last executing test programs: 4m38.039176541s ago: executing program 2 (id=973): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8200, 0x1, 0x9, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "7829000000000000000200", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) listen$auto(0x3, 0x81) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, 0x0, 0x4000080) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b) write$auto(0x3, 0x0, 0xd7d) 4m37.775363786s ago: executing program 2 (id=974): setreuid$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = getpid() sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf25050000000c00010007000000000000000c00010004000000000000000c00010040000000000000000c00010004000000000000000c0001000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) clone3$auto(&(0x7f00000000c0)={0x101000, 0x5, 0x40, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x685b, 0x7, 0xb}, 0xb03) fcntl$auto(0x3, 0xf, 0x5) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0xe0080, 0x0) futex$auto(&(0x7f0000000080)=0x2c156f47, 0x0, 0x2948, &(0x7f00000000c0)={0x100}, 0x0, 0x5) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x0, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0xffffffffffffffff, 0x2, 0x0, 0x402000, 0x0, 0xe, 0x1, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x0, 0x8, 0x20000, 0x8, 0x10000000000, 0xffffffffffffffff, 0x4, 0x2f, 0x0, 0x0, 0x1006, 0x400000000005b8, 0xffff, 0x0, 0x100, 0x0, 0x6, 0x2, 0x88e, 0x40, 0xfffffffffffffffc, 0x8, 0xa38, 0x4, 0x3, 0xfffffffffffffffc, 0x2, 0x8, 0x10000000007, 0xc567]}, 0x1fa, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0x2, &(0x7f0000000380)="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") ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd05, &(0x7f00000001c0)) ioctl$auto_I2C_RDWR(r1, 0x707, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = io_uring_setup$auto(0x1, 0x0) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x1, 0x0, 0x8004) r5 = epoll_create$auto(0x6) close_range$auto(r3, r5, 0x100) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 4m36.511396422s ago: executing program 2 (id=981): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) r1 = openat$auto_kernfs_file_fops_kernfs_internal(0xffffffffffffff9c, &(0x7f0000000040)='/sys/devices/platform/dummy_udc.0/gadget.0/function\x00', 0x0, 0x0) r2 = socket(0x2, 0x1, 0x0) socket(0xa, 0x2, 0x0) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) write$auto(0x3, 0x0, 0xfdef) ppoll$auto(&(0x7f0000000000)={r2, 0x4, 0x5}, 0x7, 0x0, 0x0, 0x8) setsockopt$auto(r3, 0x6, 0xa, &(0x7f00000002c0)='\xa9[ h=jk\x96\x81kW\x1f\x17\xac]@\xa4\x00\xd1\xf2\xb5\xaf\x03\xf1\x19}\x8a\xebe+(\xc8\xef\x98\xe5DD\"$\x14\xbb#\xd7[\x03\xbe\xfd\x8f\xcdP\xa6\xb7\x19O\xe2\x05\a\x06P3\xf1\r\xd4\x8cuH\xe6u\xc8K\xf8\xc2M\xfc.2Aj\x8cJ\xcb\xe5\xfd\xc4;S\xe1\x96\x06j\xab\x91Ww\x91]Gen\x17\x18<\xeb>\xeb\xd7\x9c\xa3\xa5\x85\xf1\xaf\x98\x91D\tKZ\xec\x85\x84S\xc8\xfd\xd8\xbfY\xd1\x91V\b}', 0x9) bind$auto(r2, &(0x7f0000000200), 0x6d) setsockopt$auto(0x3, 0x1, 0x21, 0x0, 0x9) bind$auto(0x3, &(0x7f0000000000), 0x68) connect$auto(0x3, &(0x7f0000000000), 0x55) read$auto_kernfs_file_fops_kernfs_internal(r1, &(0x7f0000001080)=""/98, 0x62) write$auto_console_fops_tty_io(r0, &(0x7f0000000080)="c60c0ba5", 0x4) 4m36.101407607s ago: executing program 2 (id=984): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) close_range$auto(0x2, 0xa, 0x0) bpf$auto(0x5, &(0x7f0000000000)=@bpf_attr_0={0x8200, 0x1, 0x9, 0x7, 0x5, 0xffffffffffffffff, 0x80000001, "7829000000000000000200", 0x0, 0xffffffffffffffff, 0x7, 0xffff4e8b, 0x2, 0x1}, 0x7) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) close_range$auto(0x0, 0xfffffffffffff000, 0x2) socket(0xa, 0x2, 0x73) socket(0x2, 0x1, 0x0) mmap$auto(0x0, 0x8, 0x1000000016, 0x13, 0x3, 0x400180000000) socketpair$auto(0x1, 0x5, 0x8000000000000000, 0x0) socket(0x1, 0x1, 0x0) bind$auto(0x3, 0x0, 0x6b) listen$auto(0x3, 0x81) r0 = socket(0x10, 0x2, 0x4) sendmsg$auto_THERMAL_GENL_CMD_TZ_GET_ID(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x400c050}, 0x4000080) sendmsg$auto_NFSD_CMD_THREADS_SET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c00000014"], 0x2c}, 0x1, 0x0, 0x0, 0x4}, 0x400c000) write$auto(r0, &(0x7f0000000000)='-\x00', 0x2fb) openat$auto_vhost_vsock_fops_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x40000, 0x0) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) close_range$auto(0x2, 0x8, 0x0) open(0x0, 0x22240, 0x155) socket(0xa, 0x3, 0x3b) setsockopt$auto(0x3, 0x1, 0x3e, 0x0, 0x9) connect$auto(0x3, &(0x7f00000018c0)=@generic={0xa, "abe6de3d6468fe8000"}, 0x1b) write$auto(0x3, 0x0, 0xd7d) 4m35.772902989s ago: executing program 2 (id=989): unshare$auto(0x40000080) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1d, 0x2, 0x2) socket(0x1d, 0x2, 0x2) mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) 4m35.464723104s ago: executing program 2 (id=992): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) fsopen$auto(&(0x7f00000001c0)='nfsd\x00', 0x1) socket(0x1a, 0x801, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20048890}, 0x2000c041) add_key$auto(&(0x7f0000000000)='.@{!\x00', 0x0, 0x0, 0x0, 0x81) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) r0 = socket(0x11, 0x3, 0x2) getsockopt$auto(r0, 0x107, 0xb, 0x0, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400) ppoll$auto(0x0, 0x9, 0x0, 0x0, 0x8) write$auto(0x0, 0x0, 0x10001) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x101401, 0x0) write$auto(0x3, 0x0, 0xfffffdef) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) 4m20.049235493s ago: executing program 32 (id=992): mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x17) fsopen$auto(&(0x7f00000001c0)='nfsd\x00', 0x1) socket(0x1a, 0x801, 0x3) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1, 0x2, 0x8000000000000000, 0x0) sendmsg$auto_WG_CMD_GET_DEVICE(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000080)={0x0, 0x14}, 0x1, 0x0, 0x0, 0x20048890}, 0x2000c041) add_key$auto(&(0x7f0000000000)='.@{!\x00', 0x0, 0x0, 0x0, 0x81) sendmsg$auto_L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)=ANY=[@ANYBLOB="03"], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x48080) writev$auto(0xca, &(0x7f0000000080)={&(0x7f0000000040), 0x1}, 0x7e) r0 = socket(0x11, 0x3, 0x2) getsockopt$auto(r0, 0x107, 0xb, 0x0, 0x0) readv$auto(0x3, &(0x7f00000000c0)={0x0, 0x8}, 0x400) ppoll$auto(0x0, 0x9, 0x0, 0x0, 0x8) write$auto(0x0, 0x0, 0x10001) close_range$auto(0x0, 0xfffffffffffff000, 0x4000000000002) pidfd_open$auto(0x1, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) openat$auto_uhid_fops_uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2201, 0x0) openat$auto_snd_pcm_oss_f_reg_pcm_oss(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x20342, 0x0) openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x101401, 0x0) write$auto(0x3, 0x0, 0xfffffdef) preadv$auto(0x40000000000003, &(0x7f0000000080)={0x0, 0xfffffffd}, 0x6, 0x8, 0x5) 4.028675574s ago: executing program 0 (id=2594): r0 = openat$auto_snd_ctl_f_ops_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snd/controlC1\x00', 0xa02, 0x0) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f00000001c0)={{@inferred, 0x1, 0x6, 0xbffffffd, "aab8e85e0a000000529f895cf5e8ec8f46cbb766439daa41e1aa00000000fffffffe00000000f4ffffff00"}, 0x6, 0x0, 0x7, @inferred, @reserved="fb99d320be0de941ac3f58d75bd3c4768e7f0197f69ec76b4312382d618e150342771e3ac6e9a9df07cf9b1c017c611a1804d0d3c89bdd7005c58ffd5ab811fd53443e6cf63a902991b44e48364e8de3f3c467565f104f1422376c4f064c38f5352a95473c9523203e261f1f5ed26400", "a4699d30835edbe07f00000099a7dc7de94b4123f970bedd6f276852af49ffde6e768034000008000000000700000000000000000800000000df00"}) ioctl$auto_SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, 0x0) 3.708783436s ago: executing program 0 (id=2597): r0 = socket(0x29, 0x5, 0x0) sendmsg$auto_MACSEC_CMD_DEL_RXSA(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000013c0)=ANY=[], 0x1190}, 0x1, 0x0, 0x0, 0x2c095}, 0x4080) pwrite64$auto(0xc8, &(0x7f0000000000)='\vX\xb5n\x91p\xe6\x1eRN8\x99\x89/s\x1cJ\x99\x00:\x00!\r?\x1e\xf9\xa4\xf8\x15\x02l@\x18*\xc0\xc1\xf2\x14^\x0fo\x84\xfc\x89\v\xea\x1b\x95\xafQ;CL\"\x01\x0e\xa4\xdf\xdav\x1cC\x8a\xeeq\xf0\xcdr\xfa\xa2@X\xb9_\xdd*\xd1\x14^\xbe\xa2\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x00\x00', 0xe, 0x3) 3.48980841s ago: executing program 0 (id=2599): preadv$auto(0x40000000000003, 0x0, 0x6, 0x7fffffff, 0x1) mmap$auto(0x0, 0x2020009, 0x2ad, 0xf8, 0xffffffffffffffff, 0x8000) r0 = openat$auto_seq_oss_f_ops_seq_oss(0xffffffffffffff9c, &(0x7f0000000540)='/dev/sequencer\x00', 0x1c8340, 0x0) ioctl$auto(r0, 0xc08c5102, 0x3) madvise$auto(0x0, 0x200007, 0x8) r1 = socket(0x10, 0x2, 0x0) r2 = syz_genetlink_get_family_id$auto_ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000002cc0)={0x0, 0x0, &(0x7f0000002c80)={&(0x7f0000000280)={0x14, r2, 0xf4bb5e4a5272e121, 0x70bf27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x801}, 0x40) openat$auto_tracing_readme_fops_trace(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/tracing/README\x00', 0x800, 0x0) r3 = openat$auto_zero_fops_mem(0xffffffffffffff9c, &(0x7f0000000340), 0x80200, 0x0) pread64$auto(r3, &(0x7f00000019c0)='{^\'\x00', 0x100000001, 0x100000000) 3.195778023s ago: executing program 1 (id=2603): openat$auto_fuse_dev_operations_fuse_i(0xffffffffffffff9c, 0x0, 0x88000, 0x0) r0 = socket(0x2, 0x3, 0xa) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'xfrm0\x00', 0x0}) sendmsg$auto_ETHTOOL_MSG_MODULE_EEPROM_GET(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00032cbd7000fddbdf251f00000005000400040000002800018008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r2, @ANYBLOB="1400020076657468315f706f5f7465616d0000000800020002000000000006007900000005000600020000efb2dd0800000000000500050003000000"], 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x4000001) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) setsockopt$auto(0x3, 0x0, 0x5, 0x0, 0x28) close_range$auto(0x2, 0x5, 0x0) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) io_uring_setup$auto(0x6, 0x0) bpf$auto(0x3, 0x0, 0xf) syslog$auto(0xb, &(0x7f0000000000)='VG\x00', 0x805) 3.085977783s ago: executing program 3 (id=2604): r0 = syz_genetlink_get_family_id$auto_mac80211_hwsim(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$auto_HWSIM_CMD_NEW_RADIO(r1, &(0x7f0000004240)={0x0, 0x0, &(0x7f0000004200)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010023bd7000fedbdf2504000000080017000000000004000e000b"], 0x20}, 0x1, 0x0, 0x0, 0x40c8}, 0x4048000) 2.994033031s ago: executing program 1 (id=2605): mmap$auto(0x0, 0x9, 0xdf, 0xeb1, 0x401, 0x8000) r0 = openat$auto_kvm_chardev_ops_kvm_main(0xffffffffffffff9c, &(0x7f00000011c0), 0xe0180, 0x0) ioctl$auto_KVM_CREATE_VM(r0, 0xae01, 0x0) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) close_range$auto(0x0, 0x5, 0x0) socket(0x1d, 0x72071cb7e21ed4f8, 0x80000000) fsetxattr$auto(0xffffffffffffffff, &(0x7f0000000000)='\x00', &(0x7f0000000040)="9201f6c534a887cec019196a9a302c1000fbd214fc23f1f8a5aeedcae3d39a87c55df7ddb7252bee62d700167420e20b670975422ce64bee72a695f20813d47b1d593539d5293e845c271dc5f391cdb1d81d488b850fbea67783e0b2bd97aee0ba20af1df31665ed349c77af76fbdb173498581ba9f585c3ecf9d63f6a2259e19c2aa89a1ac87ec37c8f455f51dee9f0200daf768360cbf1d617e615ad20c270bc998ba7896b4a33b084ab4c7bcba1cd373b8337370090bee5900e3e0ffaf1cbfb05eb4ec9afca0e1f06", 0x8001, 0x7) fanotify_init$auto(0x5, 0x2000000000002) inotify_init1$auto(0x3000000000000) socket(0x15, 0x5, 0x0) socket(0x26, 0x2, 0x3) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$auto_nl80211(&(0x7f0000000180), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'vlan1\x00', 0x0}) sendmsg$auto_NL80211_CMD_GET_INTERFACE(r1, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000700)=ANY=[@ANYBLOB, @ANYRES16=r2, @ANYBLOB="010b27bd7000fbdbdf250500000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) mmap$auto(0x8000000000000000, 0x934, 0x8000000000000000, 0x19, 0x2, 0x27ffd) statmount$auto(0x0, &(0x7f0000000180)={0x8, 0x1, 0x9, 0x3, 0xc, 0x940, 0x1ffde, 0x3, 0x6, 0x2, 0x3, 0x5, 0x2, 0x7, 0xb0, 0x9, 0x2, 0x7, 0x2005, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd6d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}, 0x201, 0x81) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x40000) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r5 = socket(0x2, 0x1, 0x0) bind$auto(r5, 0x0, 0x67) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0001, 0x15) recvmmsg$auto(0x3, 0x0, 0x10000, 0x6, 0x0) mmap$auto(0x0, 0x2020006, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) socketpair$auto(0x1e, 0x5, 0x8000000000000000, 0x0) connect$auto(0x3, &(0x7f00000018c0)=@ethernet={0x1, @broadcast}, 0x55) 2.866716944s ago: executing program 3 (id=2606): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = syz_genetlink_get_family_id$auto_ovs_meter(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$auto_OVS_METER_CMD_SET(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x52204b}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x4c, r0, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@OVS_METER_ATTR_ID={0x8, 0x1, 0x828e}, @OVS_METER_ATTR_ID={0x8, 0x1, 0xfffffff0}, @OVS_METER_ATTR_ID={0x8, 0x1, 0x8}, @OVS_METER_ATTR_CLEAR={0x4}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_KBPS={0x4}, @OVS_METER_ATTR_USED={0xc, 0x5, 0x4}, @OVS_METER_ATTR_MAX_METERS={0x8, 0x7, 0x7f}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x880) madvise$auto(0x100000, 0xffffffffffff0005, 0x19) madvise$auto(0x0, 0xffffffffffff0001, 0x15) mq_timedreceive$auto(0x6b76, 0x0, 0xe, 0x0, &(0x7f0000000140)={0x3, 0x8000000000000000}) r1 = openat$auto_sg_fops_sg(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sg0\x00', 0x101000, 0x0) setreuid$auto(0x0, 0x0) read$auto(r1, 0x0, 0x0) r2 = openat$auto_proc_sys_file_operations_proc_sysctl(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv6/conf/veth0_vlan/disable_policy\x00', 0x40101, 0x0) write$auto_proc_sys_file_operations_proc_sysctl(r2, 0x0, 0x0) write$auto(0x3, 0x0, 0x100082) openat$auto_short_retry_limit_ops_(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/debug/ieee80211/phy0/short_retry_limit\x00', 0x0, 0x0) setsockopt$auto(r1, 0x8001, 0xebf, &(0x7f00000000c0)='#,-\x00', 0x7) prctl$auto(0x2, 0x1, 0x4, 0x100, 0x800000000008) openat$auto_def_blk_fops_fs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sda\x00', 0x8001, 0x0) mmap$auto(0x0, 0x80000400008, 0xdf, 0x9b72, 0x2, 0x8000) socket(0x11, 0x80003, 0x300) open(0x0, 0xa240, 0x15e) socket(0xa, 0x3, 0x3a) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) clone$auto(0x20003b46, 0x2, 0x0, 0x0, 0x2) statmount$auto(0x0, &(0x7f0000000180)={0x40008, 0x1, 0x9, 0x3, 0x40, 0x940, 0x1ffde, 0x3, 0x2000000000000006, 0x2, 0x9, 0x5, 0x2, 0x7, 0xffffffffffffffff, 0x9, 0xffff, 0x3, 0x5, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3b40000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000, 0x0, 0x8000000000000004, 0x0, 0x0, 0x0, 0x0, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x1, 0x0, 0x0, 0x0, 0x80]}, 0x1fe, 0x81) r3 = socket(0x10, 0x2, 0x0) sendmsg$auto_OVS_VPORT_CMD_DEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYBLOB="10002d"], 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[], 0x1ac}}, 0x40000) sendmmsg$auto(r3, &(0x7f0000000200)={{0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080), 0xfc2}, 0x2, &(0x7f00000001c0), 0x7, 0xa505}, 0x800}, 0x7, 0x4008) r4 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)) fchdir$auto(r4) 2.159539346s ago: executing program 0 (id=2608): r0 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/scsi/device_info\x00', 0x8002, 0x0) r1 = openat$auto_snd_timer_f_ops_timer(0xffffffffffffff9c, &(0x7f0000000040), 0x65c740, 0x0) ioctl$auto_DMA_HEAP_IOCTL_ALLOC(r1, 0x5422, 0x0) write$auto_proc_reg_file_ops_compat_inode(r0, &(0x7f0000000240)="22edd92f26639ec07e6e5d09f20c7c160a4dc5023a92446435820bd54b8004043262db0a8686bd579dcf16f50e9bfa20abfa3a", 0x33) 2.137365017s ago: executing program 3 (id=2609): mmap$auto(0x0, 0x4020009, 0xdb, 0xeb1, 0x401, 0x8000) prctl$auto(0x1000000003b, 0x1, 0x4, 0x5, 0x7) madvise$auto(0x0, 0xffffffffffff0005, 0x19) madvise$auto(0x7fffff, 0xffffffffffff0001, 0x15) 2.032038391s ago: executing program 1 (id=2610): mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) r0 = socket(0x10, 0x2, 0x0) close_range$auto(0x2, 0x8, 0x0) socket(0x2, 0x80002, 0x73) r1 = socket(0xa, 0x1, 0x84) bind$auto(0x3, &(0x7f0000000040)=@in={0x2, 0x3, @empty}, 0x6a) connect$auto(r1, &(0x7f0000000080)=@in={0x2, 