last executing test programs: 33m50.357135585s ago: executing program 32 (id=1075): openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sg0\x00', 0x82802, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto(0x3, 0x2284, 0x38) bpf$auto(0x0, &(0x7f00000001c0)=@task_fd_query={0x9, 0x21eb, 0x7ff, 0x6, 0xa, 0x1000009, 0x5f, 0x0, 0x3}, 0x6f3) socket(0x10, 0x2, 0x0) memfd_create$auto(&(0x7f0000000000)='\xc4--:\xdd:,./-${\x00', 0x4) socket$nl_generic(0x10, 0x3, 0x10) socket(0xa, 0x3, 0x100) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) socket(0x2a, 0x2, 0x6) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, 0x0, 0x106, 0x0, 0x1, 0x3}, 0xed7138c}, 0x7, 0x0) read$auto(r1, 0x0, 0x8) iopl$auto(0x3) lsm_get_self_attr$auto(0x64, 0x0, &(0x7f0000002440)=0x1ff, 0x0) socket(0xa, 0x3, 0x6) inotify_init1$auto(0x0) socket$nl_generic(0x10, 0x3, 0x10) eventfd$auto(0x3) r2 = socket(0xa, 0x2, 0x88) mprotect$auto(0x9, 0xfffffffffffffffb, 0xebda) bpf$auto(0x0, &(0x7f0000000000)=@link_update={r2, @new_prog_fd=0x4, 0x4, @old_map_fd=r0}, 0xa3) 33m43.258392565s ago: executing program 33 (id=1179): r0 = socket$nl_generic(0x10, 0x3, 0x10) timer_create$auto(0x3, 0x0, &(0x7f0000000280)=0x6) exit$auto(0x5) timer_gettime$auto(0x0, &(0x7f0000001f80)={{0x9, 0x100000001}, {0x9f9a, 0x401}}) r1 = syz_genetlink_get_family_id$auto_netdev(&(0x7f0000001500), 0xffffffffffffffff) sendmsg$auto_NETDEV_CMD_QUEUE_GET(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010026bd7000f6dbdf250a000000080003000100000008000200", @ANYRES32, @ANYBLOB="080001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x22048814) 29m8.529747858s ago: executing program 1 (id=2714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000002f00), 0xffffffffffffffff) sendmsg$auto_NFSD_CMD_LISTENER_SET(r0, &(0x7f0000005380)={0x0, 0x0, &(0x7f0000005340)={&(0x7f0000002f40)={0x14, r1, 0x1, 0x70bd2b, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0xc000}, 0x20000000) 29m8.287431392s ago: executing program 1 (id=2716): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000600)='/proc/thread-self/clear_refs\x00', 0x2, 0x0) write$auto_proc_clear_refs_operations_internal(r0, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) fanotify_init$auto(0x100, 0x0) r1 = socket(0x39, 0x5, 0x8) r2 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/security/tomoyo/audit\x00', 0x0, 0x0) read$auto_tomoyo_operations_securityfs_if(r2, 0x0, 0x0) read$auto(r2, &(0x7f0000000240)='\x00\x00\x00\x00/kernel/securi\xccy/toMoyo/p5rofile', 0x1a46fabf) finit_module$auto(r2, &(0x7f0000000000)='%#]]##\\-)\\=^(\'\x00', 0x2) sendmsg$auto_GTP_CMD_NEWPDP(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x8010}, 0x4000804) r3 = openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x82080, 0x0) ioctl$auto_FUSE_DEV_IOC_BACKING_OPEN(r3, 0x4010e501, &(0x7f00000000c0)={r1, 0x200}) r4 = syz_genetlink_get_family_id$auto_nlbl_unlbl(&(0x7f0000000140), r1) sendmsg$auto_NLBL_UNLABEL_C_STATICREMOVEDEF(r1, &(0x7f0000000280)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r4, 0x8, 0x70bd28, 0x25dfdbfe, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x12) fcntl$auto(0x3, 0x4, 0xa553) fanotify_init$auto(0x2, 0x0) close_range$auto(0x2, 0x8000, 0x0) 29m7.633965154s ago: executing program 1 (id=2722): r0 = openat$auto_generic(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/virtual/bluetooth/hci5/rfkill31/soft\x00', 0x80, 0x0) r1 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000640), 0xffffffffffffffff) sendmsg$auto_NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000002dc0)={0x0, 0x0, &(0x7f0000002d80)={&(0x7f00000016c0)=ANY=[@ANYBLOB="00060000", @ANYRES16=r1, @ANYBLOB="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"], 0x600}, 0x1, 0x0, 0x0, 0x800}, 0x8000) sendmsg$auto_NL80211_CMD_STOP_SCHED_SCAN(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x6c, r1, 0x200, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_DISABLE_HE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x4a, 0xcd, "431bbb2d315dcfacf3a6c90639b15d7f4852f932274b0d3b17e203e6350eef52876ab220aa1c2fbf50e574786903218a241159e5d0eb3ed21dd64e30f48b295321f23700f245"}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7ff}]}, 0x6c}, 0x1, 0x0, 0x0, 0x810}, 0x4004081) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000400)='/dev/sequencer\x00', 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) ioctl$auto(0xc8, 0x401054d5, 0x5c8d) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_ovs_packet(&(0x7f0000001940), 0xffffffffffffffff) sendmsg$auto_OVS_PACKET_CMD_EXECUTE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x40, r3, 0x1b, 0x70bd26, 0x25dfdbfd, {}, [@OVS_PACKET_ATTR_PROBE={0x4}, @OVS_PACKET_ATTR_ACTIONS={0x4}, @OVS_PACKET_ATTR_PACKET={0x12, 0x1, "898771f1c19f1779048590828847"}, @OVS_PACKET_ATTR_KEY={0xc, 0x2, 0x0, 0x1, [@typed={0x8, 0x1d, 0x0, 0x0, @u32=0xd}]}, @OVS_PACKET_ATTR_PROBE={0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x4004040}, 0xc800) mknod$auto(&(0x7f0000000040)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00'/263, 0x1, 0x4) lstat$auto(&(0x7f0000000500)='\xfd\x90\x8f2\x14\x92\x00\xbf\xdf\xcf\x9a\xae}\xd9\xf95\xc5gV\x82\f\xe5h\xfe\x83\xe4\xbe\x8c\x1f\xa5\xf1_T\xde\xf7\xd4\x83D\x9eXS\xd6\x90T\xc1v\xad#\xc4q\x8b\xed2\xadW:0\xef\x9c.=\xba\x0fy\x8f\xcd\xd6\xde\xa9i\xec\xe8\xca\x9f\xf3\x82b\xa2y\xa87J\xfc \xc5\xd8\x80\xba\xaaV\x8f{\x1f\x1b\xb0\n\x97\\\xa7\xe3\xdf\xc29-*;#r\xc8\xd1\x14RcF\x87\xe4\x1c\x1fGL\xa5\x19\x90\xd6\x8d*\xe6\b(\x1a\xea\x95\xdc\xa6)5\xae&yAl\x1e\xe3j Lp\x91\r\xed%\xafZ\xf8w\xf2}\xcdGS\xce\xb9\xdck\x86\x00.6\xe6{\xc1\x00\x1bW5\x81\xda!\xcb.O\xa9\xf3\xa7\x88+\xb9\xf3\x9a7\xa4\xe6)<\xa79\xa4\x87\\\xb4\xbf\v\x03\x87\xac\x87r\x02\x05\xdb\xe4\xde,V\xb6G\xba.WR\xe2<~\xdd\xb2\xe53hj_;\xa5qm\x92\xc7P\xc9.\x82w8\x1f\xfcX\xe4\x14\xc72cC\xd3\x00', 0x0) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0xcbd5d) setrlimit$auto(0x1, 0x0) sendfile$auto(0x3, 0x3, 0x0, 0x400000000006) sendmsg$auto_OVS_DP_CMD_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xf0, &(0x7f0000000040)={&(0x7f0000000000)={0x1c, 0x0, 0x374fe8f90a251713, 0x70bd29, 0x25dfdbff, {}, [@OVS_DP_ATTR_USER_FEATURES={0x8, 0x5, 0x9}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) r4 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r4, &(0x7f0000000180)={{&(0x7f0000000000)=[0xa, 0x80fe], 0xb8, 0x0, 0x0, &(0x7f0000000140), 0x8, 0x80000000}, 0x5}, 0x1, 0xa) 29m7.427334334s ago: executing program 1 (id=2725): r0 = socket$nl_generic(0x10, 0x3, 0x10) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socket(0x15, 0x5, 0x0) r1 = socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000013c0)=ANY=[@ANYRES8=r1, @ANYRES8=r0, @ANYRES32], 0x18}}, 0x80) 29m6.849593235s ago: executing program 1 (id=2728): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) rseq$auto(&(0x7f0000000300)={0x0, 0x9, 0x0, 0x4, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x3) shmdt$auto(0x0) madvise$auto(0x0, 0x3, 0x15) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20400, 0x0) dup2$auto(r0, r0) r1 = openat$auto_tracing_stats_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/tracing/per_cpu/cpu1/stats\x00', 0x301540, 0x0) read$auto_tracing_stats_fops_trace(r1, &(0x7f0000000040)=""/69, 0x45) ioctl$auto_TIOCMGET2(r0, 0x5415, 0x100000000000000) 29m6.840384556s ago: executing program 2 (id=2729): r0 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/fs/netfs/requests\x00', 0x8000, 0x0) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f00000004c0)=""/4096, 0x1000) read$auto_proc_iter_file_ops_compat_inode(r0, &(0x7f0000000200)=""/236, 0xec) 29m6.691174352s ago: executing program 2 (id=2732): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r0, 0x0, 0x4) 29m6.560617498s ago: executing program 2 (id=2734): close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) fanotify_init$auto(0x1f53, 0x2000000000002) open(&(0x7f0000000000)='./file1\x00', 0x1652c2, 0xe1d2b27bdc14aa98) r0 = open$dir(&(0x7f0000000040)='./file1\x00', 0x80202, 0xc2) fanotify_mark$auto(0x0, 0x11, 0x9, r0, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) 29m6.418627964s ago: executing program 2 (id=2736): openat$auto_sg_fops_sg(0xffffffffffffff9c, 0x0, 0x82802, 0x0) r0 = open(0x0, 0x2a4c0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x2, 0xc) sendmsg$auto_ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x18}}, 0x80) ioctl$auto_v4l2_fops_v4l2_dev(r0, 0x9, &(0x7f0000000040)="6727ba29faa88d5e7d68f2a48216f5e8f47c3a47e44744929d6f2baff59cd69c2f4bafba584ea89904931356af8e3227285e15825b554461c82aa1468013e710f95fb8e308521e35b3823adc3a24c00a0713eebd5378e4bfafe3555b9b7972d6216f28349154c53dedc7e71bfca7a65322335ff9563a7ed7cd482d13adc0d7229edcdc2ef86d5a5150fbb195d0424a40677b44b42ee6979546fc7e58d4eb2f95f0") mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) ioctl$auto_SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000001c0)) move_pages$auto(0x1, 0x2000000000003, 0x0, 0x0, 0x0, 0x8000400000000000) socket(0xa, 0x2, 0x88) mmap$auto(0x10000, 0x9, 0x5, 0x6f0, 0xacd, 0x80) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x7f, 0x8000) setsockopt$auto(0x400000000000003, 0x29, 0x1b, 0x0, 0x56b) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) open$dir(0x0, 0x10000, 0x4d) mmap$auto(0x0, 0x400007, 0xdf, 0x9b72, 0x2, 0x8000) setsockopt$auto(0x3, 0x1, 0x3d, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1, 0x1, 0x8000000000000000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000000)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0x9}, 0x201, 0x0, 0x1, 0x697b}, 0x5}, 0x3, 0x8) recvmmsg$auto(0x4, 0x0, 0x7, 0xe, 0x0) recvfrom$auto(0x4, 0x0, 0x101d0, 0x3ffffd, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x100) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_3={0x8, 0x9067, 0x18c, 0x3, 0x2, 0x8, 0x4, 0x57b8, 0xfffffff8, "63acf0e05b2d33ebc15774e816ef77cf", 0x0, 0x543, 0x4, 0x207, 0x3, 0x4, 0x4, 0x2, 0xe, 0xa, @attach_btf_obj_fd=0x3, 0x166, 0x7fb, 0x80000200006, 0xa, 0x48000000, r1}, 0xb) ioctl$auto(0x3, 0x2283, 0x38) 29m6.397278514s ago: executing program 1 (id=2738): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x10000, 0x0) (async) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x8200, 0x1001, 0x8, 0x1000000f, 0x66b, 0x0, 0x5}, 0x6f4) sendfile$auto(0xffffffffffffffff, r0, &(0x7f0000000040)=0x3ad7, 0xfffffffffffffffa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) write$auto(r2, 0x0, 0x7f) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async) sendmmsg$auto(0x3, 0x0, 0x7, 0x1f) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/arp_tables_targets\x00', 0x10b080, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000180)=""/46, 0x2e) (async, rerun: 64) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000100)=""/88, 0x58) (async, rerun: 64) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) read$auto_vmwgfx_driver_fops_vmwgfx_drv(r0, &(0x7f00000001c0)=""/137, 0xa7) 29m6.051527406s ago: executing program 34 (id=2738): r0 = openat$auto_vmwgfx_driver_fops_vmwgfx_drv(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dri/card0\x00', 0x10000, 0x0) (async) bpf$auto(0x0, &(0x7f0000000100)=@task_fd_query={0x7, 0x4, 0x8200, 0x1001, 0x8, 0x1000000f, 0x66b, 0x0, 0x5}, 0x6f4) sendfile$auto(0xffffffffffffffff, r0, &(0x7f0000000040)=0x3ad7, 0xfffffffffffffffa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) (async) write$auto(r2, 0x0, 0x7f) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) (async) sendmmsg$auto(0x3, 0x0, 0x7, 0x1f) close_range$auto(0x2, 0x8, 0x0) r3 = openat$auto_proc_iter_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/arp_tables_targets\x00', 0x10b080, 0x0) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000180)=""/46, 0x2e) (async, rerun: 64) read$auto_proc_iter_file_ops_compat_inode(r3, &(0x7f0000000100)=""/88, 0x58) (async, rerun: 64) syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000080), r1) read$auto_vmwgfx_driver_fops_vmwgfx_drv(r0, &(0x7f00000001c0)=""/137, 0xa7) 29m5.754866473s ago: executing program 5 (id=2742): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_tipcv2(&(0x7f000000c180), 0xffffffffffffffff) sendmsg$auto_TIPC_NL_NAME_TABLE_GET(r0, 0x0, 0x4) 29m5.645328683s ago: executing program 5 (id=2743): socket(0x1e, 0x5, 0x0) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) io_uring_setup$auto(0x7, &(0x7f00000001c0)={0x5, 0xdf, 0xffffffff, 0xfffffffd, 0x53, 0x2, 0xffffffffffffffff, [0x9574, 0x7, 0x1], {0x9, 0x2, 0x201, 0x7, 0x3d, 0x8000001, 0x5530, 0x400, 0x1}, {0x3, 0x23, 0x7fff, 0x6, 0x400, 0x58, 0x5, 0x27, 0x40}}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20000, 0x0) ioctl$auto_TIOCGDEV2(r0, 0x5459, 0x0) 29m0.922113364s ago: executing program 2 (id=2752): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) rseq$auto(&(0x7f0000000300)={0x0, 0x9, 0x0, 0x4, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x3) shmdt$auto(0x0) madvise$auto(0x0, 0x3, 0x15) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20400, 0x0) dup2$auto(r0, r0) 29m0.921672217s ago: executing program 5 (id=2753): mmap$auto(0x0, 0x200004, 0x4000000000e3, 0x40eb2, 0xd, 0x300000000000) mmap$auto(0x2000000004, 0x8, 0xdf, 0x9b72, 0x1, 0x8000) mlockall$auto(0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, 0x0, 0x20018010) mmap$auto(0x0, 0x20009, 0xe2, 0xeb1, 0x405, 0x8000) socketpair$auto(0x1e, 0x8, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x118) socket(0x2, 0x1, 0x0) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000001c0), 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb0, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x8, 0x3ff57696, 0x9b72, 0x5, 0x8000000000008000) madvise$auto(0x0, 0xffffffffffff0004, 0x19) mbind$auto(0x2000, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) 29m0.16278355s ago: executing program 2 (id=2747): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/radio18\x00', 0x40000, 0x0) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x82204, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x20, r2, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x60040440}, 0x800) r4 = getpgid(0x0) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, r2, 0x30, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x80}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x1}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x9d}, @NL802154_ATTR_SEC_DEVKEY={0xb8, 0x2f, 0x0, 0x1, [@nested={0xb3, 0x50, 0x0, 0x1, [@generic="9419b8176d93f5ca1046811208eff792b71ebea0e186a706b0be3f00a7bdf4ec8912fa1a4a79fe9cc04d9a6fe4e2b8d08eca6ec9a69a169c6865d0511e202a3b6d49a61eb395bf05316a8864f2b7b26e43026461ad874625c8dc93cba35189b76c9c112f1ee306c0bd388c099cbee32455883265eef77594e9aea70c720c9ade3b46ba042874423ad1d4d087dcaa31af9449eae3b88dbf1c4ab216dfca83d3670baddba433d7f8", @typed={0x8, 0x111, 0x0, 0x0, @pid=r4}]}]}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x40}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x9}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) read$auto(r0, &(0x7f0000000000)='\xaaL\x92\f\xfc9/\xae\x95\xeb\x17\xae/l\xb0\xecm\x86\xd0)te\xf8\xab|\x83\x04\xf0\x9b\xd1\x13Vx\xb5\xfaO3\vXc\xfa\xc3\xce(\x12\xbe\xd2\x9b\xa8\x9b\x0e\xe02\ts$v\x9d\x9d\xd5\xac\xa92\xab\x00\x00', 0x8) 28m59.796410262s ago: executing program 35 (id=2747): r0 = openat$auto_v4l2_fops_v4l2_dev(0xffffffffffffff9c, &(0x7f0000000280)='/dev/radio18\x00', 0x40000, 0x0) setresuid$auto(0x0, 0x7, 0x8080) setfsuid$auto(0x0) openat$auto_configfs_file_operations_configfs_internal(0xffffffffffffff9c, &(0x7f0000000400)='/sys/kernel/config/target/core/alua/lu_gps/default_lu_gp/members\x00', 0x82204, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_NL802154_CMD_SET_CCA_MODE(r3, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f0000000000)={0x20, r2, 0x101, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x60040440}, 0x800) r4 = getpgid(0x0) r5 = ioctl$NS_GET_PARENT(0xffffffffffffffff, 0xb702, 0x0) sendmsg$auto_NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x10c, r2, 0x30, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x80}, @NL802154_ATTR_MAX_ASSOCIATIONS={0x8, 0x27, 0x1}, @NL802154_ATTR_SCAN_DURATION={0x5, 0x24, 0x9d}, @NL802154_ATTR_SEC_DEVKEY={0xb8, 0x2f, 0x0, 0x1, [@nested={0xb3, 0x50, 0x0, 0x1, [@generic="9419b8176d93f5ca1046811208eff792b71ebea0e186a706b0be3f00a7bdf4ec8912fa1a4a79fe9cc04d9a6fe4e2b8d08eca6ec9a69a169c6865d0511e202a3b6d49a61eb395bf05316a8864f2b7b26e43026461ad874625c8dc93cba35189b76c9c112f1ee306c0bd388c099cbee32455883265eef77594e9aea70c720c9ade3b46ba042874423ad1d4d087dcaa31af9449eae3b88dbf1c4ab216dfca83d3670baddba433d7f8", @typed={0x8, 0x111, 0x0, 0x0, @pid=r4}]}]}, @NL802154_ATTR_SCAN_TYPE={0x5, 0x1f, 0x40}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x5}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x5}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x9}, @NL802154_ATTR_NETNS_FD={0x8, 0x1d, r5}]}, 0x10c}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) read$auto(r0, &(0x7f0000000000)='\xaaL\x92\f\xfc9/\xae\x95\xeb\x17\xae/l\xb0\xecm\x86\xd0)te\xf8\xab|\x83\x04\xf0\x9b\xd1\x13Vx\xb5\xfaO3\vXc\xfa\xc3\xce(\x12\xbe\xd2\x9b\xa8\x9b\x0e\xe02\ts$v\x9d\x9d\xd5\xac\xa92\xab\x00\x00', 0x8) 28m59.771247949s ago: executing program 5 (id=2755): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$auto_macsec(&(0x7f0000000300), r0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x40000) writev$auto(0x1, &(0x7f0000000100)={0x0, 0xfffffffd}, 0x3) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) open(&(0x7f0000000100)='.\x00', 0x0, 0x408) socketpair$auto(0x16, 0x5, 0x8000000000000000, 0x0) openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, 0x0, 0x40, 0x0) socket(0x10, 0x2, 0x35) connect$auto(0x3, &(0x7f0000000040), 0x55) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x9, 0x5, 0x3) madvise$auto(0x0, 0xffffffffffff0001, 0x15) madvise$auto(0xbffdfffffffffffc, 0xffffffffffff0005, 0x19) io_getevents$auto(0x4, 0xffffffffffffffff, 0x8000000000000001, 0xfffffffffffffffc, 0x0) socket(0x2, 0x1, 0x0) setsockopt$auto(r0, 0xffffffff, 0x4, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000000), 0x68) connect$auto(0x3, &(0x7f0000000000), 0x55) syz_genetlink_get_family_id$auto_nlctrl(&(0x7f00000000c0), 0xffffffffffffffff) write$auto(0x3, 0x0, 0xfffffdef) connect$auto(0x3, 0x0, 0x55) timer_create$auto(0x0, 0x0, 0x0) select$auto(0x4, 0x0, &(0x7f0000000080)={[0xfffffffffffffffa, 0xe9e, 0x4, 0x5, 0x6, 0x100000081, 0xc, 0xf, 0x0, 0x40, 0xe, 0xd59, 0x9, 0xff, 0x2, 0x80080001]}, 0x0, 0x0) socket(0xa, 0x6, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x4000000) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0xffffffffffff0000, 0x8000) clock_nanosleep$auto(0x7, 0x6bd4, &(0x7f0000000180)={0x30, 0xfffffffffffffff7}, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) 28m58.511422062s ago: executing program 5 (id=2758): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0x2000040080000004, 0xe) mmap$auto(0x0, 0xfff, 0xdf, 0x9b72, 0x400, 0x28000) rseq$auto(&(0x7f0000000300)={0x0, 0x9, 0x0, 0x4, 0xffffffff, 0xfffffffe}, 0x8000, 0x0, 0x3) shmdt$auto(0x0) madvise$auto(0x0, 0x3, 0x15) rt_sigqueueinfo$auto(0x1, 0x7, &(0x7f0000000040)={@siginfo_0_0={0x0, 0x5, 0xfffffffb, @_sigpoll={0x52, 0x7}}}) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000840)='/dev/ttyS1\x00', 0x20400, 0x0) dup2$auto(r0, r0) 28m56.730243043s ago: executing program 5 (id=2765): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="bd88ecb3593c3108081bbe86f73872e2ff0059d966e61a171c95a1ec8b4344e841f724e9ece8de382dd973312656bda0dc24bc190be3ea04444e500205dea8965f4b56c46ceb2aab50bcddd7ecb57d7b712163b29270d33cc3a99e9f111ff6fcee437416434aaa39115b298770"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3a14a4bce321235a794a588c359e8bca720100006257a555f99c80f568a97d693eec23e589703c283d563188c788b9aacdf4e4caae7c30bd0200dcb46e5ee7d2b3ba7c9f1d15aa80c5ad951053878fc2388bd45395db1e825fed1f3af32450d17f4101d025c207cb2df011ef6f26a3aea384766b0fce4eec82a3cc7daca24f79d5def620a37d58043b67f7883d37ffd4cdb4d308a91cb6fe058c96a088e77c8361a8bc3badc58f343586acab2c266c73e96546f52ac3965411b42453a830e426b58b20fd6a251c41fe6661a18d199f1cbd", @ANYBLOB="1b004d"], 0x1ac}, 0x1, 0x0, 0x0, 0x4048811}, 0x40000) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) r0 = socket(0x10, 0x3, 0x6) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x50) 28m56.15224617s ago: executing program 36 (id=2765): sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="bd88ecb3593c3108081bbe86f73872e2ff0059d966e61a171c95a1ec8b4344e841f724e9ece8de382dd973312656bda0dc24bc190be3ea04444e500205dea8965f4b56c46ceb2aab50bcddd7ecb57d7b712163b29270d33cc3a99e9f111ff6fcee437416434aaa39115b298770"], 0x1ac}}, 0x40000) (async) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3a14a4bce321235a794a588c359e8bca720100006257a555f99c80f568a97d693eec23e589703c283d563188c788b9aacdf4e4caae7c30bd0200dcb46e5ee7d2b3ba7c9f1d15aa80c5ad951053878fc2388bd45395db1e825fed1f3af32450d17f4101d025c207cb2df011ef6f26a3aea384766b0fce4eec82a3cc7daca24f79d5def620a37d58043b67f7883d37ffd4cdb4d308a91cb6fe058c96a088e77c8361a8bc3badc58f343586acab2c266c73e96546f52ac3965411b42453a830e426b58b20fd6a251c41fe6661a18d199f1cbd", @ANYBLOB="1b004d"], 0x1ac}, 0x1, 0x0, 0x0, 0x4048811}, 0x40000) (async) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) (async) r0 = socket(0x10, 0x3, 0x6) sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x50) 11m42.709458556s ago: executing program 6 (id=12301): socket(0xa, 0x801, 0x84) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) capget$auto(0x0, 0xfffffffffffffffe) capset$auto(0x0, &(0x7f0000000180)={0x1, 0x7, 0x6}) sendmsg$auto_ETHTOOL_MSG_PSE_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01002ebd1dfefee68f6ee50ae170007fdb080025000000"], 0x14}, 0x1, 0x0, 0x0, 0x4000881}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000002040)={'veth0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r0, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x800) mkdir$auto(&(0x7f00000021c0)='./file0\x00', 0x4) utimes$auto(&(0x7f0000002340)='./file0\x00', &(0x7f0000002380)={0x5, 0x7}) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) r2 = socket(0xa, 0x1, 0x84) setsockopt$auto(r2, 0x10000000084, 0x7f, 0x0, 0xad4) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$auto(0x1e, 0x1, 0x8000000000000000, 0x0) r4 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000080)='/dev/pts/ptmx\x00', 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000001680), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_ETHTOOL_MSG_LINKMODES_GET(r7, &(0x7f0000002300)={0x0, 0x0, &(0x7f00000022c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16=r6, @ANYBLOB="110325bd7000fedbdf2501"], 0x14}}, 0x10040) r8 = getpgrp(0xffffffffffffffff) syz_open_procfs$namespace(r8, &(0x7f0000000040)='ns/net\x00') sendmsg$auto_ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000480)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x12000000}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="84020000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r8, @ANYBLOB="04006900040075801200a1002f6465762f7074732f70746d780000002b48e1d9f4e5098955408d0ac93a464c8e7f9a41defa0fece3572a52f0d4bd39f33e4096c37a9170ec144d4b3d40c93847069aa132c4903de78baa6a8466816a29dbd7988c636e126340c482ae8472fff64e27bdc9ff62363b7643d1b69988f3143768b6ac924353963db395c72b6759c699a49ae40274c21a98b6cac255717324a903c8c65c268dbfbfaf4bc757993304064ba05e95653083161c52f88dc269c44a7d4c61c81a9bb104004980005875adaa6f713274a834cfb761c13a529cc706af6973f1de89b408ff02309cc123587d87d70222bc1d4850fb519ee9c6876c4c65ea7460007f689aa311cfe2e21a0400538008008f800400218005000200a10000000000"], 0x284}, 0x1, 0x0, 0x0, 0x24000}, 0x400c000) mknod$auto(&(0x7f0000000000)='}[,&*}\x00', 0x1, 0x4) mount$auto(0x0, &(0x7f00000005c0)='}[,&*}\x001\xe9\x84,\x11h\x9ez<\xc3\xd1\a\xfa\x9aJ\xb1R=XX\x8c\xa2\xf2\t\x06\xb3|S>\xa9\x14gl\xbb\x83\x9e\xa4\x91\x80\x89\xbd\xf6\xd7;\x11\x96od\xe90\xe2\xba\xc6\x8c\x9d\xb1\x1c\xb0\xf7\xd4\x1d\x7f\xcf\x1fj\xad\xd3bvi\xf4\xb7n\xb2\xe2\xa8\x82\xb1fa\xf9\xbd\xe8UN \x1az\x9a/ \x8e\xed\xd4\xe7\xc4-\xf5\xd7{\bc%\xfc\x05MK\xea\xbe|9@,\xbf:.