd9560023760623e55b2404ab023d54bdc25149eca6fce037774ebfe3898daac4d6eb9d518a2c7f0dd9a3171444b6c9387105823a0d86015591fccf0fb9aaf292a524fb09d1d69199f2f6d25b5c903898681bc8e58f6658c52f7dac9ebf366f567a1a23793174c1d6188a2b685b00"/122, @ANYRES16, @ANYBLOB="080025bd7000fddbdf25010000000c0008800800de00", @ANYRES16=r2, @ANYRESDEC=r2, @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB], 0x38}, 0x1, 0x0, 0x0, 0x4008001}, 0x20000000) (async) mmap$auto(0xfffffffffffffffc, 0x400008, 0xdf, 0x9b72, 0x2, 0x820008000) (async) write$auto_ppp_device_fops_ppp_generic(r0, &(0x7f0000000040)="9b3e644db0554824e3aa60a8e60bbd52c57be0ebf2d2e04b1dd0bc304170edc5c41bf948c65295de9a1e4fa23b3ec062", 0x30) madvise$auto(0x0, 0xffffffffffff0001, 0x15) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) (async) r4 = openat$auto_dfs_global_fops_debug(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/ubifs/tst_recovery\x00', 0x200001, 0x0) bpf$auto(0xfffffff8, &(0x7f0000000180)=@query={@target_fd=r4, 0x9, 0x6, 0x5370, 0x3, @prog_cnt=0xc35, 0x0, 0xce, 0x10001, 0x278a, 0x800}, 0x1) (async) move_pages$auto(r3, 0x1002, 0x0, 0x0, 0x0, 0x2) (async) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_GOV(r1, &(0x7f00000004c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000500)={0x48c, 0x0, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@THERMAL_GENL_ATTR_TZ_TRIP_TYPE={0x8, 0x7, 0x10000}, @THERMAL_GENL_ATTR_CPU_CAPABILITY_PERFORMANCE={0x8, 0x17, 0x80000000}, @THERMAL_GENL_ATTR_TZ_TRIP_HYST={0x8, 0x9, 0x1f9}, @THERMAL_GENL_ATTR_TZ={0x2ca, 0x1, 0x0, 0x1, [@generic="3627d88e201d2d19c917e329d2e7db344f4bebc5438150fbd7d69d3cc9c7db959bbf771be8925108ccb26fad919f8082f35b7c0c0484f8a192812df595ac1a8d501251e07befcef81f1833eb97e0f44636dbd0362bd3b4eccf72ef653e51b61213faeec2d7a5aab9fd91daeb20d53227f9dec9", @typed={0x59, 0x5b, 0x0, 0x0, @binary="4f855b4f724652b09f15683de799a4747d1eabbbc5e96cd166ded66d9df023047ff11e1554682cbe12e7b78328f0200e0d5fa439977c7fedc12694835bbec44a37b9625e036d48dcee2c2a5cd95fdbb2528c8df816"}, @typed={0x8, 0x35, 0x0, 0x0, @pid=r3}, @generic="9142d6dce8e32492135111a184dcb36e0decf691e8c608ca64dcb126200f270fd940cd01970989af733b743fb8cf82e09e61cc4f97438e23dbd7f100ea585dda8d805a1972609fb109fee89a5bc3369060f50c8e11b17f879c10cf8e215c427867bbd518f337718e694a44c581474654e651a5ebeb2a1d2842e87a", @nested={0x16b, 0xeb, 0x0, 0x1, [@generic="fe4033a783cc7f107b238b92330ce0d01db588037e445f8864fe69c66f8aa5c85b1b1433207c81767bd08f52dcdf562c6cb1a5a5adaae82385d2ec59ee41e8ac9893ee2e2a656802305e7e3bd4daa5353a0ca6ab0e079a734fed5f02521fe8a299ce8950d8332f29ef942f174d8a2d79d5fdf0927517c84579a8b5f3e56b19c769d4bff76ffb82c20ff127eb37357903ba4f8c42dda0dd63194f4e079ae0015ada9efea273065458c75da58ebf8923610b", @typed={0xc, 0x0, 0x0, 0x0, @u64=0x7fff}, @nested={0x4, 0x126}, @typed={0x5, 0xd, 0x0, 0x0, @str='\x00'}, @typed={0x14, 0x11b, 0x0, 0x0, @ipv6=@local}, @typed={0x8, 0x2, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @typed={0x8, 0x34, 0x0, 0x0, @uid=0xee00}, @generic="7b1798e3e411fc085d1bf77c112b189ee1dde9df7509f0c8ec912c8550a0d73b1f3c44ac428c84c15e6161d36d82ca312dcc920f4761d892cd2b44113d5d196114071be9f6bfc5858bd8705ef0ba9f34468173548557cef96876b74c2c1d39754e7f2896ca2b483a271b2f664305e5693b3c", @typed={0x8, 0xdd, 0x0, 0x0, @fd=r1}]}, @typed={0x8, 0x8, 0x0, 0x0, @u32=0x5}]}, @THERMAL_GENL_ATTR_TZ_NAME={0x8, 0xb, '[.]['}, @THERMAL_GENL_ATTR_CPU_CAPABILITY={0xb1, 0x15, 0x0, 0x1, [@generic="2fcb173d5c4af69b218271e6126d72dfe52d87b0f5b744be75c626038b0739dd56133ffc5c97f4d39bb6087c328e59019e1992cea941fdf72f02b1d69772ec7d1fd1f9e81c255b59f43f0545156e1cb90952030ed180fa33aea064aaeb7d5541a063895cd926e7eb172ca3fa3fb76bbf094fa5dc18e7251e0a024cb76fc6a454dac41f2ecf204706504b59a3d1", @generic="b94bf8a620bac80143fa5d44a6f38850f54b8d0f", @nested={0x4, 0x12f}, @typed={0x7, 0x143, 0x0, 0x0, @str=',\\\x00'}]}, @THERMAL_GENL_ATTR_THRESHOLD={0xd7, 0x19, 0x0, 0x1, [@generic="4ecc85c8137dc2b36eb7b00f7571837395e249af69c3fbf1a0ca7f826e72bf842a014c2388693fdab9f891135a3b8811394bb75fbb2266c450464f19c9773b2d7149e8127c2f24158b8d42b6ab2437b03b946b9581dc619c7f1beca947409f6a36560a9ef4177b3ca9f55af44f099bb75cd50d36e832a113ad7b02c6ea705482a1bd0ce5bada87fe68f1186174882ca2e47658b2bcb3ace81142b0d4e91b1b1ee599cf836fa5f322112ba1f73be95a190a8ccd2207587ca909a1f24d64883a69e6afb4a721c3cc79aaf4008b2f3a2b92b1b27e"]}]}, 0x48c}, 0x1, 0x0, 0x0, 0x8000}, 0x80) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x2) madvise$auto(0x0, 0xffffffffffff0005, 0x66) setns(r1, 0x8000000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) pipe$auto(0x0) 2.041825594s ago: executing program 6 (id=1773): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) open(&(0x7f0000000000)='./file0\x00', 0x40440, 0x40) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000000)='./file0\x00', 0xe63e, 0x20) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) bpf$auto(0x5, &(0x7f0000000300)=@bpf_attr_3={0x3, 0x4, 0xf, 0x63, 0x400, 0x0, 0x1, 0x80f0c8, 0x0, "38c1d5cbcb9f6b5e511f0cd8ed068f65", r1, 0x113e33f2, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x6, 0x8, 0x0, 0x3, @attach_btf_obj_fd, 0x6, 0xffff, 0x8, 0x0, 0xfffffffe}, 0x47) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) getsockname$auto(0x3, &(0x7f00000002c0), &(0x7f0000000180)=0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x28, 0x1, 0x0) r2 = socket(0x2b, 0x1, 0x1) listen$auto(0x3, 0x81) accept$auto(0x3, 0x0, 0x0) setsockopt$auto(0x3, 0x1, 0x20, 0x0, 0x9) openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa1\x00', 0x48080, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty31\x00', 0x8001, 0x0) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x4, 0x4) mincore$auto(0x1000, 0x8001, 0x0) r3 = io_uring_setup$auto(0x2, 0x0) io_uring_enter$auto(r3, 0x1, 0xcd00, 0x7, 0x0, 0xffffffffffffffff) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x10004) mlock$auto(0x4, 0x0) mlock2$auto(0x1, 0x8001, 0x0) bpf$auto(0x7, &(0x7f0000000040)=@test={r2, 0xdfd9, 0x3f, 0x100, 0x8, 0x536, 0x8, 0x3, 0x3ff, 0x0, 0x1, 0x2, 0x8, 0x35b9, 0x3}, 0x4) 2.02518529s ago: executing program 5 (id=1774): openat$auto_vcs_fops_vc_screen(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcsa1\x00', 0x48080, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/tty31\x00', 0x8001, 0x0) r0 = openat$auto_cec_devnode_fops_cec_priv(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cec6\x00', 0x0, 0x0) ioctl$auto_CEC_DQEVENT(r0, 0xc0506107, 0x0) getpid() r1 = getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_CTRL_CMD_GETPOLICY(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x4019}, 0x0) r3 = pidfd_open$auto(r1, 0x0) syz_clone3(0x0, 0x0) open(0x0, 0x22240, 0x155) mmap$auto_fb_fops_fb_chrdev(&(0x7f0000ffa000/0x1000)=nil, 0x1000, 0x4, 0x80010, r3, 0x9e) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x1, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0xffffffd6) io_uring_enter$auto(0xffffffffffffffff, 0x103, 0x40000001, 0x6, 0x0, 0x2007d38) tkill$auto(0x1, 0x7) poll$auto(&(0x7f0000000180)={r0, 0x101, 0x100}, 0x6, 0x9) sysfs$auto(0x2, 0x4, 0x4) close_range$auto(0x2, 0x8, 0x0) socket(0x1, 0x1, 0x0) openat$auto_binder_fops_binder_internal(0xffffffffffffff9c, &(0x7f0000000180)='/dev/binderfs/binder0\x00', 0x40, 0x0) openat$auto_dma_heap_fops_dma_heap(0xffffffffffffff9c, &(0x7f00000002c0), 0x40000, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000100)='/dev/tty12\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x11, 0x3, 0x80000) openat$auto_rfkill_fops_core(0xffffffffffffff9c, &(0x7f00000000c0), 0xbc2, 0x0) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000400)='/dev/ptys0\x00', 0x101e81, 0x0) 1.798960269s ago: executing program 1 (id=1775): openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) r0 = gettid() openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/extfrag/unusable_index\x00', 0x40, 0x0) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) kill$auto(r0, 0x11) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card1\x00', 0x40000, 0x0) (async) gettid() (async) openat$auto_proc_pid_maps_operations_internal(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/debug/extfrag/unusable_index\x00', 0x40, 0x0) (async) readv$auto(0x3, &(0x7f00000001c0)={0x0, 0x7fffffffefff}, 0x7) (async) kill$auto(r0, 0x11) (async) 1.664919253s ago: executing program 6 (id=1776): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_MACSEC_CMD_GET_TXSC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002b00)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1.498383058s ago: executing program 1 (id=1777): pwrite64$auto(0xc8, &(0x7f0000000140)='\vX\xb5n\x91p\xe6\x1eRNM\x99\x86\xdde\x1cJ\x99\x00\x00\x00?\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbe\x01\x00\x00\x00\'\x03\x00\x00\x9f\x1e\xf9\xa4*\x01\x00\x00\x00^B\xb8\xe4j\t;\xe4\x90\xcc\x9d\xc5\x0fo\x84\xf4\x89\v\xea\x1b\x95\xafQ;CL\"\x01@\x00\x00\x00\x00\f\x00\xc0\x13\xc8\xe2\xae\xf5\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2E\xd8?\'\x8d\x81\x81O*&\xab\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;0\x81\x11\x9a?g`sFh\x00\x00,8\x93\xba\x88\x93\x9d\xb6\x1a\x7f\xc0%\xb0\x83ROJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd6eWj\xdc\xac\x88\xf0\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xde8\xf7\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00\x00\xff\xff\x00'/242, 0xfdf0, 0x39) 1.412582789s ago: executing program 1 (id=1778): socket(0x18, 0xa, 0x1) socket(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x15, 0x5, 0x0) socket(0x10, 0x2, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000001f40), 0xffffffffffffffff) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) socket(0x10, 0x2, 0x0) socket(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x801, 0x84) socket(0xa, 0x2, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) mq_open$auto(0x0, 0xde8, 0xb, 0x0) mq_unlink$auto(0x0) mq_timedreceive$auto(0x8, 0x0, 0xfffffffd, 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) sendmsg$auto_NL80211_CMD_SET_WIPHY(r0, &(0x7f0000002000)={0x0, 0x0, &(0x7f0000001fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010227bd7000fedbdf25020000000c12e9b0619b5e478a00"/34], 0x20}, 0x1, 0x0, 0x0, 0x20040000}, 0x4008040) r2 = openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000001a80)='/dev/bus/usb/011/001\x00', 0x121002, 0x0) mmap$auto(0x0, 0x9, 0x0, 0x8000000008012, r2, 0x0) r3 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/console\x00', 0x2, 0x0) ppoll$auto(&(0x7f0000000040)={r3, 0x0, 0x7}, 0x5, 0x0, 0x0, 0x8) ioctl$auto_TCSBRKP(r3, 0x5425, 0x10000000000) sendmmsg$auto(r2, &(0x7f0000000100)={{0x0, 0x6, 0x0, 0x7f, 0x0, 0x8000000000008000, 0x1}, 0x7}, 0x800008, 0x8) openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dri/card0\x00', 0x129800, 0x0) 1.314165843s ago: executing program 6 (id=1779): r0 = socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x2020009, 0xfffffffffffffff7, 0xeb1, 0xfffffffffffffffe, 0x8000) io_uring_setup$auto(0x59, &(0x7f0000000080)={0x9, 0xd, 0x2, 0x6, 0x7, 0x8, 0xffffffffffffffff, [], {0x6, 0x6, 0xf, 0x29f, 0x100, 0x7f, 0x101, 0x6, 0x2}, {0x100, 0x1, 0x52, 0x5, 0x1, 0x40, 0x40, 0x8, 0x100000000}}) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x4040, 0x75) socket(0xa, 0x2, 0x3a) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, 0x0, 0x8001, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "ab06fdffff00fff500000000003f"}, 0x55) sendmmsg$auto(r0, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) 1.231503014s ago: executing program 6 (id=1780): ioctl$auto_VHOST_GET_BACKEND_FEATURES2(0xffffffffffffffff, 0x8008af26, &(0x7f0000000340)=0x4) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) fstat$auto(0xffffffffffffffff, &(0x7f0000000000)={0x8e7, 0x2c89, 0x104, 0x5, 0xffffffffffffffff, 0xee01, 0x0, 0x973, 0x6, 0x4, 0x61, 0xffffffffffffff1d, 0x4, 0x2976, 0xfffffffffffffff9, 0x5}) socket(0x22, 0x3, 0x0) mmap$auto(0x0, 0x400005, 0xfffffffffffffffe, 0x9b72, 0x2, 0x8000) bind$auto(0x3, 0x0, 0x6b) madvise$auto(0x0, 0x6, 0xe) syslog$auto(0x4, 0x0, 0xffffff7f) r0 = getpgrp(0x0) r1 = syz_open_procfs$namespace(r0, &(0x7f0000000040)='ns/net\x00') r2 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, 0x0, 0x8a240, 0x0) ioctl$auto(r2, 0x5646, r2) write$auto(0xffffffffffffffff, &(0x7f0000000500)='\xcd\x12M\xa4\\\x9c<\xc2\x7f\xfb\b\x8c\x93\x85vV\b\x8a\xd0\x83\xf7\x11\xbc\x03\x91\x1b\xb8\x86\xceh\xa8c:g\xe9F^aG\\\x0e\xa0,\xd4V\xf3/\x80\xe4\x83\xc0W\xcd%\xd6Q\x83\xf1\xe7XR\x88\x03B \x814\xfb\xd4\x15\xbd\xaf\xa3AX\xa3\x19C\x06\xd5\x15\xf0\xc7:`\xdb\xa6I\xfaU*t#\xdb\x98\xa1v\xd4a\x7f\xc8\xf5\xb6d\x95\vFb&\x8d\x1f\xb0`\xd7T\x90P\xe2\x18;>\xe3\xe6%\xbc\x1aM\x95\xbd\x175\xed%?z\xed;\xb6\x19s\xdb,\xbb\xf3\xa4\x99:\x7fh\xeb\xfe\xcf\fS\xba\x97\x9f\x86|\xad?', 0xf04) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0x7, 0x0, 0x5, 0x3, 0x2000000000210006, 0x3, 0x7, 0x5, 0x2, 0x7, 0xaf, 0x9, 0x80000002, 0x3, 0x105, 0x7, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, [0x10, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x4bfc, 0x77, 0x0, 0x0, 0x0, 0x4, 0x0, 0xc06f, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, 0x107, 0x6, 0x0, 0xfffffffffffffffe, 0x4, 0x0, 0x80000000000]}, 0x1fe, 0x81) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) prctl$auto(0x35, 0x8, 0xec, 0x2, 0x80000000) socket(0x10, 0x4, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, 0x0, 0x4004) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[@ANYBLOB="72010000", @ANYBLOB="3e14a9a92d6804137b15575b473fb76b4540b79131d53b37e82edefb15ef99f65dfea8cf45972e37785c3c296d125b3e3b59840d0c5590c304fa38548ba09e38770e5c9548"], 0x1ac}}, 0x40010) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc7}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) lseek$auto(r1, 0x81, 0x2) r3 = socket$nl_generic(0x10, 0x3, 0x10) pread64$auto(r1, &(0x7f0000000240)=',(&^-#]}\\', 0x4, 0x6a) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), r3) 1.147411199s ago: executing program 2 (id=1781): pwrite64$auto(0xc8, &(0x7f0000000340)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x86\xdde\x00\x00\x00\x00\x0e\x80\x00\x02\xba\xae\xb8-\x14\xe4\x00\x00\x00\xfd\xfd\xd3\xd3\x1d\xf8\xbebZ\xddL\'\x03\x00\x00\x9f\x1e\xf6\xa4*\x01\x00\x00\x00^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e#\xae\xa9\xc5\x93\x1dD\x811\xb9_\xdd*j\xfd\xeb\xaf\x94\x90\xd7\xa6+,\xc3\xc2g\x01JZ\xbb*\xb5\xa1;\x9e\x83\x120\x81\x11\x9a?g`sFh\x00\x00\xda,\x93\xba\x88\x93\xc6#\xe5\xaae\x9d\xb6\x1a\x7f\xc0%\xb0\rfOJ+\x02\x9b#)\x9b\x17\x82\xd7\xee\xd1\xbf2[\xd0\xbdn\x1d\x00\xeb]B\xa0\x99\xb0R\xb4J}\xa8\xa1\x84]F\xe0\x83/\xc0\xd8\x05f_\xfa\x19\a\x00\xf1\x12lwU&[\xde?\xdex\xd8\xc1\xa6\xf2\xc1\"\xact\xee\xc9\x00'/228, 0xfdef, 0x2) 1.056740293s ago: executing program 2 (id=1782): r0 = socket(0x10, 0x2, 0xc) r1 = socket(0x8, 0x801, 0x82) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket(0x2, 0x80002, 0x73) socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(0x3, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x29}}, 0x54) mmap$auto(0x7f, 0x5, 0x4000000000df, 0xeb1, r0, 0x8000) bpf$auto(0x9, &(0x7f0000000100)=@bpf_attr_3={0x6, 0x5, 0xffffffffffff8001, 0x9, 0x8, 0x7ff, 0x2, 0xb6d14b59, 0x6, "4e96070077cac613ae7600", 0x0, 0x401, r0, 0x4, 0x4, 0x1, 0x5, 0x865, 0x6, 0x9, @attach_btf_obj_fd=r1, 0x8, 0x7fffffffffffffff, 0x4, 0x0, 0x8, r1}, 0x201) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x2, 0x4) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x0, 0xffffffffffffffff, 0x801, 0x1000b, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f3) r2 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write$auto(r2, 0x0, 0x5) r3 = openat$auto_vmuser_fops_vmci_host(0xffffffffffffff9c, &(0x7f00000034c0), 0x500, 0x0) ioctl$auto_IOCTL_VMCI_NOTIFY_RESOURCE(r3, 0x7a5, 0x0) sendmsg$auto_HWSIM_CMD_DEL_RADIO(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="01eb"], 0x14}, 0x1, 0x0, 0x0, 0x20040800}, 0x24004000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1200"], 0x1ac}}, 0x40000) syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/mnt\x00') madvise$auto(0x0, 0xffffffffffff0005, 0x19) ioctl$auto(0x3, 0x8b0a, 0x8d) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) read$auto(0x3, 0x0, 0x7) setsockopt$auto(r1, 0x10000000084, 0x22, 0x0, 0x10) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x4, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) 630.629686ms ago: executing program 2 (id=1783): sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x4, 0x0, 0x1}, 0xed7138c}, 0x2, 0x9) unshare$auto(0x40000080) add_key$auto(0x0, 0x0, 0x0, 0x6, 0x100) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'dummy0\x00'}) bpf$auto(0x0, 0x0, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'vlan0\x00'}) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_SET_WOWLAN(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd29, 0x25dfdbfe, {}, [@NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'bridge_slave_0\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$auto_macsec(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'vxcan1\x00', 0x0}) sendmsg$auto_MACSEC_CMD_UPD_RXSC(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01022abd7000fedbdf2503000000f8ff01800c0001000a0000000000000008000100", @ANYRES32=r5, @ANYBLOB], 0x2c}, 0x1, 0x0, 0x0, 0x20004054}, 0x48010) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000ac0), r6) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="0000a93a", @ANYRES16=r7, @ANYBLOB="a14c26bd7000fbdbdf252500000008000c000800000008000c00690e000008000c000900000008000c0006000000"], 0x34}, 0x1, 0x0, 0x0, 0x40804}, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000b00)={'veth0_to_bridge\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_LINKINFO_GET(r6, &(0x7f0000000bc0)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010025bd7000fddbdf25020000000c00018008000100", @ANYRES32=r8, @ANYBLOB="ee6aa2f7d9b8c7a410edc0f6a70f00000e5e0b45303f0f1a552b376d1530003545dbef8a5005245e84928c309223f3902804628473396a2cec50337741c6aed29d3f1da214eb11177dea280c39c371984c066eea824ea9ce439e5ac6184a11f77e258f34158107559e7141ba04b078f068bbfbf49fbf091e0ef3dd1f439ccabc4a42225905c3581dc3dd97718915bbfa6a96506308b05a6455dfe43b901c304c7a502f5686b804e25daffa0d2df87c3b86c5becf28832a0aa1c40578d0f128285f93397afa609297aafe01721b2958a26d0d4f9535f07af3f16f941c8cedb5bacead463119af582a07d1bb1f35147a47d21a436d0cff"], 