0x3, @dev={0xac, 0x14, 0x14, 0x10}}, 0x54) setsockopt$auto(0x3, 0x0, 0x4, 0x0, 0x0) sendmsg$auto_HANDSHAKE_CMD_ACCEPT(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x33580}, 0x1, 0x0, 0x3f2}, 0x4064890) 1.869544156s ago: executing program 4 (id=2612): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000840)="4cea6ed1dc1f91f3c388b5622a274610e10800ca08ba", 0x16) 1.812861363s ago: executing program 3 (id=2613): r0 = openat$auto_console_fops_tty_io(0xffffffffffffff9c, &(0x7f0000000800)='/dev/tty0\x00', 0x102, 0x0) write$auto_console_fops_tty_io(r0, &(0x7f0000000840)="4cea6ed1dc1f91f3c388b5622a274610e10800ca08ba7aa1995d92e1d0ae2ef23f241b3ebfd9800e9b3b4b", 0x2b) 1.797000931s ago: executing program 0 (id=2614): setreuid$auto(0x0, 0x0) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x40000000000a5, 0x8000) r0 = getpid() sendmsg$auto_NETDEV_CMD_PAGE_POOL_GET(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="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", @ANYRES16=0x0, @ANYBLOB="010026bd7000ffdbdf25050000000c00010007000000000000000c00010004000000000000000c00010040000000000000000c00010004000000000000000c0001000000000000000000"], 0x50}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$auto_HSR_C_GET_NODE_STATUS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4000080}, 0x800) socket(0xa, 0x3, 0xff) mmap$auto(0x0, 0x2020009, 0x3, 0xeb1, 0xfffffffffffffffa, 0x8000) mmap$auto(0x0, 0x20009, 0x4000000000df, 0xeb1, 0x401, 0x8000) clone3$auto(&(0x7f00000000c0)={0x101000, 0x5, 0x40, 0x0, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x685b, 0x7, 0xb}, 0xb03) fcntl$auto(0x3, 0xf, 0x5) process_vm_readv$auto(r0, &(0x7f0000000000)={0x0, 0xfff}, 0x1, &(0x7f0000000280)={&(0x7f0000000080), 0xffffffff}, 0x6, 0x0) r1 = openat$auto_i2cdev_fops_i2c_dev(0xffffffffffffff9c, &(0x7f0000000200), 0xe0080, 0x0) futex$auto(&(0x7f0000000080)=0x2c156f47, 0x0, 0x2948, &(0x7f00000000c0)={0x100}, 0x0, 0x5) statmount$auto(0x0, &(0x7f0000000180)={0xa, 0x1, 0x44f, 0x7, 0x5, 0x7181, 0x1ffde, 0x7, 0x3, 0x8, 0x9, 0x80003, 0x4, 0x200000000001, 0x384, 0x9, 0x8, 0x10006, 0x400007f, 0x0, 0x0, 0xe, 0x22000, 0x200, 0x0, 0x84, [0x3, 0x2, 0xffffffffffffffff, 0x2, 0x0, 0x402000, 0x0, 0xe, 0x1, 0x0, 0xfffffffffffffffd, 0xffffffffffffffff, 0x8, 0x0, 0x6, 0x0, 0x8, 0x20000, 0x8, 0x10000000000, 0xffffffffffffffff, 0x4, 0x2f, 0x0, 0x0, 0x1006, 0x400000000005b8, 0xffff, 0x0, 0x100, 0x0, 0x6, 0x2, 0x88e, 0x40, 0xfffffffffffffffc, 0x8, 0xa38, 0x4, 0x3, 0xfffffffffffffffc, 0x2, 0x8, 0x10000000007, 0xc567]}, 0x1fa, 0xd) r2 = openat$auto__ctl_fops_dm_ioctl(0xffffffffffffff9c, &(0x7f0000000180), 0x1541, 0x0) ioctl$auto__ctl_fops_dm_ioctl(r2, 0x2, &(0x7f0000000380)="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") ioctl$auto__ctl_fops_dm_ioctl(r2, 0xfffffff7effffd05, &(0x7f00000001c0)) ioctl$auto_I2C_RDWR(r1, 0x707, 0x0) mmap$auto(0x0, 0x8, 0xdf, 0x9b72, 0x2, 0x8000) r3 = io_uring_setup$auto(0x1, 0x0) r4 = socket(0x11, 0x80003, 0x300) setsockopt$auto(r4, 0x107, 0x1, 0x0, 0x8004) r5 = epoll_create$auto(0x6) close_range$auto(r3, r5, 0x100) unshare$auto(0x40000080) close_range$auto(0x2, 0x8, 0x0) 1.729826996s ago: executing program 4 (id=2615): r0 = openat$auto_fops_atomic_t_(0xffffffffffffff9c, &(0x7f0000000040)='/sys/kernel/debug/fail_make_request/space\x00', 0x80000, 0x0) write$auto_fops_atomic_t_(r0, &(0x7f00000000c0)="89c589175b10472abe4ecec8a3676cf0f5b29810c365bee3ddc51dc2f9bfceeab53646e2188f5796dda657fb2ac8e7cca28d2bff5670adbd818ced0779c3633c14e0c20e63dec8ec7a1a53dbf7044616bfe8ba26865226be66b0a9eb01c6a129856e20d8b3f28d467e4548c749849d5361db5dfffa4a07a350e0ec9e9ba7dd4a", 0x80) r1 = socket(0x10, 0x80000, 0x68000000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'pim6reg1\x00'}) mmap$auto(0x0, 0x20009, 0xdf, 0xeb1, 0x401, 0x8000) r2 = socket(0x2000000000000021, 0x2, 0x10000000000002) setsockopt$auto(r2, 0x110, 0x4, 0x0, 0x4) futex$auto(&(0x7f0000000080)=0x2948, 0x0, 0x2948, 0x0, 0x0, 0x5) futex$auto(&(0x7f0000000080)=0x2, 0x6, 0x0, 0x0, 0x0, 0x7fff) mq_open$auto(&(0x7f0000000180)='.\xe6\x7f4\xdf\x16N\xb8q\x19\xd0\v9\x7f\xb5\xf1u0x0}) bpf$auto(0x0, &(0x7f0000000100)=@bpf_attr_5={@target_ifindex=r1, 0xffffffffffffffff, 0x9f, 0x18, 0x1, @relative_fd, 0x5}, 0x96) r2 = openat$auto_proc_reg_file_ops_compat_inode(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card1/pcm0c/sub5/xrun_injection\x00', 0x48041, 0x0) write$auto_proc_reg_file_ops_compat_inode(r2, &(0x7f00000000c0)="22edd92f26639ec0023a8686bd579dcf16f50e9bfa20abfa3a2b", 0x1a) 0s ago: executing program 1 (id=2625): unshare$auto(0x9) mmap$auto(0x0, 0x4020009, 0xdf, 0xeb1, 0x401, 0x8000) madvise$auto(0x0, 0xffffffffffff0005, 0x19) mq_unlink$auto(0x0) setrlimit$auto(0x1000000007, 0x0) connect$auto(0x3, 0x0, 0x55) mremap$auto(0x0, 0x8000000000000008, 0x3fd6, 0x3, 0x0) bind$auto(0xffffffffffffffff, &(0x7f0000000000), 0x3) sendmsg$auto_NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x40000) mprotect$auto(0x1ffff000, 0x8000000000000001, 0x4) mmap$auto(0x0, 0x400008, 0xdf, 0x9b72, 0x2, 0x8000) madvise$auto(0x3d00, 0xffffffffffff0001, 0x15) kernel console output (not intermixed with test programs): ? find_vma+0xc0/0x140 [ 335.107424][T11749] ? __pfx_find_vma+0x10/0x10 [ 335.112121][T11749] ? walk_page_test+0x9b/0x180 [ 335.116911][T11749] walk_page_range_mm+0x55a/0x940 [ 335.121976][T11749] ? __pfx_walk_page_range_mm+0x10/0x10 [ 335.127540][T11749] ? mlock_drain_local+0x22d/0x4f0 [ 335.132684][T11749] ? lock_acquire+0x2f/0xb0 [ 335.137202][T11749] ? mlock_drain_local+0x6f/0x4f0 [ 335.142251][T11749] walk_page_range+0x63/0x90 [ 335.146865][T11749] madvise_pageout+0x326/0x820 [ 335.151649][T11749] ? __pfx_madvise_pageout+0x10/0x10 [ 335.156963][T11749] ? mas_prev_setup.constprop.0+0xb4/0x830 [ 335.162790][T11749] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 335.168704][T11749] madvise_vma_behavior+0x44a/0x1da0 [ 335.174018][T11749] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 335.179759][T11749] ? find_vma_prev+0xdb/0x160 [ 335.184453][T11749] ? __pfx_find_vma_prev+0x10/0x10 [ 335.189591][T11749] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 335.195239][T11749] ? do_madvise+0x25b/0x770 [ 335.199764][T11749] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 335.205537][T11749] madvise_walk_vmas+0x1cf/0x2c0 [ 335.210504][T11749] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 335.215996][T11749] do_madvise+0x30e/0x770 [ 335.220346][T11749] ? __pfx_do_madvise+0x10/0x10 [ 335.225219][T11749] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 335.231395][T11749] ? syscall_user_dispatch+0x77/0x140 [ 335.236780][T11749] __x64_sys_madvise+0xa9/0x110 [ 335.241641][T11749] do_syscall_64+0xcd/0x250 [ 335.246163][T11749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 335.252069][T11749] RIP: 0033:0x7f3dfbd85d29 [ 335.256491][T11749] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 335.276527][T11749] RSP: 002b:00007f3dfcc4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 335.284959][T11749] RAX: ffffffffffffffda RBX: 00007f3dfbf75fa0 RCX: 00007f3dfbd85d29 [ 335.292958][T11749] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 335.300946][T11749] RBP: 00007f3dfcc4b090 R08: 0000000000000000 R09: 0000000000000000 [ 335.308930][T11749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 335.316911][T11749] R13: 0000000000000000 R14: 00007f3dfbf75fa0 R15: 00007ffd727fae08 [ 335.324914][T11749] [ 335.348134][T11751] scsi_dev_info_list_add_str: bad dev info string '/&c' 'W' '' [ 335.700663][T11761] Process accounting resumed [ 335.984211][T11765] device-mapper: ioctl: Unable to rename non-existent device, to [ 336.054165][T11765] lo: entered allmulticast mode [ 336.155788][T11770] lo: left allmulticast mode [ 336.926212][T11780] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1704'. [ 337.676294][T11785] device-mapper: ioctl: Unable to rename non-existent device, to [ 337.756391][T11785] lo: entered allmulticast mode [ 337.840229][T11787] lo: left allmulticast mode [ 338.582261][T11809] device-mapper: ioctl: Unable to rename non-existent device, to [ 338.671670][T11809] lo: entered allmulticast mode [ 338.715517][T11809] lo: left allmulticast mode [ 339.274186][T11826] Process accounting resumed [ 339.605484][T11832] nbd5: detected capacity change from 0 to 68719476736 [ 339.643826][ T9302] block nbd5: Send control failed (result -22) [ 339.683827][ T9302] block nbd5: Request send failed, requeueing [ 339.695064][ T5840] block nbd5: Receive control failed (result -32) [ 339.705377][ T58] block nbd5: Dead connection, failed to find a fallback [ 339.712593][ T58] block nbd5: shutting down sockets [ 339.718490][ T58] blk_print_req_error: 24 callbacks suppressed [ 339.718509][ T58] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 339.733995][ T58] buffer_io_error: 23 callbacks suppressed [ 339.734012][ T58] Buffer I/O error on dev nbd5, logical block 0, async page read [ 339.747869][ T9302] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 339.794515][ T9302] Buffer I/O error on dev nbd5, logical block 0, async page read [ 339.798931][T11841] Process accounting resumed [ 339.843093][ T9302] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 339.888483][ T9302] Buffer I/O error on dev nbd5, logical block 0, async page read [ 339.935478][ T9302] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 339.956078][ T9302] Buffer I/O error on dev nbd5, logical block 0, async page read [ 339.964036][ T9302] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 340.004906][ T9302] Buffer I/O error on dev nbd5, logical block 0, async page read [ 340.012869][ T9302] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 340.022064][ T9302] Buffer I/O error on dev nbd5, logical block 0, async page read [ 340.030288][ T9302] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 340.039463][ T9302] Buffer I/O error on dev nbd5, logical block 0, async page read [ 340.047452][ T9302] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 340.056694][ T9302] Buffer I/O error on dev nbd5, logical block 0, async page read [ 340.117124][ T9302] ldm_validate_partition_table(): Disk read failed. [ 340.163982][ T9302] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 340.184197][ T9302] Buffer I/O error on dev nbd5, logical block 0, async page read [ 340.199203][ T9302] I/O error, dev nbd5, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 340.216521][ T9302] Buffer I/O error on dev nbd5, logical block 0, async page read [ 340.225031][ T9302] Dev nbd5: unable to read RDB block 0 [ 340.230997][ T9302] nbd5: unable to read partition table [ 340.245686][ T9302] ldm_validate_partition_table(): Disk read failed. [ 340.252837][ T9302] Dev nbd5: unable to read RDB block 0 [ 340.264115][ T9302] nbd5: unable to read partition table [ 340.470884][T11856] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1728'. [ 340.558933][T11858] scsi_dev_info_list_add_str: bad dev info string '/&c' 'W ' '' [ 341.342477][T11856] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 341.392448][T11856] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 341.424348][T11856] bond0 (unregistering): Released all slaves [ 341.612674][T11871] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 341.612674][T11871] M' is too long [ 341.668738][T11871] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 341.668738][T11871] W ' is too long [ 341.693486][T11873] Process accounting resumed [ 342.065056][T11883] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1737'. [ 342.685663][T11892] netlink: zone id is out of range [ 342.719034][T11892] netlink: set zone limit has 8 unknown bytes [ 344.227463][T11921] FAULT_INJECTION: forcing a failure. [ 344.227463][T11921] name failslab, interval 1, probability 0, space 0, times 0 [ 344.240576][T11921] CPU: 1 UID: 0 PID: 11921 Comm: syz.1.1751 Not tainted 6.13.0-rc4-syzkaller #0 [ 344.249649][T11921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 344.259739][T11921] Call Trace: [ 344.263042][T11921] [ 344.265994][T11921] dump_stack_lvl+0x16c/0x1f0 [ 344.270722][T11921] should_fail_ex+0x497/0x5b0 [ 344.275445][T11921] should_failslab+0xc2/0x120 [ 344.280164][T11921] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 344.285931][T11921] ? xas_split_alloc+0x158/0x4f0 [ 344.290914][T11921] xas_split_alloc+0x158/0x4f0 [ 344.295743][T11921] split_huge_page_to_list_to_order+0xb94/0x4d00 [ 344.302119][T11921] ? __pfx___mem_cgroup_try_charge_swap+0x10/0x10 [ 344.308585][T11921] ? lock_acquire+0x2f/0xb0 [ 344.313118][T11921] ? page_vma_mapped_walk+0x1b6c/0x2cb0 [ 344.318709][T11921] ? do_raw_spin_unlock+0x172/0x230 [ 344.323951][T11921] ? __pfx_split_huge_page_to_list_to_order+0x10/0x10 [ 344.330753][T11921] ? try_to_unmap_one+0x1cd2/0x24e0 [ 344.335969][T11921] shmem_writepage+0x4be/0x1490 [ 344.340826][T11921] ? lock_acquire+0x2f/0xb0 [ 344.345334][T11921] ? __pfx_shmem_writepage+0x10/0x10 [ 344.350630][T11921] ? try_to_unmap_one+0xfde/0x24e0 [ 344.355754][T11921] ? inode_to_bdi+0x9e/0x160 [ 344.360353][T11921] ? folio_clear_dirty_for_io+0x112/0x800 [ 344.366092][T11921] pageout+0x3b2/0xaa0 [ 344.370170][T11921] ? __pfx_pageout+0x10/0x10 [ 344.374795][T11921] ? __pfx_try_to_unmap_one+0x10/0x10 [ 344.380184][T11921] ? __pfx_folio_not_mapped+0x10/0x10 [ 344.385567][T11921] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 344.391652][T11921] shrink_folio_list+0x3025/0x42d0 [ 344.396780][T11921] ? __pfx_shrink_folio_list+0x10/0x10 [ 344.402250][T11921] ? __lock_acquire+0xcc5/0x3c40 [ 344.407205][T11921] ? hlock_class+0x4e/0x130 [ 344.411732][T11921] ? __lock_acquire+0xcc5/0x3c40 [ 344.416677][T11921] ? hlock_class+0x4e/0x130 [ 344.421207][T11921] ? mark_lock+0xb5/0xc60 [ 344.425573][T11921] ? hlock_class+0x4e/0x130 [ 344.430084][T11921] ? __lock_acquire+0x15a9/0x3c40 [ 344.435116][T11921] reclaim_folio_list+0xd8/0x5e0 [ 344.440066][T11921] ? __pfx_reclaim_folio_list+0x10/0x10 [ 344.445615][T11921] ? hlock_class+0x4e/0x130 [ 344.450126][T11921] ? mark_lock+0xb5/0xc60 [ 344.454477][T11921] ? find_held_lock+0x2d/0x110 [ 344.459253][T11921] ? folio_isolate_lru+0x577/0x8e0 [ 344.464372][T11921] ? find_held_lock+0x2d/0x110 [ 344.469147][T11921] reclaim_pages+0x481/0x650 [ 344.473750][T11921] ? __pfx_reclaim_pages+0x10/0x10 [ 344.478878][T11921] ? folio_isolate_lru+0xa2/0x8e0 [ 344.483913][T11921] madvise_cold_or_pageout_pte_range+0x163b/0x20d0 [ 344.490441][T11921] ? __pfx___lock_acquire+0x10/0x10 [ 344.495732][T11921] ? mark_lock+0xb5/0xc60 [ 344.500078][T11921] ? __pfx_mark_lock+0x10/0x10 [ 344.504858][T11921] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 344.511737][T11921] ? find_held_lock+0x2d/0x110 [ 344.516519][T11921] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 344.523384][T11921] walk_pgd_range+0xc7b/0x1a70 [ 344.528167][T11921] ? mt_find+0x4c8/0xa20 [ 344.532455][T11921] ? __pfx_walk_pgd_range+0x10/0x10 [ 344.537694][T11921] __walk_page_range+0x161/0x820 [ 344.542660][T11921] ? find_vma+0xc0/0x140 [ 344.546917][T11921] ? __pfx_find_vma+0x10/0x10 [ 344.551611][T11921] ? walk_page_test+0x9b/0x180 [ 344.556394][T11921] walk_page_range_mm+0x55a/0x940 [ 344.561442][T11921] ? __pfx_walk_page_range_mm+0x10/0x10 [ 344.567003][T11921] ? mlock_drain_local+0x22d/0x4f0 [ 344.572144][T11921] walk_page_range+0x63/0x90 [ 344.576758][T11921] madvise_pageout+0x326/0x820 [ 344.581542][T11921] ? __pfx_madvise_pageout+0x10/0x10 [ 344.586852][T11921] ? mas_prev_setup.constprop.0+0xb4/0x830 [ 344.592672][T11921] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 344.598587][T11921] madvise_vma_behavior+0x44a/0x1da0 [ 344.603892][T11921] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 344.609630][T11921] ? find_vma_prev+0xdb/0x160 [ 344.614317][T11921] ? __pfx_find_vma_prev+0x10/0x10 [ 344.619446][T11921] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 344.625088][T11921] ? do_madvise+0x25b/0x770 [ 344.629701][T11921] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 344.635440][T11921] madvise_walk_vmas+0x1cf/0x2c0 [ 344.640400][T11921] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 344.645879][T11921] do_madvise+0x30e/0x770 [ 344.650226][T11921] ? __pfx_do_madvise+0x10/0x10 [ 344.655099][T11921] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 344.661272][T11921] ? syscall_user_dispatch+0x77/0x140 [ 344.666657][T11921] __x64_sys_madvise+0xa9/0x110 [ 344.671517][T11921] do_syscall_64+0xcd/0x250 [ 344.676031][T11921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.681937][T11921] RIP: 0033:0x7f8123d85d29 [ 344.686360][T11921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.705980][T11921] RSP: 