\x91\xc9d\x1b\xf0\xd4i\xdfW\xb6\xa4\xe9\n~,n\xdc\xc9\x9c\x9f\x10\x0e\x04\x80QT\xf4\xe5%T\xcbn\x96JS\xfe\x03\xebc\xd1(\xc4\x9e\x9a\xae\xd5\x1d\x93oA\x8d\xc6Q\x99\xce}\x1b\xf3\xe3\x9bJ/\x80\x99v\xc2\x03O\xc0{\xcf\xe5\xf4?\xa6fc\xed\x9a\xfa \xea\xcdx,A\x9c\x94[\xc0em\xc1\xb2\xf7\xa7u\xcd\x90ML\x10\x02 R\x85\xfe\rM\x8dM\x17\x92\x1e\xea\x97\x91\xd7\x1a.4\x90\xb7\x86A\x03\x1c`V\xf7HBS\x11\xeb@I\xe2VIc\x9f\\\xe3\xeb\xc0-\xedO\b\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xd0&\x90\x00\xc6\xe3\x15\x85\xa3\xb2Y\x05sq[\xb0\xbf}\"J\x15\xe6@\x82\x14\xab\xe5~\x96\xc1\x9b\x9b\xf3\xfd\xe8F\x9e>\xe1Z\bs\x02\xbf\xd1o\xe2\xdf\x13-[\xe8\x8e\xd1\xcb\xf8\x06iOS\x13\x05\xebf7d%1\x0e\x9f\xb0\xe3\x8a\x14\x926\xc7M\x1a\xf00\xf4.O`\xffI{v5\xbe\x9c\xda3m \x1c\xb3P$\x1c2\x82\xbdtW3|\xf8\xf0\xccu\x9f\xe7\x89\xe0\xdf)\x83\xb4\x98\xe1_jW \x1a\xe2:\'\\\x9al9\t\x91\xe9\xec\x16\x91\xdbj\xb0%U\x9b\xc44\x00\xf2\xf3~\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00#ge\xe7\x94\xb61D\xd9\xc3\xab\x86A#\xfcqd\xa3\xbd}\x034\\u\x02\x19\x14\xc4\xf3u\x115\x81/N>\xf8~F\xbcV\x9fz\x16\x93\xe2\x14\xeb3\xa2-\x98\xbb\x19\xd2\xec\xfeH,\xbc{\x90\xac\xdf\xde\b\\w!R-C\a\xc8\xdbs\xb8\xe0\x8e,9\a5:\xf1\xd1\x8f\xb3H\xd3AQ6\xa1\xe3\xf1k<\x87\x0e\xbfC\xae2\xa8\xaf\x11m\xb0\x1dpY9B\xfa\xa9\x95\xff<\xb1\x9f\x9d\x19\x99x\x1dM!u\x9b\x9b\x14\xbd\xbc\xd3\x0e\xefrPy\x99z$\x96\x1eP\x91r\x90l1\xc1\xc8\x99\x9bZ\x11\xf5\xbe\x8b\b}\xd1\xf2f\xc0\x9a\xa9\x17\x19F\xc7\xf6\'\xaf\x98O0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$auto_batadv(&(0x7f0000000180), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000940)={'batadv0\x00', 0x0}) sendmsg$auto_BATADV_CMD_TP_METER(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x28, r6, 0x77bed28568c43d3b, 0x70bd2a, 0x25dfdbfd, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_ORIG_ADDRESS={0xa}]}, 0x28}}, 0x80) sendmsg$auto_NL80211_CMD_NEW_KEY(r1, &(0x7f0000001600)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000024c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="13042bbd7000fb69dc205200000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x4804}, 0x80) 10m8.683625251s ago: executing program 8 (id=12788): mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb2, 0x402, 0x300000000000) r0 = socket(0x2b, 0x1, 0x1) semctl$auto(0x8, 0x2, 0x20000013, 0x4) setsockopt$auto(r0, 0x7, 0x40030, 0x0, 0x1d) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000040)='/proc/irq/default_smp_affinity\x00', 0x40000, 0x0) 10m5.90204433s ago: executing program 8 (id=12801): syz_open_procfs$namespace(0x0, 0x0) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) ioctl$auto_RNDRESEEDCRNG2(0xffffffffffffffff, 0x5207, 0x99) read$auto(r0, 0x0, 0x39b8) syz_open_procfs$namespace(0x0, 0x0) semctl$auto(0x1ff, 0x100000001, 0x13, 0x9) socket(0x10, 0x2, 0xc) 10m5.493580247s ago: executing program 38 (id=12801): syz_open_procfs$namespace(0x0, 0x0) r0 = openat$auto_proc_pagemap_operations_internal(0xffffffffffffff9c, &(0x7f0000000980)='/proc/self/pagemap\x00', 0x80800, 0x0) close_range$auto(0x2, 0x8000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2c, 0x3, 0x0) ioctl$auto_RNDRESEEDCRNG2(0xffffffffffffffff, 0x5207, 0x99) read$auto(r0, 0x0, 0x39b8) syz_open_procfs$namespace(0x0, 0x0) semctl$auto(0x1ff, 0x100000001, 0x13, 0x9) socket(0x10, 0x2, 0xc) 2m18.828974324s ago: executing program 4 (id=15487): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB, @ANYBLOB="000229bd7000fbdbdf25022000a6"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="19"], 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 2m18.565075035s ago: executing program 4 (id=15491): mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) openat$auto_tracing_buffers_fops_trace(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/tracing/per_cpu/cpu0/trace_pipe_raw\x00', 0x0, 0x0) mmap$auto(0x1, 0x3, 0x1, 0x100000011, 0xbc, 0x68) socketpair$auto(0x1, 0x6, 0x800002, 0x0) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) socket(0xa, 0x2, 0x88) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg0\x00'}) bpf$auto(0x0, &(0x7f00000002c0)=@link_update={r1, @new_prog_fd, 0x0, @old_map_fd=r2}, 0x13) pipe2$auto(0x0, 0x800) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r1, 0x0, 0x3}, 0xc) r3 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS1\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r3, 0x5423, 0x0) 2m18.186902423s ago: executing program 4 (id=15493): r0 = open(&(0x7f0000000040)='./file0\x00', 0x42000, 0x2) read$auto_snd_rawmidi_f_ops_rawmidi(r0, &(0x7f0000000080)=""/181, 0xb5) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/security/tomoyo/manager\x00', 0xa040, 0x0) read$auto(r1, 0x0, 0x74d) lremovexattr$auto(&(0x7f0000000140)='./file1\x00', &(0x7f00000001c0)='#,\a\x00\x00\x00PR#\xab\x80\xff[\xa11\xf5vSe\x00\x00\x00\x00d}\xd0d\xf3\a1:\x04\x00&*[\x00') 2m17.934691393s ago: executing program 4 (id=15494): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) r0 = syz_genetlink_get_family_id$auto_nfsd(&(0x7f0000000080), 0xffffffffffffffff) statmount$auto(&(0x7f0000000000)={0xc, 0x8, 0x5, 0xffffffff, 0xfffffffffffffff2}, 0x0, 0x800, 0x0) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="01002dbd7002ffdbdf2502d6322c09"], 0x24}, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) r1 = socket(0x10, 0xa, 0x3) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) sendmsg$auto_NFSD_CMD_THREADS_SET(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000021}, 0x8004) r2 = openat$auto_vhost_net_fops_net(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x5) ioctl$auto_VHOST_SET_OWNER(r2, 0xaf01, 0x0) madvise$auto(0x0, 0x2003f0, 0x15) madvise$auto(0x0, 0x200007, 0x19) mlock$auto(0x5, 0xffff) r3 = fcntl$getown(r1, 0x9) rt_sigqueueinfo$auto(0x0, 0x6, &(0x7f0000000900)={@siginfo_0_0={0x1, 0x5, 0x5, @_sigchld={r3, 0xee01, 0x4, 0x5, 0x10}}}) prctl$auto(0x7fff, 0x40, 0x22b, 0x0, 0x8) 2m17.517084858s ago: executing program 4 (id=15498): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) tkill$auto(0x80000000000001, 0x7) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0x2, 0x3, 0xa) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x8) connect$auto(0x3, &(0x7f00000018c0), 0x55) clock_nanosleep$auto(0x2, 0x1000, 0x0, 0x0) connect$auto(0x3, &(0x7f0000000140), 0x55) 2m16.831215071s ago: executing program 4 (id=15502): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS1\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) 2m16.531356785s ago: executing program 39 (id=15502): r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ttyS1\x00', 0x0, 0x0) ioctl$auto_TIOCSETD2(r0, 0x5423, 0x0) 6.988292783s ago: executing program 9 (id=16149): timer_create$auto(0x3, 0x0, &(0x7f0000000140)=0xffffffff) timer_settime$auto(0x0, 0x3, &(0x7f00000000c0)={{0x26b, 0x4}, {0x0, 0x83}}, 0x0) close_range$auto(0x2, 0xa, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) getsockopt$auto(0x3, 0x6, 0xd, 0x0, 0x0) timer_delete$auto(0x0) r0 = openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptyp4\x00', 0x103800, 0x0) ioctl$auto_TIOCVHANGUP2(r0, 0x5437, 0x0) close_range$auto(0x2, 0x8, 0x0) 6.604622114s ago: executing program 9 (id=16151): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="000229bd7000fbdbdf25022000a6"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 6.463240631s ago: executing program 9 (id=16152): socket(0xa, 0x3, 0xff) connect$auto(0x3, &(0x7f0000000140), 0x55) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x5, 0x3, 0x15, 0x940, 0x1, 0x3, 0x6, 0x4, 0x80, 0x5, 0x2, 0x9, 0xb0, 0x9, 0x2, 0x3, 0x5, 0x7}, 0x4, 0x81) sendmsg$auto_L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x40) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r2 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x3, &(0x7f0000000100)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x7}, 0xe) ppoll$auto(&(0x7f0000000040)={r2, 0x8, 0x6}, 0x9, &(0x7f0000000080)={0x10001, 0x7}, &(0x7f00000000c0)={0x9}, 0x8) write$auto(r1, &(0x7f0000000c40)='ethtool\x00', 0xffffffff) 6.06533891s ago: executing program 9 (id=16156): socket(0x2, 0x801, 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB='^\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r0, 0x0, 0x20040000) r1 = socket(0xa, 0x801, 0x84) sendmsg$auto_ILA_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000429bd70001f000000000000000000006074aac90f0a8dfeb0ce8d480000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x7b01556d5844b338) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mlockall$auto(0x9) acct$auto(0x0) ioctl$auto(0xc8, 0x6, 0x5d6e859b) madvise$auto(0x0, 0xffffffffffff0001, 0x9) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x2cbd5d) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x6) mq_open$auto(&(0x7f00000020c0)='.\xf1\x00', 0x56a, 0x2d, 0x0) readv$auto(0x3, 0x0, 0x1) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x7, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/arp\x00', 0x60000, 0x0) 5.177360645s ago: executing program 9 (id=16161): mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000", @ANYBLOB="000229bd7000fbdbdf25022000a6"], 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0xc0) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) socket(0x10, 0x2, 0x0) sendmsg$auto_CTRL_CMD_GETPOLICY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="14000000", @ANYRES16, @ANYBLOB="0700000000000000df250a"], 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x10004010) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="72010000", @ANYBLOB="1a00"], 0x1ac}}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1ac}}, 0x40000) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x1c03, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) 4.878771267s ago: executing program 9 (id=16163): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/thread-self/net/nfsfs/servers\x00', 0x400, 0x0) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000040)=""/248, 0xf8) read$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000180)=""/210, 0x1) ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x5, 0x10001, [{0xffffffffffffffff, 0x0, 0x2, 0x10000}, {0xffffffffffffffff, 0x0, 0xd24, 0x9}, {0xffffffffffffffff, 0x0, 0x8, 0x8}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000040), 0xffffffffffffffff) write$auto(0xc8, 0x0, 0x40f6) mmap$auto(0x0, 0x9, 0x3ff57696, 0x9b72, 0x2, 0x8000000000008000) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000003680)={'wlan0\x00', 0x0}) sendmsg$auto_NL80211_CMD_NEW_KEY(r3, &(0x7f00000048c0)={0x0, 0x0, &(0x7f0000004880)={&(0x7f0000001280)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010029bd7000fddbdf250b00000004006e8008000300", @ANYRES32=r4, @ANYBLOB="280ef93869a5060000004a85daaec1cd785319b82651d14d11824d08cab36bbf608641fce0955d10f4b299fc08b95e8b72d92196209e73634aee69fe9029134f1d060000000000000096d30ce979db7f8489afff3211cbf7222e0ae04793030d0d34f198276d2cb1a78d7742350eab50c0333b623bde9b20e0e90a35021d7265e6bc8329fa047da44d168b73534732d33e16d04b43dd074ea1d63e782c34d3a95e04b6f8f8a108345e3d4734d0fbbc8b90c41f189ea8d7ed7ef0ff62fe3332"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x890) r5 = openat$auto_split_huge_pages_fops_huge_memory(0xffffffffffffff9c, &(0x7f00000000c0), 0x642, 0x0) socket(0xa, 0x801, 0x106) connect$auto(0x3, &(0x7f0000000140), 0x55) mmap$auto(0x0, 0x8, 0x2, 0x9b72, 0x5, 0x0) io_uring_setup$auto(0x6, 0x0) setsockopt$auto(0x3, 0x1, 0x24, 0x0, 0x9) ftruncate$auto(0x3, 0x8) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) openat$auto_tty_fops_tty_io(0xffffffffffffff9c, &(0x7f0000001380)='/dev/ptyt8\x00', 0x400000, 0x0) socket(0x2, 0x3, 0xa) io_uring_setup$auto(0x6, 0x0) futex$auto(0x0, 0x6, 0x8, 0x0, 0x0, 0x80000001) setsockopt$auto(0x3, 0x2, 0x2, 0x0, 0x9) write$auto_split_huge_pages_fops_huge_memory(r5, &(0x7f0000000100)='1s', 0x2) 3.905970114s ago: executing program 3 (id=16169): mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xffffffffeffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$auto_tomoyo_operations_securityfs_if(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/security/tomoyo/exception_policy\x00', 0x2, 0x0) read$auto_tomoyo_operations_securityfs_if(r1, 0x0, 0x0) read$auto(r1, &(0x7f0000000000)='/sys/kernel/security/tomoyo/profile\x00', 0x1a46fabf) r2 = open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) r3 = socket(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/loop11\x00', 0x40, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) bpf$auto(0x0, &(0x7f00000002c0)=@bpf_attr_5={@target_ifindex=r5, r4, 0x8, 0x1ff, r3, @relative_id=0x13, 0xe600}, 0xf) pipe2$auto(0x0, 0x800) bpf$auto(0x2, &(0x7f00000001c0)=@raw_tracepoint={0x5, r2, 0x0, 0x3}, 0xc) 3.532574596s ago: executing program 3 (id=16171): mmap$auto(0x0, 0x8, 0x4000000000df, 0x44eb1, 0x6, 0x300000000000) r0 = socket(0x2, 0x3, 0xa) connect$auto(r0, &(0x7f00000000c0), 0x55) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) write$auto(0x3, 0x0, 0x81) ioctl$auto(0x3, 0x541b, 0xffffffffffffffff) mremap$auto(0x0, 0x7, 0x3fd6, 0x0, 0x20000001) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0x8000, 0x0) io_uring_setup$auto(0x3ff, 0x0) mremap$auto(0x4, 0xfff, 0x8000, 0x7, 0x7ff) mmap$auto(0x0, 0x8, 0x329, 0x10011, 0x2, 0x8000) mmap$auto(0x0, 0xf4, 0xdf, 0xeb1, 0x5, 0x8000) shutdown$auto(0x200000003, 0x2) io_uring_setup$auto(0x6, 0x0) io_uring_setup$auto(0x6, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2, 0x801, 0x100) poll$auto(&(0x7f0000000000)={0x3, 0x1, 0xa}, 0xb, 0x80) madvise$auto(0x0, 0x3, 0x15) mbind$auto(0x0, 0x100000004, 0x100000000, 0x0, 0x6, 0x2) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000010}, 0x20008000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0x7f, 0x8000) mremap$auto(0x0, 0xffffffffffffffff, 0x3fd6, 0x3, 0x7fffffffb000) prctl$auto(0x23, 0x200000000000009, 0x7fffffffefff, 0x0, 0x0) r1 = openat$auto_proc_pid_cmdline_ops_base(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/cmdline\x00', 0x2000, 0x0) read$auto_proc_pid_cmdline_ops_base(r1, &(0x7f0000000040)=""/159, 0x9f) read$auto(r1, &(0x7f0000000100)='/proc/thread-self/cmdline\x00', 0x9) mremap$auto(0x101, 0x9a5, 0x5, 0xb, 0x2) 3.373294841s ago: executing program 7 (id=16172): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg$auto(r0, &(0x7f0000003c80)={{0x0, 0x54c5, &(0x7f0000003c00)={0x0, 0x4}, 0x9, 0x0, 0xd6a, 0x9}, 0x8}, 0x6, 0x5, 0x0) r1 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/arp\x00', 0x60000, 0x0) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000000000)=""/223, 0xdf) r2 = socket(0x10, 0x2, 0x0) r3 = syz_genetlink_get_family_id$auto_seg6(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$auto_SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0xfffffffffffffeae, r3, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@SEG6_ATTR_DST={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000088}, 0x20000000) read$auto_proc_reg_file_ops_compat_inode(r1, &(0x7f0000001240)=""/4096, 0x1000) pipe$auto(&(0x7f0000000140)=r0) 3.044162335s ago: executing program 3 (id=16173): rt_sigprocmask$auto(0xb5, 0xfffffffffffffffe, 0xfffffffffffffffe, 0x8) socket(0x2c, 0x3, 0xa) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0xd4, 0x8000) r0 = socket(0x2, 0x1, 0x0) close_range$auto(0x2, 0x8, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x2b, 0x1, 0x0) poll$auto(&(0x7f0000000d40)={0x3, 0x1, 0xa}, 0x5, 0x400) bind$auto(0x3, &(0x7f0000000040), 0x6a) sendmmsg$auto(r0, &(0x7f0000000140)={{&(0x7f0000000040), 0x12, 0x0, 0x9, 0x0, 0x2, 0xb}, 0x800009}, 0x5, 0x20000000) open(&(0x7f0000000080)='./cgroup\x00', 0x40001, 0x6) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) exit$auto(0xf25) close_range$auto(0x2, 0x8000, 0x0) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x8002, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x9}, 0x280, 0x4f8) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x405, 0x8000) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x3, 0x1, 0x4, 0x5, 0x7) open(&(0x7f0000000440)='./file0\x00', 0x7ffd, 0x4) socket(0xb, 0x5, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x22000, 0x58) fsync$auto(r1) mmap$auto(0x7ea2, 0x2, 0x1, 0x995, 0x924, 0x8000000000000001) getrandom$auto(0x0, 0xe06, 0x3) madvise$auto(0x0, 0x3, 0x15) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0x2, 0x1, 0x0) socket(0x10, 0x2, 0x3a) ioctl$auto(0x1, 0x8983, 0x8) futex$auto(&(0x7f0000000000)=0xf0fe, 0x5, 0x4, 0x0, &(0x7f0000000080)=0x9, 0x3000000) 2.972570507s ago: executing program 7 (id=16174): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon22\x00', 0x2d0040, 0x0) mmap$auto(0x0, 0x9, 0xa861, 0x8000000008012, 0x1000000004, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto(0x0, 0x23, 0x18) ioctl$auto(0xffffffffffffffff, 0x80044941, 0x0) 2.959623265s ago: executing program 0 (id=16175): close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) (async) close_range$auto(0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) nanosleep$auto(&(0x7f0000000000)={0x180000000000, 0x9}, 0x0) (async) nanosleep$auto(&(0x7f0000000000)={0x180000000000, 0x9}, 0x0) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) close_range$auto(0x0, 0xfffffffffffff000, 0x2) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) clone$auto(0x21, 0x9, 0xfffffffffffffffe, 0xfffffffffffffffd, 0x6) unshare$auto(0x20000080) syz_clone3(&(0x7f0000000300)={0x28020000, 0x0, 0x0, 0x0, {0x29}, 0x0, 0x0, 0x0, 0x0}, 0x58) writev$auto(0x4, &(0x7f0000000080)={0x0, 0x8}, 0x1) 2.462038284s ago: executing program 0 (id=16176): socket(0xa, 0x3, 0xff) connect$auto(0x3, &(0x7f0000000140), 0x55) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x5, 0x3, 0x15, 0x940, 0x1, 0x3, 0x6, 0x4, 0x80, 0x5, 0x2, 0x9, 0xb0, 0x9, 0x2, 0x3, 0x5, 0x7}, 0x4, 0x81) sendmsg$auto_L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, 0x0, 0x40) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r0 = socket(0x10, 0x2, 0x0) sendmsg$auto_NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x1ac}}, 0x40000) r1 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) r2 = openat$auto_ecryptfs_miscdev_fops_miscdev(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$auto(0x3, &(0x7f0000000100)=@raw_tracepoint={0x5, 0xffffffffffffffff, 0x0, 0x7}, 0xe) ppoll$auto(&(0x7f0000000040)={r2, 0x8, 0x6}, 0x9, &(0x7f0000000080)={0x10001, 0x7}, &(0x7f00000000c0)={0x9}, 0x8) write$auto(r1, &(0x7f0000000c40)='ethtool\x00', 0xffffffff) 2.210372115s ago: executing program 0 (id=16177): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001c00), r0) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x28, r1, 0xa2d601c1e7b11e31, 0x70bd27, 0x25dfdbfd, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0xfff}, @IOAM6_ATTR_NS_DATA_WIDE={0xc, 0x3, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 2.039258721s ago: executing program 7 (id=16178): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$auto_ioam6(&(0x7f0000001c00), r0) sendmsg$auto_IOAM6_CMD_ADD_NAMESPACE(r0, &(0x7f0000001d00)={0x0, 0x0, &(0x7f0000001cc0)={&(0x7f0000001c40)={0x28, r1, 0xa2d601c1e7b11e31, 0x70bd27, 0x25dfdbfd, {}, [@IOAM6_ATTR_NS_ID={0x6, 0x1, 0xfff}, @IOAM6_ATTR_NS_DATA_WIDE={0xc, 0x3, 0x9}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x0) 1.917667447s ago: executing program 3 (id=16179): openat$auto_ucma_fops_ucma(0xffffffffffffff9c, &(0x7f0000000140), 0x20, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x401bf, 0x7352, 0x32, 0x65f, 0x1ffde, 0x7, 0x3, 0x20000002, 0x9, 0x3, 0x6, 0x4, 0xb4, 0x9, 0x6, 0x10003, 0x80, 0x4, 0x0, 0x7, 0x2000, 0x203, 0x0, 0x84, [0x0, 0x0, 0x0, 0x8050100000000000, 0x0, 0x100100001, 0x0, 0xa, 0x70624ce7, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, 