0x20}, 0x1, 0x0, 0x0, 0xc880}, 0x20000) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x800008000) r9 = open(&(0x7f00000000c0)='./file0\x00', 0xc2, 0x84) close$auto(r9) r10 = openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={0x100, 0x104, 0x1}, 0x18) renameat$auto(r9, &(0x7f0000000040)='./file0\x00', r10, &(0x7f0000000100)='./file0\x00') mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) 573.807518ms ago: executing program 5 (id=1784): mmap$auto(0x8000000000000000, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) r0 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = geteuid() setpriority$auto(0x5, r1, 0xcb) readv$auto(r0, &(0x7f0000001640)={0x0, 0x4}, 0x2) write$auto(0x3, 0x0, 0x1) 374.654624ms ago: executing program 35 (id=1784): mmap$auto(0x8000000000000000, 0x400008, 0xdf, 0x9b72, 0x0, 0x100000000008000) r0 = openat$auto_ocfs2_control_fops_stack_user(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = geteuid() setpriority$auto(0x5, r1, 0xcb) readv$auto(r0, &(0x7f0000001640)={0x0, 0x4}, 0x2) write$auto(0x3, 0x0, 0x1) 367.726963ms ago: executing program 1 (id=1786): openat$auto_proc_pid_attr_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/attr/fscreate\x00', 0x2, 0x0) socket(0x2, 0x1, 0x106) (async) mmap$auto(0x0, 0x20009, 0x7fff, 0xeb6, 0x401, 0x8000) (async) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) (async) connect$auto(0x3, 0x0, 0x55) (async) socket(0xa, 0x6, 0x0) (async) mmap$auto(0x0, 0x400008, 0xdc, 0x9b72, 0x1000002, 0x8000) (async) openat$auto_usbdev_file_operations_usb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/bus/usb/015/001\x00', 0xa901, 0x0) (async) r0 = openat$auto_ppp_device_fops_ppp_generic(0xffffffffffffff9c, &(0x7f0000000080), 0x80080, 0x0) shmctl$auto(0x4, 0x1, &(0x7f0000000280)={{0xfe9e, 0xffffffffffffffff, 0xee00, 0xa6, 0x7ff, 0x1, 0x3}, 0x7a6e56f5, 0x4000000000003, 0x9, 0xa, @inferred, @raw=0x7, 0x4, 0x0, 0x0, 0x0}) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r1 = socket(0x2b, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) (async) ppoll$auto(&(0x7f0000000000)={r1, 0x8, 0x6}, 0x7, 0x0, 0x0, 0x8) (async) sendmmsg$auto(r1, &(0x7f0000000140)={{&(0x7f0000000040), 0x84c, 0x0, 0x9, 0x0, 0x3, 0x10b}, 0x800009}, 0x1, 0x20000000) (async) r2 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010025bd0001fbdbdf0002"], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4044010) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x40000) ioctl$auto_PPPIOCSMRU(r0, 0xc004743e, 0x0) (async) mprotect$auto(0x4, 0x10000, 0x8) syz_genetlink_get_family_id$auto_ovs_vport(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$auto_PPPIOCSACTIVE(r0, 0x40107446, &(0x7f00000000c0)={0x101, &(0x7f0000000040)={0x40, 0x9, 0x9}}) (async) connect$auto(0x3, &(0x7f0000000140), 0x55) setsockopt$auto(0x3, 0x6, 0x19, 0x0, 0xfb3) (async) madvise$auto(0x0, 0xffffffffffff0001, 0x9) unshare$auto(0x20000) (async) connect$auto(0x3, 0x0, 0x55) open(&(0x7f0000000800)='./file0\x00', 0x62240, 0x154) 24.833487ms ago: executing program 2 (id=1787): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x2, 0x1, 0x0) openat$auto_proc_mem_operations_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/mem\x00', 0x0, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x3, 0x100) socket(0x2, 0x1, 0x0) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @remote}, 0x6a) setsockopt$auto(0x3, 0x0, 0xa, 0x0, 0x10000) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x1f, 0xb}, 0x800009}, 0x5, 0x20000000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) write$auto(0x3, 0x0, 0xfdf3) 0s ago: executing program 6 (id=1788): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000001900), 0xffffffffffffffff) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mbind$auto(0x0, 0x100000004, 0x4, 0x0, 0x20000000000006, 0x3) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_MACSEC_CMD_GET_TXSC(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000002b00)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x0) kernel console output (not intermixed with test programs): ve_1 [ 206.217436][ T8667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.248253][ T8667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.348789][ T53] Bluetooth: hci2: command tx timeout [ 206.467612][ T8667] hsr_slave_0: entered promiscuous mode [ 206.485923][ T8667] hsr_slave_1: entered promiscuous mode [ 206.494874][ T8667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.508667][ T8667] Cannot create hsr debugfs directory [ 206.951974][ T8667] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 206.979781][ T8667] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 207.211635][ T3421] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.272472][ T8667] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 207.315615][ T8667] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 207.460062][ T3421] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.592869][ T3421] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.704417][ T8724] blk_print_req_error: 24 callbacks suppressed [ 207.704439][ T8724] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.745766][ T8724] buffer_io_error: 23 callbacks suppressed [ 207.745785][ T8724] Buffer I/O error on dev nbd4, logical block 0, async page read [ 207.762874][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 207.780866][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 207.783507][ T8724] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.799853][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 207.817830][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 207.830295][ T5144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 207.831896][ T3421] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.848589][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 207.872719][ T8724] Buffer I/O error on dev nbd4, logical block 0, async page read [ 207.892719][ T8724] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.936473][ T8724] Buffer I/O error on dev nbd4, logical block 0, async page read [ 207.940065][ T8667] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.944774][ T8724] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.960163][ T8724] Buffer I/O error on dev nbd4, logical block 0, async page read [ 207.968280][ T8724] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 207.983750][ T8724] Buffer I/O error on dev nbd4, logical block 0, async page read [ 208.007692][ T8724] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.016947][ T8724] Buffer I/O error on dev nbd4, logical block 0, async page read [ 208.030498][ T8724] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.055590][ T8724] Buffer I/O error on dev nbd4, logical block 0, async page read [ 208.057151][ T8667] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.067503][ T8724] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.083779][ T8724] Buffer I/O error on dev nbd4, logical block 0, async page read [ 208.092331][ T8724] ldm_validate_partition_table(): Disk read failed. [ 208.105331][ T8724] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.115905][ T8724] Buffer I/O error on dev nbd4, logical block 0, async page read [ 208.127221][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.134399][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.135531][ T8724] I/O error, dev nbd4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 208.152305][ T8724] Buffer I/O error on dev nbd4, logical block 0, async page read [ 208.162076][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.169287][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.177214][ T8724] Dev nbd4: unable to read RDB block 0 [ 208.185580][ T8724] nbd4: unable to read partition table [ 208.268902][ T8667] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 208.279381][ T8667] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 208.418664][ T5144] Bluetooth: hci2: command tx timeout [ 208.481142][ T3421] bridge_slave_1: left allmulticast mode [ 208.489902][ T3421] bridge_slave_1: left promiscuous mode [ 208.497465][ T3421] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.635707][ T3421] bridge_slave_0: left allmulticast mode [ 208.639960][ T8751] netlink: 24 bytes leftover after parsing attributes in process `syz.2.759'. [ 208.641617][ T3421] bridge_slave_0: left promiscuous mode [ 208.656071][ T3421] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.454807][ T3421] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.470847][ T3421] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.482121][ T3421] bond0 (unregistering): Released all slaves [ 209.506611][ T8667] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.555435][ T8727] chnl_net:caif_netlink_parms(): no params data found [ 209.889494][ T8727] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.897423][ T8727] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.905286][ T8727] bridge_slave_0: entered allmulticast mode [ 209.941373][ T8727] bridge_slave_0: entered promiscuous mode [ 209.945055][ T5144] Bluetooth: hci1: command tx timeout [ 209.967190][ T8727] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.977526][ T8727] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.991145][ T8727] bridge_slave_1: entered allmulticast mode [ 210.002048][ T8727] bridge_slave_1: entered promiscuous mode [ 210.093279][ T8727] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.154063][ T3421] hsr_slave_0: left promiscuous mode [ 210.188479][ T3421] hsr_slave_1: left promiscuous mode [ 210.229002][ T3421] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 210.236546][ T3421] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 210.283484][ T3421] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 210.297074][ T3421] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 210.353050][ T3421] veth1_macvtap: left promiscuous mode [ 210.373261][ T3421] veth0_macvtap: left promiscuous mode [ 210.382889][ T3421] veth1_vlan: left promiscuous mode [ 210.396405][ T3421] veth0_vlan: left promiscuous mode [ 210.501868][ T5144] Bluetooth: hci2: command tx timeout [ 211.106621][ T3421] team0 (unregistering): Port device team_slave_1 removed [ 211.154220][ T3421] team0 (unregistering): Port device team_slave_0 removed [ 211.525110][ T8727] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.601422][ T8727] team0: Port device team_slave_0 added [ 211.637828][ T8727] team0: Port device team_slave_1 added [ 211.742519][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.753216][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.780752][ T8727] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.795576][ T8727] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.802705][ T8727] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.828765][ T8727] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.842531][ T8667] veth0_vlan: entered promiscuous mode [ 211.874230][ T8667] veth1_vlan: entered promiscuous mode [ 211.934405][ T8727] hsr_slave_0: entered promiscuous mode [ 211.948853][ T8727] hsr_slave_1: entered promiscuous mode [ 211.955261][ T8727] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 211.962988][ T8727] Cannot create hsr debugfs directory [ 212.018233][ T5144] Bluetooth: hci1: command tx timeout [ 212.086102][ T8667] veth0_macvtap: entered promiscuous mode [ 212.157548][ T8667] veth1_macvtap: entered promiscuous mode [ 212.267091][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.303152][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.328916][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.366845][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.387309][ T8667] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.447989][ T8667] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 212.483890][ T8667] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.529458][ T8667] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.588928][ T5144] Bluetooth: hci2: command tx timeout [ 212.725399][ T8667] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.738324][ T8667] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.747084][ T8667] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.755933][ T8667] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.863616][ T8727] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 212.962730][ T8727] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 213.015822][ T8727] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 213.049382][ T8727] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 213.131792][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.155635][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.261133][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.320803][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.331961][ T8727] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.386325][ T8727] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.419188][ T8727] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 213.429858][ T8727] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 213.444839][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.452035][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.489858][ T3477] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.497019][ T3477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.983548][ T29] audit: type=1800 audit(6030232422.972:4): pid=8860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.771" name="version" dev="configfs" ino=23069 res=0 errno=0 [ 214.000514][ T8860] netlink: 334 bytes leftover after parsing attributes in process `syz.2.771'. [ 214.032372][ T8861] netlink: 24 bytes leftover after parsing attributes in process `syz.1.770'. [ 214.042250][ T8727] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.098401][ T53] Bluetooth: hci1: command tx timeout [ 214.801802][ T8727] veth0_vlan: entered promiscuous mode [ 214.837210][ T8727] veth1_vlan: entered promiscuous mode [ 214.980291][ T8727] veth0_macvtap: entered promiscuous mode [ 215.010632][ T8727] veth1_macvtap: entered promiscuous mode [ 215.107880][ T8727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.138397][ T8727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.168220][ T8727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.199833][ T8727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.220754][ T8727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.248183][ T8727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.269987][ T8727] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.306582][ T8727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.329032][ T8727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.349178][ T8727] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 215.369397][ T8727] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.393724][ T8727] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.442343][ T8727] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.470287][ T8727] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.493769][ T8727] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.515594][ T8727] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.101938][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.120940][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.178905][ T53] Bluetooth: hci1: command tx timeout [ 216.250976][ T7109] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.266867][ T7109] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.371692][ T8954] netlink: 4 bytes leftover after parsing attributes in process `syz.2.785'. [ 217.428063][ T53] Bluetooth: hci3: unexpected event 0x06 length: 4 > 3 [ 218.089919][ T8977] netlink: 24 bytes leftover after parsing attributes in process `syz.5.788'. [ 218.659316][ T8985] Invalid ELF header magic: != ELF [ 218.932993][ T8988] netlink: 28 bytes leftover after parsing attributes in process `syz.1.790'. [ 219.246246][ T8988] geneve1: entered allmulticast mode [ 220.151530][ T3477] [drm:drm_crtc_add_crc_entry] *ERROR* Overflow of CRC buffer, userspace reads too slow. [ 221.355481][ T9042] netlink: 24 bytes leftover after parsing attributes in process `syz.5.796'. [ 222.622754][ T9055] netlink: 24 bytes leftover after parsing attributes in process `syz.5.800'. [ 226.074512][ T9124] netlink: 24 bytes leftover after parsing attributes in process `syz.6.813'. [ 235.488486][ T9338] netlink: 28 bytes leftover after parsing attributes in process `syz.2.850'. [ 235.497482][ T9338] macvlan1: entered allmulticast mode [ 235.565641][ T9338] veth1_vlan: entered allmulticast mode [ 239.069812][ T9409] netlink: 4 bytes leftover after parsing attributes in process `syz.2.861'. [ 241.985905][ T9451] netlink: 326 bytes leftover after parsing attributes in process `syz.2.872'. [ 244.764438][ T9506] netlink: 24 bytes leftover after parsing attributes in process `syz.1.888'. [ 245.339573][ T9513] netlink: 24 bytes leftover after parsing attributes in process `syz.1.889'. [ 246.654056][ T9480] delete_channel: no stack [ 247.240497][ T9545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.897'. [ 248.129037][ T9561] netlink: 12 bytes leftover after parsing attributes in process `syz.5.895'. [ 248.320813][ T9561] nbd20: detected capacity change from 0 to 29696 [ 248.443042][ T5833] block nbd20: Send control failed (result -22) [ 248.462599][ T5833] block nbd20: Request send failed, requeueing [ 248.489369][ T40] block nbd20: Dead connection, failed to find a fallback [ 248.497701][ T40] block nbd20: shutting down sockets [ 248.504456][ T40] blk_print_req_error: 6 callbacks suppressed [ 248.504473][ T40] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.519923][ T40] buffer_io_error: 6 callbacks suppressed [ 248.519936][ T40] Buffer I/O error on dev nbd20, logical block 0, async page read [ 248.541941][ T5833] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.551181][ T5833] Buffer I/O error on dev nbd20, logical block 0, async page read [ 248.559349][ T5833] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.568559][ T5833] Buffer I/O error on dev nbd20, logical block 0, async page read [ 248.576536][ T5833] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.585818][ T5833] Buffer I/O error on dev nbd20, logical block 0, async page read [ 248.593905][ T5833] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.603237][ T5833] Buffer I/O error on dev nbd20, logical block 0, async page read [ 248.611289][ T5833] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.620640][ T5833] Buffer I/O error on dev nbd20, logical block 0, async page read [ 248.629087][ T5833] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.638741][ T5833] Buffer I/O error on dev nbd20, logical block 0, async page read [ 248.646749][ T5833] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.656020][ T5833] Buffer I/O error on dev nbd20, logical block 0, async page read [ 248.664002][ T5833] ldm_validate_partition_table(): Disk read failed. [ 248.670795][ T5833] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.680015][ T5833] Buffer I/O error on dev nbd20, logical block 0, async page read [ 248.688008][ T5833] I/O error, dev nbd20, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 248.697247][ T5833] Buffer I/O error on dev nbd20, logical block 0, async page read [ 248.705462][ T5833] Dev nbd20: unable to read RDB block 0 [ 248.711634][ T5833] nbd20: unable to read partition table [ 248.726044][ T5833] ldm_validate_partition_table(): Disk read failed. [ 248.733505][ T5833] Dev nbd20: unable to read RDB block 0 [ 248.740176][ T5833] nbd20: unable to read partition table [ 249.928201][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.909'. [ 250.039525][ T9590] netlink: 4 bytes leftover after parsing attributes in process `syz.6.909'. [ 250.610822][ T9600] netlink: 28 bytes leftover after parsing attributes in process `syz.2.914'. [ 251.069380][ T9600] veth1_vlan (unregistering): left allmulticast mode [ 251.714792][ T9634] netlink: 12 bytes leftover after parsing attributes in process `syz.6.921'. [ 251.847913][ T9600] syz.2.914 (9600) used greatest stack depth: 21200 bytes left [ 252.049110][ T9634] nbd21: detected capacity change from 0 to 29696 [ 252.158289][ T5840] block nbd21: Send control failed (result -22) [ 252.177603][ T5840] block nbd21: Request send failed, requeueing [ 252.195793][ T53] block nbd21: Receive control failed (result -32) [ 252.213533][ T98] block nbd21: Dead connection, failed to find a fallback [ 252.221021][ T98] block nbd21: shutting down sockets [ 252.227135][ T5840] ldm_validate_partition_table(): Disk read failed. [ 252.234634][ T5840] Dev nbd21: unable to read RDB block 0 [ 252.241130][ T5840] nbd21: unable to read partition table [ 252.252125][ T5840] ldm_validate_partition_table(): Disk read failed. [ 252.259532][ T5840] Dev nbd21: unable to read RDB block 0 [ 252.265994][ T5840] nbd21: unable to read partition table [ 252.781575][ T9660] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 400008000010006 [ 252.802637][ T9655] netlink: 28 bytes leftover after parsing attributes in process `syz.1.928'. [ 253.107812][ T9666] HfR: entered promiscuous mode [ 253.184739][ T9666] netlink: 12 bytes leftover after parsing attributes in process `syz.2.931'. [ 253.244717][ T9666] HfR: left promiscuous mode [ 253.525711][ T9674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.934'. [ 255.019629][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.941'. [ 255.036924][ T9702] netlink: 4 bytes leftover after parsing attributes in process `syz.5.941'. [ 255.355310][ T9710] ubi0: attaching mtd0 [ 255.376803][ T9710] ubi0: scanning is finished [ 255.423475][ T9710] ubi0: empty MTD device detected [ 255.440638][ T9710] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 255.776415][ T9710] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 256.102058][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.108571][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.806140][ T9745] netlink: 12 bytes leftover after parsing attributes in process `syz.5.952'. [ 257.206907][ T9755] zero sized request [ 257.323929][ T9745] nbd22: detected capacity change from 0 to 29696 [ 257.469941][ T5833] block nbd22: Send control failed (result -22) [ 257.505759][ T5833] block nbd22: Request send failed, requeueing [ 257.550323][ T40] block nbd22: Dead connection, failed to find a fallback [ 257.557691][ T40] block nbd22: shutting down sockets [ 257.563419][ T40] blk_print_req_error: 58 callbacks suppressed [ 257.563436][ T40] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.580225][ T40] buffer_io_error: 56 callbacks suppressed [ 257.580241][ T40] Buffer I/O error on dev nbd22, logical block 0, async page read [ 257.597607][ T5833] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.648248][ T5833] Buffer I/O error on dev nbd22, logical block 0, async page read [ 257.658421][ T5833] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.667595][ T5833] Buffer I/O error on dev nbd22, logical block 0, async page read [ 257.697165][ T5833] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.706606][ T5833] Buffer I/O error on dev nbd22, logical block 0, async page read [ 257.714657][ T5833] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.723913][ T5833] Buffer I/O error on dev nbd22, logical block 0, async page read [ 257.731959][ T5833] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.742169][ T5833] Buffer I/O error on dev nbd22, logical block 0, async page read [ 257.751205][ T5833] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.760442][ T5833] Buffer I/O error on dev nbd22, logical block 0, async page read [ 257.768652][ T5833] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.777816][ T5833] Buffer I/O error on dev nbd22, logical block 0, async page read [ 257.785820][ T5833] ldm_validate_partition_table(): Disk read failed. [ 257.792671][ T5833] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.801956][ T5833] Buffer I/O error on dev nbd22, logical block 0, async page read [ 257.810002][ T5833] I/O error, dev nbd22, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 257.819266][ T5833] Buffer I/O error on dev nbd22, logical block 0, async page read [ 257.827390][ T5833] Dev nbd22: unable to read RDB block 0 [ 257.833571][ T5833] nbd22: unable to read partition table [ 257.849310][ T5833] ldm_validate_partition_table(): Disk read failed. [ 257.859274][ T5833] Dev nbd22: unable to read RDB block 0 [ 257.865521][ T5833] nbd22: unable to read partition table [ 258.238736][ T9778] netlink: 12 bytes leftover after parsing attributes in process `syz.6.959'. [ 258.572535][ T9778] nbd23: detected capacity change from 0 to 29696 [ 258.636009][ T5833] block nbd23: Send control failed (result -22) [ 258.649404][ T5833] block nbd23: Request send failed, requeueing [ 258.698382][ T53] block nbd23: Receive control failed (result -32) [ 258.707244][ T98] block nbd23: Dead connection, failed to find a fallback [ 258.714925][ T98] block nbd23: shutting down sockets [ 258.721460][ T5833] ldm_validate_partition_table(): Disk read failed. [ 258.765230][ T5833] Dev nbd23: unable to read RDB block 0 [ 258.788839][ T5833] nbd23: unable to read partition table [ 258.804486][ T5833] ldm_validate_partition_table(): Disk read failed. [ 258.850728][ T5833] Dev nbd23: unable to read RDB block 0 [ 258.857493][ T5833] nbd23: unable to read partition table [ 259.875889][ T9819] Invalid ELF header magic: != ELF [ 260.109892][ T9825] netlink: 338 bytes leftover after parsing attributes in process `syz.1.974'. [ 260.541360][ T9843] netlink: 4 bytes leftover after parsing attributes in process `syz.6.979'. [ 260.576807][ T9843] netlink: 4 bytes leftover after parsing attributes in process `syz.6.979'. [ 261.083848][ T9854] FAULT_INJECTION: forcing a failure. [ 261.083848][ T9854] name failslab, interval 1, probability 0, space 0, times 1 [ 261.121566][ T9854] CPU: 0 UID: 0 PID: 9854 Comm: syz.2.984 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 261.132229][ T9854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 261.142329][ T9854] Call Trace: [ 261.145639][ T9854] [ 261.148597][ T9854] dump_stack_lvl+0x16c/0x1f0 [ 261.153324][ T9854] should_fail_ex+0x497/0x5b0 [ 261.158041][ T9854] ? fs_reclaim_acquire+0xae/0x150 [ 261.163198][ T9854] should_failslab+0xc2/0x120 [ 261.167917][ T9854] __kmalloc_noprof+0xce/0x4f0 [ 261.172726][ T9854] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 261.178395][ T9854] ? tomoyo_realpath_from_path+0xbf/0x710 [ 261.184155][ T9854] tomoyo_realpath_from_path+0xbf/0x710 [ 261.189740][ T9854] ? tomoyo_path_number_perm+0x235/0x5b0 [ 261.195420][ T9854] tomoyo_path_number_perm+0x248/0x5b0 [ 261.200930][ T9854] ? tomoyo_path_number_perm+0x235/0x5b0 [ 261.206625][ T9854] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 261.212692][ T9854] ? __pfx_lock_release+0x10/0x10 [ 261.217756][ T9854] ? trace_lock_acquire+0x14e/0x1f0 [ 261.223004][ T9854] ? lock_acquire+0x2f/0xb0 [ 261.227546][ T9854] ? __fget_files+0x40/0x3a0 [ 261.232187][ T9854] ? __fget_files+0x206/0x3a0 [ 261.236911][ T9854] security_file_ioctl+0x9b/0x240 [ 261.241978][ T9854] __x64_sys_ioctl+0xb7/0x200 [ 261.246695][ T9854] do_syscall_64+0xcd/0x250 [ 261.251246][ T9854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.257180][ T9854] RIP: 0033:0x7fc4f8f85d29 [ 261.261630][ T9854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.281275][ T9854] RSP: 002b:00007fc4f9e4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 261.289730][ T9854] RAX: ffffffffffffffda RBX: 00007fc4f9175fa0 RCX: 00007fc4f8f85d29 [ 261.297738][ T9854] RDX: 0000000020000000 RSI: 00000000c0386105 RDI: 0000000000000003 [ 261.305744][ T9854] RBP: 00007fc4f9e4c090 R08: 0000000000000000 R09: 0000000000000000 [ 261.313752][ T9854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.321756][ T9854] R13: 0000000000000000 R14: 00007fc4f9175fa0 R15: 00007fff6faf2ae8 [ 261.329784][ T9854] [ 261.414894][ T9854] ERROR: Out of memory at tomoyo_realpath_from_path. [ 262.420945][ T9891] Invalid ELF header magic: != ELF [ 263.086613][ T9908] netlink: 12 bytes leftover after parsing attributes in process `syz.5.995'. [ 263.312537][ T9913] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 263.358298][ T9913] CIFS mount error: No usable UNC path provided in device string! [ 263.358298][ T9913] [ 263.374228][ T9913] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 263.609027][ T9908] nbd24: detected capacity change from 0 to 29696 [ 263.666537][ T5833] block nbd24: Send control failed (result -22) [ 263.679792][ T5833] block nbd24: Request send failed, requeueing [ 263.696528][ T53] block nbd24: Receive control failed (result -32) [ 263.696591][ T40] block nbd24: Dead connection, failed to find a fallback [ 263.696620][ T40] block nbd24: shutting down sockets [ 263.716682][ T40] blk_print_req_error: 58 callbacks suppressed [ 263.716700][ T40] I/O error, dev nbd24, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 263.738236][ T40] buffer_io_error: 56 callbacks suppressed [ 263.738254][ T40] Buffer I/O error on dev nbd24, logical block 0, async page read [ 263.752576][ T5833] I/O error, dev nbd24, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 263.762019][ T5833] Buffer I/O error on dev nbd24, logical block 0, async page read [ 263.772656][ T5833] I/O error, dev nbd24, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 263.912078][ T5833] Buffer I/O error on dev nbd24, logical block 0, async page read [ 263.948375][ T5833] I/O error, dev nbd24, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 263.975193][ T5833] Buffer I/O error on dev nbd24, logical block 0, async page read [ 264.008592][ T5833] I/O error, dev nbd24, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.025324][ T5833] Buffer I/O error on dev nbd24, logical block 0, async page read [ 264.043362][ T5833] I/O error, dev nbd24, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.078241][ T5833] Buffer I/O error on dev nbd24, logical block 0, async page read [ 264.110590][ T5833] I/O error, dev nbd24, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.173064][ T5833] Buffer I/O error on dev nbd24, logical block 0, async page read [ 264.208989][ T9932] block nbd9: NBD_DISCONNECT [ 264.214355][ T9932] block nbd9: Send disconnect failed -22 [ 264.221958][ T5833] I/O error, dev nbd24, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.248211][ T5833] Buffer I/O error on dev nbd24, logical block 0, async page read [ 264.256152][ T5833] ldm_validate_partition_table(): Disk read failed. [ 264.268302][ T5833] I/O error, dev nbd24, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.277655][ T5833] Buffer I/O error on dev nbd24, logical block 0, async page read [ 264.298028][ T5833] I/O error, dev nbd24, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 264.318459][ T5833] Buffer I/O error on dev nbd24, logical block 0, async page read [ 264.337316][ T5833] Dev nbd24: unable to read RDB block 0 [ 264.369465][ T5833] nbd24: unable to read partition table [ 264.414900][ T5833] ldm_validate_partition_table(): Disk read failed. [ 264.432523][ T5833] Dev nbd24: unable to read RDB block 0 [ 264.462996][ T5833] nbd24: unable to read partition table [ 266.368411][ T9996] netlink: 334 bytes leftover after parsing attributes in process `syz.1.1018'. [ 266.369059][ T9994] KVM: debugfs: duplicate directory 9994-3 [ 266.507178][ T9991] random: crng reseeded on system resumption [ 268.624739][T10038] netlink: 'syz.5.1031': attribute type 19 has an invalid length. [ 268.661680][T10036] netlink: 'syz.5.1031': attribute type 19 has an invalid length. [ 268.700262][T10038] netlink: 114 bytes leftover after parsing attributes in process `syz.5.1031'. [ 268.738296][T10036] netlink: 114 bytes leftover after parsing attributes in process `syz.5.1031'. [ 269.209142][T10049] netlink: 334 bytes leftover after parsing attributes in process `syz.2.1034'. [ 271.008895][T10089] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1047'. [ 271.795109][T10094] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1049'. [ 272.030655][T10099] netlink: 338 bytes leftover after parsing attributes in process `syz.1.1052'. [ 272.095268][T10102] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1048'. [ 272.400611][T10102] nbd9: detected capacity change from 0 to 29696 [ 272.435030][ T5833] block nbd9: Send control failed (result -22) [ 272.474401][ T5833] block nbd9: Request send failed, requeueing [ 272.514499][ T40] block nbd9: Dead connection, failed to find a fallback [ 272.522073][ T40] block nbd9: shutting down sockets [ 272.527318][ T40] blk_print_req_error: 24 callbacks suppressed [ 272.527337][ T40] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.543006][ T40] buffer_io_error: 23 callbacks suppressed [ 272.543023][ T40] Buffer I/O error on dev nbd9, logical block 0, async page read [ 272.578443][ T5833] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.635909][ T5833] Buffer I/O error on dev nbd9, logical block 0, async page read [ 272.701979][ T5833] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.768291][ T5833] Buffer I/O error on dev nbd9, logical block 0, async page read [ 272.778505][ T5833] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.787589][ T5833] Buffer I/O error on dev nbd9, logical block 0, async page read [ 272.823793][ T5833] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.842521][ T5833] Buffer I/O error on dev nbd9, logical block 0, async page read [ 272.850681][ T5833] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.865837][ T5833] Buffer I/O error on dev nbd9, logical block 0, async page read [ 272.874449][ T5833] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.883652][ T5833] Buffer I/O error on dev nbd9, logical block 0, async page read [ 272.900411][ T5833] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.929726][ T5833] Buffer I/O error on dev nbd9, logical block 0, async page read [ 272.948075][ T5833] ldm_validate_partition_table(): Disk read failed. [ 272.954907][ T5833] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 272.971706][ T5833] Buffer I/O error on dev nbd9, logical block 0, async page read [ 272.984055][T10125] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1059'. [ 272.988530][T10123] openvswitch: netlink: Tunnel attr 14 has unexpected len 4 expected 0 [ 272.993274][ T5833] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 273.024716][ T5833] Buffer I/O error on dev nbd9, logical block 0, async page read [ 273.036979][ T5833] Dev nbd9: unable to read RDB block 0 [ 273.047073][ T5833] nbd9: unable to read partition table [ 273.056429][ T5833] ldm_validate_partition_table(): Disk read failed. [ 273.070504][ T5833] Dev nbd9: unable to read RDB block 0 [ 273.098454][ T5833] nbd9: unable to read partition table [ 274.699558][T10150] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1066'. [ 275.059008][T10150] nbd25: detected capacity change from 0 to 29696 [ 275.115380][ T5833] block nbd25: Send control failed (result -22) [ 275.121972][ T5833] block nbd25: Request send failed, requeueing [ 275.129753][ T53] block nbd25: Receive control failed (result -32) [ 275.129890][ T98] block nbd25: Dead connection, failed to find a fallback [ 275.145362][ T98] block nbd25: shutting down sockets [ 275.152378][ T5833] ldm_validate_partition_table(): Disk read failed. [ 275.159934][ T5833] Dev nbd25: unable to read RDB block 0 [ 275.190572][ T5833] nbd25: unable to read partition table [ 275.252714][ T5833] ldm_validate_partition_table(): Disk read failed. [ 275.268384][ T5833] Dev nbd25: unable to read RDB block 0 [ 275.349128][ T5833] nbd25: unable to read partition table [ 276.481487][T10182] netlink: 'syz.6.1081': attribute type 5 has an invalid length. [ 276.498354][T10182] netlink: 314 bytes leftover after parsing attributes in process `syz.6.1081'. [ 276.632446][T10189] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1074'. [ 