002b:00007f8124bab038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 344.714402][T11921] RAX: ffffffffffffffda RBX: 00007f8123f75fa0 RCX: 00007f8123d85d29 [ 344.722398][T11921] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 344.730396][T11921] RBP: 00007f8124bab090 R08: 0000000000000000 R09: 0000000000000000 [ 344.738374][T11921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.746347][T11921] R13: 0000000000000000 R14: 00007f8123f75fa0 R15: 00007ffe0f484e88 [ 344.754333][T11921] [ 345.048612][T11940] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1754'. [ 345.231941][T11950] FAULT_INJECTION: forcing a failure. [ 345.231941][T11950] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.233226][T11948] snd_aloop snd_aloop.0: control 1:6:-1073741827:^ [ 345.233226][T11948] :0 is already present [ 345.245426][T11950] CPU: 1 UID: 0 PID: 11950 Comm: syz.1.1759 Not tainted 6.13.0-rc4-syzkaller #0 [ 345.265111][T11950] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 345.275201][T11950] Call Trace: [ 345.278510][T11950] [ 345.281465][T11950] dump_stack_lvl+0x16c/0x1f0 [ 345.286187][T11950] should_fail_ex+0x497/0x5b0 [ 345.290912][T11950] strncpy_from_user+0x3b/0x2d0 [ 345.295813][T11950] getname_flags.part.0+0x8f/0x550 [ 345.300991][T11950] getname+0x8d/0xe0 [ 345.304931][T11950] do_mq_open+0x1ab/0x880 [ 345.309300][T11950] ? find_held_lock+0x59/0x110 [ 345.314119][T11950] ? __pfx_do_mq_open+0x10/0x10 [ 345.319018][T11950] ? do_user_addr_fault+0xe50/0x13f0 [ 345.324346][T11950] __x64_sys_mq_open+0x156/0x1e0 [ 345.329328][T11950] ? __pfx___x64_sys_mq_open+0x10/0x10 [ 345.334836][T11950] ? do_user_addr_fault+0x83d/0x13f0 [ 345.340164][T11950] do_syscall_64+0xcd/0x250 [ 345.344714][T11950] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.350653][T11950] RIP: 0033:0x7f8123d85d29 [ 345.355101][T11950] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.374746][T11950] RSP: 002b:00007f8124bab038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f0 [ 345.383205][T11950] RAX: ffffffffffffffda RBX: 00007f8123f75fa0 RCX: 00007f8123d85d29 [ 345.391211][T11950] RDX: 0000000000000008 RSI: 00000000b400056b RDI: 0000000020000180 [ 345.399219][T11950] RBP: 00007f8124bab090 R08: 0000000000000000 R09: 0000000000000000 [ 345.407230][T11950] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.415246][T11950] R13: 0000000000000001 R14: 00007f8123f75fa0 R15: 00007ffe0f484e88 [ 345.423294][T11950] [ 345.623214][T11956] device-mapper: ioctl: Unable to rename non-existent device, to [ 345.637800][T11956] lo: entered allmulticast mode [ 345.761529][T11966] lo: left allmulticast mode [ 346.037130][T11977] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1765'. [ 346.064527][T11979] svc: failed to register nfsdv3 RPC service (errno 111). [ 346.080338][T11979] svc: failed to register nfsaclv3 RPC service (errno 111). [ 346.782480][T11999] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1773'. [ 347.093880][T12010] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1776'. [ 347.109740][T12010] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1776'. [ 347.586385][T12027] nbd6: detected capacity change from 0 to 68719476736 [ 347.619141][ T9302] block nbd6: Send control failed (result -22) [ 347.633298][ T9302] block nbd6: Request send failed, requeueing [ 347.640463][ T5840] block nbd6: Receive control failed (result -32) [ 347.649653][T10669] block nbd6: Dead connection, failed to find a fallback [ 347.657079][T10669] block nbd6: shutting down sockets [ 347.662673][T10669] blk_print_req_error: 24 callbacks suppressed [ 347.662690][T10669] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 347.678805][T10669] buffer_io_error: 23 callbacks suppressed [ 347.678822][T10669] Buffer I/O error on dev nbd6, logical block 0, async page read [ 347.693869][ T9302] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 347.703933][ T9302] Buffer I/O error on dev nbd6, logical block 0, async page read [ 347.712249][ T9302] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 347.722506][ T9302] Buffer I/O error on dev nbd6, logical block 0, async page read [ 347.731575][ T9302] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 347.741365][ T9302] Buffer I/O error on dev nbd6, logical block 0, async page read [ 347.752375][ T9302] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 347.761837][ T9302] Buffer I/O error on dev nbd6, logical block 0, async page read [ 347.770720][ T9302] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 347.780217][ T9302] Buffer I/O error on dev nbd6, logical block 0, async page read [ 347.789637][ T9302] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 347.807864][ T9302] Buffer I/O error on dev nbd6, logical block 0, async page read [ 347.817548][ T9302] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 347.827034][ T9302] Buffer I/O error on dev nbd6, logical block 0, async page read [ 347.835696][ T9302] ldm_validate_partition_table(): Disk read failed. [ 347.842480][ T9302] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 347.852459][ T9302] Buffer I/O error on dev nbd6, logical block 0, async page read [ 347.860803][ T9302] I/O error, dev nbd6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 347.887439][ T9302] Buffer I/O error on dev nbd6, logical block 0, async page read [ 347.915180][ T9302] Dev nbd6: unable to read RDB block 0 [ 347.921418][ T9302] nbd6: unable to read partition table [ 347.964663][ T9302] ldm_validate_partition_table(): Disk read failed. [ 347.992956][ T9302] Dev nbd6: unable to read RDB block 0 [ 348.017544][ T9302] nbd6: unable to read partition table [ 348.239971][T12045] FAULT_INJECTION: forcing a failure. [ 348.239971][T12045] name failslab, interval 1, probability 0, space 0, times 0 [ 348.253703][T12045] CPU: 1 UID: 0 PID: 12045 Comm: syz.1.1788 Not tainted 6.13.0-rc4-syzkaller #0 [ 348.262781][T12045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 348.272883][T12045] Call Trace: [ 348.276188][T12045] [ 348.279147][T12045] dump_stack_lvl+0x16c/0x1f0 [ 348.283870][T12045] should_fail_ex+0x497/0x5b0 [ 348.288595][T12045] should_failslab+0xc2/0x120 [ 348.293319][T12045] kmem_cache_alloc_noprof+0x6e/0x3b0 [ 348.298744][T12045] ? skb_clone+0x190/0x3f0 [ 348.303210][T12045] skb_clone+0x190/0x3f0 [ 348.307496][T12045] netlink_deliver_tap+0xafd/0xca0 [ 348.312655][T12045] netlink_dump+0x639/0xd00 [ 348.317206][T12045] ? __pfx_netlink_dump+0x10/0x10 [ 348.322283][T12045] ? __netlink_dump_start+0x154/0x980 [ 348.327721][T12045] ? lock_acquire+0x2f/0xb0 [ 348.332270][T12045] ? netlink_lookup+0x3d/0x270 [ 348.337074][T12045] __netlink_dump_start+0x6d9/0x980 [ 348.342294][T12045] unix_diag_handler_dump+0x3b3/0x9e0 [ 348.347694][T12045] ? find_held_lock+0x2d/0x110 [ 348.352480][T12045] ? __pfx_unix_diag_handler_dump+0x10/0x10 [ 348.358396][T12045] ? __pfx_lock_release+0x10/0x10 [ 348.363427][T12045] ? __pfx_unix_diag_dump+0x10/0x10 [ 348.368651][T12045] sock_diag_rcv_msg+0x437/0x790 [ 348.373622][T12045] netlink_rcv_skb+0x165/0x410 [ 348.378496][T12045] ? __pfx_sock_diag_rcv_msg+0x10/0x10 [ 348.383982][T12045] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.389300][T12045] ? netlink_deliver_tap+0x1ae/0xca0 [ 348.394601][T12045] netlink_unicast+0x53c/0x7f0 [ 348.399379][T12045] ? __pfx_netlink_unicast+0x10/0x10 [ 348.404680][T12045] ? __phys_addr_symbol+0x30/0x80 [ 348.409719][T12045] ? __check_object_size+0x488/0x710 [ 348.415023][T12045] netlink_sendmsg+0x8b8/0xd70 [ 348.419813][T12045] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.425206][T12045] sock_write_iter+0x4fe/0x5b0 [ 348.429984][T12045] ? __pfx_sock_write_iter+0x10/0x10 [ 348.435286][T12045] ? bpf_lsm_file_permission+0x9/0x10 [ 348.440681][T12045] ? security_file_permission+0x71/0x210 [ 348.446328][T12045] vfs_write+0x5ae/0x1150 [ 348.450668][T12045] ? __pfx_sock_write_iter+0x10/0x10 [ 348.455982][T12045] ? __pfx_vfs_write+0x10/0x10 [ 348.460761][T12045] ? find_held_lock+0x2d/0x110 [ 348.465552][T12045] ? __pfx_lock_release+0x10/0x10 [ 348.470608][T12045] ksys_write+0x207/0x250 [ 348.474944][T12045] ? __pfx_ksys_write+0x10/0x10 [ 348.479813][T12045] do_syscall_64+0xcd/0x250 [ 348.484345][T12045] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.490255][T12045] RIP: 0033:0x7f8123d85d29 [ 348.494686][T12045] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.514322][T12045] RSP: 002b:00007f8124bab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 348.522756][T12045] RAX: ffffffffffffffda RBX: 00007f8123f75fa0 RCX: 00007f8123d85d29 [ 348.530734][T12045] RDX: 00000000000002fb RSI: 0000000020000000 RDI: 0000000000000005 [ 348.538711][T12045] RBP: 00007f8124bab090 R08: 0000000000000000 R09: 0000000000000000 [ 348.546689][T12045] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.554666][T12045] R13: 0000000000000000 R14: 00007f8123f75fa0 R15: 00007ffe0f484e88 [ 348.562665][T12045] [ 348.565727][ C1] vkms_vblank_simulate: vblank timer overrun [ 348.848507][T12053] device-mapper: ioctl: Unable to rename non-existent device, to [ 348.862053][T12053] lo: entered allmulticast mode [ 349.092166][T12054] lo: left allmulticast mode [ 349.139832][T12056] netlink: zone id is out of range [ 349.153585][T12056] netlink: set zone limit has 8 unknown bytes [ 349.250960][T12064] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1795'. [ 349.263486][T12064] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1795'. [ 349.578019][T12070] device-mapper: ioctl: Unable to rename non-existent device, to [ 349.600583][T12070] lo: entered allmulticast mode [ 349.674645][T12071] lo: left allmulticast mode [ 350.819868][T12095] netlink: zone id is out of range [ 350.830667][T12095] netlink: set zone limit has 8 unknown bytes [ 350.851964][T12097] netlink: 330 bytes leftover after parsing attributes in process `syz.3.1807'. [ 350.998031][T12101] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1810'. [ 351.029891][T12101] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1810'. [ 351.046769][T12105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1809'. [ 351.106821][T12103] device-mapper: ioctl: Unable to rename non-existent device, to [ 351.122015][T12103] lo: entered allmulticast mode [ 351.181414][T12112] lo: left allmulticast mode [ 351.392105][T12117] device-mapper: ioctl: Unable to rename non-existent device, to [ 351.404704][T12117] lo: entered allmulticast mode [ 351.483284][T12120] lo: left allmulticast mode [ 351.670364][T12125] svc: failed to register nfsdv3 RPC service (errno 111). [ 351.694210][T12125] svc: failed to register nfsaclv3 RPC service (errno 111). [ 352.756637][T12148] device-mapper: ioctl: Unable to rename non-existent device, to [ 352.788748][T12148] lo: entered allmulticast mode [ 352.877470][T12149] lo: left allmulticast mode [ 352.935925][T12151] FAULT_INJECTION: forcing a failure. [ 352.935925][T12151] name failslab, interval 1, probability 0, space 0, times 0 [ 352.954435][T12151] CPU: 1 UID: 0 PID: 12151 Comm: syz.1.1825 Not tainted 6.13.0-rc4-syzkaller #0 [ 352.963539][T12151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 352.973632][T12151] Call Trace: [ 352.976944][T12151] [ 352.979898][T12151] dump_stack_lvl+0x16c/0x1f0 [ 352.984619][T12151] should_fail_ex+0x497/0x5b0 [ 352.989353][T12151] should_failslab+0xc2/0x120 [ 352.994079][T12151] kmem_cache_alloc_lru_noprof+0x73/0x3b0 [ 352.999843][T12151] ? xas_split_alloc+0x158/0x4f0 [ 353.004824][T12151] xas_split_alloc+0x158/0x4f0 [ 353.009667][T12151] split_huge_page_to_list_to_order+0xb94/0x4d00 [ 353.016050][T12151] ? __pfx___mem_cgroup_try_charge_swap+0x10/0x10 [ 353.022522][T12151] ? lock_acquire+0x2f/0xb0 [ 353.027063][T12151] ? page_vma_mapped_walk+0x1b6c/0x2cb0 [ 353.032679][T12151] ? do_raw_spin_unlock+0x172/0x230 [ 353.037888][T12151] ? __pfx_split_huge_page_to_list_to_order+0x10/0x10 [ 353.044680][T12151] ? try_to_unmap_one+0x1cd2/0x24e0 [ 353.049982][T12151] shmem_writepage+0x4be/0x1490 [ 353.054939][T12151] ? lock_acquire+0x2f/0xb0 [ 353.059472][T12151] ? __pfx_shmem_writepage+0x10/0x10 [ 353.064762][T12151] ? try_to_unmap_one+0xfde/0x24e0 [ 353.069886][T12151] ? inode_to_bdi+0x9e/0x160 [ 353.074477][T12151] ? folio_clear_dirty_for_io+0x112/0x800 [ 353.080230][T12151] pageout+0x3b2/0xaa0 [ 353.084347][T12151] ? __pfx_pageout+0x10/0x10 [ 353.089114][T12151] ? __pfx_try_to_unmap_one+0x10/0x10 [ 353.094542][T12151] ? __pfx_folio_not_mapped+0x10/0x10 [ 353.099963][T12151] ? __pfx_folio_lock_anon_vma_read+0x10/0x10 [ 353.106101][T12151] shrink_folio_list+0x3025/0x42d0 [ 353.111279][T12151] ? __pfx_shrink_folio_list+0x10/0x10 [ 353.116791][T12151] ? __lock_acquire+0xcc5/0x3c40 [ 353.121777][T12151] ? hlock_class+0x4e/0x130 [ 353.126344][T12151] ? __lock_acquire+0xcc5/0x3c40 [ 353.131339][T12151] ? hlock_class+0x4e/0x130 [ 353.135892][T12151] ? mark_lock+0xb5/0xc60 [ 353.140319][T12151] ? hlock_class+0x4e/0x130 [ 353.144874][T12151] ? __lock_acquire+0x15a9/0x3c40 [ 353.149945][T12151] reclaim_folio_list+0xd8/0x5e0 [ 353.154934][T12151] ? __pfx_reclaim_folio_list+0x10/0x10 [ 353.160520][T12151] ? hlock_class+0x4e/0x130 [ 353.165066][T12151] ? mark_lock+0xb5/0xc60 [ 353.169458][T12151] ? find_held_lock+0x2d/0x110 [ 353.174269][T12151] ? folio_isolate_lru+0x577/0x8e0 [ 353.179418][T12151] ? find_held_lock+0x2d/0x110 [ 353.184223][T12151] reclaim_pages+0x481/0x650 [ 353.188854][T12151] ? __pfx_reclaim_pages+0x10/0x10 [ 353.194105][T12151] ? folio_isolate_lru+0xa2/0x8e0 [ 353.199181][T12151] madvise_cold_or_pageout_pte_range+0x163b/0x20d0 [ 353.205751][T12151] ? __pfx___lock_acquire+0x10/0x10 [ 353.210995][T12151] ? __pfx_mark_lock+0x10/0x10 [ 353.215817][T12151] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 353.222720][T12151] ? find_held_lock+0x2d/0x110 [ 353.227528][T12151] ? __pfx_madvise_cold_or_pageout_pte_range+0x10/0x10 [ 353.234434][T12151] walk_pgd_range+0xc7b/0x1a70 [ 353.239251][T12151] ? mt_find+0x4c8/0xa20 [ 353.243551][T12151] ? __pfx_walk_pgd_range+0x10/0x10 [ 353.248821][T12151] __walk_page_range+0x161/0x820 [ 353.253821][T12151] ? find_vma+0xc0/0x140 [ 353.258109][T12151] ? __pfx_find_vma+0x10/0x10 [ 353.262831][T12151] ? walk_page_test+0x9b/0x180 [ 353.267645][T12151] walk_page_range_mm+0x55a/0x940 [ 353.272728][T12151] ? __pfx_walk_page_range_mm+0x10/0x10 [ 353.278320][T12151] ? mlock_drain_local+0x22d/0x4f0 [ 353.283494][T12151] ? lock_acquire+0x2f/0xb0 [ 353.288025][T12151] ? mlock_drain_local+0x6f/0x4f0 [ 353.293073][T12151] walk_page_range+0x63/0x90 [ 353.297686][T12151] madvise_pageout+0x326/0x820 [ 353.302471][T12151] ? __pfx_madvise_pageout+0x10/0x10 [ 353.307783][T12151] ? mas_prev_setup.constprop.0+0xb4/0x830 [ 353.313604][T12151] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 353.319511][T12151] madvise_vma_behavior+0x44a/0x1da0 [ 353.324824][T12151] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 353.330564][T12151] ? find_vma_prev+0xdb/0x160 [ 353.335271][T12151] ? __pfx_find_vma_prev+0x10/0x10 [ 353.340435][T12151] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 353.346014][T12151] ? do_madvise+0x25b/0x770 [ 353.350563][T12151] ? __pfx_madvise_vma_behavior+0x10/0x10 [ 353.356327][T12151] madvise_walk_vmas+0x1cf/0x2c0 [ 353.361298][T12151] ? __pfx_madvise_walk_vmas+0x10/0x10 [ 353.366795][T12151] do_madvise+0x30e/0x770 [ 353.371145][T12151] ? __pfx_do_madvise+0x10/0x10 [ 353.376020][T12151] ? arch_syscall_is_vdso_sigreturn+0xb6/0x230 [ 353.382196][T12151] ? syscall_user_dispatch+0x77/0x140 [ 353.387596][T12151] __x64_sys_madvise+0xa9/0x110 [ 353.392459][T12151] do_syscall_64+0xcd/0x250 [ 353.396982][T12151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 353.402891][T12151] RIP: 0033:0x7f8123d85d29 [ 353.407318][T12151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 353.426963][T12151] RSP: 002b:00007f8124bab038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 353.435561][T12151] RAX: ffffffffffffffda RBX: 00007f8123f75fa0 RCX: 00007f8123d85d29 [ 353.443544][T12151] RDX: 0000000000000015 RSI: ffffffffffff0001 RDI: 0000000000000000 [ 353.451546][T12151] RBP: 00007f8124bab090 R08: 0000000000000000 R09: 0000000000000000 [ 353.459532][T12151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 353.467508][T12151] R13: 0000000000000000 R14: 00007f8123f75fa0 R15: 00007ffe0f484e88 [ 353.475498][T12151] [ 353.478642][ C1] vkms_vblank_simulate: vblank timer overrun [ 353.523985][T12158] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1828'. [ 353.582983][T12158] netlink: 342 bytes leftover after parsing attributes in process `syz.0.1828'. [ 353.704435][T12163] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1829'. [ 