0xfffffffffffffffd, 0x2, 0x200000000004, 0x8, 0xffffffffefffffff, 0x200000000000004, 0x0, 0x0, 0x0, 0x0, 0x400000000005b8, 0xc, 0x0, 0x0, 0x4, 0x6, 0xffffffffffffffff, 0x890, 0x8000000000008, 0xfffffffffffffffc, 0x1000, 0xa38, 0x0, 0x0, 0xfffffffffffffffc, 0x2, 0x4000000000, 0x10006]}, 0x1fe, 0xd) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) r0 = openat$auto_generic(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$auto_snd_ctl_f_ops_control(r0, 0x0, 0x0) mknod$auto(0x0, 0x1, 0x4) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r1 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r1, 0x107, 0x1, 0x0, 0x8004) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="11002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) r2 = socket(0x10, 0x2, 0x0) sendmmsg$auto(r2, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, 0x0, 0x7, 0xa505}, 0x800}, 0x7, 0x4008) socket$nl_generic(0x10, 0x3, 0x10) openat$auto_tracing_pipe_fops_trace(0xffffffffffffff9c, &(0x7f0000003fc0)='/sys/kernel/debug/tracing/trace_pipe\x00', 0x20a02, 0x0) r3 = socket(0x2, 0x1, 0x0) select$auto(0x7, &(0x7f00000005c0)={[0xff, 0x81, 0x6, 0x10000000008, 0x0, 0x0, 0x7, 0x0, 0x8f, 0x0, 0x3d, 0x0, 0x40, 0xef, 0x2, 0x10000]}, 0x0, 0x0, 0x0) sendmsg$auto_NL80211_CMD_DEL_INTERFACE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f00000001c0)={0x110, 0x0, 0x4, 0x70bd2d, 0x25dfdbfd, {}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x8}, @NL80211_ATTR_FILS_ERP_REALM={0xdd, 0xfa, "1f42908ad6c5b826d508ad4a859c9d958f4847b0e1946c8cf77a40fdab1d16309af6affcf2f6f3fa7c1f8b93ddf0f9c4f634e2b94de8689515f98ded1445cee647ed7cd84ebc0c23fd7ecb92a1d1f911c6cfa966a7ec4ec29057315c7c593e76e08c9c0cbdb2989b84a0c1a2a5153c319f09c979512d3c96776a9fbc6d3de82730d6c4b045e2c9d98fe0e7489c1fede98715f4c801e564861617ab49b55349e7ee818906f3d4ed73c25a7fed5ecc7c4ce1ccfc192341fa78660cc9b24e932cf62f3c70bd56f22fb17b738b73b80051f0649c5a9b5b15423d31"}, @NL80211_ATTR_CIPHER_SUITE_GROUP={0x8, 0x4a, 0x20000000}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x1, 0x7f}}, @NL80211_ATTR_RADAR_BACKGROUND={0x4}]}, 0x110}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004890) 1.896171897s ago: executing program 0 (id=16180): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x22, 0x2, 0x2) sendmsg$auto_TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x24000010}, 0x4004081) mmap$auto(0x0, 0xe983, 0xdf, 0xeb1, 0x401, 0x8000) sysfs$auto(0x2, 0x100000000000032, 0x0) fsopen$auto(0x0, 0x1) close_range$auto(0x2, 0x8, 0x0) r1 = socket(0x11, 0x80003, 0x300) sendmsg$auto_HWSIM_CMD_NEW_RADIO(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="010025bd7800fadbdf2504"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000800) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'bond_slave_1\x00', 0x0}) select$auto(0x6d0c, 0x0, &(0x7f0000000100)={[0xd, 0x42, 0x800000000000008, 0xc, 0x9, 0x3, 0x6, 0x1, 0x40009, 0x5e582972, 0x4000000000000000, 0x14, 0x93, 0x8, 0x8, 0x6]}, 0x0, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x7, 0x800008000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mprotect$auto(0x1ffff000, 0x7, 0x2) time$auto(&(0x7f0000000080)=0x6) sendmsg$auto_ETHTOOL_MSG_CABLE_TEST_TDR_ACT(r2, &(0x7f0000021740)={0x0, 0x0, &(0x7f0000021700)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x4004804) bind$auto(0x3, 0x0, 0xd) madvise$auto(0x0, 0x7fffffffffffffff, 0xa) syz_genetlink_get_family_id$auto_ethtool(0x0, 0xffffffffffffffff) unshare$auto(0x200) r5 = fcntl$getown(r1, 0x9) r6 = syz_open_procfs$namespace(r5, &(0x7f0000000000)='ns/mnt\x00') setns(r6, 0x0) socket(0x2, 0x6, 0x0) setsockopt$auto(0x3, 0x0, 0x24, 0x0, 0x28) bpf$auto(0x3, &(0x7f0000000300)=@bpf_attr_3={0x1c, 0x0, 0xf, 0x60, 0x400, 0x0, 0x1, 0x80f0c8, 0x2000020, "38c1d5cbcb1b0cd8edf18f6500", 0x0, 0x4, 0xffffffffffffffff, 0xe4, 0x6, 0x5, 0x8000000, 0x8, 0x0, 0x3, @attach_btf_obj_fd, 0x6, 0xffff, 0x4, 0x6, 0x4}, 0x44) clone$auto(0xfffffffe20000, 0x4, 0xfffffffffffffffc, 0xfffffffffffffffc, 0xfa6) 1.602059626s ago: executing program 7 (id=16181): socket(0x2, 0x801, 0x100) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00', @ANYRES16=0x0, @ANYBLOB="000326"], 0x28}, 0x1, 0x0, 0x0, 0x4c894}, 0x4) socket(0x10, 0x2, 0x0) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="1b000000", @ANYBLOB='^\x00'], 0x1ac}, 0x1, 0x0, 0x0, 0x40}, 0x40000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1ac}, 0x1, 0x0, 0x0, 0x4004810}, 0x800) sendmmsg$auto(0x3, &(0x7f0000000080)={{0x0, 0x2, &(0x7f00000002c0)={0x0, 0xc4}, 0x1, 0x0, 0x0, 0x9}, 0x7}, 0x3, 0x0) sendmsg$auto_NBD_CMD_CONNECT(r0, 0x0, 0x20040000) r1 = socket(0xa, 0x801, 0x84) sendmsg$auto_ILA_CMD_DEL(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="000429bd70001f000000000000000000006074aac90f0a8dfeb0ce8d480000000000"], 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x7b01556d5844b338) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$auto_smc_gen_netlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_SMC_NETLINK_DISABLE_SEID(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="013b"], 0x14}, 0x1, 0x0, 0x0, 0x880}, 0x810) mmap$auto(0x0, 0x8, 0x1000000004, 0x9b72, 0x2, 0x8000) mlockall$auto(0x9) acct$auto(0x0) ioctl$auto(0xc8, 0x6, 0x5d6e859b) madvise$auto(0x0, 0xffffffffffff0001, 0x9) open(&(0x7f0000000000)='./file0\x00', 0x261c2, 0x84) fallocate$auto(0x8000000000000003, 0x0, 0xd, 0x2cbd5d) close_range$auto(0x2, 0x8, 0x0) socket(0xa, 0x3, 0x6) mq_open$auto(&(0x7f00000020c0)='.\xf1\x00', 0x56a, 0x2d, 0x0) readv$auto(0x3, 0x0, 0x1) sendmsg$auto_GTP_CMD_NEWPDP(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x4000804) lstat$auto(0x0, &(0x7f0000000180)={0x4, 0x10, 0x9, 0x63, 0x0, 0x0, 0x0, 0x0, 0x40000000000f, 0x7, 0x40000402, 0x7ffffffb, 0x9, 0xffffffff80000000, 0x9, 0x7, 0x200000100103}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x89fc, &(0x7f0000000040)={'bridge0\x00'}) openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/net/arp\x00', 0x60000, 0x0) 1.452264383s ago: executing program 3 (id=16182): stat$auto(0x0, &(0x7f00000003c0)={0x101, 0x5d180000000, 0xbd, 0xab, 0xee01, 0xee01, 0x0, 0x481, 0x7fffffffffffffff, 0xffff, 0xb167, 0x10000, 0x8, 0x10000, 0x4, 0xffff, 0xfff}) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x1, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0xd) write$auto_seq_oss_f_ops_seq_oss(r0, &(0x7f0000000040)="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", 0x3b0) r1 = open(&(0x7f00000000c0)='./cgroup\x00', 0x0, 0xb5d1af1605322df2) open_by_handle_at$auto(r1, &(0x7f0000001080)={0x8c, 0x2, "800000001c5ba6e1e89fa6b170a2765cb5abfe00e82673085fc3170200970472fe2b0620099af3f0d38eee8cb472c7421f7c514be048412ac07d77590bc92b7a7aa9d7ba3eafac5168d2b4c1d82ad4f46b5887d557c291050000000000000044c71cc014d274f20660c6e38ed8248416131176ebfce42b6b1d4d7febdff92b8cb0e90a7172c47f62245d3dd7"}, 0x5) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) r2 = socket(0x1a, 0x801, 0x7d) shmctl$auto(0x0, 0xd, &(0x7f0000000340)={{0x8001, 0xee01, 0xee01, 0xfffffff9, 0x3, 0x847, 0x7}, 0x7, 0x0, 0x7, 0x6, 0x1000, 0x1, 0x3, 0x0, 0x0, 0x0}) mmap$auto(0x0, 0x40009, 0xdf, 0x9b72, 0x7, 0x28000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) socket(0x18, 0x5, 0x1) clock_getres$auto(0x3, 0x0) mmap$auto(0x0, 0x400005, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x0, 0xffffffffffff0001, 0x15) clock_getres$auto(0xfffffffffffffffc, 0x0) setsockopt$auto(r2, 0x6, 0x5, 0x0, 0xfb3) r3 = openat$auto_ptdump_curknl_fops_(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) creat$auto(&(0x7f0000001140)='./cgroup\x00', 0xfff1) read$auto_proc_pid_smaps_operations_internal(0xffffffffffffffff, &(0x7f0000000080)=""/4096, 0x1000) read$auto_ptdump_curknl_fops_(r3, &(0x7f0000000040)=""/56, 0x38) 642.741253ms ago: executing program 7 (id=16183): r0 = getpgrp(0xffffffffffffffff) bpf$auto(0x0, &(0x7f0000000280)=@task_fd_query={r0, 0xffffffffffffffff, 0x801, 0x1000a, 0x400, 0x1000049, 0xffffffffffffffff, 0x20000000000804, 0x3}, 0x6f6) rt_sigqueueinfo$auto(r0, 0x6, &(0x7f0000000900)={@siginfo_0_0={0x2, 0x2, 0xfffffff7, @_sigchld={0x0, 0x0, 0x5af, 0x2, 0x8000000000000000}}}) 374.603546ms ago: executing program 7 (id=16184): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon22\x00', 0x2d0040, 0x0) mmap$auto(0x0, 0x9, 0xa861, 0x8000000008012, 0x1000000004, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto(0x0, 0x23, 0x18) r0 = openat$auto_mISDN_fops_timerdev(0xffffffffffffff9c, &(0x7f0000000000), 0x102000, 0x0) ioctl$auto(r0, 0x80044941, 0x0) 374.441065ms ago: executing program 0 (id=16185): ioctl$auto_UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000000)={0x5, 0x67, [{0xffffffffffffffff, 0x0, 0x1, 0x9}, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x4f}, {0xffffffffffffffff, 0x0, 0x40000000800000, 0x2}]}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_taskstats(&(0x7f0000001900), 0xffffffffffffffff) sendmsg$auto_TASKSTATS_CMD_GET(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a40)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@TASKSTATS_CMD_ATTR_PID={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x41}, 0x4000000) r3 = openat$auto_fops_atomic_t_ro_(0xffffffffffffff9c, &(0x7f00000000c0), 0xa802, 0x0) r4 = openat$auto_proc_clear_refs_operations_internal(0xffffffffffffff9c, &(0x7f0000000100)='/proc/self/clear_refs\x00', 0x200000, 0x0) r5 = openat$auto_safesetid_gid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000140), 0x90000, 0x0) sendmsg$auto_CGROUPSTATS_CMD_GET(r0, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80208000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r2, 0x300, 0x70bd28, 0x25dfdbfb, {}, [@CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r3}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r4}, @CGROUPSTATS_CMD_ATTR_FD={0x8}, @CGROUPSTATS_CMD_ATTR_FD={0x8, 0x1, r5}, @CGROUPSTATS_CMD_ATTR_FD={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x801}, 0x1) 104.452725ms ago: executing program 3 (id=16186): r0 = socket(0xa, 0x2, 0x3a) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket(0x23, 0x80805, 0x0) memfd_secret$auto(0x0) socket(0x2b, 0x1, 0x1) setsockopt$auto(r0, 0x29, 0x14, 0x0, 0x10000110) socket(0x2b, 0x1, 0x1) r1 = syz_genetlink_get_family_id$auto_ovs_flow(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_OVS_FLOW_CMD_GET(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x28, r1, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@OVS_FLOW_ATTR_PROBE={0x4}, @OVS_FLOW_ATTR_KEY={0xc, 0x1, 0x0, 0x1, [@typed={0x8, 0x10, 0x0, 0x0, @fd=r2}]}, @OVS_FLOW_ATTR_PROBE={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0x800) r3 = openat$auto_safesetid_uid_file_fops_securityfs(0xffffffffffffff9c, &(0x7f0000000180), 0x1, 0x0) poll$auto(&(0x7f00000001c0)={r3, 0x4, 0xff78}, 0x40, 0x3) write$auto_dfs_global_fops_debug(r4, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x5) sendmmsg$auto(r5, &(0x7f0000000180)={{&(0x7f0000000040), 0xc8b, 0x0, 0x0, 0x0, 0x0, 0x80000000}, 0x8000005}, 0x3b8b, 0xa) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) sendmsg$auto_OVS_FLOW_CMD_DEL(r4, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r1, 0x200, 0x70bd2b, 0x25dfdbfd, {}, [@OVS_FLOW_ATTR_UFID_FLAGS={0x8, 0xa, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0xc000) recvmmsg$auto(0x3, 0x0, 0x4, 0x2, 0x0) sendfile$auto(0x1, 0x3, 0x0, 0xc01) ioperm$auto(0x7ff, 0x1, 0x4000005) fdatasync$auto(0xffffffffffffffff) 0s ago: executing program 0 (id=16187): open(&(0x7f0000000000)='./file0\x00', 0x161342, 0x100) openat$auto_mon_fops_binary_mon_bin(0xffffffffffffff9c, &(0x7f0000000080)='/dev/usbmon22\x00', 0x2d0040, 0x0) mmap$auto(0x0, 0x9, 0xa861, 0x8000000008012, 0x1000000004, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) mmap$auto(0x0, 0x4, 0x4000000000df, 0x40eb1, 0x401, 0x300000000000) madvise$auto(0x0, 0x23, 0x18) ioctl$auto(0xffffffffffffffff, 0x80044941, 0x0) kernel console output (not intermixed with test programs): 039.392764][T14429] Invalid ELF header magic: != ELF [ 2040.143602][T14454] openvswitch: netlink: Key 2 has unexpected len 8 expected 4 [ 2040.218374][T14454] netlink: 'syz.0.14892': attribute type 1 has an invalid length. [ 2040.482165][T14456] netlink: 4 bytes leftover after parsing attributes in process `syz.4.14893'. [ 2040.666567][T14462] nbd11: detected capacity change from 0 to 68719476736 [ 2040.715866][T13702] block nbd11: Send control failed (result -22) [ 2040.723961][T13702] block nbd11: Request send failed, requeueing [ 2040.776954][ T58] block nbd11: Dead connection, failed to find a fallback [ 2040.784246][ T58] block nbd11: shutting down sockets [ 2040.790963][ T58] blk_print_req_error: 24 callbacks suppressed [ 2040.790980][ T58] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2040.806775][ T58] buffer_io_error: 23 callbacks suppressed [ 2040.806792][ T58] Buffer I/O error on dev nbd11, logical block 0, async page read [ 2040.834937][T13702] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2040.844103][T13702] Buffer I/O error on dev nbd11, logical block 0, async page read [ 2040.886184][T13702] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2040.944243][T13702] Buffer I/O error on dev nbd11, logical block 0, async page read [ 2040.952246][T13702] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2041.043711][T13702] Buffer I/O error on dev nbd11, logical block 0, async page read [ 2041.051731][T13702] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2041.152642][T13702] Buffer I/O error on dev nbd11, logical block 0, async page read [ 2041.210870][T13702] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2041.272549][T13702] Buffer I/O error on dev nbd11, logical block 0, async page read [ 2041.331016][T13702] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2041.372231][T13702] Buffer I/O error on dev nbd11, logical block 0, async page read [ 2041.380806][T13702] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2041.441618][T13702] Buffer I/O error on dev nbd11, logical block 0, async page read [ 2041.449869][T13702] ldm_validate_partition_table(): Disk read failed. [ 2041.483077][T13702] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2041.526868][T13702] Buffer I/O error on dev nbd11, logical block 0, async page read [ 2041.555630][T13702] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2041.580866][T13702] Buffer I/O error on dev nbd11, logical block 0, async page read [ 2041.609897][T13702] Dev nbd11: unable to read RDB block 0 [ 2041.630287][T13702] nbd11: unable to read partition table [ 2041.661380][T13702] ldm_validate_partition_table(): Disk read failed. [ 2041.668429][T13702] Dev nbd11: unable to read RDB block 0 [ 2041.691460][T13702] nbd11: unable to read partition table [ 2042.592743][T14508] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14909'. [ 2043.462596][T14534] FAULT_INJECTION: forcing a failure. [ 2043.462596][T14534] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2043.510918][T14534] CPU: 0 UID: 0 PID: 14534 Comm: syz.0.14916 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2043.521850][T14534] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2043.531934][T14534] Call Trace: [ 2043.535230][T14534] [ 2043.538188][T14534] dump_stack_lvl+0x16c/0x1f0 [ 2043.542904][T14534] should_fail_ex+0x497/0x5b0 [ 2043.547617][T14534] _copy_to_user+0x32/0xd0 [ 2043.552074][T14534] simple_read_from_buffer+0xd0/0x160 [ 2043.557492][T14534] proc_fail_nth_read+0x198/0x270 [ 2043.562559][T14534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2043.568148][T14534] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2043.573730][T14534] vfs_read+0x1df/0xbe0 [ 2043.577921][T14534] ? __fget_files+0x1fc/0x3a0 [ 2043.582627][T14534] ? __pfx___mutex_lock+0x10/0x10 [ 2043.587687][T14534] ? __pfx_vfs_read+0x10/0x10 [ 2043.592405][T14534] ? __fget_files+0x206/0x3a0 [ 2043.597127][T14534] ksys_read+0x12b/0x250 [ 2043.601402][T14534] ? __pfx_ksys_read+0x10/0x10 [ 2043.606209][T14534] do_syscall_64+0xcd/0x250 [ 2043.610751][T14534] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2043.616677][T14534] RIP: 0033:0x7f705d18472c [ 2043.621140][T14534] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2043.640777][T14534] RSP: 002b:00007f705dee4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2043.649197][T14534] RAX: ffffffffffffffda RBX: 00007f705d375fa0 RCX: 00007f705d18472c [ 2043.657174][T14534] RDX: 000000000000000f RSI: 00007f705dee40a0 RDI: 0000000000000004 [ 2043.665147][T14534] RBP: 00007f705dee4090 R08: 0000000000000000 R09: 0000000000000000 [ 2043.673120][T14534] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2043.681096][T14534] R13: 0000000000000000 R14: 00007f705d375fa0 R15: 00007ffd1cb125f8 [ 2043.689086][T14534] [ 2044.158366][T14546] FAULT_INJECTION: forcing a failure. [ 2044.158366][T14546] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2044.259811][T14546] CPU: 0 UID: 0 PID: 14546 Comm: syz.0.14919 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2044.270729][T14546] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2044.280813][T14546] Call Trace: [ 2044.284115][T14546] [ 2044.287070][T14546] dump_stack_lvl+0x16c/0x1f0 [ 2044.291784][T14546] should_fail_ex+0x497/0x5b0 [ 2044.296502][T14546] _copy_from_user+0x2e/0xd0 [ 2044.301129][T14546] copy_msghdr_from_user+0x99/0x160 [ 2044.306363][T14546] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 2044.312228][T14546] ___sys_sendmsg+0xff/0x1e0 [ 2044.316853][T14546] ? __pfx____sys_sendmsg+0x10/0x10 [ 2044.322097][T14546] ? __pfx_lock_release+0x10/0x10 [ 2044.327159][T14546] ? trace_lock_acquire+0x14e/0x1f0 [ 2044.332409][T14546] ? __fget_files+0x206/0x3a0 [ 2044.337127][T14546] __sys_sendmsg+0x16e/0x220 [ 2044.341751][T14546] ? __pfx___sys_sendmsg+0x10/0x10 [ 2044.346914][T14546] do_syscall_64+0xcd/0x250 [ 2044.351447][T14546] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2044.357368][T14546] RIP: 0033:0x7f705d185d19 [ 2044.361803][T14546] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2044.381489][T14546] RSP: 002b:00007f705aff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2044.389936][T14546] RAX: ffffffffffffffda RBX: 00007f705d376080 RCX: 00007f705d185d19 [ 2044.397934][T14546] RDX: 0000000004000080 RSI: 0000000020000780 RDI: 0000000000000003 [ 2044.405928][T14546] RBP: 00007f705aff6090 R08: 0000000000000000 R09: 0000000000000000 [ 2044.413938][T14546] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2044.422002][T14546] R13: 0000000000000000 R14: 00007f705d376080 R15: 00007ffd1cb125f8 [ 2044.426082][T14518] kexec: Could not allocate control_code_buffer [ 2044.429990][T14546] [ 2044.841672][T14555] netlink: 8 bytes leftover after parsing attributes in process `syz.4.14920'. [ 2046.803052][T14576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14928'. [ 2048.850305][T14599] FAULT_INJECTION: forcing a failure. [ 2048.850305][T14599] name failslab, interval 1, probability 0, space 0, times 0 [ 2049.038540][T14599] CPU: 1 UID: 0 PID: 14599 Comm: syz.4.14933 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2049.049453][T14599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2049.059539][T14599] Call Trace: [ 2049.062852][T14599] [ 2049.065814][T14599] dump_stack_lvl+0x16c/0x1f0 [ 2049.070542][T14599] should_fail_ex+0x497/0x5b0 [ 2049.075272][T14599] should_failslab+0xc2/0x120 [ 2049.079987][T14599] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 2049.085397][T14599] ? skb_clone+0x190/0x3f0 [ 2049.089854][T14599] skb_clone+0x190/0x3f0 [ 2049.094132][T14599] netlink_deliver_tap+0xafd/0xca0 [ 2049.099286][T14599] netlink_unicast+0x5e1/0x7f0 [ 2049.104082][T14599] ? __pfx_netlink_unicast+0x10/0x10 [ 2049.109392][T14599] ? __phys_addr_symbol+0x30/0x80 [ 2049.114449][T14599] ? __check_object_size+0x488/0x710 [ 2049.119876][T14599] netlink_sendmsg+0x8b8/0xd70 [ 2049.124681][T14599] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2049.130018][T14599] ____sys_sendmsg+0x9ae/0xb40 [ 2049.134814][T14599] ? copy_msghdr_from_user+0x10b/0x160 [ 2049.140321][T14599] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2049.145657][T14599] ___sys_sendmsg+0x135/0x1e0 [ 2049.150372][T14599] ? __pfx____sys_sendmsg+0x10/0x10 [ 2049.155625][T14599] ? __pfx_lock_release+0x10/0x10 [ 2049.160688][T14599] ? trace_lock_acquire+0x14e/0x1f0 [ 2049.165944][T14599] ? __fget_files+0x206/0x3a0 [ 2049.170680][T14599] __sys_sendmsg+0x16e/0x220 [ 2049.175312][T14599] ? __pfx___sys_sendmsg+0x10/0x10 [ 2049.180483][T14599] do_syscall_64+0xcd/0x250 [ 2049.185023][T14599] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2049.190949][T14599] RIP: 0033:0x7f67f9d85d19 [ 2049.195391][T14599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2049.215039][T14599] RSP: 002b:00007f67fabb6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2049.223488][T14599] RAX: ffffffffffffffda RBX: 00007f67f9f75fa0 RCX: 00007f67f9d85d19 [ 2049.231494][T14599] RDX: 0000000020000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 2049.239496][T14599] RBP: 00007f67fabb6090 R08: 0000000000000000 R09: 0000000000000000 [ 2049.247494][T14599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2049.255498][T14599] R13: 0000000000000000 R14: 00007f67f9f75fa0 R15: 00007ffe50e02db8 [ 2049.263609][T14599] [ 2050.312676][T14613] lo: entered allmulticast mode [ 2050.357518][T14613] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14938'. [ 2051.169775][T14613] lo: left allmulticast mode [ 2051.937629][T14629] nbd12: detected capacity change from 0 to 68719476736 [ 2052.087357][T14603] block nbd12: Send control failed (result -22) [ 2052.116305][T14603] block nbd12: Request send failed, requeueing [ 2052.136013][ T58] block nbd12: Dead connection, failed to find a fallback [ 2052.143196][ T58] block nbd12: shutting down sockets [ 2052.149276][ T58] blk_print_req_error: 24 callbacks suppressed [ 2052.149294][ T58] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2052.164862][ T58] buffer_io_error: 23 callbacks suppressed [ 2052.164880][ T58] Buffer I/O error on dev nbd12, logical block 0, async page read [ 2052.179447][T14603] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2052.190039][T14603] Buffer I/O error on dev nbd12, logical block 0, async page read [ 2052.198386][T14603] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2052.215639][T14603] Buffer I/O error on dev nbd12, logical block 0, async page read [ 2052.223615][T14603] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2052.234684][T14603] Buffer I/O error on dev nbd12, logical block 0, async page read [ 2052.243105][T14603] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2052.252338][T14603] Buffer I/O error on dev nbd12, logical block 0, async page read [ 2052.260461][T14603] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2052.269723][T14603] Buffer I/O error on dev nbd12, logical block 0, async page read [ 2052.278167][T14603] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2052.288528][T14603] Buffer I/O error on dev nbd12, logical block 0, async page read [ 2052.296711][T14603] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2052.306195][T14603] Buffer I/O error on dev nbd12, logical block 0, async page read [ 2052.314091][T14603] ldm_validate_partition_table(): Disk read failed. [ 2052.320898][T14603] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2052.330120][T14603] Buffer I/O error on dev nbd12, logical block 0, async page read [ 2052.340278][T14603] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2052.349510][T14603] Buffer I/O error on dev nbd12, logical block 0, async page read [ 2052.357714][T14603] Dev nbd12: unable to read RDB block 0 [ 2052.363727][T14603] nbd12: unable to read partition table [ 2052.372406][T14603] ldm_validate_partition_table(): Disk read failed. [ 2052.379884][T14603] Dev nbd12: unable to read RDB block 0 [ 2052.386113][T14603] nbd12: unable to read partition table [ 2054.005523][T14663] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14954'. [ 2054.095144][T14665] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14956'. [ 2054.872392][T14683] nbd13: detected capacity change from 0 to 68719476736 [ 2054.889545][T14603] block nbd13: Send control failed (result -22) [ 2054.906125][T14603] block nbd13: Request send failed, requeueing [ 2054.932296][ T41] block nbd13: Dead connection, failed to find a fallback [ 2054.939905][ T41] block nbd13: shutting down sockets [ 2054.947248][T14603] ldm_validate_partition_table(): Disk read failed. [ 2054.971817][T14603] Dev nbd13: unable to read RDB block 0 [ 2054.981901][T14603] nbd13: unable to read partition table [ 2055.004581][T14603] ldm_validate_partition_table(): Disk read failed. [ 2055.012065][T14603] Dev nbd13: unable to read RDB block 0 [ 2055.018066][T14603] nbd13: unable to read partition table [ 2055.712166][T14701] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14970'. [ 2057.486132][T14721] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 2057.698662][T14722] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 2057.736981][T14722] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 2058.537193][T14740] netlink: 4 bytes leftover after parsing attributes in process `syz.9.14982'. [ 2058.838389][T14746] lo: entered allmulticast mode [ 2058.856857][T14746] netlink: 28 bytes leftover after parsing attributes in process `syz.0.14983'. [ 2059.262077][T14746] lo: left allmulticast mode [ 2059.417911][T14760] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 2059.464371][T14761] netlink: 28 bytes leftover after parsing attributes in process `syz.4.14987'. [ 2060.881057][T14800] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 2062.621932][T14835] netlink: 326 bytes leftover after parsing attributes in process `syz.9.15014'. [ 2066.066534][T12645] Bluetooth: hci1: command 0x0406 tx timeout [ 2066.790550][T14886] netlink: 326 bytes leftover after parsing attributes in process `syz.7.15030'. [ 2067.507011][T14900] bridge0: port 3(macvlan0) entered blocking state [ 2067.562356][T14900] bridge0: port 3(macvlan0) entered disabled state [ 2067.570119][T14900] macvlan0: entered allmulticast mode [ 2067.575537][T14900] veth1_vlan: entered allmulticast mode [ 2067.602525][T14900] macvlan0: entered promiscuous mode [ 2067.632999][T14900] bridge0: port 3(macvlan0) entered blocking state [ 2067.639673][T14900] bridge0: port 3(macvlan0) entered forwarding state [ 2070.160304][T14928] netlink: 'syz.9.15043': attribute type 4 has an invalid length. [ 2070.195992][T14928] netlink: 330 bytes leftover after parsing attributes in process `syz.9.15043'. [ 2070.869226][T14935] nbd14: detected capacity change from 0 to 68719476736 [ 2070.906514][T14603] block nbd14: Send control failed (result -22) [ 2070.938267][T14603] block nbd14: Request send failed, requeueing [ 2071.006378][T10170] block nbd14: Receive control failed (result -32) [ 2071.042227][ T58] block nbd14: Dead connection, failed to find a fallback [ 2071.049490][ T58] block nbd14: shutting down sockets [ 2071.054806][ T58] blk_print_req_error: 58 callbacks suppressed [ 2071.054822][ T58] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2071.070380][ T58] buffer_io_error: 56 callbacks suppressed [ 2071.070396][ T58] Buffer I/O error on dev nbd14, logical block 0, async page read [ 2071.087746][T14603] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2071.096910][T14603] Buffer I/O error on dev nbd14, logical block 0, async page read [ 2071.157235][T14603] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2071.166416][T14603] Buffer I/O error on dev nbd14, logical block 0, async page read [ 2071.272781][T14603] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2071.296427][T14603] Buffer I/O error on dev nbd14, logical block 0, async page read [ 2071.344661][T14603] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2071.374993][T14603] Buffer I/O error on dev nbd14, logical block 0, async page read [ 2071.425939][T14603] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2071.446994][T14948] mkiss: ax0: crc mode is auto. [ 2071.455472][T14603] Buffer I/O error on dev nbd14, logical block 0, async page read [ 2071.463935][T14603] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2071.545348][T14603] Buffer I/O error on dev nbd14, logical block 0, async page read [ 2071.553672][T14603] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2071.600295][T14603] Buffer I/O error on dev nbd14, logical block 0, async page read [ 2071.639204][T14603] ldm_validate_partition_table(): Disk read failed. [ 2071.684375][T14603] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2071.712069][T14953] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15050'. [ 2071.714216][T14603] Buffer I/O error on dev nbd14, logical block 0, async page read [ 2071.744148][T14603] I/O error, dev nbd14, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2071.753449][T14603] Buffer I/O error on dev nbd14, logical block 0, async page read [ 2071.762799][T14603] Dev nbd14: unable to read RDB block 0 [ 2071.769003][T14603] nbd14: unable to read partition table [ 2071.785701][T14603] ldm_validate_partition_table(): Disk read failed. [ 2071.794253][T14603] Dev nbd14: unable to read RDB block 0 [ 2071.800423][T14603] nbd14: unable to read partition table [ 2071.840435][T14952] netlink: 8 bytes leftover after parsing attributes in process `syz.4.15050'. [ 2071.884719][T14920] netlink: 12 bytes leftover after parsing attributes in process `syz.7.15041'. [ 2071.896330][T14920] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2072.266828][T14953] team0: Port device team_slave_0 removed [ 2072.811131][T14976] netlink: 4 bytes leftover after parsing attributes in process `syz.9.15057'. [ 2074.251553][T15006] nbd15: detected capacity change from 0 to 68719476736 [ 2074.282863][T14603] block nbd15: Send control failed (result -22) [ 2074.290035][T14603] block nbd15: Request send failed, requeueing [ 2074.296700][T10170] block nbd15: Receive control failed (result -32) [ 2074.310851][ T41] block nbd15: Dead connection, failed to find a fallback [ 2074.318043][ T41] block nbd15: shutting down sockets [ 2074.462549][T15010] netlink: 342 bytes leftover after parsing attributes in process `syz.7.15067'. [ 2074.470550][T14603] ldm_validate_partition_table(): Disk read failed. [ 2074.478723][T14603] Dev nbd15: unable to read RDB block 0 [ 2074.511199][T14603] nbd15: unable to read partition table [ 2074.579018][T14603] ldm_validate_partition_table(): Disk read failed. [ 2074.600542][T14603] Dev nbd15: unable to read RDB block 0 [ 2074.606600][T14603] nbd15: unable to read partition table [ 2074.722635][T15008] mkiss: ax0: crc mode is auto. [ 2075.078845][T10170] Bluetooth: hci0: unexpected event 0x03 length: 72 > 11 [ 2075.125861][T14998] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15064'. [ 2075.183264][T14998] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 2075.409031][T15018] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15070'. [ 2076.196642][T15023] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15072'. [ 2079.046571][T15061] netlink: 'syz.4.15083': attribute type 2 has an invalid length. [ 2079.631266][T15077] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15089'. [ 2080.775356][T15101] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15095'. [ 2080.983134][T15099] netlink: 12 bytes leftover after parsing attributes in process `syz.0.15096'. [ 2082.075668][T15135] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15105'. [ 2082.248731][T15140] netlink: 338 bytes leftover after parsing attributes in process `syz.0.15108'. [ 2082.526609][T15141] netlink: 334 bytes leftover after parsing attributes in process `syz.9.15107'. [ 2082.578256][T15147] nfs: Bad value for 'source' [ 2083.943895][T15175] FAULT_INJECTION: forcing a failure. [ 2083.943895][T15175] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2083.993620][T15175] CPU: 0 UID: 0 PID: 15175 Comm: syz.0.15114 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2084.004537][T15175] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2084.014618][T15175] Call Trace: [ 2084.017917][T15175] [ 2084.020869][T15175] dump_stack_lvl+0x16c/0x1f0 [ 2084.025623][T15175] should_fail_ex+0x497/0x5b0 [ 2084.030345][T15175] _copy_to_user+0x32/0xd0 [ 2084.034797][T15175] simple_read_from_buffer+0xd0/0x160 [ 2084.040214][T15175] proc_fail_nth_read+0x198/0x270 [ 2084.045274][T15175] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2084.050858][T15175] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2084.056442][T15175] vfs_read+0x1df/0xbe0 [ 2084.060631][T15175] ? __fget_files+0x1fc/0x3a0 [ 2084.065340][T15175] ? __pfx___mutex_lock+0x10/0x10 [ 2084.070402][T15175] ? __pfx_vfs_read+0x10/0x10 [ 2084.075119][T15175] ? __fget_files+0x206/0x3a0 [ 2084.079831][T15175] ksys_read+0x12b/0x250 [ 2084.084099][T15175] ? __pfx_ksys_read+0x10/0x10 [ 2084.088907][T15175] do_syscall_64+0xcd/0x250 [ 2084.093445][T15175] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2084.099367][T15175] RIP: 0033:0x7f705d18472c [ 2084.103806][T15175] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2084.123452][T15175] RSP: 002b:00007f705dee4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2084.131903][T15175] RAX: ffffffffffffffda RBX: 00007f705d375fa0 RCX: 00007f705d18472c [ 2084.139906][T15175] RDX: 000000000000000f RSI: 00007f705dee40a0 RDI: 0000000000000003 [ 2084.147911][T15175] RBP: 00007f705dee4090 R08: 0000000000000000 R09: 0000000000000000 [ 2084.155915][T15175] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2084.163918][T15175] R13: 0000000000000001 R14: 00007f705d375fa0 R15: 00007ffd1cb125f8 [ 2084.171937][T15175] [ 2085.384465][T15202] netlink: 342 bytes leftover after parsing attributes in process `syz.0.15123'. [ 2085.431496][T15202] ecryptfs_miscdev_write: Dropping miscdev message of unrecognized type [0] [ 2086.193995][T15210] netlink: 334 bytes leftover after parsing attributes in process `syz.7.15127'. [ 2087.218676][T15233] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15135'. [ 2087.842032][T15242] netlink: 12 bytes leftover after parsing attributes in process `syz.9.15137'. [ 2090.051209][T15275] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15150'. [ 2092.070233][T15316] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15161'. [ 2092.188629][T15322] netlink: 330 bytes leftover after parsing attributes in process `syz.7.15165'. [ 2093.349023][T15336] delete_channel: no stack [ 2093.581540][T15345] netlink: 342 bytes leftover after parsing attributes in process `syz.7.15173'. [ 2096.150434][T15370] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15181'. [ 2097.789925][T15388] netlink: 322 bytes leftover after parsing attributes in process `syz.7.15186'. [ 2097.974140][T15388] bond0: entered promiscuous mode [ 2098.007389][T15388] bond_slave_0: entered promiscuous mode [ 2098.018549][T15392] misc userio: No port type given on /dev/userio [ 2098.415416][T15388] bond_slave_1: entered promiscuous mode [ 2099.486115][T15424] netlink: 334 bytes leftover after parsing attributes in process `syz.0.15196'. [ 2100.435906][T15433] FAULT_INJECTION: forcing a failure. [ 2100.435906][T15433] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2100.479652][T15433] CPU: 1 UID: 0 PID: 15433 Comm: syz.0.15200 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2100.490568][T15433] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2100.500653][T15433] Call Trace: [ 2100.503953][T15433] [ 2100.506912][T15433] dump_stack_lvl+0x16c/0x1f0 [ 2100.511621][T15433] should_fail_ex+0x497/0x5b0 [ 2100.516336][T15433] _copy_from_user+0x2e/0xd0 [ 2100.520979][T15433] memdup_user+0x71/0xd0 [ 2100.525258][T15433] ecryptfs_miscdev_write+0x188/0x550 [ 2100.530658][T15433] ? __pfx_ecryptfs_miscdev_write+0x10/0x10 [ 2100.536582][T15433] ? apparmor_file_permission+0x251/0x400 [ 2100.542340][T15433] ? bpf_lsm_file_permission+0x9/0x10 [ 2100.547756][T15433] ? security_file_permission+0x71/0x210 [ 2100.553422][T15433] ? __pfx_ecryptfs_miscdev_write+0x10/0x10 [ 2100.559342][T15433] vfs_write+0x24c/0x1150 [ 2100.563727][T15433] ? __fget_files+0x1fc/0x3a0 [ 2100.568435][T15433] ? __pfx_lock_release+0x10/0x10 [ 2100.573500][T15433] ? __pfx_vfs_write+0x10/0x10 [ 2100.578298][T15433] ? lock_acquire+0x2f/0xb0 [ 2100.582825][T15433] ? __fget_files+0x40/0x3a0 [ 2100.587455][T15433] ? __fget_files+0x206/0x3a0 [ 2100.592174][T15433] ksys_write+0x12b/0x250 [ 2100.596536][T15433] ? __pfx_ksys_write+0x10/0x10 [ 2100.601426][T15433] do_syscall_64+0xcd/0x250 [ 2100.605968][T15433] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2100.611892][T15433] RIP: 0033:0x7f705d185d19 [ 2100.616343][T15433] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2100.635990][T15433] RSP: 002b:00007f705dee4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2100.644434][T15433] RAX: ffffffffffffffda RBX: 00007f705d375fa0 RCX: 00007f705d185d19 [ 2100.652424][T15433] RDX: 0000000000000005 RSI: 0000000000000000 RDI: 0000000000000003 [ 2100.660421][T15433] RBP: 00007f705dee4090 R08: 0000000000000000 R09: 0000000000000000 [ 2100.668419][T15433] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2100.676430][T15433] R13: 0000000000000000 R14: 00007f705d375fa0 R15: 00007ffd1cb125f8 [ 2100.684446][T15433] [ 2100.792994][T15433] ecryptfs_miscdev_write: memdup_user returned error [-14] [ 2101.530884][T15452] netlink: 342 bytes leftover after parsing attributes in process `syz.0.15205'. [ 2105.431643][T15492] netlink: 342 bytes leftover after parsing attributes in process `syz.7.15218'. [ 2105.911709][T15502] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15224'. [ 2106.060814][T15502] veth0_macvtap: left promiscuous mode [ 2106.304457][T15502] macvtap0: entered allmulticast mode [ 2106.836131][T12645] Bluetooth: hci4: command 0x0406 tx timeout [ 2108.498650][T15551] netlink: 342 bytes leftover after parsing attributes in process `syz.9.15238'. [ 2110.657284][T15593] FAULT_INJECTION: forcing a failure. [ 2110.657284][T15593] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2110.701889][T15593] CPU: 1 UID: 0 PID: 15593 Comm: syz.0.15250 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2110.712808][T15593] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2110.722884][T15593] Call Trace: [ 2110.726169][T15593] [ 2110.729104][T15593] dump_stack_lvl+0x16c/0x1f0 [ 2110.733795][T15593] should_fail_ex+0x497/0x5b0 [ 2110.738488][T15593] _copy_to_user+0x32/0xd0 [ 2110.742918][T15593] simple_read_from_buffer+0xd0/0x160 [ 2110.748310][T15593] proc_fail_nth_read+0x198/0x270 [ 2110.753354][T15593] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2110.758925][T15593] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2110.764500][T15593] vfs_read+0x1df/0xbe0 [ 2110.768666][T15593] ? __fget_files+0x1fc/0x3a0 [ 2110.773352][T15593] ? __pfx___mutex_lock+0x10/0x10 [ 2110.778381][T15593] ? __pfx_vfs_read+0x10/0x10 [ 2110.783074][T15593] ? __fget_files+0x206/0x3a0 [ 2110.787766][T15593] ksys_read+0x12b/0x250 [ 2110.792016][T15593] ? __pfx_ksys_read+0x10/0x10 [ 2110.796794][T15593] do_syscall_64+0xcd/0x250 [ 2110.801308][T15593] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2110.807212][T15593] RIP: 0033:0x7f705d18472c [ 2110.811634][T15593] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2110.831247][T15593] RSP: 002b:00007f705dee4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2110.839675][T15593] RAX: ffffffffffffffda RBX: 00007f705d375fa0 RCX: 00007f705d18472c [ 2110.847648][T15593] RDX: 000000000000000f RSI: 00007f705dee40a0 RDI: 0000000000000004 [ 2110.855624][T15593] RBP: 00007f705dee4090 R08: 0000000000000000 R09: 0000000000000000 [ 2110.863607][T15593] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2110.871586][T15593] R13: 0000000000000000 R14: 00007f705d375fa0 R15: 00007ffd1cb125f8 [ 2110.879577][T15593] [ 2112.611291][T12645] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 2112.622648][T12645] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 2112.634139][T12645] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 2112.645735][T12645] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 2112.655029][T12645] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 2112.669759][T12645] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 2113.071578][T15628] chnl_net:caif_netlink_parms(): no params data found [ 2113.471611][T15628] bridge0: port 1(bridge_slave_0) entered blocking state [ 2113.479177][T15628] bridge0: port 1(bridge_slave_0) entered disabled state [ 2113.491644][T15628] bridge_slave_0: entered allmulticast mode [ 2113.498974][T15628] bridge_slave_0: entered promiscuous mode [ 2113.508333][T15628] bridge0: port 2(bridge_slave_1) entered blocking state [ 2113.522118][T15628] bridge0: port 2(bridge_slave_1) entered disabled state [ 2113.529991][T15628] bridge_slave_1: entered allmulticast mode [ 2113.547289][T15628] bridge_slave_1: entered promiscuous mode [ 2113.630836][T15647] netlink: 4 bytes leftover after parsing attributes in process `syz.4.15266'. [ 2113.727055][T15628] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2113.809766][T15628] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2113.908037][T15628] team0: Port device team_slave_0 added [ 2113.929422][T15628] team0: Port device team_slave_1 added [ 2114.001353][T15628] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2114.009777][T15628] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2114.038428][T15628] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2114.057673][T15628] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2114.067137][T15628] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2114.093096][ C0] vkms_vblank_simulate: vblank timer overrun [ 2114.119553][T15628] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2114.234253][T15628] hsr_slave_0: entered promiscuous mode [ 2114.284721][T15628] hsr_slave_1: entered promiscuous mode [ 2114.310648][T15628] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2114.332770][T15628] Cannot create hsr debugfs directory [ 2114.770387][T10170] Bluetooth: hci0: command tx timeout [ 2114.864267][T15628] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2115.101295][T15628] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2115.129704][ T29] audit: type=1326 audit(2409.767:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15669 comm="syz.7.15274" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f8019d85d19 code=0x0 [ 2115.289734][T15628] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2115.470040][T15628] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2115.828806][T15628] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 2115.843604][T15628] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 2115.870663][T15628] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 2115.907786][T15628] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 2116.072890][T15686] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 2116.082651][T15628] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2116.105308][T15628] 8021q: adding VLAN 0 to HW filter on device team0 [ 2116.147446][ T7572] bridge0: port 1(bridge_slave_0) entered blocking state [ 2116.154700][ T7572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2116.187763][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state [ 2116.195459][ T3272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2116.554948][T15628] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2116.676715][T15628] veth0_vlan: entered promiscuous mode [ 2116.698729][T15628] veth1_vlan: entered promiscuous mode [ 2116.782706][T15628] veth0_macvtap: entered promiscuous mode [ 