277.473326][T10206] block nbd9: NBD_DISCONNECT [ 277.478001][T10206] block nbd9: Send disconnect failed -22 [ 277.755420][ T29] audit: type=1807 audit(6030232486.742:5): UNKNOWN=$ res=0 [ 277.764137][T10212] ima: policy update failed [ 277.776223][ T29] audit: type=1802 audit(6030232486.762:6): pid=10212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=update_policy cause=invalid-policy comm="syz.6.1080" res=0 errno=0 [ 277.823577][ T29] audit: type=1802 audit(6030232486.762:7): pid=10212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.6.1080" res=0 errno=0 [ 277.854439][T10209] lo: entered promiscuous mode [ 277.861988][T10209] lo: left promiscuous mode [ 278.100614][T10219] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1083'. [ 280.602538][T10278] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1102'. [ 280.859379][T10283] netlink: 'syz.1.1104': attribute type 4 has an invalid length. [ 280.867168][T10283] netlink: 314 bytes leftover after parsing attributes in process `syz.1.1104'. [ 281.476686][T10306] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1111'. [ 282.859216][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'. [ 282.902332][T10333] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1121'. [ 283.106990][T10337] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1122'. [ 283.459067][T10347] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1126'. [ 285.104315][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1134'. [ 285.168801][T10380] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1134'. [ 289.554359][T10472] netlink: 330 bytes leftover after parsing attributes in process `syz.5.1162'. [ 290.204612][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1165'. [ 290.286046][T10481] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1165'. [ 290.385178][T10482] Invalid ELF header magic: != ELF [ 290.901993][T10497] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1171'. [ 292.199247][T10534] FAULT_INJECTION: forcing a failure. [ 292.199247][T10534] name failslab, interval 1, probability 0, space 0, times 0 [ 292.263220][T10534] CPU: 0 UID: 0 PID: 10534 Comm: syz.6.1179 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 292.274055][T10534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 292.284162][T10534] Call Trace: [ 292.287467][T10534] [ 292.290430][T10534] dump_stack_lvl+0x16c/0x1f0 [ 292.295149][T10534] should_fail_ex+0x497/0x5b0 [ 292.299885][T10534] ? fs_reclaim_acquire+0xae/0x150 [ 292.305037][T10534] should_failslab+0xc2/0x120 [ 292.309756][T10534] __kmalloc_noprof+0xce/0x4f0 [ 292.314554][T10534] ? d_absolute_path+0x137/0x1b0 [ 292.319553][T10534] ? tomoyo_encode2+0x100/0x3e0 [ 292.324458][T10534] tomoyo_encode2+0x100/0x3e0 [ 292.329170][T10534] tomoyo_realpath_from_path+0x1a7/0x710 [ 292.334848][T10534] tomoyo_path_number_perm+0x248/0x5b0 [ 292.340350][T10534] ? tomoyo_path_number_perm+0x235/0x5b0 [ 292.346030][T10534] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 292.352089][T10534] ? __pfx_lock_release+0x10/0x10 [ 292.357142][T10534] ? trace_lock_acquire+0x14e/0x1f0 [ 292.362384][T10534] ? lock_acquire+0x2f/0xb0 [ 292.366914][T10534] ? __fget_files+0x40/0x3a0 [ 292.371541][T10534] ? __fget_files+0x206/0x3a0 [ 292.376254][T10534] security_file_ioctl+0x9b/0x240 [ 292.381318][T10534] __x64_sys_ioctl+0xb7/0x200 [ 292.386033][T10534] do_syscall_64+0xcd/0x250 [ 292.390577][T10534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 292.396504][T10534] RIP: 0033:0x7f9e0df85d29 [ 292.400949][T10534] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 292.420597][T10534] RSP: 002b:00007f9e0ed98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 292.429054][T10534] RAX: ffffffffffffffda RBX: 00007f9e0e175fa0 RCX: 00007f9e0df85d29 [ 292.437059][T10534] RDX: 0000000020000000 RSI: 00000000c0386105 RDI: 0000000000000003 [ 292.445065][T10534] RBP: 00007f9e0ed98090 R08: 0000000000000000 R09: 0000000000000000 [ 292.453068][T10534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 292.461066][T10534] R13: 0000000000000000 R14: 00007f9e0e175fa0 R15: 00007fffaa31d838 [ 292.469087][T10534] [ 292.485016][T10534] ERROR: Out of memory at tomoyo_realpath_from_path. [ 293.101069][T10554] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1186'. [ 293.248241][T10554] hsr_slave_0: left promiscuous mode [ 293.371814][T10554] hsr_slave_1: left promiscuous mode [ 294.874168][T10593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1203'. [ 294.909670][T10593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1203'. [ 295.705456][T10623] FAULT_INJECTION: forcing a failure. [ 295.705456][T10623] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 295.738407][T10623] CPU: 0 UID: 0 PID: 10623 Comm: syz.5.1212 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 295.749239][T10623] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 295.759337][T10623] Call Trace: [ 295.762634][T10623] [ 295.765586][T10623] dump_stack_lvl+0x16c/0x1f0 [ 295.770318][T10623] should_fail_ex+0x497/0x5b0 [ 295.775030][T10623] ? fs_reclaim_acquire+0xae/0x150 [ 295.780178][T10623] should_fail_alloc_page+0xe7/0x130 [ 295.785506][T10623] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 295.791696][T10623] ? __pfx_mark_lock+0x10/0x10 [ 295.796530][T10623] __alloc_pages_noprof+0x190/0x25b0 [ 295.801869][T10623] ? hlock_class+0x4e/0x130 [ 295.806427][T10623] ? mark_lock+0xb5/0xc60 [ 295.810801][T10623] ? hlock_class+0x4e/0x130 [ 295.815346][T10623] ? __lock_acquire+0xcc5/0x3c40 [ 295.820325][T10623] ? __pfx_mark_lock+0x10/0x10 [ 295.825131][T10623] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 295.830905][T10623] ? hlock_class+0x4e/0x130 [ 295.835457][T10623] ? hlock_class+0x4e/0x130 [ 295.839994][T10623] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 295.845902][T10623] ? policy_nodemask+0xea/0x4e0 [ 295.850769][T10623] alloc_pages_mpol_noprof+0x2c9/0x610 [ 295.856245][T10623] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 295.862237][T10623] ? __pfx___lock_acquire+0x10/0x10 [ 295.867440][T10623] ? lock_acquire+0x2f/0xb0 [ 295.871946][T10623] ? is_bpf_text_address+0x30/0x1a0 [ 295.877162][T10623] pte_alloc_one+0x20/0x390 [ 295.881670][T10623] do_pte_missing+0x1ae7/0x3e00 [ 295.886539][T10623] __handle_mm_fault+0x103c/0x2a40 [ 295.891667][T10623] ? __pfx___handle_mm_fault+0x10/0x10 [ 295.897131][T10623] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 295.902780][T10623] ? find_vma+0xc0/0x140 [ 295.907029][T10623] ? __pfx_find_vma+0x10/0x10 [ 295.911715][T10623] handle_mm_fault+0x3fa/0xaa0 [ 295.916493][T10623] do_user_addr_fault+0x7a3/0x13f0 [ 295.921616][T10623] exc_page_fault+0x5c/0xc0 [ 295.926133][T10623] asm_exc_page_fault+0x26/0x30 [ 295.930992][T10623] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 295.936816][T10623] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 295.956452][T10623] RSP: 0018:ffffc90003bc77e8 EFLAGS: 00050206 [ 295.962533][T10623] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 00000000000000c4 [ 295.970511][T10623] RDX: ffffed100bf9ab19 RSI: 0000000000000000 RDI: ffff88805fcd5800 [ 295.978483][T10623] RBP: ffffc90003bc7d60 R08: 0000000000000001 R09: ffffed100bf9ab18 [ 295.986454][T10623] R10: ffff88805fcd58c3 R11: 0000000000000000 R12: 00000000000000c4 [ 295.994424][T10623] R13: 00007ffffffff000 R14: ffff88805fcd5800 R15: 00000000000000c4 [ 296.002412][T10623] _copy_from_iter+0x384/0x1400 [ 296.007279][T10623] ? trace_lock_acquire+0x14e/0x1f0 [ 296.012485][T10623] ? __alloc_skb+0x200/0x380 [ 296.017084][T10623] ? __pfx__copy_from_iter+0x10/0x10 [ 296.022382][T10623] ? __virt_addr_valid+0x1a4/0x590 [ 296.027505][T10623] ? __virt_addr_valid+0x5e/0x590 [ 296.032537][T10623] ? __phys_addr_symbol+0x30/0x80 [ 296.037567][T10623] ? __check_object_size+0x488/0x710 [ 296.042874][T10623] netlink_sendmsg+0x813/0xd70 [ 296.047651][T10623] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.052950][T10623] ____sys_sendmsg+0x9ae/0xb40 [ 296.057718][T10623] ? copy_msghdr_from_user+0x10b/0x160 [ 296.063187][T10623] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.068473][T10623] ? __lock_acquire+0xcc5/0x3c40 [ 296.073423][T10623] ___sys_sendmsg+0x135/0x1e0 [ 296.078136][T10623] ? __pfx____sys_sendmsg+0x10/0x10 [ 296.083390][T10623] ? trace_lock_acquire+0x14e/0x1f0 [ 296.088622][T10623] __sys_sendmmsg+0x201/0x420 [ 296.093318][T10623] ? __pfx___sys_sendmmsg+0x10/0x10 [ 296.098541][T10623] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 296.104539][T10623] ? fput+0x67/0x440 [ 296.108448][T10623] ? ksys_write+0x1ba/0x250 [ 296.112958][T10623] ? __pfx_ksys_write+0x10/0x10 [ 296.117816][T10623] __x64_sys_sendmmsg+0x9c/0x100 [ 296.122764][T10623] ? lockdep_hardirqs_on+0x7c/0x110 [ 296.128000][T10623] do_syscall_64+0xcd/0x250 [ 296.132534][T10623] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.138444][T10623] RIP: 0033:0x7f4aa3d85d29 [ 296.142870][T10623] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.162492][T10623] RSP: 002b:00007f4aa4c95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 296.170922][T10623] RAX: ffffffffffffffda RBX: 00007f4aa3f75fa0 RCX: 00007f4aa3d85d29 [ 296.178897][T10623] RDX: 0000000000000003 RSI: 0000000020000080 RDI: 0000000000000003 [ 296.186865][T10623] RBP: 00007f4aa4c95090 R08: 0000000000000000 R09: 0000000000000000 [ 296.194836][T10623] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.202807][T10623] R13: 0000000000000000 R14: 00007f4aa3f75fa0 R15: 00007ffdcace4c98 [ 296.210815][T10623] [ 296.213864][ C0] vkms_vblank_simulate: vblank timer overrun [ 296.506682][T10626] Invalid ELF header magic: != ELF [ 296.879269][T10634] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1214'. [ 297.238249][T10634] nbd9: detected capacity change from 0 to 29696 [ 297.245965][ T5833] block nbd9: Send control failed (result -22) [ 297.276823][ T5833] block nbd9: Request send failed, requeueing [ 297.296012][ T53] block nbd9: Receive control failed (result -32) [ 297.313625][ T40] block nbd9: Dead connection, failed to find a fallback [ 297.320774][ T40] block nbd9: shutting down sockets [ 297.326050][ T40] blk_print_req_error: 58 callbacks suppressed [ 297.326067][ T40] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.341603][ T40] buffer_io_error: 56 callbacks suppressed [ 297.341618][ T40] Buffer I/O error on dev nbd9, logical block 0, async page read [ 297.378717][ T5833] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.387822][ T5833] Buffer I/O error on dev nbd9, logical block 0, async page read [ 297.395917][ T5833] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.405156][ T5833] Buffer I/O error on dev nbd9, logical block 0, async page read [ 297.413145][ T5833] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.422349][ T5833] Buffer I/O error on dev nbd9, logical block 0, async page read [ 297.430320][ T5833] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.439518][ T5833] Buffer I/O error on dev nbd9, logical block 0, async page read [ 297.447458][ T5833] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.456929][ T5833] Buffer I/O error on dev nbd9, logical block 0, async page read [ 297.465547][ T5833] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.475399][ T5833] Buffer I/O error on dev nbd9, logical block 0, async page read [ 297.483439][ T5833] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.492666][ T5833] Buffer I/O error on dev nbd9, logical block 0, async page read [ 297.500566][ T5833] ldm_validate_partition_table(): Disk read failed. [ 297.507375][ T5833] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.524495][ T5833] Buffer I/O error on dev nbd9, logical block 0, async page read [ 297.562351][ T5833] I/O error, dev nbd9, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 297.581113][ T5833] Buffer I/O error on dev nbd9, logical block 0, async page read [ 297.593230][ T5833] Dev nbd9: unable to read RDB block 0 [ 297.600698][ T5833] nbd9: unable to read partition table [ 297.632030][ T5833] ldm_validate_partition_table(): Disk read failed. [ 297.642028][ T5833] Dev nbd9: unable to read RDB block 0 [ 297.653705][ T5833] nbd9: unable to read partition table [ 297.856841][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'. [ 297.893638][T10648] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'. [ 299.066411][T10676] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1230'. [ 299.101043][T10675] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1232'. [ 299.138604][T10675] hsr_slave_0: left promiscuous mode [ 299.233230][T10675] hsr_slave_1: left promiscuous mode [ 299.446315][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1235'. [ 299.459655][T10684] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1235'. [ 299.528811][T10676] nbd26: detected capacity change from 0 to 29696 [ 299.613145][ T5833] block nbd26: Send control failed (result -22) [ 299.628504][ T5833] block nbd26: Request send failed, requeueing [ 299.653574][ T98] block nbd26: Dead connection, failed to find a fallback [ 299.661063][ T98] block nbd26: shutting down sockets [ 299.668067][ T5833] ldm_validate_partition_table(): Disk read failed. [ 299.686276][ T5833] Dev nbd26: unable to read RDB block 0 [ 299.693321][ T5833] nbd26: unable to read partition table [ 299.719307][ T5833] ldm_validate_partition_table(): Disk read failed. [ 299.729054][ T5833] Dev nbd26: unable to read RDB block 0 [ 299.735106][ T5833] nbd26: unable to read partition table [ 300.353995][T10708] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1242'. [ 301.985146][T10752] FAULT_INJECTION: forcing a failure. [ 301.985146][T10752] name failslab, interval 1, probability 0, space 0, times 0 [ 302.027972][T10752] CPU: 0 UID: 0 PID: 10752 Comm: syz.2.1255 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 302.038806][T10752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 302.048900][T10752] Call Trace: [ 302.052205][T10752] [ 302.055170][T10752] dump_stack_lvl+0x16c/0x1f0 [ 302.059888][T10752] should_fail_ex+0x497/0x5b0 [ 302.064610][T10752] should_failslab+0xc2/0x120 [ 302.069330][T10752] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 302.074746][T10752] ? skb_clone+0x190/0x3f0 [ 302.079214][T10752] skb_clone+0x190/0x3f0 [ 302.083508][T10752] netlink_deliver_tap+0xafd/0xca0 [ 302.088667][T10752] netlink_unicast+0x5e1/0x7f0 [ 302.093484][T10752] ? __pfx_netlink_unicast+0x10/0x10 [ 302.098810][T10752] ? __phys_addr_symbol+0x30/0x80 [ 302.103876][T10752] ? __check_object_size+0x488/0x710 [ 302.109216][T10752] netlink_sendmsg+0x8b8/0xd70 [ 302.114045][T10752] ? __pfx_netlink_sendmsg+0x10/0x10 [ 302.119377][T10752] ____sys_sendmsg+0x9ae/0xb40 [ 302.124175][T10752] ? copy_msghdr_from_user+0x10b/0x160 [ 302.129683][T10752] ? __pfx_____sys_sendmsg+0x10/0x10 [ 302.131578][T10755] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1256'. [ 302.134984][T10752] ? __lock_acquire+0xcc5/0x3c40 [ 302.135029][T10752] ___sys_sendmsg+0x135/0x1e0 [ 302.153613][T10752] ? __pfx____sys_sendmsg+0x10/0x10 [ 302.158887][T10752] ? trace_lock_acquire+0x14e/0x1f0 [ 302.164160][T10752] __sys_sendmmsg+0x201/0x420 [ 302.168894][T10752] ? __pfx___sys_sendmmsg+0x10/0x10 [ 302.174155][T10752] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 302.180202][T10752] ? fput+0x67/0x440 [ 302.184141][T10752] ? ksys_write+0x1ba/0x250 [ 302.188683][T10752] ? __pfx_ksys_write+0x10/0x10 [ 302.193586][T10752] __x64_sys_sendmmsg+0x9c/0x100 [ 302.198567][T10752] ? lockdep_hardirqs_on+0x7c/0x110 [ 302.203799][T10752] do_syscall_64+0xcd/0x250 [ 302.208347][T10752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.214282][T10752] RIP: 0033:0x7fc4f8f85d29 [ 302.218729][T10752] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 302.238386][T10752] RSP: 002b:00007fc4f9e4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 302.246844][T10752] RAX: ffffffffffffffda RBX: 00007fc4f9175fa0 RCX: 00007fc4f8f85d29 [ 302.254850][T10752] RDX: 0000000000000003 RSI: 0000000020000080 RDI: 0000000000000003 [ 302.262864][T10752] RBP: 00007fc4f9e4c090 R08: 0000000000000000 R09: 0000000000000000 [ 302.270874][T10752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.278883][T10752] R13: 0000000000000000 R14: 00007fc4f9175fa0 R15: 00007fff6faf2ae8 [ 302.286905][T10752] [ 302.290046][ C0] vkms_vblank_simulate: vblank timer overrun [ 302.747928][T10772] FAULT_INJECTION: forcing a failure. [ 302.747928][T10772] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 302.788984][T10772] CPU: 1 UID: 0 PID: 10772 Comm: syz.1.1262 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 302.799818][T10772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 302.809907][T10772] Call Trace: [ 302.813211][T10772] [ 302.816174][T10772] dump_stack_lvl+0x16c/0x1f0 [ 302.820901][T10772] should_fail_ex+0x497/0x5b0 [ 302.825620][T10772] _copy_to_user+0x32/0xd0 [ 302.830087][T10772] simple_read_from_buffer+0xd0/0x160 [ 302.835493][T10772] proc_fail_nth_read+0x198/0x270 [ 302.840563][T10772] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.846155][T10772] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 302.851746][T10772] vfs_read+0x1df/0xbe0 [ 302.855940][T10772] ? __fget_files+0x1fc/0x3a0 [ 302.860662][T10772] ? __pfx___mutex_lock+0x10/0x10 [ 302.865734][T10772] ? __pfx_vfs_read+0x10/0x10 [ 302.870464][T10772] ? __fget_files+0x206/0x3a0 [ 302.875190][T10772] ksys_read+0x12b/0x250 [ 302.879464][T10772] ? __pfx_ksys_read+0x10/0x10 [ 302.884277][T10772] do_syscall_64+0xcd/0x250 [ 302.888829][T10772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 302.894758][T10772] RIP: 0033:0x7f978458473c [ 302.899203][T10772] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 302.918849][T10772] RSP: 002b:00007f97853ca030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 302.927305][T10772] RAX: ffffffffffffffda RBX: 00007f9784776080 RCX: 00007f978458473c [ 302.935319][T10772] RDX: 000000000000000f RSI: 00007f97853ca0a0 RDI: 0000000000000003 [ 302.943330][T10772] RBP: 00007f97853ca090 R08: 0000000000000000 R09: 0000000000000000 [ 302.951338][T10772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 