353.957670][T12163] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.969477][T12163] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.981037][T12163] bond0 (unregistering): Released all slaves [ 354.393213][T12180] FAULT_INJECTION: forcing a failure. [ 354.393213][T12180] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 354.425134][T12180] CPU: 1 UID: 0 PID: 12180 Comm: syz.1.1835 Not tainted 6.13.0-rc4-syzkaller #0 [ 354.434227][T12180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 354.444286][T12180] Call Trace: [ 354.447570][T12180] [ 354.450510][T12180] dump_stack_lvl+0x16c/0x1f0 [ 354.455236][T12180] should_fail_ex+0x497/0x5b0 [ 354.459967][T12180] _copy_to_user+0x32/0xd0 [ 354.464402][T12180] simple_read_from_buffer+0xd0/0x160 [ 354.469787][T12180] proc_fail_nth_read+0x198/0x270 [ 354.474854][T12180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.480447][T12180] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 354.486016][T12180] vfs_read+0x1df/0xbe0 [ 354.490187][T12180] ? __fget_files+0x1fc/0x3a0 [ 354.495144][T12180] ? __pfx___mutex_lock+0x10/0x10 [ 354.500190][T12180] ? __pfx_vfs_read+0x10/0x10 [ 354.504892][T12180] ? __fget_files+0x206/0x3a0 [ 354.509591][T12180] ksys_read+0x12b/0x250 [ 354.513865][T12180] ? __pfx_ksys_read+0x10/0x10 [ 354.518659][T12180] ? do_user_addr_fault+0x83d/0x13f0 [ 354.523983][T12180] do_syscall_64+0xcd/0x250 [ 354.528521][T12180] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.534436][T12180] RIP: 0033:0x7f8123d8473c [ 354.538860][T12180] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 354.558482][T12180] RSP: 002b:00007f8124bab030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 354.566907][T12180] RAX: ffffffffffffffda RBX: 00007f8123f75fa0 RCX: 00007f8123d8473c [ 354.574890][T12180] RDX: 000000000000000f RSI: 00007f8124bab0a0 RDI: 0000000000000003 [ 354.582873][T12180] RBP: 00007f8124bab090 R08: 0000000000000000 R09: 0000000000000000 [ 354.590852][T12180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.598830][T12180] R13: 0000000000000001 R14: 00007f8123f75fa0 R15: 00007ffe0f484e88 [ 354.606822][T12180] [ 354.609959][ C1] vkms_vblank_simulate: vblank timer overrun [ 354.832025][T12184] device-mapper: ioctl: Unable to rename non-existent device, to [ 354.850961][T12184] lo: entered allmulticast mode [ 354.919270][T12190] lo: left allmulticast mode [ 355.019932][T12193] svc: failed to register nfsdv3 RPC service (errno 111). [ 355.038069][T12193] svc: failed to register nfsaclv3 RPC service (errno 111). [ 355.503781][T12204] netlink: 'syz.1.1842': attribute type 11 has an invalid length. [ 355.568445][T12203] ima: policy update failed [ 355.574950][ T29] audit: type=1802 audit(6029928110.006:6): pid=12203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=policy_update cause=failed comm="syz.1.1842" res=0 errno=0 [ 356.578976][T12223] [U] [ 356.582084][T12223] [U] [ 356.584828][T12223] [U] [ 356.587558][T12223] [U] [ 356.617092][T12223] [U] [ 356.619955][T12223] [U] [ 356.622689][T12223] [U] [ 356.625429][T12223] [U] [ 356.661697][T12224] [U] [ 357.044086][T12231] FAULT_INJECTION: forcing a failure. [ 357.044086][T12231] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 357.104884][T12231] CPU: 1 UID: 0 PID: 12231 Comm: syz.0.1852 Not tainted 6.13.0-rc4-syzkaller #0 [ 357.113991][T12231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 357.124262][T12231] Call Trace: [ 357.127578][T12231] [ 357.130560][T12231] dump_stack_lvl+0x16c/0x1f0 [ 357.135294][T12231] should_fail_ex+0x497/0x5b0 [ 357.140022][T12231] ? fs_reclaim_acquire+0xae/0x150 [ 357.145177][T12231] should_fail_alloc_page+0xe7/0x130 [ 357.150602][T12231] prepare_alloc_pages.constprop.0+0x16f/0x560 [ 357.156800][T12231] ? hlock_class+0x4e/0x130 [ 357.161364][T12231] __alloc_pages_noprof+0x190/0x25b0 [ 357.166742][T12231] ? find_held_lock+0x2d/0x110 [ 357.171556][T12231] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 357.177321][T12231] ? __pfx_lock_release+0x10/0x10 [ 357.182384][T12231] ? trace_lock_acquire+0x14e/0x1f0 [ 357.187638][T12231] ? hlock_class+0x4e/0x130 [ 357.192199][T12231] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 357.198140][T12231] ? policy_nodemask+0xea/0x4e0 [ 357.203048][T12231] alloc_pages_mpol_noprof+0x2c9/0x610 [ 357.208567][T12231] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 357.214611][T12231] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 357.220314][T12231] get_free_pages_noprof+0xc/0x40 [ 357.225378][T12231] proc_scsi_devinfo_write+0x4e/0x1a0 [ 357.230814][T12231] ? __pfx_proc_scsi_devinfo_write+0x10/0x10 [ 357.236849][T12231] proc_reg_write+0x23d/0x330 [ 357.241572][T12231] ? __pfx_proc_reg_write+0x10/0x10 [ 357.246816][T12231] vfs_write+0x24c/0x1150 [ 357.251200][T12231] ? __fget_files+0x1fc/0x3a0 [ 357.255925][T12231] ? __pfx___mutex_lock+0x10/0x10 [ 357.261019][T12231] ? __pfx_vfs_write+0x10/0x10 [ 357.265838][T12231] ? __fget_files+0x206/0x3a0 [ 357.270567][T12231] ksys_write+0x12b/0x250 [ 357.274940][T12231] ? __pfx_ksys_write+0x10/0x10 [ 357.279870][T12231] do_syscall_64+0xcd/0x250 [ 357.284449][T12231] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.290394][T12231] RIP: 0033:0x7f0a9d785d29 [ 357.294850][T12231] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.314503][T12231] RSP: 002b:00007f0a9d5f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 357.322967][T12231] RAX: ffffffffffffffda RBX: 00007f0a9d975fa0 RCX: 00007f0a9d785d29 [ 357.330988][T12231] RDX: 000000000000001a RSI: 00000000200000c0 RDI: 0000000000000003 [ 357.339002][T12231] RBP: 00007f0a9d5f9090 R08: 0000000000000000 R09: 0000000000000000 [ 357.347017][T12231] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.355047][T12231] R13: 0000000000000000 R14: 00007f0a9d975fa0 R15: 00007fff9bee4048 [ 357.363080][T12231] [ 357.538944][T12233] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1853'. [ 357.589426][T12233] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1853'. [ 359.073905][T12262] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1859'. [ 359.663972][T12262] veth0_macvtap: left promiscuous mode [ 360.698103][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 361.819228][T12291] [U] [ 361.822022][T12291] [U] [ 361.824769][T12291] [U] [ 361.827516][T12291] [U] [ 361.830834][T12291] [U] [ 361.833592][T12291] [U] [ 361.836332][T12291] [U] [ 361.839067][T12291] [U] [ 361.842684][T12291] [U] [ 361.845436][T12291] [U] [ 361.848164][T12291] [U] [ 361.850925][T12291] [U] [ 361.854075][T12291] [U] [ 361.856832][T12291] [U] [ 361.859566][T12291] [U] [ 361.862292][T12291] [U] [ 361.865393][T12291] [U] [ 361.868146][T12291] [U] [ 361.870885][T12291] [U] [ 361.873617][T12291] [U] [ 361.876764][T12291] [U] [ 361.879503][T12291] [U] [ 361.882237][T12291] [U] [ 361.884962][T12291] [U] [ 361.889235][T12293] [U] [ 362.168929][T12300] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1868'. [ 362.434016][T12303] device-mapper: ioctl: Unable to rename non-existent device, to [ 362.478702][T12303] lo: entered allmulticast mode [ 362.589490][T12311] lo: left allmulticast mode [ 364.320965][T12354] Line length is too long: Should be less than 4094 [ 364.675516][T12362] Invalid ELF header magic: != ELF [ 364.897839][T12371] FAULT_INJECTION: forcing a failure. [ 364.897839][T12371] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.915073][T12371] CPU: 1 UID: 0 PID: 12371 Comm: syz.1.1893 Not tainted 6.13.0-rc4-syzkaller #0 [ 364.924169][T12371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 364.934258][T12371] Call Trace: [ 364.937545][T12371] [ 364.940494][T12371] dump_stack_lvl+0x16c/0x1f0 [ 364.945195][T12371] should_fail_ex+0x497/0x5b0 [ 364.949894][T12371] _copy_from_user+0x2e/0xd0 [ 364.954516][T12371] proc_scsi_devinfo_write+0x84/0x1a0 [ 364.959916][T12371] ? __pfx_proc_scsi_devinfo_write+0x10/0x10 [ 364.965930][T12371] proc_reg_write+0x23d/0x330 [ 364.970624][T12371] ? __pfx_proc_reg_write+0x10/0x10 [ 364.975841][T12371] vfs_write+0x24c/0x1150 [ 364.980196][T12371] ? __fget_files+0x1fc/0x3a0 [ 364.984889][T12371] ? __pfx___mutex_lock+0x10/0x10 [ 364.989944][T12371] ? __pfx_vfs_write+0x10/0x10 [ 364.994734][T12371] ? __fget_files+0x206/0x3a0 [ 364.999438][T12371] ksys_write+0x12b/0x250 [ 365.003798][T12371] ? __pfx_ksys_write+0x10/0x10 [ 365.008675][T12371] do_syscall_64+0xcd/0x250 [ 365.013197][T12371] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.019110][T12371] RIP: 0033:0x7f8123d85d29 [ 365.023539][T12371] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.043248][T12371] RSP: 002b:00007f8124bab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 365.051675][T12371] RAX: ffffffffffffffda RBX: 00007f8123f75fa0 RCX: 00007f8123d85d29 [ 365.059655][T12371] RDX: 000000000000001a RSI: 00000000200000c0 RDI: 0000000000000003 [ 365.067634][T12371] RBP: 00007f8124bab090 R08: 0000000000000000 R09: 0000000000000000 [ 365.075616][T12371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.083601][T12371] R13: 0000000000000000 R14: 00007f8123f75fa0 R15: 00007ffe0f484e88 [ 365.091598][T12371] [ 365.289960][T12376] FAULT_INJECTION: forcing a failure. [ 365.289960][T12376] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 365.330585][T12376] CPU: 0 UID: 0 PID: 12376 Comm: syz.4.1895 Not tainted 6.13.0-rc4-syzkaller #0 [ 365.339690][T12376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 365.349788][T12376] Call Trace: [ 365.353096][T12376] [ 365.356056][T12376] dump_stack_lvl+0x16c/0x1f0 [ 365.360780][T12376] should_fail_ex+0x497/0x5b0 [ 365.365504][T12376] _copy_from_iter+0x29b/0x1400 [ 365.370400][T12376] ? trace_lock_acquire+0x14e/0x1f0 [ 365.375657][T12376] ? __pfx__copy_from_iter+0x10/0x10 [ 365.380988][T12376] ? __virt_addr_valid+0x1a4/0x590 [ 365.386153][T12376] ? __virt_addr_valid+0x5e/0x590 [ 365.391213][T12376] ? __phys_addr_symbol+0x30/0x80 [ 365.396274][T12376] ? __check_object_size+0x488/0x710 [ 365.401628][T12376] file_tty_write.constprop.0+0x48d/0x9a0 [ 365.407417][T12376] redirected_tty_write+0xcc/0x140 [ 365.412576][T12376] vfs_write+0x5ae/0x1150 [ 365.416965][T12376] ? __pfx_redirected_tty_write+0x10/0x10 [ 365.422732][T12376] ? __pfx_vfs_write+0x10/0x10 [ 365.427531][T12376] ? __fget_files+0x40/0x3a0 [ 365.432173][T12376] ksys_write+0x12b/0x250 [ 365.436539][T12376] ? __pfx_ksys_write+0x10/0x10 [ 365.441453][T12376] do_syscall_64+0xcd/0x250 [ 365.446014][T12376] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.451956][T12376] RIP: 0033:0x7ff90d585d29 [ 365.456406][T12376] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 365.476053][T12376] RSP: 002b:00007ff90e3a7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 365.484518][T12376] RAX: ffffffffffffffda RBX: 00007ff90d775fa0 RCX: 00007ff90d585d29 [ 365.492535][T12376] RDX: 000000000000002b RSI: 0000000020000840 RDI: 0000000000000003 [ 365.500546][T12376] RBP: 00007ff90e3a7090 R08: 0000000000000000 R09: 0000000000000000 [ 365.508565][T12376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 365.516574][T12376] R13: 0000000000000000 R14: 00007ff90d775fa0 R15: 00007fff57912568 [ 365.524697][T12376] [ 367.763345][T12431] snd_aloop snd_aloop.0: control 1:6:-1073741827:^ [ 367.763345][T12431] :0 is already present [ 367.836039][ T29] audit: type=1800 audit(6029928140.261:7): pid=12432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1912" name="discovery_nqn" dev="configfs" ino=36658 res=0 errno=0 [ 368.232345][T12439] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1914'. [ 368.298699][T12439] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1914'. [ 369.244982][T12469] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 369.244982][T12469] M' is too long [ 369.271171][T12469] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 369.271171][T12469] W ' is too long [ 369.485298][T12477] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1926'. [ 369.487639][T12477] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1926'. [ 370.748806][T12498] scsi_dev_info_list_add_str: bad dev info string '/&c~n] | [ 370.748806][T12498] M' 'Dd5 K2b' '' [ 371.279766][T12508] netlink: 342 bytes leftover after parsing attributes in process `syz.4.1936'. [ 372.061883][T12530] Line length is too long: Should be less than 4094 [ 372.223537][T12537] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1947'. [ 372.244413][T12537] netlink: 342 bytes leftover after parsing attributes in process `syz.1.1947'. [ 372.855597][T12549] device-mapper: ioctl: Unable to rename non-existent device, to [ 372.886152][T12549] lo: entered allmulticast mode [ 372.958259][T12558] lo: left allmulticast mode [ 373.059654][T12562] Line length is too long: Should be less than 4094 [ 373.369224][T12571] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1959'. [ 373.392314][T12571] netlink: 342 bytes leftover after parsing attributes in process `syz.3.1959'. [ 375.652221][T12628] FAULT_INJECTION: forcing a failure. [ 375.652221][T12628] name failslab, interval 1, probability 0, space 0, times 0 [ 375.665642][T12628] CPU: 1 UID: 0 PID: 12628 Comm: syz.1.1979 Not tainted 6.13.0-rc4-syzkaller #0 [ 375.674711][T12628] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 375.684806][T12628] Call Trace: [ 375.688106][T12628] [ 375.691068][T12628] dump_stack_lvl+0x16c/0x1f0 [ 375.695808][T12628] should_fail_ex+0x497/0x5b0 [ 375.700536][T12628] ? fs_reclaim_acquire+0xae/0x150 [ 375.705701][T12628] should_failslab+0xc2/0x120 [ 375.712234][T12628] __kmalloc_node_noprof+0xd1/0x520 [ 375.712302][T12628] ? trace_contention_end+0xee/0x140 [ 375.712331][T12628] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 375.712366][T12628] ? find_held_lock+0x2d/0x110 [ 375.712401][T12628] __kvmalloc_node_noprof+0xad/0x1a0 [ 375.712436][T12628] traverse.part.0.constprop.0+0x392/0x640 [ 375.712465][T12628] ? trace_lock_acquire+0x14e/0x1f0 [ 375.712506][T12628] seq_lseek+0x2b4/0x440 [ 375.712539][T12628] proc_reg_llseek+0x205/0x2f0 [ 375.712572][T12628] ksys_lseek+0xf0/0x1b0 [ 375.712601][T12628] do_syscall_64+0xcd/0x250 [ 375.712637][T12628] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.712668][T12628] RIP: 0033:0x7f8123d85d29 [ 375.712691][T12628] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.712715][T12628] RSP: 002b:00007f8124bab038 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 375.712743][T12628] RAX: ffffffffffffffda RBX: 00007f8123f75fa0 RCX: 00007f8123d85d29 [ 375.712762][T12628] RDX: 0000000000000000 RSI: 7fffffffffffffff RDI: 0000000000000003 [ 375.712780][T12628] RBP: 00007f8124bab090 R08: 0000000000000000 R09: 0000000000000000 [ 375.712798][T12628] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.712815][T12628] R13: 0000000000000000 R14: 00007f8123f75fa0 R15: 00007ffe0f484e88 [ 375.712851][T12628] [ 375.712905][ C1] vkms_vblank_simulate: vblank timer overrun [ 376.143227][T12639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1982'. [ 376.269092][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.745344][T12671] device-mapper: ioctl: Unable to rename non-existent device, to [ 378.850302][T12671] lo: entered allmulticast mode [ 378.903582][T12671] lo: left allmulticast mode [ 379.100928][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.107545][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.507425][T12711] usb usb15: usbfs: interface 0 claimed by hub while 'syz.1.2013' sets config #2020961897 [ 380.619712][T12712] device-mapper: ioctl: Unable to rename non-existent device, to [ 380.651786][T12712] lo: entered allmulticast mode [ 380.759358][T12715] lo: left allmulticast mode [ 382.685674][T12752] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[12752] [ 383.738980][T12762] device-mapper: ioctl: Unable to rename non-existent device, to [ 383.763064][T12761] device-mapper: ioctl: Unable to rename non-existent device, to [ 383.763412][T12762] lo: entered allmulticast mode [ 383.810002][T12761] lo: entered allmulticast mode [ 383.924026][T12766] lo: left allmulticast mode [ 383.928922][T12765] lo: left allmulticast mode [ 384.326336][T12764] device-mapper: ioctl: Unable to rename non-existent device, to [ 384.424273][T12764] lo: entered allmulticast mode [ 384.550808][T12764] lo: left allmulticast mode [ 386.415585][T12807] device-mapper: ioctl: Unable to rename non-existent device, to [ 386.441754][T12807] lo: entered allmulticast mode [ 386.528723][T12812] lo: left allmulticast mode [ 386.743538][T12816] snd_aloop snd_aloop.0: control 1:6:-1073741827:^ [ 386.743538][T12816] :0 is already present [ 388.616189][T12840] device-mapper: ioctl: Unable to rename non-existent device, to [ 388.666229][T12840] lo: entered allmulticast mode [ 388.766747][T12843] lo: left allmulticast mode [ 391.131505][T12879] device-mapper: ioctl: Unable to rename non-existent device, to [ 391.153688][T12879] lo: entered allmulticast mode [ 391.249816][T12883] lo: left allmulticast mode [ 391.778405][ T29] audit: type=1800 audit(6029928173.218:8): pid=12894 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.2056" name="members" dev="configfs" ino=38710 res=0 errno=0 [ 391.786839][T12894] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2056'. [ 392.711793][T12917] snd_aloop snd_aloop.0: control 1:6:-1073741827:^ [ 392.711793][T12917] :0 is already present [ 392.904449][T12921] device-mapper: ioctl: Unable to rename non-existent device, to [ 392.982865][T12921] lo: entered allmulticast mode [ 393.044055][T12928] lo: left allmulticast mode [ 393.999904][T12948] can: request_module (can-proto-0) failed. [ 394.420069][T12961] device-mapper: ioctl: Unable to rename non-existent device, to [ 394.448134][T12961] lo: entered allmulticast mode [ 394.531673][T12964] lo: left allmulticast mode [ 394.797021][T12573] syz.0.1958 (12573) used greatest stack depth: 20528 bytes left [ 395.093288][T12978] device-mapper: ioctl: Unable to rename non-existent device, to [ 395.151746][T12978] lo: entered allmulticast mode [ 395.245035][T12986] lo: left allmulticast mode [ 395.911638][T12991] device-mapper: ioctl: Unable to rename non-existent device, to [ 396.398821][T12991] lo: entered allmulticast mode [ 396.638154][T12991] lo: left allmulticast mode [ 398.079574][ T29] audit: type=1800 audit(6029928179.508:9): pid=13038 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2099" name="members" dev="configfs" ino=40040 res=0 errno=0 [ 398.121031][T13038] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2099'. [ 398.803997][T12826] syz.0.2027 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 398.906942][T12826] CPU: 1 UID: 0 PID: 12826 Comm: syz.0.2027 Not tainted 6.13.0-rc4-syzkaller #0 [ 398.916049][T12826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 398.926145][T12826] Call Trace: [ 398.929449][T12826] [ 398.932398][T12826] dump_stack_lvl+0x16c/0x1f0 [ 398.937120][T12826] dump_header+0x101/0x900 [ 398.941592][T12826] oom_kill_process+0x270/0xa60 [ 398.946495][T12826] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 398.952175][T12826] out_of_memory+0x351/0x1700 [ 398.956901][T12826] ? __pfx_out_of_memory+0x10/0x10 [ 398.962048][T12826] ? rcu_read_unlock+0x17/0x60 [ 398.966857][T12826] ? find_held_lock+0x2d/0x110 [ 398.971679][T12826] mem_cgroup_out_of_memory+0x207/0x270 [ 398.977278][T12826] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 398.983400][T12826] ? do_raw_spin_unlock+0x172/0x230 [ 398.988653][T12826] try_charge_memcg+0x54c/0xaf0 [ 398.993564][T12826] ? __pfx_try_charge_memcg+0x10/0x10 [ 398.998992][T12826] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 399.004490][T12826] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 399.009993][T12826] ? get_mem_cgroup_from_mm+0x131/0x5f0 [ 399.015581][T12826] __mem_cgroup_charge+0x9b/0x280 [ 399.020669][T12826] shmem_alloc_and_add_folio+0x507/0xc00 [ 399.026356][T12826] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 399.032282][T12826] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 399.038453][T12826] ? shmem_huge_global_enabled+0x176/0x250 [ 399.044284][T12826] ? shmem_allowable_huge_orders+0xcd/0x3e0 [ 399.050194][T12826] shmem_get_folio_gfp+0x689/0x1530 [ 399.055412][T12826] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 399.061054][T12826] ? find_held_lock+0x2d/0x110 [ 399.065841][T12826] shmem_write_begin+0x161/0x300 [ 399.070800][T12826] ? __pfx_shmem_write_begin+0x10/0x10 [ 399.076284][T12826] ? timestamp_truncate+0x21f/0x2e0 [ 399.081507][T12826] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 399.088383][T12826] generic_perform_write+0x2ba/0x920 [ 399.093690][T12826] ? __pfx_generic_perform_write+0x10/0x10 [ 399.099513][T12826] ? inode_needs_update_time.part.0+0x191/0x270 [ 399.105781][T12826] shmem_file_write_iter+0x10e/0x140 [ 399.111092][T12826] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 399.116915][T12826] __kernel_write_iter+0x318/0xa80 [ 399.122061][T12826] ? __pfx___kernel_write_iter+0x10/0x10 [ 399.127706][T12826] ? get_dump_page+0x15b/0x230 [ 399.132538][T12826] ? __pfx___might_resched+0x10/0x10 [ 399.137847][T12826] ? copy_mc_enhanced_fast_string+0xa/0x13 [ 399.143680][T12826] dump_user_range+0x389/0x8c0 [ 399.148467][T12826] ? __pfx_dump_user_range+0x10/0x10 [ 399.153771][T12826] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 399.159940][T12826] ? __pfx_writenote+0x10/0x10 [ 399.164716][T12826] elf_core_dump+0x2787/0x3880 [ 399.169501][T12826] ? __pfx_elf_core_dump+0x10/0x10 [ 399.174624][T12826] ? kasan_save_stack+0x42/0x60 [ 399.179488][T12826] ? kasan_save_stack+0x33/0x60 [ 399.184348][T12826] ? kasan_save_track+0x14/0x30 [ 399.189211][T12826] ? __kasan_kmalloc+0xaa/0xb0 [ 399.193988][T12826] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 399.199479][T12826] ? do_coredump+0x1665/0x43e0 [ 399.204265][T12826] ? get_signal+0x23f3/0x2610 [ 399.209014][T12826] ? rcu_is_watching+0x12/0xc0 [ 399.213792][T12826] ? trace_lock_acquire+0x14e/0x1f0 [ 399.219003][T12826] ? __pfx_sort+0x10/0x10 [ 399.223347][T12826] ? get_signal+0x23f3/0x2610 [ 399.228042][T12826] ? do_coredump+0x2dd5/0x43e0 [ 399.232822][T12826] do_coredump+0x2dd5/0x43e0 [ 399.237440][T12826] ? __pfx_do_coredump+0x10/0x10 [ 399.242392][T12826] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 399.248362][T12826] get_signal+0x23f3/0x2610 [ 399.252886][T12826] ? force_sig_fault+0xad/0xf0 [ 399.257750][T12826] ? __pfx_get_signal+0x10/0x10 [ 399.262650][T12826] arch_do_signal_or_restart+0x90/0x7e0 [ 399.268213][T12826] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 399.274383][T12826] ? __bad_area_nosemaphore+0x334/0x6a0 [ 399.279963][T12826] ? do_user_addr_fault+0x920/0x13f0 [ 399.285270][T12826] irqentry_exit_to_user_mode+0x13f/0x280 [ 399.291004][T12826] asm_exc_page_fault+0x26/0x30 [ 399.295884][T12826] RIP: 0033:0x7d9b1f [ 399.299803][T12826] Code: Unable to access opcode bytes at 0x7d9af5. [ 399.306301][T12826] RSP: 002b:00000000200002b8 EFLAGS: 00010217 [ 399.312379][T12826] RAX: 0000000000000000 RBX: 00007f0a9d976160 RCX: 00007f0a9d785d29 [ 399.320366][T12826] RDX: 00000000200002c0 RSI: 00000000200002b0 RDI: 0000000000100000 [ 399.328344][T12826] RBP: 00007f0a9d801aa8 R08: 0000000020000340 R09: 0000000020000340 [ 399.336328][T12826] R10: 0000000020000300 R11: 0000000000000206 R12: 0000000000000000 [ 399.344308][T12826] R13: 0000000000000000 R14: 00007f0a9d976160 R15: 00007fff9bee4048 [ 399.352308][T12826] [ 399.449003][T12826] memory: usage 307200kB, limit 307200kB, failcnt 7844 [ 399.475062][T12826] memory+swap: usage 357216kB, limit 9007199254740988kB, failcnt 0 [ 399.483442][T12826] kmem: usage 6352kB, limit 9007199254740988kB, failcnt 0 [ 399.746623][T12826] Memory cgroup stats for /syz0: [ 399.747365][T12826] cache 300662784 [ 399.790851][T12826] rss 7352320 [ 399.794207][T12826] rss_huge 2097152 [ 399.814980][T12826] shmem 300654592 [ 399.824921][T12826] mapped_file 60870656 [ 399.829075][T12826] dirty 0 [ 399.832034][T12826] writeback 0 [ 399.868463][T12826] workingset_refault_anon 2892 [ 399.886069][T12826] workingset_refault_file 4805 [ 399.891166][T12826] swap 51216384 [ 399.919767][T12826] swapcached 53248 [ 399.947269][T12826] pgpgin 545659 [ 399.950872][T12826] pgpgout 483222 [ 399.954439][T12826] pgfault 507232 [ 400.008011][T12826] pgmajfault 375 [ 400.011624][T12826] inactive_anon 194498560 [ 400.034881][T12826] active_anon 113561600 [ 400.039104][T12826] inactive_file 4096 [ 400.043025][T12826] active_file 4096 [ 400.075085][T12826] unevictable 0 [ 400.078618][T12826] hierarchical_memory_limit 314572800 [ 400.084019][T12826] hierarchical_memsw_limit 9223372036854771712 [ 400.139990][T12826] total_cache 300662784 [ 400.144229][T12826] total_rss 7352320 [ 400.164889][T12826] total_rss_huge 2097152 [ 400.169207][T12826] total_shmem 300654592 [ 400.173390][T12826] total_mapped_file 60870656 [ 400.207172][T12826] total_dirty 0 [ 400.235864][T12826] total_writeback 0 [ 400.239738][T12826] total_workingset_refault_anon 2892 [ 400.263188][T12826] total_workingset_refault_file 4805 [ 400.279532][T12826] total_swap 51216384 [ 400.283598][T12826] total_swapcached 53248 [ 400.307325][T12826] total_pgpgin 545659 [ 400.340118][T12826] total_pgpgout 483222 [ 400.344251][T12826] total_pgfault 507232 [ 400.370758][T12826] total_pgmajfault 375 [ 400.380479][T12826] total_inactive_anon 194498560 [ 400.394874][T12826] total_active_anon 113561600 [ 400.405531][T12826] total_inactive_file 4096 [ 400.425076][T12826] total_active_file 4096 [ 400.429392][T12826] total_unevictable 0 [ 400.463316][T12826] anon_cost 0 [ 400.474848][T12826] file_cost 0 [ 400.478212][T12826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.1980,pid=12637,uid=0 [ 400.510195][T12826] Memory cgroup out of memory: Killed process 12637 (syz.0.1980) total-vm:167248kB, anon-rss:976kB, file-rss:23808kB, shmem-rss:33920kB, UID:0 pgtables:268kB oom_score_adj:1000 [ 400.722126][T13064] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2111'. [ 402.413577][T12826] syz.0.2027 invoked oom-killer: gfp_mask=0xcc0(GFP_KERNEL), order=0, oom_score_adj=1000 [ 402.423528][T12826] CPU: 0 UID: 0 PID: 12826 Comm: syz.0.2027 Not tainted 6.13.0-rc4-syzkaller #0 [ 402.432600][T12826] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 402.442784][T12826] Call Trace: [ 402.446121][T12826] [ 402.449078][T12826] dump_stack_lvl+0x16c/0x1f0 [ 402.453794][T12826] dump_header+0x101/0x900 [ 402.458259][T12826] oom_kill_process+0x270/0xa60 [ 402.463157][T12826] ? mem_cgroup_out_of_memory+0x8d/0x270 [ 402.468834][T12826] out_of_memory+0x351/0x1700 [ 402.473567][T12826] ? __pfx_out_of_memory+0x10/0x10 [ 402.478723][T12826] ? rcu_read_unlock+0x17/0x60 [ 402.483522][T12826] ? find_held_lock+0x2d/0x110 [ 402.488311][T12826] mem_cgroup_out_of_memory+0x207/0x270 [ 402.493867][T12826] ? __pfx_mem_cgroup_out_of_memory+0x10/0x10 [ 402.499949][T12826] ? do_raw_spin_unlock+0x172/0x230 [ 402.505165][T12826] try_charge_memcg+0x54c/0xaf0 [ 402.510035][T12826] ? __pfx_try_charge_memcg+0x10/0x10 [ 402.515418][T12826] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 402.520885][T12826] ? get_mem_cgroup_from_mm+0x87/0x5f0 [ 402.526358][T12826] ? get_mem_cgroup_from_mm+0x131/0x5f0 [ 402.531923][T12826] __mem_cgroup_charge+0x9b/0x280 [ 402.536969][T12826] shmem_alloc_and_add_folio+0x507/0xc00 [ 402.542701][T12826] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 402.548693][T12826] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 402.554862][T12826] ? shmem_huge_global_enabled+0x176/0x250 [ 402.560700][T12826] ? shmem_allowable_huge_orders+0xcd/0x3e0 [ 402.566608][T12826] shmem_get_folio_gfp+0x689/0x1530 [ 402.571825][T12826] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 402.577470][T12826] ? find_held_lock+0x2d/0x110 [ 402.582254][T12826] shmem_write_begin+0x161/0x300 [ 402.587206][T12826] ? __pfx_shmem_write_begin+0x10/0x10 [ 402.592675][T12826] ? timestamp_truncate+0x21f/0x2e0 [ 402.597897][T12826] ? balance_dirty_pages_ratelimited_flags+0x92/0x1270 [ 402.604775][T12826] generic_perform_write+0x2ba/0x920 [ 402.610084][T12826] ? __pfx_generic_perform_write+0x10/0x10 [ 402.615909][T12826] ? inode_needs_update_time.part.0+0x191/0x270 [ 402.622188][T12826] shmem_file_write_iter+0x10e/0x140 [ 402.627496][T12826] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 402.633316][T12826] __kernel_write_iter+0x318/0xa80 [ 402.638462][T12826] ? __pfx___kernel_write_iter+0x10/0x10 [ 402.644123][T12826] ? get_dump_page+0x15b/0x230 [ 402.648915][T12826] ? __pfx___might_resched+0x10/0x10 [ 402.654218][T12826] ? copy_mc_enhanced_fast_string+0xa/0x13 [ 402.660053][T12826] dump_user_range+0x389/0x8c0 [ 402.664897][T12826] ? __pfx_dump_user_range+0x10/0x10 [ 402.670288][T12826] ? elf_coredump_extra_notes_write+0xbe/0x430 [ 402.676463][T12826] ? __pfx_writenote+0x10/0x10 [ 402.681241][T12826] elf_core_dump+0x2787/0x3880 [ 402.686027][T12826] ? __pfx_elf_core_dump+0x10/0x10 [ 402.691146][T12826] ? kasan_save_stack+0x42/0x60 [ 402.696009][T12826] ? kasan_save_stack+0x33/0x60 [ 402.700911][T12826] ? kasan_save_track+0x14/0x30 [ 402.705793][T12826] ? __kasan_kmalloc+0xaa/0xb0 [ 402.710588][T12826] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 402.716068][T12826] ? do_coredump+0x1665/0x43e0 [ 402.720854][T12826] ? get_signal+0x23f3/0x2610 [ 402.725590][T12826] ? rcu_is_watching+0x12/0xc0 [ 402.730365][T12826] ? trace_lock_acquire+0x14e/0x1f0 [ 402.735576][T12826] ? __pfx_sort+0x10/0x10 [ 402.739919][T12826] ? get_signal+0x23f3/0x2610 [ 402.744610][T12826] ? do_coredump+0x2dd5/0x43e0 [ 402.749390][T12826] do_coredump+0x2dd5/0x43e0 [ 402.754008][T12826] ? __pfx_do_coredump+0x10/0x10 [ 402.758963][T12826] ? irqentry_exit_to_user_mode+0x13f/0x280 [ 402.764923][T12826] get_signal+0x23f3/0x2610 [ 402.769443][T12826] ? force_sig_fault+0xad/0xf0 [ 402.774217][T12826] ? __pfx_get_signal+0x10/0x10 [ 402.780478][T12826] arch_do_signal_or_restart+0x90/0x7e0 [ 402.786049][T12826] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 402.792214][T12826] ? __bad_area_nosemaphore+0x334/0x6a0 [ 402.797785][T12826] ? do_user_addr_fault+0x920/0x13f0 [ 402.803085][T12826] irqentry_exit_to_user_mode+0x13f/0x280 [ 402.808819][T12826] asm_exc_page_fault+0x26/0x30 [ 402.813681][T12826] RIP: 0033:0x7d9b1f [ 402.817585][T12826] Code: Unable to access opcode bytes at 0x7d9af5. [ 402.824088][T12826] RSP: 002b:00000000200002b8 EFLAGS: 00010217 [ 402.830163][T12826] RAX: 0000000000000000 RBX: 00007f0a9d976160 RCX: 00007f0a9d785d29 [ 402.838141][T12826] RDX: 00000000200002c0 RSI: 00000000200002b0 RDI: 0000000000100000 [ 402.846116][T12826] RBP: 00007f0a9d801aa8 R08: 0000000020000340 R09: 0000000020000340 [ 402.854093][T12826] R10: 0000000020000300 R11: 0000000000000206 R12: 0000000000000000 [ 402.862072][T12826] R13: 0000000000000000 R14: 00007f0a9d976160 R15: 00007fff9bee4048 [ 402.870073][T12826] [ 402.986677][T12826] memory: usage 305376kB, limit 307200kB, failcnt 9083 [ 402.993645][T12826] memory+swap: usage 355392kB, limit 9007199254740988kB, failcnt 0 [ 403.015693][T13107] nbd: must specify at least one socket [ 403.102883][T13101] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(640441213.32042.0), cmd(7) [ 403.182815][T12826] kmem: usage 5792kB, limit 9007199254740988kB, failcnt 0 [ 403.294928][T12826] Memory cgroup stats for /syz0: [ 403.295129][T12826] cache 296923136 [ 403.303899][T12826] rss 7176192 [ 403.426793][T12826] rss_huge 2097152 [ 403.430594][T12826] shmem 295817216 [ 403.434259][T12826] mapped_file 26681344 [ 403.744840][T12826] dirty 86016 [ 403.748259][T12826] writeback 0 [ 403.751599][T12826] workingset_refault_anon 2892 [ 403.843352][T12826] workingset_refault_file 5970 [ 403.902575][T12826] swap 51216384 [ 403.938283][T12826] swapcached 53248 [ 404.053228][T12826] pgpgin 550367 [ 404.133742][T12826] pgpgout 488855 [ 404.169892][T12826] pgfault 511109 [ 404.213940][T12826] pgmajfault 392 [ 404.293647][T12826] inactive_anon 117841920 [ 404.429059][T12826] active_anon 185204736 [ 404.433291][T12826] inactive_file 0 [ 404.584967][T12826] active_file 1105920 [ 404.618124][T13131] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 404.649589][T12826] unevictable 0 [ 404.653116][T12826] hierarchical_memory_limit 314572800 [ 404.834918][T12826] hierarchical_memsw_limit 9223372036854771712 [ 404.841181][T12826] total_cache 296923136 [ 405.173777][T12826] total_rss 7176192 [ 405.235216][T13134] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 405.242372][T13134] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 405.254994][T13134] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 405.271353][T13134] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 405.281115][T13134] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 405.295119][T12826] total_rss_huge 2097152 [ 405.299418][T12826] total_shmem 295817216 [ 405.472605][T12826] total_mapped_file 26681344 [ 405.584860][T12826] total_dirty 86016 [ 405.588742][T12826] total_writeback 0 [ 405.592601][T12826] total_workingset_refault_anon 2892 [ 406.261570][T12826] total_workingset_refault_file 5970 [ 406.324832][T12826] total_swap 51216384 [ 406.328892][T12826] total_swapcached 53248 [ 406.333172][T12826] total_pgpgin 550367 [ 406.542457][T12826] total_pgpgout 488855 [ 406.597406][ T5828] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 