2116.809054][T15628] veth1_macvtap: entered promiscuous mode [ 2116.829986][T10170] Bluetooth: hci0: command tx timeout [ 2116.862911][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2116.889295][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2116.899665][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2116.911010][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2116.923107][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2116.935048][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2116.945484][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2116.958496][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2116.970241][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2116.982942][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2116.994013][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2117.005045][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.015428][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2117.039369][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.060085][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2117.072144][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.084481][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2117.096006][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.106443][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2117.117452][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.130235][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2117.183641][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.215370][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2117.245497][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.266829][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2117.289819][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.322327][T15628] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2117.361497][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2117.389140][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.409781][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2117.446392][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.472850][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2117.485762][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.525888][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2117.558427][T15703] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15283'. [ 2117.565693][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.605771][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2117.619892][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.640178][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2117.653088][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.683827][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2117.697115][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.724828][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2117.747077][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.771092][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2117.792660][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.814247][T15628] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2117.844847][T15628] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2117.865404][T15628] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2117.909006][T15628] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2117.929103][T15628] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2117.963788][T15628] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2117.992926][T15628] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2118.075528][T15705] netlink: 'syz.7.15284': attribute type 4 has an invalid length. [ 2118.231062][ T3272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2118.256059][ T3272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2118.315610][ T3260] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2118.353851][ T3260] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2118.905896][T10170] Bluetooth: hci0: command tx timeout [ 2120.859610][T15739] netlink: 36 bytes leftover after parsing attributes in process `syz.0.15293'. [ 2120.968464][T10170] Bluetooth: hci0: command tx timeout [ 2121.328618][T15746] netlink: 342 bytes leftover after parsing attributes in process `syz.0.15296'. [ 2122.431052][T15761] netlink: 334 bytes leftover after parsing attributes in process `syz.9.15301'. [ 2122.463662][T15758] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15299'. [ 2122.527030][T15758] hsr_slave_0: left promiscuous mode [ 2122.699337][T15758] hsr_slave_1: left promiscuous mode [ 2122.969832][T15765] nbd6426: detected capacity change from 0 to 68719476736 [ 2123.006260][T15759] block nbd6426: Send control failed (result -22) [ 2123.013222][T15759] block nbd6426: Request send failed, requeueing [ 2123.030438][ T41] block nbd6426: Dead connection, failed to find a fallback [ 2123.032051][T10170] block nbd6426: Receive control failed (result -32) [ 2123.039385][ T41] block nbd6426: shutting down sockets [ 2123.052276][ T41] blk_print_req_error: 58 callbacks suppressed [ 2123.052295][ T41] I/O error, dev nbd6426, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2123.067945][ T41] buffer_io_error: 56 callbacks suppressed [ 2123.067969][ T41] Buffer I/O error on dev nbd6426, logical block 0, async page read [ 2123.087065][T15759] I/O error, dev nbd6426, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2123.132894][T15759] Buffer I/O error on dev nbd6426, logical block 0, async page read [ 2123.169635][T15759] I/O error, dev nbd6426, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2123.179747][T15759] Buffer I/O error on dev nbd6426, logical block 0, async page read [ 2123.188499][T15759] I/O error, dev nbd6426, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2123.199927][T15759] Buffer I/O error on dev nbd6426, logical block 0, async page read [ 2123.208242][T15759] I/O error, dev nbd6426, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2123.263383][T15759] Buffer I/O error on dev nbd6426, logical block 0, async page read [ 2123.286828][T15759] I/O error, dev nbd6426, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2123.305830][T15759] Buffer I/O error on dev nbd6426, logical block 0, async page read [ 2123.314011][T15759] I/O error, dev nbd6426, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2123.344284][T15759] Buffer I/O error on dev nbd6426, logical block 0, async page read [ 2123.359207][T15759] I/O error, dev nbd6426, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2123.375467][T15759] Buffer I/O error on dev nbd6426, logical block 0, async page read [ 2123.417089][T15759] ldm_validate_partition_table(): Disk read failed. [ 2123.449189][T15759] I/O error, dev nbd6426, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2123.474271][T15759] Buffer I/O error on dev nbd6426, logical block 0, async page read [ 2123.493884][T15759] I/O error, dev nbd6426, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2123.514332][T15759] Buffer I/O error on dev nbd6426, logical block 0, async page read [ 2123.531956][T15759] Dev nbd6426: unable to read RDB block 0 [ 2123.576400][T15759] nbd6426: unable to read partition table [ 2123.615553][T15759] ldm_validate_partition_table(): Disk read failed. [ 2123.622591][T15759] Dev nbd6426: unable to read RDB block 0 [ 2123.652667][T15759] nbd6426: unable to read partition table [ 2123.732364][T15780] netlink: 342 bytes leftover after parsing attributes in process `syz.9.15308'. [ 2124.017898][T15784] netlink: 28 bytes leftover after parsing attributes in process `syz.9.15310'. [ 2124.056951][T15784] mac80211_hwsim hwsim85 wlan0: entered allmulticast mode [ 2124.303352][T15789] nbd: must specify at least one socket [ 2125.993741][T15817] netlink: 334 bytes leftover after parsing attributes in process `syz.7.15322'. [ 2126.820082][T15828] nbd0: detected capacity change from 0 to 68719476736 [ 2126.860072][T15759] block nbd0: Send control failed (result -22) [ 2126.866294][T15759] block nbd0: Request send failed, requeueing [ 2126.902200][T10170] block nbd0: Receive control failed (result -32) [ 2126.913398][ T58] block nbd0: Dead connection, failed to find a fallback [ 2126.920560][ T58] block nbd0: shutting down sockets [ 2126.926595][T15759] ldm_validate_partition_table(): Disk read failed. [ 2126.933903][T15759] Dev nbd0: unable to read RDB block 0 [ 2126.955619][T15759] nbd0: unable to read partition table [ 2127.004984][T15759] ldm_validate_partition_table(): Disk read failed. [ 2127.053806][T15759] Dev nbd0: unable to read RDB block 0 [ 2127.084417][T15759] nbd0: unable to read partition table [ 2130.709863][T15868] netlink: 334 bytes leftover after parsing attributes in process `syz.7.15340'. [ 2132.336929][T15888] netlink: 342 bytes leftover after parsing attributes in process `syz.7.15346'. [ 2132.929555][T15908] FAULT_INJECTION: forcing a failure. [ 2132.929555][T15908] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2132.944115][T15908] CPU: 1 UID: 0 PID: 15908 Comm: syz.0.15352 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2132.955016][T15908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2132.965098][T15908] Call Trace: [ 2132.968398][T15908] [ 2132.971357][T15908] dump_stack_lvl+0x16c/0x1f0 [ 2132.976071][T15908] should_fail_ex+0x497/0x5b0 [ 2132.980788][T15908] _copy_to_user+0x32/0xd0 [ 2132.985243][T15908] read_gssp+0x1db/0x2d0 [ 2132.989520][T15908] ? __pfx_read_gssp+0x10/0x10 [ 2132.994329][T15908] ? __pfx_read_gssp+0x10/0x10 [ 2132.999126][T15908] proc_reg_read+0x23d/0x330 [ 2133.003745][T15908] ? __pfx_proc_reg_read+0x10/0x10 [ 2133.008890][T15908] vfs_read+0x1df/0xbe0 [ 2133.013080][T15908] ? __fget_files+0x1fc/0x3a0 [ 2133.017793][T15908] ? __pfx___mutex_lock+0x10/0x10 [ 2133.022849][T15908] ? __pfx_vfs_read+0x10/0x10 [ 2133.027566][T15908] ? __fget_files+0x206/0x3a0 [ 2133.032285][T15908] ksys_read+0x12b/0x250 [ 2133.036567][T15908] ? __pfx_ksys_read+0x10/0x10 [ 2133.041366][T15908] do_syscall_64+0xcd/0x250 [ 2133.045900][T15908] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2133.051824][T15908] RIP: 0033:0x7fc01b585d19 [ 2133.056262][T15908] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2133.075909][T15908] RSP: 002b:00007fc0193f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2133.084357][T15908] RAX: ffffffffffffffda RBX: 00007fc01b775fa0 RCX: 00007fc01b585d19 [ 2133.092355][T15908] RDX: 0000000000000300 RSI: 0000000000000000 RDI: 0000000000000003 [ 2133.100355][T15908] RBP: 00007fc0193f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2133.108358][T15908] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2133.116356][T15908] R13: 0000000000000000 R14: 00007fc01b775fa0 R15: 00007fff3bd3c2b8 [ 2133.124374][T15908] [ 2133.186569][T15909] ptrace attach of "./syz-executor exec"[13350] was attempted by "./syz-executor exec"[15909] [ 2133.274041][T15914] netlink: 'syz.4.15353': attribute type 1 has an invalid length. [ 2135.887214][T15959] netlink: 342 bytes leftover after parsing attributes in process `syz.0.15367'. [ 2135.995839][T15960] netlink: 'syz.9.15365': attribute type 1 has an invalid length. [ 2140.260987][T16004] FAULT_INJECTION: forcing a failure. [ 2140.260987][T16004] name failslab, interval 1, probability 0, space 0, times 0 [ 2140.350822][T16004] CPU: 1 UID: 0 PID: 16004 Comm: syz.9.15377 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2140.361737][T16004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2140.371825][T16004] Call Trace: [ 2140.375121][T16004] [ 2140.378079][T16004] dump_stack_lvl+0x16c/0x1f0 [ 2140.382790][T16004] should_fail_ex+0x497/0x5b0 [ 2140.387496][T16004] ? fs_reclaim_acquire+0xae/0x150 [ 2140.392642][T16004] should_failslab+0xc2/0x120 [ 2140.397367][T16004] __kmalloc_noprof+0xce/0x4f0 [ 2140.402166][T16004] ? do_sys_poll+0x24b/0xde0 [ 2140.406796][T16004] do_sys_poll+0x24b/0xde0 [ 2140.411246][T16004] ? __pfx_mark_lock+0x10/0x10 [ 2140.416068][T16004] ? __pfx_do_sys_poll+0x10/0x10 [ 2140.421033][T16004] ? __pfx___lock_acquire+0x10/0x10 [ 2140.426362][T16004] ? __pfx_timespec64_add_safe+0x10/0x10 [ 2140.432022][T16004] ? ktime_get_ts64+0x2d4/0x400 [ 2140.436898][T16004] ? read_tsc+0x9/0x20 [ 2140.440978][T16004] ? ktime_get_ts64+0x256/0x400 [ 2140.445851][T16004] __x64_sys_poll+0x1a8/0x450 [ 2140.450543][T16004] ? __pfx___x64_sys_poll+0x10/0x10 [ 2140.455769][T16004] do_syscall_64+0xcd/0x250 [ 2140.460294][T16004] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2140.466199][T16004] RIP: 0033:0x7f18fd585d19 [ 2140.470621][T16004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2140.490256][T16004] RSP: 002b:00007f18fe3b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 2140.498690][T16004] RAX: ffffffffffffffda RBX: 00007f18fd775fa0 RCX: 00007f18fd585d19 [ 2140.506673][T16004] RDX: 0000000000000005 RSI: 0000000000000034 RDI: 0000000020000180 [ 2140.514652][T16004] RBP: 00007f18fe3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 2140.522627][T16004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2140.530603][T16004] R13: 0000000000000000 R14: 00007f18fd775fa0 R15: 00007ffdcb8c9b18 [ 2140.538591][T16004] [ 2141.012466][T16018] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15383'. [ 2141.641962][T16012] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15381'. [ 2141.653226][T16012] lo: entered promiscuous mode [ 2141.658050][T16012] lo: entered allmulticast mode [ 2142.460473][T16035] blk_print_req_error: 58 callbacks suppressed [ 2142.460497][T16035] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2142.477997][T16035] buffer_io_error: 56 callbacks suppressed [ 2142.478016][T16035] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2142.512285][T16035] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2142.536522][T16035] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2142.565797][T16035] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2142.585754][T16035] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2142.605721][T16035] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2142.635628][T16035] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2142.655824][T16035] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2142.675998][T16035] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2142.685544][T16035] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2142.727588][T16035] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2142.754943][T16035] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2142.814505][T16035] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2142.834661][T16035] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2142.874241][T16035] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2142.882165][T16035] ldm_validate_partition_table(): Disk read failed. [ 2142.892461][T16035] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2142.914458][T16035] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2142.922426][T16035] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2142.932640][T16035] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2142.961286][T16035] Dev nbd0: unable to read RDB block 0 [ 2142.972129][T16035] nbd0: unable to read partition table [ 2143.293330][T16056] netlink: 342 bytes leftover after parsing attributes in process `syz.7.15395'. [ 2143.486328][T16061] netlink: 8 bytes leftover after parsing attributes in process `syz.7.15397'. [ 2147.433269][T16082] ldm_validate_partition_table(): Disk read failed. [ 2147.462435][T16082] blk_print_req_error: 16 callbacks suppressed [ 2147.462460][T16082] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2147.829371][T16082] buffer_io_error: 16 callbacks suppressed [ 2147.829394][T16082] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2147.846846][T16082] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2147.856397][T16082] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2147.865989][T16082] Dev nbd0: unable to read RDB block 0 [ 2147.871826][T16082] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2147.881014][T16082] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2147.890100][T16082] I/O error, dev nbd0, sector 24 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2147.900267][T16082] Buffer I/O error on dev nbd0, logical block 3, async page read [ 2147.908374][T16082] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2147.917441][T16082] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2147.925483][T16082] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2147.935270][T16082] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2147.944112][T16082] nbd0: unable to read partition table [ 2148.366407][T16092] netlink: 342 bytes leftover after parsing attributes in process `syz.7.15406'. [ 2150.566877][T16128] netlink: 342 bytes leftover after parsing attributes in process `syz.0.15418'. [ 2150.765929][T16134] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15420'. [ 2150.861673][T16135] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2151.505267][T16139] netlink: 334 bytes leftover after parsing attributes in process `syz.0.15422'. [ 2153.004589][T16178] netlink: 342 bytes leftover after parsing attributes in process `syz.0.15434'. [ 2153.501689][T16189] FAULT_INJECTION: forcing a failure. [ 2153.501689][T16189] name failslab, interval 1, probability 0, space 0, times 0 [ 2153.557895][T16189] CPU: 0 UID: 0 PID: 16189 Comm: syz.4.15440 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2153.568808][T16189] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2153.578891][T16189] Call Trace: [ 2153.582197][T16189] [ 2153.585153][T16189] dump_stack_lvl+0x16c/0x1f0 [ 2153.589891][T16189] should_fail_ex+0x497/0x5b0 [ 2153.594601][T16189] ? fs_reclaim_acquire+0xae/0x150 [ 2153.599745][T16189] should_failslab+0xc2/0x120 [ 2153.604461][T16189] __kmalloc_node_track_caller_noprof+0xcf/0x520 [ 2153.610822][T16189] ? rcu_is_watching+0x12/0xc0 [ 2153.615619][T16189] ? uinput_write+0x2ff/0x12b0 [ 2153.620423][T16189] ? __pfx_uinput_write+0x10/0x10 [ 2153.625484][T16189] kstrndup+0x48/0xb0 [ 2153.629499][T16189] uinput_write+0x2ff/0x12b0 [ 2153.634132][T16189] ? __pfx_uinput_write+0x10/0x10 [ 2153.639200][T16189] ? apparmor_file_permission+0x251/0x400 [ 2153.644960][T16189] ? bpf_lsm_file_permission+0x9/0x10 [ 2153.650369][T16189] ? security_file_permission+0x71/0x210 [ 2153.656039][T16189] ? __pfx_uinput_write+0x10/0x10 [ 2153.661096][T16189] vfs_write+0x24c/0x1150 [ 2153.665462][T16189] ? __fget_files+0x1fc/0x3a0 [ 2153.670174][T16189] ? __pfx_lock_release+0x10/0x10 [ 2153.675255][T16189] ? __pfx_vfs_write+0x10/0x10 [ 2153.680052][T16189] ? lock_acquire+0x2f/0xb0 [ 2153.684580][T16189] ? __fget_files+0x40/0x3a0 [ 2153.689215][T16189] ? __fget_files+0x206/0x3a0 [ 2153.693934][T16189] ksys_write+0x207/0x250 [ 2153.698291][T16189] ? __pfx_ksys_write+0x10/0x10 [ 2153.703165][T16189] do_syscall_64+0xcd/0x250 [ 2153.707689][T16189] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2153.713590][T16189] RIP: 0033:0x7f67f9d85d19 [ 2153.718008][T16189] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2153.737618][T16189] RSP: 002b:00007f67fabb6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2153.746038][T16189] RAX: ffffffffffffffda RBX: 00007f67f9f75fa0 RCX: 00007f67f9d85d19 [ 2153.754013][T16189] RDX: 000000000000045c RSI: 0000000000000000 RDI: 0000000000000004 [ 2153.761985][T16189] RBP: 00007f67fabb6090 R08: 0000000000000000 R09: 0000000000000000 [ 2153.769960][T16189] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2153.777932][T16189] R13: 0000000000000000 R14: 00007f67f9f75fa0 R15: 00007ffe50e02db8 [ 2153.785918][T16189] [ 2154.673534][T16200] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15450'. [ 2155.005302][T16208] netlink: 28 bytes leftover after parsing attributes in process `syz.4.15445'. [ 2155.309865][T16213] netlink: 342 bytes leftover after parsing attributes in process `syz.7.15447'. [ 2156.222913][T16227] mkiss: ax0: crc mode is auto. [ 2157.672052][T16248] netlink: 334 bytes leftover after parsing attributes in process `syz.9.15458'. [ 2158.047702][T16255] netlink: 20 bytes leftover after parsing attributes in process `syz.7.15461'. [ 2158.262435][T16266] netlink: 342 bytes leftover after parsing attributes in process `syz.9.15465'. [ 2158.671137][T16286] nbd: nbd6426 already in use [ 2159.639379][T16306] netlink: 342 bytes leftover after parsing attributes in process `syz.7.15478'. [ 2160.281260][T16311] FAULT_INJECTION: forcing a failure. [ 2160.281260][T16311] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2160.328842][T16311] CPU: 1 UID: 0 PID: 16311 Comm: syz.0.15481 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2160.339761][T16311] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2160.349841][T16311] Call Trace: [ 2160.353140][T16311] [ 2160.356090][T16311] dump_stack_lvl+0x16c/0x1f0 [ 2160.360806][T16311] should_fail_ex+0x497/0x5b0 [ 2160.365526][T16311] _copy_from_user+0x2e/0xd0 [ 2160.370156][T16311] do_sys_poll+0x1d6/0xde0 [ 2160.374596][T16311] ? __pfx_mark_lock+0x10/0x10 [ 2160.379403][T16311] ? __pfx_do_sys_poll+0x10/0x10 [ 2160.384370][T16311] ? __pfx___lock_acquire+0x10/0x10 [ 2160.389692][T16311] ? __pfx_timespec64_add_safe+0x10/0x10 [ 2160.395349][T16311] ? ktime_get_ts64+0x2d4/0x400 [ 2160.400230][T16311] ? read_tsc+0x9/0x20 [ 2160.404328][T16311] ? ktime_get_ts64+0x256/0x400 [ 2160.409218][T16311] __x64_sys_poll+0x1a8/0x450 [ 2160.413923][T16311] ? __pfx___x64_sys_poll+0x10/0x10 [ 2160.419160][T16311] do_syscall_64+0xcd/0x250 [ 2160.423697][T16311] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2160.429622][T16311] RIP: 0033:0x7fc01b585d19 [ 2160.434058][T16311] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2160.453692][T16311] RSP: 002b:00007fc0193f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000007 [ 2160.462136][T16311] RAX: ffffffffffffffda RBX: 00007fc01b775fa0 RCX: 00007fc01b585d19 [ 2160.470133][T16311] RDX: 0000000000000005 RSI: 0000000000000034 RDI: 0000000020000180 [ 2160.478147][T16311] RBP: 00007fc0193f6090 R08: 0000000000000000 R09: 0000000000000000 [ 2160.486139][T16311] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2160.494129][T16311] R13: 0000000000000000 R14: 00007fc01b775fa0 R15: 00007fff3bd3c2b8 [ 2160.502135][T16311] [ 2161.794248][T16338] netlink: 342 bytes leftover after parsing attributes in process `syz.4.15487'. [ 2161.940193][T16333] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 2162.012070][T16342] mkiss: ax0: crc mode is auto. [ 2162.619673][T16355] netlink: 28 bytes leftover after parsing attributes in process `syz.9.15495'. [ 2163.501970][T16373] mkiss: ax0: crc mode is auto. [ 2164.477179][T16387] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15506'. [ 2164.507727][T12645] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 2164.519060][T12645] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 2164.529849][T12645] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 2164.539281][T12645] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 2164.548398][T12645] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 2164.555906][T12645] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 2165.557910][T16397] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15508'. [ 2165.845493][T16388] chnl_net:caif_netlink_parms(): no params data found [ 2166.114811][T16388] bridge0: port 1(bridge_slave_0) entered blocking state [ 2166.122059][T16388] bridge0: port 1(bridge_slave_0) entered disabled state [ 2166.143731][T16388] bridge_slave_0: entered allmulticast mode [ 2166.151810][T16388] bridge_slave_0: entered promiscuous mode [ 2166.179438][T16388] bridge0: port 2(bridge_slave_1) entered blocking state [ 2166.202799][T16388] bridge0: port 2(bridge_slave_1) entered disabled state [ 2166.210126][T16388] bridge_slave_1: entered allmulticast mode [ 2166.224538][T16388] bridge_slave_1: entered promiscuous mode [ 2166.396952][T16388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2166.424923][T16388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2166.574060][T16388] team0: Port device team_slave_0 added [ 2166.576468][T10170] Bluetooth: hci1: command tx timeout [ 2166.632209][T16388] team0: Port device team_slave_1 added [ 2166.762689][T16388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2166.769675][T16388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2166.834569][T16388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2166.882952][T16388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2166.919196][T16388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2167.009012][T16388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2167.210173][T16388] hsr_slave_0: entered promiscuous mode [ 2167.248139][T16388] hsr_slave_1: entered promiscuous mode [ 2167.257406][T16388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2167.264998][T16388] Cannot create hsr debugfs directory [ 2167.880389][T16388] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2168.244209][T16388] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2168.640278][T10170] Bluetooth: hci1: command tx timeout [ 2169.111395][T16388] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2169.291844][T16429] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15517'. [ 2170.641751][T16388] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2170.656947][T16438] netlink: 342 bytes leftover after parsing attributes in process `syz.7.15515'. [ 2170.710425][T10170] Bluetooth: hci1: command tx timeout [ 2170.995432][T16388] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 2171.030643][T16388] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 2171.070097][T16388] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 2171.092091][T16388] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 2171.121344][T16447] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15523'. [ 2171.290991][T16388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2171.347536][T16388] 8021q: adding VLAN 0 to HW filter on device team0 [ 2171.364369][ T3272] bridge0: port 1(bridge_slave_0) entered blocking state [ 2171.371553][ T3272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2171.419759][ T3272] bridge0: port 2(bridge_slave_1) entered blocking state [ 2171.426967][ T3272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2171.828043][T16388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2171.910575][T16388] veth0_vlan: entered promiscuous mode [ 2171.934311][T16388] veth1_vlan: entered promiscuous mode [ 2171.960439][T16388] veth0_macvtap: entered promiscuous mode [ 2171.970580][T16388] veth1_macvtap: entered promiscuous mode [ 2171.989240][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.000184][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.010562][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.021126][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.031116][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.041977][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.052226][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.062939][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.072885][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.083669][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.094090][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.105153][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.115309][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.125833][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.135781][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.147116][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.157067][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.167783][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.177937][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.188956][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.199091][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.210016][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.220163][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.231013][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.241088][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.251891][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.261786][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2172.272299][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.283933][T16388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2172.296996][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.307911][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.318152][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.328642][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.338576][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.349453][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.359391][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.369915][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.379841][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.390976][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.401348][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.412217][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.422354][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.432880][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.442783][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.453619][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.463757][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.474273][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.484398][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.495396][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.506499][T16388] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2172.517642][T16388] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2172.528839][T16388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2172.588323][T16388] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2172.597874][T16388] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2172.607321][T16388] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2172.616128][T16388] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2172.651579][T16467] netlink: 342 bytes leftover after parsing attributes in process `syz.7.15527'. [ 2172.785115][T10170] Bluetooth: hci1: command tx timeout [ 2172.928194][ T3272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2172.936056][ T3272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2173.033829][ T3257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2173.053505][ T3257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2173.285735][T16478] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15529'. [ 2174.363705][T16495] netlink: 342 bytes leftover after parsing attributes in process `syz.0.15535'. [ 2175.706170][T16518] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15546'. [ 2175.825814][T16521] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2175.994805][T16525] netlink: 'syz.7.15548': attribute type 19 has an invalid length. [ 2176.022114][T16525] netlink: 310 bytes leftover after parsing attributes in process `syz.7.15548'. [ 2180.730913][T16569] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15559'. [ 2180.821494][T16569] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2181.110790][T16574] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15560'. [ 2181.877173][T16581] Process accounting resumed [ 2182.276554][T16589] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15565'. [ 2182.871458][T16598] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15569'. [ 2183.082031][T16604] netlink: 'syz.0.15570': attribute type 19 has an invalid length. [ 2183.095224][T16604] netlink: 310 bytes leftover after parsing attributes in process `syz.0.15570'. [ 2183.810800][T16620] netlink: 342 bytes leftover after parsing attributes in process `syz.7.15576'. [ 2184.457161][T16633] nbd: nbd6426 already in use [ 2186.360849][T16667] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15589'. [ 2188.149080][T16677] bridge0: port 4(bond0) entered blocking state [ 2188.170944][T16677] bridge0: port 4(bond0) entered disabled state [ 2188.201562][T16677] bond0: entered allmulticast mode [ 2188.206730][T16677] bond_slave_0: entered allmulticast mode [ 2188.258781][T16677] bond_slave_1: entered allmulticast mode [ 2188.296658][T16677] bond0: entered promiscuous mode [ 2188.333143][T16677] bond_slave_0: entered promiscuous mode [ 2188.377734][T16677] bond_slave_1: entered promiscuous mode [ 2188.408149][T16677] bridge0: port 4(bond0) entered blocking state [ 2188.414556][T16677] bridge0: port 4(bond0) entered forwarding state [ 2188.626312][T16686] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15593'. [ 2189.221809][T16700] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15602'. [ 2190.074877][T16722] netlink: 28 bytes leftover after parsing attributes in process `syz.9.15610'. [ 2190.271541][T16722] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2190.283839][T16702] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15600'. [ 2191.232007][T16743] FAULT_INJECTION: forcing a failure. [ 2191.232007][T16743] name failslab, interval 1, probability 0, space 0, times 0 [ 2191.256409][T16743] CPU: 1 UID: 0 PID: 16743 Comm: syz.3.15617 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2191.267323][T16743] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2191.277403][T16743] Call Trace: [ 2191.280699][T16743] [ 2191.283651][T16743] dump_stack_lvl+0x16c/0x1f0 [ 2191.288364][T16743] should_fail_ex+0x497/0x5b0 [ 2191.293076][T16743] ? fs_reclaim_acquire+0xae/0x150 [ 2191.298229][T16743] should_failslab+0xc2/0x120 [ 2191.302946][T16743] __kmalloc_cache_noprof+0x68/0x420 [ 2191.308271][T16743] ? do_syscall_64+0xcd/0x250 [ 2191.312975][T16743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2191.319085][T16743] nl80211_prepare_wdev_dump+0x3f6/0x740 [ 2191.324766][T16743] nl80211_dump_station+0x106/0x740 [ 2191.330017][T16743] ? __pfx_nl80211_dump_station+0x10/0x10 [ 2191.335820][T16743] ? __alloc_skb+0x200/0x380 [ 2191.340446][T16743] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2191.346557][T16743] genl_dumpit+0x122/0x230 [ 2191.351011][T16743] netlink_dump+0x53c/0xd00 [ 2191.355562][T16743] ? __pfx_netlink_dump+0x10/0x10 [ 2191.360644][T16743] ? kasan_save_track+0x14/0x30 [ 2191.365532][T16743] ? __kasan_kmalloc+0xaa/0xb0 [ 2191.370345][T16743] ? genl_start+0x67d/0x960 [ 2191.374913][T16743] __netlink_dump_start+0x6d9/0x980 [ 2191.380156][T16743] genl_family_rcv_msg_dumpit+0x1e1/0x2e0 [ 2191.385920][T16743] ? __pfx_genl_family_rcv_msg_dumpit+0x10/0x10 [ 2191.392195][T16743] ? genl_op_from_small+0x25/0x440 [ 2191.397340][T16743] ? __pfx_genl_get_cmd+0x10/0x10 [ 2191.402407][T16743] ? __pfx_genl_start+0x10/0x10 [ 2191.407281][T16743] ? __pfx_genl_dumpit+0x10/0x10 [ 2191.412252][T16743] ? __pfx_genl_done+0x10/0x10 [ 2191.417054][T16743] ? __radix_tree_lookup+0x21f/0x2c0 [ 2191.422377][T16743] genl_rcv_msg+0x470/0x800 [ 2191.426924][T16743] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2191.431979][T16743] ? __pfx_nl80211_dump_station+0x10/0x10 [ 2191.437762][T16743] netlink_rcv_skb+0x165/0x410 [ 2191.442576][T16743] ? __pfx_genl_rcv_msg+0x10/0x10 [ 2191.447633][T16743] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 2191.452974][T16743] ? down_read+0xc9/0x330 [ 2191.457338][T16743] ? __pfx_down_read+0x10/0x10 [ 2191.462139][T16743] ? netlink_deliver_tap+0x1ae/0xca0 [ 2191.467464][T16743] genl_rcv+0x28/0x40 [ 2191.471472][T16743] netlink_unicast+0x53c/0x7f0 [ 2191.476267][T16743] ? __pfx_netlink_unicast+0x10/0x10 [ 2191.481578][T16743] ? __phys_addr_symbol+0x30/0x80 [ 2191.486632][T16743] ? __check_object_size+0x488/0x710 [ 2191.491960][T16743] netlink_sendmsg+0x8b8/0xd70 [ 2191.496763][T16743] ? __pfx_netlink_sendmsg+0x10/0x10 [ 2191.502097][T16743] ____sys_sendmsg+0x9ae/0xb40 [ 2191.506901][T16743] ? copy_msghdr_from_user+0x10b/0x160 [ 2191.512395][T16743] ? __pfx_____sys_sendmsg+0x10/0x10 [ 2191.517728][T16743] ___sys_sendmsg+0x135/0x1e0 [ 2191.522454][T16743] ? __pfx____sys_sendmsg+0x10/0x10 [ 2191.527721][T16743] ? __pfx_lock_release+0x10/0x10 [ 2191.532837][T16743] ? trace_lock_acquire+0x14e/0x1f0 [ 2191.538101][T16743] ? __fget_files+0x206/0x3a0 [ 2191.542820][T16743] __sys_sendmsg+0x16e/0x220 [ 2191.547458][T16743] ? __pfx___sys_sendmsg+0x10/0x10 [ 2191.552631][T16743] do_syscall_64+0xcd/0x250 [ 2191.557168][T16743] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2191.563092][T16743] RIP: 0033:0x7fb7b0f85d19 [ 2191.567532][T16743] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2191.587167][T16743] RSP: 002b:00007fb7b1ea4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2191.595616][T16743] RAX: ffffffffffffffda RBX: 00007fb7b1175fa0 RCX: 00007fb7b0f85d19 [ 2191.603615][T16743] RDX: 0000000004000080 RSI: 0000000020000780 RDI: 0000000000000003 [ 2191.611614][T16743] RBP: 00007fb7b1ea4090 R08: 0000000000000000 R09: 0000000000000000 [ 2191.619657][T16743] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2191.627649][T16743] R13: 0000000000000000 R14: 00007fb7b1175fa0 R15: 00007ffe631eb618 [ 2191.635665][T16743] [ 2195.213714][T16815] lo: entered allmulticast mode [ 2195.219535][T16815] netlink: 28 bytes leftover after parsing attributes in process `syz.9.15642'. [ 2195.748285][T16815] lo: left allmulticast mode [ 2196.040905][T16834] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15648'. [ 2196.599508][T16848] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15651'. [ 2197.530766][T16859] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15656'. [ 2197.631378][T16859] veth0_macvtap: left promiscuous mode [ 2197.757316][T16859] macvtap0: entered allmulticast mode [ 2198.448608][T16866] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15661'. [ 2198.460526][T16866] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2201.002475][T16895] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15670'. [ 2201.131197][T16895] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2201.491590][T16907] FAULT_INJECTION: forcing a failure. [ 2201.491590][T16907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2201.537934][T16907] CPU: 1 UID: 0 PID: 16907 Comm: syz.9.15674 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2201.548846][T16907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2201.558928][T16907] Call Trace: [ 2201.562232][T16907] [ 2201.565190][T16907] dump_stack_lvl+0x16c/0x1f0 [ 2201.569901][T16907] should_fail_ex+0x497/0x5b0 [ 2201.574622][T16907] _copy_to_user+0x32/0xd0 [ 2201.579081][T16907] simple_read_from_buffer+0xd0/0x160 [ 2201.584497][T16907] proc_fail_nth_read+0x198/0x270 [ 2201.589560][T16907] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2201.595144][T16907] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2201.600737][T16907] vfs_read+0x1df/0xbe0 [ 2201.604925][T16907] ? __fget_files+0x1fc/0x3a0 [ 2201.609635][T16907] ? __pfx___mutex_lock+0x10/0x10 [ 2201.614691][T16907] ? __pfx_vfs_read+0x10/0x10 [ 2201.619412][T16907] ? __fget_files+0x206/0x3a0 [ 2201.624127][T16907] ksys_read+0x12b/0x250 [ 2201.628402][T16907] ? __pfx_ksys_read+0x10/0x10 [ 2201.633207][T16907] do_syscall_64+0xcd/0x250 [ 2201.637741][T16907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2201.643662][T16907] RIP: 0033:0x7f18fd58472c [ 2201.648095][T16907] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2201.667732][T16907] RSP: 002b:00007f18fe3b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2201.676178][T16907] RAX: ffffffffffffffda RBX: 00007f18fd775fa0 RCX: 00007f18fd58472c [ 2201.684160][T16907] RDX: 000000000000000f RSI: 00007f18fe3b70a0 RDI: 0000000000000004 [ 2201.692140][T16907] RBP: 00007f18fe3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 2201.700120][T16907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2201.708095][T16907] R13: 0000000000000000 R14: 00007f18fd775fa0 R15: 00007ffdcb8c9b18 [ 2201.716079][T16907] [ 2201.899277][T16912] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15676'. [ 2201.984121][T16917] FAULT_INJECTION: forcing a failure. [ 2201.984121][T16917] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2201.997720][T16917] CPU: 0 UID: 0 PID: 16917 Comm: syz.9.15678 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2202.008616][T16917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2202.018695][T16917] Call Trace: [ 2202.021992][T16917] [ 2202.024942][T16917] dump_stack_lvl+0x16c/0x1f0 [ 2202.029650][T16917] should_fail_ex+0x497/0x5b0 [ 2202.034367][T16917] _copy_to_user+0x32/0xd0 [ 2202.038824][T16917] simple_read_from_buffer+0xd0/0x160 [ 2202.044244][T16917] proc_fail_nth_read+0x198/0x270 [ 2202.049309][T16917] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2202.054897][T16917] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2202.060506][T16917] vfs_read+0x1df/0xbe0 [ 2202.064690][T16917] ? __fget_files+0x1fc/0x3a0 [ 2202.069392][T16917] ? __pfx___mutex_lock+0x10/0x10 [ 2202.074446][T16917] ? __pfx_vfs_read+0x10/0x10 [ 2202.079160][T16917] ? __fget_files+0x206/0x3a0 [ 2202.083879][T16917] ksys_read+0x12b/0x250 [ 2202.088148][T16917] ? __pfx_ksys_read+0x10/0x10 [ 2202.092949][T16917] do_syscall_64+0xcd/0x250 [ 2202.097487][T16917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2202.103406][T16917] RIP: 0033:0x7f18fd58472c [ 2202.107845][T16917] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2202.127482][T16917] RSP: 002b:00007f18fe3b7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2202.135925][T16917] RAX: ffffffffffffffda RBX: 00007f18fd775fa0 RCX: 00007f18fd58472c [ 2202.143922][T16917] RDX: 000000000000000f RSI: 00007f18fe3b70a0 RDI: 0000000000000004 [ 2202.151913][T16917] RBP: 00007f18fe3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 2202.159909][T16917] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000001 [ 2202.167915][T16917] R13: 0000000000000000 R14: 00007f18fd775fa0 R15: 00007ffdcb8c9b18 [ 2202.175927][T16917] [ 2202.339323][T16912] veth0_macvtap: left promiscuous mode [ 2202.355112][T16912] macvtap0: entered allmulticast mode [ 2202.974416][T16939] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15684'. [ 2203.011881][T16939] bridge_slave_1: left allmulticast mode [ 2203.039882][T16939] bridge_slave_1: left promiscuous mode [ 2203.077111][T16939] bridge0: port 2(bridge_slave_1) entered disabled state [ 2203.213163][T16939] bridge_slave_0: left allmulticast mode [ 2203.218856][T16939] bridge_slave_0: left promiscuous mode [ 2203.257711][T16939] bridge0: port 1(bridge_slave_0) entered disabled state [ 2205.164542][T16994] lo: entered allmulticast mode [ 2205.224944][T16994] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15692'. [ 2206.375074][T16994] lo: left allmulticast mode [ 2208.894241][T17027] lo: entered allmulticast mode [ 2208.942068][T17027] netlink: 28 bytes leftover after parsing attributes in process `syz.9.15703'. [ 2209.065692][T17027] lo: left allmulticast mode [ 2209.967130][T17043] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15709'. [ 2210.009791][T17043] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2212.226064][T17081] netlink: 4 bytes leftover after parsing attributes in process `syz.3.15727'. [ 2212.403775][T17086] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15728'. [ 2212.838709][T17094] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15730'. [ 2213.200808][T17102] netlink: 'syz.7.15734': attribute type 1 has an invalid length. [ 2213.250350][T17102] netlink: 252 bytes leftover after parsing attributes in