302.959346][T10772] R13: 0000000000000000 R14: 00007f9784776080 R15: 00007ffd4d06d538 [ 302.967367][T10772] [ 303.492246][T10795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1267'. [ 303.507163][T10795] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1267'. [ 303.672455][T10785] Invalid ELF header magic: != ELF [ 304.037721][T10814] FAULT_INJECTION: forcing a failure. [ 304.037721][T10814] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 304.051271][T10814] CPU: 1 UID: 0 PID: 10814 Comm: syz.2.1274 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 304.062088][T10814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 304.072177][T10814] Call Trace: [ 304.075489][T10814] [ 304.078457][T10814] dump_stack_lvl+0x16c/0x1f0 [ 304.083186][T10814] should_fail_ex+0x497/0x5b0 [ 304.087908][T10814] _copy_from_user+0x2e/0xd0 [ 304.092545][T10814] copy_msghdr_from_user+0x99/0x160 [ 304.097790][T10814] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 304.103640][T10814] ? __lock_acquire+0xcc5/0x3c40 [ 304.108623][T10814] ? hlock_class+0x4e/0x130 [ 304.113161][T10814] ? __lock_acquire+0x15a9/0x3c40 [ 304.118216][T10814] ___sys_sendmsg+0xff/0x1e0 [ 304.122856][T10814] ? __pfx____sys_sendmsg+0x10/0x10 [ 304.128095][T10814] ? __pfx___lock_acquire+0x10/0x10 [ 304.133357][T10814] ? __pfx___might_resched+0x10/0x10 [ 304.138679][T10814] ? __might_fault+0xe3/0x190 [ 304.143409][T10814] __sys_sendmmsg+0x201/0x420 [ 304.148132][T10814] ? __pfx___sys_sendmmsg+0x10/0x10 [ 304.153385][T10814] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 304.159419][T10814] ? fput+0x67/0x440 [ 304.163351][T10814] ? ksys_write+0x1ba/0x250 [ 304.167886][T10814] ? __pfx_ksys_write+0x10/0x10 [ 304.172776][T10814] __x64_sys_sendmmsg+0x9c/0x100 [ 304.177750][T10814] ? lockdep_hardirqs_on+0x7c/0x110 [ 304.182983][T10814] do_syscall_64+0xcd/0x250 [ 304.187526][T10814] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.193455][T10814] RIP: 0033:0x7fc4f8f85d29 [ 304.197896][T10814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 304.217538][T10814] RSP: 002b:00007fc4f9e4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 304.225985][T10814] RAX: ffffffffffffffda RBX: 00007fc4f9175fa0 RCX: 00007fc4f8f85d29 [ 304.233989][T10814] RDX: 0000000000000003 RSI: 0000000020000080 RDI: 0000000000000003 [ 304.241987][T10814] RBP: 00007fc4f9e4c090 R08: 0000000000000000 R09: 0000000000000000 [ 304.249986][T10814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 304.257990][T10814] R13: 0000000000000000 R14: 00007fc4f9175fa0 R15: 00007fff6faf2ae8 [ 304.266007][T10814] [ 305.289977][T10848] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1280'. [ 305.601789][T10848] nbd27: detected capacity change from 0 to 29696 [ 305.656526][ T5833] block nbd27: Send control failed (result -22) [ 305.663626][ T5833] block nbd27: Request send failed, requeueing [ 305.670612][ T53] block nbd27: Receive control failed (result -32) [ 305.670708][ T40] block nbd27: Dead connection, failed to find a fallback [ 305.684793][ T40] block nbd27: shutting down sockets [ 305.690249][ T40] blk_print_req_error: 58 callbacks suppressed [ 305.690268][ T40] I/O error, dev nbd27, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 305.705876][ T40] buffer_io_error: 56 callbacks suppressed [ 305.705892][ T40] Buffer I/O error on dev nbd27, logical block 0, async page read [ 305.719920][ T5833] I/O error, dev nbd27, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 305.729226][ T5833] Buffer I/O error on dev nbd27, logical block 0, async page read [ 305.737225][ T5833] I/O error, dev nbd27, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 305.746560][ T5833] Buffer I/O error on dev nbd27, logical block 0, async page read [ 305.754617][ T5833] I/O error, dev nbd27, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 305.764102][ T5833] Buffer I/O error on dev nbd27, logical block 0, async page read [ 305.772929][ T5833] I/O error, dev nbd27, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 305.782275][ T5833] Buffer I/O error on dev nbd27, logical block 0, async page read [ 305.790347][ T5833] I/O error, dev nbd27, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 305.799568][ T5833] Buffer I/O error on dev nbd27, logical block 0, async page read [ 305.807572][ T5833] I/O error, dev nbd27, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 305.816832][ T5833] Buffer I/O error on dev nbd27, logical block 0, async page read [ 305.824866][ T5833] I/O error, dev nbd27, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 305.834097][ T5833] Buffer I/O error on dev nbd27, logical block 0, async page read [ 305.842085][ T5833] ldm_validate_partition_table(): Disk read failed. [ 305.848810][ T5833] I/O error, dev nbd27, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 305.857991][ T5833] Buffer I/O error on dev nbd27, logical block 0, async page read [ 305.876338][ T5833] I/O error, dev nbd27, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 305.898240][ T5833] Buffer I/O error on dev nbd27, logical block 0, async page read [ 305.906387][ T5833] Dev nbd27: unable to read RDB block 0 [ 305.939840][ T5833] nbd27: unable to read partition table [ 305.970978][ T5833] ldm_validate_partition_table(): Disk read failed. [ 305.978044][ T5833] Dev nbd27: unable to read RDB block 0 [ 306.027710][ T5833] nbd27: unable to read partition table [ 306.843755][T10874] device-mapper: ioctl: Invalid ioctl structure: uuid , name , dev 20008000000006 [ 306.978450][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1290'. [ 307.058339][T10876] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1290'. [ 308.039140][T10889] mkiss: ax0: crc mode is auto. [ 308.702611][T10903] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1300'. [ 310.032264][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1307'. [ 310.043030][T10930] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1307'. [ 311.420026][T10953] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 311.518202][T10953] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 311.609388][T10957] netlink: 330 bytes leftover after parsing attributes in process `syz.6.1316'. [ 311.665329][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1319'. [ 311.761763][T10965] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1319'. [ 313.222278][T11001] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1328'. [ 314.097204][T11001] nbd28: detected capacity change from 0 to 29696 [ 314.196746][ T5833] block nbd28: Send control failed (result -22) [ 314.232941][ T5833] block nbd28: Request send failed, requeueing [ 314.253008][ T53] block nbd28: Receive control failed (result -32) [ 314.253076][ T40] block nbd28: Dead connection, failed to find a fallback [ 314.253098][ T40] block nbd28: shutting down sockets [ 314.278190][ T40] blk_print_req_error: 24 callbacks suppressed [ 314.278210][ T40] I/O error, dev nbd28, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 314.293787][ T40] buffer_io_error: 23 callbacks suppressed [ 314.293804][ T40] Buffer I/O error on dev nbd28, logical block 0, async page read [ 314.308830][ T5833] I/O error, dev nbd28, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 314.317992][ T5833] Buffer I/O error on dev nbd28, logical block 0, async page read [ 314.326349][ T5833] I/O error, dev nbd28, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 314.335866][ T5833] Buffer I/O error on dev nbd28, logical block 0, async page read [ 314.344185][ T5833] I/O error, dev nbd28, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 314.353628][ T5833] Buffer I/O error on dev nbd28, logical block 0, async page read [ 314.362926][ T5833] I/O error, dev nbd28, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 314.372619][ T5833] Buffer I/O error on dev nbd28, logical block 0, async page read [ 314.381077][ T5833] I/O error, dev nbd28, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 314.390318][ T5833] Buffer I/O error on dev nbd28, logical block 0, async page read [ 314.398346][ T5833] I/O error, dev nbd28, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 314.407513][ T5833] Buffer I/O error on dev nbd28, logical block 0, async page read [ 314.415584][ T5833] I/O error, dev nbd28, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 314.424916][ T5833] Buffer I/O error on dev nbd28, logical block 0, async page read [ 314.432950][ T5833] ldm_validate_partition_table(): Disk read failed. [ 314.439729][ T5833] I/O error, dev nbd28, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 314.448939][ T5833] Buffer I/O error on dev nbd28, logical block 0, async page read [ 314.456917][ T5833] I/O error, dev nbd28, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 314.466209][ T5833] Buffer I/O error on dev nbd28, logical block 0, async page read [ 314.474811][ T5833] Dev nbd28: unable to read RDB block 0 [ 314.481285][ T5833] nbd28: unable to read partition table [ 314.496010][ T5833] ldm_validate_partition_table(): Disk read failed. [ 314.507830][ T5833] Dev nbd28: unable to read RDB block 0 [ 314.522907][ T5833] nbd28: unable to read partition table [ 314.748381][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1334'. [ 314.825006][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1334'. [ 316.017931][T11067] ubi0: attaching mtd0 [ 316.115527][T11067] ubi0: scanning is finished [ 316.172747][T11067] ubi0: empty MTD device detected [ 316.175970][T11070] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !PjE r҄y*"l-y– [ 316.195247][T11067] ubi0 error: ubi_read_volume_table: LEB size too small for a volume record [ 316.512401][T11067] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 316.969976][T11086] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1348'. [ 317.221969][T11092] Invalid ELF header magic: != ELF [ 317.548026][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.554615][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.140061][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1353'. [ 318.174881][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1353'. [ 319.243918][T11128] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1362'. [ 319.684991][T11146] FAULT_INJECTION: forcing a failure. [ 319.684991][T11146] name failslab, interval 1, probability 0, space 0, times 0 [ 319.751162][T11146] CPU: 0 UID: 0 PID: 11146 Comm: syz.5.1366 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 319.761996][T11146] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 319.772091][T11146] Call Trace: [ 319.775390][T11146] [ 319.778345][T11146] dump_stack_lvl+0x16c/0x1f0 [ 319.783065][T11146] should_fail_ex+0x497/0x5b0 [ 319.787786][T11146] ? fs_reclaim_acquire+0xae/0x150 [ 319.792943][T11146] should_failslab+0xc2/0x120 [ 319.797669][T11146] __kmalloc_cache_noprof+0x68/0x420 [ 319.802997][T11146] ? seq_printf+0x11c/0x250 [ 319.807574][T11146] ? __pfx_cgroup_show_path+0x10/0x10 [ 319.812989][T11146] cgroup_show_path+0xb2/0x6c0 [ 319.817798][T11146] ? __pfx_cgroup_show_path+0x10/0x10 [ 319.823216][T11146] kernfs_sop_show_path+0x12b/0x1b0 [ 319.828459][T11146] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 319.834227][T11146] show_path+0x9b/0x100 [ 319.838428][T11146] show_mountinfo+0x1d5/0x840 [ 319.843143][T11146] ? __kmalloc_node_noprof+0x23d/0x520 [ 319.848649][T11146] ? __pfx_show_mountinfo+0x10/0x10 [ 319.853889][T11146] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 319.859397][T11146] seq_read_iter+0xb19/0x12b0 [ 319.864126][T11146] do_iter_readv_writev+0x614/0x7f0 [ 319.869367][T11146] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 319.875138][T11146] vfs_readv+0x4cf/0x890 [ 319.879417][T11146] ? fdget_pos+0x267/0x390 [ 319.883886][T11146] ? __pfx_vfs_readv+0x10/0x10 [ 319.888696][T11146] ? __mutex_lock+0x1cc/0xa60 [ 319.893416][T11146] ? find_held_lock+0x2d/0x110 [ 319.898228][T11146] ? __pfx___mutex_lock+0x10/0x10 [ 319.903293][T11146] ? trace_lock_acquire+0x14e/0x1f0 [ 319.908554][T11146] ? __fget_files+0x206/0x3a0 [ 319.913288][T11146] ? do_readv+0x133/0x340 [ 319.917650][T11146] do_readv+0x133/0x340 [ 319.921850][T11146] ? __pfx_do_readv+0x10/0x10 [ 319.926586][T11146] do_syscall_64+0xcd/0x250 [ 319.931131][T11146] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 319.937066][T11146] RIP: 0033:0x7f4aa3d85d29 [ 319.941510][T11146] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 319.961155][T11146] RSP: 002b:00007f4aa4c95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 319.969613][T11146] RAX: ffffffffffffffda RBX: 00007f4aa3f75fa0 RCX: 00007f4aa3d85d29 [ 319.977630][T11146] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000003 [ 319.985639][T11146] RBP: 00007f4aa4c95090 R08: 0000000000000000 R09: 0000000000000000 [ 319.993650][T11146] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 320.001657][T11146] R13: 0000000000000000 R14: 00007f4aa3f75fa0 R15: 00007ffdcace4c98 [ 320.009698][T11146] [ 320.158378][T11153] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1369'. [ 320.364626][T11153] nbd29: detected capacity change from 0 to 29696 [ 320.417031][ T5833] block nbd29: Send control failed (result -22) [ 320.428234][ T5833] block nbd29: Request send failed, requeueing [ 320.442642][ T53] block nbd29: Receive control failed (result -32) [ 320.458425][ T98] block nbd29: Dead connection, failed to find a fallback [ 320.465717][ T98] block nbd29: shutting down sockets [ 320.471073][ T98] blk_print_req_error: 24 callbacks suppressed [ 320.471089][ T98] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.489241][ T98] buffer_io_error: 23 callbacks suppressed [ 320.489258][ T98] Buffer I/O error on dev nbd29, logical block 0, async page read [ 320.504154][ T5833] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.514403][ T5833] Buffer I/O error on dev nbd29, logical block 0, async page read [ 320.523463][ T5833] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.532681][ T5833] Buffer I/O error on dev nbd29, logical block 0, async page read [ 320.540751][ T5833] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.549953][ T5833] Buffer I/O error on dev nbd29, logical block 0, async page read [ 320.557936][ T5833] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.567184][ T5833] Buffer I/O error on dev nbd29, logical block 0, async page read [ 320.575420][ T5833] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.584720][ T5833] Buffer I/O error on dev nbd29, logical block 0, async page read [ 320.592798][ T5833] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.602023][ T5833] Buffer I/O error on dev nbd29, logical block 0, async page read [ 320.610036][ T5833] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.620187][ T5833] Buffer I/O error on dev nbd29, logical block 0, async page read [ 320.628099][ T5833] ldm_validate_partition_table(): Disk read failed. [ 320.635603][ T5833] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.645190][ T5833] Buffer I/O error on dev nbd29, logical block 0, async page read [ 320.653535][ T5833] I/O error, dev nbd29, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 320.662937][ T5833] Buffer I/O error on dev nbd29, logical block 0, async page read [ 320.671135][ T5833] Dev nbd29: unable to read RDB block 0 [ 320.677167][ T5833] nbd29: unable to read partition table [ 320.686000][ T5833] ldm_validate_partition_table(): Disk read failed. [ 320.693101][ T5833] Dev nbd29: unable to read RDB block 0 [ 320.699282][ T5833] nbd29: unable to read partition table [ 321.656897][T11183] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1377'. [ 321.946043][T11187] sp0: Synchronizing with TNC [ 322.178827][T11183] nbd30: detected capacity change from 0 to 29696 [ 322.216373][ T5833] block nbd30: Send control failed (result -22) [ 322.223889][ T5833] block nbd30: Request send failed, requeueing [ 322.235915][ T53] block nbd30: Receive control failed (result -32) [ 322.236006][ T40] block nbd30: Dead connection, failed to find a fallback [ 322.250670][ T40] block nbd30: shutting down sockets [ 322.265797][ T5833] ldm_validate_partition_table(): Disk read failed. [ 322.275041][ T5833] Dev nbd30: unable to read RDB block 0 [ 322.285537][ T5833] nbd30: unable to read partition table [ 322.295762][ T5833] ldm_validate_partition_table(): Disk read failed. [ 322.306798][ T5833] Dev nbd30: unable to read RDB block 0 [ 322.314248][ T5833] nbd30: unable to read partition table [ 322.395722][T11196] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1380'. [ 324.067933][T11241] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1395'. [ 324.143509][T11244] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1395'. [ 324.212817][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1397'. [ 324.245823][T11246] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1397'. [ 324.482090][T11254] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1399'. [ 325.067323][T11254] nbd31: detected capacity change from 0 to 29696 [ 325.142169][ T5833] block nbd31: Send control failed (result -22) [ 325.196306][ T5833] block nbd31: Request send failed, requeueing [ 325.228443][ T40] block nbd31: Dead connection, failed to find a fallback [ 325.235619][ T40] block nbd31: shutting down sockets [ 325.241796][ T5833] ldm_validate_partition_table(): Disk read failed. [ 325.265384][ T5833] Dev nbd31: unable to read RDB block 0 [ 325.271823][ T5833] nbd31: unable to read partition table [ 325.309355][ T5833] ldm_validate_partition_table(): Disk read failed. [ 325.316428][ T5833] Dev nbd31: unable to read RDB block 0 [ 325.340342][ T5833] nbd31: unable to read partition table [ 325.381344][ T5833] ldm_validate_partition_table(): Disk read failed. [ 325.398631][ T5833] Dev nbd31: unable to read RDB block 0 [ 325.404712][ T5833] nbd31: unable to read partition table [ 325.436766][ T5833] ldm_validate_partition_table(): Disk read failed. [ 325.488278][ T5833] blk_print_req_error: 116 callbacks suppressed [ 325.488299][ T5833] I/O error, dev nbd31, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.526361][ T5833] buffer_io_error: 113 callbacks