406.609299][ T5828] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 406.618063][ T5828] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 406.725368][T12826] total_pgfault 511109 [ 406.729497][T12826] total_pgmajfault 392 [ 406.733578][T12826] total_inactive_anon 117841920 [ 406.853623][T13184] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 406.853623][T13184] M' is too long [ 406.872855][T13184] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 406.872855][T13184] W ' is too long [ 406.884495][T13185] netlink: 342 bytes leftover after parsing attributes in process `syz.3.2144'. [ 406.988099][ T5828] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 406.996998][ T5828] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 407.004356][ T5828] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 407.011627][T12826] total_active_anon 185204736 [ 407.016725][T12826] total_inactive_file 0 [ 407.021261][T12826] total_active_file 1105920 [ 407.026276][T12826] total_unevictable 0 [ 407.030289][T12826] anon_cost 0 [ 407.034909][T12826] file_cost 0 [ 407.038323][T12826] oom-kill:constraint=CONSTRAINT_MEMCG,nodemask=(null),cpuset=/,mems_allowed=0-1,oom_memcg=/syz0,task_memcg=/syz0,task=syz.0.2006,pid=12722,uid=0 [ 407.057713][T12826] Memory cgroup out of memory: Killed process 12722 (syz.0.2006) total-vm:105940kB, anon-rss:980kB, file-rss:53632kB, shmem-rss:0kB, UID:0 pgtables:200kB oom_score_adj:1000 [ 407.335075][ T5828] Bluetooth: hci4: command 0x0406 tx timeout [ 407.335093][ T5840] Bluetooth: hci2: command 0x0c1a tx timeout [ 407.341145][ T5828] Bluetooth: hci1: command 0x0c1a tx timeout [ 407.347336][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 407.567972][T13180] chnl_net:caif_netlink_parms(): no params data found [ 407.773742][T13204] snd_aloop snd_aloop.0: control 1:6:-1073741827:^ [ 407.773742][T13204] :0 is already present [ 408.205292][T13180] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.213226][T13180] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.233008][T13180] bridge_slave_0: entered allmulticast mode [ 408.240380][T13180] bridge_slave_0: entered promiscuous mode [ 408.248279][T13180] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.255638][T13180] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.262900][T13180] bridge_slave_1: entered allmulticast mode [ 408.270055][T13180] bridge_slave_1: entered promiscuous mode [ 408.381075][T13180] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.406281][T13180] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.567151][T13180] team0: Port device team_slave_0 added [ 408.576192][T13180] team0: Port device team_slave_1 added [ 408.678677][T13180] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.685785][T13180] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.712180][T13180] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.725092][T13180] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.732066][T13180] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.758125][T13180] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 409.012623][T13180] hsr_slave_0: entered promiscuous mode [ 409.019678][T13180] hsr_slave_1: entered promiscuous mode [ 409.043520][T13180] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 409.062637][T13180] Cannot create hsr debugfs directory [ 409.095009][ T54] Bluetooth: hci3: command tx timeout [ 409.417728][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 409.778173][T13180] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.083111][T13180] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.440004][T13180] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.577869][T13180] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 410.640051][T13248] FAULT_INJECTION: forcing a failure. [ 410.640051][T13248] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 410.691786][T13248] CPU: 1 UID: 0 PID: 13248 Comm: syz.3.2157 Not tainted 6.13.0-rc4-syzkaller #0 [ 410.700929][T13248] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 410.711019][T13248] Call Trace: [ 410.714304][T13248] [ 410.717243][T13248] dump_stack_lvl+0x16c/0x1f0 [ 410.721936][T13248] should_fail_ex+0x497/0x5b0 [ 410.726629][T13248] _copy_to_user+0x32/0xd0 [ 410.731057][T13248] pagemap_read+0x536/0x880 [ 410.735578][T13248] ? __pfx_pagemap_read+0x10/0x10 [ 410.740620][T13248] ? __pfx_pagemap_read+0x10/0x10 [ 410.745651][T13248] vfs_read+0x1df/0xbe0 [ 410.749818][T13248] ? __fget_files+0x1fc/0x3a0 [ 410.754502][T13248] ? __pfx___mutex_lock+0x10/0x10 [ 410.759545][T13248] ? __pfx_vfs_read+0x10/0x10 [ 410.764237][T13248] ? __fget_files+0x206/0x3a0 [ 410.768934][T13248] ksys_read+0x12b/0x250 [ 410.773188][T13248] ? __pfx_ksys_read+0x10/0x10 [ 410.777981][T13248] do_syscall_64+0xcd/0x250 [ 410.782500][T13248] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 410.788409][T13248] RIP: 0033:0x7f3dfbd85d29 [ 410.792830][T13248] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 410.812454][T13248] RSP: 002b:00007f3dfcc4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 410.820880][T13248] RAX: ffffffffffffffda RBX: 00007f3dfbf75fa0 RCX: 00007f3dfbd85d29 [ 410.828859][T13248] RDX: 00000000000039b8 RSI: 0000000000000000 RDI: 0000000000000003 [ 410.836838][T13248] RBP: 00007f3dfcc4b090 R08: 0000000000000000 R09: 0000000000000000 [ 410.844817][T13248] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 410.852802][T13248] R13: 0000000000000000 R14: 00007f3dfbf75fa0 R15: 00007ffd727fae08 [ 410.860803][T13248] [ 410.940886][T13237] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 410.952393][T13180] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 410.985127][T13237] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 411.004276][T13237] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 411.023454][T13180] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 411.045025][T13237] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 411.054236][T13237] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 411.068098][T13180] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 411.087018][T13180] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 411.222656][T13237] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 411.288232][T13180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 411.330427][T13180] 8021q: adding VLAN 0 to HW filter on device team0 [ 411.369470][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.376696][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.412043][T13252] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[13252] [ 411.440467][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.447654][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.679422][T13256] binder: 13255:13256 ioctl c0105512 1 returned -22 [ 411.887790][T13180] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.009861][T13180] veth0_vlan: entered promiscuous mode [ 412.037119][T13180] veth1_vlan: entered promiscuous mode [ 412.108717][T13180] veth0_macvtap: entered promiscuous mode [ 412.133350][T13180] veth1_macvtap: entered promiscuous mode [ 412.160116][T13180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.184241][T13180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.200793][T13180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.226382][T13180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.256787][T13180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.285319][T13180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.295755][T13180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.314962][T13180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.326736][T13180] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.346393][T13180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.375016][T13180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.398105][T13180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.445096][T13180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.462643][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 412.505472][T13180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.533552][T13273] device-mapper: ioctl: Unable to rename non-existent device, to [ 412.564941][T13180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.587581][T13180] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.623424][T13180] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.656574][T13180] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.681079][T13180] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.693509][T13180] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.712817][T13180] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.734864][T13180] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.757063][T13273] lo: entered allmulticast mode [ 412.770765][T13273] lo: left allmulticast mode [ 413.015496][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 413.021613][ T54] Bluetooth: hci2: command 0x0c1a tx timeout [ 413.110131][ T67] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.120183][ T5840] Bluetooth: hci3: command 0x040f tx timeout [ 413.165999][ T67] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.306105][ T6777] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.313991][ T6777] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.427088][T13288] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 413.427088][T13288] M' is too long [ 413.437811][T13288] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 413.437811][T13288] W ' is too long [ 415.011018][T13313] netlink: 'syz.4.2172': attribute type 16 has an invalid length. [ 415.056185][T13313] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2172'. [ 415.174885][ T5840] Bluetooth: hci3: command 0x040f tx timeout [ 415.303622][T13316] netlink: 'syz.4.2172': attribute type 10 has an invalid length. [ 415.418893][T13316] netlink: 'syz.4.2172': attribute type 13 has an invalid length. [ 416.438786][T13339] device-mapper: ioctl: Unable to rename non-existent device, to [ 416.580853][T13339] lo: entered allmulticast mode [ 416.707389][T13350] lo: left allmulticast mode [ 417.011871][T13352] nbd7: detected capacity change from 0 to 68719476736 [ 417.079800][ T9302] block nbd7: Send control failed (result -22) [ 417.108799][ T9302] block nbd7: Request send failed, requeueing [ 417.119858][ T5840] block nbd7: Receive control failed (result -32) [ 417.119922][ T58] block nbd7: Dead connection, failed to find a fallback [ 417.119943][ T58] block nbd7: shutting down sockets [ 417.139497][ T58] blk_print_req_error: 24 callbacks suppressed [ 417.139515][ T58] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.154809][ T58] buffer_io_error: 23 callbacks suppressed [ 417.154824][ T58] Buffer I/O error on dev nbd7, logical block 0, async page read [ 417.173605][ T9302] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.239601][ T9302] Buffer I/O error on dev nbd7, logical block 0, async page read [ 417.258980][ T5840] Bluetooth: hci3: command 0x040f tx timeout [ 417.276133][T13356] device-mapper: ioctl: Unable to rename non-existent device, to [ 417.285405][ T9302] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.307195][T13356] lo: entered allmulticast mode [ 417.338945][ T9302] Buffer I/O error on dev nbd7, logical block 0, async page read [ 417.375145][ T9302] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.384274][ T9302] Buffer I/O error on dev nbd7, logical block 0, async page read [ 417.465052][ T9302] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.476213][T13357] lo: left allmulticast mode [ 417.491583][ T9302] Buffer I/O error on dev nbd7, logical block 0, async page read [ 417.537428][ T9302] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.593153][ T9302] Buffer I/O error on dev nbd7, logical block 0, async page read [ 417.614040][ T9302] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.637461][ T9302] Buffer I/O error on dev nbd7, logical block 0, async page read [ 417.652901][ T9302] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.699196][ T9302] Buffer I/O error on dev nbd7, logical block 0, async page read [ 417.735389][ T9302] ldm_validate_partition_table(): Disk read failed. [ 417.742442][ T9302] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.751859][ T9302] Buffer I/O error on dev nbd7, logical block 0, async page read [ 417.760055][ T9302] I/O error, dev nbd7, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 417.769218][ T9302] Buffer I/O error on dev nbd7, logical block 0, async page read [ 417.777621][ T9302] Dev nbd7: unable to read RDB block 0 [ 417.783595][ T9302] nbd7: unable to read partition table [ 417.792471][ T9302] ldm_validate_partition_table(): Disk read failed. [ 417.799886][ T9302] Dev nbd7: unable to read RDB block 0 [ 417.820751][ T9302] nbd7: unable to read partition table [ 418.509651][T13378] kexec: Could not allocate control_code_buffer [ 419.081445][T13396] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 419.081445][T13396] 1' is too long [ 419.094964][T13396] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 419.094964][T13396] W ' is too long [ 419.198868][T13394] can0: slcan on ptm0. [ 419.285037][T13391] HfR: entered promiscuous mode [ 419.294405][T13391] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2194'. [ 419.312476][T13391] HfR: left promiscuous mode [ 419.339621][ T5840] Bluetooth: hci3: command 0x040f tx timeout [ 419.370581][T13393] can0 (unregistered): slcan off ptm0. [ 419.892298][ T29] audit: type=1326 audit(6029928201.328:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13388 comm="syz.4.2192" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7ff90d585d29 code=0x0 [ 420.813852][T13429] device-mapper: ioctl: Unable to rename non-existent device, to [ 420.933095][T13429] lo: entered allmulticast mode [ 420.977035][T13429] lo: left allmulticast mode [ 421.414998][ T5840] Bluetooth: hci3: command 0x040f tx timeout [ 422.086969][T13462] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2215'. [ 422.925362][T13479] nbd8: detected capacity change from 0 to 68719476736 [ 422.953260][ T9302] block nbd8: Send control failed (result -22) [ 422.970952][ T9302] block nbd8: Request send failed, requeueing [ 422.979858][T13485] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2224'. [ 423.000942][ T5840] block nbd8: Receive control failed (result -32) [ 423.001035][ T58] block nbd8: Dead connection, failed to find a fallback [ 423.015085][ T58] block nbd8: shutting down sockets [ 423.020416][ T58] blk_print_req_error: 24 callbacks suppressed [ 423.020434][ T58] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.036187][ T58] buffer_io_error: 23 callbacks suppressed [ 423.036205][ T58] Buffer I/O error on dev nbd8, logical block 0, async page read [ 423.050960][ T9302] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.093229][ T9302] Buffer I/O error on dev nbd8, logical block 0, async page read [ 423.130695][ T9302] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.205212][ T9302] Buffer I/O error on dev nbd8, logical block 0, async page read [ 423.225038][ T9302] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.234534][ T9302] Buffer I/O error on dev nbd8, logical block 0, async page read [ 423.269567][ T9302] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.285721][ T9302] Buffer I/O error on dev nbd8, logical block 0, async page read [ 423.293680][ T9302] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.324871][ T9302] Buffer I/O error on dev nbd8, logical block 0, async page read [ 423.347631][ T9302] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.370845][ T9302] Buffer I/O error on dev nbd8, logical block 0, async page read [ 423.395046][ T9302] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.424525][ T9302] Buffer I/O error on dev nbd8, logical block 0, async page read [ 423.461022][ T9302] ldm_validate_partition_table(): Disk read failed. [ 423.477429][T13492] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2228'. [ 423.482145][ T9302] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.512059][ T9302] Buffer I/O error on dev nbd8, logical block 0, async page read [ 423.544824][ T9302] I/O error, dev nbd8, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 423.553943][ T9302] Buffer I/O error on dev nbd8, logical block 0, async page read [ 423.591328][ T9302] Dev nbd8: unable to read RDB block 0 [ 423.600772][T13495] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2228'. [ 423.615403][ T9302] nbd8: unable to read partition table [ 423.639011][ T9302] ldm_validate_partition_table(): Disk read failed. [ 423.655387][ T9302] Dev nbd8: unable to read RDB block 0 [ 423.661846][ T9302] nbd8: unable to read partition table [ 423.666108][T13497] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2228'. [ 423.695945][T13495] lo: entered promiscuous mode [ 423.700849][T13495] lo: entered allmulticast mode [ 424.922407][T13534] device-mapper: ioctl: Unable to rename non-existent device, to [ 424.979004][T13534] lo: entered allmulticast mode [ 424.996933][T13528] ptrace attach of "./syz-executor exec"[5832] was attempted by "./syz-executor exec"[13528] [ 425.072170][T13541] lo: left allmulticast mode syzkaller syzkaller login: [ 426.131790][ T29] audit: type=1326 audit(6029928207.568:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13549 comm="syz.1.2246" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1cb6f85d29 code=0x0 [ 426.378014][T13574] snd_aloop snd_aloop.0: control 1:6:-1073741827:^ [ 426.378014][T13574] :0 is already present [ 426.770335][T13583] device-mapper: ioctl: Unable to rename non-existent device, to [ 427.563648][T13588] ptrace attach of "./syz-executor exec"[9348] was attempted by "./syz-executor exec"[13588] [ 427.842840][T13601] ptrace attach of "./syz-executor exec"[5832] was attempted by "Q[.'