process `syz.7.15734'. [ 2213.329106][T17104] svc: failed to register nfsdv3 RPC service (errno 111). [ 2213.369280][T17104] svc: failed to register nfsaclv3 RPC service (errno 111). [ 2214.354611][T17124] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15740'. [ 2214.561549][T17127] lo: entered allmulticast mode [ 2214.593987][T17127] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15741'. [ 2215.124309][T17127] lo: left allmulticast mode [ 2216.181824][T17140] netlink: 'syz.9.15745': attribute type 1 has an invalid length. [ 2216.206986][T17140] netlink: 252 bytes leftover after parsing attributes in process `syz.9.15745'. [ 2216.752634][T17151] netlink: 8 bytes leftover after parsing attributes in process `syz.9.15751'. [ 2217.262410][T17159] nbd: nbd6426 already in use [ 2218.224999][T17176] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2218.251075][T17176] Buffer I/O error on dev nbd12, logical block 0, async page read [ 2218.326252][T17176] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2218.337897][T17176] Buffer I/O error on dev nbd12, logical block 0, async page read [ 2218.346321][T17176] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2218.356769][T17176] Buffer I/O error on dev nbd12, logical block 0, async page read [ 2218.365273][T17176] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2218.374549][T17176] Buffer I/O error on dev nbd12, logical block 0, async page read [ 2218.384269][T17176] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2218.394644][T17176] Buffer I/O error on dev nbd12, logical block 0, async page read [ 2218.406200][T17176] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2218.415450][T17176] Buffer I/O error on dev nbd12, logical block 0, async page read [ 2218.425253][T17176] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2218.437867][T17176] Buffer I/O error on dev nbd12, logical block 0, async page read [ 2218.446129][T17176] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2218.457644][T17176] Buffer I/O error on dev nbd12, logical block 0, async page read [ 2218.466111][T17176] ldm_validate_partition_table(): Disk read failed. [ 2218.473097][T17176] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2218.483608][T17176] Buffer I/O error on dev nbd12, logical block 0, async page read [ 2218.494704][T17176] I/O error, dev nbd12, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2218.505944][T17176] Buffer I/O error on dev nbd12, logical block 0, async page read [ 2218.515240][T17176] Dev nbd12: unable to read RDB block 0 [ 2218.521615][T17176] nbd12: unable to read partition table [ 2219.318595][T17197] lo: entered allmulticast mode [ 2219.347249][T17197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15765'. [ 2219.459413][T17197] lo: left allmulticast mode [ 2220.717425][T17227] lo: entered allmulticast mode [ 2220.758182][T17227] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15785'. [ 2220.801417][T17227] lo: left allmulticast mode [ 2223.595051][T17235] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15790'. [ 2223.610221][T17235] netlink: 4 bytes leftover after parsing attributes in process `syz.7.15790'. [ 2223.909465][T17243] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15792'. [ 2223.950570][T17243] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2224.297704][T17252] lo: entered allmulticast mode [ 2224.321521][T17252] netlink: 28 bytes leftover after parsing attributes in process `syz.9.15796'. [ 2224.437759][T17252] lo: left allmulticast mode [ 2225.685096][T17280] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15805'. [ 2225.734021][T17280] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2226.002614][T17286] netlink: 252 bytes leftover after parsing attributes in process `syz.9.15807'. [ 2226.254657][T17289] lo: entered allmulticast mode [ 2226.271031][T17289] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15808'. [ 2226.338735][T17295] netlink: 146 bytes leftover after parsing attributes in process `syz.9.15812'. [ 2226.823770][T17289] lo: left allmulticast mode [ 2228.079222][T17333] netlink: 322 bytes leftover after parsing attributes in process `syz.0.15827'. [ 2228.130992][T17333] bond0: entered promiscuous mode [ 2228.150984][T17333] bond_slave_0: entered promiscuous mode [ 2228.167249][T17333] bond_slave_1: entered promiscuous mode [ 2228.652323][T17345] netlink: 252 bytes leftover after parsing attributes in process `syz.3.15830'. [ 2228.849610][T17347] netlink: 252 bytes leftover after parsing attributes in process `syz.3.15839'. [ 2229.255514][T17355] netlink: 8 bytes leftover after parsing attributes in process `syz.3.15832'. [ 2229.864932][T17369] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15838'. [ 2229.927295][T17370] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2230.454470][T17386] lo: entered allmulticast mode [ 2230.479668][T17386] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15845'. [ 2230.568186][T17386] lo: left allmulticast mode [ 2231.294814][T17404] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15852'. [ 2231.322259][T17404] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2232.140738][T17417] lo: entered allmulticast mode [ 2232.168419][T17417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15856'. [ 2232.223617][T17417] lo: left allmulticast mode [ 2233.534794][T17438] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15863'. [ 2233.611187][T17444] raw_sendmsg: syz.3.15864 forgot to set AF_INET. Fix it! [ 2234.585851][T17462] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15870'. [ 2236.723632][T17484] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15878'. [ 2237.045047][T17484] team0: Port device team_slave_0 removed [ 2237.204961][T17493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15880'. [ 2238.757803][T17504] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15883'. [ 2238.835517][T17514] nbd1: detected capacity change from 0 to 68719476736 [ 2238.860047][T17105] block nbd1: Send control failed (result -22) [ 2238.874826][T17105] block nbd1: Request send failed, requeueing [ 2238.906804][T10230] block nbd1: Receive control failed (result -32) [ 2238.906898][ T41] block nbd1: Dead connection, failed to find a fallback [ 2238.921374][ T41] block nbd1: shutting down sockets [ 2238.927196][ T41] blk_print_req_error: 6 callbacks suppressed [ 2238.927215][ T41] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2238.942461][ T41] buffer_io_error: 6 callbacks suppressed [ 2238.942477][ T41] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2238.959972][T17105] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2238.970067][T17105] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2239.002460][T17105] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2239.012207][T17105] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2239.020702][T17105] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2239.030505][T17105] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2239.038547][T17105] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2239.048038][T17105] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2239.056088][T17105] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2239.065459][T17105] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2239.074415][T17105] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2239.089124][T17105] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2239.098291][T17105] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2239.108376][T17105] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2239.133444][T17105] ldm_validate_partition_table(): Disk read failed. [ 2239.149648][T17524] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15890'. [ 2239.163115][T17105] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2239.187772][T17105] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2239.204445][T17524] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2239.228049][T17105] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2239.238290][T10230] Bluetooth: hci0: command 0x0406 tx timeout [ 2239.250912][T17105] Buffer I/O error on dev nbd1, logical block 0, async page read [ 2239.303753][T17105] Dev nbd1: unable to read RDB block 0 [ 2239.352798][T17105] nbd1: unable to read partition table [ 2239.404103][T17105] ldm_validate_partition_table(): Disk read failed. [ 2239.432394][T17105] Dev nbd1: unable to read RDB block 0 [ 2239.438919][T17105] nbd1: unable to read partition table [ 2241.089668][T17555] nbd16: detected capacity change from 0 to 68719476736 [ 2241.124448][T17105] block nbd16: Send control failed (result -22) [ 2241.130749][T17105] block nbd16: Request send failed, requeueing [ 2241.148000][T10170] block nbd16: Receive control failed (result -32) [ 2241.157997][ T58] block nbd16: Dead connection, failed to find a fallback [ 2241.165692][ T58] block nbd16: shutting down sockets [ 2241.171779][T17105] ldm_validate_partition_table(): Disk read failed. [ 2241.212780][T17105] Dev nbd16: unable to read RDB block 0 [ 2241.218873][T17105] nbd16: unable to read partition table [ 2241.638220][T17105] ldm_validate_partition_table(): Disk read failed. [ 2241.670644][T17105] Dev nbd16: unable to read RDB block 0 [ 2241.680641][T17105] nbd16: unable to read partition table [ 2242.150842][T17576] netlink: 28 bytes leftover after parsing attributes in process `syz.9.15904'. [ 2242.227432][T17573] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2242.460221][T17579] lo: entered allmulticast mode [ 2242.519402][T17568] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15905'. [ 2242.615448][T17581] netlink: 108 bytes leftover after parsing attributes in process `syz.9.15907'. [ 2242.744780][T17581] netlink: 28 bytes leftover after parsing attributes in process `syz.9.15907'. [ 2242.816514][T17568] team0: Port device team_slave_0 removed [ 2242.867585][T17579] lo: left allmulticast mode [ 2242.949191][T17581] bridge0: port 1(bridge_slave_0) entered disabled state [ 2243.231806][T17588] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15910'. [ 2243.327041][T17591] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2243.496322][T17581] bridge_slave_0 (unregistering): left allmulticast mode [ 2243.511231][T17581] bridge_slave_0 (unregistering): left promiscuous mode [ 2243.518293][T17581] bridge0: port 1(bridge_slave_0) entered disabled state [ 2244.277745][T17598] nbd17: detected capacity change from 0 to 68719476736 [ 2244.291434][T17105] block nbd17: Send control failed (result -22) [ 2244.306506][T17105] block nbd17: Request send failed, requeueing [ 2244.323389][ T58] block nbd17: Dead connection, failed to find a fallback [ 2244.323590][T10170] block nbd17: Receive control failed (result -32) [ 2244.331098][ T58] block nbd17: shutting down sockets [ 2244.342975][ T58] blk_print_req_error: 58 callbacks suppressed [ 2244.342992][ T58] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2244.360134][ T58] buffer_io_error: 56 callbacks suppressed [ 2244.360151][ T58] Buffer I/O error on dev nbd17, logical block 0, async page read [ 2244.375250][T17105] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2244.412644][T17105] Buffer I/O error on dev nbd17, logical block 0, async page read [ 2244.436274][T17105] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2244.445448][T17105] Buffer I/O error on dev nbd17, logical block 0, async page read [ 2244.465816][T17105] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2244.485882][T17105] Buffer I/O error on dev nbd17, logical block 0, async page read [ 2244.493928][T17105] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2244.503984][T17105] Buffer I/O error on dev nbd17, logical block 0, async page read [ 2244.512453][T17105] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2244.522223][T17105] Buffer I/O error on dev nbd17, logical block 0, async page read [ 2244.530905][T17105] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2244.540351][T17105] Buffer I/O error on dev nbd17, logical block 0, async page read [ 2244.548390][T17105] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2244.557639][T17105] Buffer I/O error on dev nbd17, logical block 0, async page read [ 2244.566024][T17105] ldm_validate_partition_table(): Disk read failed. [ 2244.573436][T17105] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2244.582691][T17105] Buffer I/O error on dev nbd17, logical block 0, async page read [ 2244.590791][T17105] I/O error, dev nbd17, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2244.600040][T17105] Buffer I/O error on dev nbd17, logical block 0, async page read [ 2244.608496][T17105] Dev nbd17: unable to read RDB block 0 [ 2244.614523][T17105] nbd17: unable to read partition table [ 2244.628049][T17105] ldm_validate_partition_table(): Disk read failed. [ 2244.636008][T17105] Dev nbd17: unable to read RDB block 0 [ 2244.642313][T17105] nbd17: unable to read partition table [ 2244.769626][T17617] lo: entered allmulticast mode [ 2244.780740][T17617] lo: left allmulticast mode [ 2245.453088][T17631] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15924'. [ 2246.008195][T17644] lo: entered allmulticast mode [ 2246.187531][T17648] netlink: 108 bytes leftover after parsing attributes in process `syz.3.15932'. [ 2246.207815][T17644] lo: left allmulticast mode [ 2246.268163][T17648] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15932'. [ 2246.870349][T17664] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15937'. [ 2248.367105][T17696] FAULT_INJECTION: forcing a failure. [ 2248.367105][T17696] name failslab, interval 1, probability 0, space 0, times 0 [ 2248.413316][T17696] CPU: 0 UID: 0 PID: 17696 Comm: syz.9.15949 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2248.424223][T17696] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2248.434302][T17696] Call Trace: [ 2248.437600][T17696] [ 2248.440553][T17696] dump_stack_lvl+0x16c/0x1f0 [ 2248.445264][T17696] should_fail_ex+0x497/0x5b0 [ 2248.449971][T17696] ? fs_reclaim_acquire+0xae/0x150 [ 2248.455113][T17696] should_failslab+0xc2/0x120 [ 2248.459824][T17696] __kmalloc_node_noprof+0xd1/0x520 [ 2248.465054][T17696] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 2248.470559][T17696] __kvmalloc_node_noprof+0xad/0x1a0 [ 2248.475881][T17696] seq_read_iter+0x82a/0x12b0 [ 2248.480597][T17696] ? __pfx_aa_file_perm+0x10/0x10 [ 2248.485653][T17696] seq_read+0x39f/0x4e0 [ 2248.489845][T17696] ? __pfx_seq_read+0x10/0x10 [ 2248.494567][T17696] ? __pfx_seq_read+0x10/0x10 [ 2248.499267][T17696] vfs_read+0x1df/0xbe0 [ 2248.503449][T17696] ? __fget_files+0x1fc/0x3a0 [ 2248.508160][T17696] ? __pfx___mutex_lock+0x10/0x10 [ 2248.513212][T17696] ? __pfx_vfs_read+0x10/0x10 [ 2248.517940][T17696] ? __fget_files+0x206/0x3a0 [ 2248.522659][T17696] ksys_read+0x12b/0x250 [ 2248.526933][T17696] ? __pfx_ksys_read+0x10/0x10 [ 2248.531736][T17696] do_syscall_64+0xcd/0x250 [ 2248.536275][T17696] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2248.542204][T17696] RIP: 0033:0x7f18fd585d19 [ 2248.546656][T17696] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2248.566301][T17696] RSP: 002b:00007f18fe3b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2248.574750][T17696] RAX: ffffffffffffffda RBX: 00007f18fd775fa0 RCX: 00007f18fd585d19 [ 2248.582747][T17696] RDX: 00000000000000b3 RSI: 0000000020000400 RDI: 0000000000000003 [ 2248.590744][T17696] RBP: 00007f18fe3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 2248.598738][T17696] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2248.606735][T17696] R13: 0000000000000000 R14: 00007f18fd775fa0 R15: 00007ffdcb8c9b18 [ 2248.614749][T17696] [ 2249.002989][T10230] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 2249.020605][T10230] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 2249.028746][T10230] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 2249.041655][T10230] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 2249.052457][T10230] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 2249.061242][T10230] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 2249.515167][T17700] chnl_net:caif_netlink_parms(): no params data found [ 2250.109256][T17700] bridge0: port 1(bridge_slave_0) entered blocking state [ 2250.131470][T17700] bridge0: port 1(bridge_slave_0) entered disabled state [ 2250.165207][T17700] bridge_slave_0: entered allmulticast mode [ 2250.206987][T17700] bridge_slave_0: entered promiscuous mode [ 2250.227148][T17700] bridge0: port 2(bridge_slave_1) entered blocking state [ 2250.247335][T17700] bridge0: port 2(bridge_slave_1) entered disabled state [ 2250.254639][T17700] bridge_slave_1: entered allmulticast mode [ 2250.271277][T17700] bridge_slave_1: entered promiscuous mode [ 2250.340660][T11107] smc: removing net device syz_tun with user defined pnetid ETHTOOL [ 2250.440597][T17700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 2250.462014][T17700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 2250.551979][T17700] team0: Port device team_slave_0 added [ 2250.572397][T17700] team0: Port device team_slave_1 added [ 2250.636918][T17700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 2250.653669][T17700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2250.713162][T17700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 2250.736063][T17700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 2250.753216][T17700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 2250.810045][T17700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 2250.903333][T17700] hsr_slave_0: entered promiscuous mode [ 2250.923101][T17700] hsr_slave_1: entered promiscuous mode [ 2250.932991][T17700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 2250.940626][T17700] Cannot create hsr debugfs directory [ 2251.091270][T10170] Bluetooth: hci2: command tx timeout [ 2251.336061][T17700] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2251.492921][T17700] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2251.614857][T17700] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2251.772302][T17700] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 2252.029062][T17700] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 2252.060253][T17700] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 2252.089009][T17700] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 2252.118864][T17700] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 2252.309247][T17700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 2252.347878][T17700] 8021q: adding VLAN 0 to HW filter on device team0 [ 2252.382517][ T8665] bridge0: port 1(bridge_slave_0) entered blocking state [ 2252.389662][ T8665] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2252.458757][ T8665] bridge0: port 2(bridge_slave_1) entered blocking state [ 2252.465919][ T8665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2252.825146][T17700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2253.161240][T10170] Bluetooth: hci2: command tx timeout [ 2253.452187][T17700] veth0_vlan: entered promiscuous mode [ 2253.486070][T17700] veth1_vlan: entered promiscuous mode [ 2253.629312][T17722] lo: entered allmulticast mode [ 2253.670624][T17722] netlink: 28 bytes leftover after parsing attributes in process `syz.9.15951'. [ 2253.861169][T17722] lo: left allmulticast mode [ 2254.045627][T17700] veth0_macvtap: entered promiscuous mode [ 2254.069611][T17700] veth1_macvtap: entered promiscuous mode [ 2254.127629][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2254.165284][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2254.195348][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2254.234908][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2254.254821][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2254.274962][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2254.294589][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2254.324461][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2254.344342][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2254.364308][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2254.384095][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2254.403998][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2254.424145][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2254.443782][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2254.463889][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2254.483606][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2254.503474][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2254.533329][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2254.543180][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2254.573110][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2254.582958][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2254.612852][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2254.622695][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2254.652667][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2254.673086][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2254.692475][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2254.712623][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2254.737623][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2254.762954][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2254.782089][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2254.803841][T17700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2254.823983][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2254.851683][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2254.871728][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2254.891476][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2254.911384][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2254.935317][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2254.952935][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2254.974059][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2254.994119][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2255.020746][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2255.030630][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2255.060553][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2255.078199][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2255.100320][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2255.120607][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2255.150223][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2255.169979][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2255.186365][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2255.204356][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2255.226867][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2255.246996][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2255.267692][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2255.289414][T17700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2255.316442][T17700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2255.332754][T17700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2255.352122][T17700] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2255.360985][T17700] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2255.369993][T17700] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2255.379366][T17700] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2255.396847][T10170] Bluetooth: hci2: command tx timeout [ 2255.657636][T17742] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2255.925630][ T3270] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2255.989665][ T3270] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2256.103599][ T7575] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2256.225423][ T7575] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2257.293014][T17762] netlink: 28 bytes leftover after parsing attributes in process `syz.0.15965'. [ 2257.318494][T17763] netlink: 'syz.3.15966': attribute type 2 has an invalid length. [ 2257.469683][T10170] Bluetooth: hci2: command tx timeout [ 2258.323484][T17780] netlink: zone id is out of range [ 2258.356951][T17780] netlink: set zone limit has 8 unknown bytes [ 2258.518298][T17784] netlink: 'syz.0.15975': attribute type 46 has an invalid length. [ 2258.573655][T17789] netlink: 28 bytes leftover after parsing attributes in process `syz.3.15976'. [ 2260.588956][T17830] netlink: 8 bytes leftover after parsing attributes in process `syz.0.15991'. [ 2260.742544][T17834] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2261.111269][T17847] netlink: 28 bytes leftover after parsing attributes in process `syz.7.15998'. [ 2262.812180][T17889] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2263.039592][T17894] netlink: 'syz.0.16015': attribute type 1 has an invalid length. [ 2263.217535][T17899] lo: entered allmulticast mode [ 2263.224475][T17899] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16017'. [ 2263.322868][T17899] lo: left allmulticast mode [ 2264.065062][T17918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16022'. [ 2264.213875][T17921] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2264.616576][T17931] lo: entered allmulticast mode [ 2264.651129][T17931] netlink: 28 bytes leftover after parsing attributes in process `syz.9.16027'. [ 2264.728674][T17931] lo: left allmulticast mode [ 2264.751943][T17918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.16022'. [ 2264.875839][T17933] FAULT_INJECTION: forcing a failure. [ 2264.875839][T17933] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2264.909955][T17933] CPU: 0 UID: 0 PID: 17933 Comm: syz.9.16028 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2264.920861][T17933] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2264.930943][T17933] Call Trace: [ 2264.934239][T17933] [ 2264.937187][T17933] dump_stack_lvl+0x16c/0x1f0 [ 2264.941901][T17933] should_fail_ex+0x497/0x5b0 [ 2264.946619][T17933] _copy_to_iter+0x4a5/0x1400 [ 2264.951342][T17933] ? __pfx__copy_to_iter+0x10/0x10 [ 2264.956489][T17933] ? __virt_addr_valid+0x1a4/0x590 [ 2264.961638][T17933] ? __virt_addr_valid+0x5e/0x590 [ 2264.966688][T17933] ? __phys_addr_symbol+0x30/0x80 [ 2264.971741][T17933] ? __check_object_size+0x488/0x710 [ 2264.977057][T17933] seq_read_iter+0xd00/0x12b0 [ 2264.981754][T17933] seq_read+0x39f/0x4e0 [ 2264.985914][T17933] ? __pfx_seq_read+0x10/0x10 [ 2264.990615][T17933] ? __pfx_seq_read+0x10/0x10 [ 2264.995302][T17933] vfs_read+0x1df/0xbe0 [ 2264.999467][T17933] ? __fget_files+0x1fc/0x3a0 [ 2265.004152][T17933] ? __pfx___mutex_lock+0x10/0x10 [ 2265.009184][T17933] ? __pfx_vfs_read+0x10/0x10 [ 2265.013874][T17933] ? __fget_files+0x206/0x3a0 [ 2265.018566][T17933] ksys_read+0x12b/0x250 [ 2265.022816][T17933] ? __pfx_ksys_read+0x10/0x10 [ 2265.027596][T17933] do_syscall_64+0xcd/0x250 [ 2265.032111][T17933] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2265.038013][T17933] RIP: 0033:0x7f18fd585d19 [ 2265.042430][T17933] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2265.062045][T17933] RSP: 002b:00007f18fe3b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2265.070464][T17933] RAX: ffffffffffffffda RBX: 00007f18fd775fa0 RCX: 00007f18fd585d19 [ 2265.078442][T17933] RDX: 00000000000000b3 RSI: 0000000020000400 RDI: 0000000000000003 [ 2265.086416][T17933] RBP: 00007f18fe3b7090 R08: 0000000000000000 R09: 0000000000000000 [ 2265.094401][T17933] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2265.102392][T17933] R13: 0000000000000000 R14: 00007f18fd775fa0 R15: 00007ffdcb8c9b18 [ 2265.110391][T17933] [ 2265.957331][T17942] nbd: nbd6426 already in use [ 2267.366594][ T29] audit: type=1800 audit(8277292162.821:76): pid=17958 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.16036" name="SYSV00010000" dev="hugetlbfs" ino=0 res=0 errno=0 [ 2268.040292][T17967] netlink: 28 bytes leftover after parsing attributes in process `syz.9.16039'. [ 2270.203976][T18008] : renamed from bond0 (while UP) [ 2270.342049][T18010] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16053'. [ 2274.395276][T18063] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16067'. [ 2274.724479][T18069] netlink: 4 bytes leftover after parsing attributes in process `syz.9.16067'. [ 2275.281916][T18067] netlink: 20 bytes leftover after parsing attributes in process `syz.7.16068'. [ 2275.394691][T18067] 0}^: entered promiscuous mode [ 2276.052770][T18080] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2276.672031][T18090] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16075'. [ 2278.798519][T18116] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2279.257995][T18124] netlink: 28 bytes leftover after parsing attributes in process `syz.9.16085'. [ 2280.525991][T18136] netlink: 20 bytes leftover after parsing attributes in process `syz.9.16090'. [ 2280.653566][T18141] 0}^: entered promiscuous mode [ 2281.086260][T18147] FAULT_INJECTION: forcing a failure. [ 2281.086260][T18147] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2281.138895][T18147] CPU: 1 UID: 0 PID: 18147 Comm: syz.7.16093 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2281.149820][T18147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2281.159901][T18147] Call Trace: [ 2281.163197][T18147] [ 2281.166148][T18147] dump_stack_lvl+0x16c/0x1f0 [ 2281.170861][T18147] should_fail_ex+0x497/0x5b0 [ 2281.175578][T18147] _copy_to_user+0x32/0xd0 [ 2281.180032][T18147] simple_read_from_buffer+0xd0/0x160 [ 2281.185451][T18147] proc_fail_nth_read+0x198/0x270 [ 2281.190514][T18147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2281.196107][T18147] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 2281.201690][T18147] vfs_read+0x1df/0xbe0 [ 2281.205878][T18147] ? __fget_files+0x1fc/0x3a0 [ 2281.210585][T18147] ? __pfx___mutex_lock+0x10/0x10 [ 2281.215643][T18147] ? __pfx_vfs_read+0x10/0x10 [ 2281.220355][T18147] ? __fget_files+0x206/0x3a0 [ 2281.225075][T18147] ksys_read+0x12b/0x250 [ 2281.229342][T18147] ? __pfx_ksys_read+0x10/0x10 [ 2281.234145][T18147] do_syscall_64+0xcd/0x250 [ 2281.238681][T18147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2281.244605][T18147] RIP: 0033:0x7fd27f58472c [ 2281.249045][T18147] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2281.268686][T18147] RSP: 002b:00007fd280320030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2281.277129][T18147] RAX: ffffffffffffffda RBX: 00007fd27f775fa0 RCX: 00007fd27f58472c [ 2281.285126][T18147] RDX: 000000000000000f RSI: 00007fd2803200a0 RDI: 0000000000000003 [ 2281.293119][T18147] RBP: 00007fd280320090 R08: 0000000000000000 R09: 0000000000000000 [ 2281.301110][T18147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2281.309103][T18147] R13: 0000000000000000 R14: 00007fd27f775fa0 R15: 00007ffddadf0888 [ 2281.317118][T18147] [ 2281.585971][T18144] netlink: 4352 bytes leftover after parsing attributes in process `syz.3.16092'. [ 2281.807838][T18150] netlink: 342 bytes leftover after parsing attributes in process `syz.7.16094'. [ 2284.197907][T18186] netlink: 342 bytes leftover after parsing attributes in process `syz.0.16104'. [ 2285.159520][T18205] netlink: 16 bytes leftover after parsing attributes in process `syz.3.16112'. [ 2285.287668][T18209] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2285.566755][T18216] netlink: 342 bytes leftover after parsing attributes in process `syz.3.16116'. [ 2285.862248][T18208] netlink: 4352 bytes leftover after parsing attributes in process `syz.7.16113'. [ 2289.460680][T18272] netlink: 342 bytes leftover after parsing attributes in process `syz.3.16132'. [ 2289.738611][T18278] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16135'. [ 2290.168367][T10230] Bluetooth: hci1: command 0x0406 tx timeout [ 2292.346738][T18311] blk_print_req_error: 24 callbacks suppressed [ 2292.346762][T18311] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2292.476034][T18311] buffer_io_error: 23 callbacks suppressed [ 2292.476056][T18311] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2292.526714][T18311] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2292.558266][T18311] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2292.603891][T18311] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2292.632831][T18311] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2292.664789][T18311] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2292.715355][T18311] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2292.743699][T18311] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2292.791467][T18311] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2292.916741][T18311] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2292.994056][T18311] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2293.067606][T18311] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2293.130221][T18311] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2293.138275][T18311] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2293.182581][T18311] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2293.190430][T18311] ldm_validate_partition_table(): Disk read failed. [ 2293.269139][T18311] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2293.321757][T18311] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2293.330348][T18311] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 2293.381790][T18311] Buffer I/O error on dev nbd0, logical block 0, async page read [ 2293.429935][T18311] Dev nbd0: unable to read RDB block 0 [ 2293.513399][T18311] nbd0: unable to read partition table [ 2294.116749][T18337] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2294.268730][T18339] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16153'. [ 2294.576270][T18346] bridge0: port 1(team0) entered blocking state [ 2294.644967][T18346] bridge0: port 1(team0) entered disabled state [ 2294.714652][T18346] team0: entered allmulticast mode [ 2294.770411][T18346] team_slave_0: entered allmulticast mode [ 2294.804376][T18346] team_slave_1: entered allmulticast mode [ 2294.832192][T18346] team0: entered promiscuous mode [ 2294.873561][T18346] team_slave_0: entered promiscuous mode [ 2294.913606][T18346] team_slave_1: entered promiscuous mode [ 2294.984349][T18346] bridge0: port 1(team0) entered blocking state [ 2294.990758][T18346] bridge0: port 1(team0) entered forwarding state [ 2295.868042][T18370] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2296.416886][T18375] netlink: 28 bytes leftover after parsing attributes in process `syz.7.16168'. [ 2298.025734][T18406] ecryptfs_miscdev_write: Acceptable packet size range is [6-531], but amount of data written is [2147479552]. [ 2298.659882][T18418] netlink: 28 bytes leftover after parsing attributes in process `syz.3.16179'. [ 2299.049869][T18422] bridge0: port 3(team0) entered blocking state [ 2299.091019][T18422] bridge0: port 3(team0) entered disabled state [ 2299.131778][T18422] team0: entered allmulticast mode [ 2299.171386][T18422] team_slave_0: entered allmulticast mode [ 2299.187601][T18416] netlink: 12 bytes leftover after parsing attributes in process `syz.0.16180'. [ 2299.221789][T18422] team_slave_1: entered allmulticast mode [ 2299.272967][T18422] team0: entered promiscuous mode [ 2299.350380][T18422] team_slave_0: entered promiscuous mode [ 2299.375277][T18422] team_slave_1: entered promiscuous mode [ 2299.396190][T18422] bridge0: port 3(team0) entered blocking state [ 2299.402630][T18422] bridge0: port 3(team0) entered forwarding state [ 2300.641461][T18440] [ 2300.643833][T18440] ====================================================== [ 2300.650861][T18440] WARNING: possible circular locking dependency detected [ 2300.657891][T18440] 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 Not tainted [ 2300.665008][T18440] ------------------------------------------------------ [ 2300.672040][T18440] syz.3.16186/18440 is trying to acquire lock: [ 2300.678209][T18440] ffffffff8fabdbc8 (rtnl_mutex){+.+.}-{4:4}, at: do_ipv6_setsockopt+0x1f4d/0x4660 [ 2300.687483][T18440] [ 2300.687483][T18440] but task is already holding lock: [ 2300.694858][T18440] ffff88803dd1b8a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x101/0xc00 [ 2300.705001][T18440] [ 2300.705001][T18440] which lock already depends on the new lock. [ 2300.705001][T18440] [ 2300.715410][T18440] [ 2300.715410][T18440] the existing dependency chain (in reverse order) is: [ 2300.724429][T18440] [ 2300.724429][T18440] -> #2 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 2300.733056][T18440] __mutex_lock+0x19b/0xa60 [ 2300.738114][T18440] smc_switch_to_fallback+0x2d/0xa00 [ 2300.743955][T18440] smc_sendmsg+0x13d/0x520 [ 2300.748920][T18440] ____sys_sendmsg+0x9ae/0xb40 [ 2300.754225][T18440] ___sys_sendmsg+0x135/0x1e0 [ 2300.759446][T18440] __sys_sendmsg+0x16e/0x220 [ 2300.764583][T18440] do_syscall_64+0xcd/0x250 [ 2300.769626][T18440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2300.776066][T18440] [ 2300.776066][T18440] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 2300.783759][T18440] lock_sock_nested+0x3a/0xf0 [ 2300.788983][T18440] sockopt_lock_sock+0x54/0x70 [ 2300.794294][T18440] do_ip_getsockopt+0x115c/0x2bf0 [ 2300.799864][T18440] ip_getsockopt+0x9c/0x1e0 [ 2300.804910][T18440] raw_getsockopt+0x4d/0x1e0 [ 2300.810051][T18440] do_sock_getsockopt+0x3fe/0x870 [ 2300.815629][T18440] __sys_getsockopt+0x12f/0x260 [ 2300.821025][T18440] __x64_sys_getsockopt+0xbd/0x160 [ 2300.826686][T18440] do_syscall_64+0xcd/0x250 [ 2300.831734][T18440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2300.838181][T18440] [ 2300.838181][T18440] -> #0 (rtnl_mutex){+.+.}-{4:4}: [ 2300.845425][T18440] __lock_acquire+0x249e/0x3c40 [ 2300.850829][T18440] lock_acquire.part.0+0x11b/0x380 [ 2300.856482][T18440] __mutex_lock+0x19b/0xa60 [ 2300.861534][T18440] do_ipv6_setsockopt+0x1f4d/0x4660 [ 2300.867282][T18440] ipv6_setsockopt+0xcb/0x170 [ 2300.872512][T18440] tcp_setsockopt+0xa4/0x100 [ 2300.877644][T18440] smc_setsockopt+0x1b4/0xc00 [ 2300.882873][T18440] do_sock_setsockopt+0x222/0x480 [ 2300.888453][T18440] __sys_setsockopt+0x1a0/0x230 [ 2300.893854][T18440] __x64_sys_setsockopt+0xbd/0x160 [ 2300.899513][T18440] do_syscall_64+0xcd/0x250 [ 2300.904559][T18440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2300.910999][T18440] [ 2300.910999][T18440] other info that might help us debug this: [ 2300.910999][T18440] [ 2300.921234][T18440] Chain exists of: [ 2300.921234][T18440] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 2300.921234][T18440] [ 2300.934833][T18440] Possible unsafe locking scenario: [ 2300.934833][T18440] [ 2300.942299][T18440] CPU0 CPU1 [ 2300.947688][T18440] ---- ---- [ 2300.953065][T18440] lock(&smc->clcsock_release_lock); [ 2300.958550][T18440] lock(sk_lock-AF_INET); [ 2300.965679][T18440] lock(&smc->clcsock_release_lock); [ 2300.973589][T18440] lock(rtnl_mutex); [ 2300.977587][T18440] [ 2300.977587][T18440] *** DEADLOCK *** [ 2300.977587][T18440] [ 2300.985740][T18440] 1 lock held by syz.3.16186/18440: [ 2300.990955][T18440] #0: ffff88803dd1b8a8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_setsockopt+0x101/0xc00 [ 2301.001546][T18440] [ 2301.001546][T18440] stack backtrace: [ 2301.007441][T18440] CPU: 0 UID: 0 PID: 18440 Comm: syz.3.16186 Not tainted 6.13.0-rc2-syzkaller-00036-g231825b2e1ff #0 [ 2301.018307][T18440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 11/25/2024 [ 2301.028382][T18440] Call Trace: [ 2301.031673][T18440] [ 2301.034618][T18440] dump_stack_lvl+0x116/0x1f0 [ 2301.039333][T18440] print_circular_bug+0x41c/0x610 [ 2301.044397][T18440] check_noncircular+0x31a/0x400 [ 2301.049368][T18440] ? __pfx_check_noncircular+0x10/0x10 [ 2301.054860][T18440] ? hlock_class+0x4e/0x130 [ 2301.059390][T18440] ? __pfx_mark_lock+0x10/0x10 [ 2301.064188][T18440] ? hlock_class+0x4e/0x130 [ 2301.068725][T18440] ? lockdep_lock+0xc6/0x200 [ 2301.073347][T18440] ? __pfx_lockdep_lock+0x10/0x10 [ 2301.078407][T18440] ? __pfx_mark_lock+0x10/0x10 [ 2301.083207][T18440] __lock_acquire+0x249e/0x3c40 [ 2301.088094][T18440] ? __pfx___lock_acquire+0x10/0x10 [ 2301.093324][T18440] ? __lock_acquire+0x15a9/0x3c40 [ 2301.098380][T18440] lock_acquire.part.0+0x11b/0x380 [ 2301.103510][T18440] ? do_ipv6_setsockopt+0x1f4d/0x4660 [ 2301.108919][T18440] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 2301.114578][T18440] ? rcu_is_watching+0x12/0xc0 [ 2301.119378][T18440] ? trace_lock_acquire+0x14e/0x1f0 [ 2301.124610][T18440] ? do_ipv6_setsockopt+0x1f4d/0x4660 [ 2301.130015][T18440] ? lock_acquire+0x2f/0xb0 [ 2301.134542][T18440] ? do_ipv6_setsockopt+0x1f4d/0x4660 [ 2301.139943][T18440] __mutex_lock+0x19b/0xa60 [ 2301.144474][T18440] ? do_ipv6_setsockopt+0x1f4d/0x4660 [ 2301.149891][T18440] ? __pfx_mark_lock+0x10/0x10 [ 2301.154689][T18440] ? do_ipv6_setsockopt+0x1f4d/0x4660 [ 2301.160091][T18440] ? __pfx___mutex_lock+0x10/0x10 [ 2301.165145][T18440] ? __pfx_register_lock_class+0x10/0x10 [ 2301.170796][T18440] ? finish_task_switch.isra.0+0x217/0xcc0 [ 2301.176624][T18440] ? __switch_to+0x749/0x1190 [ 2301.181332][T18440] ? hlock_class+0x4e/0x130 [ 2301.185860][T18440] ? do_ipv6_setsockopt+0x1f4d/0x4660 [ 2301.191257][T18440] ? rtnl_lock+0x9/0x20 [ 2301.195450][T18440] do_ipv6_setsockopt+0x1f4d/0x4660 [ 2301.200688][T18440] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 2301.206272][T18440] ? lock_acquire.part.0+0x11b/0x380 [ 2301.211584][T18440] ? __mutex_trylock_common+0xea/0x250 [ 2301.217062][T18440] ? __pfx___mutex_trylock_common+0x10/0x10 [ 2301.222993][T18440] ? smc_setsockopt+0x101/0xc00 [ 2301.227872][T18440] ? rcu_is_watching+0x12/0xc0 [ 2301.232663][T18440] ? trace_contention_end+0xee/0x140 [ 2301.237993][T18440] ? __mutex_lock+0x1cc/0xa60 [ 2301.242703][T18440] ? __pfx___futex_wait+0x10/0x10 [ 2301.247749][T18440] ? smc_setsockopt+0x101/0xc00 [ 2301.252630][T18440] ? __pfx___mutex_lock+0x10/0x10 [ 2301.257680][T18440] ? ipv6_setsockopt+0xcb/0x170 [ 2301.262555][T18440] ipv6_setsockopt+0xcb/0x170 [ 2301.267257][T18440] tcp_setsockopt+0xa4/0x100 [ 2301.271878][T18440] smc_setsockopt+0x1b4/0xc00 [ 2301.276589][T18440] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 2301.282518][T18440] ? __pfx_smc_setsockopt+0x10/0x10 [ 2301.287750][T18440] ? lock_acquire.part.0+0x11b/0x380 [ 2301.293061][T18440] ? __pfx_smc_setsockopt+0x10/0x10 [ 2301.298287][T18440] do_sock_setsockopt+0x222/0x480 [ 2301.303347][T18440] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 2301.308925][T18440] ? __pfx_do_futex+0x10/0x10 [ 2301.313635][T18440] ? __x64_sys_futex+0x1e1/0x4c0 [ 2301.318606][T18440] ? __x64_sys_futex+0x1ea/0x4c0 [ 2301.323574][T18440] __sys_setsockopt+0x1a0/0x230 [ 2301.328462][T18440] __x64_sys_setsockopt+0xbd/0x160 [ 2301.333600][T18440] ? do_syscall_64+0x91/0x250 [ 2301.338302][T18440] ? lockdep_hardirqs_on+0x7c/0x110 [ 2301.343538][T18440] do_syscall_64+0xcd/0x250 [ 2301.348065][T18440] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 2301.354072][T18440] RIP: 0033:0x7fb7b0f85d19 [ 2301.358504][T18440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2301.378137][T18440] RSP: 002b:00007fb7b1ea4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2301.386584][T18440] RAX: ffffffffffffffda RBX: 00007fb7b1175fa0 RCX: 00007fb7b0f85d19 [ 2301.394575][T18440] RDX: 0000000000000014 RSI: 0000000000000029 RDI: 0000000000000003 [ 2301.402563][T18440] RBP: 00007fb7b1001a20 R08: 0000000010000110 R09: 0000000000000000 [ 2301.410554][T18440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 2301.418544][T18440] R13: 0000000000000000 R14: 00007fb7b1175fa0 R15: 00007ffe631eb618 [ 2301.426541][T18440]