suppressed [ 325.526380][ T5833] Buffer I/O error on dev nbd31, logical block 0, async page read [ 325.580521][ T5833] I/O error, dev nbd31, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.594681][ T5833] Buffer I/O error on dev nbd31, logical block 0, async page read [ 325.608347][ T5833] I/O error, dev nbd31, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.623326][ T5833] Buffer I/O error on dev nbd31, logical block 0, async page read [ 325.644857][ T5833] I/O error, dev nbd31, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.658175][ T5833] Buffer I/O error on dev nbd31, logical block 0, async page read [ 325.676384][ T5833] Dev nbd31: unable to read RDB block 0 [ 325.682214][ T5833] I/O error, dev nbd31, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.747919][ T5833] Buffer I/O error on dev nbd31, logical block 0, async page read [ 325.768380][ T5833] I/O error, dev nbd31, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.777648][ T5833] Buffer I/O error on dev nbd31, logical block 3, async page read [ 325.820310][T11282] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1405'. [ 325.829585][ T5833] I/O error, dev nbd31, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.875675][ T5833] Buffer I/O error on dev nbd31, logical block 0, async page read [ 325.904454][ T5833] I/O error, dev nbd31, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 325.933061][ T5833] Buffer I/O error on dev nbd31, logical block 0, async page read [ 325.947850][T11284] FAULT_INJECTION: forcing a failure. [ 325.947850][T11284] name failslab, interval 1, probability 0, space 0, times 0 [ 325.968458][ T5833] nbd31: unable to read partition table [ 325.989567][ T5833] I/O error, dev nbd31, sector 29568 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 326.028359][ T5833] I/O error, dev nbd31, sector 29568 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 326.043339][T11284] CPU: 1 UID: 0 PID: 11284 Comm: syz.6.1406 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 326.054167][T11284] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 326.064261][T11284] Call Trace: [ 326.067292][ T5833] Buffer I/O error on dev nbd31, logical block 3696, async page read [ 326.067544][T11284] [ 326.078571][T11284] dump_stack_lvl+0x16c/0x1f0 [ 326.083292][T11284] should_fail_ex+0x497/0x5b0 [ 326.088013][T11284] ? fs_reclaim_acquire+0xae/0x150 [ 326.093182][T11284] should_failslab+0xc2/0x120 [ 326.097904][T11284] __kmalloc_cache_noprof+0x68/0x420 [ 326.103223][T11284] ? seq_printf+0x11c/0x250 [ 326.107738][T11284] ? do_raw_spin_lock+0x12d/0x2c0 [ 326.112778][T11284] ? __pfx_cgroup_show_path+0x10/0x10 [ 326.118162][T11284] cgroup_show_path+0xb2/0x6c0 [ 326.122937][T11284] ? __pfx_cgroup_show_path+0x10/0x10 [ 326.128322][T11284] kernfs_sop_show_path+0x12b/0x1b0 [ 326.133541][T11284] ? __pfx_kernfs_sop_show_path+0x10/0x10 [ 326.139279][T11284] show_path+0x9b/0x100 [ 326.143451][T11284] show_mountinfo+0x1d5/0x840 [ 326.148145][T11284] ? __kmalloc_node_noprof+0x23d/0x520 [ 326.153628][T11284] ? __pfx_show_mountinfo+0x10/0x10 [ 326.158841][T11284] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 326.164325][T11284] seq_read_iter+0xb19/0x12b0 [ 326.169020][T11284] do_iter_readv_writev+0x614/0x7f0 [ 326.174228][T11284] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 326.179967][T11284] vfs_readv+0x4cf/0x890 [ 326.184214][T11284] ? fdget_pos+0x267/0x390 [ 326.188648][T11284] ? __pfx_vfs_readv+0x10/0x10 [ 326.193416][T11284] ? __mutex_lock+0x1cc/0xa60 [ 326.198102][T11284] ? find_held_lock+0x2d/0x110 [ 326.202888][T11284] ? __pfx___mutex_lock+0x10/0x10 [ 326.207924][T11284] ? trace_lock_acquire+0x14e/0x1f0 [ 326.213180][T11284] ? __fget_files+0x206/0x3a0 [ 326.217874][T11284] ? do_readv+0x133/0x340 [ 326.222206][T11284] do_readv+0x133/0x340 [ 326.226369][T11284] ? __pfx_do_readv+0x10/0x10 [ 326.231058][T11284] do_syscall_64+0xcd/0x250 [ 326.235576][T11284] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 326.241479][T11284] RIP: 0033:0x7f9e0df85d29 [ 326.245901][T11284] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 326.265524][T11284] RSP: 002b:00007f9e0ed98038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 326.273947][T11284] RAX: ffffffffffffffda RBX: 00007f9e0e175fa0 RCX: 00007f9e0df85d29 [ 326.281924][T11284] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000003 [ 326.289901][T11284] RBP: 00007f9e0ed98090 R08: 0000000000000000 R09: 0000000000000000 [ 326.297872][T11284] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 326.305845][T11284] R13: 0000000000000000 R14: 00007f9e0e175fa0 R15: 00007fffaa31d838 [ 326.313833][T11284] [ 326.316907][T11282] ip6tnl0: entered promiscuous mode [ 326.808766][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1411'. [ 326.860469][T11300] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1411'. [ 327.524059][T11320] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1414'. [ 328.835287][T11344] FAULT_INJECTION: forcing a failure. [ 328.835287][T11344] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 328.878319][T11344] CPU: 1 UID: 0 PID: 11344 Comm: syz.2.1425 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 328.889158][T11344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 328.899243][T11344] Call Trace: [ 328.902544][T11344] [ 328.905503][T11344] dump_stack_lvl+0x16c/0x1f0 [ 328.910235][T11344] should_fail_ex+0x497/0x5b0 [ 328.914964][T11344] _copy_to_iter+0x29b/0x1400 [ 328.919689][T11344] ? trace_lock_acquire+0x14e/0x1f0 [ 328.924937][T11344] ? __pfx__copy_to_iter+0x10/0x10 [ 328.930090][T11344] ? __virt_addr_valid+0x1a4/0x590 [ 328.935243][T11344] ? __virt_addr_valid+0x5e/0x590 [ 328.940300][T11344] ? __phys_addr_symbol+0x30/0x80 [ 328.945354][T11344] ? __check_object_size+0x488/0x710 [ 328.950684][T11344] seq_read_iter+0xd00/0x12b0 [ 328.955428][T11344] do_iter_readv_writev+0x614/0x7f0 [ 328.960663][T11344] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 328.966457][T11344] vfs_readv+0x4cf/0x890 [ 328.970733][T11344] ? fdget_pos+0x267/0x390 [ 328.975189][T11344] ? __pfx_vfs_readv+0x10/0x10 [ 328.979975][T11344] ? __mutex_lock+0x1cc/0xa60 [ 328.986934][T11344] ? find_held_lock+0x2d/0x110 [ 328.987003][T11344] ? __pfx___mutex_lock+0x10/0x10 [ 328.987035][T11344] ? trace_lock_acquire+0x14e/0x1f0 [ 328.987081][T11344] ? __fget_files+0x206/0x3a0 [ 328.987121][T11344] ? do_readv+0x133/0x340 [ 328.987145][T11344] do_readv+0x133/0x340 [ 328.987173][T11344] ? __pfx_do_readv+0x10/0x10 [ 328.987210][T11344] do_syscall_64+0xcd/0x250 [ 328.987245][T11344] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 328.987277][T11344] RIP: 0033:0x7fc4f8f85d29 [ 328.987299][T11344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 328.987324][T11344] RSP: 002b:00007fc4f9e4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 328.987352][T11344] RAX: ffffffffffffffda RBX: 00007fc4f9175fa0 RCX: 00007fc4f8f85d29 [ 328.987372][T11344] RDX: 0000000000000001 RSI: 0000000020000080 RDI: 0000000000000003 [ 328.987388][T11344] RBP: 00007fc4f9e4c090 R08: 0000000000000000 R09: 0000000000000000 [ 328.987403][T11344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 328.987418][T11344] R13: 0000000000000000 R14: 00007fc4f9175fa0 R15: 00007fff6faf2ae8 [ 328.987450][T11344] [ 329.859678][ T5144] Bluetooth: hci2: command 0x0406 tx timeout [ 329.952024][T11342] tty tty31: ldisc open failed (-12), clearing slot 30 [ 330.468964][T11380] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1435'. [ 330.946145][T11374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1434'. [ 334.198592][T11451] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 334.228358][T11451] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 334.599211][T11474] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1461'. [ 334.982111][ T5144] Bluetooth: hci1: command 0x0406 tx timeout [ 336.517610][T11525] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1476'. [ 336.582889][T11524] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1475'. [ 337.301320][T11524] nbd32: detected capacity change from 0 to 29696 [ 337.363189][ T5833] block nbd32: Send control failed (result -22) [ 337.381984][ T5833] block nbd32: Request send failed, requeueing [ 337.413575][ T98] block nbd32: Dead connection, failed to find a fallback [ 337.420832][ T98] block nbd32: shutting down sockets [ 337.426698][ T98] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.435985][ T98] Buffer I/O error on dev nbd32, logical block 0, async page read [ 337.444150][ T5833] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.453420][ T5833] Buffer I/O error on dev nbd32, logical block 0, async page read [ 337.461618][ T5833] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.470979][ T5833] Buffer I/O error on dev nbd32, logical block 0, async page read [ 337.479183][ T5833] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.488578][ T5833] Buffer I/O error on dev nbd32, logical block 0, async page read [ 337.496743][ T5833] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.506022][ T5833] Buffer I/O error on dev nbd32, logical block 0, async page read [ 337.515803][ T5833] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.525258][ T5833] Buffer I/O error on dev nbd32, logical block 0, async page read [ 337.533428][ T5833] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.542669][ T5833] Buffer I/O error on dev nbd32, logical block 0, async page read [ 337.550802][ T5833] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.560057][ T5833] Buffer I/O error on dev nbd32, logical block 0, async page read [ 337.568084][ T5833] ldm_validate_partition_table(): Disk read failed. [ 337.574978][ T5833] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.585098][ T5833] Buffer I/O error on dev nbd32, logical block 0, async page read [ 337.593384][ T5833] I/O error, dev nbd32, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 337.603578][ T5833] Buffer I/O error on dev nbd32, logical block 0, async page read [ 337.613937][ T5833] Dev nbd32: unable to read RDB block 0 [ 337.624020][ T5833] nbd32: unable to read partition table [ 337.639392][ T5833] ldm_validate_partition_table(): Disk read failed. [ 337.646986][ T5833] Dev nbd32: unable to read RDB block 0 [ 337.656814][ T5833] nbd32: unable to read partition table [ 338.556558][T11577] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1490'. [ 339.275321][T11588] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1493'. [ 340.758761][T11625] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1502'. [ 341.731011][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1511'. [ 342.146218][T11651] FAULT_INJECTION: forcing a failure. [ 342.146218][T11651] name failslab, interval 1, probability 0, space 0, times 0 [ 342.161197][T11651] CPU: 0 UID: 0 PID: 11651 Comm: syz.1.1512 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 342.172020][T11651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 342.182112][T11651] Call Trace: [ 342.185417][T11651] [ 342.188365][T11651] dump_stack_lvl+0x16c/0x1f0 [ 342.193072][T11651] should_fail_ex+0x497/0x5b0 [ 342.197764][T11651] ? fs_reclaim_acquire+0xae/0x150 [ 342.202889][T11651] should_failslab+0xc2/0x120 [ 342.207578][T11651] __kmalloc_noprof+0xce/0x4f0 [ 342.212349][T11651] ? rcu_is_watching+0x12/0xc0 [ 342.217121][T11651] ? kernfs_fop_write_iter+0x223/0x500 [ 342.222595][T11651] kernfs_fop_write_iter+0x223/0x500 [ 342.227896][T11651] vfs_write+0x5ae/0x1150 [ 342.232238][T11651] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 342.238059][T11651] ? __pfx___mutex_lock+0x10/0x10 [ 342.243096][T11651] ? __pfx_vfs_write+0x10/0x10 [ 342.247884][T11651] ksys_write+0x12b/0x250 [ 342.252220][T11651] ? __pfx_ksys_write+0x10/0x10 [ 342.257086][T11651] do_syscall_64+0xcd/0x250 [ 342.261601][T11651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.267507][T11651] RIP: 0033:0x7f9784585d29 [ 342.271926][T11651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.291540][T11651] RSP: 002b:00007f97853eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 342.299961][T11651] RAX: ffffffffffffffda RBX: 00007f9784775fa0 RCX: 00007f9784585d29 [ 342.307934][T11651] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000004 [ 342.315913][T11651] RBP: 00007f97853eb090 R08: 0000000000000000 R09: 0000000000000000 [ 342.323888][T11651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.331866][T11651] R13: 0000000000000000 R14: 00007f9784775fa0 R15: 00007ffd4d06d538 [ 342.339862][T11651] [ 342.846225][T11667] FAULT_INJECTION: forcing a failure. [ 342.846225][T11667] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.859635][T11664] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1516'. [ 342.872029][T11667] CPU: 1 UID: 0 PID: 11667 Comm: syz.1.1518 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 342.882833][T11667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 342.892891][T11667] Call Trace: [ 342.896173][T11667] [ 342.899107][T11667] dump_stack_lvl+0x16c/0x1f0 [ 342.903799][T11667] should_fail_ex+0x497/0x5b0 [ 342.908487][T11667] strncpy_from_user+0x3b/0x2d0 [ 342.913348][T11667] getname_flags.part.0+0x8f/0x550 [ 342.918476][T11667] getname+0x8d/0xe0 [ 342.922398][T11667] do_sys_openat2+0x104/0x1e0 [ 342.927098][T11667] ? __pfx_do_sys_openat2+0x10/0x10 [ 342.932324][T11667] ? __fget_files+0x206/0x3a0 [ 342.937022][T11667] __x64_sys_openat+0x175/0x210 [ 342.941893][T11667] ? __pfx___x64_sys_openat+0x10/0x10 [ 342.947277][T11667] ? ksys_write+0x1ba/0x250 [ 342.951798][T11667] do_syscall_64+0xcd/0x250 [ 342.956318][T11667] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.962305][T11667] RIP: 0033:0x7f9784585d29 [ 342.966720][T11667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 342.986331][T11667] RSP: 002b:00007f97853eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 342.994747][T11667] RAX: ffffffffffffffda RBX: 00007f9784775fa0 RCX: 00007f9784585d29 [ 343.002720][T11667] RDX: 0000000000002040 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 343.010692][T11667] RBP: 00007f97853eb090 R08: 0000000000000000 R09: 0000000000000000 [ 343.018667][T11667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.026643][T11667] R13: 0000000000000000 R14: 00007f9784775fa0 R15: 00007ffd4d06d538 [ 343.034632][T11667] [ 343.056690][T11669] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1517'. [ 343.945804][T11690] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1527'. [ 344.262287][T11702] FAULT_INJECTION: forcing a failure. [ 344.262287][T11702] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.309504][T11702] CPU: 1 UID: 0 PID: 11702 Comm: syz.6.1530 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 344.320344][T11702] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 344.330444][T11702] Call Trace: [ 344.333751][T11702] [ 344.336708][T11702] dump_stack_lvl+0x16c/0x1f0 [ 344.341443][T11702] should_fail_ex+0x497/0x5b0 [ 344.346177][T11702] _copy_to_user+0x32/0xd0 [ 344.350649][T11702] simple_read_from_buffer+0xd0/0x160 [ 344.356063][T11702] proc_fail_nth_read+0x198/0x270 [ 344.361144][T11702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.366753][T11702] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 344.372354][T11702] vfs_read+0x1df/0xbe0 [ 344.376565][T11702] ? __fget_files+0x1fc/0x3a0 [ 344.381286][T11702] ? __pfx___mutex_lock+0x10/0x10 [ 344.386366][T11702] ? __pfx_vfs_read+0x10/0x10 [ 344.391110][T11702] ? __fget_files+0x206/0x3a0 [ 344.395849][T11702] ksys_read+0x12b/0x250 [ 344.400147][T11702] ? __pfx_ksys_read+0x10/0x10 [ 344.404986][T11702] do_syscall_64+0xcd/0x250 [ 344.409538][T11702] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.415453][T11702] RIP: 0033:0x7f9e0df8473c [ 344.419873][T11702] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 344.439484][T11702] RSP: 002b:00007f9e0ed98030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 344.447905][T11702] RAX: ffffffffffffffda RBX: 00007f9e0e175fa0 RCX: 00007f9e0df8473c [ 344.455882][T11702] RDX: 000000000000000f RSI: 00007f9e0ed980a0 RDI: 0000000000000005 [ 344.463859][T11702] RBP: 00007f9e0ed98090 R08: 0000000000000000 R09: 0000000000000000 [ 344.471838][T11702] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.479823][T11702] R13: 0000000000000000 R14: 00007f9e0e175fa0 R15: 00007fffaa31d838 [ 344.487811][T11702] [ 344.874524][T11715] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1535'. [ 344.948696][T11715] vcan0: entered promiscuous mode [ 345.329395][T11730] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1543'. [ 345.845339][T11748] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1548'. [ 346.758760][T11783] netlink: 342 bytes leftover after parsing attributes in process `syz.5.1562'. [ 347.579870][T11806] FAULT_INJECTION: forcing a failure. [ 347.579870][T11806] name failslab, interval 1, probability 0, space 0, times 0 [ 347.611698][T11806] CPU: 1 UID: 0 PID: 11806 Comm: syz.1.1568 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 347.622528][T11806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 347.632616][T11806] Call Trace: [ 347.635913][T11806] [ 347.638862][T11806] dump_stack_lvl+0x16c/0x1f0 [ 347.643577][T11806] should_fail_ex+0x497/0x5b0 [ 347.648288][T11806] ? fs_reclaim_acquire+0xae/0x150 [ 347.653441][T11806] should_failslab+0xc2/0x120 [ 347.658161][T11806] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 347.663585][T11806] ? security_file_alloc+0x34/0x2b0 [ 347.668823][T11806] security_file_alloc+0x34/0x2b0 [ 347.673878][T11806] init_file+0x93/0x480 [ 347.678069][T11806] alloc_empty_file+0x91/0x1e0 [ 347.682879][T11806] path_openat+0xe1/0x2d60 [ 347.687327][T11806] ? hlock_class+0x4e/0x130 [ 347.691841][T11806] ? __lock_acquire+0x15a9/0x3c40 [ 347.696877][T11806] ? __pfx_path_openat+0x10/0x10 [ 347.701823][T11806] ? __pfx___lock_acquire+0x10/0x10 [ 347.707021][T11806] ? lock_acquire.part.0+0x11b/0x380 [ 347.712306][T11806] ? find_held_lock+0x2d/0x110 [ 347.717079][T11806] do_filp_open+0x20c/0x470 [ 347.721596][T11806] ? __pfx_do_filp_open+0x10/0x10 [ 347.726625][T11806] ? find_held_lock+0x2d/0x110 [ 