\x1bnyA\x1bsoO\x07}\x0dcl9=䛰\x07,[7 K\x1bv`r\x22=%r5x 9c*^kW%h+п`uy{q݆m,l<,?'!\x09=N9dŸq~=󤺝w7; 1 [ 447.469028][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 447.490657][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 447.500665][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 447.510468][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 447.518972][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 448.056187][T13959] device-mapper: ioctl: Unable to rename non-existent device, to [ 448.151181][T13949] chnl_net:caif_netlink_parms(): no params data found [ 448.726077][T13964] device-mapper: ioctl: Unable to rename non-existent device, to [ 448.916322][T13964] lo: entered allmulticast mode [ 448.931608][T13964] lo: left allmulticast mode [ 448.982812][T13949] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.024510][T13949] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.048298][T13949] bridge_slave_0: entered allmulticast mode [ 449.096413][T13949] bridge_slave_0: entered promiscuous mode [ 449.575177][ T5840] Bluetooth: hci1: command tx timeout [ 449.623778][T13949] bridge0: port 2(bridge_slave_1) entered blocking state [ 449.653026][T13949] bridge0: port 2(bridge_slave_1) entered disabled state [ 449.705785][T13949] bridge_slave_1: entered allmulticast mode [ 449.713243][T13949] bridge_slave_1: entered promiscuous mode [ 450.172083][T11988] bridge0: port 3(syz_tun) entered disabled state [ 450.378728][T11988] syz_tun (unregistering): left allmulticast mode [ 450.396138][T11988] syz_tun (unregistering): left promiscuous mode [ 450.415486][T11988] bridge0: port 3(syz_tun) entered disabled state [ 450.907357][T13949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 451.037443][T13949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 451.300195][T13998] device-mapper: ioctl: Unable to rename non-existent device, to [ 451.559926][T13949] team0: Port device team_slave_0 added [ 451.654926][ T5840] Bluetooth: hci1: command tx timeout [ 451.661147][T13949] team0: Port device team_slave_1 added [ 451.763446][T13949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.783769][T13949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.821479][T13949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.889242][T13949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.912519][T13949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.963766][T13949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.178661][T13949] hsr_slave_0: entered promiscuous mode [ 452.195856][T13949] hsr_slave_1: entered promiscuous mode [ 452.206618][T13949] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 452.214652][T13949] Cannot create hsr debugfs directory [ 452.635489][T13949] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.776915][T13949] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.977872][T13949] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.216870][T13949] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 453.533488][T13949] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 453.608063][T13949] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 453.627642][T13949] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 453.645324][T14025] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 453.698131][T13949] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 453.734992][ T5840] Bluetooth: hci1: command tx timeout [ 453.990957][T14032] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2364'. [ 454.184158][T13949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.270347][T13949] 8021q: adding VLAN 0 to HW filter on device team0 [ 454.290302][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.297533][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 454.370725][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.377958][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 454.970372][T13949] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.103260][T13949] veth0_vlan: entered promiscuous mode [ 455.124188][T13949] veth1_vlan: entered promiscuous mode [ 455.172030][T13949] veth0_macvtap: entered promiscuous mode [ 455.191533][T13949] veth1_macvtap: entered promiscuous mode [ 455.233049][T13949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.255013][T13949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.275404][T13949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.294990][T13949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.316919][T13949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.335469][T13949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.356015][T13949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.375006][T13949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.391677][T13949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 455.421946][T13949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.446343][T13949] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 455.469183][T13949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.495154][T13949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.506009][T13949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.534980][T13949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.545327][T13949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.565478][T13949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.584836][T13949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.605195][T13949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.625202][T13949] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 455.656877][T13949] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 455.686566][T13949] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 455.716583][T13949] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.726946][T13949] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.735965][T13949] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.744713][T13949] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.815014][ T5840] Bluetooth: hci1: command tx timeout [ 456.029404][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.064911][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.246532][ T8646] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 456.254455][ T8646] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 456.285284][T14053] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 456.521027][T14057] device-mapper: ioctl: ioctl interface mismatch: kernel(4.48.0), user(0.0.0), cmd(3) [ 456.565540][T14055] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 456.565540][T14055] M' is too long [ 456.594020][T14055] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 456.594020][T14055] W ' is too long [ 456.747281][T14065] netlink: 338 bytes leftover after parsing attributes in process `syz.3.2371'. [ 456.995653][T14067] device-mapper: ioctl: Unable to rename non-existent device, to [ 457.899133][T14086] netlink: 'syz.0.2380': attribute type 39 has an invalid length. [ 457.934962][T14086] netlink: 330 bytes leftover after parsing attributes in process `syz.0.2380'. [ 460.656394][T14154] vivid-013: ================= START STATUS ================= [ 460.666566][T14154] vivid-013: Generate PTS: true [ 460.671833][T14154] vivid-013: Generate SCR: true [ 460.698472][T14154] tpg source WxH: 640x360 (Y'CbCr) [ 460.703732][T14154] tpg field: 1 [ 460.715070][T14154] tpg crop: 640x360@0x0 [ 460.732035][T14154] tpg compose: 640x360@0x0 [ 460.744930][T14154] tpg colorspace: 8 [ 460.748951][T14154] tpg transfer function: 0/0 [ 460.760033][T14154] tpg Y'CbCr encoding: 0/0 [ 460.772950][T14154] tpg quantization: 0/0 [ 460.786834][T14154] tpg RGB range: 0/2 [ 460.795256][T14154] vivid-013: ================== END STATUS ================== [ 461.382016][T14164] FAULT_INJECTION: forcing a failure. [ 461.382016][T14164] name failslab, interval 1, probability 0, space 0, times 0 [ 461.402343][T14164] CPU: 0 UID: 0 PID: 14164 Comm: syz.1.2397 Not tainted 6.13.0-rc4-syzkaller #0 [ 461.411465][T14164] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 461.421561][T14164] Call Trace: [ 461.424881][T14164] [ 461.427837][T14164] dump_stack_lvl+0x16c/0x1f0 [ 461.432574][T14164] should_fail_ex+0x497/0x5b0 [ 461.437302][T14164] ? fs_reclaim_acquire+0xae/0x150 [ 461.442463][T14164] should_failslab+0xc2/0x120 [ 461.447193][T14164] __kmalloc_noprof+0xce/0x4f0 [ 461.452049][T14164] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 461.457743][T14164] ? tomoyo_realpath_from_path+0xbf/0x710 [ 461.463509][T14164] tomoyo_realpath_from_path+0xbf/0x710 [ 461.469111][T14164] ? tomoyo_path_number_perm+0x235/0x5b0 [ 461.474821][T14164] tomoyo_path_number_perm+0x248/0x5b0 [ 461.480328][T14164] ? tomoyo_path_number_perm+0x235/0x5b0 [ 461.486009][T14164] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 461.492069][T14164] ? __pfx_lock_release+0x10/0x10 [ 461.497154][T14164] ? trace_lock_acquire+0x14e/0x1f0 [ 461.502404][T14164] ? lock_acquire+0x2f/0xb0 [ 461.506940][T14164] ? __fget_files+0x40/0x3a0 [ 461.511570][T14164] ? __fget_files+0x206/0x3a0 [ 461.516297][T14164] security_file_ioctl+0x9b/0x240 [ 461.521373][T14164] __x64_sys_ioctl+0xb7/0x200 [ 461.526093][T14164] do_syscall_64+0xcd/0x250 [ 461.530651][T14164] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.536586][T14164] RIP: 0033:0x7f1cb6f85d29 [ 461.541035][T14164] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 461.560686][T14164] RSP: 002b:00007f1cb7da0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 461.569153][T14164] RAX: ffffffffffffffda RBX: 00007f1cb7175fa0 RCX: 00007f1cb6f85d29 [ 461.577172][T14164] RDX: 0000000000000010 RSI: 00000000c1205531 RDI: 0000000000000003 [ 461.585191][T14164] RBP: 00007f1cb7da0090 R08: 0000000000000000 R09: 0000000000000000 [ 461.593201][T14164] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 461.601210][T14164] R13: 0000000000000000 R14: 00007f1cb7175fa0 R15: 00007ffdcdeed078 [ 461.609241][T14164] [ 461.633778][T14164] ERROR: Out of memory at tomoyo_realpath_from_path. [ 461.875332][T14176] device-mapper: ioctl: Unable to rename non-existent device, to [ 461.906943][T14176] lo: entered allmulticast mode [ 461.979290][T14180] lo: left allmulticast mode [ 462.793635][T14183] ptrace attach of "./syz-executor exec"[13180] was attempted by "./syz-executor exec"[14183] [ 465.165499][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 465.196442][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 465.211690][ T54] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 465.241564][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 465.249388][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 465.270606][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 465.506409][T14241] nbd11: detected capacity change from 0 to 68719476736 [ 465.548651][ T9302] block nbd11: Send control failed (result -22) [ 465.564832][ T9302] block nbd11: Request send failed, requeueing [ 465.571478][T10669] block nbd11: Dead connection, failed to find a fallback [ 465.571529][ T54] block nbd11: Receive control failed (result -32) [ 465.578669][T10669] block nbd11: shutting down sockets [ 465.578691][T10669] blk_print_req_error: 24 callbacks suppressed [ 465.578704][T10669] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 465.606295][T10669] buffer_io_error: 23 callbacks suppressed [ 465.606312][T10669] Buffer I/O error on dev nbd11, logical block 0, async page read [ 465.620225][ T9302] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 465.630240][ T9302] Buffer I/O error on dev nbd11, logical block 0, async page read [ 465.638801][ T9302] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 465.648350][ T9302] Buffer I/O error on dev nbd11, logical block 0, async page read [ 465.656902][ T9302] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 465.666499][ T9302] Buffer I/O error on dev nbd11, logical block 0, async page read [ 465.674511][ T9302] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 465.683964][ T9302] Buffer I/O error on dev nbd11, logical block 0, async page read [ 465.692059][ T9302] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 465.701279][ T9302] Buffer I/O error on dev nbd11, logical block 0, async page read [ 465.709361][ T9302] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 465.718619][ T9302] Buffer I/O error on dev nbd11, logical block 0, async page read [ 465.727373][ T9302] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 465.737307][ T9302] Buffer I/O error on dev nbd11, logical block 0, async page read [ 465.745770][ T9302] ldm_validate_partition_table(): Disk read failed. [ 465.752852][ T9302] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 465.762093][ T9302] Buffer I/O error on dev nbd11, logical block 0, async page read [ 465.770158][ T9302] I/O error, dev nbd11, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 465.779656][ T9302] Buffer I/O error on dev nbd11, logical block 0, async page read [ 465.787901][ T9302] Dev nbd11: unable to read RDB block 0 [ 465.793969][ T9302] nbd11: unable to read partition table [ 465.832006][ T9302] ldm_validate_partition_table(): Disk read failed. [ 465.839274][ T9302] Dev nbd11: unable to read RDB block 0 [ 465.845385][ T9302] nbd11: unable to read partition table [ 465.848409][T14238] chnl_net:caif_netlink_parms(): no params data found [ 465.877695][ T9302] ldm_validate_partition_table(): Disk read failed. [ 465.884983][ T9302] Dev nbd11: unable to read RDB block 0 [ 465.891165][ T9302] nbd11: unable to read partition table [ 465.920858][ T9302] ldm_validate_partition_table(): Disk read failed. [ 465.928291][ T9302] Dev nbd11: unable to read RDB block 0 [ 465.935390][ T9302] nbd11: unable to read partition table [ 466.332914][T14238] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.342179][T14238] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.353959][T14238] bridge_slave_0: entered allmulticast mode [ 466.362211][T14238] bridge_slave_0: entered promiscuous mode [ 466.370629][T14238] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.378870][T14238] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.388912][T14238] bridge_slave_1: entered allmulticast mode [ 466.400063][T14238] bridge_slave_1: entered promiscuous mode [ 466.732468][T14238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.760766][T14238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.913106][T14238] team0: Port device team_slave_0 added [ 466.937615][T14238] team0: Port device team_slave_1 added [ 466.997449][T14238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.004475][T14238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.095137][T14238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.123306][T14238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.151376][T14238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.206038][T14238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.326399][T14238] hsr_slave_0: entered promiscuous mode [ 467.335639][T14238] hsr_slave_1: entered promiscuous mode [ 467.343009][ T54] Bluetooth: hci0: command tx timeout [ 467.350869][T14238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.390222][T14238] Cannot create hsr debugfs directory [ 467.427980][T14286] device-mapper: ioctl: Unable to rename non-existent