347.731409][T11806] ? alloc_fd+0x41f/0x760 [ 347.735750][T11806] do_sys_openat2+0x17a/0x1e0 [ 347.740441][T11806] ? __pfx_do_sys_openat2+0x10/0x10 [ 347.745660][T11806] ? __fget_files+0x206/0x3a0 [ 347.750348][T11806] __x64_sys_openat+0x175/0x210 [ 347.755211][T11806] ? __pfx___x64_sys_openat+0x10/0x10 [ 347.760593][T11806] ? ksys_write+0x1ba/0x250 [ 347.765115][T11806] do_syscall_64+0xcd/0x250 [ 347.769631][T11806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 347.775557][T11806] RIP: 0033:0x7f9784585d29 [ 347.779996][T11806] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 347.799618][T11806] RSP: 002b:00007f97853eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 347.808043][T11806] RAX: ffffffffffffffda RBX: 00007f9784775fa0 RCX: 00007f9784585d29 [ 347.816023][T11806] RDX: 0000000000002040 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 347.824001][T11806] RBP: 00007f97853eb090 R08: 0000000000000000 R09: 0000000000000000 [ 347.831979][T11806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 347.839953][T11806] R13: 0000000000000000 R14: 00007f9784775fa0 R15: 00007ffd4d06d538 [ 347.847940][T11806] [ 349.525023][T11845] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1579'. [ 350.824913][T11877] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1590'. [ 351.024009][T11882] FAULT_INJECTION: forcing a failure. [ 351.024009][T11882] name failslab, interval 1, probability 0, space 0, times 0 [ 351.048305][T11882] CPU: 0 UID: 0 PID: 11882 Comm: syz.1.1592 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 351.059134][T11882] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 351.069221][T11882] Call Trace: [ 351.072530][T11882] [ 351.075495][T11882] dump_stack_lvl+0x16c/0x1f0 [ 351.080218][T11882] should_fail_ex+0x497/0x5b0 [ 351.084941][T11882] ? fs_reclaim_acquire+0xae/0x150 [ 351.090097][T11882] should_failslab+0xc2/0x120 [ 351.094819][T11882] __kmalloc_noprof+0xce/0x4f0 [ 351.099632][T11882] ? tomoyo_realpath_from_path+0xbf/0x710 [ 351.105398][T11882] tomoyo_realpath_from_path+0xbf/0x710 [ 351.107114][T11884] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1591'. [ 351.110974][T11882] ? tomoyo_path_number_perm+0x235/0x5b0 [ 351.111035][T11882] tomoyo_path_number_perm+0x248/0x5b0 [ 351.111069][T11882] ? tomoyo_path_number_perm+0x235/0x5b0 [ 351.111105][T11882] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 351.111175][T11882] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 351.111202][T11882] ? rwsem_read_trylock+0x12d/0x250 [ 351.153685][T11882] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 351.159275][T11882] ? find_held_lock+0x2d/0x110 [ 351.164089][T11882] tomoyo_path_mknod+0x10d/0x190 [ 351.169064][T11882] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 351.174576][T11882] ? get_current_fs_domain+0x184/0x1f0 [ 351.180124][T11882] security_path_mknod+0x161/0x310 [ 351.185270][T11882] lookup_open.isra.0+0x54f/0x14c0 [ 351.190422][T11882] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 351.196012][T11882] ? can_split_folio+0x3e0/0x4f0 [ 351.200991][T11882] ? lock_acquire+0x2f/0xb0 [ 351.205524][T11882] ? path_openat+0x153e/0x2d60 [ 351.210332][T11882] ? can_split_folio+0x3e0/0x4f0 [ 351.215312][T11882] ? __pfx_down_write+0x10/0x10 [ 351.220204][T11882] ? mnt_get_write_access+0x20c/0x300 [ 351.225627][T11882] path_openat+0x904/0x2d60 [ 351.230265][T11882] ? __pfx_path_openat+0x10/0x10 [ 351.235251][T11882] ? __pfx___lock_acquire+0x10/0x10 [ 351.240489][T11882] ? lock_acquire.part.0+0x11b/0x380 [ 351.245811][T11882] ? find_held_lock+0x2d/0x110 [ 351.250626][T11882] do_filp_open+0x20c/0x470 [ 351.255181][T11882] ? __pfx_do_filp_open+0x10/0x10 [ 351.260249][T11882] ? find_held_lock+0x2d/0x110 [ 351.265084][T11882] ? alloc_fd+0x41f/0x760 [ 351.269471][T11882] do_sys_openat2+0x17a/0x1e0 [ 351.274194][T11882] ? __pfx_do_sys_openat2+0x10/0x10 [ 351.279443][T11882] ? __fget_files+0x206/0x3a0 [ 351.284162][T11882] __x64_sys_openat+0x175/0x210 [ 351.289056][T11882] ? __pfx___x64_sys_openat+0x10/0x10 [ 351.294471][T11882] ? ksys_write+0x1ba/0x250 [ 351.299026][T11882] do_syscall_64+0xcd/0x250 [ 351.303571][T11882] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 351.309507][T11882] RIP: 0033:0x7f9784585d29 [ 351.313951][T11882] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 351.333596][T11882] RSP: 002b:00007f97853eb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 351.342060][T11882] RAX: ffffffffffffffda RBX: 00007f9784775fa0 RCX: 00007f9784585d29 [ 351.350072][T11882] RDX: 0000000000002040 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 351.358079][T11882] RBP: 00007f97853eb090 R08: 0000000000000000 R09: 0000000000000000 [ 351.366079][T11882] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 351.374081][T11882] R13: 0000000000000000 R14: 00007f9784775fa0 R15: 00007ffd4d06d538 [ 351.382111][T11882] [ 351.389081][T11882] ERROR: Out of memory at tomoyo_realpath_from_path. [ 351.422923][T11887] i2c i2c-0: Invalid block write size 128 [ 351.435649][T11887] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1593'. [ 351.522831][T11888] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1594'. [ 351.841279][T11899] sp0: Synchronizing with TNC [ 352.165752][T11915] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1603'. [ 352.450887][T11925] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1605'. [ 352.641269][T11929] capability: warning: `syz.1.1606' uses 32-bit capabilities (legacy support in use) [ 352.871758][T11935] FAULT_INJECTION: forcing a failure. [ 352.871758][T11935] name failslab, interval 1, probability 0, space 0, times 0 [ 352.918286][T11935] CPU: 1 UID: 0 PID: 11935 Comm: syz.2.1609 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 352.929118][T11935] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 352.939211][T11935] Call Trace: [ 352.942518][T11935] [ 352.945473][T11935] dump_stack_lvl+0x16c/0x1f0 [ 352.950200][T11935] should_fail_ex+0x497/0x5b0 [ 352.954913][T11935] ? fs_reclaim_acquire+0xae/0x150 [ 352.960069][T11935] should_failslab+0xc2/0x120 [ 352.964789][T11935] __kmalloc_noprof+0xce/0x4f0 [ 352.969607][T11935] ? io_alloc_async_data+0x9d/0x150 [ 352.974851][T11935] ? __io_alloc_req_refill+0xeb/0x5b0 [ 352.980262][T11935] io_alloc_async_data+0x9d/0x150 [ 352.985308][T11935] io_prep_rw+0x30d/0xb70 [ 352.989650][T11935] io_prep_rwv+0xa8/0x360 [ 352.993986][T11935] ? __pfx_io_prep_rwv+0x10/0x10 [ 352.998935][T11935] io_submit_sqes+0x850/0x25f0 [ 353.003722][T11935] __do_sys_io_uring_enter+0xd43/0x1620 [ 353.009281][T11935] ? __fget_files+0x206/0x3a0 [ 353.013964][T11935] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 353.019956][T11935] ? fput+0x67/0x440 [ 353.023859][T11935] ? ksys_write+0x1ba/0x250 [ 353.028377][T11935] ? __pfx_ksys_write+0x10/0x10 [ 353.033260][T11935] do_syscall_64+0xcd/0x250 [ 353.037774][T11935] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.043674][T11935] RIP: 0033:0x7fc4f8f85d29 [ 353.048092][T11935] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.067706][T11935] RSP: 002b:00007fc4f9e4c038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 353.076129][T11935] RAX: ffffffffffffffda RBX: 00007fc4f9175fa0 RCX: 00007fc4f8f85d29 [ 353.084118][T11935] RDX: 000000000000cd00 RSI: 0000000000000001 RDI: 0000000000000005 [ 353.092093][T11935] RBP: 00007fc4f9e4c090 R08: 0000000000000000 R09: ffffffffffffffff [ 353.100079][T11935] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 353.108051][T11935] R13: 0000000000000000 R14: 00007fc4f9175fa0 R15: 00007fff6faf2ae8 [ 353.116040][T11935] [ 353.887646][T11960] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1617'. [ 353.959873][T11962] FAULT_INJECTION: forcing a failure. [ 353.959873][T11962] name failslab, interval 1, probability 0, space 0, times 0 [ 353.979601][T11962] CPU: 0 UID: 0 PID: 11962 Comm: syz.2.1616 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 353.990431][T11962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 354.000532][T11962] Call Trace: [ 354.003840][T11962] [ 354.006804][T11962] dump_stack_lvl+0x16c/0x1f0 [ 354.011525][T11962] should_fail_ex+0x497/0x5b0 [ 354.016246][T11962] ? fs_reclaim_acquire+0xae/0x150 [ 354.021403][T11962] should_failslab+0xc2/0x120 [ 354.026132][T11962] __kmalloc_noprof+0xce/0x4f0 [ 354.030937][T11962] ? __pfx_d_absolute_path+0x10/0x10 [ 354.036274][T11962] ? tomoyo_encode2+0x100/0x3e0 [ 354.041181][T11962] tomoyo_encode2+0x100/0x3e0 [ 354.045908][T11962] tomoyo_realpath_from_path+0x1a7/0x710 [ 354.051600][T11962] tomoyo_path_number_perm+0x248/0x5b0 [ 354.057124][T11962] ? tomoyo_path_number_perm+0x235/0x5b0 [ 354.062814][T11962] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 354.068886][T11962] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 354.074561][T11962] ? rwsem_read_trylock+0x12d/0x250 [ 354.079808][T11962] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 354.085401][T11962] ? find_held_lock+0x2d/0x110 [ 354.090218][T11962] tomoyo_path_mknod+0x10d/0x190 [ 354.095196][T11962] ? __pfx_tomoyo_path_mknod+0x10/0x10 [ 354.100704][T11962] ? get_current_fs_domain+0x184/0x1f0 [ 354.106222][T11962] security_path_mknod+0x161/0x310 [ 354.111385][T11962] lookup_open.isra.0+0x54f/0x14c0 [ 354.111913][T11970] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1618'. [ 354.116523][T11962] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 354.116561][T11962] ? can_split_folio+0x3e0/0x4f0 [ 354.136020][T11962] ? lock_acquire+0x2f/0xb0 [ 354.140567][T11962] ? path_openat+0x153e/0x2d60 [ 354.145372][T11962] ? can_split_folio+0x3e0/0x4f0 [ 354.150349][T11962] ? __pfx_down_write+0x10/0x10 [ 354.155243][T11962] ? mnt_get_write_access+0x20c/0x300 [ 354.160655][T11962] path_openat+0x904/0x2d60 [ 354.165202][T11962] ? __pfx_path_openat+0x10/0x10 [ 354.170168][T11962] ? __pfx___lock_acquire+0x10/0x10 [ 354.175372][T11962] ? lock_acquire.part.0+0x11b/0x380 [ 354.180664][T11962] ? find_held_lock+0x2d/0x110 [ 354.185463][T11962] do_filp_open+0x20c/0x470 [ 354.189996][T11962] ? __pfx_do_filp_open+0x10/0x10 [ 354.195043][T11962] ? find_held_lock+0x2d/0x110 [ 354.199848][T11962] ? alloc_fd+0x41f/0x760 [ 354.204206][T11962] do_sys_openat2+0x17a/0x1e0 [ 354.208897][T11962] ? __pfx_do_sys_openat2+0x10/0x10 [ 354.214114][T11962] ? __fget_files+0x206/0x3a0 [ 354.218807][T11962] __x64_sys_openat+0x175/0x210 [ 354.223673][T11962] ? __pfx___x64_sys_openat+0x10/0x10 [ 354.229059][T11962] ? ksys_write+0x1ba/0x250 [ 354.233582][T11962] do_syscall_64+0xcd/0x250 [ 354.238097][T11962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.244016][T11962] RIP: 0033:0x7fc4f8f85d29 [ 354.248438][T11962] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.268054][T11962] RSP: 002b:00007fc4f9e4c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 354.276475][T11962] RAX: ffffffffffffffda RBX: 00007fc4f9175fa0 RCX: 00007fc4f8f85d29 [ 354.284451][T11962] RDX: 0000000000002040 RSI: 0000000020000040 RDI: ffffffffffffff9c [ 354.292427][T11962] RBP: 00007fc4f9e4c090 R08: 0000000000000000 R09: 0000000000000000 [ 354.300401][T11962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.308382][T11962] R13: 0000000000000000 R14: 00007fc4f9175fa0 R15: 00007fff6faf2ae8 [ 354.316384][T11962] [ 354.460328][T11962] ERROR: Out of memory at tomoyo_realpath_from_path. [ 354.914187][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1625'. [ 354.937988][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1625'. [ 355.246107][T11996] FAULT_INJECTION: forcing a failure. [ 355.246107][T11996] name failslab, interval 1, probability 0, space 0, times 0 [ 355.259744][T11996] CPU: 0 UID: 0 PID: 11996 Comm: syz.5.1629 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 355.270550][T11996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 355.280659][T11996] Call Trace: [ 355.283967][T11996] [ 355.286924][T11996] dump_stack_lvl+0x16c/0x1f0 [ 355.291652][T11996] should_fail_ex+0x497/0x5b0 [ 355.296378][T11996] should_failslab+0xc2/0x120 [ 355.301102][T11996] __kmalloc_noprof+0xce/0x4f0 [ 355.305912][T11996] ? io_cqring_event_overflow+0xcb/0x6f0 [ 355.311592][T11996] io_cqring_event_overflow+0xcb/0x6f0 [ 355.317102][T11996] __io_submit_flush_completions+0xf1a/0x1fd0 [ 355.323222][T11996] ? io_issue_sqe+0x1d3/0x1360 [ 355.328040][T11996] io_submit_sqes+0xa13/0x25f0 [ 355.332865][T11996] __do_sys_io_uring_enter+0xd43/0x1620 [ 355.338458][T11996] ? __fget_files+0x206/0x3a0 [ 355.343201][T11996] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 355.349255][T11996] ? fput+0x67/0x440 [ 355.353200][T11996] ? ksys_write+0x1ba/0x250 [ 355.357745][T11996] ? __pfx_ksys_write+0x10/0x10 [ 355.362645][T11996] do_syscall_64+0xcd/0x250 [ 355.367187][T11996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.373119][T11996] RIP: 0033:0x7f4aa3d85d29 [ 355.377563][T11996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.397211][T11996] RSP: 002b:00007f4aa4c95038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 355.405666][T11996] RAX: ffffffffffffffda RBX: 00007f4aa3f75fa0 RCX: 00007f4aa3d85d29 [ 355.413672][T11996] RDX: 000000000000cd00 RSI: 0000000000000001 RDI: 0000000000000005 [ 355.421674][T11996] RBP: 00007f4aa4c95090 R08: 0000000000000000 R09: ffffffffffffffff [ 355.429678][T11996] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 355.437687][T11996] R13: 0000000000000000 R14: 00007f4aa3f75fa0 R15: 00007ffdcace4c98 [ 355.445711][T11996] [ 355.795894][T12010] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1633'. [ 356.598865][T12024] netlink: 'syz.6.1638': attribute type 1 has an invalid length. [ 357.185917][T12046] could not allocate digest TFM handle [ 357.197808][T12047] could not allocate digest TFM handle [ 357.241205][T12050] could not allocate digest TFM handle [ 357.996920][T12080] FAULT_INJECTION: forcing a failure. [ 357.996920][T12080] name failslab, interval 1, probability 0, space 0, times 0 [ 358.028577][T12081] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1650'. [ 358.037838][T12080] CPU: 0 UID: 0 PID: 12080 Comm: syz.5.1651 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 358.048644][T12080] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 358.058740][T12080] Call Trace: [ 358.062058][T12080] [ 358.065016][T12080] dump_stack_lvl+0x16c/0x1f0 [ 358.069747][T12080] should_fail_ex+0x497/0x5b0 [ 358.074468][T12080] ? fs_reclaim_acquire+0xae/0x150 [ 358.079616][T12080] should_failslab+0xc2/0x120 [ 358.084342][T12080] __kmalloc_noprof+0xce/0x4f0 [ 358.089155][T12080] ? io_alloc_async_data+0x9d/0x150 [ 358.094398][T12080] ? __io_alloc_req_refill+0xeb/0x5b0 [ 358.099810][T12080] io_alloc_async_data+0x9d/0x150 [ 358.104872][T12080] io_prep_rw+0x30d/0xb70 [ 358.109217][T12080] io_prep_rwv+0xa8/0x360 [ 358.113555][T12080] ? __pfx_io_prep_rwv+0x10/0x10 [ 358.118506][T12080] io_submit_sqes+0x850/0x25f0 [ 358.123294][T12080] __do_sys_io_uring_enter+0xd43/0x1620 [ 358.128854][T12080] ? __fget_files+0x206/0x3a0 [ 358.133539][T12080] ? __pfx___do_sys_io_uring_enter+0x10/0x10 [ 358.139532][T12080] ? fput+0x67/0x440 [ 358.143437][T12080] ? ksys_write+0x1ba/0x250 [ 358.147943][T12080] ? __pfx_ksys_write+0x10/0x10 [ 358.152811][T12080] do_syscall_64+0xcd/0x250 [ 358.157352][T12080] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.163254][T12080] RIP: 0033:0x7f4aa3d85d29 [ 358.167674][T12080] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 358.187290][T12080] RSP: 002b:00007f4aa4c95038 EFLAGS: 00000246 ORIG_RAX: 00000000000001aa [ 358.195715][T12080] RAX: ffffffffffffffda RBX: 00007f4aa3f75fa0 RCX: 00007f4aa3d85d29 [ 358.203694][T12080] RDX: 000000000000cd00 RSI: 0000000000000001 RDI: 0000000000000005 [ 358.211671][T12080] RBP: 00007f4aa4c95090 R08: 0000000000000000 R09: ffffffffffffffff [ 358.219660][T12080] R10: 0000000000000007 R11: 0000000000000246 R12: 0000000000000001 [ 358.227649][T12080] R13: 0000000000000000 R14: 00007f4aa3f75fa0 R15: 00007ffdcace4c98 [ 358.235642][T12080] [ 359.560195][T12116] FAULT_INJECTION: forcing a failure. [ 359.560195][T12116] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 359.633565][T12116] CPU: 1 UID: 0 PID: 12116 Comm: syz.2.1662 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 359.644402][T12116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 359.654495][T12116] Call Trace: [ 359.657813][T12116] [ 359.660775][T12116] dump_stack_lvl+0x16c/0x1f0 [ 359.665505][T12116] should_fail_ex+0x497/0x5b0 [ 359.670234][T12116] _copy_to_user+0x32/0xd0 [ 359.674706][T12116] simple_read_from_buffer+0xd0/0x160 [ 359.680124][T12116] proc_fail_nth_read+0x198/0x270 [ 359.685201][T12116] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 359.690811][T12116] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 359.696423][T12116] vfs_read+0x1df/0xbe0 [ 359.700631][T12116] ? __fget_files+0x1fc/0x3a0 [ 359.705353][T12116] ? __pfx___mutex_lock+0x10/0x10 [ 359.710427][T12116] ? __pfx_vfs_read+0x10/0x10 [ 359.715153][T12116] ? __fget_files+0x206/0x3a0 [ 359.719878][T12116] ksys_read+0x12b/0x250 [ 359.724159][T12116] ? __pfx_ksys_read+0x10/0x10 [ 359.728978][T12116] do_syscall_64+0xcd/0x250 [ 359.733533][T12116] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.739474][T12116] RIP: 0033:0x7fc4f8f8473c [ 359.743912][T12116] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 359.763559][T12116] RSP: 002b:00007fc4f9e4c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 359.772014][T12116] RAX: ffffffffffffffda RBX: 00007fc4f9175fa0 RCX: 00007fc4f8f8473c [ 359.780029][T12116] RDX: 000000000000000f RSI: 00007fc4f9e4c0a0 RDI: 0000000000000003 [ 359.788036][T12116] RBP: 00007fc4f9e4c090 R08: 0000000000000000 R09: 0000000000000000 [ 359.796048][T12116] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 359.804055][T12116] R13: 0000000000000000 R14: 00007fc4f9175fa0 R15: 00007fff6faf2ae8 [ 359.812080][T12116] [ 360.133050][T12120] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1661'. [ 362.637216][T12171] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1678'. [ 362.927389][T12178] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1682'. [ 362.968614][T12180] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1681'. [ 363.177877][T12178] bond0: (slave bond_slave_1): Releasing backup interface [ 363.749968][T12197] FAULT_INJECTION: forcing a failure. [ 363.749968][T12197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 363.772599][T12197] CPU: 0 UID: 0 PID: 12197 Comm: syz.5.1688 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 363.783422][T12197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 363.793490][T12197] Call Trace: [ 363.796766][T12197] [ 363.799700][T12197] dump_stack_lvl+0x16c/0x1f0 [ 363.804388][T12197] should_fail_ex+0x497/0x5b0 [ 363.809076][T12197] _copy_from_user+0x2e/0xd0 [ 363.813677][T12197] cec_ioctl+0xf01/0x2800 [ 363.818016][T12197] ? __pfx_cec_ioctl+0x10/0x10 [ 363.822789][T12197] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 363.828786][T12197] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 363.834689][T12197] ? do_vfs_ioctl+0x513/0x1950 [ 363.839478][T12197] ? __pfx_lock_release+0x10/0x10 [ 363.844508][T12197] ? trace_lock_acquire+0x14e/0x1f0 [ 363.849743][T12197] ? __fget_files+0x206/0x3a0 [ 363.854458][T12197] ? __pfx_cec_ioctl+0x10/0x10 [ 363.859242][T12197] __x64_sys_ioctl+0x190/0x200 [ 363.864014][T12197] do_syscall_64+0xcd/0x250 [ 363.868528][T12197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 363.874428][T12197] RIP: 0033:0x7f4aa3d85d29 [ 363.878844][T12197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 363.898454][T12197] RSP: 002b:00007f4aa4c95038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 363.906870][T12197] RAX: ffffffffffffffda RBX: 00007f4aa3f75fa0 RCX: 00007f4aa3d85d29 [ 363.914865][T12197] RDX: 0000000020000000 RSI: 00000000c0386105 RDI: 0000000000000003 [ 363.922851][T12197] RBP: 00007f4aa4c95090 R08: 0000000000000000 R09: 0000000000000000 [ 363.930829][T12197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 363.938805][T12197] R13: 0000000000000000 R14: 00007f4aa3f75fa0 R15: 00007ffdcace4c98 [ 363.946792][T12197] [ 364.206299][T12204] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1690'. [ 364.669316][T12204] nbd33: detected capacity change from 0 to 29696 [ 364.713297][ T5833] block nbd33: Send control failed (result -22) [ 364.720127][ T5833] block nbd33: Request send failed, requeueing [ 364.726517][ T53] block nbd33: Receive control failed (result -32) [ 364.735832][ T98] block nbd33: Dead connection, failed to find a fallback [ 364.745619][ T98] block nbd33: shutting down sockets [ 364.752319][ T98] blk_print_req_error: 24 callbacks suppressed [ 364.752337][ T98] I/O error, dev nbd33, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 364.767925][ T98] buffer_io_error: 23 callbacks suppressed [ 364.767941][ T98] Buffer I/O error on dev nbd33, logical block 0, async page read [ 364.781974][ T5833] I/O error, dev nbd33, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 364.791184][ T5833] Buffer I/O error on dev nbd33, logical block 0, async page read [ 364.799434][ T5833] I/O error, dev nbd33, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 364.808662][ T5833] Buffer I/O error on dev nbd33, logical block 0, async page read [ 364.816650][ T5833] I/O error, dev nbd33, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 364.825916][ T5833] Buffer I/O error on dev nbd33, logical block 0, async page read [ 364.834194][ T5833] I/O error, dev nbd33, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 364.843618][ T5833] Buffer I/O error on dev nbd33, logical block 0, async page read [ 364.852449][ T5833] I/O error, dev nbd33, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 364.862404][ T5833] Buffer I/O error on dev nbd33, logical block 0, async page read [ 364.870510][ T5833] I/O error, dev nbd33, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 364.879807][ T5833] Buffer I/O error on dev nbd33, logical block 0, async page read [ 364.887832][ T5833] I/O error, dev nbd33, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 364.897095][ T5833] Buffer I/O error on dev nbd33, logical block 0, async page read [ 364.905158][ T5833] ldm_validate_partition_table(): Disk read failed. [ 364.911966][ T5833] I/O error, dev nbd33, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 364.921298][ T5833] Buffer I/O error on dev nbd33, logical block 0, async page read [ 364.929402][ T5833] I/O error, dev nbd33, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 364.938703][ T5833] Buffer I/O error on dev nbd33, logical block 0, async page read [ 364.946832][ T5833] Dev nbd33: unable to read RDB block 0 [ 364.953612][ T5833] nbd33: unable to read partition table [ 364.966659][ T5833] ldm_validate_partition_table(): Disk read failed. [ 364.998654][ T5833] Dev nbd33: unable to read RDB block 0 [ 365.004706][ T5833] nbd33: unable to read partition table [ 365.319207][T12231] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1697'. [ 365.551724][T12218] Process accounting resumed [ 365.556618][T12218] kernel write not supported for file /integrity/ima/policy (pid: 12218 comm: syz.1.1694) [ 365.974966][T12240] kernel write not supported for file /integrity/ima/policy (pid: 12240 comm: syz.1.1701) [ 366.270955][T12261] kernel write not supported for file /integrity/ima/policy (pid: 12261 comm: syz.1.1704) [ 366.575192][T12264] kernel write not supported for file /integrity/ima/policy (pid: 12264 comm: syz.1.1706) [ 366.815186][T12272] kernel write not supported for file /integrity/ima/policy (pid: 12272 comm: syz.1.1708) [ 367.227798][T12288] kernel write not supported for file /integrity/ima/policy (pid: 12288 comm: syz.1.1711) [ 367.331600][T12295] netlink: 342 bytes leftover after parsing attributes in process `syz.6.1714'. [ 367.521215][T12299] kernel write not supported for file /integrity/ima/policy (pid: 12299 comm: syz.1.1715) [ 367.529112][T12300] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1713'. [ 367.580538][T12307] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1717'. [ 367.618839][T12304] kernel write not supported for file /integrity/ima/policy (pid: 12304 comm: syz.1.1718) [ 367.779919][T12300] nbd34: detected capacity change from 0 to 29696 [ 367.802592][ T5833] block nbd34: Send control failed (result -22) [ 367.816332][ T5833] block nbd34: Request send failed, requeueing [ 367.843983][ T53] block nbd34: Receive control failed (result -32) [ 367.866936][ T40] block nbd34: Dead connection, failed to find a fallback [ 367.874859][ T40] block nbd34: shutting down sockets [ 367.898985][ T5833] ldm_validate_partition_table(): Disk read failed. [ 367.903964][T12310] kernel write not supported for file /integrity/ima/policy (pid: 12310 comm: syz.1.1719) [ 367.905987][ T5833] Dev nbd34: unable to read RDB block 0 [ 367.948678][ T5833] nbd34: unable to read partition table [ 367.989359][ T5833] ldm_validate_partition_table(): Disk read failed. [ 367.996967][ T5833] Dev nbd34: unable to read RDB block 0 [ 368.003080][ T5833] nbd34: unable to read partition table [ 368.784029][T12318] kernel write not supported for file /integrity/ima/policy (pid: 12318 comm: syz.1.1721) [ 369.166366][T12355] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1731'. [ 369.317946][T12359] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1733'. [ 369.385620][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1735'. [ 369.413438][T12363] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1735'. [ 369.738334][T12371] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1736'. [ 370.036515][T12371] nbd35: detected capacity change from 0 to 29696 [ 370.110195][ T5833] block nbd35: Send control failed (result -22) [ 370.116526][ T5833] block nbd35: Request send failed, requeueing [ 370.127995][ T53] block nbd35: Receive control failed (result -32) [ 370.128299][ T40] block nbd35: Dead connection, failed to find a fallback [ 370.142278][ T40] block nbd35: shutting down sockets [ 370.147618][ T40] blk_print_req_error: 58 callbacks suppressed [ 370.147637][ T40] I/O error, dev nbd35, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 370.163573][ T40] buffer_io_error: 56 callbacks suppressed [ 370.163590][ T40] Buffer I/O error on dev nbd35, logical block 0, async page read [ 370.187046][ T5833] I/O error, dev nbd35, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 370.196856][ T5833] Buffer I/O error on dev nbd35, logical block 0, async page read [ 370.204960][ T5833] I/O error, dev nbd35, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 370.214276][ T5833] Buffer I/O error on dev nbd35, logical block 0, async page read [ 370.222438][ T5833] I/O error, dev nbd35, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 370.231706][ T5833] Buffer I/O error on dev nbd35, logical block 0, async page read [ 370.239808][ T5833] I/O error, dev nbd35, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 370.249048][ T5833] Buffer I/O error on dev nbd35, logical block 0, async page read [ 370.250131][T12400] device-mapper: ioctl: Unable to rename non-existent device, to [ 370.257007][ T5833] I/O error, dev nbd35, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 370.274642][ T5833] Buffer I/O error on dev nbd35, logical block 0, async page read [ 370.284067][ T5833] I/O error, dev nbd35, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 370.293410][ T5833] Buffer I/O error on dev nbd35, logical block 0, async page read [ 370.301448][ T5833] I/O error, dev nbd35, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 370.310670][ T5833] Buffer I/O error on dev nbd35, logical block 0, async page read [ 370.319917][ T5833] ldm_validate_partition_table(): Disk read failed. [ 370.326644][ T5833] I/O error, dev nbd35, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 370.336059][ T5833] Buffer I/O error on dev nbd35, logical block 0, async page read [ 370.344189][ T5833] I/O error, dev nbd35, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 370.353393][ T5833] Buffer I/O error on dev nbd35, logical block 0, async page read [ 370.361640][ T5833] Dev nbd35: unable to read RDB block 0 [ 370.367666][ T5833] nbd35: unable to read partition table [ 370.414747][ T5833] ldm_validate_partition_table(): Disk read failed. [ 370.422074][ T5833] Dev nbd35: unable to read RDB block 0 [ 370.428760][ T5833] nbd35: unable to read partition table [ 370.596832][T12410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1750'. [ 370.624750][T12410] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1750'. [ 370.682271][T12410] warn_unsupported: 3 callbacks suppressed [ 370.682310][T12410] kernel write not supported for file /integrity/ima/policy (pid: 12410 comm: syz.1.1750) [ 370.841983][ T29] audit: type=1800 audit(6030232579.832:8): pid=12416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1752" name="discovery_nqn" dev="configfs" ino=38808 res=0 errno=0 [ 370.913992][T12416] kernel write not supported for file /integrity/ima/policy (pid: 12416 comm: syz.1.1752) [ 371.097245][T12419] kernel write not supported for file /integrity/ima/policy (pid: 12419 comm: syz.1.1753) [ 371.311742][T12427] kernel write not supported for file /integrity/ima/policy (pid: 12427 comm: syz.1.1757) [ 372.321391][T12436] kernel write not supported for file /integrity/ima/policy (pid: 12436 comm: syz.1.1760) [ 372.416335][T12461] kernel read not supported for file /8SpExYXgh|lH敿9.KgPn֤L]XF (pid: 12461 comm: syz.1.1769) [ 372.462444][ T29] audit: type=1800 audit(6030232581.432:9): pid=12461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1769" name=11F9BC9A3897C953FE7016B04578951E595883AE6714BB68CF7C6C489B01FCFA14C2EC06E695BF392E1B4B6702A0A9EFFE500EE66ED6A44C8F9A1EEF5D58DB46A6D0 dev="mqueue" ino=39969 res=0 errno=0 [ 372.984712][T12460] kernel write not supported for file /integrity/ima/policy (pid: 12460 comm: syz.1.1769) [ 373.290115][T12484] kernel write not supported for file /integrity/ima/policy (pid: 12484 comm: syz.1.1775) [ 373.429137][T12489] kernel write not supported for file /integrity/ima/policy (pid: 12489 comm: syz.1.1777) [ 373.907359][T12506] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 374.398578][T12515] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1783'. [ 374.429870][T12492] kernel write not supported for file /integrity/ima/policy (pid: 12492 comm: syz.1.1778) [ 374.950697][T12523] Oops: general protection fault, probably for non-canonical address 0xdffffc000000001a: 0000 [#1] PREEMPT SMP KASAN PTI [ 374.963344][T12523] KASAN: null-ptr-deref in range [0x00000000000000d0-0x00000000000000d7] [ 374.971778][T12523] CPU: 1 UID: 0 PID: 12523 Comm: syz.1.1786 Not tainted 6.13.0-rc4-syzkaller-00054-gd6ef8b40d075 #0 [ 374.982569][T12523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 374.992649][T12523] RIP: 0010:__lock_acquire+0xe4/0x3c40 [ 374.998129][T12523] Code: 08 84 d2 0f 85 15 14 00 00 44 8b 0d da 0f a7 0e 45 85 c9 0f 84 b4 0e 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 96 2c 00 00 49 8b 04 24 48 3d a0 67 32 93 0f 84 [ 375.017761][T12523] RSP: 0018:ffffc9000d19f840 EFLAGS: 00010002 [ 375.023857][T12523] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 375.031845][T12523] RDX: 000000000000001a RSI: 1ffff92001a33f1a RDI: 00000000000000d0 [ 375.039818][T12523] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 375.047786][T12523] R10: ffffffff901ce3d7 R11: 0000000000000003 R12: 00000000000000d0 [ 375.055755][T12523] R13: ffff88802780bc00 R14: 0000000000000000 R15: 0000000000000000 [ 375.063725][T12523] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 375.072654][T12523] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.079235][T12523] CR2: 00007fc4f9e4bf98 CR3: 0000000069182000 CR4: 00000000003526f0 [ 375.087205][T12523] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 375.095184][T12523] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 375.103164][T12523] Call Trace: [ 375.106444][T12523] [ 375.109374][T12523] ? die_addr+0x3b/0xa0 [ 375.113535][T12523] ? exc_general_protection+0x155/0x230 [ 375.119092][T12523] ? asm_exc_general_protection+0x26/0x30 [ 375.124817][T12523] ? __lock_acquire+0xe4/0x3c40 [ 375.129670][T12523] ? hlock_class+0x4e/0x130 [ 375.134172][T12523] ? mark_lock+0xb5/0xc60 [ 375.138528][T12523] ? __pfx___lock_acquire+0x10/0x10 [ 375.143723][T12523] ? __pfx_mark_lock+0x10/0x10 [ 375.148498][T12523] lock_acquire.part.0+0x11b/0x380 [ 375.153603][T12523] ? __put_mountpoint.part.0+0x74/0x1c0 [ 375.159156][T12523] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 375.164784][T12523] ? rcu_is_watching+0x12/0xc0 [ 375.169551][T12523] ? trace_lock_acquire+0x14e/0x1f0 [ 375.174769][T12523] ? __put_mountpoint.part.0+0x74/0x1c0 [ 375.180342][T12523] ? lock_acquire+0x2f/0xb0 [ 375.184852][T12523] ? __put_mountpoint.part.0+0x74/0x1c0 [ 375.190407][T12523] _raw_spin_lock+0x2e/0x40 [ 375.194907][T12523] ? __put_mountpoint.part.0+0x74/0x1c0 [ 375.200459][T12523] __put_mountpoint.part.0+0x74/0x1c0 [ 375.205841][T12523] umount_tree+0x7f9/0xde0 [ 375.210264][T12523] ? __pfx_umount_tree+0x10/0x10 [ 375.215213][T12523] ? lock_acquire+0x2f/0xb0 [ 375.219713][T12523] ? free_nsproxy+0x47/0x470 [ 375.224302][T12523] put_mnt_ns+0xcb/0x130 [ 375.228548][T12523] ? free_nsproxy+0x47/0x470 [ 375.233136][T12523] free_nsproxy+0x47/0x470 [ 375.237551][T12523] switch_task_namespaces+0xeb/0x100 [ 375.242837][T12523] do_exit+0xad3/0x2d70 [ 375.246998][T12523] ? get_signal+0x8f7/0x2610 [ 375.251586][T12523] ? __pfx_do_exit+0x10/0x10 [ 375.256179][T12523] ? do_raw_spin_lock+0x12d/0x2c0 [ 375.261212][T12523] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 375.266585][T12523] do_group_exit+0xd3/0x2a0 [ 375.271091][T12523] get_signal+0x2576/0x2610 [ 375.275594][T12523] ? __pfx_get_signal+0x10/0x10 [ 375.280442][T12523] ? __pfx_do_futex+0x10/0x10 [ 375.285128][T12523] arch_do_signal_or_restart+0x90/0x7e0 [ 375.290678][T12523] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 375.296835][T12523] ? __pfx___x64_sys_open+0x10/0x10 [ 375.302044][T12523] syscall_exit_to_user_mode+0x150/0x2a0 [ 375.307680][T12523] do_syscall_64+0xda/0x250 [ 375.312193][T12523] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.318088][T12523] RIP: 0033:0x7f9784585d29 [ 375.322501][T12523] Code: Unable to access opcode bytes at 0x7f9784585cff. [ 375.329507][T12523] RSP: 002b:00007f97853670e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 375.337916][T12523] RAX: fffffffffffffe00 RBX: 00007f9784776328 RCX: 00007f9784585d29 [ 375.345884][T12523] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f9784776328 [ 375.353852][T12523] RBP: 00007f9784776320 R08: 0000000000000000 R09: 0000000000000000 [ 375.361828][T12523] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f978477632c [ 375.369793][T12523] R13: 0000000000000000 R14: 00007ffd4d06d450 R15: 00007ffd4d06d538 [ 375.377764][T12523] [ 375.380777][T12523] Modules linked in: [ 375.384680][T12523] ---[ end trace 0000000000000000 ]--- [ 375.390127][T12523] RIP: 0010:__lock_acquire+0xe4/0x3c40 [ 375.395588][T12523] Code: 08 84 d2 0f 85 15 14 00 00 44 8b 0d da 0f a7 0e 45 85 c9 0f 84 b4 0e 00 00 48 b8 00 00 00 00 00 fc ff df 4c 89 e2 48 c1 ea 03 <80> 3c 02 00 0f 85 96 2c 00 00 49 8b 04 24 48 3d a0 67 32 93 0f 84 [ 375.415206][T12523] RSP: 0018:ffffc9000d19f840 EFLAGS: 00010002 [ 375.421276][T12523] RAX: dffffc0000000000 RBX: 0000000000000000 RCX: 0000000000000000 [ 375.429241][T12523] RDX: 000000000000001a RSI: 1ffff92001a33f1a RDI: 00000000000000d0 [ 375.437210][T12523] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000001 [ 375.445174][T12523] R10: ffffffff901ce3d7 R11: 0000000000000003 R12: 00000000000000d0 [ 375.453146][T12523] R13: ffff88802780bc00 R14: 0000000000000000 R15: 0000000000000000 [ 375.461116][T12523] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 375.470045][T12523] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 375.476627][T12523] CR2: 00007fc4f9e4bf98 CR3: 0000000069182000 CR4: 00000000003526f0 [ 375.484597][T12523] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 375.492561][T12523] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 375.500530][T12523] Kernel panic - not syncing: Fatal exception [ 375.506826][T12523] Kernel Offset: disabled [ 375.511139][T12523] Rebooting in 86400 seconds..