device, to [ 467.817113][T14238] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.901715][T14238] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.103998][T14238] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.262035][T14238] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 468.423971][T14238] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 468.434664][T14238] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 468.456288][T14238] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 468.480371][T14238] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 468.580511][T14238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.658055][T14238] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.682011][ T6782] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.689225][ T6782] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.752159][T14132] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.759350][T14132] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.127880][T14238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 469.170207][T14238] veth0_vlan: entered promiscuous mode [ 469.194480][T14238] veth1_vlan: entered promiscuous mode [ 469.221410][T14238] veth0_macvtap: entered promiscuous mode [ 469.233935][T14238] veth1_macvtap: entered promiscuous mode [ 469.259416][T14238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.273885][T14238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.299988][T14238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.312703][T14238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.323393][T14238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.334073][T14238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.345040][T14238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.356003][T14238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.366174][T14238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.376853][T14238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.386767][T14238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 469.397416][T14238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.408500][T14238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 469.417228][ T54] Bluetooth: hci0: command tx timeout [ 469.430564][T14238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.441518][T14238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.452040][T14238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.463117][T14238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.473133][T14238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.484669][T14238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.503262][T14238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.513792][T14238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.524065][T14238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.534562][T14238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.545723][T14238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 469.561453][T14238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 469.585998][T14238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 469.610843][T14238] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.619753][T14238] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.629418][T14238] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.638534][T14238] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 469.748726][T10252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.773303][T10252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.829494][T14132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 469.834011][T14333] device-mapper: ioctl: Unable to rename non-existent device, to [ 469.851176][T14132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 469.875398][T14333] lo: entered allmulticast mode [ 469.967582][T14337] lo: left allmulticast mode [ 470.014515][T14339] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2422'. [ 470.036309][T14339] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 470.043474][T14339] mac80211_hwsim hwsim30 wlan0: entered allmulticast mode [ 470.301549][T14348] snd_aloop snd_aloop.0: control 1:6:-1073741827:^ [ 470.301549][T14348] :0 is already present [ 470.467928][T14346] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2452'. [ 471.495338][ T54] Bluetooth: hci0: command tx timeout [ 472.828607][T14391] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2468'. [ 473.258961][T14402] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2472'. [ 473.574962][ T54] Bluetooth: hci0: command tx timeout [ 479.072550][T14539] FAULT_INJECTION: forcing a failure. [ 479.072550][T14539] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 479.108835][T14539] CPU: 0 UID: 0 PID: 14539 Comm: syz.4.2513 Not tainted 6.13.0-rc4-syzkaller #0 [ 479.117949][T14539] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 479.128060][T14539] Call Trace: [ 479.131369][T14539] [ 479.134351][T14539] dump_stack_lvl+0x16c/0x1f0 [ 479.139093][T14539] should_fail_ex+0x497/0x5b0 [ 479.143822][T14539] _copy_to_user+0x32/0xd0 [ 479.148294][T14539] simple_read_from_buffer+0xd0/0x160 [ 479.153715][T14539] proc_fail_nth_read+0x198/0x270 [ 479.158793][T14539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 479.164395][T14539] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 479.170000][T14539] vfs_read+0x1df/0xbe0 [ 479.174207][T14539] ? __fget_files+0x1fc/0x3a0 [ 479.178928][T14539] ? __pfx___mutex_lock+0x10/0x10 [ 479.184000][T14539] ? __pfx_vfs_read+0x10/0x10 [ 479.188742][T14539] ? __fget_files+0x206/0x3a0 [ 479.193480][T14539] ksys_read+0x12b/0x250 [ 479.197764][T14539] ? __pfx_ksys_read+0x10/0x10 [ 479.202584][T14539] do_syscall_64+0xcd/0x250 [ 479.207174][T14539] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 479.213124][T14539] RIP: 0033:0x7ff90d58473c [ 479.217584][T14539] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 479.237232][T14539] RSP: 002b:00007ff90e386030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 479.245664][T14539] RAX: ffffffffffffffda RBX: 00007ff90d776080 RCX: 00007ff90d58473c [ 479.253645][T14539] RDX: 000000000000000f RSI: 00007ff90e3860a0 RDI: 0000000000000004 [ 479.261628][T14539] RBP: 00007ff90e386090 R08: 0000000000000000 R09: 0000000000000000 [ 479.269618][T14539] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 479.277602][T14539] R13: 0000000000000000 R14: 00007ff90d776080 R15: 00007fff57912568 [ 479.285612][T14539] [ 479.288774][ C0] vkms_vblank_simulate: vblank timer overrun [ 479.378724][T14541] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2515'. [ 481.701313][T14585] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 481.701313][T14585] M' is too long [ 481.720608][T14585] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 481.720608][T14585] W ' is too long [ 482.217173][T14591] device-mapper: ioctl: Unable to rename non-existent device, to [ 482.279501][T14591] lo: entered allmulticast mode [ 482.342076][T14596] lo: left allmulticast mode [ 482.689951][T14602] netlink: 330 bytes leftover after parsing attributes in process `syz.4.2535'. [ 484.795150][T14643] netlink: 'syz.3.2547': attribute type 6 has an invalid length. [ 484.803469][T14643] netlink: 306 bytes leftover after parsing attributes in process `syz.3.2547'. [ 485.448470][T14673] snd_aloop snd_aloop.0: control 1:6:-1073741827:^ [ 485.448470][T14673] :0 is already present [ 486.873724][T14711] FAULT_INJECTION: forcing a failure. [ 486.873724][T14711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 486.915054][T14711] CPU: 0 UID: 0 PID: 14711 Comm: syz.4.2565 Not tainted 6.13.0-rc4-syzkaller #0 [ 486.924168][T14711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 486.934256][T14711] Call Trace: [ 486.937539][T14711] [ 486.940481][T14711] dump_stack_lvl+0x16c/0x1f0 [ 486.945177][T14711] should_fail_ex+0x497/0x5b0 [ 486.950135][T14711] _copy_to_user+0x32/0xd0 [ 486.954573][T14711] simple_read_from_buffer+0xd0/0x160 [ 486.959955][T14711] proc_fail_nth_read+0x198/0x270 [ 486.964999][T14711] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 486.970617][T14711] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 486.976189][T14711] vfs_read+0x1df/0xbe0 [ 486.980471][T14711] ? __fget_files+0x1fc/0x3a0 [ 486.985219][T14711] ? __pfx___mutex_lock+0x10/0x10 [ 486.990444][T14711] ? __pfx_vfs_read+0x10/0x10 [ 486.995143][T14711] ? __fget_files+0x206/0x3a0 [ 486.999840][T14711] ksys_read+0x12b/0x250 [ 487.004092][T14711] ? __pfx_ksys_read+0x10/0x10 [ 487.008873][T14711] do_syscall_64+0xcd/0x250 [ 487.013390][T14711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 487.019302][T14711] RIP: 0033:0x7ff90d58473c [ 487.023730][T14711] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 487.043353][T14711] RSP: 002b:00007ff90e365030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 487.051871][T14711] RAX: ffffffffffffffda RBX: 00007ff90d776160 RCX: 00007ff90d58473c [ 487.059850][T14711] RDX: 000000000000000f RSI: 00007ff90e3650a0 RDI: 0000000000000005 [ 487.067829][T14711] RBP: 00007ff90e365090 R08: 0000000000000000 R09: 0000000000000000 [ 487.075808][T14711] R10: 000000000000000a R11: 0000000000000246 R12: 0000000000000001 [ 487.083788][T14711] R13: 0000000000000001 R14: 00007ff90d776160 R15: 00007fff57912568 [ 487.091781][T14711] [ 487.126631][T14707] device-mapper: ioctl: Unable to rename non-existent device, to [ 487.267293][T14707] lo: entered allmulticast mode [ 487.348228][T14707] lo: left allmulticast mode [ 487.446872][T14723] device-mapper: ioctl: Unable to rename non-existent device, to [ 487.855409][T14730] device-mapper: ioctl: Unable to rename non-existent device, to [ 490.287141][T14789] FAULT_INJECTION: forcing a failure. [ 490.287141][T14789] name failslab, interval 1, probability 0, space 0, times 0 [ 490.342996][T14789] CPU: 0 UID: 0 PID: 14789 Comm: syz.1.2589 Not tainted 6.13.0-rc4-syzkaller #0 [ 490.352083][T14789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 490.362175][T14789] Call Trace: [ 490.365486][T14789] [ 490.368450][T14789] dump_stack_lvl+0x16c/0x1f0 [ 490.373170][T14789] should_fail_ex+0x497/0x5b0 [ 490.377887][T14789] ? fs_reclaim_acquire+0xae/0x150 [ 490.383039][T14789] should_failslab+0xc2/0x120 [ 490.387764][T14789] __kmalloc_node_noprof+0xd1/0x520 [ 490.390626][T14791] device-mapper: ioctl: Unable to rename non-existent device, to [ 490.392988][T14789] ? file_tty_write.constprop.0+0x281/0x9a0 [ 490.406950][T14789] ? __kvmalloc_node_noprof+0xad/0x1a0 [ 490.412462][T14789] __kvmalloc_node_noprof+0xad/0x1a0 [ 490.417788][T14789] file_tty_write.constprop.0+0x6dd/0x9a0 [ 490.423548][T14789] ? redirected_tty_write+0x1f/0x140 [ 490.428879][T14789] redirected_tty_write+0xcc/0x140 [ 490.434032][T14789] vfs_write+0x5ae/0x1150 [ 490.438397][T14789] ? __pfx_redirected_tty_write+0x10/0x10 [ 490.444168][T14789] ? __pfx_vfs_write+0x10/0x10 [ 490.448970][T14789] ? __fget_files+0x40/0x3a0 [ 490.453614][T14789] ksys_write+0x12b/0x250 [ 490.457977][T14789] ? __pfx_ksys_write+0x10/0x10 [ 490.462873][T14789] do_syscall_64+0xcd/0x250 [ 490.467418][T14789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.473341][T14789] RIP: 0033:0x7f1cb6f85d29 [ 490.477814][T14789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.497446][T14789] RSP: 002b:00007f1cb7da0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 490.505888][T14789] RAX: ffffffffffffffda RBX: 00007f1cb7175fa0 RCX: 00007f1cb6f85d29 [ 490.513880][T14789] RDX: 000000000000001a RSI: 0000000020000840 RDI: 0000000000000003 [ 490.521860][T14789] RBP: 00007f1cb7da0090 R08: 0000000000000000 R09: 0000000000000000 [ 490.529921][T14789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.537897][T14789] R13: 0000000000000000 R14: 00007f1cb7175fa0 R15: 00007ffdcdeed078 [ 490.545887][T14789] [ 490.792139][T14800] snd_aloop snd_aloop.0: control 1:6:-1073741827:^ [ 490.792139][T14800] :0 is already present [ 491.384147][T14816] device-mapper: ioctl: Unable to rename non-existent device, to [ 492.432920][T14834] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2606'. [ 492.530973][T14834] veth1_macvtap: left promiscuous mode [ 492.536615][T14834] macsec0: entered promiscuous mode [ 492.703092][T14844] scsi_strcpy_devinfo: vendor string '/&c~n] | [ 492.703092][T14844] M' is too long [ 492.762075][T14844] scsi_strcpy_devinfo: model string 'Dd5 K2b [ 492.762075][T14844] W ' is too long [ 492.779713][T14850] device-mapper: ioctl: Unable to rename non-existent device, to [ 493.282392][T14864] binder: 14863:14864 ioctl c00c6211 9 returned -14 [ 493.349223][T14861] device-mapper: ioctl: Unable to rename non-existent device, to [ 493.437066][T14861] lo: entered allmulticast mode [ 493.570921][T14870] lo: left allmulticast mode [ 494.072069][T14878] device-mapper: ioctl: Unable to rename non-existent device, to [ 494.626412][T14888] Process accounting resumed [ 494.717350][T14892] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN PTI [ 494.729993][T14892] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 494.738420][T14892] CPU: 1 UID: 0 PID: 14892 Comm: GC for TOMOYO Not tainted 6.13.0-rc4-syzkaller #0 [ 494.747705][T14892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 494.757758][T14892] RIP: 0010:tomoyo_gc_thread+0x1ab/0x1390 [ 494.763484][T14892] Code: 4b 54 47 fd c6 45 18 ff 4c 89 ee bf 09 00 00 00 e8 8a f1 ff ff e8 35 54 47 fd 48 89 d8 48 89 de 49 89 dd 48 c1 e8 03 83 e6 07 <42> 0f b6 0c 20 48 8d 43 07 48 89 c2 48 c1 ea 03 42 0f b6 14 22 40 [ 494.783091][T14892] RSP: 0018:ffffc90002ea7e78 EFLAGS: 00010246 [ 494.789163][T14892] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8451fafb [ 494.797136][T14892] RDX: ffff88802ccb5a00 RSI: 0000000000000000 RDI: 0000000000000001 [ 494.805111][T14892] RBP: ffff888026b46c00 R08: 0000000000000001 R09: 0000000000000000 [ 494.813091][T14892] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 494.821154][T14892] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888034894a80 [ 494.829123][T14892] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 494.838064][T14892] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.844654][T14892] CR2: 00007ffdcdeecfc0 CR3: 0000000024b16000 CR4: 00000000003526f0 [ 494.852629][T14892] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 494.860598][T14892] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 494.868568][T14892] Call Trace: [ 494.871841][T14892] [ 494.874766][T14892] ? die_addr+0x3b/0xa0 [ 494.878923][T14892] ? exc_general_protection+0x155/0x230 [ 494.884477][T14892] ? asm_exc_general_protection+0x26/0x30 [ 494.890204][T14892] ? tomoyo_gc_thread+0x17b/0x1390 [ 494.895321][T14892] ? tomoyo_gc_thread+0x1ab/0x1390 [ 494.900430][T14892] ? tomoyo_gc_thread+0x19b/0x1390 [ 494.905556][T14892] ? __kthread_parkme+0x148/0x220 [ 494.910584][T14892] ? __pfx_tomoyo_gc_thread+0x10/0x10 [ 494.915952][T14892] kthread+0x2c1/0x3a0 [ 494.920024][T14892] ? _raw_spin_unlock_irq+0x23/0x50 [ 494.925226][T14892] ? __pfx_kthread+0x10/0x10 [ 494.929819][T14892] ret_from_fork+0x45/0x80 [ 494.934253][T14892] ? __pfx_kthread+0x10/0x10 [ 494.938845][T14892] ret_from_fork_asm+0x1a/0x30 [ 494.943623][T14892] [ 494.946636][T14892] Modules linked in: [ 494.951361][T14892] ---[ end trace 0000000000000000 ]--- [ 495.002493][T14892] RIP: 0010:tomoyo_gc_thread+0x1ab/0x1390 [ 495.021152][T14892] Code: 4b 54 47 fd c6 45 18 ff 4c 89 ee bf 09 00 00 00 e8 8a f1 ff ff e8 35 54 47 fd 48 89 d8 48 89 de 49 89 dd 48 c1 e8 03 83 e6 07 <42> 0f b6 0c 20 48 8d 43 07 48 89 c2 48 c1 ea 03 42 0f b6 14 22 40 [ 495.079529][T14892] RSP: 0018:ffffc90002ea7e78 EFLAGS: 00010246 [ 495.088919][T14892] RAX: 0000000000000000 RBX: 0000000000000000 RCX: ffffffff8451fafb [ 495.097016][T14892] RDX: ffff88802ccb5a00 RSI: 0000000000000000 RDI: 0000000000000001 [ 495.108017][T14892] RBP: ffff888026b46c00 R08: 0000000000000001 R09: 0000000000000000 [ 495.142027][T14892] R10: 0000000000000000 R11: 0000000000000001 R12: dffffc0000000000 [ 495.150152][T14892] R13: 0000000000000000 R14: 0000000000000000 R15: ffff888034894a80 [ 495.173211][T14892] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 495.200883][T14892] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 495.207568][T14892] CR2: 00007f1cb7d7fd58 CR3: 00000000273a8000 CR4: 00000000003526f0 [ 495.215633][T14892] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 495.237084][T14892] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 495.250772][T14892] Kernel panic - not syncing: Fatal exception [ 495.257198][T14892] Kernel Offset: disabled [ 495.261521][T14892] Rebooting in 86400 seconds..